{"id":15037,"date":"2026-02-20T10:00:00","date_gmt":"2026-02-20T10:00:00","guid":{"rendered":"https:\/\/azeidkgroup.com\/nfpa-72-2025-edition-cybersecurity-fire-alarm-news-en\/"},"modified":"2026-10-29T19:04:09","modified_gmt":"2026-10-29T19:04:09","slug":"nfpa-72-2025-edition-cybersecurity-fire-alarm-news-en","status":"publish","type":"post","link":"https:\/\/azeidkgroup.com\/en\/sa\/media-center\/nfpa-72-2025-edition-cybersecurity-fire-alarm-news-en\/","title":{"rendered":"NFPA 72 2025 Edition: Cybersecurity Requirements for Fire Alarm Systems"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"15037\" class=\"elementor elementor-15037 elementor-14990 elementor-bc-flex-widget\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-36e6d34 e-con-full az-el-article e-flex e-con e-parent\" data-id=\"36e6d34\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bb938db elementor-widget elementor-widget-text-editor\" data-id=\"bb938db\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"az-intro\">The 2025 edition of NFPA 72, the National Fire Alarm and Signaling Code, is the latest edition of the standard. The NFPA Standards Council issued it in August 2024. Its headline change turns cybersecurity guidance into requirements in Chapter 11, which become enforceable wherever this edition is adopted.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-06ff294 elementor-widget elementor-widget-text-editor\" data-id=\"06ff294\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What changed in cybersecurity<\/h2>\n<p>In the 2022 edition, cybersecurity guidance sat in the non-mandatory Annex J. The 2025 edition deletes that annex and moves its material into Chapter 11 and Annex A as requirements. Key requirements include:<\/p>\n<div class=\"az-table-wrap\"><table>\n<thead><tr><th>Item<\/th><th>What the 2025 edition requires<\/th><\/tr><\/thead>\n<tbody>\n<tr><td>Network-connectable equipment<\/td><td>A security level suited to how the equipment connects, based on IEC 62443, UL 2900 or a comparable level (11.3)<\/td><\/tr>\n<tr><td>Unused data ports<\/td><td>Physically protected, administratively disabled, or requiring authentication<\/td><\/tr>\n<tr><td>Software updates<\/td><td>The manufacturer must notify the owner when cybersecurity update support ends<\/td><\/tr>\n<tr><td>Maintenance plan for network-connectable equipment<\/td><td>A list of all accounts, people and organizations with electronic access credentials, reviewed annually for least-privilege access, plus owner-kept access logs for equipment that supports remote access, reviewed at least annually (7.6.7)<\/td><\/tr>\n<tr><td>Systems that are not connected<\/td><td>No minimum security level is required for systems with no network-connectable equipment and no uploadable software configuration (11.1.2)<\/td><\/tr>\n<\/tbody>\n<\/table><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3039a82 elementor-widget elementor-widget-text-editor\" data-id=\"3039a82\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Other notable changes<\/h2>\n<ul>\n<li>Thermal image fire detection and acoustic leak detection were added to the detection chapter.<\/li>\n<li>Prescriptive spacing for spot smoke detectors is limited to ceilings up to 40 ft (12.2 m); higher ceilings need a performance-based design.<\/li>\n<li>A restricted audible mode of operation (RAMO) was added for occupancies that need reduced sound levels, subject to a risk analysis or direction from the authority having jurisdiction (AHJ) (18.4.8).<\/li>\n<li>Voltage drop calculations required for notification appliance circuits were expanded (18.3.7).<\/li>\n<li>The emergency control function interface may now be up to 20 ft (6.1 m) from the controlled component, instead of the usual 3 ft (1 m), where conductors are in metal raceway or metal-armored cable (21.2.4.1).<\/li>\n<li>For inspection and testing, testers are not required to evaluate the adequacy of an existing approved design (14.1.6).<\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0670a3f elementor-widget elementor-widget-text-editor\" data-id=\"0670a3f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Does the 2025 edition apply in Saudi Arabia?<\/h2>\n<p>Each jurisdiction adopts editions on its own schedule, and many still enforce earlier ones. In Saudi Arabia, the edition that applies to a project is set by the referenced standards of the Saudi Fire Protection Code (SBC 801) and Civil Defense requirements, so publication of the 2025 edition does not make it mandatory automatically. Its cybersecurity requirements are nonetheless sound practice for any networked alarm system. The next edition (2028) is currently in development.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bb2d4b4 elementor-widget elementor-widget-text-editor\" data-id=\"bb2d4b4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Practical steps now<\/h2>\n<ol>\n<li>Establish whether your fire alarm system is connected to the building network, the building management system or the internet, and how.<\/li>\n<li>Ask your supplier or contractor to state the cybersecurity level of the panel and devices, and their software update policy and support period.<\/li>\n<li>Disable unused data ports, change default passwords and define who has access to the system.<\/li>\n<li>Keep a log of access to the system and review it regularly under the maintenance contract.<\/li>\n<\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b8c3a6c elementor-widget elementor-widget-text-editor\" data-id=\"b8c3a6c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"az-source\"><strong>Sources:<\/strong> the <a href=\"https:\/\/www.nfpa.org\/codes-and-standards\/nfpa-72-standard-development\/72\" rel=\"noopener\" target=\"_blank\">NFPA 72 page<\/a> of the National Fire Protection Association, the <a href=\"https:\/\/docinfofiles.nfpa.org\/files\/AboutTheCodes\/72\/72_A2024_SIG_FUN_SD_SRreport.pdf\" rel=\"noopener\" target=\"_blank\">Fundamentals committee Second Revisions report<\/a> and the <a href=\"https:\/\/docinfofiles.nfpa.org\/files\/AboutTheCodes\/72\/72_A2024_SIG_FUN_FD_FRreport.pdf\" rel=\"noopener\" target=\"_blank\">First Draft report<\/a> for the 2025 edition cycle, <a href=\"https:\/\/docinfofiles.nfpa.org\/files\/AboutTheCodes\/72\/Errata_72_25_1.pdf\" rel=\"noopener\" target=\"_blank\">Errata 72-25-1<\/a> (29 August 2024), and <a href=\"https:\/\/www.csemag.com\/what-you-need-to-know-about-the-2025-edition-of-nfpa-72\/\" rel=\"noopener\" target=\"_blank\">CSE magazine summary of the edition<\/a> (April 2026). For the binding text, refer to the standard itself.<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cb09bec elementor-widget elementor-widget-text-editor\" data-id=\"cb09bec\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>For an overview of the standard, see our <a href=\"https:\/\/azeidkgroup.com\/en\/sa\/media-center\/nfpa-72-fire-alarm-code-guide\/\">NFPA 72 fire alarm code guide<\/a> and <a href=\"https:\/\/azeidkgroup.com\/en\/sa\/media-center\/how-to-choose-fire-alarm-control-panel\/\">how to choose a fire alarm control panel<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-772fd53 elementor-widget elementor-widget-text-editor\" data-id=\"772fd53\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"az-cta\"><strong>Is your fire alarm system connected to a network?<\/strong> AZEIDK provides <a href=\"https:\/\/azeidkgroup.com\/en\/services\/programming-systems-integration\/\">programming and systems integration<\/a> and <a href=\"https:\/\/azeidkgroup.com\/en\/sa\/services\/annual-maintenance-contracts\/\">annual maintenance contracts<\/a> for <a href=\"https:\/\/azeidkgroup.com\/en\/sa\/solutions\/fire-alarm-systems\/\">fire alarm systems<\/a>. <a href=\"https:\/\/azeidkgroup.com\/en\/sa\/contact\/\">Request a system review<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>NFPA 72-2025 makes cybersecurity a Chapter 11 requirement and updates detection, notification and testing rules. What changed, and does it apply?<\/p>\n","protected":false},"author":2,"featured_media":16304,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[258],"tags":[],"azeidk_region":[223],"class_list":["post-15037","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/azeidkgroup.com\/en\/wp-json\/wp\/v2\/posts\/15037","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/azeidkgroup.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/azeidkgroup.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/azeidkgroup.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/azeidkgroup.com\/en\/wp-json\/wp\/v2\/comments?post=15037"}],"version-history":[{"count":3,"href":"https:\/\/azeidkgroup.com\/en\/wp-json\/wp\/v2\/posts\/15037\/revisions"}],"predecessor-version":[{"id":18016,"href":"https:\/\/azeidkgroup.com\/en\/wp-json\/wp\/v2\/posts\/15037\/revisions\/18016"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/azeidkgroup.com\/en\/wp-json\/wp\/v2\/media\/16304"}],"wp:attachment":[{"href":"https:\/\/azeidkgroup.com\/en\/wp-json\/wp\/v2\/media?parent=15037"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/azeidkgroup.com\/en\/wp-json\/wp\/v2\/categories?post=15037"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/azeidkgroup.com\/en\/wp-json\/wp\/v2\/tags?post=15037"},{"taxonomy":"azeidk_region","embeddable":true,"href":"https:\/\/azeidkgroup.com\/en\/wp-json\/wp\/v2\/azeidk_region?post=15037"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}