The principle of ALARP, meaning As Low As Reasonably Practicable, is one of the most important concepts in safety management, risk assessment, and fire engineering. Widely used throughout the United Kingdom and many other industries worldwide, ALARP provides a balanced approach to managing risk by recognising that while risk can rarely be eliminated entirely, it can and should be reduced to a level that is reasonably practicable. Understanding ALARP also requires an appreciation of its less commonly discussed counterpart: the concept of overprotection, where disproportionate effort and resources are devoted to controlling risks that are already adequately managed.
The ALARP principle originates from UK health and safety legislation and has been widely applied in industries such as railways, aviation, nuclear power, healthcare, and fire safety. The concept requires organisations to reduce risks to a level where any further reduction would involve a cost, effort, or disruption that is grossly disproportionate to the benefit gained. In simple terms, ALARP asks three key questions:
- Is the risk acceptable?
- Can the risk be reduced further?
- Is the additional cost or effort of reducing that risk justified by the improvement achieved?
If a reasonably practicable measure exists that would significantly reduce risk, it should normally be implemented. However, once the cost or effort becomes disproportionate to the safety benefit achieved, the risk may be judged to have reached the ALARP level.
The ALARP Triangle: ALARP is often illustrated using a risk triangle divided into three distinct zones:
Intolerable Region: Risks in this area are considered unacceptable regardless of economic cost. Action must be taken to reduce the risk before the activity can continue.
ALARP or Tolerable Region: This is the middle zone where risks may be tolerated provided they have been reduced as far as reasonably practicable. Most engineering and management decisions are made within this region.
Broadly Acceptable Region: Risks within this area are considered so low that no additional risk reduction measures are generally required beyond maintaining good standards of management and compliance.
The purpose of the ALARP principle is to guide organisations towards appropriate decision-making, ensuring that safety improvements are both effective and proportionate.
Understanding Overprotection: Overprotection occurs when additional controls, systems, or procedures are introduced despite there being little or no meaningful reduction in risk. In essence, resources are spent on measures that provide negligible additional safety benefit. The concept can be difficult to accept because the natural assumption is that “more safety” must always be better. However, excessive safety measures can introduce their own problems, including increased cost, operational complexity, maintenance burdens, and unintended consequences.
For example, installing multiple layers of redundant fire safety systems in an area where risk is already very low may provide little measurable improvement in occupant safety while consuming significant financial resources that could be better invested elsewhere.
Why Overprotection Can Be Problematic
An overprotected environment can create several challenges:
1. Excessive capital expenditure.
2. Increased maintenance and testing requirements.
3. Greater system complexity and potential for failure.
4. Diversion of resources from higher-risk areas.
5. Reduced operational efficiency.
In healthcare environments, for example, spending large sums on unnecessary risk controls in one department may reduce the funding available for addressing more significant fire safety issues elsewhere within the estate.
ALARP as a Decision-Making Tool
The strength of ALARP lies in its ability to prevent both underprotection and overprotection. It encourages decision-makers to adopt a balanced, evidence-based approach to risk management. A well-executed ALARP assessment considers....
- The likelihood of an event occurring.
- The potential consequences.
- Available risk reduction measures.
- The effectiveness of those measures.
- The cost, effort, and practicality of implementation.
The objective is not to eliminate all risk, which is often impossible, but to ensure that risks are reduced to a level that society, regulators, organisations, and stakeholders can reasonably accept.
In my book, “Fire Strategies – Strategic Thinking”, I relate ALARP and overprotection to risk profiling. This is where the fire engineer may need to get across to the stakeholders that one risk profile may require more resources to mitigate the risk to an acceptable level than a lower risk profile. Similarly, the same level of resources applied to two different risk profiles will leave different levels of residual risk. In fact, I believe that risk profiles can be illustrated by curves, not dissimilar to the supply and demand curves that every person who has studied economics has come across. These are shown in the diagram shown with this article.
The coordinates are “level of risk” and “cost.” Let us take one risk profile as an example. We could start with the idea that with minimal cost associated with applying fire safety and protection resources, there will be an understood level of risk. As resources are purchased and brought into the strategy, the level of risk will gradually be reduced until an optimum level of risk versus cost is reached.
As more cost is invested into further risk mitigation provisions, the level of additional risk reduction will reduce until it reaches a stage where there will always be a residual level of risk. Note that buildings of a certain type and use will inherently have different risk profiles, so the risk/cost curve will be on a different plane the riskier the profile, the more the curve moves to the right.
The purpose of the curve analogy is to promote an alternative way of thinking about risk acceptance.
ALARP remains a cornerstone of modern risk management because it promotes proportionality and sound engineering judgement. It recognises that safety improvements should be pursued vigorously where justified, while acknowledging that unlimited expenditure or complexity does not necessarily deliver meaningful safety benefits. The concept of overprotection serves as an important reminder that effective risk management is about achieving the right balance. By reducing risks to a level that is as low as reasonably practicable, organisations can allocate resources intelligently, maintain compliance, and deliver safe, efficient, and sustainable systems and operations.
