01
Fast route
Professional Check
Five safety evidence tests, one installation-change scenario and a demanding emergency-planning check.
- Five focused lessons
- 10 scored questions
- Answer rationales after submission
About 15 minutes
Vitreous Learning 07
Professional BESS course · Great Britain
Safety is a layered evidence case
Follow the failure chain from cell to site. Test propagation evidence, layout, detection, ventilation, suppression and emergency response against the actual installation.
2 learning routes80% pass standard30 assessment questions
Choose your route
Evidence ledNFCCULGOV.UKTechnical cut-off · 24 August 2026
One subject · two depths
Choose your route
This course equips non-specialists to interrogate BESS safety evidence. It does not replace competent fire, electrical or process-safety design.
02
Full route · recommended
Detailed Course
From hazard pathways and propagation tests through site controls, emergency response, operations and a complete evidence-gap case.
- Nine detailed modules
- Fenbank worked case
- 20 scored questions
75 to 90 minutes
Scores and progress remain on this device. No account or sign-up is required.
Professional Check · About 15 minutes
Can you tell a certificate from a site-specific safety case?
Use layered controls and representative evidence to test whether the actual BESS design has addressed credible hazards.
Lesson 1 of 5
Separate hazard, control and residual risk
Thermal runaway, flammable gas, electrical energy and contaminated runoff are hazards. Design and procedure determine risk.
Build credible initiating events and consequences before listing controls. Consider cell defect, abuse, overheating, electrical fault, water ingress, control failure and external fire.
Use prevention, detection, isolation, propagation resistance, ventilation, fire control, separation and emergency response as layered barriers.
Hostile check
A long equipment list is not a risk assessment unless each control connects to a credible failure path.
Lesson 2 of 5
Understand propagation evidence
A thermal-runaway test characterises behaviour under its tested configuration and conditions.
UL 9540A examines fire and propagation behaviour at defined levels. Its report can inform gas, heat, flame, deflagration, spacing and protection decisions.
Record edition, cell, module, enclosure, installation, state of charge and protection features. Compare every material site parameter.
Hostile check
A pass label without the full report and configuration comparison is weak due-diligence evidence.
Lesson 3 of 5
Audit the site layout
Spacing, access, topography, drainage, nearby receptors and prevailing conditions shape the installation risk.
Confirm container orientation, separation, transformer location, fire-service access, isolation points, water supply and runoff containment. Check whether later layout revisions remain inside the evidence envelope.
Engage the local fire and rescue service early as encouraged by GB planning guidance.
Hostile check
A generic manufacturer's layout can conflict with the actual site's access, wind and drainage conditions.
Lesson 4 of 5
Test detection and mitigation as a system
BMS alarms, gas and smoke detection, ventilation, isolation and suppression must act coherently under failure.
Review detection thresholds, alarm routing, control logic, backup power, remote monitoring and fail-safe states. Establish the intended purpose of suppression or cooling.
Check deflagration risk before assuming ventilation or door-opening strategies are safe.
Hostile check
Adding suppression equipment does not prove control effectiveness when detection, ventilation and enclosure behaviour are unresolved.
Lesson 5 of 5
Make the emergency plan operational
The plan must tell operators and responders what to do, what to avoid and how to protect people and the environment.
Include contacts, access, shutdown, electrical isolation, hazards, water and runoff strategy, gas monitoring, exclusion zones, re-ignition, damaged-unit handling and recovery.
Keep an accessible site information pack and exercise the plan. Update it after design or equipment changes.
Hostile check
An emergency plan copied from another site can direct responders toward unavailable isolation points or water supplies.
Professional Check assessment
Answer every question before submitting. Correct answers and rationales appear only after the complete attempt.
Professional CheckQuestion 1 of 10
Detailed Course · 75 to 90 minutes
Audit the safety chain from cell to emergency response
Connect test evidence, design controls, operating procedures and responder information to the installed configuration.
Module 1 of 9
Build the failure pathway
Trace initiating event, cell failure, propagation, gas release, ignition, pressure, fire spread and environmental consequences.
Use bow-tie or equivalent analysis to map preventive and mitigative barriers. Include electrical shock, arc flash, toxic or flammable gases, overpressure, projectiles, water contamination and re-ignition.
Define credible worst cases and the assumptions used to exclude others.
Hostile check
Starting with preferred controls can bias the hazard analysis away from inconvenient scenarios.
Module 2 of 9
Match test evidence to configuration
Representative evidence requires a documented comparison between tested and installed systems.
Compare cell chemistry and format, module, rack, enclosure, ventilation, detection, suppression, state of charge, spacing and installation arrangement. Preserve report edition and limitations.
Where the site is less conservative, obtain competent justification, modelling or additional testing as appropriate.
Hostile check
A product family name does not prove that the installed cell and firmware match the tested configuration.
Module 3 of 9
Use UL 9540A within its scope
UL 9540A is a test method that produces safety-related behaviour data for design and code decisions.
It can characterise thermal runaway and propagation, heat and gas release, deflagration and fire spread under the edition and test level used. Read the detailed report rather than a marketing certificate.
For a GB project, establish how international test evidence supports the site-specific risk assessment and local planning or fire-service expectations.
Hostile check
Treating an American test method as a universal approval for any GB layout overstates its legal and technical role.
Module 4 of 9
Audit spacing, access and exposure
Site geometry affects fire spread, responder safety and environmental control.
Check separation between enclosures and other plant, boundary distances, vehicle access, turning, alternative approach, isolation, water, runoff containment and sensitive receptors.
Use actual topography and prevailing conditions. Consider simultaneous equipment failures and blocked routes.
Hostile check
A nominal separation dimension has limited value when doors, vents or flame paths face the adjacent unit.
Module 5 of 9
Interrogate detection, ventilation and control
Each safety system needs a defined objective, set point, action and failure state.
Map BMS telemetry, off-gas, smoke, heat and pressure detection to isolation, HVAC shutdown or purge, alarms and emergency action. Validate backup power and communications.
Examine whether ventilation prevents accumulation or could introduce oxygen and change fire behaviour.
Hostile check
More airflow is not automatically safer in every thermal-runaway or fire scenario.
Module 6 of 9
Define suppression and cooling strategy
The objective can be extinguishment, propagation control, exposure cooling or controlled burn, depending on design and incident conditions.
Use test and risk evidence to justify agent, delivery, duration, access and runoff controls. Address re-ignition and the long duration of post-incident monitoring.
Make clear who can initiate systems and under what conditions responders should intervene.
Hostile check
A stated suppression agent without required flow, duration and access evidence is incomplete.
Module 7 of 9
Operationalise the emergency response plan
The plan must work at 03:00 with remote operators, unavailable equipment and incomplete information.
Define alarm escalation, site attendance, isolation authority, responder handover, cordons, air monitoring, runoff, public communication and recovery. Include drawings and equipment data at the access point.
Exercise scenarios with the local fire and rescue service and record improvements.
Hostile check
A plan that depends on one named individual or an internet connection has a fragile single point of failure.
Module 8 of 9
Control safety through operations
Commissioning, maintenance, firmware, spares and management of change sustain the safety case.
Track alarm trends, cell imbalance, HVAC performance, insulation, damage, water ingress and protection-system availability. Quarantine and investigate abnormal equipment.
Require management of change for cell substitution, firmware, spacing, suppression, controls or operational envelope.
Hostile check
A safe commissioning configuration can become unrepresentative after undocumented component substitution.
Module 9 of 9
Fenbank worked evidence-gap review
The case converts a layout change into clear actions and decision ownership.
Fenbank's installation report uses 3 m enclosure spacing with doors facing away. Revision C reduces spacing to 1.5 m and rotates doors toward the adjacent row. The emergency plan and runoff drawing still reference revision A.
The review records three open actions: representative propagation and exposure justification, updated responder access and runoff plan, and formal management-of-change approval. The project cannot claim the original report closes the revised layout risk.
Material changeSpacing and orientation
Stale documentsERP and drainage
DecisionEvidence gap open
Hostile check
Proceeding because the equipment model is unchanged ignores installation geometry, which is part of the hazard pathway.
Detailed Course assessment
Answer every question before submitting. Correct answers and rationales appear only after the complete attempt.
Detailed CourseQuestion 1 of 20