Some posts here on ARoseTintedWorld may contain affiliate links. This means that if you click a link and buy a product or register, then I may receive a commission at no extra cost to you. I may also use products from the companies mentioned in these posts. Thank you for supporting my blog!
Most UK buildings have a fire risk assessment on file. Far fewer have one that would survive scrutiny if an incident occurred and investigators started asking hard questions.
The legal baseline comes from the Regulatory Reform (Fire Safety) Order 2005, which applies to virtually all non-domestic premises in England and Wales. Under this legislation, the Responsible Person must ensure that a fire risk assessment is not just completed, but “suitable and sufficient.” That distinction matters more than most people realise. According to official government guidance, the assessment must reflect the actual risks present in the building, not simply confirm that a process was followed.
When something goes wrong, the scrutiny rarely focuses on whether a document exists. It focuses on whether the assessment identified the relevant risks, whether appropriate measures were taken in response, and whether the assessment was kept current as the building or its use changed. A fire risk assessment that fails any of those three tests is, in practical terms, no assessment at all.
*This is a collaborative post. For more details, please see my Disclosure Policy.
What Makes an Assessment Defensible
The difference between a paper exercise and a legally credible fire risk assessment comes down to one question. Would it hold up if someone examined it after an incident? Under the Regulatory Reform (Fire Safety) Order 2005, the standard is not completion but suitability and sufficiency. Those two words carry real weight.
A defensible assessment identifies the relevant fire hazards present in the building, records what controls are in place, and demonstrates that the Responsible Person acted on what was found. It also reflects the building as it currently exists, not as it was when the assessment was first produced. Regulators and investigators examining a post-incident assessment will look at all three of those dimensions. And a gap in any one of them can undermine the entire document.
Why So Many UK Assessments Fail Scrutiny
The gap between having a fire risk assessment and having a credible one is wider than most Responsible Persons expect. Two factors account for most of the failures seen under enforcement or post-incident review: the competency of the person who produced the assessment, and whether the evidence it contains actually reflects the specific building.
Competency Matters as Much as the Checklist
A completed fire risk assessment form is not the same as a credible one. The difference almost always comes down to the person who produced it. Under the Regulatory Reform (Fire Safety) Order 2005, the assessment must be carried out by a competent person. Yet the term is not tightly defined in law, which means the gap between what qualifies and what is accepted in practice can be wide.
PAS 79 provides a recognised framework for how assessments should be structured and documented. Plus it sets out what a professionally produced assessment should contain. However, it does not replace judgement. An assessor who follows the structure without genuinely understanding fire hazards, building behaviour, or occupancy risk will produce documentation that looks complete while missing the substance that matters.
Standards and Evidence Have to Match the Building
Generic wording is one of the most consistent weaknesses found when assessments face post-incident review. Phrases that apply to any building, rather than describing what actually exists on site, signal that the assessor did not test their assumptions against the specific premises.
A credible assessment will contain specific observations about fire compartmentation, means of escape, fire doors, and fire detection and alarm systems, because these are the elements most likely to determine outcomes in a real incident. Where compartmentation, evacuation strategy, or systems performance are complex, the Responsible Person may need demonstrable competence beyond an in-house checklist. Organisations that draw on specialist Fire Consultancy services tend to produce assessments with this level of building-specific evidence, where findings are tied directly to what was physically observed rather than assumed.
How Recent Law Changed the Standard
The Grenfell Tower fire did not just prompt grief and public inquiry. It accelerated a fundamental shift in what the law expects from those responsible for building safety. Indeed, two pieces of legislation gave that shift legal force.
>The Fire Safety Act 2021 clarified that the structure, external walls, and flat entrance doors of multi-occupied residential buildings fall within the scope of a fire risk assessment. This closed a long-standing ambiguity that had allowed some Responsible Persons to treat these areas as outside their remit.
>The Building Safety Act 2022 went further, introducing a tiered accountability structure, stronger obligations around evidence and record-keeping, and enhanced oversight for higher-risk buildings. Taken together, these reforms did not simply add paperwork. They raised the evidentiary standard that regulators and investigators may apply when examining whether a fire risk assessment was genuinely suitable and sufficient.
>In practical terms, this means that common areas, structural fire risks, and the quality of passive fire protection measures now carry more weight in any compliance review. It also means Responsible Persons need to be confident that specialist trades working on the building, including the external envelope, are properly scoped and documented, like when engaging Commercial Roofing Contractors In London as part of repair or refurbishment works. An assessment produced before these reforms, or one that does not reflect their expectations around scope and documentation, may satisfy the letter of the original Fire Safety Order while falling short of what current scrutiny demands.
When an Older Assessment Stops Being Enough
A fire risk assessment does not have an automatic expiry date, but that does not mean it remains valid indefinitely. The Responsible Person has a legal obligation to review the assessment whenever a material change occurs that could affect the risks present in the building.
That trigger is change, not the calendar. A review becomes necessary when building layout is altered, when occupancy levels shift, when new processes or materials are introduced, or when the way a space is used changes significantly. Each of these can affect fire hazards, alter the available means of escape, or render existing control measures inadequate.
Some changes carry more immediate consequences than others. New partitioning can compromise compartmentation. A change in tenants may introduce individuals who require additional support when protecting vulnerable people from fire. Refurbishment work may affect fire doors, detection coverage, or suppression systems in ways that the original assessment never anticipated.
>Waiting for an annual review cycle before updating the assessment, when a known change has already occurred, is precisely the kind of gap that tends to attract attention when investigators examine whether the assessment reflected actual conditions at the time of an incident.
What Enforcement Looks Like After a Weak FRA
Holding a fire risk assessment document does not, by itself, demonstrate compliance. When enforcement action follows an incident, investigators examine what the assessment actually identified, what was done about it, and whether the suitable and sufficient standard was genuinely met.
>An enforcement notice can be issued where the assessor missed hazards that were present, where recommended actions were never completed, or where the assessment had not been updated to reflect material changes in the building. These gaps shift the conversation from whether a document existed to whether it reflected reality.
Documentation failures rarely stand alone. They tend to raise broader questions about management oversight, maintenance practices, and whether the Responsible Person was genuinely engaged with fire safety or simply holding a file. A fire risk assessment that does not hold up under that scrutiny offers far less protection than most Responsible Persons assume.
The Real Test Is Whether It Stands Up Later
>The real question for any Responsible Person is not whether a fire risk assessment exists, but whether it would withstand scrutiny if something went wrong. Investigators, enforcement bodies, and courts do not ask whether a document was filed. They ask whether it was suitable and sufficient, whether it reflected the actual conditions of the building, and whether action followed from it.
Judging an assessment by those standards means asking four things: Is it current? Was it produced by someone genuinely competent? Does it contain building-specific evidence? Has its recommended work been completed? The buildings that are genuinely protected against both fire risk and regulatory exposure are those where fire strategy has been developed and maintained by qualified consultants who understand not just what the legislation requires, but what it takes to ensure a building performs as designed when the risk it was built to manage becomes real. A fire risk assessment that cannot meet that standard offers far less protection than most assume.