A fire risk assessment is the formal process used in the UK to identify fire hazards, decide who could be harmed, evaluate and reduce the risks, and record findings. It is a legal requirement under the Regulatory Reform (Fire Safety) Order 2005 for the “Responsible Person” in almost every UK non-domestic premises. The standard methodology is the 5-step PAS 79 approach. The assessment must be reviewed regularly and after any change to the premises, occupancy or use. Following the Building Safety Act 2022 and post-Grenfell reforms, fire risk assessments for higher-risk buildings must be carried out and recorded by a competent person, with enforcement now significantly tougher than before 2017. Failing to carry out a suitable and sufficient fire risk assessment can result in unlimited fines and imprisonment.
This guide explains the legal framework for fire risk assessment in the UK, who must carry one out, the 5-step methodology, what counts as a competent assessor, what the assessment must cover, how often to review, and what’s changed since the Building Safety Act 2022. It is written for UK employers, landlords, building owners, facilities managers, and anyone who has been designated the “Responsible Person” for a premises.
Is a fire risk assessment legally required in the UK?
Yes. Under the Regulatory Reform (Fire Safety) Order 2005 (commonly called the “Fire Safety Order” or “RRFSO”), the Responsible Person for almost every non-domestic premises in England and Wales must carry out a fire risk assessment. Scotland has equivalent duties under the Fire (Scotland) Act 2005 and the Fire Safety (Scotland) Regulations 2006. Northern Ireland is covered by the Fire and Rescue Services (Northern Ireland) Order 2006.
The Fire Safety Order applies to:
- All workplaces and commercial premises
- Shops, restaurants, hotels, leisure venues
- Schools, colleges and universities
- Hospitals, care homes and other health and social care premises
- Common parts of blocks of flats and HMOs (extended by the Fire Safety Act 2021)
- Charity and community buildings
- Construction sites (the Construction Phase Plan must address fire risk)
The only major exclusion is single private dwellings.
Who is the “Responsible Person”?
The Fire Safety Order assigns duties to a designated Responsible Person. In most cases this is:
- The employer: for any workplace under their control
- The owner: where the premises is not a workplace (e.g., a vacant shop unit)
- The occupier: where they have control of the premises
- Any other person who has control of the premises (e.g., a managing agent, leaseholder)
Where multiple parties have some degree of control, common in shopping centres, multi-tenant offices, residential blocks, each is a Responsible Person for the parts under their control. They must cooperate and coordinate fire safety arrangements.
The Responsible Person carries personal legal liability for fire safety compliance. Following the Building Safety Act 2022 and the post-Grenfell reforms, this responsibility has been clarified and strengthened, with the Building Safety Regulator gaining significant new powers over higher-risk residential buildings.
The 5 steps of a fire risk assessment
The standard UK methodology for fire risk assessment is set out in the British Standard PAS 79-1 (commercial) and PAS 79-2 (residential). It follows a five-step structure familiar to anyone who has done a general risk assessment:
Step 1: Identify fire hazards
What could start a fire, and what could fuel it? Three things must be considered:
- Sources of ignition: heating appliances, electrical equipment (especially overloaded sockets, faulty wiring, batteries), cooking equipment, smoking materials, naked flames, hot work (welding, grinding), arson.
- Sources of fuel: stocks of paper or packaging, flammable liquids and gases (paint, fuel, LPG), waste accumulation, furniture and furnishings, building materials (especially cladding and insulation).
- Sources of oxygen: usually the air itself, but specifically oxidising agents (oxygen cylinders, certain chemicals) and unprotected airflow paths that can fuel rapid spread.
Step 2: Identify people at risk
Who could be harmed if a fire occurred?
- Employees and contractors
- Visitors and members of the public
- People in adjacent premises (especially in shared buildings)
- Anyone sleeping on the premises (hotels, care homes, hospitals, residential blocks)
- Vulnerable individuals, disabled people, children, the elderly, those with cognitive impairment
- Lone workers
- People unfamiliar with the building (visitors, agency staff, members of the public)
Step 3: Evaluate, remove, reduce and protect
For each hazard and group at risk, evaluate the level of fire risk and apply controls:
- Remove the hazard where possible (eliminate unnecessary combustibles; replace flammable substances with safer alternatives).
- Reduce the risk through good housekeeping, control of hot work, electrical maintenance, smoking restrictions, secure storage of flammable materials.
- Protect people through fire detection systems, fire alarms, emergency lighting, suitable escape routes, fire compartmentation, fire-rated doors, signage, sprinklers where required, fire extinguishers, evacuation plans, and trained fire wardens.
Step 4: Record, plan and train
The findings must be recorded in writing for any premises where five or more people are employed, where a license is in force, or where there is an alterations notice. Following the Fire Safety Act 2021 and Building Safety Act 2022, recording requirements have been strengthened, competence of the assessor and quality of the documentation are now scrutinised more closely.
The record should include the methodology used, the hazards identified, the people at risk, the existing fire safety measures, the residual risk evaluation, any actions required, the emergency plan, and the training arrangements.
Step 5: Review the assessment
Fire risk assessments must be reviewed:
- When there is a significant change to the premises, occupancy, layout, processes or use
- After any fire or near-miss incident
- When new information about fire risk emerges (manufacturer alert, regulatory change, fire service guidance)
- At planned intervals, typically annually for moderate-to-high-risk premises, every 1-3 years for lower-risk premises depending on building type
Who can carry out a fire risk assessment?
The Fire Safety Order requires the assessment to be carried out by a “competent person”, someone with sufficient training and experience, knowledge and other qualities to be capable of doing the task. The required level of competence depends on the complexity of the premises and the risk profile.
For low-risk premises (a small office, a simple shop), the Responsible Person may be competent to carry out the assessment themselves, especially if they have completed appropriate training such as the NEBOSH National Certificate in Fire Safety.
For moderate-risk premises (a busy hotel, a multi-tenant office, a small care home), the Responsible Person typically engages a competent external fire risk assessor. Many fire risk assessors are members of professional bodies such as the Institution of Fire Engineers (IFE) or the Institute of Fire Safety Managers (IFSM).
For higher-risk premises (large hospitals, residential blocks above 11m, complex industrial sites), assessment must be carried out by a third-party-certified fire risk assessor. Certification schemes include:
- BAFE SP205, for fire risk assessment of premises with sleeping risk
- IFE Register of Fire Risk Assessors
- IFSM Register of Fire Risk Assessors
Following the Building Safety Act 2022, the new role of Principal Designer / Principal Contractor for Building Safety in higher-risk residential buildings carries specific competence requirements, with additional duties on building owners to verify the competence of those they engage.
What does a fire risk assessment cover?
A complete assessment under PAS 79 covers, at a minimum:
- Building description, use and occupancy
- Means of escape, routes, distances, signage, lighting
- Fire detection and alarm systems
- Means of fire-fighting, extinguishers, hose reels, sprinklers
- Emergency lighting
- Fire compartmentation, fire-rated walls, doors, ceilings
- External wall systems (especially since the Building Safety Act)
- Electrical safety
- Gas safety
- Hot work controls
- Smoking controls
- Storage of flammable materials
- Waste management
- Arson prevention measures
- Vulnerable occupants and PEEPs (Personal Emergency Evacuation Plans)
- Maintenance and testing of fire safety systems
- Training and drills
- Emergency plan and assembly arrangements
- Liaison with the Fire and Rescue Service
Fire risk assessment for offices, retail and other common premises
Office fire risk assessment
Typical hazards: electrical equipment overload, kitchen and tea-point cooking, accumulated paper and packaging, hot work during fit-outs and refurbishments, arson. Typical controls: detection and alarm system, clear escape routes with adequate signage and emergency lighting, fire doors and compartmentation, extinguishers at appropriate intervals, designated fire wardens, regular drills, annual fire risk assessment review.
Retail fire risk assessment
Typical hazards: high stock density, electrical equipment, customer behaviour (children, large crowds at peak times), late-night use, deliveries and waste accumulation. Controls: detection and alarm system tuned to public-access premises, clear and unobstructed escape routes (a common breach in retail), trained staff including back-of-house and on-shop-floor wardens, good housekeeping protocols, careful waste management.
Hotel and care home fire risk assessment
Highest-risk category because occupants are sleeping. Typical assessment: detection in every room, complete alarm system with link to staff or fire service, fire compartmentation between rooms and floors, fire-rated doors with self-closers, sprinklers (especially in larger or higher buildings), Personal Emergency Evacuation Plans for residents with mobility difficulties, frequent drills, third-party-certified assessor required.
Residential block fire risk assessment (post-Grenfell)
Following the Fire Safety Act 2021 and Building Safety Act 2022, fire risk assessments for residential blocks now must address external wall systems, cladding, balconies, fire compartmentation between flats, and arrangements for evacuating residents (including the “stay put” or “simultaneous evacuation” strategy in use). For buildings above 11m (Wales) or 18m (England, primarily), additional duties apply under the Building Safety Act including the Principal Accountable Person regime, the Building Safety Case and ongoing safety case review.
How often should a fire risk assessment be reviewed?
The Fire Safety Order requires review when there is reason to suspect the assessment is no longer valid, or when there has been a significant change. In practice:
- Premises with sleeping risk (hotels, care homes, hospitals): annual review
- Multi-occupancy buildings and residential blocks: annual review (statutory expectation post-Grenfell)
- Higher-risk industrial or commercial premises: annual review
- Low-risk premises: review every 1-3 years and on any significant change
Any of the following triggers an immediate review:
- Building works, refurbishment, layout changes, change of use
- New equipment or processes that introduce ignition or fuel sources
- Change in occupancy (more people, different demographic, sleeping accommodation added)
- A fire or near-miss
- An enforcement notice from the Fire and Rescue Service
- A new manufacturer safety alert or regulatory change
What’s changed since the Building Safety Act 2022 and Grenfell?
The Grenfell Tower fire (2017) prompted the most significant reform of UK fire safety law in a generation:
- Fire Safety Act 2021: clarified that the Fire Safety Order applies to the external walls and individual flat entrance doors of residential blocks, closing a significant gap.
- Fire Safety (England) Regulations 2022: new duties on Responsible Persons for residential blocks, including providing fire safety information to residents and the Fire and Rescue Service.
- Building Safety Act 2022: established the Building Safety Regulator (within HSE), introduced the higher-risk building regime (above 18m or 7 storeys in England), and created the Principal Accountable Person role.
- Tougher enforcement: penalties increased significantly. Failing to carry out a suitable and sufficient fire risk assessment can result in unlimited fines and up to two years’ imprisonment.
- Competence requirements: far more rigorous expectations of fire risk assessor competence, especially in higher-risk buildings. Third-party certification (BAFE SP205, IFE, IFSM) is now effectively required for sleeping-risk and higher-risk residential premises.
Fire risk assessment training and qualifications
The UK pathway to fire risk assessment competence typically combines formal qualifications with practical experience:
- For general competence: the NEBOSH National Certificate in Fire Safety is the recognised Level 3 RQF qualification. It covers the legal framework, the assessment methodology, and the practical elements required for competent assessment of most workplace premises.
- For specialist competence (sleeping risk, higher-risk residential, complex industrial): additional sector-specific qualifications and third-party certification through BAFE SP205, IFE or IFSM are typically required.
- For Responsible Persons and Fire Wardens: short awareness-level training covers the basics. KeyOstas delivers fire warden training and Fire Safety Order awareness courses on request.
Fire Risk Assessment, Frequently Asked Questions
What is a fire risk assessment?
A fire risk assessment is the formal process used in the UK to identify fire hazards in a premises, decide who could be harmed if a fire occurred, evaluate the level of risk, put control measures in place to reduce the risk, record the findings, and review the assessment regularly. It is required under the Regulatory Reform (Fire Safety) Order 2005 for almost all UK non-domestic premises.
Who is responsible for fire safety in the workplace?
The Fire Safety Order 2005 designates a “Responsible Person” who carries legal duty for fire safety. In most workplaces this is the employer; in other premises it can be the owner, occupier, or anyone with control of the premises. Where multiple parties have control, each is Responsible Person for the parts under their control and must cooperate.
What are the 5 steps of a fire risk assessment?
Step 1: identify fire hazards (ignition sources, fuel sources, oxygen sources). Step 2: identify people at risk. Step 3: evaluate, remove, reduce and protect. Step 4: record findings, plan emergency arrangements and train staff. Step 5: review the assessment regularly and after any significant change.
Is a fire risk assessment a legal requirement in the UK?
Yes. Under the Regulatory Reform (Fire Safety) Order 2005 for England and Wales, the Fire (Scotland) Act 2005 for Scotland, and equivalent Northern Ireland regulations, the Responsible Person for almost every non-domestic premises must carry out a fire risk assessment. Failing to do so can result in unlimited fines and up to two years’ imprisonment.
Who can carry out a fire risk assessment?
The Fire Safety Order requires a “competent person”, someone with sufficient training, experience and knowledge for the complexity of the premises. For low-risk premises the Responsible Person may be competent themselves. For higher-risk premises (especially with sleeping risk) third-party-certified assessors (BAFE SP205, IFE or IFSM) are typically required.
How often should a fire risk assessment be reviewed?
Annually for premises with sleeping risk, multi-occupancy buildings and higher-risk industrial premises. Every 1-3 years for lower-risk premises. Immediately upon any significant change to the premises, occupancy, processes, or after any fire or near-miss.
Do I need a fire risk assessment for my office?
Yes. Almost every UK non-domestic workplace, including offices, requires a fire risk assessment under the Fire Safety Order 2005 regardless of size. For a typical small office the assessment may be carried out by a trained Responsible Person; for larger or shared offices an external competent assessor is typically engaged.
What qualifications do you need to be a fire risk assessor?
The NEBOSH National Certificate in Fire Safety is the recognised UK Level 3 qualification covering the legal framework and assessment methodology. For sleeping-risk and higher-risk premises, additional third-party certification (BAFE SP205, IFE or IFSM) is typically expected. Practical experience under supervision is a critical part of competence development.
What is PAS 79 in fire risk assessment?
PAS 79 is the British Standards Institution Publicly Available Specification that sets out the standard methodology for fire risk assessment in the UK. PAS 79-1 covers commercial premises; PAS 79-2 covers residential. It is the methodology UK insurers, regulators and competent assessors expect to see used.
How much does a fire risk assessment cost in the UK?
Costs vary widely depending on the size and complexity of the premises. A small office assessment may cost £200-£500. A medium-sized commercial premises £500-£1,500. Hotels, care homes and larger premises £1,500-£5,000+. Higher-risk residential blocks above 11m typically £2,500-£10,000+ depending on the building.