DC Fire & Security logoDC Fire & Security
Fire Safety Compliance — Expert Guide

How Often Should a Fire Risk Assessment Be Reviewed?

By the DC Fire & Security engineering team — installing and maintaining fire and security systems since 2010. Updated June 2026.

SSAIB CCTV, Intruder Alarm & Access Control Certificated
Fast Response Times
15+ Years Experience
500+ Commercial Clients

Quick answer

Review fire risk assessments annually as working practice, with full reassessment every 1–3 years risk-profiled — and immediately upon triggers: building works, occupancy/use changes, incidents or near-misses, fire safety system changes, or enforcement contact. The law mandates 'regular review' without naming numbers; the trigger discipline is what assessors, insurers and inspectors actually examine.

The cycle, risk-profiled

The legal text (Order article 9) requires review 'regularly so as to keep it up to date' and upon material change — the table is the profession's working translation (PAS 79's review logic), enforced through what inspectors ask: 'when, and what changed since?'

Premises classReviewReassess
Low-risk simple (small office/shop)Annual check2-3 years
Standard commercialAnnual1-2 years
Sleeping risk (care, hotels, HMOs)Annual minimum, often 6-monthly checksAnnually
Residential blocksAnnual1-3 years by profile (post-works always)
High-hazard/processPer safety management systemAnnually typical
Any premises post-triggerImmediatelyAs findings demand

The triggers that outrank calendars

  • Building works: extensions, refits, layout changes — compartment lines and escape routes move (the fit-out compliance warnings from the office guides); review before reoccupation, not eventually
  • Use/occupancy change: new sleeping risk, public access, headcount jumps, vulnerable occupants — the assessment's people-half rewritten (office-to-resi conversions being the extreme case)
  • Systems change: new alarm categories, suppression, AOV alterations — precautions changed, assessment follows (the commissioning-documents-feed-FRA loop)
  • Incidents and near-misses: fires however small, evacuation failures, false-alarm patterns (the audit-trigger overlap) — events are data the assessment must absorb
  • Enforcement/insurer contact: findings and requirements integrating formally
  • External knowledge shifts: post-Grenfell guidance waves being the era's example — sector learnings re-framing assumptions (cladding, doors, evacuation strategies per those guides)

Reviews vs reassessments, and records

The instruments distinguished (buying clarity again): a review confirms currency — premises walked against the existing assessment, changes noted, action-plan progress checked (£100–£300 typical, often within service relationships per the small-business budget); a reassessment re-performs the discipline (the full FRA product at its bands). Drift between them is the failure mode: decade-old assessments 'reviewed' annually into fiction — reviewers noting changes the document never absorbs (re-assessment triggers ignored in writing, the worst record to leave). Records expectations: review entries dated with findings (even 'no material change' — evidenced currency being the point per the recorded-FRA law), reassessments versioned with change logs, action plans living documents (completion evidence attached — the file's beating heart). The relationship model serves here above all: assessors holding your triggers (notified of works, incidents, changes through the service rhythm — our package clients' default) review meaningfully where transactional paper ages silently. Currency is the compliance — the date on the cover is just its symptom.

Frequently Asked Questions

Is an annual FRA review legally required?
'Regularly' is the statute; annually is the profession's floor for active premises (and what inspectors expect to see evidenced). Trigger-responsiveness matters more than anniversaries — both, ideally.
Can we review our own FRA between professional visits?
In-house reviews (walked, dated, recorded) have real value on competent templates — with professional reviews/reassessments at the profiled cycle and triggers (the in-house/professional division every regime draws).
We've had no changes for three years — reassess anyway?
Stable premises stretch reassessment intervals legitimately (the table's outer bands) — but 'no changes' itself needs evidencing via dated reviews, and external-knowledge triggers (guidance evolution) still bite. Three years silent is a gap, not stability.
Who should hold the review calendar?
The responsible person owns it; service relationships operationalise it (assessor/provider reminders, trigger-notification habits — the chase-free model). Calendars that live in one departing manager's head are how currency dies.

Need help from a professional installer?

We install and maintain fire and security systems across Bedfordshire, Hertfordshire and London — with fixed written quotes, a 36-month warranty, and certification your insurer will accept.

Request a free survey

Free site visit · No obligation · Response within 24 hours

No spam. We'll only use these details to respond to your enquiry.

Want us to quote for remedials or any other works? Email your specifications or requirements to info@dcsecurity.co.uk — the inbox is monitored daily.

24-hour response
SSAIB-certificated for CCTV, intruder alarms and access control
500+ commercial clients