Most buildings that have experienced a serious fire or received an enforcement notice had documented fire safety procedures in place. The problem was not that the responsible person had no system — it was that the system on paper bore little relationship to what was actually happening in the building. This article looks at what separates a fire safety management system that functions from one that merely exists.
What a Fire Safety Management System Is
A fire safety management system (FSMS) is the structured set of arrangements by which a responsible person manages their fire safety obligations on an ongoing basis. It encompasses the policies, procedures, responsibilities, records, and review mechanisms that together ensure the building remains safe and compliant between formal assessments.
The Regulatory Reform (Fire Safety) Order 2005 requires responsible persons to implement and maintain appropriate fire safety arrangements — and the 2026 amendments now require those arrangements to be documented in writing for all premises, regardless of size. An FSMS is the practical expression of that requirement.
The Core Components
An effective FSMS typically comprises the following elements:
- Fire safety policy: a statement of the organisation's commitment to fire safety, identifying the responsible person and the chain of accountability
- Risk assessment and action plan: the current fire risk assessment for the premises, together with a documented action plan tracking outstanding findings and their resolution status
- Maintenance and testing schedules: documented programmes for the testing and maintenance of fire detection and alarm systems, emergency lighting, fire suppression systems, fire doors, and other fire safety equipment, aligned to the relevant British Standards
- Evacuation procedures: written emergency plans covering alarm response, evacuation, the role of fire wardens, arrangements for persons who require assistance to evacuate, and liaison with the Fire and Rescue Service on arrival
- Training records: evidence of induction and ongoing fire safety training for all staff, and specific fire warden training records for designated wardens
- Incident and near-miss log: a record of any fire, false alarm, or near-miss, including the investigation findings and any actions taken
- Review and audit schedule: a programme for internal review of the FSMS and the fire risk assessment, and for periodic independent audit
"The test of a fire safety management system is not whether it passes an audit. It is whether the person responsible for each building knows what they need to do today, and whether there is a mechanism to identify and correct failures before an incident occurs."
Where Systems Break Down
In our experience auditing buildings across a range of sectors, the failure modes in fire safety management are remarkably consistent. The most common are:
- Action plans that are never closed out: the fire risk assessment identifies actions, which are recorded, and then sit open indefinitely. There is no mechanism for escalation when actions become overdue, and no review to determine whether a pending action represents a current safety risk.
- Testing that is recorded but not verified: weekly alarm tests are logged, but there is no oversight to confirm that the person conducting them understands what they are doing or that faults identified are being rectified. Paper compliance and actual compliance diverge.
- Procedures that are not known to the people who need to use them: a detailed emergency plan exists in a folder in the facilities manager's office, but the fire wardens have never read it and could not locate it. The procedures describe roles that do not reflect how the building is actually used.
- Management changes that break continuity: a managing agent changes, a facilities manager moves on, or a building is sold, and institutional knowledge of the fire safety arrangements is lost. The incoming party has a set of documents but no understanding of the history behind them.
Making It Proportionate
For a small, low-risk premises, an FSMS does not need to be elaborate. A current fire risk assessment, a written record of the emergency procedures, a testing log, and a training record may be sufficient. The system should be proportionate to the complexity and risk profile of the premises — an overengineered system for a simple building is just as likely to fail in practice as no system at all, because the overhead of maintaining it becomes a disincentive.
For larger or more complex premises — multi-occupancy buildings, premises with vulnerable occupants, buildings with multiple responsible persons — the system needs to be correspondingly more structured. Clarity about who is responsible for each element is particularly important in multi-tenanted buildings, where the overlap between a freeholder's responsibilities and individual tenants' obligations can become a source of gaps rather than a source of coverage.
The Role of Independent Audit
An internal review of your own FSMS is valuable but has inherent limitations. The person conducting the review is unlikely to challenge assumptions that the organisation has been making for years, and may not have the specialist knowledge to identify deficiencies in technical aspects of the system such as maintenance standards or fire door specification.
An independent fire safety audit, conducted by a competent external consultant, provides an objective assessment of whether the system is adequate and whether the arrangements on paper are being implemented in practice. For buildings subject to the Building Safety Act regime, the audit also provides evidence of proactive management that can be referenced in the Building Safety Case. We recommend that independent audits are built into the FSMS as a scheduled activity rather than commissioned only in response to a problem.