Are you legally required to have a Secure Information Box in your building?

Following the Grenfell Tower Inquiry’s Phase 1 report, the Government introduced new legislation requiring high-rise residential buildings to install Secure Information Boxes (SIBs). The Fire Industry Association (FIA) and the National Fire Chiefs Council (NFCC) have jointly published a new Code of Practice to help building owners and managers understand what's required.

So, do you need one? If you manage a qualifying building, the answer is yes. Read on to find out what a SIB is, what needs to go inside one, and whether your building falls within scope of the regulations.

What Is a Secure Information Box?

A Secure Information Box (SIB) is exactly what it sounds like: a secure, readily accessible storage unit located within a building, containing critical information for firefighters attending an emergency. Think of it as a first responder's cheat sheet for your building, giving fire crews immediate access to the details they need to act quickly and safely.

SIBs have been used for a long time and can typically be found in locations such as train stations, shopping centres, football stadiums and buildings with fire engineered solutions. In the past they have held building plans and details of systems like smoke control systems. What’s different now is that they’re a legal requirement for residential high-rise buildings, and the documents that they must contain have significantly changed since the Grenfell tragedy.  

What must go inside a SIB?

The entire contents of a SIB are referred to as the Emergency Response Pack (ERP). This is a standardised set of information designed to give firefighters everything they need on arrival at an incident. 

The ERP must include:   

• Up-to-date floor plans both in paper and electronic form of every floor of the building, clearly identifying the location of key fire safety systems

• Information about any firefighter lift intended for use by the fire and rescue service

• Building Emergency Evacuation Plans (BEEPs) drawn up by the building owner or manager, kept under regular review, and also provided to the local Fire and Rescue Service in both paper and electronic form

• Residential Personal Emergency Evacuation Plans (RPEEPs) – individual plans for residents whose ability to evacuate may be compromised, such as people with reduced mobility or cognitive impairment

• Contact details for the Responsible Person (RP)

It is important to note that floor plans and BEEPs must not only be stored in the SIB, but they must also be shared with the local Fire and Rescue Service in both paper and electronic form.

What are RPEEPs and why do they matter?

One of the most significant new requirements to come out of the Grenfell Tower Inquiry is the introduction of Residential Personal Emergency Evacuation Plans, or RPEEPs.

An RPEEP is an individual evacuation plan prepared for a specific resident whose ability to evacuate in an emergency may be compromised, for example, someone with reduced mobility, a physical disability, or a cognitive impairment. The Inquiry specifically recommended that these plans be prepared for all at-risk residents and stored in the SIB, so that firefighters arriving at an incident have immediate access to this vital information and can prioritise their response accordingly.

It’s important to note that building owners and managers are responsible for preparing these plans and keeping them up to date.

Does my building need a SIB?

If your building falls under these categories, your building is required to have a SIB in place.

• A new build block of flats with storeys over 11 metres

• An existing residential building that is 18 metres or higher above ground level, or has seven storeys or more 

• An existing residential building over 11 metres that has a simultaneous evacuation strategy in place, where the local Fire and Rescue Authority has requested RPEEPs information in hard copy format.

While the code of practice is primarily aimed at residential blocks of flats, it also notes that its principles can be applied to other types of premises outside its strict scope, particularly large, complex, or unusually laid out buildings where a SIB would be of clear benefit to firefighters.

Which regulations apply?

These recommendations have now been incorporated into several pieces of legislation and guidance:

Fire Safety (England) Regulations 2022 — Regulation 4 This is the primary regulation requiring a SIB in existing high-rise residential buildings. It applies to buildings that are at least 18 metres above ground level or have at least seven storeys and contain at least two residential units.

Fire Safety (England) Regulations 2022 — Regulations 6 to 10 These regulations apply to buildings between 11 and 18 metres and cover separate fire safety duties such as providing floor plans to the Fire and Rescue Service, displaying evacuation instructions for residents, and carrying out regular checks on lifts and firefighting equipment. These are not a SIB requirement but are important duties the Responsible Person must still meet.

Fire Safety (Residential Evacuation Plans) (England) Regulations 2025 Applies to buildings more than 11 metres in height with a simultaneous evacuation strategy. While digital sharing of RPEEPs information is preferred, a SIB may be required if your local Fire and Rescue Authority specifically requests hard copies instead.

Approved Document B Recommends SIB provision for new build blocks of flats over 11 metres. This is a design and construction stage recommendation rather than a legal requirement in the same way as Regulation 4.

What does the Code of Practice cover?

The Code of Practice provides detailed recommendations across several key areas:

• Location of the SIB within the building, ensuring firefighters can find it quickly on arrival

• Security against unauthorised access, balancing accessibility for fire crews with protection from misuse

• Signage so the box can be easily and quickly identified

• The ERP what it must contain and how information should be presented

• Maintenance of both the SIB and its contents, ensuring all information remains accurate and current

• Information exchange between stakeholders, with clear definitions of responsibilities

• Storage and maintenance of RPEEPs information for vulnerable residents.

Does the guidance apply to existing SIBs? 

If your building already has a SIB in place, the Code of Practice is not intended to be applied retrospectively to installations that are already meeting its intended outcomes. However, it is worth reviewing your current setup against the new requirements, particularly around RPEEP storage and the updated ERP contents, to ensure compliance with the relevant regulations.

It is also worth noting that the Code of Practice does not currently cover the electronic storage and transfer of information to the fire and rescue service. That remains outside its scope for now, though building owners should still provide electronic copies of plans and BEEPs directly to their local service as required by the regulations.

The takeaway

Secure Information Boxes are a straightforward but important piece of fire safety for high-rise residential buildings. They ensure that firefighters arriving at an emergency have immediate access to the information they need, from building layouts and evacuation plans to the details of vulnerable residents who may need assistance.

If you are the Responsible Person for a qualifying building, now is the time to review your obligations under the updated legislation to make sure your SIB, ERP, and RPEEPs are in place, up to date and compliant. 

If you need to review your SIB plans contact us today, we can offer impartial advice and help you stay compliant.