Fire Risk Assessment Checklist UK: A Practitioner Guide

UK fire and rescue services completed 51,020 fire safety audits across non-domestic premises in the year ending March 2025. Of those audits, 42% returned unsatisfactory results, and nearly 3,000 premises received formal enforcement notices.

These figures, published by the Ministry of Housing, Communities and Local Government, represent the highest unsatisfactory audit rate since 2011 and a 46% increase in formal notices over eight years. The message from enforcement data is unambiguous: fire safety compliance in UK commercial premises is deteriorating, not improving.

A fire risk assessment is not optional. Under the Regulatory Reform (Fire Safety) Order 2005, every responsible person controlling non-domestic premises in England and Wales must conduct a suitable and sufficient fire risk assessment, record significant findings, implement appropriate fire precautions, and review the assessment regularly.

The Fire Safety Act 2021 and Fire Safety (England) Regulations 2022 expanded these duties to include external walls, cladding, flat entrance doors, and building structure. Penalties for non-compliance include unlimited fines and imprisonment for up to two years.

This practitioner guide delivers a comprehensive fire risk assessment checklist designed for enterprise risk managers, facilities directors, and compliance officers who need to go beyond the basic GOV.UK 5-step template.

The checklist maps each assessment phase to ISO 31000 risk management principles, integrates with British Standards (BS 9999, BS 5839), and produces outputs that feed directly into your enterprise risk management framework, business continuity plan, and insurance renewal documentation.

UK Fire Safety Legal Framework: What the Law Requires

Before building your checklist, you need a clear picture of the legislative requirements that define what a compliant fire risk assessment must contain.

The UK fire safety legal framework has evolved significantly since the Grenfell Tower tragedy, and the current requirements extend well beyond the original 2005 Order.

Key Legislation and Standards

Scotland operates under the Fire (Scotland) Act 2005 and Fire Safety (Scotland) Regulations 2006, while Northern Ireland follows the Fire Safety Regulations (Northern Ireland) 2010.

Organizations with premises across multiple UK jurisdictions must maintain separate compliance risk assessment programs reflecting each jurisdiction’s requirements.

The Fire Risk Assessment Process: 5 Steps Mapped to ISO 31000

The GOV.UK 5-step fire risk assessment process provides the statutory foundation, but enterprise risk practitioners should recognize that each step maps directly to the ISO 31000 risk management lifecycle. This mapping ensures your fire risk assessment produces outputs that integrate with your broader risk assessment process and meet both regulatory and enterprise governance requirements.

Comprehensive Fire Risk Assessment Checklist

The following checklist goes beyond the basic GOV.UK template to provide the depth of coverage that enterprise risk managers and competent fire risk assessors need.

Each section corresponds to a critical domain within the fire risk assessment, with specific inspection points, evidence requirements, and compliance indicators. Use this alongside your organization’s risk assessment matrix to score each item.

Section A: Fire Hazard Identification

Section B: Fire Protection Measures

Section C: Means of Escape and Evacuation

Fire Risk Profiles by Premises Type

UK Home Office data for 2024/25 reveals significant variation in fire risk across premises types. Enterprise risk managers responsible for multi-site portfolios should use this sector data to calibrate their risk assessment prioritization and audit frequency.

The data below draws from official FIRE0301 and FIRE0602 datasets analyzed by System Building Services.

Total workplace fires fell 29% over the decade from 2015/16 to 2024/25, dropping from 9,347 to 6,665 incidents.

That long-term improvement reflects gains in building standards, fire detection technology, and regulatory compliance.

Still, the 42% unsatisfactory audit rate shows that thousands of premises remain below acceptable standards. Integrating fire risk data into your operational risk management program allows you to track these trends at portfolio level.

Key Risk Indicators for Fire Safety Monitoring

Continuous monitoring between formal fire risk assessment reviews requires a defined set of KRIs with RAG thresholds and escalation rules.

The following indicators are designed for integration into your enterprise KRI dashboard and align with leading and lagging KRI principles. Each KRI targets a specific control objective within the fire safety management system.

These KRIs should be reported alongside your organization’s wider key risk indicators and fed into your risk quantification and board reporting pack.

Red-status KRIs should trigger automatic escalation to the facilities director and risk committee, consistent with your existing risk appetite statement thresholds for health and safety risk.

Fire Risk Governance: Three Lines Model

Fire safety too often sits exclusively within facilities management, disconnected from the enterprise risk and governance structure.

The Three Lines Model provides the accountability framework to ensure fire risk receives appropriate oversight from operational management through to board-level assurance.

This governance structure ensures fire risk is not only managed at the operational level but also monitored, reported, and assured through the same mechanisms used for other material enterprise risks.

The RCSA process should include fire safety control self-assessments at each site, with results aggregated into the enterprise risk view presented to the board risk committee.

Integrating Fire Risk with Business Continuity Planning

A fire does not just threaten life safety. Merseyside Fire and Rescue Service reports that over 90% of businesses that experience a significant fire never reopen.

That statistic makes fire risk a critical input to your business impact analysis and business continuity management program.

The connection between fire risk assessment and BCM is direct: fire scenarios should be stress-tested against your critical business activities, recovery time objectives, and maximum tolerable periods of disruption.

Implementation Roadmap

This roadmap is designed for organizations that need to establish or overhaul their fire risk assessment program.

Each phase builds on the previous one to create a sustainable, audit-ready fire safety management system.

Pitfalls and How to Avoid Them

Looking Ahead: UK Fire Safety Trends for 2025-2027

The UK fire safety landscape will continue to evolve through several significant developments.

The Building Safety Regulator, established under the Building Safety Act 2022, is expanding its oversight of higher-risk buildings and driving a more proactive, risk-based approach to building safety that will raise expectations for fire risk assessment quality and documentation across all regulated premises.

Technology is reshaping fire risk assessment methodology. IoT-enabled fire detection systems now offer remote monitoring, predictive analytics, and real-time reporting that can feed directly into enterprise risk dashboards.

AI-driven fire risk analytics are moving from experimental to operational deployment, enabling continuous fire risk monitoring rather than periodic point-in-time assessments.

Risk managers who integrate these technology capabilities into their fire safety programs will shift from reactive compliance to predictive risk management, a transition that aligns with the broader movement toward operational resilience.

Enforcement will intensify. The 42% unsatisfactory audit rate and rising formal notices signal that fire and rescue services are applying greater scrutiny to fire safety compliance. Organizations should anticipate more frequent audits, shorter compliance deadlines, and higher expectations for documentation quality.

Building a fire safety management system that meets both statutory requirements and enterprise governance standards positions your organization to withstand this increased scrutiny while genuinely protecting the people who occupy your premises.

The post-Grenfell regulatory trajectory points toward whole-building approaches to fire safety, greater transparency through resident and occupant engagement, and stronger accountability for responsible persons.

Enterprise risk practitioners who have already integrated fire risk into their risk management lifecycle and disaster recovery planning will navigate these changes from a position of strength.

Ready to strengthen your fire risk assessment program? Visit riskpublishing.com for risk assessment templates, enterprise risk frameworks, and consulting services to help your organization build audit-ready fire safety management systems.

References

1. GOV.UK — Fire Safety Risk Assessment: 5-Step Checklist — Official MHCLG fire risk assessment checklist for responsible persons

2. GOV.UK — Fire Safety: Guidance for Those with Legal Duties — Comprehensive statutory guidance for responsible persons under the FSO

3. GOV.UK — Fire Prevention and Protection Statistics, England, April 2024 to March 2025 — Official MHCLG fire safety audit and enforcement data

4. Fire Safety Search — UK Fire Safety Audit Data Shows Rising Non-Compliance — Analysis of 42% unsatisfactory audit rate and enforcement trends

5. System Building Services / International Fire and Safety Journal — Workplace Fires: Sector Incident Burden Analysis — Ten-year analysis of Home Office FIRE0301 and FIRE0602 datasets

6. London Fire Brigade — The Regulatory Reform (Fire Safety) Order 2005 — Responsible person duties and fire safety law explained

7. Merseyside Fire & Rescue Service — Fire Safety Law — Enforcement penalties and non-compliance consequences

8. Lancashire Fire and Rescue Service — Enforcing the Fire Safety Order — Enforcement approach and penalty structure

9. BSI — BS 9999:2017 Fire Safety in the Design, Management and Use of Buildings — British Standard code of practice for fire safety design

10. BSI — PAS 79-1:2020 Fire Risk Assessment — Publicly available specification for fire risk assessment methodology

11. National Fire Chiefs Council (NFCC) — Protection Guidance — Fire safety guidance including competent fire risk assessor selection

12. ISO — ISO 31000:2018 Risk Management Guidelines — International standard for risk management process framework

13. Essex County Fire and Rescue Service — Fire Risk Assessments Templates and Guidance — FRA templates and competent assessor guidance

14. Magni Fire — Fire Protection Trends for 2025 — IoT, AI analytics, and emerging fire protection technology trends

Chris Ekai

Chris Ekai is a Risk Management expert with over 10 years of experience in the field. He has a Master’s(MSc) degree in Risk Management from University of Portsmouth and is a CPA and Finance professional. He currently works as a Content Manager at Risk Publishing, writing about Enterprise Risk Management, Business Continuity Management and Project Management.