Security and fire systems compliance in the UK

Who sets the requirements?

Compliance is two things working together: certification of the company that works on your systems, and the system itself meeting the standards that apply to it. Four organisations sit behind most of what a UK site is measured against.

• NSI — National Security Inspectorate — a UKAS-accredited certification body that inspects security and fire safety companies against British and European standards. NSI approval is one of the two routes police forces and insurers recognise for monitored alarms and CCTV.
• SSAIB — Security Systems and Alarms Inspection Board — the other UKAS-accredited certification body for security and fire systems in the UK, widely used by independent and regional installers. Its approval carries the same weight with police and insurers.
• BAFE — British Approvals for Fire Equipment — runs the third-party certification schemes for fire protection: SP203-1 for fire detection and alarm systems, SP203-2 for emergency lighting, SP203-3 for fixed extinguishing systems, and SP101 for portable fire extinguishers.
• FIA — Fire Industry Association — the fire sector trade body that publishes the guidance used to interpret BS 5839 and BS 5306, and represents certificated fire companies.
• Check the certificate itself — certification covers a company for a specific scope. Ask for the certificate and confirm it names the system type and the activities you are relying on — design, installation, commissioning or maintenance.

Intruder and hold-up alarms

Intruder alarms are graded by risk and must be maintained to keep their police response. The relevant standards are PD 6662 and BS EN 50131-1 for the system, BS 8243 for confirmed alarms, BS 9263 for maintenance and BS EN 50136 for signalling.

• System grading (PD 6662 / BS EN 50131-1) — systems are graded 1 to 4 against the risk at the site. Grade 2 is the norm for homes and small commercial premises, Grade 3 for higher-risk or higher-value sites. The grade sets the tamper protection, detection performance and signalling expected.
• Confirmed alarms (BS 8243) — to keep a police response, the system must be configured so an alarm is only passed to the police once two independent detectors confirm an intrusion within a set period, rather than on a single detector.
• Police URN — the unique reference number your alarm receiving centre quotes when calling the police. A force issues one only where the installing company is certificated and the system meets the standards.
• Maintenance (BS 9263) — an annual service and test by a competent engineer, with the results recorded. A system that is not maintained will normally lose its police response and its insurance recognition.
• Signalling (BS EN 50136) — the transmission path and the alarm receiving centre monitoring your system must also meet the standards. It is worth asking which centre monitors your alarm and how it signals.
• Sounder cut-off — an audible alarm must stop after 20 minutes, with a visible indication at the property that the system has operated. A sounder running longer than that usually points to a fault.

CCTV and video surveillance

Video surveillance has both a technical and a data protection side. BS EN 62676 covers how the system is designed and installed, BS 8418 applies where the system is remotely monitored, and UK GDPR governs what you may record and for how long.

• System design and installation (BS EN 62676) — covers camera selection, coverage, recording quality and the identification of what each camera is there to achieve, from detection through to evidential quality images.
• Remotely monitored CCTV (BS 8418) — applies where a monitoring centre watches detector-activated video and can audio-warn or escalate, and sets how the system must be configured and managed.
• Data protection (UK GDPR, DPA 2018 and the ICO code) — you need a lawful basis for recording, clear signage, a defined retention period, a way to handle subject access requests, and a data protection impact assessment for larger systems.

Access control

Electronic access control is covered by BS EN 60839-11, which sets out how systems are designed, installed and operated, including grades and environmental classes matched to the site.

• Grade and environment (BS EN 60839-11) — the system, readers and controllers are selected to the grade of the site and the environment they sit in, so external doors and plant rooms are not fitted with equipment intended for an office interior.
• Fail safe or fail secure — each door must be configured deliberately so that its behaviour on power loss and on a fire alarm is known, documented and safe for the escape route it serves.
• Fire alarm interface (BS 7273-4) — doors on escape routes must release on a fire alarm in line with BS 7273-4, which sets out the categories of release and the monitoring needed.

Fire detection and alarm systems

Fire alarm design is driven by the fire risk assessment, not by the size of the building alone. BS 5839-1 covers non-domestic premises, BS 5839-6 covers domestic premises, and BAFE SP203-1 is the certification scheme for the companies that design, install, commission and maintain them.

• System category (BS 5839-1) — the risk assessment sets the category: L1 to L5 where the aim is protecting life, P1 or P2 where the aim is protecting property. The category determines how much of the building is covered and how it is detected.
• Domestic premises (BS 5839-6) — sets out grades A to F and the coverage needed for different housing types, from a single mains-powered smoke alarm through to a full system with detection in every room.
• Certification (BAFE SP203-1) — the scheme covers design, installation, commissioning and maintenance, and each part is certified separately. Confirm the certificate covers every stage you are relying on.
• Records and documentation — the responsible person under the Fire Safety Order 2005 must keep records: commissioning and acceptance certificates, the logbook, weekly test records and the zone plan held at the panel.

Emergency lighting and fire extinguishers

Escape routes, open areas and high-risk rooms need lighting that works when the mains supply fails, and portable extinguishers need to be the right type, in the right place, serviced on time.

• Emergency lighting (BS 5266-1 and BS EN 1838) — covers the design and the routine that keeps it working: monthly function tests, an annual duration test, and records of both. BS 5266-8 covers the testing and maintenance regime in detail.
• Emergency lighting certification (BAFE SP203-2) — the certification scheme for companies designing, installing, commissioning and maintaining emergency lighting.
• Fire extinguishers (BS 5306-3 and BS 5306-8) — BS 5306-8 covers selecting and positioning extinguishers for the risks present, and BS 5306-3 covers servicing — an annual basic service plus extended servicing at the intervals the standard sets.
• Extinguisher certification (BAFE SP101) — the scheme for companies servicing portable fire extinguishers, which is the certificate to ask for from your extinguisher contractor.

What a system audit and documentation report covers

An audit turns all of the above into evidence about your own site. It is carried out as a five-stage process: assess what is installed, detail it device by device, identify design faults against your operational requirements, recommend repairs or replacements in priority order, and set out the upgrades worth planning.

The completed report records the certification position for each system against the requirements in this guide, marks each one compliant, requiring action or not applicable, and gives you a document you can hand to insurers, a facilities team or an incoming contractor.