BOMBA Certificate vs Fire Insurance Malaysia: What Each Covers

Do you still need fire insurance after a BOMBA certificate? This question lands in our inbox almost every renewal cycle, usually from a finance manager or premises owner who has just received a renewal notice and is trying to understand why two separate documents exist for what looks like the same risk. The short answer is that the BOMBA certificate proves your building complies with the Fire Services Act 1988 (Akta 341). Fire insurance is a contract that pays to reinstate your building when it burns down. They solve different problems. Treating one as a substitute for the other is the most common, and most expensive, fire risk error we see in the Malaysian market.

The Two Documents at a Glance

Before unpacking either document in detail, it helps to see them side by side. They look superficially similar (both reference fire, both come with annual obligations, both involve paperwork), but the underlying purpose and the institution behind each is completely different.

Criterion	BOMBA Fire Certificate	Fire Insurance Policy
Issuing body	Jabatan Bomba dan Penyelamat Malaysia	Licensed general insurer in Malaysia
Legal basis	Part V of Akta 341 (sections 27 and 28), with the list of designated premises set out in the Fire Services (Designated Premises) Order 1998 [P.U.(A) 276/98], as amended by P.U.(A) 289/2020	PIAM fire policy wording, Financial Services Act 2013
What it certifies or promises	Premises complies with fire safety requirements at time of inspection	Insurer will pay reinstatement value if covered perils cause loss
Validity period	Typically annual for designated premises listed in the Fire Services (Designated Premises) Order 1998 [P.U.(A) 276/98]	Annual policy term, renewable
What happens after a fire	BOMBA investigates cause, may issue findings to authorities	Insurer assesses claim, pays for repair or rebuild
Required by banks	Usually only at construction or change-of-use stage	Yes, with banker's interest endorsement, throughout the loan

The clearest way to internalise this is to look at what each document does the day after a fire. The BOMBA certificate sits in a file. The fire insurance policy starts paying claims.

What the BOMBA Certificate Actually Certifies

The Fire Certificate (Sijil Perakuan Bomba) is issued under Part V of Akta 341 (sections 27 and 28), with the list of designated premises set out in the Fire Services (Designated Premises) Order 1998 [P.U.(A) 276/98], as amended by P.U.(A) 289/2020. Hotels, factories above a certain threshold, hospitals, shopping complexes, and similar premises fall within scope. The certificate attests that, on the date of inspection, the premises satisfies active and passive fire protection requirements: sprinkler coverage, hose reels, fire alarm systems, emergency lighting, exit signage, compartmentation, and means of escape. For the full operational walkthrough of the renewal process, see our BOMBA fire certificate application and renewal guide.

The certificate does not guarantee that your building will not burn. It does not pay for repairs. It does not cover stock, plant, or business interruption. It is a compliance document, nothing more. Operating a designated premises without a valid certificate exposes the occupier to enforcement under Akta 341, which can include fines and an order to close until compliance is restored.

What Fire Insurance Actually Pays For

A Malaysian fire policy follows the PIAM standard fire wording. It is a contract of indemnity. When a peril named in the policy (fire and lightning, with limited explosion (gas used for domestic purposes) included by default; broader explosion is a separately named special peril extension) causes physical damage to the insured property, the insurer pays to reinstate or repair the property up to the sum insured. Fire insurance in its base form is narrow. Most factory and commercial owners extend it with special perils (flood, storm, riot and strike, impact damage), or move up to Industrial All Risks (IAR) for broader coverage on a single schedule.

The trigger is loss, not non-compliance. If your premises burns and your sum insured was set correctly on a reinstatement basis, the insurer pays for new-for-old replacement, subject to the policy terms. If the sum insured was set too low, the average clause kicks in and the insurer pays only a proportion of the loss. None of this depends on whether your BOMBA certificate was current. Some policies do include warranties about maintaining fire protection systems, and breach of those warranties can affect the claim, but the certificate itself is not the insurance.

The Worked Scenario: Factory Burns, Cert Current, No Policy in Force

Consider a mid-sized plastics factory in Shah Alam. The owner holds a valid BOMBA fire certificate, renewed three months before the incident. Sprinklers tested, hose reels charged, fire alarm panel passed inspection. One Saturday night, an electrical fault in an unguarded panel ignites cardboard packaging stacked nearby. The sprinklers activate, BOMBA responds, the fire is contained to one section. Total physical damage to building and stock: substantial.

The owner allowed the previous fire policy to lapse the year before, intending to switch insurers and never completing the new placement. The BOMBA certificate is current. The insurance is not. Outcome:

• BOMBA confirms compliance status was valid. No enforcement action under Akta 341.
• The bank holding the property loan invokes the banker's interest clause in the loan agreement. Because fire insurance with the bank named as loss payee was a loan covenant, the lapse is a default.
• The owner pays the full reinstatement cost personally, plus loss of stock, plus business interruption from production downtime.
• The certificate sits in the file, factually accurate, financially irrelevant.

This is the gap. The certificate proves the owner did the right thing on fire prevention. The insurance, had it been in force, would have funded the recovery. Different problems, different instruments.

Why Bankers and Tenants Often Treat Them as One Thing

Banks, principal contractors, and landlords routinely ask for "fire safety documentation" without distinguishing between certificate and policy. We have seen tenancy agreements that list both in the same clause and loan documents that bundle them under a single heading. This convenience drafting blurs the distinction in the operator's mind. The two documents have to be tracked separately because they renew separately, expire separately, and respond to different triggers. Foundation's BOMBA fire certificate checklist and the fire insurance vs IAR comparison are designed to be used in parallel for exactly this reason.

When You Need Each: A Practical Map

Situation	BOMBA Certificate	Fire Insurance
Premises listed in the Fire Services (Designated Premises) Order 1998 [P.U.(A) 276/98] (factory, hotel, hospital, mall)	Required by law	Required by lender, prudent regardless
Small shoplot SME, ground floor retail	Generally not designated	Strongly recommended, often required by landlord
Bank-financed commercial property	Required if designated	Required for the duration of the loan
Plant operating without sprinkler upgrade	Certificate may be conditional or refused	Policy may load premium or impose warranties
After a partial fire loss	Re-inspection may be required	Claim assessed, settlement negotiated

The Hybrid Case: You Need Both

For designated premises, the answer is always both. The certificate keeps you on the right side of Akta 341 and keeps the doors open. The fire policy, ideally on an IAR basis with business interruption, keeps the business solvent if a loss occurs. Treat them as two parallel obligations on two parallel renewal calendars, not as a single annual compliance event.

Frequently Asked Questions

Foundation Conclusion

The BOMBA fire certificate and the fire insurance policy answer two different questions. The certificate answers whether the premises meets the standards in Part V of Akta 341 (sections 27 and 28) and the Fire Services (Designated Premises) Order 1998 [P.U.(A) 276/98], as amended by P.U.(A) 289/2020. The policy answers whether the business survives financially if a covered loss occurs. Conflating the two is the route to a clean compliance file and an empty bank account after a fire.

Foundation is a specialist intermediary working across Fire, IAR, and broader engineering insurance lines for Malaysian property owners. We do not issue BOMBA certificates and we do not certify buildings. We do read your policy schedule against your risk profile, check that the banker's interest endorsement is correctly worded, and surface the gaps before renewal so they do not become the surprise after a loss.