Fire remains one of the most serious risks any UK workplace can face, and it is also one of the few hazards where the law is unambiguous about who is responsible. Under the Regulatory Reform (Fire Safety) Order 2005, every non-domestic premises in England and Wales must have a "responsible person" who carries out, reviews, and acts on a fire risk assessment. Scotland and Northern Ireland have their own equivalent legislation with the same underlying duty. Get this wrong and the consequences are not administrative �� they are measured in lives, buildings, and, increasingly, criminal liability for directors.
What a fire risk assessment actually covers
A fire risk assessment is not a checklist exercise completed once and filed away. It is a systematic review of how fire could start, how it could spread, who is at risk, and what controls are in place to prevent or limit harm. A competent assessment works through five core stages: identifying fire hazards (ignition sources, fuel, oxygen), identifying people at risk (including those with mobility issues, lone workers, and visitors unfamiliar with the building), evaluating and reducing the risk from those hazards, recording findings and implementing an emergency plan, and reviewing the assessment regularly or whenever the premises, occupancy, or processes change.
Many organisations underestimate how often that last stage should happen. A fire risk assessment completed when a warehouse opened is not still valid two years later if racking has been reconfigured, new chemicals are stored on site, or occupancy levels have changed. The Fire Safety Order does not specify a fixed review interval, but the general expectation is that a "suitable and sufficient" assessment stays current — which in practice means an annual review as a minimum, with earlier reviews triggered by any significant change.
Common failure points
Enforcement data and fire service audits consistently point to the same recurring problems: fire doors wedged open or damaged, escape routes obstructed by stored materials, fire extinguishers past their service date or missing entirely, emergency lighting not tested, and fire alarm systems that have not been serviced on schedule. None of these are complex engineering failures. They are the result of assessments that were completed correctly on paper but never translated into an ongoing operational routine.
This is where the gap between "having an assessment" and "being fire safe" tends to open up. A document sitting in a folder does not stop a fire door being propped open by a delivery team in a hurry. What closes that gap is a system that keeps the assessment, the corrective actions, and the day-to-day checks connected — so that a fire door fault gets logged, assigned, and closed out rather than noticed once a year during the next formal review.
Who counts as the "responsible person"
The responsible person is usually the employer, the building owner, the occupier, or anyone with control over the premises — and in multi-occupancy buildings, more than one responsible person can exist simultaneously, each accountable for the areas under their control. This matters particularly in shared office buildings, retail parks, and industrial estates, where landlords and tenants must coordinate rather than each assuming the other has it covered. A written agreement setting out who assesses what, and who maintains shared systems like alarm panels and communal escape routes, avoids the common failure mode where each party believes fire safety is someone else's responsibility.
For higher-risk premises — high-rise residential buildings in particular — the Building Safety Act 2022 and the Fire Safety Act 2021 have added further duties around record-keeping, information sharing between responsible persons, and demonstrating that fire safety information is kept current and accessible. Even where a business does not fall directly under the higher-risk building regime, the direction of UK fire safety regulation is clearly toward better documentation and clearer accountability, not less.
Practical steps to close the gap between assessment and action
A fire risk assessment earns its value only if the actions coming out of it are tracked to completion. Five practices consistently separate organisations that pass fire safety audits from those that do not:
Assign every corrective action to a named person with a due date. A finding like "escape route partially obstructed" is not useful unless someone owns fixing it and a deadline exists to check it happened.
Keep a living fire log, recording weekly checks (fire doors, extinguishers, emergency lighting testing) alongside the periodic formal review, so evidence builds continuously rather than being reconstructed retrospectively before an inspection.
Review immediately after any change — new storage, altered layout, building works, or a change in occupancy numbers — rather than waiting for the scheduled annual review.
Train staff on evacuation procedures at induction and refresh regularly, since a well-written evacuation plan is only as good as the workforce's ability to follow it under pressure.
Coordinate explicitly with other responsible persons where premises are shared, so nobody assumes the alarm system, communal fire doors, or shared escape routes are "someone else's job".
Why documentation quality matters beyond compliance
Beyond the legal duty, a well-maintained fire risk assessment record is what demonstrates due diligence if the worst happens. Fire and rescue authorities have enforcement powers under the Fire Safety Order, including prohibition notices for premises presenting a serious risk to life, and prosecutions do occur where responsible persons cannot show that a suitable and sufficient assessment was in place and acted upon. A defensible audit trail — dated assessments, logged actions, evidence of staff training, and records of routine checks — is the difference between demonstrating genuine ongoing management and producing a single static document after the fact.
This is precisely where digitising the process changes outcomes. When fire risk assessments, corrective actions, routine checks, and training records sit in one connected system rather than scattered across paper logs and spreadsheets, gaps become visible before they turn into findings. SiteChief's risk assessment module is built for exactly this kind of continuous, auditable process — turning a periodic fire risk assessment into a living record that tracks actions to closure and keeps evidence ready for inspection at any time.
Getting started
If your organisation's fire risk assessment has not been reviewed in the last twelve months, or if your premises have changed since it was last completed, that is the practical starting point — not a full rewrite, but a structured review against current conditions. For businesses managing multiple sites or complex premises such as warehousing and distribution facilities, the same principle applies at scale: fire safety works best when it is a continuously managed process, not an annual paperwork exercise revisited only when an inspector is due.
Getting fire risk assessment right is ultimately about closing the loop between identifying a hazard and confirming it has actually been controlled. That loop, maintained consistently, is what protects people — and what stands up to scrutiny when it matters most.