Upgrading installations in a manufacturing plant is rarely just a matter of replacing equipment. The hardest part is integrating the new system safely into existing operations: power supplies, utilities, automation and production schedules. Even a well-designed installation can cause downtime if nobody has established in advance what may be disconnected, for how long and how to restore the previous configuration.
Start by mapping dependencies, then decide the sequence of works. The following is a practical approach to planning phases, short shutdowns, tests, cutover and commissioning in an operating facility.
Where should you start when upgrading an installation in an operating facility?
The first question is: which plant functions must remain available throughout the work? Identifying the machine being upgraded is not enough. You also need to check its dependencies on other loads and auxiliary systems, as well as how the planned shutdown will affect personnel safety and production continuity.
A simple map helps: utility source → installation section → end user → consequence of interruption → permissible shutdown duration. For one production line, this may cover compressed air, cooling, electrical power, ventilation and control signals. Across several halls, shared switchboards, headers and standby equipment must also be included.
| Area | What must be established before work starts? | What might be overlooked? |
|---|---|---|
| Electrical supply | Distribution diagram, critical loads, isolation and re-energisation requirements | One feeder also supplies the controls or auxiliary equipment of another line |
| Compressed air | Required pressure, flow rate, air quality, backup capacity and branch isolation options | A pressure drop stops actuators even though the compressors are running |
| Cooling, ventilation and extraction | Permissible temperatures, flow rates, process and safety requirements | A bypass maintains flow but cannot meet the required operating parameter |
| Steam, heat and process water | Shared users, draining, isolation and restart requirements | Closing a valve affects an adjacent section or item of equipment |
| Controls and safety systems | Signal dependencies, interlocks, alarms and emergency modes | The new system works in isolation but does not integrate with the rest of the process |
Not every installation can be replaced with a temporary bypass. This is particularly true of safety functions, fire protection and systems whose shutdown may create a process hazard. Each temporary arrangement must be assessed separately and approved by those responsible for the affected area.
If the project also aims to reduce energy consumption, the baseline should be consistent with the analysis described in our guide to energy system modernisation. This article, however, focuses on organising the works and switching over installations, not on selecting technology or estimating savings.
Check the existing installation before ordering components
As-built documentation is sometimes incomplete, and subsequent repairs and extensions do not always appear on drawings. The inventory therefore needs to be checked against site inspections and appropriately scoped measurements conducted safely.
Before freezing the design, you should:
- compare electrical, process and automation drawings with labels and markings on site;
- identify the actual isolation points, connections, drains, vents, test points and maintenance access locations;
- check dimensions, transport routes, access for lifting equipment and potential clashes with operating machinery;
- confirm current settings, alarm thresholds, pressure and temperature ranges, and system behaviour under low and high loads;
- document connections and controller software versions before making changes if the upgrade involves automation;
- record discrepancies that cannot be resolved without a planned shutdown.
An unidentified connection or unknown valve function should be a separate scheduled task, not a surprise during a short shutdown.
Phasing an upgrade: three categories of work
A phased approach only makes sense if each phase leaves the installation in a defined, safe condition. In practice, the work can be divided into three categories.
| Work category | Typical scope | Condition for moving to the next phase |
|---|---|---|
| Before the shutdown | Site survey, coordination, prefabrication, installation of independent routes and test preparation | Components ready for installation; risks and connection points identified |
| During the shutdown window | Safe isolation, removal of the necessary section, connection work and tests requiring isolation | Test results accepted and formal authorisation to restart |
| After cutover | Adjustment, trend monitoring, optimisation of settings, as-built documentation and operator training | Stable process parameters; operational responsibility handed over |
Do not move work into the first category simply to shorten downtime. If performing it while the plant runs would require entry into a hazardous area or interference with an operating installation, the task requires the appropriate shutdown and safeguards.
Bypass, parallel installation or temporary power supply?
Each option needs to be assessed separately for each utility. A pipeline bypass may allow part of the network to be isolated, but it must maintain the required flow, pressure, utility quality and safety. A temporary power supply requires checks of the load, transfer method, protection and risk of inadvertently energising an isolated circuit. A parallel installation may make testing easier, but takes up space and creates new potential clashes.
The question is not simply whether a bypass can be connected, but whether it can safely support the entire required process and subsequently be replaced by the intended final configuration.
How do you define the shutdown window and cutover schedule?
Production and maintenance teams should first agree on an acceptable date and the maximum duration for which a given function may be unavailable. Then set out the sequence of operations, allowing time for testing, commissioning and a possible rollback. What matters is the critical path duration, not the total hours worked by every team.
A sound cutover schedule includes:
- prerequisites for starting: completed preparatory work, materials, authorisations, tests and availability of key personnel;
- confirmation that all relevant energy sources have been safely shut down and isolated;
- the sequence of disconnections and new connections, with a responsible person and estimated time for each;
- decision checkpoints at which work may continue or must stop;
- technical tests, permission to restart and time needed to resume production;
- an alternative course of action if a test fails.
Example: a twelve-hour shutdown does not mean twelve hours of installation work
Assume the plant permits a 12-hour shutdown of a selected installation section. A draft plan allocates 7 hours to isolation and connection work, 2 hours to testing and 2 hours to commissioning. That leaves just 1 hour of contingency: 12 − 7 − 2 − 2 = 1 hour.
If restoring the previous configuration after a failed test would take 3 hours, the plan offers no realistic rollback option. It cannot be considered safe merely because the nominal activities fit inside the shutdown window. Some work must be moved before the shutdown, the connection method changed, the approved window extended or the phase scope revised. Only then can you set a decision deadline beyond which another task may not start unless enough time remains to return to a safe state.
This is a scheduling example, not a prescribed duration for these operations. Actual durations and acceptable options depend on the installation, technology and risk assessment.
Coordinating trades and maintaining safety in an operating plant
Electrical, automation, piping and production teams working simultaneously can affect one another’s safety conditions. The cross-discipline schedule should show not only task order but also work zones, transport routes, potential clashes, responsibility boundaries and shift handover procedures.
Under Article 208 of the Polish Labour Code, where employees of different employers work in the same place at the same time, the employers must cooperate, appoint a health and safety coordinator and agree on cooperation arrangements. None of this relieves an employer of responsibility for the safety of its own employees.
Maintenance and installation work carried out while a plant is operating requires particular attention to occupational health and safety. In Poland, where such work takes place without stopping operations in areas occupied by other employees or operating machinery, Sections 80–84 of the general occupational health and safety regulations apply. Before starting, the host employer and the person supervising the work should agree and sign a protocol specifying safety conditions and the division of responsibilities. Employees must also be informed and the area segregated and marked. Welding carried out as part of this work requires a written permit.
Other requirements—including the register and organisation of particularly hazardous work, safety briefings and rules for working on energy equipment—depend on the type of work and installation. Useful Polish sources are the National Labour Inspectorate’s guidance on particularly hazardous work and the Polish regulations on occupational health and safety when working on energy equipment.
For effective work coordination, clear procedures are useful for issuing permits for higher-risk tasks, verifying energy isolation and handing equipment back to operations. The UK’s HSE describes permit-to-work systems as a way to coordinate such activities, but its material provides good practice, not a source of Polish legal obligations. The permit itself is no substitute for risk assessment or actual workplace safeguards.
If the upgrade concerns equipment subject to technical inspection in Poland, the required approvals, qualifications and inspections must be identified before work begins. The Polish Office of Technical Inspection (UDT) explains the rules for repairs and modernisation; not every installation refurbishment is automatically a modernisation of equipment regulated by UDT.
Pre-cutover testing and the rollback plan
Plan the tests before the shutdown. Some can be carried out on an isolated section or at the supplier’s premises; others require site conditions. Each test should specify entry criteria, expected results, documentation method, person responsible and acceptance criteria.
For installations with automation, particularly important checks include:
- the consistency of signals, settings, interlocks and alarms with the approved documentation;
- responses to loss of power, signals, utility supply or communications;
- the behaviour of protective functions and fail-safe states in fault conditions;
- correct transitions between manual and automatic modes;
- integration with neighbouring installations, not merely operation of the individual machine.
Other systems may require leak tests, electrical measurements, flow checks or acceptance tests specified by the documentation and applicable regulations. These activities must be scoped and performed by suitably qualified personnel; a generic checklist cannot replace them.
The rollback plan should answer four questions: what can be restored, in what order, who makes the decision and how long it will take to resume safe operations. Records of the previous settings, configuration and connections must be retained. Not every system can physically be reverted within one shutdown window. In such cases, the contingency plan should specify another agreed safe state rather than promise a straightforward return to the original configuration.
Commissioning and stabilisation: do not end the project after the first successful start
Once the installation is cleared for start-up, move from testing individual functions to operation under typical process conditions. A brief no-load run does not prove how the system will behave when the product changes, several loads start or production increases.
Depending on the installation, useful monitoring parameters include pressure, temperature, flow, power demand, utility quality, number of alarms, switching cycles and product parameter stability. Agree in advance on the observation period, tolerances and responsibility for adjusting settings. If energy efficiency is also an objective, compare results under similar load conditions. Our article on energy efficiency in production processes discusses how to analyse energy use by production line.
Handover to the maintenance team should include current drawings, labels, test records, instructions, lists of settings and alarms, as-built documentation and a record of changes from the original scope. Operators need to know what has changed in routine operation and emergency procedures.
How should you prepare an enquiry for a designer or contractor?
The phrase ‘upgrade the installation without stopping production’ is too vague for a reliable quotation. The enquiry should clearly distinguish verified information from assumptions that still need checking.
| What information should you provide? | Why does it matter? |
|---|---|
| Description of the installation, scope boundaries and desired outcome | Allows offers to be compared by scope, not just equipment prices |
| Available drawings, photos, equipment list and documentation discrepancies | Helps price the site survey and the risk of clashes |
| Minimum process parameters and critical loads | Defines the technical requirements for bypasses and cutovers |
| Shutdown windows, seasonality and production schedule | Makes it possible to prepare a realistic programme |
| Safety, access, transport and multi-trade working requirements | Reduces disputes over responsibility and worksite organisation |
| Required tests, acceptance procedure and start-up criteria | Makes it easier to compare the completeness of bids |
| Requirements for contingency planning, documentation and post-commissioning support | Shows whether the offer covers the most challenging cutover phase |
At the enquiry stage, ask bidders to identify work that can be completed before the shutdown, list necessary isolations, state their scheduling assumptions and specify what they must verify on site. This helps the client judge whether the proposed price reflects the real risks of working alongside ongoing production.
The key decision before work begins
Upgrading a plant without interrupting production is not always possible, and a ‘zero downtime’ promise is no substitute for risk assessment. The aim is to decide deliberately what can be prepared while the plant is running, what requires a controlled shutdown and under which conditions the installation can resume service.
As an auditor, I would first check the map of shared loads, the actual cutover time and the rollback conditions. Only then would I finalise the phases and compare quotations.
If you are preparing a similar project, send Energy Trend a short description of the existing installation, available drawings, a list of critical loads, acceptable shutdown windows and the planned work date. You do not need a complete set of measurements for the initial discussion. Send your materials to audytor@energytrend.pl so we can establish which data and approvals are needed to define the next steps.
Sources
- Polish Labour Code, consolidated text published in 2026 — Article 208 — cooperation between employers working at the same location.
- Polish general occupational health and safety regulations — Sections 80–84, consolidated text as amended — organisation of work while a plant operates, written protocol and safeguards.
- Polish National Labour Inspectorate — particularly hazardous work — classification and organisation of such work.
- Polish regulations on occupational health and safety when working on energy equipment, consolidated text — requirements for work on energy equipment.
- Polish Office of Technical Inspection — repairs and modernisation — obligations depending on the equipment and scope of work.
- UK HSE — permit-to-work systems and UK HSE — plant modification/change procedures — international good-practice guidance, not Polish legislation.
