What an insurer risk survey actually is
A risk survey is an underwriting document. An engineer or risk control specialist appointed by the insurer inspects the premises, records construction, occupancy, protection and exposure, estimates the maximum loss the site could sustain, and produces a report containing recommendations. That report is then used to decide whether to write the risk, at what rate, with what deductible and on what conditions.
The recommendations are not advice in the ordinary sense, and treating them as optional is where most of the difficulty arises. They fall into distinct categories with very different consequences, and the categories are not always labelled clearly in the report itself.
Reading the covering letter and the policy endorsements together is what establishes the category. A recommendation described as desirable carries no contractual weight. A requirement expressed as a condition of cover, with a completion date, changes the basis on which the insurer has agreed to indemnify, and a survey requirement that has passed its date without being either completed or formally extended is a live problem regardless of how well the site is otherwise run.
How survey outcomes are usually categorised:
- Recommendations - improvements the insurer suggests, with no contractual consequence.
- Requirements - actions to be completed by a stated date as a condition of continued cover.
- Warranties - continuing obligations that, if breached, may entitle the insurer to decline a claim.
- Conditions precedent to liability - obligations that must be satisfied before the insurer is liable at all.
- Deductible or rating adjustments - commercial consequences applied where a control is absent.
- Exclusions - perils removed entirely until a specified control is in place.
The statutory floor: occupational health and safety
Insurance requirements sit on top of statutory obligations that exist whether or not a policy is in force. The Occupational Health and Safety Act 85 of 1993 imposes the general duties from which most site-level risk improvement flows. Section 8 requires every employer to provide and maintain, as far as reasonably practicable, a working environment that is safe and without risk to the health of employees - including safe plant and systems of work, the identification of hazards, and the provision of information, instruction, training and supervision. Section 9 extends that duty to persons other than employees who may be affected by the undertaking, which is the provision that captures visitors, contractors and the public.
Section 16(2) is the governance provision. It allows the chief executive officer to assign the duty of ensuring compliance to a person under their control, in writing, which is the basis of the familiar 16.2 appointment. The appointment must be specific, current and matched to the person actually performing the function - an appointment naming someone who left the business two years ago is worse than no appointment at all, because it evidences a system that is not being maintained.
The subordinate regulations carry the practical detail. The Environmental Regulations for Workplaces require means of egress, fire equipment and emergency arrangements. The General Safety Regulations, General Machinery Regulations and, on construction sites, the Construction Regulations each impose specific obligations. Where contractors are engaged, section 37(2) permits the employer and the mandatary to regulate their respective duties by written agreement, and the absence of that agreement leaves the duty where the Act puts it.
Source: Occupational Health and Safety Act 85 of 1993, sections 8, 9, 16(2) and 37, read with the Environmental Regulations for Workplaces, the General Safety Regulations and the Construction Regulations, 2014.
Fire protection: the requirements insurers rely on
Fire is the peril that produces the largest single losses in South African commercial property, and it is the area in which survey requirements are most detailed. The building control framework flows from the National Building Regulations and Building Standards Act 103 of 1977, with the technical content in SANS 10400 - Part T addressing fire protection, and the related standards governing detection, equipment and water supplies.
Insurers rely on those standards because they are auditable. A sprinkler system designed and maintained to the applicable standard, a detection and alarm system installed and serviced to SANS 10139, portable fire equipment serviced to SANS 1475 with current certificates, and hydrants and hose reels with proven flow and pressure are all matters that can be evidenced with dated documents. A statement that the site takes fire seriously cannot.
Maintenance is where compliance most often lapses. Systems are installed correctly at commissioning and then drift: a sprinkler valve is closed during maintenance and not reopened, a detection zone is isolated because of false alarms and never restored, extinguishers pass their service date, a fire door is wedged open for operational convenience, storage is racked above the sprinkler design height, or a new mezzanine is built without extending detection beneath it. Each of these is discoverable in an internal walk-through and each of them is discoverable by a loss adjuster after a fire.
Source: National Building Regulations and Building Standards Act 103 of 1977, read with SANS 10400-T (fire protection), SANS 10139 (fire detection and alarm systems) and SANS 1475 (portable fire equipment).
Electrical compliance and the certificate of compliance
Electrical faults are a leading cause of fire, and the electrical certificate of compliance is the most commonly outstanding item on South African commercial risks. The Electrical Installation Regulations made under the Occupational Health and Safety Act require the user or lessor of an electrical installation to hold a valid certificate of compliance for that installation, issued by a registered person following inspection and testing against SANS 10142-1.
The obligation is frequently misunderstood in three ways. It attaches to the user or lessor, so a tenant occupying leased premises cannot simply assume the landlord's position is in order. It applies to the installation as it currently stands, so any addition or alteration - a new distribution board, an added production line, a solar photovoltaic installation, a generator changeover - requires a certificate covering that work. And a certificate is a statement about the installation on the date of inspection, not a permanent clearance.
Thermographic surveys have become a standard insurer requirement alongside the certificate, because infrared scanning of distribution boards and switchgear under load identifies developing faults - loose connections, overloaded circuits, failing components - before they cause a fire. An annual thermographic scan with a report and evidence that the defects it identified were rectified is one of the more cost-effective items on a typical improvement programme.
Solar photovoltaic and battery installations deserve particular attention. They are being installed rapidly across South African commercial property, they materially alter the electrical installation and the roof loading, they introduce lithium battery fire risk, and they are frequently installed without the insurer being notified. That is a disclosure issue as much as a compliance one.
Source: Electrical Installation Regulations, 2009, made under the Occupational Health and Safety Act 85 of 1993, read with SANS 10142-1 (the wiring of premises).
Read our commercial building insurance guide →
Prioritising: what to spend on first
A survey report can contain thirty recommendations, and treating them as a single undifferentiated list guarantees that the wrong things are done first. The useful question is not which item is cheapest, nor which is easiest, but which items change the maximum loss the site could sustain.
That reframing usually reorders the list substantially. Fire separation, sprinkler protection, the segregation of high-hazard storage and the protection of a single irreplaceable machine all reduce the size of the worst credible loss. Improved housekeeping, hot work permits, better access control and staff training reduce the likelihood of a loss occurring. Backups, alternative premises, supplier redundancy and continuity planning reduce the duration of the interruption if it happens anyway. All three matter, but only the first category changes what the site could lose in a single event.
Against that, cost, disruption, lead time and feasibility have to be weighed honestly. Some requirements are genuinely impractical in an existing building, and the right response is not silence but a documented alternative: an explanation of why the requirement cannot be met as specified, the compensating control proposed instead, and the insurer's written acceptance of that alternative. An unmet requirement that has been discussed and varied is a managed position. An unmet requirement that has simply been ignored is not.
A workable prioritisation sequence:
- Anything expressed as a condition precedent or warranty, regardless of cost.
- Requirements with a completion date, in date order.
- Controls that reduce the maximum credible loss - separation, suppression, segregation.
- Controls that reduce likelihood - housekeeping, permits, maintenance, training.
- Controls that reduce duration - backups, redundancy, continuity arrangements.
- Recommendations that improve the presentation of the risk without changing it materially.
Read our business interruption insurance guide →
Evidence: the record that survives a claim
Completed work that cannot be evidenced is, for insurance purposes, work that was not done. The certificate, the invoice, the photograph, the service report and the test result are what establish that a control existed on the day of the loss, and they are what a loss adjuster asks for first.
The practical failure is almost never the work itself. It is that the certificate sits in a contractor's email, the service reports are in a facilities manager's filing cabinet at the site that burned down, and nobody can establish when the sprinkler valve was last tested. A single maintained register - action, owner, date completed, cost, document reference, and where the document is stored off-site - solves this at negligible expense.
That register serves three purposes beyond the claim. It is the document that supports a renewal negotiation, because it demonstrates a managed risk rather than asserting one. It is what allows a new broker, insurer or surveyor to be brought up to speed without repeating the whole exercise. And it is the record that shows a board that the money spent on risk improvement produced something.
Keeping the programme alive as the risk changes
A risk improvement programme is not a project with an end date. Sites change continuously, and most of those changes are also disclosure events under the policy. A new tenant with a different occupancy, a new production process, an extension or mezzanine, a change in the nature or quantity of stock held, a solar installation, a switch of security provider, or the introduction of a new hazardous material each alters the risk the insurer accepted.
The disclosure point is worth stating plainly, because it is where risk improvement and policy validity meet. South African law requires material facts to be disclosed before cover is accepted and whenever the risk changes, and the Supreme Court of Appeal has upheld the rejection of substantial fire claims where an activity carried on at the insured premises was not disclosed. A change that would have caused an underwriter to ask a further question is a change that needs to be raised at the time.
The rhythm that works is unremarkable: a quarterly review of open actions, an annual walk-through against the survey report before renewal, and an immediate update whenever something material changes. It is a small amount of administration set against the two outcomes it prevents - a claim reduced or declined for breach of a condition, and a renewal negotiated from a position of ignorance.
Read our business insurance guide →
COMMON QUESTIONS
Risk improvement programme questions, answered clearly.
What is a short-term insurance risk improvement programme?
It is a structured plan for identifying, prioritising, implementing and evidencing controls that address material loss exposures. It can include physical protection, maintenance, operational procedures, cyber controls, continuity measures and specialist assessments.
Do risk improvements reduce insurance premiums?
They can improve the information and risk controls available for an insurer's assessment, but no premium reduction, capacity, policy term or renewal outcome can be guaranteed. Each insurer decides its own underwriting response based on the full risk and market conditions.
How are cost-effective improvements selected?
The programme considers the severity and likelihood of loss, the action's practical effect, implementation cost, operational disruption, insurer requirements and the time needed to complete it. Lower-cost actions with meaningful impact are often addressed first, while material capital projects are planned and tracked.
Does insurance.net.za carry out the improvement work?
insurance.net.za manages the insurance risk record and supports the client in planning, prioritising and tracking the programme. Where specialist work is needed, the client appoints suitable providers and we help keep their scope, evidence and progress connected to the insurance decision.
Why is evidence of completed work important?
Evidence helps the client, insurer and financial intermediary understand what control exists, when it was completed and whether it is maintained. It also reduces the chance that completed work is overlooked at renewal or when a claim is investigated. Completed work that cannot be evidenced is, for insurance purposes, work that was not done.
What is the difference between an insurer recommendation and a requirement?
A recommendation is an improvement the insurer suggests, with no contractual consequence. A requirement is an action to be completed by a stated date as a condition of continued cover. Warranties and conditions precedent go further and may entitle the insurer to decline a claim or exclude liability entirely. The category is established by reading the survey covering letter together with the policy endorsements, not by the tone of the report.
What happens if a survey requirement is not completed by its date?
An outstanding requirement that has passed its date without being completed or formally extended changes the basis on which the insurer agreed to indemnify, and can result in a reduced settlement, an increased deductible, an exclusion or a declined claim depending on how the requirement was expressed. Where a requirement is genuinely impractical, the correct response is a documented alternative with the insurer's written acceptance rather than silence.
What are the main statutory obligations behind risk improvement in South Africa?
The Occupational Health and Safety Act 85 of 1993 imposes general duties on employers under sections 8 and 9, with governance responsibility assigned in writing under section 16(2) and contractor duties regulated under section 37. Fire protection flows from the National Building Regulations and Building Standards Act 103 of 1977 and the SANS 10400 standards, and electrical installations require a valid certificate of compliance under the Electrical Installation Regulations.
Does a solar installation need to be disclosed to the insurer?
Yes. A photovoltaic or battery installation materially alters the electrical installation and the roof loading, introduces lithium battery fire risk, and requires an updated electrical certificate of compliance covering the new work. It is a disclosure event as well as a compliance one, and it should be raised with the insurer at the time rather than after a loss.
How often should a risk improvement programme be reviewed?
A quarterly review of open actions, an annual walk-through against the survey report before renewal, and an immediate update whenever something material changes. New tenants, processes, extensions, stock, security providers or hazardous materials each alter the risk the insurer accepted and are disclosure events in their own right.
