Fire Risk Assessment vs Risk Assessment: What UK Employers Need to Know

Employers regularly ask whether a fire risk assessment and a general workplace risk assessment can be merged into a single document. The short answer is no. They sit under different laws, cover different hazards, and are tested against different standards by inspectors and enforcing authorities. Treating them as one rarely holds up under scrutiny.

The confusion is understandable. Both are risk assessments. Both are written records. Both name hazards, controls and actions. But the legal basis, the competence expected of the assessor, and the depth of analysis required are not the same. This is where most fire risk assessment vs risk assessment debates fall apart in practice.

What follows is a practical breakdown of how the two assessments differ, where employers commonly get it wrong, and what a defensible position actually looks like when a fire officer, HSE inspector or insurer asks to see the paperwork.

The Short Answer: Two Separate Assessments Under Two Separate Laws

A fire risk assessment is a specific legal requirement under the Regulatory Reform (Fire Safety) Order 2005. A general workplace risk assessment is required under the Management of Health and Safety at Work Regulations 1999. Different statute, different responsible duty holders in some buildings, different scope, different evidence expected.

You need both. One does not replace the other, and a single combined document almost always fails to satisfy either obligation properly. Fire officers want to see a focused fire safety document that addresses ignition sources, fuel, occupants, means of escape, detection, warning, firefighting equipment, structural protection and management arrangements. HSE inspectors want to see broader hazard analysis covering everything from slips and trips to manual handling, hazardous substances, work equipment, occupational health and lone working.

The two assessments overlap in some places, particularly around emergency procedures and staff training, but the bulk of their content sits in different territory. Trying to compress both into a single template usually produces a document that is too shallow on fire and too narrow on general health and safety to be credible in either direction.

The Legal Basis Behind Each Assessment

The two assessments come from different parts of the regulatory framework, and that distinction matters when something goes wrong.

Understanding the distinction in a fire risk assessment vs risk assessment is essential for duty holders who must comply with both the Regulatory Reform (Fire Safety) Order 2005 and broader health and safety legislation.

Further guidance can be found in the fire safety legislation guidance.

Under the Regulatory Reform (Fire Safety) Order 2005, the responsible person for any non-domestic premises must carry out and regularly review a fire risk assessment. The Order replaced the old Fire Certificate regime and shifted responsibility firmly onto the person in control of the premises. In multi-occupied buildings, more than one responsible person may exist, and where common parts are involved there are additional duties on landlords and managing agents. The fire and rescue authority enforces the Order, with prohibition notices, enforcement notices and prosecution available where serious failures are found.

Under the Management of Health and Safety at Work Regulations 1999, every employer must make a suitable and sufficient assessment of the risks to the health and safety of employees at work and to persons not in their employment arising out of or in connection with the work activity. This is a broader duty, sitting under the Health and Safety at Work etc. Act 1974. The HSE or, in some sectors, the local authority enforces it. Self-employed workers have similar duties where their work could affect others.

A few practical points follow from this split:

• The enforcing authority is different, so the inspectors looking at each assessment have different specialisms and different expectations.
• The legal tests are worded differently. The Fire Safety Order talks about identifying fire hazards, persons at risk and the steps needed to remove or reduce risk. The Management Regulations talk about a suitable and sufficient assessment.
• The duty holder is not always the same person. A landlord may be the responsible person for fire safety in common parts while individual tenants remain the employer responsible for general workplace risk in their own demise.

Where you have a sole-occupier commercial premises with one employer, the two duties often sit with the same person. That is the simplest scenario. In mixed-use buildings, serviced offices, leased units, shared workshops and multi-tenanted estates, the position is more nuanced and a combined document tends to obscure rather than clarify who is responsible for what.

When comparing fire risk assessment vs risk assessment, the former focuses specifically on fire hazards, ignition sources and evacuation procedures, whereas the latter covers a wider range of workplace risks.

Scope: What a Fire Risk Assessment Actually Covers

A competent fire risk assessment is a structured analysis of the building, its occupants, its contents and the management arrangements that keep fire risk under control. The PAS 79 methodology, widely used in the UK, gives a useful indication of the depth expected, but the Order itself does not mandate a specific format.

A credible fire risk assessment will examine:

• ignition sources, including electrical equipment, hot works, smoking, cooking, heating, arson risk and process-specific sources
• fuel sources, including stored materials, packaging, furniture, waste accumulation and combustible building elements
• structural fire protection, including compartmentation, fire doors, fire stopping, cavity barriers and protected escape routes
• means of escape, travel distances, exit widths, signage, emergency lighting and final exits
• fire detection and alarm arrangements, including coverage, category, maintenance and false alarm management
• firefighting equipment, extinguisher provision, hose reels where relevant and access for the fire service
• occupant profile, including numbers, vulnerability, sleeping risk, lone working and visitors
• management arrangements, including training, drills, fire marshals, evacuation plans and personal emergency evacuation plans where needed
• maintenance records for fire safety systems and the competence of those carrying out checks

It also has to identify significant findings and an action plan with realistic timescales. A common failure is producing a long descriptive document with no prioritised actions and no owner allocated to each item. That looks thorough on the page but provides no evidence the responsible person is actually managing fire risk over time.

The assessment should be specific to the building. Generic template content lifted from a previous site is one of the clearest signals a fire officer will pick up on. If the document refers to a sprinkler system that does not exist, lists fire doors in rooms that have been removed, or describes an escape route that has since been blocked off, the assessment is no longer suitable and sufficient regardless of how recently it was dated.

Many UK employers struggle with documentation requirements for fire risk assessment vs risk assessment, often unaware that each demands its own review schedule and competent assessor.

Scope: What a General Workplace Risk Assessment Covers

The general workplace risk assessment covers everything the employer’s activity exposes people to, with the obvious exception of fire safety, which is dealt with separately. In a typical commercial setting this includes a wide range of hazards that have nothing to do with ignition or evacuation.

A suitable and sufficient assessment will normally address:

• slips, trips and falls, including floor surfaces, housekeeping and external areas
• manual handling, in line with the Manual Handling Operations Regulations 1992
• display screen equipment and workstation set-up
• hazardous substances under COSHH 2002, including cleaning chemicals, process substances and biological agents where relevant
• work equipment and machinery, including guarding, maintenance and competence to use it
• electrical safety, including portable appliance arrangements and fixed installation testing
• working at height where relevant
• noise and vibration where exposure levels indicate
• lone working, violence and aggression, and personal safety arrangements
• young persons, new and expectant mothers and other groups requiring specific consideration
• contractors on site and how their activities are controlled
• welfare arrangements, first aid and incident reporting under RIDDOR 2013

The Management Regulations require the assessment to be reviewed when it is no longer valid or when there has been a significant change. They also require employers with five or more employees to record the significant findings in writing.

The depth of analysis varies. A small office may have a relatively short assessment with proportionate controls. A manufacturing site, care home, food production facility or laboratory will need substantially more detail, often with separate task-specific assessments sitting underneath the overall document.

Where activities involve specific regulations, those regulations effectively expand what the general risk assessment must address. COSHH assessments, manual handling assessments, DSE assessments and noise assessments are all part of the wider risk assessment landscape, even if they sit as separate documents in the safety management system.

Why a Single Combined Document Usually Fails Inspection

The temptation to merge the two is obvious. One document is easier to maintain, easier to circulate and easier to find when an inspector asks for it. In practice, the combined approach rarely survives serious scrutiny, and there are several reasons why.

The first problem is depth. A genuinely suitable fire risk assessment for a commercial building usually runs to many pages of structured analysis, with photographs, plans and a clear action register. A suitable and sufficient general risk assessment for the same building will also be substantial. Stitching them together either produces a very long hybrid that is difficult to use, or, more commonly, a thinner document that has lost the detail needed in both areas.

The second problem is methodology. Fire risk assessments follow a recognisable structure. Inspectors expect to see ignition and fuel addressed, occupant profile considered, means of escape analysed and management arrangements covered. General workplace risk assessments are usually task-based or hazard-based and look quite different. Forcing both methodologies into the same template tends to weaken both.

The third problem is competence. The person carrying out a fire risk assessment needs to understand fire dynamics, compartmentation, detection categories, escape design and management practice. The person carrying out a general workplace risk assessment needs broader health and safety knowledge across many disciplines. These competencies overlap but are not the same. A combined document signed off by one person often exposes gaps in one area or the other.

The fourth problem is review. Fire risk assessments are usually reviewed on a different cycle to general risk assessments, particularly where building works, occupancy changes or near-miss events occur. A combined document forces a single review trigger and can lead to whole sections becoming stale because the rest of the document still looks recent.

The fifth problem is enforcement. When the fire and rescue service requests a fire risk assessment, they want a focused fire document. When the HSE or local authority requests the workplace risk assessment, they want broader hazard analysis. Producing the same hybrid document for both requests rarely impresses either. Inspectors are familiar with combined templates and tend to read them as evidence that the duty holder has not properly engaged with either obligation.

None of this means the two assessments should sit in isolation. They should cross-reference each other, share consistent emergency procedures and align on training, communication and management arrangements. But the documents themselves should remain separate, each doing its own job properly.

Who Is Responsible for Each Assessment

Responsibility is one of the areas where employers most often get caught out, particularly in multi-occupied buildings.

Under the Fire Safety Order, the responsible person is the employer where the workplace is under their control, or the person who has control of the premises in connection with a trade, business or other undertaking. In practical terms, the responsible person for fire safety could be:

• the employer for the parts of the building under their direct control
• the landlord, owner or managing agent for common parts, plant rooms, risers and shared escape routes
• a head tenant where the lease assigns control of additional areas
• multiple responsible persons in the same building, each with duties for their own area and a duty to cooperate with the others

For the general workplace risk assessment, the duty sits squarely with the employer in respect of their own employees and anyone affected by their activities. There is no equivalent shared responsible person concept under the Management Regulations. If you employ people, you assess the risks they are exposed to at work, full stop.

This is where combined documents create real problems. If a managing agent prepares a single document covering both fire safety in the common parts and general workplace risk for the tenants, the tenants still have their own statutory duty to assess workplace risk for their own employees. The agent’s document does not discharge that duty. Equally, a tenant’s own combined document cannot discharge the landlord’s fire safety duties for the common parts.

The cleanest position in a multi-tenanted building is for the landlord or managing agent to hold a focused fire risk assessment for the building structure and common parts, for each tenant to hold their own fire risk assessment for their demise and their own general workplace risk assessment for their activities, and for the documents to reference each other where the boundaries meet.

Competence, Review Triggers and Record Keeping

Both assessments have to be carried out by someone competent, and both have to be reviewed when circumstances change. The detail of how this works in practice differs.

For fire risk assessments, the Fire Safety Order does not prescribe specific qualifications, but the responsible person must appoint a competent person where they do not have the necessary expertise themselves. In practice, this usually means an assessor who can demonstrate relevant training, membership of a recognised body such as the Institution of Fire Engineers or the Institute of Fire Safety Managers, and experience appropriate to the building type. Higher-risk premises, sleeping accommodation, healthcare settings and complex industrial sites warrant more experienced assessors.

For general workplace risk assessments, competence is again not defined by a single qualification. The expectation is that the assessor understands the work, the hazards, the relevant legislation and the principles of risk control. NEBOSH-qualified safety practitioners, chartered members of IOSH and specialists in particular hazards such as occupational hygiene are common assessors at the more complex end. For simpler premises, an internal competent person supported by external advice often works well.

Review triggers should be built into both documents. For fire risk assessments, review should happen:

• at a defined interval, typically annually for most commercial buildings, more frequently for higher-risk premises
• after any fire or near-miss
• after building works, layout changes, occupancy changes or changes in process
• where the existing assessment is no longer valid for any reason

For general workplace risk assessments, review is required when the assessment is no longer valid or there has been a significant change. In practice, an annual review with interim updates after specific changes is a sensible default for most employers.

Record keeping should be straightforward. The current assessment, the previous version, the action plan with closed and open items, evidence of completed actions, and a clear audit trail of reviews and updates. Inspectors look for an assessment that is alive and being used, not a document sitting in a folder that nobody has opened since it was written.

Common record keeping failures include action plans with no completion dates, completed actions that are not signed off or evidenced, review dates that have passed with no update, and old versions overwriting new ones in shared drives so nobody is sure which document is current.

When to Bring in a Professional

Plenty of employers carry out their own general workplace risk assessments perfectly well, particularly for low-complexity premises with a small workforce. Fire risk assessments tend to require external support more often, because the technical depth around compartmentation, detection design, escape strategy and management arrangements is harder to cover from in-house knowledge alone.

External support is usually worth considering where:

• the building has sleeping risk, vulnerable occupants or complex layout
• recent works have changed the structure, layout or occupancy
• the existing assessment is generic, undated or signed off by someone with no clear competence record
• a fire officer has raised concerns or issued informal feedback
• an insurer, lender or prospective tenant has asked for evidence
• the responsible person is new to the building and inherited documents they cannot verify
• activities have changed significantly, particularly involving hot works, chemical storage, high-pile storage or production changes
• the business is preparing for acquisition, refinancing or lease renewal where due diligence will examine compliance records

For general workplace risk assessments, external input is often most valuable where specific hazards need specialist analysis. Manual handling in care settings, noise and vibration in manufacturing, COSHH for complex chemical exposure, machinery safety, ergonomic redesign and occupational health programmes all benefit from people who do that work regularly.

A sensible position for most employers is to maintain an in-house safety management system supported by external specialists for fire and for any technical health and safety areas that sit beyond internal competence. The combination usually produces stronger documents, better action plans and a more defensible position when something goes wrong.

One practical observation: the documents that fail most often under scrutiny are not the ones written by inexperienced assessors. They are the ones that have been left to drift. A reasonable assessment from three years ago, with no review, no updated action plan and no acknowledgement of changes since, looks worse to an inspector than a shorter but current document that shows active management.

If you are an employer, landlord or managing agent who needs a defensible position on both fire safety and broader workplace risk, Acorn Safety Services can carry out site-specific fire risk assessments and general health and safety assessments that stand up to inspection, identify the gaps in any inherited documents, and give you a clear action plan with realistic priorities. Contact us to talk through the specifics of your premises, or Get a quote for the work you need.