I understand the duty of care and due diligence; ultimately it is my employers responsibility. However, at the moment there is no regular maintenance or testing. We do not have the resource or time to carry out any sort of regular testing, something we acknowledge and need to rectify.
As said, we currently have a company to maintain our current main system. If there is a change on how things are managed, it will probably go to them. Doesn't mean they will always be our contractor, that side of things is organised by our parent company, well above our area of responsibility.
This one will take some time, with specification, pricing etc.