Fire Risk Assessment Process

Introduction

Fire risk assessment is a systematic process for identifying fire hazards, determining who may be harmed, evaluating the adequacy of existing controls, and deciding what further action is required. It is not merely an inspection checklist or a document prepared for regulatory submission. It is a structured decision-making activity that connects technical evidence with practical risk reduction.

A competent assessment should answer five questions:

1. What could start a fire?
2. How could fire spread and cause harm?
3. Who may be exposed, and how vulnerable are they?
4. How effective are the existing preventive and protective measures?
5. What additional actions are necessary, who will complete them, and by when?

The assessment must be proportionate to the size, complexity and occupancy of the premises. A small office may require a relatively simple assessment, whereas a hospital, high-rise building, industrial plant or public venue requires detailed consideration of evacuation, fire engineering, management systems and emergency response.

Learning Objectives

By the end of this chapter, the learner should be able to:

• plan and define the scope of a fire risk assessment;
• collect reliable physical, documentary and interview evidence;
• identify occupants, visitors and workers who may be at particular risk;
• identify fire hazards and analyse fire scenarios;
• evaluate risk using a transparent and suitable method;
• recommend controls according to the hierarchy of control;
• document findings and assign responsibility for corrective action; and
• establish review dates and triggers for reassessment.

1. Planning and Scoping the Assessment

1.1 Purpose and boundaries

Before visiting a site, the assessor should establish the purpose of the assessment. Common purposes include legal compliance, commissioning a new building, reviewing an existing fire safety management system, investigating an incident, supporting an insurance requirement, or evaluating a significant change in use.

The scope should define:

• the buildings, floors, rooms and external areas included;
• activities, processes and working hours covered;
• normal, abnormal and emergency operating conditions;
• occupants, contractors, visitors and members of the public considered;
• interfaces with neighbouring premises and shared services;
• relevant legislation, codes, standards and organisational policies; and
• exclusions, assumptions and limitations.

An assessment that excludes a warehouse, plant room, roof space or contractor activity without recording the exclusion may create a misleading impression of safety. Scope limitations must be explicit.

1.2 Competence and independence

The assessor needs sufficient knowledge of fire development, building construction, occupancy behaviour, detection and suppression systems, evacuation, emergency planning and applicable law. Complex premises may require a team involving fire engineers, electrical specialists, process engineers, occupational health professionals and representatives of people with disabilities.

Independence is also important. An assessor should report deficiencies honestly even where the organisation has invested heavily in existing systems. At the same time, the assessment should be evidence-based rather than alarmist.

1.3 Preparation before the site visit

Useful preparation includes reviewing:

• building plans and occupancy information;
• previous fire risk assessments and action plans;
• fire alarm, emergency lighting and suppression-system certificates;
• inspection, testing and maintenance records;
• permits for hot work and contractor procedures;
• dangerous-substance inventories and safety data sheets;
• incident, near-miss and false-alarm records;
• staff training and evacuation-drill records; and
• previous enforcement, insurance or audit reports.

The assessor should prepare a route through the premises, identify areas requiring restricted access, and arrange interviews with responsible persons, supervisors, security staff, maintenance personnel and worker representatives.

2. Evidence Collection

A reliable assessment uses several sources of evidence because no single method is complete.

2.1 Physical inspection

The inspection should examine both fire prevention and fire protection. The assessor should observe conditions rather than relying solely on statements or records. Important observations include:

• ignition sources such as heaters, cooking equipment, electrical installations, machinery and hot work;
• combustible materials, waste, packaging, dust and flammable liquids or gases;
• storage arrangements, separation distances and housekeeping;
• fire-resisting walls, doors, floors, shafts and service penetrations;
• escape routes, travel paths, stairs, exits and final discharge points;
• fire doors, signage, emergency lighting and exit availability;
• fire detection, alarm, extinguishing and smoke-control systems;
• access for fire and rescue services;
• unsafe modifications, temporary wiring and blocked equipment; and
• actual behaviour that differs from written procedures.

Photographs, sketches, measurements and location references improve traceability. Photographs should be taken lawfully and handled in accordance with privacy and organisational policy.

2.2 Interviews and consultation

Interviews reveal operational realities that may not be visible during a short inspection. Staff may know that an alarm is frequently ignored, a fire door does not close, a night shift is understaffed, or a particular machine overheats. Questions should be open and non-punitive. The objective is to discover system weaknesses, not to assign blame.

Consultation should include workers who understand routine operations and, where appropriate, people with disabilities or those responsible for assisting them. Contractors and agency workers should also be considered because their familiarity with the premises may be limited.

2.3 Documentary and test evidence

Records demonstrate whether controls exist and whether they are maintained. A certificate alone, however, does not prove that a system is currently effective. The assessor should consider the date, scope, competence of the person completing the test, defects identified, and whether defects were closed.

Evidence should be classified as, for example, observed, documented, reported or assumed. Assumptions should be verified wherever their effect on the conclusion is significant.

3. Identifying Fire Hazards and Fire Scenarios

A hazard is a source or situation with potential to cause harm. Fire risk assessment commonly separates hazards into three interacting elements:

• ignition sources: heat, flame, sparks, electrical faults, friction, static discharge or chemical reaction;
• fuel: solids, liquids, gases, dusts, furnishings, packaging and building contents; and
• oxygen or oxidising agents: normally air, but sometimes oxygen-rich or chemically oxidising environments.

Fire is possible when these elements are present in suitable conditions. The assessment should not stop at listing hazards; it should construct credible scenarios. For example:

A damaged extension lead overheats beneath combustible packaging during an unoccupied night period. Smoke detection is delayed because the detector is obstructed. The fire breaches a compartment door that has been wedged open, and smoke enters the escape corridor.

Scenario thinking connects causes, fire growth, detection, response, spread and consequences. It also exposes interactions between failures.

3.1 Fire spread and compartmentation

The assessor should consider spread by direct flame, hot gases, radiation, convection and concealed routes. Particular attention is needed at doors, ducts, cable penetrations, lift shafts, voids and service risers. A strong compartment wall may be ineffective if penetrations are poorly sealed or fire doors are damaged or propped open.

3.2 Dangerous substances and special processes

Flammable liquids, gases, aerosols, combustible dusts, oxygen cylinders and reactive chemicals require information beyond ordinary housekeeping. Relevant issues include quantity, concentration, ventilation, ignition control, storage compatibility, bonding and earthing, spill response, process temperature and emergency isolation.

Where a specialist assessment is required, the fire risk assessor should identify the need and obtain competent advice rather than making unsupported technical assumptions.

4. Identifying People at Risk

The assessment must consider people, not only buildings. Those at risk may include:

• employees and supervisors;
• contractors, delivery workers and cleaners;
• visitors and members of the public;
• children, older persons and people unfamiliar with the premises;
• people with mobility, sensory, cognitive or communication impairments;
• people asleep, sedated or working alone;
• persons in remote, enclosed or high-risk areas; and
• firefighters and other emergency responders.

Risk is influenced by location, time, familiarity, ability to perceive warning, ability to move, need for assistance and the availability of suitable refuge or evacuation arrangements. A generic statement such as “vulnerable persons will be assisted” is inadequate unless the responsible persons, equipment, training and procedures are defined.

Personal emergency evacuation plans may be appropriate for particular individuals, but they should not replace inclusive building design and an effective general emergency plan. Confidential health information must be handled lawfully and only information necessary for safe evacuation should be shared.

5. Analysing and Evaluating Risk

5.1 Qualitative and semi-quantitative methods

At diploma level, a risk matrix is often useful for prioritising action. A common conceptual relationship is:

where R is a risk score, L is an ordinal likelihood rating, and C is an ordinal consequence rating. The ratings may use scales such as 1–5. This is not a physical law and does not produce a probability of fire or a monetary loss. It is a decision aid whose meaning depends on the definitions used by the organisation.

For example, if likelihood is rated 3 and consequence is rated 4, the score is 12. The organisation must then apply its defined bands—for example, low, medium, high or intolerable—and not assume that a score of 12 has a universal meaning.

A matrix should be supported by written reasoning. Two scenarios with the same numerical score may require different controls because one concerns frequent minor fires and the other a low-frequency event with potentially catastrophic consequences.

5.2 Quantitative analysis

Where reliable data exist, expected annual loss may be represented as:

where EAL is expected annual loss, pᵢ is the estimated annual probability of scenario i, and Cᵢ is its consequence expressed in consistent monetary or other quantitative units. This approach requires defensible probabilities, comparable consequence estimates and careful treatment of uncertainty. It is generally unsuitable when data are scarce or consequences include ethical and life-safety values that cannot reasonably be reduced to money.

5.3 Existing controls and residual risk

The assessor should distinguish inherent risk, which exists before controls, from residual risk, which remains after controls. Controls may reduce the probability of ignition, limit fire growth, improve detection, support evacuation or reduce consequences. Their effectiveness depends on availability, reliability, maintenance and human performance.

Risk evaluation compares the residual risk with the organisation’s criteria and legal duties. Compliance with a minimum rule does not automatically demonstrate that risk is acceptable, particularly where conditions or occupants differ from the assumptions behind the rule.

6. Recommending Controls

Recommendations should be specific, proportionate and practicable. The hierarchy of control provides a useful order of preference:

1. Elimination – remove the ignition source or hazardous process.
2. Substitution – use a less flammable material or safer process.
3. Engineering controls – provide separation, guarding, ventilation, automatic detection or suppression.
4. Administrative controls – introduce procedures, permits, training, inspection and supervision.
5. Personal protective equipment – protect individuals where residual exposure remains; PPE is generally the least reliable primary fire-prevention control.

Fire safety normally requires layers of protection. For example, a commercial kitchen may need safe equipment design, grease control, cleaning, staff training, automatic detection or suppression, suitable extinguishers and an evacuation procedure. No single layer should be treated as a substitute for all others.

Each recommendation should state:

• the deficiency or risk scenario;
• the required action;
• the responsible person or department;
• the priority and target date;
• resources or specialist input required; and
• the method for verifying completion.

“Improve housekeeping” is weak. “Remove combustible packaging from the electrical intake room, establish a daily inspection by the facilities supervisor, and verify completion by 30 June” is actionable.

7. Documentation and Action Management

The final report should be understandable to management, workers, auditors and enforcement personnel. It should normally include:

• assessment purpose, date, assessor and competence;
• premises description, occupancy and operating conditions;
• scope, exclusions, assumptions and limitations;
• methods and risk criteria used;
• evidence examined and people consulted;
• identified hazards and fire scenarios;
• people at risk and evacuation considerations;
• existing controls and their condition;
• risk evaluation and reasons for ratings;
• recommended additional measures;
• an action plan with owners and deadlines; and
• review requirements and approval arrangements.

A risk register can support implementation. It should be controlled as a live management document rather than filed and forgotten. Closed actions should include evidence such as photographs, certificates, revised procedures or completed training records.

8. Review Triggers and Continuous Improvement

A scheduled review is necessary, but time alone is not sufficient. Reassessment should occur after:

• building alteration, extension or change of use;
• introduction of new equipment, materials or processes;
• changes in occupancy, staffing or vulnerable occupants;
• significant maintenance failure or impairment of a fire system;
• fire, near miss, false-alarm trend or evacuation difficulty;
• changes in legislation, guidance or insurance requirements;
• enforcement action or major audit findings; and
• evidence that previous controls are ineffective.

Management should monitor indicators such as overdue maintenance, blocked exits, repeated alarm faults, hot-work permit violations, drill performance and action-plan closure. These indicators do not replace assessment, but they help identify deterioration between formal reviews.

9. Applied Case: Illustrative Office and Storage Premises

Background

This illustrative case concerns a two-storey office with a ground-floor archive and storage area. Forty-five employees work during the day. A small number of workers remain after normal hours. The building contains paper files, packaging, electrical equipment and a kitchenette.

Problem

During inspection, the assessor found combustible cartons stored in an electrical distribution room, a fire door wedged open, incomplete emergency-light testing records and an alarm panel showing an intermittent fault. Staff reported that visitors sometimes waited near the main exit and that the night cleaner had not attended an evacuation drill.

Analysis

The electrical room storage increased fuel loading close to potential ignition sources and could obstruct maintenance. The wedged door weakened compartmentation. The alarm fault created uncertainty about early warning, especially for lone night workers. The absence of the cleaner from drills indicated a gap between the written emergency plan and actual worker participation.

The assessor identified the following people at risk: office staff, visitors, the cleaner working outside normal hours, contractors and firefighters entering the electrical room. The most important scenario was an electrical fire developing when occupancy was low, with delayed detection and smoke spread through the open fire door.

Approach and solution

Immediate actions were assigned to the facilities manager:

• remove all storage from the electrical room;
• repair and keep the fire door closed, using an approved hold-open device only if linked to the fire alarm system;
• arrange competent repair of the alarm fault and retain the service report;
• complete emergency-light testing and correct defects; and
• include the cleaner and reception staff in the next evacuation drill.

Further actions included marking visitor waiting areas away from exits, introducing weekly documented checks of fire doors and escape routes, and reviewing the out-of-hours emergency procedure.

Outcome

After verification, the electrical room was clear, the alarm fault was repaired, test records were complete and the cleaner demonstrated the evacuation procedure. The residual risk was considered tolerable under the organisation’s criteria, subject to continued maintenance and a review after planned refurbishment.

Learning points

The case demonstrates that risk assessment is more than hazard identification. Weaknesses in maintenance, management arrangements, human behaviour and documentation interacted to increase risk. It also shows why actions need an owner, deadline and verification method.

10. Professional, Ethical and Technological Considerations

The assessor has a duty to be honest, competent and clear about uncertainty. Findings should not be softened to protect commercial interests, and recommendations should not be exaggerated to create unnecessary expenditure. The welfare of occupants takes priority over convenience.

Legal requirements vary by jurisdiction, so the assessor must consult current national fire safety legislation, building requirements, occupational safety law, accessibility provisions and relevant codes. Guidance and standards should be applied in context; they should not be cited as a substitute for professional judgement.

Digital tools can improve evidence management. Mobile inspection applications may record photographs, locations, actions and due dates. Building information models can assist with compartmentation and system locations. Data analysis can reveal repeated alarm faults or overdue inspections. Artificial intelligence may help classify inspection observations or identify recurring patterns, but it cannot independently verify site conditions or replace competent judgement. Human review, data protection, cybersecurity and audit trails remain essential.

Best-Practice Principles

A high-quality fire risk assessment is:

• systematic but proportionate;
• based on observed and corroborated evidence;
• focused on credible fire scenarios and people at risk;
• transparent about assumptions and limitations;
• aligned with the hierarchy of control;
• converted into owned and time-bound actions;
• communicated to those affected; and
• reviewed when conditions or evidence change.

Chapter Summary

Fire risk assessment is a continuous management process involving planning, evidence collection, hazard and scenario identification, identification of people at risk, risk analysis, control selection, documentation and review. Effective assessment considers ignition, fuel, oxygen, fire spread, detection, evacuation, emergency response and management performance. A risk matrix can prioritise action when its ordinal nature and limitations are understood; it does not produce a universal probability or guarantee safety. Controls should follow the hierarchy of control and be implemented through specific actions with responsible owners, deadlines and verification. Assessments must be reviewed after changes, incidents, control failures or changes in legal and operational requirements. Competence, consultation, ethical independence and accurate records are central to professional practice.

Key Terms

Action owner: Person or department responsible for completing a corrective measure.

Assumption: A condition accepted as true for assessment purposes and requiring verification where significant.

Compartmentation: Division of a building into areas designed to restrict fire and smoke spread.

Consequence: The severity of harm resulting from a fire scenario.

Control measure: An action or arrangement that reduces likelihood, consequence or exposure.

Fire hazard: A source or situation capable of causing fire or harm from fire.

Fire scenario: A credible sequence describing ignition, development, spread, detection, response and consequences.

Hierarchy of control: Ordered approach prioritising elimination and engineering controls over administrative measures and PPE.

Inherent risk: Risk considered before additional controls are applied.

Likelihood: An ordinal estimate of how frequently or plausibly an event may occur.

People at risk: Persons who may be harmed by fire or by fire-response activities.

Residual risk: Risk remaining after existing or proposed controls.

Review trigger: A change or event requiring reassessment before the routine review date.

Risk assessment: Structured process for identifying hazards, evaluating risks and determining controls.

Risk matrix: Table combining likelihood and consequence ratings to support prioritisation.

Risk register: Controlled record of hazards, ratings, actions, owners and status.

Scope: Defined boundaries, conditions and subjects included in an assessment.

Verification: Evidence confirming that an action or control has been implemented and is effective.

Review Questions

Short Answer Questions

1. What are the main purposes of defining the scope of a fire risk assessment?
2. Why should physical inspection be combined with interviews and documentary evidence?
3. Identify three categories of people who may require particular consideration during evacuation.
4. What is the difference between inherent risk and residual risk?
5. List four events that should trigger an early review of a fire risk assessment.

Long Answer Questions

1. Explain how an assessor should plan and conduct a fire risk assessment from preparation through final reporting.
2. Discuss how ignition sources, fuel, oxygen and compartmentation interact in the development and spread of a fire.
3. Explain the value and limitations of using a qualitative risk matrix in fire safety.
4. Describe how the hierarchy of control can be applied to a commercial kitchen or industrial process.
5. Discuss the ethical, legal and professional responsibilities of a competent fire risk assessor.

Analytical / Application Questions

1. A warehouse has blocked exits, frequent alarm faults and large quantities of packaging near charging equipment. Construct two credible fire scenarios, identify people at risk, and recommend prioritised controls.
2. A five-storey office changes to twenty-four-hour operation. Analyse which assumptions in the existing assessment may no longer be valid and propose a review plan.
3. An organisation gives a scenario a likelihood rating of 3 and consequence rating of 4 using a defined 1–5 matrix. Explain what the score means, what it does not mean, and what further evidence is needed before deciding whether the risk is acceptable.

Multiple Choice Questions with Answers

Question 1

Which activity should normally occur before the main site inspection?

A. Destroying obsolete maintenance records

B. Defining the assessment scope and reviewing available information

C. Assigning blame for previous deficiencies

D. Purchasing new extinguishers

Correct Answer: B. Defining the assessment scope and reviewing available information

Question 2

Which combination represents the basic fire triangle?

A. Smoke, water and pressure

B. Fuel, oxygen and an ignition source

C. Heat, alarm and evacuation

D. Compartmentation, signage and training

Correct Answer: B. Fuel, oxygen and an ignition source

Question 3

Why should interviews be included in evidence collection?

A. They eliminate the need for physical inspection

B. They provide operational information that may not be visible during inspection

C. They automatically prove legal compliance

D. They replace maintenance records

Correct Answer: B. They provide operational information that may not be visible during inspection

Question 4

In the expression R = L × C, what do L and C represent?

A. Loss and cost

B. Likelihood and consequence ratings

C. Location and construction

D. Legal duty and competence

Correct Answer: B. Likelihood and consequence ratings

Question 5

Which control is highest in the hierarchy of control?

A. Personal protective equipment

B. Administrative instruction

C. Elimination of the hazard

D. Warning signage

Correct Answer: C. Elimination of the hazard

Question 6

Which finding most directly indicates a compartmentation weakness?

A. A trained receptionist

B. A sealed service penetration

C. A fire door wedged open

D. A current evacuation map

Correct Answer: C. A fire door wedged open

Question 7

Which information should an effective corrective action contain?

A. Only a general statement of concern

B. An action, owner, deadline and verification method

C. The assessor’s personal opinion without evidence

D. A replacement of all existing controls

Correct Answer: B. An action, owner, deadline and verification method

Question 8

Which event is a valid review trigger?

A. A routine unchanged workday

B. A change in building use or process

C. Completion of an ordinary staff meeting

D. A stationary inspection route

Correct Answer: B. A change in building use or process

Question 9

What is a limitation of a numerical risk-matrix score?

A. It cannot support prioritisation

B. It is a physical law of fire behaviour

C. It has meaning only within the defined rating system

D. It always gives an exact probability

Correct Answer: C. It has meaning only within the defined rating system

Question 10

Why should AI tools not replace competent fire risk assessors?

A. AI cannot store photographs

B. AI independently verifies every site condition

C. Professional judgement and human verification remain necessary

D. Digital records cannot contain action owners

Correct Answer: C. Professional judgement and human verification remain necessary