Fire Risk Assessment Policy Template for Malaysia

Generate a bespoke document

What is a Fire Risk Assessment Policy?

The Fire Risk Assessment Policy serves as a fundamental document for organizations operating in Malaysia to ensure comprehensive fire safety management and regulatory compliance. This policy is essential for any organization required to conduct regular fire risk assessments under Malaysian law, particularly the Fire Services Act 1988 and BOMBA regulations. The document provides structured guidance for identifying and managing fire risks, establishing clear responsibilities, and maintaining proper documentation of fire safety measures. It includes specific provisions for different types of premises and activities, emergency procedures, and regular review requirements. The Fire Risk Assessment Policy must be tailored to the organization's specific needs while ensuring alignment with Malaysian legal requirements and industry best practices.

Trusted by high-performance teams

Frequently Asked Questions

Is a Fire Risk Assessment Policy legally required for my business in Malaysia?

Yes, under Malaysia's Fire Services Act 1988 (Act 341) and BOMBA regulations, businesses must have proper fire safety management systems in place. The Occupational Safety and Health Act 1994 also requires employers to ensure workplace fire safety. Failure to comply can result in fines, closure orders, or criminal liability for business owners.

Can BOMBA shut down my business if I don't have a proper fire risk assessment policy?

Yes, BOMBA (Fire and Rescue Department of Malaysia) has authority under the Fire Services Act 1988 to issue closure orders for premises without adequate fire safety measures. They can also impose fines up to RM50,000 or imprisonment for serious violations. Regular inspections may result in immediate shutdown if fire safety requirements are not met.

How often must I update my Fire Risk Assessment Policy under Malaysian law?

Malaysian regulations require fire risk assessments to be reviewed annually or whenever there are significant changes to your premises, operations, or occupancy. BOMBA may also require updates following incidents, renovations, or changes in business activities. Documentation must be kept current and available for inspection at all times.

How is a Fire Risk Assessment Policy different from a Fire Certificate in Malaysia?

A Fire Risk Assessment Policy is an internal document outlining your organization's fire safety management procedures and risk identification processes. A Fire Certificate is an official BOMBA-issued permit required before occupying premises, confirming the building meets fire safety standards. Both are mandatory but serve different regulatory purposes.

How long does it typically take to develop a compliant Fire Risk Assessment Policy in Malaysia?

For most businesses, creating a comprehensive Fire Risk Assessment Policy takes 2-4 weeks, including site assessment, risk identification, and staff consultation. Complex facilities or high-risk operations may require 6-8 weeks. The timeline depends on premises size, hazard complexity, and whether you engage fire safety consultants for professional assessment.

Can I be personally liable if my Fire Risk Assessment Policy is inadequate in Malaysia?

Yes, under the Fire Services Act 1988 and Occupational Safety and Health Act 1994, company directors and managers can face personal criminal liability for fire safety violations. This includes fines up to RM50,000 and potential imprisonment if inadequate fire risk management results in injuries or deaths.

Why do most Malaysian businesses fail BOMBA fire safety inspections?

Common failures include incomplete risk assessments, lack of staff training documentation, inadequate emergency procedures, and missing fire safety equipment maintenance records. Many businesses also fail to update their policies after renovations or operational changes, or don't properly document fire drill procedures as required by regulations.

Reviewed by

Swetha Meenal

Legal Engineer, GenieAI

Swetha Meenal profile photo

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Imad Mohammed Nazar

Legal Engineer, GenieAI

Imad Mohammed Nazar profile photo

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

Malaysia

Publisher

GenieAI

Sector

Business

Cost

Free to use

Last updated

About the Fire Risk Assessment Policy

A Fire Risk Assessment Policy is a comprehensive document that establishes your organization's approach to identifying, evaluating, and managing fire risks in accordance with Malaysian fire safety legislation. This policy serves as the foundation for your fire safety management system, ensuring compliance with the Fire Services Act 1988 and other relevant regulations while protecting lives and property.

When do you need this document?

You need a Fire Risk Assessment Policy if you own or manage any commercial, industrial, or multi-occupancy building in Malaysia. This includes office buildings, factories, shopping centers, hotels, hospitals, schools, and residential complexes with shared areas. The Fire Services Act 1988 requires building owners and occupiers to conduct regular fire risk assessments and maintain documented safety procedures. Additionally, if you employ workers, the Occupational Safety and Health Act 1994 mandates that you assess and control fire risks in the workplace. Insurance providers also increasingly require evidence of systematic fire risk management before providing coverage.

Key legal considerations

Your Fire Risk Assessment Policy must address several critical legal requirements under Malaysian law. The policy should establish clear roles and responsibilities, designating qualified personnel to conduct assessments and implement safety measures. You must include procedures for identifying fire hazards, evaluating risks, and implementing control measures in accordance with MS 1539:2014 standards. The document should specify assessment frequencies, documentation requirements, and review procedures to ensure ongoing compliance. Emergency response procedures, evacuation plans, and staff training requirements must be clearly outlined. The policy should also address coordination with BOMBA (Fire and Rescue Department) for inspections and certifications, and establish procedures for reporting incidents and near-misses.

Legal requirements in Malaysia

Under the Fire Services Act 1988, building owners must ensure their premises have adequate fire safety measures and conduct regular risk assessments. The Uniform Building By-Laws 1984 specify minimum fire safety features required in different building types, including emergency exits, fire-resistant materials, and detection systems. The Fire and Rescue Department Regulations 2001 detail specific requirements for fire safety systems, inspection procedures, and certification processes. Your policy must comply with Occupational Safety and Health Act 1994 requirements for workplace fire safety, including employee training and emergency procedures. The policy should reference Malaysian Standard MS 1539:2014, which establishes competency requirements for fire safety management personnel. Additionally, you must ensure your policy addresses local authority requirements and any specific conditions attached to your building's Certificate of Fitness for Occupation.

Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it

Ready to agree with confidence?
See Genie in action.