Building Safety Act 2022 – HRB Safety Case, Golden Thread & PPM Requirements

Making HRB scope, Safety Case and Golden Thread work

If you manage higher‑risk residential buildings in England, the Building Safety Act 2022 has turned scope decisions, Safety Case Reports and Golden Thread information into board‑level governance issues. Getting them wrong at the start can distort every later duty, cost and conversation.

This article explains how to record HRB scope in a defensible way, separate argument from evidence in your Safety Case, and define a practical Golden Thread dataset and update triggers. The focus is on simple, repeatable records that stand up to regulator, lender and valuer scrutiny without overwhelming your teams.

• Clarify which buildings fall within HRB scope and why
• Structure an occupation‑phase Safety Case with clear update triggers
• Define a usable Golden Thread dataset, ownership and governance rules

What is an HRB in England – and have you recorded a defensible scope decision?

If you get HRB scope wrong at the start, every later duty leans the wrong way.

For occupation in England, a Higher‑Risk Building is generally at least eighteen metres or seven stories, with at least two residential units. Secondary regulations add detail, but your first job is to turn your conclusion into a short, formal record. On one page, you should show how you applied the height and storey tests, how you counted units, and what you assumed for linked blocks or podiums. That note is often the first place the Building Safety Regulator, lenders and valuers look when they want to understand how you reached your decision.

A defensible scope note reads like an assurance record. It sets out the building description and drawings used, the test you applied, your conclusion, who reviewed it and when, and where it sits in your governance pack. That way, when lenders, valuers or the regulator ask why you treat a building as an HRB (or not), you can point to one clear record instead of re‑arguing the basics. All Services 4U can help you turn informal working notes into a simple, repeatable template that stands up to scrutiny and travels with the asset through sale, refinance or management change.

You also need to be clear about the consequences of misclassification. Over‑calling scope can waste time and money; under‑calling can leave you with unmanaged duties, delayed programmes and uncomfortable conversations with residents and regulators. Treating scope as a board‑level governance decision, with a short risk note that follows the building, makes it much harder for scope to drift over time.

Safety Case Report vs Golden Thread – the argument and the evidence system

Your teams make better decisions when everyone shares a simple distinction between the Safety Case Report and the Golden Thread.

What each one does

The Safety Case is the structured argument that you understand the building’s safety risks from fire spread and structural failure, have suitable controls in place, and are managing those risks so far as reasonably practicable. The Safety Case Report is the written presentation of that argument to the regulator and to your own governance bodies. It explains the major hazards, the controls, how you monitor them, how you act on findings, and how you learn over time.

The Golden Thread is the controlled body of information that underpins that argument. It holds the drawings, specifications, test records, certificates, action trackers, change logs and engagement records you rely on when you say “this control is in place and working”. Where the Safety Case Report answers why you say the building is being managed safely, the Golden Thread answers what you know, when it was recorded, and who recorded it.

How they connect in practice

In an audit‑ready regime, every significant claim in your Safety Case Report can be traced to Golden Thread records. If you say compartmentation is intact, you should be able to point to fire‑door and compartmentation surveys, remedial work orders, completion evidence and re‑inspection plans. If you say your life‑safety systems are tested, you should be able to point to logbooks, test results, defect lists and close‑out evidence, all linked to specific assets and locations.

Most failures the regulator sees are less about missing policies and more about a polished narrative that is not convincingly backed by current, building‑specific information. Keeping the ideas of argument and evidence separate makes gaps easier to spot and makes it clearer to contractors and advisors what they must supply. Where you want help turning a policy‑heavy Safety Case into a clear, evidence‑linked argument, our team can work with your staff so that each major claim has a visible, traceable evidence chain behind it.

Safety Case Report (occupation phase) – minimum contents and defensible update triggers

A Safety Case Report for an occupied HRB in England is expected to read like a live management document, not a one‑off consultancy product.

Core contents you should cover

At a minimum, you should set out:

• a clear description of the building and how it is used
• the building safety risks you have identified (fire spread and structural failure)
• the control measures in place for each major risk, across design features, systems, procedures and human controls
• how you monitor the effectiveness of those controls (inspections, testing, checks, audits, resident feedback)
• how you manage actions arising from findings, including timeframes and ownership
• how you ensure competence for key decisions and safety‑critical work
• how you involve residents and respond to their safety concerns.

For each section, the report should point to the Golden Thread rather than duplicating it. That keeps the report readable and makes later updates more manageable. We can help you reshape an existing report so that it signposts clearly to the right registers, logs and trackers without turning into a document your teams struggle to maintain.

When you update – in a way you can defend

You will be expected to keep the Safety Case current, but that does not mean rewriting it constantly. A practical approach is to define update triggers in plain operational language. Typical triggers include significant works that affect fire or structural safety, changes to use, layout or occupancy patterns, serious incidents or near‑misses (including mandatory occurrences), repeated defects in the same safety‑critical system, and new information about products, construction details or external risks.

For each trigger, you can set what happens next: who reviews the Safety Case, what parts may need revision, and what evidence must be checked. That way, if the regulator or your own auditors ask why a particular version was in force at a given date, you can show the assumptions you relied on and the evidence you had. We can help you write those triggers once, in language your board, internal audit and the regulator all recognise, then embed them into your normal governance cycle.

Golden Thread in practice – information that stays accurate, secure, accessible and controlled through change

A useful Golden Thread is less about buying a new platform and more about deciding what information you will control, how you will control it, and why.

Minimum dataset and ownership

You can start by agreeing the “find it in thirty minutes” list – the items you must be able to retrieve quickly for each HRB. That typically includes current key drawings, fire and structural strategy information, safety‑critical asset registers, inspection and test records, action trackers, major works records, and resident information relevant to safety. Each item should have a named information owner, a defined update timescale after change, and a simple rule for what “complete enough” looks like.

Without that minimum dataset, you risk collecting large volumes of files that are hard to navigate and do not reliably support decisions. A short mapping exercise of what you already hold can be enough to shape an agreed dataset so that your Safety Case, project teams and day‑to‑day operations all draw from the same controlled records.

Governance, access and security

You then need basic information governance. You need version control so you can tell which drawing or specification is current, when earlier versions were superseded, and who approved the change. You also need change records that state what changed, why it changed, which risks or controls it affects, and where it is reflected in the Safety Case. Role‑based access control lets you answer who can see what and why for internal teams, contractors and residents.

Because this information is safety‑critical, you should be able to show that you protect its integrity. That means routine backups, appropriate retention, and logging of key actions. This does not require complex technology, but it does require clear rules that survive staff and supplier turnover. We can work alongside your existing computer‑aided facilities management and document tools to set these rules up once, so that you do not have to rebuild your Golden Thread every time you change systems.

Accreditations & Certifications

PPM requirements – the minimum evidence that shows your controls work

Planned preventive maintenance is often where your Safety Case succeeds or fails, because it is where risks are controlled day to day.

Safety‑critical asset register

You need an asset register that does more than list equipment. For each safety‑critical asset – fire alarm panels, detectors, emergency lighting, smoke control, fire doors, lifts and relevant structural elements – you should record a unique identifier, exact location, the safety function it supports, the standard or regime you follow, the required inspection or test, the interval, and the competence required to carry out that work.

That register becomes the bridge between abstract controls in the Safety Case and real work on site. It gives you a single place to test whether every control you rely on has a realistic cadence, clear ownership and the right level of technical oversight.

Work order evidence packs

For each safety‑critical work order, a minimum evidence pack should show:

• which asset or area was worked on, using the agreed ID and location
• what task or standard was followed
• when the work was done and by whom, with a link to competence records
• results or readings, not just “pass/fail”
• any defects found, how they were prioritised, and how they were closed
• where applicable, supporting documents such as certificates, calibrated test reports or photographs.

If you define this pack once and embed it into your maintenance instructions and CAFM settings, you reduce rework and make it much easier to support your Safety Case with real data. We can help you and your contractors build these requirements into work templates and service specifications so that evidence appears automatically, instead of being chased at the last minute.

Cadence and risk‑based intervals

Statutory and standard cadences give you a legal and good‑practice floor, but you may choose to shorten or, where permissible, adjust intervals. Either way, you should document why you chose that interval. Condition, usage, environment, manufacturer guidance and incident history are all relevant factors. That rationale, and the person who approved it, should be recorded alongside the schedule so that cost decisions remain transparent and defensible.

If you want support turning your current PPM regime into a safety‑case‑ready evidence system, you can use a consultation to walk through one priority HRB in detail.

Dutyholders and handover – mapping responsibilities from project to occupation without evidence gaps

Controls and records often fall between cracks when responsibilities move or when projects finish and buildings return to steady‑state operation.

From project to occupation

On new works and major refurbishments, you should be clear about what must be handed back to support the occupied building’s Safety Case and Golden Thread. That will include as‑built or as‑installed drawings and specifications, commissioning results, warranties, fire‑stopping details, any temporary measures used, and a list of residual risks or limitations the project team has identified.

These requirements are easier to manage if they are built into project briefs, appointments and completion criteria from the start, rather than chased at the end. A short, standard handover checklist that sits in your contracts and project governance reduces reliance on individual memory and makes it easier to challenge incomplete handover packs.

Mapping responsibilities across APs, PAP and agents

Where more than one Accountable Person exists, the Principal Accountable Person is responsible for coordinating building‑wide compliance, but each AP still has duties for the parts it controls. A simple RACI that reflects this – including who must produce, review and retain which records – is often enough to prevent gaps.

It should also be clear, when activities are delegated to agents or contractors, that the legal duty has not moved with them. Contracts can help here. Clauses on data ownership, format, timing of handover and audit rights make it harder for any single supplier to become the only place where evidence lives. Our team can help turn those RACIs and clauses into wording you can drop into appointments and scopes and then test against live projects.

Implementation blueprint – how to make the architecture, workflows and audit trail run as business as usual

Once you understand the duties, you need a way of running them that does not depend on heroics from one or two individuals.

Information architecture you can maintain

Before selecting or changing tools, agree the key data fields you actually need. For assets, that usually means ID, location, safety function, linked control, required task, interval, evidence type, expiry and responsible approver. For documents, it means title, type, version, effective date, status, owner, and where it is referenced in the Safety Case.

Defining this early lets you configure your existing systems so that exports still make sense if you change platforms later. In practice, All Services 4U will usually start by mapping the data you already hold, then shaping these fields into a configuration that your teams, contractors and advisors can keep up to date without adding unnecessary admin.

Workflows and audit trail

For each type of job or record, decide what “done” looks like in information terms. A job is not complete until the minimum evidence pack is attached and accepted. A drawing is not current until it has been checked, approved and filed in the right place, with the old version clearly archived.

Set a light‑touch assurance cadence on top of this. You might check a small sample of work orders each month, run a quarterly review of key registers, and use a short readiness checklist before any regulator or board engagement. That checklist can cover scope decision, Safety Case Report status, Golden Thread completeness, top fire risk assessment actions, mandatory occurrence reporting arrangements and resident communications. If this is the type of operating model you want in place, you can schedule a short consultation to map it onto one of your Higher‑Risk Buildings and agree where to start.

Reliable Property Maintenance You Can Trust

From routine upkeep to urgent repairs, our certified team delivers dependable property maintenance services 24/7 across the UK. Fast response, skilled professionals, and fully insured support to keep your property running smoothly.

Book Your Service Now

Book your free consultation with All Services 4U today

When you book a free consultation with All Services 4U, you give yourself a fast, structured way to turn scattered documents, overdue actions and HRB obligations into a clear, prioritised plan for a pilot building.

In a focused conversation, you can walk through your position on HRB scope, Safety Case Report readiness, Golden Thread control and PPM evidence, then choose one or two buildings where you most want certainty. If you bring a recent fire risk assessment summary, an extract of your safety‑critical asset register and a snapshot of recent PPM close‑outs, the discussion can centre on real examples rather than theory.

You will leave the consultation with:

• a plain‑English snapshot of where your current Safety Case and Golden Thread are most exposed
• a simple map of the key evidence chains for one priority HRB, showing where records need to change
• a proposed, time‑boxed pilot brief for that building, with clear decision points and suggested roles.

Our team can then outline how a pilot would work in practice, from stabilising the highest‑risk evidence chains through to tightening work order standards and aligning your Safety Case narrative with the information you already hold. There is no obligation to proceed beyond the call; you finish with a concrete ninety‑day pilot outline and a clear choice about whether to run it with us, deliver it in‑house, or adjust your existing plan using the same structure.

Frequently Asked Questions

Explore our FAQs to find answers to planned preventative maintenance questions you may have.