Critical functions live in the interfaces: fire alarms shutting down air handling, starting smoke control, homing lifts, releasing doors and cutting gas. Each system passes its own tests while the links between them go untested, and every new fire panel, lift controller or BMS can break them. Documentation is lost, proprietary gateways lock buildings in, and shared networks expose systems to attack. Only full integrated testing proves a building in a fire.

What it is and how it is built

Integrated building systems are the interfaces between services: the links that make the fire alarm shut down air handling, start smoke control, release doors and home lifts; the building management system reading meters and controlling plant; access control talking to lifts and car park gates; and the networks that now carry most of this data. Each system has its own page; this page covers what happens between them. In modern buildings, many critical functions exist only in the interfaces, so a building can have every system working on its own and still fail in a fire or an outage.

Common interfaces
InterfaceWhat it doesWhat commonly fails
Fire alarm to air handling and smoke controlShut down or switch AHUs; start fans and dampersInterfaces broken by upgrades; cause-and-effect out of date
Fire alarm to liftsHome lifts; enable fire-fighter controlLift modernisation without re-testing
Fire alarm to access control and doorsRelease locks; close fire doorsLocks that stay locked
Fire alarm to gas and kitchen systemsShut off gas; stop exhaust or start suppressionBypassed interlocks
BMS to plant and metersControl, schedule and monitorOverrides; lost points; unsupported software
Access control to lifts and car parksFloor and gate access by credentialVendor lock-in; failed integration after upgrades
Building networksCarry BMS, security, lighting and metering dataCyber exposure; no ownership; flat networks

The record of how these systems are supposed to work together (the cause-and-effect matrix, the integration specification and the network design) is often the first document lost, and the last one updated.

Service life and what shortens it

How long integration stays valid
ItemTypical lifeWhat moves it
Cause-and-effect matrixValid until any connected system changesUpgrades, fit-outs, modernisations
Interface hardware (relays, modules, gateways)10 to 20 yearsPanel and system replacement
Integration software and protocols5 to 15 yearsVendor support; security updates
Network equipment5 to 10 yearsVendor support; security
DocumentationOut of date at the first changeDiscipline of updating

What shortens validity:

  • Replacing one system (fire panel, lift controller, BMS) without re-testing the others connected to it.
  • Fit-outs that add zones, doors and plant without updating the matrix.
  • Proprietary protocols that stop working when one vendor changes.
  • Unmanaged networks that no one owns.

Integration lasts only as long as every connected system stays unchanged.

How it fails

Untested interfaces

Systems are routinely tested on their own: fire alarms, smoke fans, lifts and locks each pass their checks. The interfaces between them are tested only in full integrated tests, which are often skipped. Faults then appear only in a real fire: air handlers keep running, lifts do not home, doors stay locked.

Changes without re-testing

A new fire panel, lift controller, access control system or BMS breaks interfaces unless every connected function is re-tested. Each modernisation is a point of failure for the others.

Lost documentation

Without a current cause-and-effect matrix and integration records, nobody knows what the building should do in a fire or outage, so faults cannot be recognised.

Vendor lock-in and obsolescence

Integrations built on proprietary gateways depend on vendors who may withdraw support, raise prices or disappear, leaving the building unable to change any one system without disturbing the rest.

Cyber exposure

Building systems connected to shared or internet-facing networks, with default passwords and unpatched software, can be attacked, and an attack on one system can reach others. Building networks often have no owner and no security monitoring.

Unclear ownership

Interfaces cross the responsibilities of several contractors; each maintains its own system and none owns the links. Faults fall between them.

Interfaces are also lost quietly during routine maintenance, when relays are bypassed to stop nuisance shutdowns and never restored.

What to look for

On site

  • Systems of very different ages and vendors connected together.
  • BMS graphics or alarms showing communication failures with other systems.
  • Interface panels and relays without labels.
  • Building network equipment in unsecured cupboards; no network diagram.

In the records

  • Cause-and-effect matrix and its date.
  • Full integrated test reports.
  • Integration specifications and protocols.
  • Network diagrams and access controls.
  • Cyber security assessments.
  • Bypass switches or disabled outputs on fire panels for air handling, lifts or doors.
  • Contractors who each say an interface is someone else's responsibility.
  • Fire drills where some systems responded and others did not.

Telling causes apart

Reading the signs
What you seeMost likely causeWhat confirms it
Lifts did not home in a real alarmInterface broken after lift or fire panel changeIntegrated test
Doors stayed locked in a drillAccess control interface failureInterface test
BMS shows plant offlineGateway or protocol failureNetwork diagnostics
No one can say what the building does in a fireMatrix lost or out of dateRecords review
Unknown devices on the building networkUnmanaged networkNetwork audit

How serious it is

Findings are graded by what they demand: safety (can hurt someone now), failure (failed and damaging the building), condition (distress present and progressing), lifecycle (renewal due on age and exposure), deadline (a regulator or ordinance sets the date), check (investigate before sizing works) and nil (cosmetic or stable).

Grading integration findings
FindingSituationWhat it means for timing
Fire interfaces failing (AHUs, smoke control, lifts, doors, gas)safetyRectify now; fire watch if needed
Integration failure stopping plant or accessfailureRestore now
Integrated testing due under standards or certificationdeadlineAt the prescribed interval
Cyber exposure; poor documentationconditionImprove in the near term
Integration platforms unsupportedlifecyclePlan replacement
No integrated test since major changescheckTest
NormalnilRoutine

Investigation and testing

A building services engineer experienced in systems integration leads, with the fire, mechanical, lift, security and controls contractors present and a cyber security specialist for networks.

  • Records review: cause-and-effect matrix, integration specifications, protocols, network diagrams, and the dates of every change to connected systems.
  • Full integrated test of fire functions: initiate alarms by zone and confirm every connected response, including air handling, smoke control, lifts, doors, gas and suppression.
  • BMS and access integration check: communications, points, and functions across systems.
  • Network and cyber review: segmentation, remote access, credentials, patching and ownership.
  • Responsibility map: who maintains each interface.

The report should state which interfaces work, which fail, who owns each, and what must be fixed or documented.

The integrated test is the single most informative check of a building's life-safety systems, and it is usually the one most overdue.

Remedies and what they involve

  • Rectify failed interfaces and re-test every connected function, not just the one that failed.
  • Update the cause-and-effect matrix and integration records, and make updating them a condition of every contract that touches a connected system.
  • Integrated testing at least annually and after any change to the fire panel, smoke control, lifts, access control or BMS, with all contractors present.
  • Open protocols in new integrations, so systems can be replaced independently.
  • Network segmentation: separate building systems from corporate and guest networks, control remote access, change default credentials and patch.
  • Single point of responsibility: appoint one contractor or engineer to own the interfaces and coordinate testing.
  • Golden thread of information: a maintained record of how systems connect, kept with the building.

Cost shape

Full integrated testing is a recurring lump sum, larger than the sum of individual tests because several contractors must attend together out of hours. Interface repairs are itemised and usually modest. Replacing an integration platform is a lump sum that should be timed with the replacement of a major connected system. Network security works are lump sums with recurring monitoring. Documentation is a small cost that saves large ones.

Fire interface items are code compliance; integration platforms are lifecycle; cyber measures are risk management.

Standards and jurisdiction

  • Australia. AS 1851 sets routine service of fire protection systems and their interfaces, and AS 1670.1 and AS 1668.1 define fire alarm and smoke control interfaces; annual fire safety certification depends on those interfaces working; performance solutions often rely on them.
  • United Kingdom. BS 7273 covers the interface between fire detection and other systems such as door locks and gas shut-off; BS 9999 sets testing; the Building Safety Act 2022 requires a golden thread of accurate building information, including how systems connect, for higher-risk buildings.
  • United States. NFPA 4 sets integrated testing of fire protection and life safety systems, including after changes; NFPA 72 covers interfaces; local fire codes and authorities having jurisdiction require re-acceptance testing after modifications.

What to ask the owner or agent for

  • Current cause-and-effect matrix with its date and author.
  • Full integrated test reports since the last major change.
  • Integration specifications, protocols and gateway details.
  • Network diagrams and remote access arrangements.
  • Cyber security assessments.
  • Contracts showing who maintains each interface.
  • Records of bypassed or disabled fire panel outputs.

Sources

Related references: the Capital Register and the MR Index.