When it comes to fire safety in the UK, the terms “fire safety audit” and “fire risk assessment” are often treated as if they were interchangeable.
The reality is that these two terms do not refer to the same thing, which can lead to confusion among dutyholders and building managers. This, in turn, can have serious implications for safety.
In this guide, we will therefore pay close attention to exactly what these respective terms refer to, how the two exercises differ from each other, and why it is so crucial to understand such differences.
Why do people often confuse fire safety audits with fire risk assessments?
Given that the expressions “fire safety audit” and “fire risk assessment” are frequently used in relation to fire safety compliance in the UK, it should not be surprising that some people involved in managing buildings can get them confused.
Many people wrongly assume that performing one of these processes to the necessary standard equates to fulfilling the requirements of the other. This, however, is a potentially very dangerous misconception.
Understanding the distinction between a fire safety audit and a fire risk assessment, then, is of the utmost importance for ensuring legal compliance, effective resource planning, and the fulfilment of competence expectations. It also helps building managers and dutyholders prepare for potential enforcement actions from fire authorities.
If organisations and people responsible for the management of premises don’t fully grasp how these two processes differ from each other, they can be at risk of compliance gaps, missed hazards, and heightened scrutiny from regulators.
What is a fire risk assessment and what is its purpose under UK fire safety legislation?
Businesses and landlords in the UK are legally required to ensure a fire risk assessment, or “FRA”, is carried out at premises for which they are responsible. The need for this in accordance with UK law is set out under the Regulatory Reform (Fire Safety) Order 2005 and the Fire Safety Act 2021.
An FRA can be described as a mandatory, systematic evaluation of a property, aimed at identifying hazards and protecting people. “Responsible persons” – typically building owners, employers, or managers – are obliged to evaluate key elements such as potential ignition sources, people at risk (including vulnerable groups like the elderly or disabled), escape routes, fire safety measures, and their organisation’s readiness for emergencies.
In the case of residential buildings, FRAs are categorised into Types 1 to 4. Type 1 is a non-destructive inspection of common areas only, while Type 2 adds destructive sampling in those areas. A Type 3 FRA, meanwhile, extends to individual dwellings non-destructively, and Type 4 is the most invasive, as it includes destructive checks in dwellings.
Fire risk assessments are inherently risk-based and forward-looking. They focus on proactive measures to prevent fires and minimise their impact, instead of merely reacting to issues.
What is a fire safety audit and who carries it out?
By contrast, a fire safety audit is an enforcement-led review of a particular premises and its documents, conducted by the local fire and rescue authority. The main purpose of this formal examination is to check compliance with fire safety law, such as the aforementioned Regulatory Reform (Fire Safety) Order 2005 (also sometimes referred to as the “FSO”).
A fire safety audit is also undertaken to examine whether the “responsible person” for the given building has adequately ensured fire safety through the necessary management systems, documentation, and ongoing maintenance.
Fire safety inspectors typically scrutinise records and other elements like previous FRAs, staff training logs, equipment servicing certificates, evacuation procedures, fire door compliance, and evidence of compartmentation (for example, fire-resistant barriers).
A fire safety audit can be scheduled in advance, or it may occur unannounced. Such a review can be triggered by complaints, incidents, or routine risk-based profiling.
A key distinction is that while it is the dutyholder for a given property who initiates an FRA, a fire safety audit is performed by an external entity and carries legal weight. With regard to the latter, inspectors are empowered to issue notices in the event of deficiencies being found.
How do the objectives of an FRA and a fire safety audit differ?
One of the biggest distinctions between fire risk assessments and fire safety audits, is the intent behind them. In summary:
- The objective of an FRA is to proactively identify risks and implement measures to reduce the likelihood of fire and its impact.
- The objective of a fire safety audit is to reactively verify compliance and assess whether the responsible person is meeting their legal duties.
Another way to put it is that while an FRA drives internal improvements, an audit checks whether those improvements adhere to statutory standards.
The two processes, then, relate to and complement each other, but they are not substitutes or interchangeable. One of them prevents, and the other enforces.
How do the roles and responsibilities of the people involved in each process differ?
- An FRA is arranged and overseen by the responsible person. However, it is typically carried out (or assisted) by a competent person engaged by the organisation. The term “competent” here refers to someone who possesses sufficient training, experience, knowledge, and qualifications relevant to the premises.
- A fire safety audit is undertaken by authorised fire and rescue authority inspectors with legal powers to enter premises, require documents, and issue notices.
The responsible person for the given building must cooperate in both processes; however, they bear ultimate accountability for the FRA.
What does the evidence-gathering process look like for each?
- An FRA involves site walkthroughs, document reviews, staff interviews, testing observations, photographs, and the production of a prioritised action plan.
- A fire safety audit entails a formal check being carried out of the FRA quality. Scrutiny is also applied to maintenance records, drills, fire door surveys, compartmentation drawings, staff training logs, and previous enforcement actions.
Consistent and trustworthy data is vital for both exercises. Poor documentation undermines the effectiveness of FRAs, while increasing the likelihood of a failed fire safety audit.
How do outcomes differ between an FRA and a fire safety audit?
- The outcomes of FRAs include detailed findings, risk ratings, recommendations, remediation timelines, and opportunities to drive down risk exposure.
- The outcomes of fire safety audits include compliance judgements, potential enforcement notices, alterations notices, or guidance to improve.
Poor FRA management often leads to negative outcomes from a subsequent fire safety audit. This underscores, again, how FRAs and fire safety audits aren’t direct substitutes or alternatives to each other but are nonetheless closely related to each other.
How frequently should each take place, and what determines the schedule?
- An FRA needs to be reviewed regularly. There is no fixed legal interval between these reviews; instead, the decision is based on the specific risk. Typically, this should happen annually, or sooner than this if changes occur, such as building alterations, new occupants, incidents, or regulatory updates.
- The frequency of fire safety audits is determined by the fire and rescue authority. This decision is based on risk profiling, the history of compliance at the given site, and past incidents. Inevitably, higher-risk premises are prioritised for auditing.
If you are responsible for a particular building, a proactive and ongoing cycle of FRA management is better than carrying out a single, one-off FRA (or even neglecting to undertake an FRA at all) and then simply waiting for an enforcement visit.
What practical steps can dutyholders take to prepare effectively for each process?
Dutyholders are advised to pursue the following actions to ensure their readiness for both these exercises that are so crucial for fire safety and compliance.
For FRAs, they should:
- Keep their building plans and assessments up to date
- Track and resolve outstanding actions
- Maintain clear maintenance and training records
- Use competent, accredited assessors
- Document management systems.
For audits, it is important to:
- Have FRA and supporting documents readily available
- Ensure maintenance and training logs are accurate
- Prepare staff for potential questions
- Review enforcement history at the site.
How can managed compliance services help organisations stay ahead of both FRAs and audits?
When you have a suitable expert partner by your side, you can be much better placed to ensure the highest standards of fire safety management and compliance at your property.
An organisation that provides managed compliance services in relation to fire risk can help with such processes as coordinating FRAs, tracking actions, managing assets, and maintaining documentation. Such ongoing support can greatly reduce the risk of non-compliance or enforcement notices, while promoting a continuous cycle of improvement.
Here at Assets & Compliance Managed Services (ACMS), we take pride in helping organisations to manage FRAs effectively, enhance audit readiness, and embed proactive fire safety practices across their sites.
The best possible fire safety comes from proactive and ongoing management, not last-minute preparations. Contact our specialists today to learn more about how we can help optimise your present arrangements, at the same time as building a safer future.
