Professional Documents
Culture Documents
Ó 2023 The Author(s), under exclusive licence to Springer Science+Business Media, LLC, part of Springer Nature
Manufactured in The United States
https://doi.org/10.1007/s10694-023-01409-4
Abstract. Fire detection and fire alarm systems (FDAS) have the function of warn-
ing people swiftly of the hazards of a fire and thus permitting rapid rescue, protecting
material assets (particularly where unattended), ensuring operational processes, and
preventing fires from spreading, i.e. ensuring early and effective firefighting. In attain-
ing these objectives, installed FDAS contribute substantially to fire protection. In this
context, automatic fire detectors have the function of detecting fires early, swiftly and
reliably. Fire detectors are sensor systems and form part of a wider safety system.
They are exposed to numerous environmental conditions specific to their use and,
like other socio-technical systems, undergo natural ageing processes which limit their
service lifespan. Owing to the numerous risks that arise when a fire detector fails or
its function is impaired, the continuous serviceability of a FDAS must be ensured.
This requires controlled replacement of fire detectors. In some countries, this is
ensured by standards. This paper explains the need for controlled replacement of fire
detectors and the associated causes and effects, with reference to the example of Ger-
many and the provisions of DIN 14675-1. The paper explains, in terms of practical
relevance and with reference to examples, the basic concept of preventing possible
failure of a technical safety system in order to assure its protective function in the
event of a hazard occurring, together with the range of essential causes and effects.
Keywords: Fire detectors, Risk minimization, Function test and replacement, Standard, Reliability
1. Introduction
The behaviour of technical systems in the event of failure is subject to numerous
influencing factors and is randomly distributed. The failure phenomena cannot
therefore be determined precisely, but must be viewed as stochastic processes (see
[1–3]). This is particularly critical with respect to technical safety systems, because
the random variable comes into play in two respects: firstly the probability of a
hazard (e.g. a fire) occurring, and secondly a possible failure of the protective sys-
tem itself (see [4, p. 481]) in which the protective function may not be assured
when a demand is made upon it. Sensors are used in numerous systems for safety
purposes, for example in production plants, vehicles and robots.
1
1884 Fire Technology 2023
1
The function test in this context differs from the ‘‘function check-out’’ to EN 13,306:2018–02, which
defines the action taken after maintenance actions (usually carried out after down state) to verify that the
item is able to perform the required function [11].
Minimization of Risk by the Controlled Replacement... 1885
Table 1
European Standards for Automatic Fire Detectors
ber—when proper operation of the FDAS and attainment of the required protec-
tion objectives is no longer guaranteed. The standard specifies three procedures
for the function test and replacement of fire detectors. One procedure involves a
periodic test of a fire detector’s serviceability in compliance with the standard:
The standard sets out two further procedures each of which makes provision
either for fixed replacement cycles for the fire detectors, or alternatively for fac-
tory testing and repair in accordance with the cycles2:
(b) Point fire detectors with drift compensation or automatic calibration setup
with indicator in the event of excessive deviation may remain in service for up
to eight years in cases where the serviceability of the fire detector has been
demonstrated but testing in situ is unable to determine whether the response
behaviour is within the manufacturer’s specified range. At the end of this ser-
2
With respect to factory testing, the standard notes that the components (e.g. fire detectors) are subject
to inspection by the manufacturer. This test determines whether the response behaviour etc. of the fire
detectors still meets the requirements placed on the product by the standard. It is practicable to replace the
fire detectors in the property with loan products or substitute detectors whilst this inspection is being
conducted, in order to assure operation of the FDAS. It is now also common practice for contracts under
private law to provide for the replacement of fire detectors with tested fire detectors. This can be governed
by a maintenance contract.
Minimization of Risk by the Controlled Replacement... 1887
vice period, these fire detectors must be replaced or subjected to factory test-
ing and repair.
(c) Point fire detectors without drift compensation or automatic calibration func-
tion and which cannot be checked in situ to determine whether the response
behaviour is within the manufacturer’s specified range must be replaced or
subjected to factory testing and repair at the end of a service period not
exceeding five years.3
In procedure (a), the focus of the function test is the annual inspection in situ of
each fire detector by means of a test procedure specified by the manufacturer [14,
p. 33]. The technical specifications of the EN 54 series must be met for this pur-
pose; as yet however, no manageable test equipment is known that satisfies all the
normative provisions [12]. In this procedure, the fire detector under test must be
replaced temporarily by a substitute detector in order for the protection objective
of the FDAS to be fulfilled for the duration of the test procedure. Should the fire
detector under test fail to meet the specified criteria during the test, it must be
replaced. Procedure (a) is rarely used in practice for the reasons stated.
This may change however as a result of technical progress. Procedures (b) and
(c) each provide a choice of two strategies for function testing. First, defined,
schedulable replacement cycles for fire detectors are specified which implicitly take
into account the ageing of the detectors, including their electronic components, in
their environment over the course of their service period. A point fire (smoke)
detector with drift compensation or automatic calibration setup must be replaced
after no more than eight years (procedure b). Should it not possess a drift com-
pensation or automatic calibration facility, it must be replaced after five years
(procedure c). Alternatively, the fire detector can also undergo factory inspection
and repair rather than being replaced directly. Fig. 1 shows the process steps
according to the procedure (b and c) involving factory testing and repair (top) or
direct replacement of the fire detectors (bottom).
Replacement makes the process relatively safe, schedulable and efficient, i.e.
with savings in time and costs. Should remote access to FDAS—which is evi-
dently the trend (see [20])—become the norm in the future, checking of fire detec-
tors’ serviceability on the one hand and their compliance with standards on the
other could be further simplified or partly automated (it will however probably be
difficult to check all ambient conditions remotely).
3
The standard further states that for detectors with multiple sensors—even when their smoke sensor has
been deactivated and subsequently activated—the age of the fire detector must be checked and the detector
replaced if necessary in accordance with the specifications of points a) to c). If, in the case of automatic fire
detectors, the sensor chamber is cleaned in situ or parts of the sensor chamber or the entire sensor chamber
are replaced, it must be ensured and demonstrated that, following cleaning or replacement of the sensor
chamber, the response behaviour of the automatic fire detector lies within the range specified by the
manufacturer in accordance with the relevant part of the DIN EN 54 series of standards.
1888 Fire Technology 2023
4
Based on EN 13306:2018-02, maintenance is understood to be all measures that serve to maintain or
restore the functional state of a system. Maintenance consists of servicing, inspection, repair and
improvement (see [5, 29]).
5
[22, pp. 119–126] shows, based on a detailed analysis of 2827 deployments of a fire service (to 539
actual fires), that 29.57% of false alarms are triggered by FDAS at 5.64% of the objects. In other words,
the fire service is called out multiple times to false alarms at the same objects. The result is confirmed from
the field and is symptomatic of improper planning and use of FDAS (see [63]).
Minimization of Risk by the Controlled Replacement... 1889
Table 2
Excerpts from DIN 14675 Relevant to the Replacement of Fire
Detectors, with Date of Appearance (Unofficial Translation)
DIN 14675-1
Addendum 1:2014-
2003-11 A1: 2006-12 2012-04 12 2018-04
densome for the fire service (see Sects. 6.7.3 and 6.8). Besides addressing the dan-
ger of aged fire detectors failing to trigger an alarm in the event of a fire because
they are no longer serviceable, the aim was to reduce false alarms (which was not
attainable for example solely by regular inspections [21]).
In a study involving several manufacturers [23], experience gained in countries
other than Germany showed that the tripping sensitivity of fire detectors may
deviate significantly from the limit values found in standards, depending on the
service life. To overcome these issues, function testing and replacement of fire
detectors in Germany was included in the standard in 2006 by the efforts of the
responsible working committee at DIN with the participation of experts and the
stakeholders (e.g. fire services, operators, installers, test institutes, manufacturers
and researchers) and the public within a normal procedure for creation/revision of
a DIN standard. A recent study [24] suggests that the arrangements specified in
DIN 14675-1 are fulfilling their objective (see Sect. 6.7). Experience from the field
1890 Fire Technology 2023
also confirms that the standard has led over the years to considerable improve-
ments to quality in the planning, installation, operation and maintenance of
FDAS (see Sect. 6.7).
6
Here, technical systems are referred to synonymously with devices or products. A system or device
consists of several components or constituent parts. The smallest components that cannot be broken down
further are referred to here as components or elements.
Minimization of Risk by the Controlled Replacement... 1891
failure rate curve rises again as a result of ageing and wear and tear failures.
Whereas the early failure phase is attributable primarily to quality defects (such as
failure of parts, planning errors and material faults, design, production or applica-
tion defects), the wear failure phase is caused by wear and ageing of the system
and its components under the influence of the ambient conditions. For products
from series production, the first phase becomes shorter as time progresses owing
to improvements to eliminate teething troubles, whereas the useful lifespan
remains constant.
According to [29, p. 531], systems, components or parts should ideally be
replaced before the failure curve begins to rise again, in order to counteract the
wear and ageing failures as much as possible. In this context, the wear and ageing
of technical systems depends in turn on the conditions of use and numerous
mutually influencing factors. For this reason, the timing of the onset of the third
phase at which wear increases can often not be anticipated exactly. The failure
phenomena are consequently described as stochastic processes (see [1–3]). Where
ambient influences play a subordinate role in the functioning of a system, and if a
sufficient number of identical systems with comparable conditions are considered,
the distribution of failures over time follows the Weibull distribution and can be
calculated with relatively high accuracy. For obvious reasons, this cannot be dis-
cussed in detail here (see [1, 25, 30]). The conditions under which fire detectors are
operated generally only partly meet the conditions for such calculations.
Systems are also typically assessed against numerous criteria, such as safety,
reliability and environmental requirements, performance and handling characteris-
tics, and cost requirements [25, p. 4]. Theoretically, the aim at the system’s design
stage is for all parts to be designed for a similar service lifespan (see [27, p. 31]),
and for this design lifespan to end before the failure curve in Fig. 3 begins to rise
1892 Fire Technology 2023
again. This guarantees the system’s function and prevents wear failures whilst
avoiding the cost of an unnecessary wear reserve. A balance between the assess-
ment criteria can thus usually be achieved (see [27, p. 31]). This is difficult to
implement in practice owing to many influences not being known. The service
lifespan of a system for example is geared to its intended use, which in turn is
influenced by other factors such as legal and normative provisions, conditions of
use, the availability of spare parts, maintenance intervals and the quality of main-
tenance, and further performance characteristics such as design, updates,
repairability, mechanical and electronic robustness and the use of various tech-
nologies (see [27, p. 31]). These requirements are related to each other. The adjust-
ment of the lifespan is discussed controversially (e. g. [32]).
The total lifespan of a system is divided into a manufacturing phase and a ser-
vice phase. Its use ends with final outage and disposal. The service lifespan can
generally be extended by maintenance measures, particularly repair [27, 29], which
Minimization of Risk by the Controlled Replacement... 1893
Figure 4. Course of the wear reserve over time [27, p. 289] and see
[33].
extend the wear process. The maintenance measures can be classified according to
the course of the wear reserve, see Fig. 4.
The wear and tear of a system and of its components begins when the system is
placed in use. Wear and tear is understood as degradation of the reserves for the
possible fulfilment of function under defined conditions which an item under con-
sideration possesses by virtue of its manufacture or restoration by way of repair
(see [29, p. 526 f.]). The wear reserve is a part of the utilization reserve. When the
utilization reserve approaches a tolerance limit, its course must be counteracted by
maintenance and repair measures, causing the course of the curve to be changed
and the utilization reserve to be raised again. This process repeats itself. It cannot
be repeated indefinitely however, since at some point the wear and tear inevitably
affects too many systems or components.
Maintenance measures include measures that do not counteract loss of an exist-
ing wear reserve but merely prevent or reduce further degradation. Conversely,
inspection affects neither the wear reserve, nor its degradation. Inspection determi-
nes and evaluates the point on the curve that has been reached, not merely that
the end of the curve has been reached. For this reason, inspection intervals are
based on the typical or anticipated curve progression. All measures contributing
to interrupting the course of the wear reserve over time and restoring it fall under
repair measures, such as replacement of affected systems or their components (see
[29, p. 527]). The wear reserve can be increased to above 100% of the initial state
by repairs involving additional improvements (such as the use of more modern
products).
1894 Fire Technology 2023
Table 3
Examples of Replacement, Test and Calibration Cycles for Technical
Systems
Water meters (calibration interval = replace- 5 years—hot Section 34 of the German Measure-
ment) water meters ment and Calibration Regulation
6 years—cold (MessEV)
water
meters
Speech diaphragms, demand valve diaphragms 6 years vfdb RL0804
and exhalation valves of full-face masks and
demand valves used by the fire services
Fire extinguishing sprays 39 months EN 16,856:2020–06 Clause 5.8
Electricity meters (cali- 16 years—meters with Section 34 of the German Measurement and Cali-
bration interval) rotating disc bration Regulation (MessEV)
8 years—electronic
meters
Traffic speed monitors 1 year Section 34 of the German Measurement and Cali-
bration Regulation (MessEV)
Minimization of Risk by the Controlled Replacement... 1895
Table 4
Typical Total Lifespans of Technical Systems (According to [40] and
[41])
Table 5
Typical (Mean) Total Lifespans of Technical Systems (see [42])
generalizations can be made in this respect. However, with regard to the replace-
ment of fire detectors, we can conclude that new technologies do not give rise to a
particular and pressing need for the service lifespan to be extended.
As Fig. 5 shows, legal or normative provisions for the function testing and
replacement of fire detectors exist in numerous countries. Replacement cycles are
in most cases 4, 5, 6, 8, 10 and 12 years. At 5 and 8 years, the current provisions
in Germany are in the mid-range of this span. Numerous countries follow these
provisions, offering various options for function testing and replacement of fire
detectors. At the same time, the provisions governing fire detectors differentiate
according to whether the detectors feature drift compensation and an automatic
calibration facility, as recommended in a recent study [24]. This study also indi-
cates that the replacement cycles for fire detectors specified in the stan-
dard—which in the interests of practicability are identical across the entire range
of uses of fire detectors—are reasonable, as failure need not be anticipated at this
point in time.
8
Technical safety systems are classified into three classes for safety in the event of failure. Many systems
have a ‘‘fail safe’’ mode in which they signal a faulty state and switch to the safe state (e.g. tripping of a
fuse). Other systems rely on the ‘‘fail functional’’ mode. In this case, they switch in the event of a fault to a
downgraded (safe) mode and must be repaired promptly; alternatively, if the system cannot be repaired
promptly, it must be switched to the safe state after a certain time and maintained this state (e.g. transport
systems; in the case of aircraft and drones, restricted continued operation in the event of a fault is essential;
many automatic systems can be manually overridden for this reason). Systems of this type often require
high redundancy or overdimensioning. Systems with the highest safety regime have a ‘‘fail operational’’
mode. In the event of a fault, operation of such systems can be maintained and the fault can often be
rectified during running operation. Systems of this kind are usually designed with multiple redundancy;
one or more subsystems/control channels can therefore fail without giving rise to a hazard (see [51, pp. 93-
125]).
Minimization of Risk by the Controlled Replacement... 1899
the yardstick for negligence in the event of tortious, fault-related liability claims
under Section 823 (1) of the German Civil Code (BGB). The same applies to the
standard of due diligence relevant under criminal law. The indicative effect also
follows from the fact that standards are presumed to reflect generally recognized
good practice. In addition, violations of the provisions of DIN standards, in this
case the replacement intervals, may facilitate evidence favouring the injured party
in a procedural context. Should injuries to life and limb occur as a result of a fire
and it be established that these would not have occurred had the intervals for the
replacement of fire detectors as stipulated in DIN 14675-1 been observed, the
building operator might face not only claims for damages under civil law but also,
under certain circumstances, criminal liability for negligent bodily injury or negli-
gent homicide, in each case by omission. In view of these potential liability risks,
building operators often have a legal interest, and an associated economic interest,
in observing the replacement intervals of DIN 14675-1. In addition, should main-
tenance measures be neglected, they can be enforced by the regulatory authorities
if fire protection regulations under the building legislation are violated and an
actual danger9 exists in the sense of the building legislation.
9
Whether an actual hazard exists is a question to which there is no generic answer; this can be
determined only by an investigation conducted by experts on a case by case basis. In this context, it is
evident that case law in the field of fire protection tends not to set the threshold of the actual danger very
high. According to Münster Higher Administrative Court, the outbreak of a fire can be expected at
practically any time [100]. Fire protection measures are therefore precautionary protective provisions
[101]. For this reason, case law presupposes for the purpose of risk assessment that a fire has already
occurred (see [102], Para. 44 of Sect. 14).
1900 Fire Technology 2023
6.4. The Service Lifespan Plays a Decisive Role in the Complex Cause-and-
Effect Relationships of a FDAS
Numerous internal and external influencing factors affect the response behaviour
of fire detectors in the course of their service lifespan. The serviceability is conse-
quently a function of the particular usage parameters and environment [27, p. 31].
Fig. 6 shows schematically, in simplified form, the causes and effects between the
various usage parameters of a fire detector.
A change in a component or influencing factor is related to numerous other fac-
tors. Equally, a change in the service lifespan influences numerous other factors,
or requires them to be changed as a function of the service lifespan. The actual
causes and effects have for the most part not been adequately studied. Examples
are those between the service lifespan, the design of parts and the conditions of
use, such as certain air humidities, dust loads or ambient temperatures. While this
is just one detail of many, it illustrates the difficulty of estimating the impacts of
system changes in consideration of the service lifespan.
Not only fire detectors are part of a complex safety system and cause-and-effect
structure, they are also exposed to the influences of numerous and many-faceted
boundary conditions. The controlled replacement of fire detectors is a key element
Minimization of Risk by the Controlled Replacement... 1901
6.5. The Components and Their Ageing Influence the Service Lifespan
Function testing and replacement of fire detectors address the fact that electronic
parts age over their service lifespan. This ageing process is inherent to the system
and circumstances, and is not disputed. It concerns both the component itself, and
the conditions under which it is used.
The consequences of different failure rates of various parts, and how these in
turn affect the failure rates of devices and systems, vary widely. The failure rate of
parts varies from between 10–5 and 10–3 (means only every few years a failure
occurs) for sheathed terminal connections to between 100 and 102 for electronic
devices. Devices such as transformers exhibit failure rates from 10–3 to 101, and
electric valves from as much as 102 to 104 (means several failures occur per year).
The failure rate of large electronic systems ranges from 104 to 105. A Redundant
design of a system or relevant components significantly reduces the failure rate [1,
p. 93, 47].
Different fire detectors and different products are available that employ different
individual components. Components of fire detectors include circuit boards, pho-
toelectric elements, light-emitting diodes, capacitors, transistors, relays, resistors,
heat sensors and microprocessors, all of which differ in their ageing properties and
thus in their probabilities of failure. Typical failure rates for transistors, for exam-
ple, are 1.5 9 10–2, and for resistors 9.5 9 10–5. Fire detectors and all components
1902 Fire Technology 2023
of which they are composed are inherently subject to wear, which is influenced by
their individual operating conditions. For example, the components are subject to
soiling and corrosion stresses caused by the conditions of use. Over many years,
this also affects fire detectors with automatic drift compensation[24].
In order to illustrate the impact upon a component’s service lifespan, the exam-
ple of the total lifespan of a battery is used. This clearly shows the influence of
the usage parameters (battery temperature, battery current and depth of dis-
charge) [48, p. 38].
Owing to the many different and mutually interdependent ageing mecha-
nisms of a rechargeable lead battery, quantitative estimation of the ageing
behaviour is seen to be possible only to a limited extent, even with the use
of detailed model calculations [48, p. 38]. At an average current, an
increase in the operating temperature from 30 °C to 40 °C reduces the
cycle life by 25%. Increasing the mean discharge current leads to a
decrease in cycle life. At the given temperature of 30 °C, doubling the
current reduces the cycle life by approximately 7.5% [48, p. 40].
This example illustrates the mutual dependencies within a technical system, the
effects of changing one parameter or component upon the system as a whole, and
the fact that system characteristics such as service lifespan depend on the ambient
conditions. Since a fire detector consists of numerous individual parts and these
parts age for the most part differently, the individual parts inevitably deviate from
each other in their ageing behaviour. This must be taken into account during
analysis of the system as a whole, and is often resolved by means of safety factors.
In other safety applications, such as military applications and in nuclear technol-
ogy, high degrees of availability are a given requirement: depending on the fail-
safe category, it is common in such applications for multiple or high redundancy,
diversity or de-meshing to be implemented (see [1, 49, 50, p. 79]) or for the sys-
tems to be heavily overdimensioned (see [51]). In aerospace for example, redun-
dant and multiple redundant designs and locks are used for the fault mode [52, p.
276].
Natural ageing of the individual parts depends not only on the ambient condi-
tions but also on what parts are used. Different component and supplier qualities
can therefore have just as much influence on ageing as the algorithms or technolo-
gies employed. It can also be assumed that the different measurement principles
employed by the fire detectors and the use of different technologies to measure
various parameters result in corresponding differences in natural ageing.
Furthermore, indoor ambient conditions can have a strong impact on the ageing
of the fire detector. These include temperatures and temperature fluctuations,
meteorological influences (e.g. solar radiation), atmospheric humidity and air
velocity (i.e. air circulation). The fire detector can be exposed to these conditions
for different durations and at different intensities. The ambient influences are
likely to vary in their effects upon a FDAS as a whole; different fire detectors in
the same FDAS will therefore be affected differently, and consequently age differ-
ently. The service lifespan of a fire detector thus depends to a large extent on the
site of its use and the environmental conditions prevailing there.
Changes in a building’s use, alterations to the building or other influences in it,
which in some cases arise spontaneously, have an influence upon a fire detector’s
ageing behaviour and thus upon its service lifespan. Since it is now common for a
building to be used for different purposes in the course of its life cycle, the ageing
of a fire detector may be affected by changes in the use of the building, such as
the re-purposing of a warehouse as a workshop, resulting in the ambient condi-
tions varying significantly. Similarly, the ageing of a fire detector during the life
cycle of a building will be affected by alterations, construction sites or redecora-
tion work.
The reliability of a given fire detector product cannot be guaranteed uncondi-
tionally as such, as too many ambient conditions and the use of the products con-
cerned are relevant factors. The protection objectives of a FDAS must be ensured
at all times.
Table 6
Failure Rates of Fire Detectors as a Function of Years in Use ([24],
modified)
Class [age] Fire detectors tested [no] Fire detectors outside the limit values [no] Failure rate [%]
0–10 years 13 0 0
10–20 years 137 11 8
20–30 years 204 22 11
tinction made is between fire detectors with and without drift compensation,
which is reflected by the replacement interval of 8 or 5 years respectively; the
results of the study suggest that this distinction is reasonable.
6.7.1. FDAS Complying with the Standards Have a High Level of Availability Like
other technical systems of this type, FDAS exhibit a probability of failure. For
systems that can be repaired (such as a FDAS), this is termed availability; for sys-
tems that cannot be repaired (such as a fire detector) it is termed the probability
of failure (see [1]). The failure of fire detectors has been investigated in various
studies. The few systematic studies that have been conducted, particularly with
regard to the ageing of fire detectors, failed to produce clear, robust and general-
izable results (see Section 6.16). When FDAS are considered as an entire system,
availability serves as a characteristic reliability parameter describing the failure sit-
uation. The availability depends upon the probability of failure of the system.
This comprises the failure behaviour of individual components, maintenance and
the operating/ambient conditions; technical, human, organizational and environ-
mental factors interact in this context.
The failure behaviour of individual components is characterized primarily by
failure of parts as a result of ambient influences. This is dependent on, for exam-
ple, the materials used in manufacture of the component, the method of construc-
tion, the product type and the manufacturing quality (and also on the ambient
influences as described in Sect. 6.6). The quality of the service provider responsible
for planning and commissioning the system, and its use and handling during oper-
ation, also have a significant influence on its availability. The availability of stan-
dards-compliant FDAS in use which were commissioned and maintained by
certified installers has been examined by a differentiated study [46] and referenced
to the results of existing studies (see [67–72]). The availability averaged across the
FDAS under analysis is 99.9636% [46], and confirms results obtained in previous
studies [67] and [68]—both of which make reference to a significantly higher num-
ber of FDAS studied, but which neglected to provide detailed information on the
conditions of use. As regular surveys [73] show, the availability of FDAS is signif-
icantly lower in the cross-section of all systems in use, owing to defects. From the
difference it can be concluded that systems employing high-quality products and
installed, operated and maintained in accordance with the standards have an
availability that is on average 15% higher [46]. A conclusion can be drawn from
this finding with respect to high-quality maintenance, including function testing
Minimization of Risk by the Controlled Replacement... 1905
and replacement of fire detectors. These measures have the aim of ensuring high
availability of systems [15]. This objective is achieved, as can be seen in Fig. 7
from the distribution of the availability values of the systems analysed in detail
over the systems’ service lifespan. The confidence interval spans the first (25%) to
third (75%) quartiles of the reference data and is shown by the grey area. The
minimum and maximum values are shown as grey dots. The black dots show the
median of the systems over the studied duration of operation.
It can be seen that the availability of the systems over the years is stable, but
above all that the frequency of faults decreases owing to the influence of the sys-
tems’ maintenance. (However, the number of systems analysed decreases over the
duration of operation, since full documentation of the required system values was
available for only a few installations.)
points) are compared with those for reference fires to which the fire service was
alerted manually (i. e. by mobile phone and landline telephone) [43]. Of the build-
ing fires surveyed, 861 were actual fires to which the fire service was alerted manu-
ally and on which information on the resulting fire damage was available. In
further 175 fires, FDAS were installed. The difference in the damage distributions
can now be used to draw conclusions regarding the effectiveness of the FDAS
based on various damage criteria. FDAS primarily have an influence on the pro-
tection of persons and property. Owing to the low number of cases involving
harm to persons, the study does not yet permit any conclusions in this respect.
However, sufficient data are available on the estimated scale of damage, the
spread of fire and smoke, the accessibility of escape and rescue routes and the
consumption of extinguishing water.
Fig. 8 shows the effectiveness of FDAS with reference to these criteria. Fig. 8a
illustrates that the property damage estimated by the fire services for fires in
which the alarm was raised by FDAS is lower than for fires in which the alarm
was raised manually (the estimated property amage was less than e1,000 in 86%
of the former vs. 69% of the latter cases). This is despite buildings equipped with
a FDAS generally being of more complex construction and thus having a higher
potential for damage. In cases of fire where a FDAS was triggered, the fire was
confined to one property or device in 88% of cases at the time at which the fire
service arrived (see Fig. 8b). By comparison, this was the case for only 72% of the
reference fires. It is also seen that in the reference fires, the smoke had spread
comparatively further (in the dwelling, in the stairwell or over several floors) by
the time the fire service had arrived, as shown in Fig. 8c. In particular, the escape
Minimization of Risk by the Controlled Replacement... 1907
routes are less likely to be usable by the time the fire service arrives (58%) com-
pared to cases of fire signalled by a FDAS (79% of 198 cases). FDAS also have
an influence on the consumption of extinguishing water (see Fig. 8d): in fires to
which the fire service was alerted manually, over 500 L of extinguishing water
were consumed in 18% of the cases, whereas this was necessary in only 3% of the
cases in which a FDAS had been triggered automatically. The study of the effec-
tiveness of FDAS underlines their relevance to safety, and suggests that FDAS
satisfy the function required of them at the present time. However, this can be
achieved only if they function properly and their reliability—including that of the
fire detectors—is assured. For systems compliant with the standards, this is evi-
dently the case.
6.7.3. False Alarm Rates of FDAS are Decreasing False alarm rates for FDAS
have been declining for some years now, at least in certain regions in which this
has been studied (see [59, 62, 63, 66, 75, 76]). When such a trend is determined, it
should be noted that the number of false alarms triggered by FDAS should be
placed in relation to the number of installed systems connected to the fire services
[22]. Fig. 9 shows by way of example that since 2006, based on data from one fire
service, the false alarms per connected FDAS have been falling.
The standards in force support this development and are proving effective in
reducing false alarms. Provisions in standards governing maintenance have been
in place since 2003, those governing replacement of fire detectors since 2006. More
attention has been paid to them since these dates. These provisions can be expec-
ted to have had a greater effect since 2011/2014.
1908 Fire Technology 2023
occurring; it is argued that he need only take the precautions that are necessary
and reasonable to eliminate the hazard in consideration of the particular circum-
stances. [76] also states that soiled smoke detectors do not in any way jeopardize
attainment of the protection objectives; rather, soiled smoke detectors present a
risk of false alarms. The philosophy here is thus that false alarms triggered by
phenomena resembling an actual fire should ultimately be tolerated for reasons of
economic expediency, or exploited as an indicator of the need to replace fire
detectors. This should be viewed critically with respect to the associated, possibly
avoidable call of the fire service and erosion of the warning effect of an alarm
upon users of the building. Were this approach to be adopted and fire detectors
not be replaced until they begin triggering false alarms, the cost of not carrying
out maintenance in compliance with the standards would be borne by wider soci-
ety.10 [79] even states that an increased ‘‘false alarm rate’’ does not pose any
immediate hazard, since dealing with it lies within the responsibility of the user
and his own plant fire services and permanently manned positions. To date, false
alarms, and especially deceptive alarms triggered by phenomena resembling an
actual fire, have generally been paid for by the party causing them. The cost-effi-
ciency of this approach is questionable because it implies that when an inspection
has determined that the failure rate of the smoke detectors (in the case of more
than three false alarms from the affected detector array) is increasing as a function
of age, the entire affected detector array at the property concerned should be
replaced in order to avoid false alarms. This would result in numerous fire detec-
tors being replaced early. The reasonableness and cost-effectiveness of such an
approach as an alternative to controlled replacement of fire detectors as provided
for in the standard is questionable. The most important point however is that
soiled fire detectors jeopardize attainment of the protection objectives of a FDAS,
and by its nature, the probability increases with increasing service lifespan.
10
To put this in perspective: the costs of a false alarm depend on the personnel and material resources
required for the deployment, and its required duration [64]. In Germany, a false alarm costs between e600
and e1200, depending on the procedures of the local authorities. In Switzerland and Sweden, it is esti-
mated to be up to e2000 [55].
1910 Fire Technology 2023
have a negative impact on the risk situation since, firstly, fires may not be detec-
ted sufficiently early owing to the lack of sensitivity of the fire detectors, and sec-
ondly, the availability of FDAS could then decrease with increasing service
lifespan owing to the increasing probability of wear-related failures, or could
cause the maintenance effort elsewhere to rise. This may affect attainment of the
protection objectives.
11
Hold-open systems are used on smoke and fire protection closures that are to be held open contin-
uously during operation. Their purpose is to prevent the spread of smoke and fire, particularly on escape
routes, by ensuring that the smoke or fire protection closures are closed immediately and safely in the event
of fire. A hold-open system consists of at least one fire detector, a tripping device, a hold-open device and a
power supply [18].
Minimization of Risk by the Controlled Replacement... 1913
differing ageing effects upon the fire detectors occur from the ninth year onwards.
Sensitivities are both increased (higher probability of false alarms) and decreased
(alarms delayed or possibly not being triggered at all). In addition, the trigger
value is observed to drift by up to 20% over the life of the fire detectors from the
value for brand-new fire detectors. The drawback of this study is that here too,
only fire detectors used in relatively clean environments (office buildings) and a
statistically inadequate number of detectors per detector age group were tested.
A Finnish study [94] investigated the response behaviour of smoke alarm detec-
tors in relation to pyrolysis wood fires. The smoke alarm detectors studied were
collected randomly and comprised 17 optical smoke alarm detectors and 53 ion-
ization smoke detectors. The detectors ranged in age from 2 to 33 years. The
study shows that the response time increased with increasing age. Soiling (e.g. by
dust, insects, condensates) had an interference effect upon the ageing effect. The
results are limited in their validity and transferability, since ionization smoke
detectors are no longer used in many countries, and the number of detectors stud-
ied was also small.
It can be summarized that none of the studies produces clear, robust and gener-
alizable results. The general observation is that the probability of failure of fire
detectors is a function of the service lifespan. An exact function over the service
lifespan was however not deduced. In addition, both decreases and increases in
the fire detectors’ sensitivity were observed over the service lifespan. The former
resulted in a fire being detected with a delay or not at all; the latter in the proba-
bility of false alarms being increased. The studies do not provide any evidence to
support amending the current provisions of DIN 14675-1 and the replacement
intervals for fire detectors. On the contrary: it can be inferred from the results of
the latest study that the provisions are expedient.
Annex
Distribution Proportion
Alarm Alarm raised Alarm Alarm raised
raised manually (land- raised manually (land-
by line and mobile by line and mobile
FDAS phone) FDAS phone)
Criterion [n] [n] [%] [%]
References
1. Meyna A, Pauli B (2003) Taschenbuch der Zuverlässigkeits- und Sicherheitstechnik.
Quantitative Bewertungsverfahren. Carl Hanser Verlag, München
2. Schuster RI (1997) Verallgemeinerung des Semi-Markow-Prozesses zur Simulation und
quantitativen Betrachtung des Ausfallverhaltens sicherheitsrelevanter technischer Sys-
teme. Sicherheitswissenschaftliche Monographie Band 19. Gesellschaft für Sicherheits
3. Birolini A (1997) Zuverlässigkeit von Geräten und Systemen. Springer, Heidelberg
4. Strnad H (1985) Sicherheitstechnische Anlagenplanung und Anlagenbewertung. In:
Peters OH, Meyna A (eds) Handbuch der SicherheitstechnikSicherheit technischer
Anlagen, Komponenten und Systeme, Sicherheitsanalyseverfahren. , vol 1. Carl Han-
ser Verlag, München/Wien, pp 463–495
5. Lehder G, Skiba R (2007) Taschenbuch Betriebliche Sicherheitstechnik, 5th edn. Erich
Schmidt Verlag, Berlin
6. Meyna A (1982) Einführung in die Sicherheitstheorie. Carl Hanser Verlag, München,
Sicherheitstechnische Analyseverfahren
7. Peters O, Meyna A (1986) Handbuch der Sicherheitstechnik, 2Carl Hanser Verlag,
München
8. Kuhlmann A (1997) Einführung in die Sicherheitswissenschaft. TÜV Rheinland Ver-
lag, Köln
9. Meister-Scheufelen G (2021) Empfehlungsbericht des Normenkontrollrates Baden-
Württemberg—Entlastung von Bürokratie und Baukosten durch Optimierung des
Brandschutzes. Normenkontrollrat Baden-Württemberg
10. Baltzer S (2017) Wie die Brandschutzrepublik Deutschland ihre Bürger fordert und
frustriert., Frankfurter Allgemeinen Sonntagszeitung. https://www.faz.net/aktuell/wirt
schaft/brandschutz-verordnungen-in-deutschland-werden-immer-teurer-15277814.html.
Accessed 23 Jul 2021
11. EN 13306 (2017) Maintenance—Maintenance terminology; Trilingual version
12. EN 54–7 (2018) Fire detection and fire alarm systems—Part 7: Smoke detec-
tors—Point smoke detectors that operate using scattered light, transmitted light or
ionization
13. Schlosser I, Hartwig A, Berger H (2008) Brandschutzanlagen. Teil 2: Gaslöschanlagen,
Rauch- und Wärmeabzugsanlagen, Brandmeldeanlagen. Köln: VdS Schadensverhü-
tung Verlag.
14. DIN 14675-1 (2020) Brandmeldeanlagen—Teil 1: Aufbau und Betrieb. Berlin: Beuth-
Verlag
15. DIN VDE 0833-1 (2014) Gefahrenmeldeanlagen für Brand, Einbruch und Überfall.
Teil1: Allgemeine Festlegungen. Berlin: Beuth-Verlag
16. DIN VDE 0833–2 (2017) Gefahrenmeldeanlagen für Brand, Einbruch und Überfall –
Teil 2: Festlegungen für Brandmeldeanlagen. Berlin: Beuth-Verlag
17. DIN 14675–2 (2020) Brandmeldeanlagen—Anforderung an die Fachfirma. Berlin:
Beuth-Verlag
18. DIBt (2017) Muster-Verwaltungsvorschrift Technische Baubestimmungen. Deutsches
Institut für Bautechnik, Stand 2017
19. Festag S, Staimer A (2012) Unterschiedliches Verhalten gleicher Anlagentechnik:
Erläuterung am Beispiel der Gegenüberstellung von deutschen und britischen automa-
tischen Brandmeldeanlagen. vfdb Zeitschrift für Forschung, Technik und Management
im, Brandschutz. Nr.3, S.128–134.
20. EN 50710: 2021. Guidelines and requirements for Remote Services for fire safety and
security systems Berlin: Beuth-Verlag
1920 Fire Technology 2023
74. Festag S (01/2021) The statistical effectiveness of fire protection measures: learning
from real fires. Fire Technol
75. Friedl WJ (1994) Fehlalarme minimieren: Brand- und Einbruchmeldeanlagen -
Brandlöschsysteme. Technische Akademie Wuppertal. Berlin Offenbach: vde-Verlag
76. Euralarm (2021) Fact Sheet—Increase fire safety by understanding false alarms. Zug,
Schweiz
77. Festag S (2017) Brandalarm, aber hat es auch gebrannt (?)—Herausforderungen für
eine sichere Branderkennung. 64. Jahresfachtagung der Vereinigung zur Förderung des
Deutschen Brandschutzes e. V (S. 71–90). Bremen, 21–24 Mai 2017
78. Laarmann R (2019) Gefährdungsbeurteilung nach § 3—Arbeitsstättenverordnung zum
Austausch von Brand- (Rauch-) meldern in Brandmeldeanlagen und Feststellanalen
von Türen und Toren. BLB NRW
79. NA 144 (2018). Risikobasierte Instandhaltung von Brandmeldeanlagen. NAMUR -
Interessengemeinschaft Automatisierungstechnik der Prozessindustrie e.V
80. Ridder A (2015) Risikologische Betrachtungen zur strategischen Planung von Feuer-
wehren—Empirische Befunde und Systematisierung von Zielsystemen. Dissertation.
Bergischen Universität Wuppertal
81. Malchau T (09/2019) Feuerwehrbedarfsplanung der Kommunen und die Schnittstellen
zum vorbeugenden Branschutz. In Jochen Zehfuß (Hrsg.), Braunschweiger Brand-
schutz-Tage 2019. 33. Fachtagung, Brandschutz, Forschung und Praxis, Heft 235 (25–
34).
82. Wiemker H (2016) Die Dinge besser machen. Natur—Das Magazin für Natur,
Umwelt und besseres Leben. Ausgabe 11/16, Seite 56–60
83. Festag S, Stoll W (5/2016) Digitaler Analphabetimus. In Sebastian Festag (Hrsg.), Der
digitale Mensch: Nutzen und Gefahren personenbezogener Kenngrößen. XXXI.,
Sicherheitswissenschaftliches Symposion der Gesellschaft für Sicherheitswissenschaft
(35–50)
84. Schulze T (2006) Bedingt abwehrbereit: Schutz kritischer Informations-Infrastrukturen
in Deutschland und den USA. VS Verlag für Sozialwissenschaften, Berlin
85. Biermann K, Wiegold T (2015) Drohnen: Chancen und Gefahren einer neuen Technik.
Christoph Links Verlag, Berlin
86. NFPA News (2001) NFPA urges replacing home smoke alarms after ten years.
Quincy, Massachusetts. National Fire Protection Association
87. NFPA-72 (2019) National Fire Alarm and Signaling Code. National Fire Protection
Association Quincy, Massachusetts
88. DIN 14676 (2012) Rauchwarnmelder für Wohnhäuser, Wohnungen und Räume mit
wohnungsähnlicher Nutzung—Einbau, Betrieb und Instandhaltung. Beuth-Verlag, Ber-
lin
89. ZVEI Merkblatt 33003:2019–07. Hinweise zum Einsatz von Rauchwarnmeldern,
Brandwarnanlagen und Brandmeldeanlagen. ZVEI—Zentralverband Elektrotechnik-
und Elektronikindustrie e.V
90. Festag S (10/2016) Die Bedeutung des menschlichen Verhaltens für den Brandschutz -
Exemplarische Erklärungen. In: 4. Vorarlberger Brandschutztag, Brand-
verhütungsstelle Vorarlberg, Dornbirn, S. 5–12
91. Festag S (02/2017) Der Faktor Mensch—Die unterschätzte Größe bei Sicherheitsfra-
gen. FeuerTrutz Brandschutzkongress für vorbeugenden Brandschutz in Deutschland.
22.-23.02.2017, Nürnberg
92. Europäische Kommission (2019) Mitteilung der Kommission an das Europäisches Par-
lament, den Europäischen Rat, den Rat, den Europäischen Wirtschats-und Sozialauss-
chuss und den Ausschuss der Regionen—Der europäische Grüne Deal. Brüssel.
1924 Fire Technology 2023
Publisher’s Note Springer Nature remains neutral with regard to jurisdictional claims in published
maps and institutional affiliations.
Springer Nature or its licensor (e.g. a society or other partner) holds exclusive rights to this article
under a publishing agreement with the author(s) or other rightsholder(s); author self-archiving of the
accepted manuscript version of this article is solely governed by the terms of such publishing agreement
and applicable law.