ASFSS Briefing Compliance, security and systems briefings for UK operations

ASFSS Briefing

Compliance, security and systems briefings for UK operations

Latest Articles

The Dimming Point: What Emergency Lighting Duration Evidence Must Actually Show
Compliance & Audit

The Dimming Point: What Emergency Lighting Duration Evidence Must Actually Show

Emergency lighting records frequently demonstrate that a test was arranged, not that fittings delivered usable light for the required period. A defensible duration file needs measured output, battery history and a clear chain from contractor activity to remedial closure.

Copper's Last Call: Auditing Alarm Signalling Before the Analogue Sunset
Compliance & Audit

Copper's Last Call: Auditing Alarm Signalling Before the Analogue Sunset

Analogue line retirement is exposing alarm signalling paths that many sites have never properly documented. This briefing sets out how to build a signalling-path register, evidence polling and ARC acknowledgement, and test failover so a communications migration becomes a controlled change rather than an emergency.

The Credential Nobody Signed For: Bringing Unissued Access Cards Under Control
Compliance & Audit

The Credential Nobody Signed For: Bringing Unissued Access Cards Under Control

Access control audits usually follow joiners, leavers and contractors. The gap is the stock of cards, fobs and tokens that were bought for contingencies and never allocated. This briefing sets out a quarterly reconciliation that gives every credential either a named owner or a disposal record.

The Retrieval Drill: Testing CCTV Evidence Before Anyone Requests It
Compliance & Audit

The Retrieval Drill: Testing CCTV Evidence Before Anyone Requests It

Retention schedules often describe a policy that the recorder does not follow. A controlled retrieval drill tests whether footage can be exported, authenticated and accounted for before a DSAR, insurer or police request arrives.

The Badge That Outlasts the Contract: Reconciling Leavers to the Access Control Register
Compliance & Audit

The Badge That Outlasts the Contract: Reconciling Leavers to the Access Control Register

Access control databases rarely fail loudly. They accumulate active credentials for people who have left, contracts that have ended and visitors who never returned. This briefing sets out a practical reconciliation routine — HR leaver data against cardholder records, last-used evidence and access-level review — and explains why deactivation must be documented as a controlled security process, not treated as an administrative afterthought.

The Worksheet Is a Claim, Not a Record: Verifying That PPM Actually Happened
Compliance & Audit

The Worksheet Is a Claim, Not a Record: Verifying That PPM Actually Happened

A signed job sheet confirms that someone wrote a signature, not that a pump was greased or a filter changed. This briefing sets out how UK facilities teams can corroborate planned preventative maintenance at asset level, and which questions to ask before the paperwork joins the compliance file.

Cylinders, Custody and the Missing Link: Auditing Master-Key Control Without the Week of Digging
Compliance & Audit

Cylinders, Custody and the Missing Link: Auditing Master-Key Control Without the Week of Digging

A register of key numbers and names is not key control. This briefing sets out the custodial chain a UK facilities team should be able to evidence — from hierarchy drawing to cylinder change — and the five-minute test that shows whether the file would survive scrutiny.

The First Witness Is the Clock: Time Synchronisation as an Audit Control
Contractor Governance

The First Witness Is the Clock: Time Synchronisation as an Audit Control

CCTV, access control, fire panels and incident logs only agree when their clocks agree. This briefing explains how small time drifts create contradictory evidence, what to check in 2026, and the contractor questions that expose weak time management.

Compliance & Audit

The Unpolled Outstation: Making Disabled Refuge Intercoms Auditable in 2026

Disabled refuge intercoms are often installed, commissioned and then left to the fire alarm routine. This briefing sets out why emergency voice communication systems need their own testing evidence, where they commonly fail, and how operations teams can build a defensible routine.

Contractor Governance

Five Questions Before the Alarm Goes Live: Lone Worker Monitoring Due Diligence

A lone worker alarm is a chain of decisions, not a device. These five questions test the escalation script, response definitions, testing regime, location data handling and incident evidence before a contract is signed.

The Support Date Behind the Serial Number: Keeping Legacy Security Systems Defensible in 2026
Compliance & Audit

The Support Date Behind the Serial Number: Keeping Legacy Security Systems Defensible in 2026

A camera that still records is not necessarily a camera an organisation can defend at audit. This briefing sets out how to build a practical obsolescence register for CCTV, access control and alarm systems, and how to turn it into a funded replacement programme rather than a reactive purchase after a failed test.

Before the Brigade Invoice: Reading Fire Panel Data for False Alarm Control
Contractor Governance

Before the Brigade Invoice: Reading Fire Panel Data for False Alarm Control

Repeated false alarms are usually visible in the fire panel long before a charge arrives. This opinion-led briefing argues that alarm event data should be reviewed as a contractor-governance issue, with device-level patterns turned into a costed reduction plan.

Beyond the Tick Box: Making Fire Door Inspections Survive an Audit
Compliance & Audit

Beyond the Tick Box: Making Fire Door Inspections Survive an Audit

A fire door register becomes evidence only when it records the lifecycle of a defect, not merely the date of a check. This briefing sets out five data points that give facilities teams a defensible trail from inspection to close-out.

Compliance & Audit

Twenty Minutes, Once a Quarter: A Security Systems Health Check That Earns Its Place in the Audit File

Annual maintenance visits confirm that a system was working on the day the engineer attended. They say very little about the other 364 days. This briefing sets out a repeatable twenty-minute quarterly inspection across access control, CCTV, intruder alarms and intercoms, with a short log that belongs in the compliance evidence pack rather than a desk drawer.

Fingerprints Are Not a Faster Door: Interrogating Biometric Access Control Before the Contract Is Signed
Contractor Governance

Fingerprints Are Not a Faster Door: Interrogating Biometric Access Control Before the Contract Is Signed

The commercial case for biometric entry is usually expressed in lost fobs and reception queues. The compliance case is considerably heavier, and it lands on the facilities team that signs the order. This briefing sets out the questions to ask before a biometric access control supplier is appointed, and why a documented decision not to proceed is a legitimate outcome.

The Contractor Pack Is Not a Compliance File: Rethinking Site Access for 2026
Contractor Governance

The Contractor Pack Is Not a Compliance File: Rethinking Site Access for 2026

Annual pre-qualification packs create a paper trail, not real-time assurance. This opinion briefing argues for a living compliance file and five questions operations managers should ask before the next induction.

Martyn’s Law Readiness: The Five Evidence Trails Most Premises Still Cannot Produce
Compliance & Audit

Martyn’s Law Readiness: The Five Evidence Trails Most Premises Still Cannot Produce

Many UK facilities teams can produce a Martyn’s Law policy but not the operational evidence an auditor will ask for. This briefing sets out five common evidence gaps and how to close them using the systems already on site.