Shutdown execution
Shutdown Execution: Change Control and Handover
Shutdown execution is the stretch from the first isolation to the final handover, when the baseline plan is carried out and held to account. It runs on a daily cycle, a decision rule for late work, a disciplined shift handover and a controlled hand back to operations.
Execution is phase 4 of the five-phase model: scope and strategy, plan and schedule, readiness, execute and restart, close-out and review.
How MaintWiz helps: Execution goes wrong when the plan and the field drift apart. The MaintWiz shutdown module gives technicians checklists with readings and photos, sends findings to the planner and shows a Today view of what needs attention. See the module · Get the daily progress template
By Jai Balachandran · Published · Last reviewed
What MaintWiz adds:Today page for the plannerChecklists with readings and photosFindings to the plannerHandover notes and as-left summary
Execution
What does shutdown execution involve?
Shutdown execution is the stretch between the first isolation and the final handover to operations, when the baseline plan is carried out and held to account. In the five-phase model used across these guides it is phase 4, with project control running through it.
T&I terms: T&I turnaround and inspection planning.
Planning is covered in how to plan a plant shutdown; this guide starts when the unit is handed over. The detail on daily progress, contractors, materials, permits and restart sits in dedicated guides, linked below.
Isolate and hand over
Operations hands the unit to maintenance with isolations in place and recorded. Lockout continuity must survive every shift change. 4,6
Run the daily cycle
Plan the day, issue permits, do the work, update progress, review and re-plan. The cycle repeats until the work list is done.
Control change
Work found after the scope is frozen goes through a decision, not a conversation in the field. 1,2
Hand back
Isolations are removed in a controlled order and the unit goes back to operations only when reinstatement checks are complete. 6
Where the detail lives
| Topic | Question it answers | Guide |
|---|---|---|
| Daily progress | How do we know where we stand today? | Shutdown progress tracking |
| Contractors | How do we run hundreds of extra people safely? | Contractor management |
| Materials | Are parts at the work face when crews need them? | Material management |
| Permits and isolations | Who may work where, and under what controls? | Permit to work |
| Restart | When is the unit fit to go back? | Plant start-up after shutdown |
| Safety | What goes wrong when work is compressed? | Shutdown safety |
Change control
How do you control work found during the shutdown?
Treat work found after the scope is frozen as a change request that someone with authority approves, defers or rejects before crews start. Public reporting rules make the same split: NERC treats tasks fixed in advance as the original scope of work and discovery work as outside it. 2
Management of change and related terms are defined in the shutdown turnaround glossary. Change control drives overrun: why shutdowns go over budget. For SAP orders and notifications see SAP PM shutdown management.
GAO makes the underlying point for schedules: without a documented, consistently applied change control process, staff end up revising the plan to match performance, and management loses sight of true performance. 1 OSHA separately requires written management of change procedures for covered processes when equipment, procedures or chemicals change, with replacements in kind excepted. 3
- Q1Does the finding threaten safety, integrity or the ability to restart?YES → ESCALATE NOWRaise it at once; do not wait for the daily meetingIf no, go to Q2
- Q2Can the work wait for the next window?YES → DEFERAdd it to the standing backlog with the evidenceIf no, go to Q3
- Q3Can it be done without moving the end date or the budget?YES → APPROVELog it, assign it and update the baselineIf no, take it to the decision group
A change request form
| Field | What to record |
|---|---|
| Reference and date | Unique number, time raised, who raised it |
| Finding | What was found, where, with a photo or inspection reference |
| Why it matters | Safety, integrity, quality or production consequence if deferred |
| Effect on the plan | Critical-path days, extra people, materials and permits |
| Effect on cost | Extra direct cost and what part of contingency it draws on |
| Decision | Approve, defer or reject, who decided and when |
| Follow-up | Work order, owner, due date, or the backlog entry |
The standing backlog that receives deferred work is covered in shutdown scope management.
Software
Where should execution records live?
Execution records belong where the people doing the work can update them: permits, progress, change requests and handover notes in one place, so the next shift sees the same picture as the last.
See the MaintWiz shutdown module data sheet for work order and handover features. See the shutdown module FAQ for how field work and offline use work.
About MaintWiz. MaintWiz is an industrial AI platform with IoT, SAP integration and predictive maintenance (PdM) capabilities. Its shutdown and turnaround module helps plants plan, schedule, execute and close out shutdown work.
Also: product data sheet.
What the shutdown module covers
As described on the MaintWiz shutdown maintenance product page.
- Shutdown calendar and critical-path scheduling, with work order sequencing and dependencies
- Asset prioritization, so the most critical equipment is scoped first
- Resource planning for people, spares, heavy equipment such as cranes, and outsourced vendors
- Electronic permits to work, risk management and contingency plans
- Real-time progress monitoring: schedule adherence, cost variance, quality metrics and risk factors
- Step-by-step checklists, pre-restart testing protocols and post-shutdown analysis
Proof
What MaintWiz customers report
Figures as published in MaintWiz case studies on maintwiz.com. They come from maintenance management projects, not shutdowns.
Shift handover
What should a shift handover cover?
A good handover moves everything the next shift needs to continue safely, face to face, in speech and in writing. HSE describes three elements: preparation by the outgoing staff, an exchange between outgoing and incoming staff, and a cross-check by the incoming staff as they take responsibility. 5
Close-out review, worked through: shutdown case study.
HSE also says many accidents have followed failures of communication at shift handover, and that most of those involved planned maintenance work. It advises planning maintenance so a job finishes within one shift where possible. 5 For isolations, OSHA requires specific procedures at shift or personnel changes so lockout protection is transferred in an orderly way between off-going and oncoming employees. 4 HSE guidance on isolation adds that handover is normally part of the permit system or a shift logbook. 6
A working template
| Field | What the outgoing shift records |
|---|---|
| Work status | Each active permit: finished, suspended or still running, and where |
| Isolations | Certificates in force, locks and blanks fitted or removed, and who holds them |
| Hazards found | New hazards, near misses, anything that surprised the crew |
| Changes | Approved scope changes and decisions pending |
| Next shift priorities | Critical-path jobs, deadlines, tests due |
| Resources | Materials, tools, cranes and people still needed |
| Sign-off | Outgoing and incoming lead sign together, face to face |
The fields are a working template built from the principles above; neither HSE nor OSHA prescribes a form.
Controls
Which controls must hold while the work runs?
Four controls carry most of the risk in execution: lockout that survives shift changes, group lockout across crews, clear contractor interfaces, and enough permit supervision for the number of permits live.
UK isolation and proving guidance is summarized in HSG253 safe isolation for shutdowns. See critical path vs critical chain for float.
Group lockout
When a crew or several crews work on the same equipment, OSHA requires a group procedure that gives each person protection equivalent to a personal lock, with one authorized employee holding overall coordination. 4
Contractor interfaces
Under OSHA 1910.147 the host and the outside employer must tell each other their lockout procedures. For covered processes, 1910.119 adds duties for selecting, informing and monitoring contractors. 4,3
Competing demands
HSE guidance lists competing demands between maintenance, contract work, operation and modifications among the pressures a realistic plan must manage. Plan the interfaces before the stop. 6
Permit supervision
HSE says permit supervision can thin out when many permits sit with one person, and gives shutdowns as an example of very active periods that need extra resource or fewer active permits. 7
Detail: permit to work during shutdown · contractor management · shutdown safety plan.
Learning
What do investigations say about execution?
US Chemical Safety Board investigations of two 2018 incidents show that transitions, not steady work, carry the risk: one occurred during an FCC unit shutdown for a turnaround and one during startup after a turnaround. 8,9
Husky Superior, 2018
An explosion occurred while the refinery was shutting down its FCC unit for a turnaround, with about 800 to 900 people on site. The CSB found that most safeguards needed to keep air and hydrocarbons apart during the shutdown were not implemented or not effective. 8
Kuraray, 2018
An ethylene release and fire injured 23 workers during reactor startup after a turnaround. The CSB found welding by nonessential contractors likely supplied the ignition source, and that no formal exclusion zone had been set. 9
Two incidents are not a statistical sample. They show what the CSB found in each case, not how common such events are.
Handback
What must be true before the unit is handed back?
The unit goes back to operations only when every isolation has been removed under control and the reinstatement checks are complete. HSE guidance lists a blank and blind register, control of disturbed joints, quality checks on hand back, a visual check against the P&ID and leak-test records among the systems that assure full reinstatement. 6
Food plants add a clean, sanitize and release step; see food and beverage plant shutdowns. For GMP return to use see pharmaceutical plant shutdowns.
| Check | Why |
|---|---|
| Isolations removed in the planned order | Reinstatement must be planned; effects of removing one isolation on others must be known |
| Blind and blank register reconciled | A register controls removal of blanks fitted for isolation, purging or testing |
| Disturbed joints and tests closed out | HSE lists control of disturbed joints and leak testing records among reinstatement controls |
| Visual check against the P&ID | Operations checks the system and that no isolation tags remain |
| Hand-back quality assured | HSE lists quality assurance controls on hand back of intrusive work done during a shutdown |
Restart itself is covered in plant start-up after shutdown.
Visuals
Save the execution charts
Two one-page charts for the control room wall. Click either to open it full size.
FAQ
Frequently asked questions
What is shutdown execution?
Shutdown execution is the period from the first isolation to the final handover to operations, when the baseline plan is carried out and controlled. It is phase 4 of the five-phase model, with project control running through it.
How do you handle additional work found during a shutdown?
Treat it as a change request that someone with authority approves, defers or rejects before work starts. NERC reporting rules separate tasks fixed in advance (the original scope of work) from discovery work found later. 2
What is a change control process?
A documented process that governs when and how changes are applied to the baseline. GAO says that without one, staff may keep revising the schedule to match performance, which hides true performance. 1
What should a shift handover include?
Work status per permit, isolations in force, hazards found, approved changes, next-shift priorities and resources, signed face to face. HSE describes preparation, exchange and cross-checking as the three elements of handover. 5
Why is shift handover a risk?
HSE says many accidents have followed failures of communication at shift handover, and that the majority of these involved planned maintenance work. 5
What does OSHA say about lockout at shift change?
OSHA 1910.147 requires specific procedures at shift or personnel changes so lockout or tagout protection passes in an orderly way between off-going and oncoming employees. 4
When is a unit ready to be handed back to operations?
When isolations are removed in a planned order and reinstatement checks are complete: blank and blind register, disturbed joints, leak tests and a visual check against the P&ID. 6
Where is restart covered?
In plant start-up after shutdown, which covers the pre-startup review and restart checks.
Sources
Sources
- US Government Accountability Office, GAO Schedule Assessment Guide: Best Practices for Project Schedules (GAO-16-89G, December 2015)
- North American Electric Reliability Corporation, Generating Availability Data System (GADS) Data Reporting Instructions, effective 1 January 2026
- OSHA, 29 CFR 1910.119, Process safety management of highly hazardous chemicals
- OSHA, 29 CFR 1910.147, The control of hazardous energy (lockout/tagout)
- UK Health and Safety Executive, Human factors: Shift handover
- UK Health and Safety Executive, The safe isolation of plant and equipment (HSG253, 2006)
- UK Health and Safety Executive, Guidance on permit-to-work systems: a guide for the petroleum, chemical and allied industries (HSG250, 2005)
- US Chemical Safety and Hazard Investigation Board, FCC Unit Explosion and Asphalt Fire at Husky Superior Refinery (No. 2018-02-I-WI, 23 December 2022)
- US Chemical Safety and Hazard Investigation Board, Ethylene Release and Fire at Kuraray America, Inc. EVAL Plant, Pasadena, Texas (No. 2018-03-I-TX, 16 December 2022)
Run the shutdown from one live plan
Book a demo and bring a typical shift. We will show tasks, readings, photos and findings in the module.