What Is a Fire Risk Assessment?

A fire risk assessment is a structured evaluation of fire hazards in a premises, who may be at risk, and what measures are needed to prevent fires and protect people. It is a legal requirement under the Regulatory Reform (Fire Safety) Order 2005 for all non-domestic premises in England and Wales.

What are the 5 steps of a fire risk assessment?

The five steps, set out in the government's fire safety guides, are: 1) identify fire hazards — sources of ignition, fuel and oxygen; 2) identify people at risk; 3) evaluate, remove or reduce the risks and protect people from what remains; 4) record the findings, prepare an emergency plan and train staff; and 5) review the assessment regularly and whenever something significant changes. In more detail:

Step 1: Identify Fire Hazards

Look for three elements that could combine to start a fire:

• Sources of ignition — heaters, electrical equipment, naked flames, hot processes, smoking materials
• Sources of fuel — paper, cardboard, textiles, flammable liquids, wood, plastics
• Sources of oxygen — air, oxidising chemicals, oxygen supplies

Step 2: Identify People at Risk

Consider everyone who uses or visits the premises:

• Employees, including lone workers and night shift staff
• Visitors, customers, and contractors
• People with disabilities or mobility issues
• Children and elderly people
• People in sleeping accommodation
• People who may be unfamiliar with the building layout

Step 3: Evaluate, Remove, or Reduce Risks

• Remove or reduce fire hazards where possible
• Ensure adequate fire detection and warning systems
• Ensure adequate escape routes and emergency lighting
• Provide appropriate fire-fighting equipment
• Implement fire safety management procedures

Step 4: Record Findings, Prepare a Plan, and Train

• Record significant findings (mandatory if you employ 5 or more people)
• Prepare an emergency fire action plan
• Inform and train employees
• Cooperate with other occupiers if the building is shared

Step 5: Review and Update Regularly

• Review whenever there are significant changes (layout, occupancy, materials, processes)
• Review after any fire or near-miss
• Review at least annually as good practice

Who is responsible for a fire risk assessment?

The "responsible person" defined by Article 3 of the Regulatory Reform (Fire Safety) Order 2005 must make sure a suitable and sufficient fire risk assessment is carried out and kept up to date. In a workplace that is the employer; elsewhere it is whoever has control of the premises. They may do the assessment themselves or appoint a competent assessor, but the legal duty cannot be delegated. Under the Fire Safety Order, the responsible person is:

• The employer (for workplaces)
• The owner or occupier (for premises that are not a workplace)
• The landlord or managing agent (for common areas of residential buildings)
• Anyone with control over the premises or fire safety systems

The responsible person can carry out the assessment themselves or appoint a competent person. For complex premises, it is advisable to use a professional fire risk assessor.

What Premises Need a Fire Risk Assessment?

All non-domestic premises in England and Wales require a fire risk assessment, including:

• Offices, shops, and retail premises
• Factories, warehouses, and workshops
• Pubs, restaurants, and hotels
• Schools, colleges, and universities
• Hospitals and care homes
• Churches and community buildings
• Common areas of residential buildings (flats, HMOs)

Penalties for Non-Compliance

Failing to carry out an adequate fire risk assessment, or failing to act on its findings, is a criminal offence. Penalties include:

• Unlimited fines
• Imprisonment — up to 2 years for serious breaches
• Enforcement notices — requiring specific improvements by a deadline
• Prohibition notices — forcing closure of all or part of the premises

When Must It Be Written Down?

Since the Fire Safety (England) Regulations and the Building Safety Act updates, the position is simple: the significant findings of a fire risk assessment must be recorded in writing for all premises covered by the Fire Safety Order — the old five-employee threshold for written records was removed in October 2023. The record should identify the hazards found, the people at risk, the measures in place, and any actions outstanding, with dates.

What a Good Fire Risk Assessment Contains

• Ignition sources (electrical equipment, heaters, hot works, smoking areas) and fuel sources (waste, packaging, flammable liquids) identified room by room
• People at particular risk: lone workers, night staff, visitors, and anyone needing help to evacuate — with Personal Emergency Evacuation Plans (PEEPs) where required
• The state of detection, alarms, emergency lighting, extinguishers, escape routes, and fire doors
• An action plan with owners and deadlines, and evidence of staff training and drills
• A review date — and triggers for earlier review (fire or near-miss, building changes, significant staffing changes)

Who Can Carry One Out?

The responsible person can do it themselves for a small, simple, low-risk premises using the government's published guidance. For anything larger or higher-risk — sleeping accommodation, complex layouts, vulnerable occupants — the expectation is a competent assessor, and third-party certification schemes (BAFE SP205, IFE registers) are the usual evidence of competence. Whoever does it, the legal responsibility stays with the responsible person; it cannot be outsourced along with the paperwork.

Frequently Asked Questions

How often should a fire risk assessment be reviewed?

There is no fixed legal frequency, but the assessment should be reviewed regularly — at least annually, and immediately after any significant changes to the premises, occupancy, layout, or fire safety systems, or after a fire or near-miss.

Can I do a fire risk assessment myself?

Yes, for simple premises (small offices, shops, etc.) the responsible person can carry out the assessment themselves, provided they are competent to do so. For larger or more complex premises, it is recommended to engage a professional fire risk assessor.

What is the difference between a fire risk assessment and a fire safety audit?

A fire risk assessment identifies hazards and evaluates risks to determine what measures are needed. A fire safety audit checks that existing fire safety measures and management systems are working effectively. The assessment comes first; audits verify ongoing compliance.

Is a fire risk assessment a legal requirement?

Yes. Under the Regulatory Reform (Fire Safety) Order 2005 every non-domestic premises in England and Wales must have a suitable and sufficient fire risk assessment, and its significant findings must be recorded in writing.

Does a fire risk assessment need to be written down?

Yes — for all premises covered by the Fire Safety Order. The previous rule that only employers with five or more employees needed a written record was removed in October 2023.

Related guides

• Fire marshal vs fire warden — the roles that act on the assessment day to day.
• What does a fire marshal do?
• What is working at height? — the other high-consequence risk assessment most workplaces need.
• Health & safety glossary A–Z — PEEP, RRO, responsible person and 60 more terms.