Business Continuity and Fire Safety
Updated: Sep 4
Recovery Mode
An effective business continuity plan needs to consider a fire strategy, ensuring organisations can respond quickly should an incident occur. In this article we looks at how integrating ISO 22301 and ISO 45001 can enhance resilience.
The intersection of fire safety and business environment has never been more critical. With complex buildings, high-risk environments and extensive stakeholder involvement, ensuring safety while maintaining operational resilience is paramount. Fire incidents can result in devastating human, financial and reputational losses. Therefore, integrating robust fire safety strategies into a comprehensive business continuity framework, grounded in recognised standards, is necessary, not just best practice, for businesses in this landscape today.
Let’s explore how ISO 22301 (Business Continuity Management Systems) and ISO 45001 (Occupational Health and Safety Management Systems) can be practically implemented in a range of businesses in the construction and built environment sector. We will look at legal obligations, British Standard guidance, international standards and best practice strategies for enhancing organisational resilience, safeguarding lives and minimising downtime after fire-related events.
Business continuity, although not always a legal requirement, is supported by growing expectations from regulators, insurers and clients, especially so in higher-risk sectors. The Civil Contingencies Act 2004, while primarily focused on public bodies, underscores the national importance of continuity planning.
It’s vital that organisations seek competent advice on business continuity and review the need for in-house or external resource to develop and maintain continuity plans. They must also engage with insurers and regulators to align continuity planning with expectations and gain insights into risk mitigation.
ISO 22301: A Framework for Business Continuity
ISO 22301: 2019 provides a structured approach for developing, implementing and maintaining a business continuity management system (BCMS). It ensures that an organisation can properly plan to respond effectively to disruptive incidents, such as fires, and continue critical operations with minimal interruption to activities. Key components include:
Context of the organisation: Understand internal and external issues, interested parties and the scope of the BCMS. This can often be done through a PESTLE and SWOT analysis with input from key stakeholders.
Business impact analysis (BIA) and risk assessment: Identify essential functions, potential fire risks and the impact of disruptions. Other aspects, such as fire strategies, fire risk assessments, understanding the use of the building or local area crime rates can help develop this.
Continuity strategies and solutions: Develop plans for evacuation, relocation, remote working and communication, during and after a fire event. It is important that these are widely communicated with the relevant people, and that people are trained in the procedures and any equipment to be used.
Incident response structure: Establish teams with defined roles and responsibilities. Review this on a regular basis to take into consideration various factors such as workplace absences, changes in technology and so on.
Testing and exercising: Regular fire drills and business continuity exercises will ensure that the plans work, and people are aware of any follow-up action to take. It allows any gaps in the procedures to be identified and rectified before the potential for a real-life event occurs.
There are several steps for companies looking to achieve this. Begin with a gap analysis to compare current practices against ISO 22301 requirements. Being honest within the organisation might seem daunting at first, especially if you see a lot of gaps, but it is a great opportunity for improvement and to set a business strategy to action previous blind spots.
Next, develop a BIA with stakeholder input to identify priority services and processes. As part of this process, it is a good idea to map your stakeholders. You can then create scenario-based response and recovery plans. This should be clear once you have the gap analysis and stakeholder input.
Your insurance company may have specific requirements, so it is important to liaise with them during this process.
Schedule regular simulation exercises and update plans based on the outcomes of the drills. The aim is to get it right; this can mean learning something new each time and communicating any findings and changes with the appropriate stakeholders with a view to continually improve based on findings.
When you are ready, engage a certification body for third-party validation. You can work towards the standards, but a third- party certification body will test your systems and provide an independent assurance that you are meeting the standards.
ISO 45001: A Systematic Approach to Occupational Health and Safety
ISO 45001: 2018 specifies requirements for an occupational health and safety management system (OHSMS). Its application in fire safety management is vital, especially in high-risk construction environments.
Key elements relevant to fire safety include:
Hazard identification and risk assessment: Systematic identification of fire hazards and evaluation of associated risks is achieved through various mechanisms such as fire strategies, fire risk assessments, activities carried out on site and local crime statistics in relation to trespass and arson.
Operational controls: Fire prevention strategies, safe storage of flammable materials and robust site management are just some of the key components to effectively manage fire on construction sites. Clear roles and responsibilities are vitally important during both the planning and construction phases and, with the dynamic nature of construction, regular effective planning and review is necessary.
Emergency preparedness and response: Planning for fire-related emergencies, including evacuation plans, alarm systems and first-aid arrangements, is essential. Roles and responsibilities are an important element of emergency preparedness response from planning to execution and reflection. Organisational and individual learning is a huge part of recent legislative changes in the higher-risk construction industry. Integrating this into all aspects of the business is not only good practice but necessary in the evolving landscape.
Worker consultation and participation: This involves engaging workers in developing fire safety protocols and reporting unsafe conditions. This is usually the part, in my experience, that businesses find difficult, but it needn’t be. Transparent conversations and appropriate roles and responsibilities, with associated authorities, can go a long way to help develop that trust with employees. Start small, be realistic, don’t over-promise and always deliver. If you can’t deliver, that must be communicated in a timely manner.
Monitoring, auditing and improvement: Routine inspections, incident investigations and performance evaluations are usually performed as part of routine site walk- arounds to pick up health, safety and fire issues. It is vitally important to recognise and document good practice not only for morale but to demonstrate that this is taking place within the organisation and that standards are being met.
Organisations must integrate fire safety into overall occupational health and safety strategies. This means avoiding silo working and instead introducing relevant professionals to each other to promote a collaborative approach to successful risk management.
They must also make use of risk registers to track hazards and mitigation measures. This can be via existing web-based tools or using a simple Excel spreadsheet, but it is important to make a start and monitor actions being taken. It’s important to encourage open communication through toolbox talks and safety committees, and to keep various stakeholders informed as per the stakeholder identification heat map.
Another imperative is to use audits and key performance indicators (KPIs) to monitor performance. Setting out a strategy with KPIs can help keep focus on key areas and allocate appropriate resources to ensure the changes can be effectively implemented. Remember, too, to invest in accredited training for employees and to employ competent persons to carry out various roles and provide advice.
Integrating Fire Safety into Business Continuity
The real value emerges when organisations integrate fire safety management directly into their business continuity plans. This integration can be approached through several practical steps:
Unified risk assessments: Combine fire risk assessments and health and safety risks with BIAs to understand cascading effects.
Cross-functional planning: Involve the relevant stakeholders from various departments, consultants and other areas to ensure there is synergy in the strategy.
Critical supplier co-ordination: Ensure contractors and supply chain partners have aligned continuity measures and are aware of their role to play in any continuity plan.
How companies can implement this:
Form a multidisciplinary response team to oversee planning and testing.
Require evidence of continuity capabilities in supplier contracts. This can be accompanied by supply chain audits and reviews on a regular basis.
Map and prioritise dependencies to ensure continuity of key services based on impact.
Ensure all plans are accessible and communicated to relevant stakeholders.
Build A Resilient and Safe Future
In a sector as dynamic and risk exposed as construction and the built environment, the integration of fire safety with business continuity is not optional, but a strategic imperative.
By aligning with legislation, adopting best practice and embedding resilience into organisational culture, companies can not only protect lives and assets but also sustain operations and reputation in the face of fire-related disruptions.
Best Practice Implementation
To embed fire safety and business continuity effectively, UK construction and built environment organisations should consider the following best practices:
Leadership commitment: Senior leaders must champion fire safety and continuity planning, allocate resources, define strategic objectives and provide sufficient resource
Integrated management systems: Align ISO 22301 and ISO 45001 under a unified management system, reducing duplication and enhancing coherence
Training and awareness: Deliver regular training on fire prevention, evacuation and continuity protocols tailored to roles. Do this regularly to avoid complacency
Use of technology: Implement digital tools for risk assessments, asset tracking and incident communication
Third-party certification: Achieve ISO certification to demonstrate commitment to stakeholders and improve audit readiness
Regular reviews and updates: Keep fire and continuity plans current, in line with changes to operations, legislation and lessons learned
The information written in this article was correct at the time of publication. Changes may have occurred since then please check information before acting. This article was first published with the Institute of Fire Engineers 2025. The contents must not be copied or duplicated without prior permission of the author.
Comments