This guide explains both types of risk assessments, what you need to do, and how to ensure your business is compliant.

How would you respond if someone asked, “Can I see your written fire risk assessment?”

If you’d answer, “I think it’s in a folder somewhere”, or “Do I need one?” you’re not alone. However, you would also be putting yourself and your business at risk.
In October 2023, the law changed in a way that caught thousands of small business owners by surprise. Every UK business, regardless of size, must now have a written fire risk assessment. This should go beyond notes and should be a comprehensive, documented assessment, updated annually.

While fire risk assessments are a legal requirement, there’s another type of risk assessment that’s equally important for protecting your business: security risk assessments. They work very differently, but ignoring either one could cost you dearly.

If you run or work for an SME, you must understand both types of risk assessment – what they are, why you need them, and how they differ.

Two very different assessments

There’s an easy way to understand the difference: fire risk assessments are like your business’s MOT – legally required with set standards. Security risk assessments are more like a health check – not legally required in the same way, but essential for keeping your business protected.

Here’s a quick summary:

Both protect your business, and both are important. Read on for more information.

Fire risk assessments: a legal obligation

Under the Regulatory Reform (Fire Safety) Order 2005, if you own, occupy, or manage business premises, you’re the “Responsible Person” and legally accountable for fire safety.
Until recently, only businesses with five or more employees needed a written fire risk assessment. Now, every business must have one, even sole traders, small shops, and cafés with two staff.
“We’re seeing a lot of confusion about the October 2023 changes,” says Paul Waddon, our resident Fire Safety expert. “Small business owners who’ve been operating for years suddenly find they’re not compliant. The good news is that once you understand what’s needed, getting compliant is straightforward.”

What happens if you don’t comply?

We’re not in the habit of scaremongering, but businesses without a fire risk assessment face hefty penalties:
• Unlimited fines
• Imprisonment (serious cases)
• Immediate closure of premises
• Invalidated insurance.

What’s included in a fire risk assessment?

In a fire risk assessment, the assessor identifies hazards, evaluates who’s at risk, and recommends measures to eliminate or reduce risks.
It includes:
• Escape routes and accessibility
• Fire alarm systems (specific category and grade needed)
• Fire doors and their condition
• Emergency lighting and signage
• Fire extinguishers (type, location, maintenance)
• Flammable materials storage
• Electrical safety and ignition sources.

Most fire risk assessments use a traffic light system to help you tackle critical issues first and plan longer-term improvements. These are:
Red (immediate): Critical issues putting lives at risk – address now
Amber (6-10 months): Important improvements – schedule
Green (when budget allows): Enhancements – consider.

Can you DIY a fire risk assessment?

There’s no legal requirement to hire an external assessor. If you’re genuinely competent and have proper training, experience, and knowledge of fire safety regulations, you can do your own.
But for most business owners, especially with complex premises, hiring a professional is the sensible choice. Fire safety regulations are complex, and the stakes are high.

How can I find a fire risk assessor?

Start with your local fire authority for recommendations. Look for assessors with relevant qualifications, experience with your type of premises, professional indemnity insurance, and good references.

Security risk assessments: protecting your business

Unlike fire risk assessments, there’s no legal requirement for security risk assessments. However, you have a general “duty of care” under health and safety legislation to protect employees, visitors, and assets from foreseeable risks – including break-ins, theft, and vandalism.
What’s more, your insurance policy almost certainly requires appropriate security measures. Failing to implement reasonable security could invalidate claims or increase premiums.

How do security risk assessments work?

Security risk assessments are collaborative. At Absolute Fire & Security, we work with business owners to identify their vulnerabilities and determine the best protection for their situation and budget.

“Every business is different,” explains James Lewis, Director at Absolute Fire & Security, “A retail shop on the high street faces completely different risks to a warehouse on an industrial estate. That’s why we always start by understanding your business operations, your concerns, and what’s actually happening in your local area before recommending any systems.“

Here’s a list of the key questions we consider with you:

• Where are your access points, and which are vulnerable?
• What security systems do you currently have?
• Where are valuables or sensitive data stored?
• What’s the local crime rate?
• When is your property empty and for how long?
• How obvious is it when you’re closed?

Your DIY security check

Before calling in professionals, it’s helpful to do your own walk-around. Look at access points, current security measures, where you store valuables, local context, and your opening patterns. This helps you have a more productive conversation with security experts and make informed decisions.

What happens once you’ve got a fire risk assessment and a security risk assessment?

Once you have your professional risk assessments, it’s time to implement the recommendations. At Absolute Fire & Security, we ensure clients meet the minimum requirements set out in their risk assessments and then discuss whether going beyond those minimum standards would be right for your business. For example, your fire risk assessment might specify a certain alarm category, but we may suggest additional coverage based on how you actually use your building.

Your risk assessment action plan

Step 1: Fire risk assessment (urgent if you don’t have one)
• Check if you have a current written assessment
• Decide whether to DIY (if competent) or hire a professional
• Aim to complete within 30 days
• Schedule annual reviews
Step 2: Security assessment
• Do your own walk-around using the checklist above
• Contact a local security specialist for professional input
• Discuss concerns and budget
• Get clear recommendations with priorities
Step 3: Implement and review
• Address red priority items immediately
• Plan amber items into your budget
• Set calendar reminders for annual reviews
• Keep all documentation organised

Fire and security risk assessments give you peace of mind

Instructing your risk assessments is about more than ticking boxes. It’s about getting the peace of mind that you’re legally compliant, are protecting your staff, customers and assets, that your insurance will pay out if needed, and that you won’t face unexpected enforcement notices.

Do you need a fire or security risk assessment? We can help

We’ve helped many businesses across the South East get their fire and security risk assessments sorted – and we can help you too.
Fire alarm systems. We work with your fire risk assessment to install the right category and grade of system for your premises. Don’t have an assessment yet? We’ll recommend qualified local assessors you can rely on.
Security systems. We’ll conduct a thorough security risk assessment with you, walking through your premises together to identify vulnerabilities. Then we’ll recommend CCTV, intruder alarms, and access control systems that match your actual needs – not the most expensive option.
Straightforward advice. We explain everything in plain English and never recommend systems you don’t need. Our job is to help you protect your business properly, not to sell you unnecessary equipment.
Ongoing support. Once your systems are installed, we provide ongoing maintenance to keep everything compliant and working properly. You’ll have direct access to our team whenever you need us.
Don’t wait for an inspection or incident to prompt action. Contact us today on 01483 791500 or info@absolutefiresecurity.co.uk for your free initial consultation.