Fire Risk Assessment Tracking: What Every Building Manager Must Document

TL;DR: Every action from your fire risk assessment must be documented with a clear owner, deadline, evidence of completion, and a dated audit trail. This isn't optional — it's what the Building Safety Regulator will ask for when they request your Safety Case Report. Here's exactly what to track and how to organise it.

Download the BSA compliance checklist →

#If the BSR Asks for Your Records Tomorrow, Can You Produce Them?

That's the test. Not whether you had a fire risk assessment done — but whether you can show exactly what actions came out of it, who was responsible, what evidence proves completion, and when each step happened.

Every fire risk assessment produces action items: fix the fire door on level 3, replace the emergency lighting in the stairwell, clear the combustible storage from the bin room. Each of those actions needs to be tracked from identification through to verified completion. Not in your head. Not in an email thread. In a documented, auditable system.

Under the Building Safety Act 2022, the Principal Accountable Person must demonstrate that building safety risks are being actively managed. Your fire risk assessment action tracking is the primary evidence for that. The BSR's guidance on safety case reports reinforces that you must show ongoing management of fire risk, not just a one-off assessment.

#What You Must Document for Every Fire Risk Assessment Action

For each action item from your fire risk assessment, record:

#1. The hazard and required action

What was found, where it was found, and what needs to be done about it. Be specific: "Fire door on Level 3, Flat 12 corridor — self-closer mechanism failed, door does not close fully" is useful. "Fix fire door" is not.

#2. Priority and due date

Not every action is equally urgent. A failed fire door closer on an escape route is more pressing than repainting a faded fire action notice. Assign a priority level and a concrete due date — not "as soon as possible" but "by 15 April 2026".

#3. Who is responsible

Every action needs a named owner. This might be your in-house maintenance team, an external contractor, or a specialist fire safety company. Record both the organisation and the individual where possible.

For contractor-assigned work, you need a way for them to confirm completion. Chasing contractors by email and then manually updating a spreadsheet is how things fall through the cracks.

#4. Evidence of completion

This is where most building managers' tracking falls apart. An action isn't complete because someone says it's complete. It's complete when you have evidence:

• Photographs of the remediated hazard
• Test certificates (for fire alarms, emergency lighting, dry risers)
• Contractor completion reports with dates and sign-off
• Inspection records confirming the work meets the required standard

Every piece of evidence should be linked directly to the specific action it relates to. A folder of unsorted photos is not an audit trail.

Read the complete Golden Thread guide →

#5. Status history and audit trail

The BSR doesn't just want to see the current status. They want to see the journey: when was this action created? When was it assigned? When did the status change? Who changed it? This is your Golden Thread in action — an unbroken chain of dated, attributed records.

If you're using spreadsheets, this is nearly impossible to maintain reliably. Every manual edit overwrites the previous state. There's no automatic timestamp, no record of who made the change, and no way to prove the history hasn't been altered.

#6. Link back to the source fire risk assessment

Every action must trace to the specific fire risk assessment that generated it. The BSR wants to see a clear chain: this assessment found these hazards, which generated these actions, which were completed with this evidence. Break that chain and you've broken the Golden Thread.

#The Six Records That Form Your Fire Risk Assessment Audit Trail

Here's a concrete checklist. For every fire risk assessment action, you should be able to produce:

• The original fire risk assessment report — the source document identifying the hazard
• The action record — description, location, priority, due date, reference back to the assessment
• Assignment record — who was tasked, when they were notified, any instructions given
• Progress updates — dated status changes with the name of who updated them
• Completion evidence — photos, certificates, or reports uploaded by the person who did the work
• Sign-off record — confirmation that the building manager reviewed the evidence and accepted the action as complete

If any of these six are missing, you have a gap in your Golden Thread.

#Common Mistakes That Create Compliance Gaps

Tracking actions in email. An email saying "please fix the fire door" is not a tracked action. It has no status, no due date, no evidence attachment, and no audit trail. When the BSR asks for your records, you'll be searching through thousands of emails.

Marking actions complete without evidence. "The contractor said it's done" is not evidence. If you can't show a photo, certificate, or report, the action isn't verifiably complete.

Losing track of overdue items. Without a system that flags overdue actions automatically, items slip past their due dates unnoticed. An overdue fire risk assessment action on a fire escape route is a serious compliance risk — and potentially a mandatory occurrence if it leads to an incident.

No link between the assessment and the actions. Your actions should trace back to the specific fire risk assessment that generated them. The BSR wants to see: this assessment found these hazards, which generated these actions, which were completed with this evidence. Break that chain and you've broken the Golden Thread.

Allowing anyone to edit without attribution. If a record can be changed without logging who changed it and when, it has no evidentiary value. The BSR requires records that demonstrate integrity — the Higher-Risk Buildings (Keeping and Provision of Information etc.) (England) Regulations 2024 set out specific requirements for how building safety information must be stored and maintained.

See how Brocade tracks fire risk assessment actions →

#How This Fits Into Your Safety Case

Your Safety Case Report is the document that proves your building is safely managed. Fire risk assessment action tracking is one of its most important inputs.

When the BSR requests your Safety Case Report — and they can do this at any time since October 2024 — they expect to see:

1. A current fire risk assessment
2. Evidence that actions from that assessment are being tracked
3. Completion rates and timelines
4. An audit trail showing ongoing management, not a one-off exercise

A building with 40 fire risk assessment actions where 35 are complete with evidence, 3 are in progress with contractors assigned, and 2 are overdue with escalation records demonstrates active management. A building with a spreadsheet that was last updated three months ago does not.

Read the Safety Case Report guide →

#Fire Door Checks: A Specific Requirement Worth Noting

Since January 2023, the Fire Safety (England) Regulations 2022 require:

• Quarterly checks on all fire doors in individual flats
• Annual checks on all fire doors in common areas

These regulations were introduced following the Grenfell Tower Inquiry Phase 1 recommendations. Each check is effectively a mini-assessment that may generate its own actions. A door that doesn't self-close properly, a damaged intumescent strip, a missing cold-smoke seal — each of these becomes a tracked action with the same documentation requirements as any fire risk assessment item.

If your building has 50 flats, that's 200 flat-door checks per year plus common area doors. Tracking these on paper or in a spreadsheet becomes unmanageable quickly.

#Building Your System

You have two realistic options for fire risk assessment action tracking at scale:

Option 1: Structured spreadsheet. Workable for a single building with fewer than 20 active actions. You'll need columns for every field listed above, disciplined version control, and a separate evidence filing system. The audit trail will be manual and fragile.

Option 2: Purpose-built compliance platform. Designed for this exact workflow. Actions are created from the fire risk assessment, assigned to contractors who upload evidence directly via secure links, status changes are timestamped and attributed automatically, and the audit trail is tamper-evident. This is what the BSR expects from higher-risk buildings managing dozens or hundreds of actions.

Brocade is built specifically for this. Every fire risk assessment action gets a complete lifecycle — creation, assignment, contractor evidence upload, status tracking with automatic audit events, and a checksum-verified record chain. Contractors receive a secure link and upload evidence directly against the specific action without needing a login.

But regardless of which approach you choose, the documentation requirements are the same. The BSR doesn't care about your tools. They care about your records.

#Your Fire Risk Assessment Tracking Checklist

Use this to audit your current system:

• Every fire risk assessment action has a written description, location, and priority
• Every action has a named owner (person or organisation)
• Every action has a concrete due date
• Overdue actions are flagged and escalated
• Completion evidence (photos, certificates) is linked to the specific action
• Every status change is dated and attributed to a named person
• Actions trace back to the source fire risk assessment document
• Fire door check actions are tracked separately per the 2022 Regulations
• Records are maintained as part of your building's Golden Thread
• Your system can produce a complete action history on request

If you can tick all ten, you're in good shape. If not, you know where the gaps are.

#Questions

#How often should I review my fire risk assessment action tracking?

Review your action list at least monthly. Check for overdue items, chase outstanding contractor work, and verify that completed actions have proper evidence attached. A quick monthly review prevents small gaps from becoming BSR-visible problems.

#What if my fire risk assessment was done before the Building Safety Act?

The tracking requirements still apply. If you have an existing fire risk assessment with outstanding actions, get them into a tracked system now. The BSR won't accept "this predates the Act" as a reason for incomplete records.

#Do I need to track actions for buildings under 18 metres?

The Building Safety Act's full requirements apply to higher-risk buildings (7+ storeys or 18m+). However, the Regulatory Reform (Fire Safety) Order 2005 applies to all buildings with common areas. Good fire risk assessment tracking is best practice regardless of height.

#Can I delete old or cancelled fire risk assessment actions?

Never permanently delete action records. If an action is no longer relevant (for example, the building layout changed), mark it as cancelled with a dated reason. Your audit trail should show why it was cancelled and by whom. Deletion destroys your Golden Thread.

#Further Reading

• Golden Thread Building Safety: The Complete Guide — what information you must maintain and how
• Safety Case Report: How to Prepare for BSR Assessment — how fire risk assessment tracking feeds into your safety case
• BSA Compliance Checklist — full checklist of Building Safety Act obligations
• PAP Responsibilities Guide — your legal duties as Principal Accountable Person
• PEEPs Deadline April 2026: 5 Steps to Get Ready Now — another upcoming compliance deadline to prepare for
• See the full compliance calendar →

This guide is for informational purposes. For building-specific advice, consult a qualified fire safety professional.

Get regulatory updates delivered monthly →