Commercial Fire Alarm Maintenance: What the Law Actually Requires (And Where Most Premises Fall Short)

Picture this: a fire and rescue officer arrives for a routine audit. The panel's clean. No faults showing.

Then they ask for the logbook.

That's often where things can get complicated.

According to the Ministry of Housing, Communities and Local Government (MHCLG), fire and rescue services in England carried out 51,020 Fire Safety Audits in the year ending March 2025. That's a 2.4% rise on the year before. Only 58% of those audits were rated satisfactory. That's the lowest proportion recorded since the year ending March 2011.

Somewhere in that gap sits maintenance. Article 17 of the Regulatory Reform (Fire Safety) Order 2005 (FSO 2005, the primary Fire Safety law covering non-domestic premises in England and Wales) is the provision that governs keeping Fire Safety equipment in working order. It was breached 8,666 times in the same period. Down 12% year-on-year, but still one of the most frequently breached provisions in the Order.

Most of those breaches don't start with a broken alarm. They start with a maintenance regime built on a misunderstanding of what "maintenance" actually means. Not just a single annual service call, that's insufficient. Instead, a structured, four-tier cycle, most of it happening quietly between engineer visits - backed by a logbook that has to hold up when someone asks to see it.

That's the maintenance issue this article explains.

The Big Picture

• The maintenance cycle has four tiers, not one. Weekly and monthly checks (tiers 1 and 2) are your job, in-house. Six-monthly professional visits (tier 3) - under BS 5839-1:2025 - are the compliant minimum. Quarterly (tier 4) is an uplift for higher-risk sites - not the default many people assume it is.
• BAFE SP203-1 (the modular third-party certification scheme covering Fire Detection and alarm systems) is not one badge. Design, installation, commissioning and maintenance are separate modules - ask which of these your contractor actually holds.
• Your logbook isn't paperwork. It's evidence. Under the 2025 edition of the standard, even deviations from the recommended approach now have to be recorded, not just the tests themselves.
• A properly conducted six-monthly visit includes things that are easy to skip quietly: a genuine battery load test, a false-alarm log review, a percentage of devices actually tested. Most Responsible Persons have no way to tell the difference - until now.
• Gaps in the record don't read as "probably fine." To an inspecting officer, an incomplete logbook looks a lot like maintenance that didn't happen at all.

What the Law Actually Requires - And What It Doesn't

FSO 2005 creates the legal duty. Article 17 requires that Fire Safety equipment - including the Fire Detection and alarm system - is "maintained in an efficient state, in efficient working order and in good repair." That duty sits with the Responsible Person: whoever has control of the premises, typically the employer, owner or occupier.

Here's what most guides skip past. The Order doesn't say how. It doesn't name BS 5839-1. It doesn't set testing frequencies, define system categories or describe what a service visit should include. FSO 2005 is deliberately outcome-based. It sets the destination. Not the route.

Article 9 fills part of that gap indirectly. It requires you to carry out a suitable and sufficient Fire Risk Assessment - and in practice, that assessment is what determines which system category your premises need (Category L for life safety, Category P for property protection, each with sub-categories from L1 to L5 and P1 to P2) and how demanding your maintenance regime has to be.

BS 5839-1:2025 (the current British Standard code of practice for Fire Detection and alarm systems in non-domestic premises, effective from 30 April 2025) is the recognised route. It isn't law. It's voluntary. But it's the benchmark that fire authorities, insurers and courts use when deciding whether a maintenance system counts as "suitable" - because it reflects what a competent professional would do. Depart from it without a documented, risk-assessed reason and you're defending your own judgement instead of pointing at an accepted standard.

This is an informational overview, not legal advice. Your Fire Risk Assessment and a competent Fire Safety professional should confirm exactly what applies to your premises.

(See Article 17 of the Regulatory Reform (Fire Safety) Order 2005 for the maintenance duty in full and BS 5839-1:2025 for the current code of practice.)

The Four-Tier Maintenance Cycle - Corrected

Most guides to this topic list "weekly, monthly, quarterly, annual" as if all four were universal legal minimums, applied in that order. That's not what BS 5839-1:2025 actually sets out - and getting the ownership and the universality of each tier wrong is where a lot of premises go quietly non-compliant.

Weekly - yours, not the engineer's

A named, competent person on-site tests one manual call point (in rotation, so the whole system gets covered over time) and confirms the signal reaches the panel and the ARC (alarm receiving centre - the monitoring station a signal is sent to), if one's fitted. They also check the panel visually for fault indicators. Recorded in the logbook. Not a service visit. Just a five-minute discipline that most premises still skip.

Monthly - still in-house

Same person, same logbook. Visual inspection of the panel for fault indicators, a check of the standby battery's charging status, confirmation that detectors and call points aren't obstructed and - where fitted - a check of any backup generator or vented battery arrangement.

Six-monthly, minimum - the professional visit

This is the tier competitors get wrong most often. BS 5839-1:2025 recommends an inspection and service visit by a competent engineer at intervals of approximately six months. A 5-7 month flexible window is built in around that midpoint, rather than a rigid six-month deadline.

Two six-monthly visits a year is the standard professional service cycle. There isn't a separate "annual full service" bolted on top - that's a misreading of the standard that shows up constantly in commercial guidance. Each visit should functionally test a proportion of devices (so the full estate gets covered across the year), load-test the standby battery rather than glance at it, check circuit integrity and verify the zone charts still match the building as it actually is. It should end with a written Inspection and Service Certificate - BS 5839-1's Annex G6 template - not a one-line visit slip.

Quarterly - an uplift, not a default

Quarterly visits are real. They're just not universal. BS 5839-1:2025 recommends them as a step-up for higher-risk or more demanding environments - large addressable systems, care homes, hospitals, sites with a high false-alarm rate, harsh or corrosive environments - where the site's own Fire Risk Assessment calls for closer attention. If your risk assessment doesn't identify that need, six-monthly is the compliant baseline. Being sold quarterly as "what the law requires" for every commercial premises is a sales pitch, not legislation.

What a Competent Visit Actually Covers - And What Gets Skipped

Most Responsible Persons can't tell a thorough 90-minute service visit from a 20-minute tick-and-flick. Both look identical from the outside: an engineer arrives, does something to the panel, leaves a slip, invoices you. The difference is in what actually happened - and it's checkable, if you know what to ask.

• Was the standby battery load-tested, not just glanced at? A load test draws real current from the battery and shows whether it would actually carry the system through a mains failure. A visual check only confirms the battery is there.
• Was the false-alarm log reviewed and acted on - not just noted? A recurring nuisance-alarm pattern should trigger investigation, not a shrug and a note in the file.
• Was a genuine percentage of devices functionally tested? Not walked past. Actually triggered, checked and logged.
• Did you receive a written service report or Inspection and Service Certificate? Not a one-line visit slip with a signature and a date.
• Were the zone charts checked against the building as it actually is? BS 5839-1:2025 expects this at every visit, not just after a refurbishment.

If the answer to more than one of those is "I don't know," that's worth raising with your provider before the next visit, not after an audit.

BAFE SP203-1: Check the Module, Not Just the Badge

BAFE SP203-1 gets treated as a single undifferentiated badge in almost every piece of guidance on this topic. It isn't one. It's a modular third-party certification scheme covering Fire Detection and Fire Alarm Systems, assessed against BS 5839-1 - and design, installation, commissioning and maintenance are separately certifiable modules.

That matters because a company can be BAFE SP203-1 Registered for installation and hold no maintenance certification at all. Registration in one module isn't automatically implied by another. If you're checking a contractor's credentials for an ongoing maintenance contract, ask to see the Maintenance module certificate specifically - not just any BAFE SP203-1 paperwork.

BAFE registers companies, not individuals. "BAFE SP203-1 Registered" is the correct term for a company's status - there's no such thing as a "BAFE-certified engineer." The engineers doing the actual testing should hold their own individual qualifications too, commonly an FIA (Fire Industry Association) Level 3 qualification or an ECS FESS (Electrotechnical Certification Scheme, Fire, Emergency and Security Systems) card. That's a separate credential from the company's BAFE registration. One doesn't substitute for the other.

BAFE licenses UKAS-accredited certification bodies - including NSI, SSAIB, BSI and NICEIC - to audit companies against the scheme. Different bodies, same underlying standard.

Jonathan O'Neill, Managing Director of the Fire Protection Association, has said that "third party certification is the only way to guarantee the competence of installers and fire safety practitioners." In practice, third-party certification is widely recognised as the strongest, most defensible evidence of competence - even though competence in law can, in principle, also be demonstrated in other ways. (BAFE.)

The Logbook: Your Evidentiary Defence, Not Paperwork

Every competitor guide says "keep a logbook." Almost none say what makes an entry actually defensible.

A logbook that holds up is legible, chronological and signed and dated by a named competent person - not initialled, not left blank "to fill in later." Faults and remedial actions should be cross-referenced through to closure, not just logged and forgotten. And under the 2025 edition of BS 5839-1, deviations from the standard's recommendations - an unusual device placement, a compromise agreed with the fire risk assessor - now have to be recorded in the logbook itself. They can no longer be left as an unwritten exception someone remembers.

Record-keeping isn't just good practice here - it's a standalone statutory duty in its own right. Section 156 of the Building Safety Act 2022 (BSA 2022, in force from 1 October 2023) requires the Responsible Person to record the Fire Risk Assessment and the Fire Safety arrangements for the premises, in full. Worth noting: BSA 2022 is a distinct regime from FSO 2005, built primarily around higher-risk residential buildings and a separate "Accountable Person" duty. For ordinary commercial premises, FSO 2005 remains the primary law and s.156's record-keeping requirement sits alongside it rather than replacing it.

Why does the paper trail matter this much? Because in an audit or enforcement context, a working alarm with a patchy logbook doesn't read as "probably fine." It reads as maintenance that might not have happened at all - and the burden of proving otherwise falls on you. MHCLG's own figures bear that out: 18,351 informal notifications were issued in England in the year ending March 2025, alongside 2,972 formal notices - enforcement, prohibition and alteration notices combined - up 5.3% year-on-year. Most enforcement starts quietly, as an informal conversation. It escalates when the gaps, including the paperwork gaps, don't get closed.

What Happens When the Records Aren't There

Three recent cases show what that escalation actually looks like.

Hind Wellingborough Ltd, a hotel operator, was fined £81,200 in total at Wellingborough Magistrates' Court in November 2024. Northamptonshire Fire and Rescue Service found the Fire Alarm System faulty - possibly since 2021 - during a May 2024 inspection and issued an enforcement notice. A September 2024 follow-up found the notice still hadn't been complied with. That's what triggered prosecution: not the original fault, but the failure to act on it. (Source: Northamptonshire Fire and Rescue Service.)

Fylde Fire Systems Limited - itself a Fire Alarm engineering company - was fined £50,725 in total at Blackburn Magistrates' Court in May 2025, for breaching Article 17 and related provisions at a 45-resident care home. The breaches led to a Prohibition Notice and an emergency relocation of residents. If a specialist Fire Alarm contractor can end up on the wrong side of Article 17, it's not a duty any commercial premises can treat as automatic. (Source: Lancashire Fire and Rescue Service.)

Directors of Care Pro (Southeast) Limited were fined a combined £124,455 at Brighton Magistrates' Court in 2024, after East Sussex Fire and Rescue Service found defective or missing Fire Alarm Systems across four Bexhill-on-Sea care homes. That penalty landed personally, on named individuals - not just the company. (Source: Fire Industry Association.)

None of these started with a fire. They started with an inspection that found the maintenance regime didn't match what the law and the standard require.

Before You Go

Compliant Fire Alarm maintenance isn't complicated once the four tiers are separated out correctly. It's weekly and monthly checks you own in-house, a six-monthly professional visit as the compliant minimum and quarterly only where your risk assessment genuinely calls for it. Every visit - and every deviation - recorded, signed and dated. Most enforcement starts as an informal conversation, as the figures above show - closing gaps at that stage is a documentation exercise; closing them after a formal notice is not.

A few places to start:

• Pull your logbook and check the last four entries against the checklist above. Gaps are more common than most Responsible Persons expect.
• Ask your current maintenance contractor which BAFE SP203-1 modules they actually hold - and ask to see the Maintenance one specifically.
• Check your last service report. If it's a one-line slip rather than a proper Inspection and Service Certificate, that's a conversation worth having before your next audit, not after.

A short review of your maintenance logbook against these four tiers will surface the obvious gaps quickly. Where gaps exist, a BAFE SP203-1 Registered provider holding the Maintenance module can usually close them within a single visit cycle - leaving a logbook that holds up the next time an officer asks to see it.

Frequently Asked Questions

How often is a commercial Fire Alarm System legally required to be serviced?

FSO 2005 Article 17 requires Fire Safety equipment to be maintained in efficient working order, but it doesn't set a testing frequency, because the Order is deliberately outcome-based. BS 5839-1:2025 is the recognised route: two six-monthly professional visits a year, with a 5-7 month flexible window between them, is the compliant baseline for most premises. Weekly call-point tests and monthly checks happen in-house between those visits. Quarterly visits are only required where a Fire Risk Assessment identifies elevated risk, such as large addressable systems, care homes, hospitals or a high false-alarm rate. Presenting quarterly as a universal legal minimum for every commercial premises is inaccurate.

What's the difference between the weekly in-house test and a six-monthly professional service visit?

The weekly test is an in-house discipline: a named competent person tests one manual call point in rotation, confirms the signal reaches the panel and the ARC where fitted and checks the panel for fault indicators - a five-minute task, logged but not a service visit. The six-monthly professional visit is different in kind. An engineer functionally tests a proportion of devices across the estate, load-tests the standby battery by drawing real current rather than glancing at it, checks circuit integrity and verifies the zone charts against the building as built. It should end with a written Inspection and Service Certificate on BS 5839-1's Annex G6 template, not a one-line visit slip.

Does BAFE SP203-1 registration mean a contractor is qualified to maintain a Fire Alarm System?

Not automatically. BAFE SP203-1 is modular: design, installation, commissioning and maintenance are separately certifiable against BS 5839-1. A company can hold BAFE SP203-1 Registered status for installation and no maintenance certification at all, because registration in one module isn't implied by another. Ask a contractor specifically for the Maintenance module certificate, not general BAFE paperwork. BAFE registers companies, not individuals, so there's no such thing as a "BAFE-certified engineer" - the engineers carrying out the testing should separately hold an FIA Level 3 qualification or an ECS FESS card. UKAS-accredited bodies including NSI, SSAIB, BSI and NICEIC audit companies against the scheme on BAFE's behalf.

What has to be recorded in a Fire Alarm logbook to make it defensible?

A defensible logbook is legible, chronological and signed and dated by a named competent person, not left blank to fill in later. Every weekly test, monthly check and six-monthly service visit needs an entry, with faults and remedial actions cross-referenced through to closure rather than simply noted. Under the 2025 edition of BS 5839-1, deviations from the standard's recommendations - such as an unusual device placement or a compromise agreed with the fire risk assessor - must now be recorded in the logbook itself rather than left as an unwritten exception. Section 156 of the Building Safety Act 2022 separately requires the Responsible Person to record the Fire Risk Assessment and Fire Safety arrangements in full.

What happens if a Fire Alarm maintenance gap is found during an inspection?

Most enforcement starts as an informal conversation rather than a prosecution. MHCLG recorded 18,351 informal notifications in England in the year to March 2025, against 2,972 formal notices. It escalates when gaps, including paperwork gaps, aren't closed. Recent prosecutions show the pattern: a hotel operator was fined £81,200 after an enforcement notice for a faulty alarm went unaddressed for months and a Fire Alarm engineering company was fined £50,725 after breaches at a care home triggered a Prohibition Notice and an emergency relocation of residents. An incomplete logbook doesn't read as probably fine to an inspecting officer - it reads as maintenance that may not have happened and the burden of proving otherwise sits with the Responsible Person.

Is a Fire Risk Assessment the same as a Fire Alarm maintenance schedule?

No, the two are linked but distinct duties. Article 9 of FSO 2005 requires a suitable and sufficient Fire Risk Assessment and in practice that assessment determines which system category applies and how demanding the maintenance regime needs to be, including whether quarterly visits are justified. Article 17 is the separate duty to keep the installed equipment in efficient working order once that regime is set. BS 5839-1:2025 is voluntary, but it's the benchmark that fire authorities, insurers and courts use when judging whether a maintenance regime is suitable - departing from it without a documented, risk-assessed reason means defending your own judgement instead of pointing at an accepted standard.