Risk Management Strategies

The Fire Started at 6 am on a Day the Plant Was Shut: A Shutdown-Period Protocol for Indian Factories

An Alwar oil packing unit burned at 6 am the day after it closed for Independence Day, and took eight hours and 25 tenders to control. A shutdown protocol that reduces the loss and protects the claim.

Tarun Kumar Singh
Tarun Kumar SinghStrategic Risk & Compliance SpecialistAIII · CRICP · CIAFP
11 min read

Listen to this article

Audio version • 11 min read

shutdown protocolhot work permitfire preventionpolicy conditionsfestival closure

Last reviewed: August 2026

Six in the morning, one day after the plant closed

An oil packing unit in Alwar caught fire at around 6 am on 16 August 2026, a day after the factory had been closed for Independence Day. Nobody was on the floor. The fire was found by the security guard on duty, who alerted the owner (ByNewsIndia, 16 August 2026).

What followed shows how much room an unattended fire is given before anyone fights it. Controlling the blaze took about eight hours and 25 fire tenders drawn from five districts. The loss was estimated at Rs 25 to 30 crore. Neighbouring factories were evacuated as a precaution and the area around the unit was cordoned off while the tenders worked (ByNewsIndia, 16 August 2026).

The arithmetic of a shutdown fire is unforgiving. On a working day, a fire in an oil packing hall is spotted within a minute or two, and a trained operator with a hose reel has a real chance of holding it below the point where it involves the stock. On a closed day, the same ignition burns unopposed until a guard on a perimeter round happens to see smoke. By then the answer is no longer a hose reel. It is tenders from five districts.

Indian factories close on the same set of dates every year: Independence Day, Republic Day, Holi, Diwali, Id, Christmas, plus the local festival calendar and the two or three long weekends those dates create. Each of those closures produces the same combination: a floor with nobody on it, panels and utilities still energised, and maintenance or fabrication work finished a few hours before everyone left.

What a shutdown actually changes about your fire risk

A shutdown does not reduce ignition sources as much as managers assume. It removes the people who would notice one.

Three specific changes matter.

  1. Hot work lands on the last shift before the break. Welding, grinding, cutting and brazing get scheduled into the shutdown window or into the evening before it, because that is when a line can be stopped. Slag and sparks travel, lodge in insulation, cable trays, dust layers or oil-soaked lagging, and smoulder for hours. A smouldering ignition that would have been caught during a normal night shift gets an empty building instead.
  2. Electrical load stays on while supervision goes away. Very few plants de-energise fully for a one-day closure. Lighting circuits, chargers, compressors, chillers, cold rooms, UPS banks, DG sets on auto-start and control panels stay live. Loose terminations and overloaded neutrals do not take a holiday, and an arc in a panel room at 5 am has nobody in earshot.
  3. The material at greatest risk is at its peak. Shutdown is when stock accumulates. Dispatch stops before the holiday and production often runs late to clear orders, so finished goods sit at maximum quantity in the packing hall. In an edible oil packing unit that means drums, tins, jars, HDPE and corrugated cartons, all of which burn hot and fast.

Close hot work before the break, on paper

The single highest-value control in a shutdown protocol is a hot work permit system that is designed to close, not merely to open.

A permit that only authorises work is half a system. The half that prevents shutdown fires is the closure step: the fire watch after the tools go down, the physical inspection of the area, and the signature that says the area was left cold.

The closure rules worth writing into your permit

  • No hot work permit is issued for the last four hours before a shutdown begins. If a job cannot be finished and watched within the working day, it waits until the plant reopens.
  • Fire watch continues for at least 60 minutes after the last spark, with a named person, and for longer where the work was near insulation, ducting, cable trays, oil residue or combustible dust.
  • A second inspection happens 30 minutes after the watch ends, by someone other than the person who did the work, checking the reverse side of every partition, the floor below, and any void the sparks could have reached.
  • The permit is physically closed with a time, a name and a signature, and the closed permits for the day are handed to the shift-in-charge before the gate is locked.
  • Thermal check where available. A handheld thermal imager passed over the work area and the far side of any wall or floor penetration takes two minutes and finds what eyes miss.

Keep closed permits for at least three years. When a fire is investigated, the question of what hot work was done in the 24 hours before ignition is asked early, by both the surveyor and, in a large loss, by the reinsurer behind the placement. A file of closed permits with fire-watch times is the difference between an evidenced answer and a reconstruction from memory.

Isolation, lockout, and the record that proves it

Decide the isolation state of the plant deliberately rather than by default, and record what you decided.

Build a one-page isolation schedule that lists every board, feeder and utility and assigns each to one of three states for the shutdown:

  1. Isolated and locked. Production feeders, workshop supply, non-essential lighting, process heaters, ovens, dryers, packing line panels. Lock applied, key controlled, tag with name and time.
  2. Live by necessity. Fire pump panel, hydrant system, sprinkler valves, detection and alarm panel, security lighting, CCTV, cold storage, UPS for servers. These stay on because turning them off defeats the protection you are relying on.
  3. Live by decision. Chargers, compressors, DG auto-start, chillers, air conditioning in offices. Each needs a named reason. Anything without a reason moves to state one.

The list matters as much as the act. Battery charging areas deserve their own line, because charging lithium-ion or lead-acid packs in an unattended building over a long weekend is a decision, and it should be a recorded one rather than an accident of habit.

Photograph the closed and tagged panels at the end of the last shift, with the timestamp on. It takes five minutes, and it turns "we always isolate" into evidence. The same photographs answer a surveyor's questions about the pre-loss condition of the switchgear far better than a maintenance register that was filled in weekly.

Detection means nothing if the alarm rings in an empty room

The Alwar fire was found by a guard on duty, which is the best outcome available when detection is not monitored by a person who can act. It still cost eight hours and 25 tenders.

Detection during a shutdown has to be routed to a human being who will answer a phone at 6 am. Work through the chain in this order.

  • Where does the panel signal go? If the alarm sounds only inside the building, it is a sounder, not a warning. Confirm the panel has an auto-dialler or IP link, and confirm the numbers on it are current. Numbers of people who left the company are a common finding after a loss.
  • Who is first on the call list? Name three people in sequence with mobile numbers, and tell them they are on the list for that specific closure. Rotating "whoever is on duty" is not a call list.
  • What is the guard instructed to do, in order? Written instructions, in the language the guard reads, posted at the gate: call the fire service first on 101 with the address and access route, then the owner or plant head, then the fire officer. Open the main gate and the fire tender access route. Do not attempt entry into a smoke-filled hall.
  • Can a tender get in? A gate that only the day-shift supervisor can unlock, or an approach road blocked by parked trailers over the holiday, costs the first and most valuable twenty minutes. Keep the access lane clear for the whole closure and give the guard the key to every gate on the route.
  • Do the guards know where the hydrant pump start is? A fire pump that starts on demand from the panel is fine. A pump that needs someone to press a button in a pump house nobody has shown the guard is not a protection.

Test the chain before the closure, not after. One call from the panel to the first number on the list, on the day the plant shuts, verifies the whole path in under a minute.

The policy conditions insurers cite when a shutdown fire is disputed

Three conditions do most of the work in a shutdown-fire dispute, and all three are in wordings Indian buyers already hold.

Reasonable precautions. Standard property wordings require the insured to take reasonable precautions to prevent loss and to keep the premises and plant in a sound condition. Insurers reach for this condition when the facts show something was not merely unlucky but left in an obviously unsafe state: hot work stopped minutes before the gate closed with no fire watch, a detection panel in fault for weeks, a hydrant pump out of service, or extinguishers past their refill date. The defence against it is contemporaneous records: permits closed with times, panel test logs, pump-run logs, extinguisher refill dates on the schedule.

Unoccupancy. Indian fire wordings carry an unoccupancy condition, commonly triggered when the premises are left unoccupied beyond a stated period (30 days is the usual figure), after which cover can be affected unless the insurer is notified and agrees in writing. A one-day festival closure does not reach that threshold. A ten-day Diwali shutdown does not either. Where this condition bites is the extended shutdown: a seasonal plant closed for the off-season, a unit shut for a long refurbishment, or a line mothballed pending a decision. Read the actual period in your schedule, because it varies with the wording and with endorsements. The related question of how underwriters treat vacant and part-vacant sites is covered in unoccupied premises and vacancy warranties.

Protection warranties and rating credits. If the placement was rated with credit for sprinklers, hydrants, detection or a manned fire post, those protections are usually written in as warranties or as conditions of the discount. A shutdown that switches off the detection panel, drains a sprinkler system for maintenance, or sends the fire crew home for the holiday puts the discount and sometimes the cover in question. The economics of these credits, and what they are worth keeping in service, are set out in [fire sprinkler systems and insurance premium discounts](/claims-loss-prevention/fire-sprinkler-system-insurance-discount-india).

The 48 hours after: protecting the claim while the site is still wet

What happens after the fire decides how much of the loss is recoverable, and the first two days are the ones that get handled worst.

  • Intimate immediately, to the insurer and the broker, by email with the policy number, the time the fire was discovered, and what is known so far. Do not wait for a damage estimate. Intimation is a notice, not a quantification.
  • File the police and fire brigade record. The fire service report and the police station entry are the two documents every surveyor asks for, and both are easier to obtain in the first week than in the second month.
  • Do not clear the site before the survey, beyond what safety and statutory direction require. Where debris must be moved, photograph and video first, from multiple angles, with the date visible.
  • Preserve the electrical evidence. Burnt panels, cables and switchgear are what a cause investigation works from. Scrapping them for their copper value before the investigator arrives removes the evidence that would have established cause.
  • Start the business interruption clock properly. Note the exact time production stopped, the orders in hand, and the dispatch schedule for the following weeks. Consequential loss claims are quantified from records that get harder to reconstruct every week.
  • Assemble the shutdown file. Closed hot work permits, the isolation schedule with photographs, the alarm test record, the guard's written instructions, the call log. This is the file that answers the reasonable-precautions question, and having it ready in week one shapes how the rest of the claim is handled.

Preparing for that survey is a discipline in itself, and it applies well beyond property. The wider version is set out in survey readiness beyond property claims.

A shutdown protocol that fits on one page

Every plant needs a written closure routine that a shift-in-charge can execute without judgement calls. This is the shape of it.

Before the gate closes.

  1. No hot work permits issued in the last four hours; every open permit closed with fire watch times and a second inspection signature.
  2. Isolation schedule executed: every feeder locked, tagged and photographed, exceptions listed with named reasons.
  3. Combustible waste, packing material, oil-soaked rags and pallets removed from the floor and from beside walls.
  4. Fire protection confirmed in service: hydrant pressure noted, pump on auto, detection panel clear of faults, extinguishers in date, sprinkler valves open and locked open.
  5. Access route clear from the main gate to the hydrant points and to every shed door.
  6. Alarm auto-dialler tested to the first number on the call list, result logged.
  7. Call list posted at the gate and issued to the guard, in the language the guard reads.
  8. Any impairment or planned maintenance on a protection system notified to the broker in writing.

During the closure.

  • Guard rounds at fixed intervals covering the packing hall, stores, panel rooms and battery charging area, logged with time.
  • One named person reachable throughout, with a stated deputy for every shift of the closure.
  • No unpermitted contractor entry, and no hot work at all, without a permit issued and closed under the same rules as a working day.

On reopening.

  • Walk the plant before energising anything: look for water ingress, rodent damage to cabling, and anything that moved.
  • Re-energise board by board rather than by main switch, checking each for heat and smell.
  • Log the closure: what was isolated, what stayed live, what the guard reported, any anomaly.

Put a date on this document and review it at the start of each festival calendar year. A structured closure routine also belongs inside the wider continuity plan described in business continuity planning for the 2026 monsoon, since the same call trees and access decisions carry over.

About the Author

Tarun Kumar Singh

Tarun Kumar Singh

Strategic Risk & Compliance Specialist

  • AIII
  • CRICP
  • CIAFP
  • Board Advisor, Finexure Consulting
  • Developer of the Behavioural Underinsurance Risk Index (BURI)

Tarun Kumar Singh is a seasoned risk management and insurance professional based in Bengaluru. He serves as Board Advisor at Finexure Consulting, where he advises insurance, fintech, and regulated firms on governance, growth, and trust. His work spans insurance broker regulatory frameworks across India, UAE, and ASEAN, IRDAI compliance and Corporate Agency model reform, VC governance in insurtech, and MSME insurance gap analysis. He is the developer of the Behavioural Underinsurance Risk Index (BURI), a framework applying behavioural economics to underinsurance and insurance fraud risk.

Frequently Asked Questions

Does a one-day festival closure trigger the unoccupancy condition in a fire policy?
No. The unoccupancy condition in Indian fire wordings is commonly triggered when premises are left unoccupied beyond a stated period, usually 30 days, after which cover can be affected unless the insurer is notified and agrees in writing. A closure for Independence Day, Diwali or a long weekend sits well inside that. The condition matters for extended shutdowns: a seasonal plant closed for the off-season, a unit shut for refurbishment, or a mothballed line. Read the period stated in your own schedule, because it varies with the wording and with any endorsement applied at placement.
What is the single most useful control for preventing a fire during a plant shutdown?
A hot work permit system that is built to close rather than only to open. Prohibit permits in the final four hours before the break, require a fire watch of at least 60 minutes after the last spark, require a second inspection 30 minutes later by someone other than the person who did the work, and require a signed closure with times. Slag and sparks lodge in insulation, cable trays and dust layers and smoulder for hours, which is exactly the failure mode a closed plant cannot catch. A thermal imager passed over the work area and the far side of any penetration adds two minutes and finds what eyes miss.
Can an insurer decline a shutdown fire claim because nobody was on the premises?
Absence of staff on a holiday is not itself a ground for declinature. The arguments that get raised are about conditions. The reasonable precautions condition is cited where the facts show something was left in an obviously unsafe state, such as hot work stopped without a fire watch, a detection panel in fault, or a hydrant pump out of service. Protection warranties are cited where a system credited in the rating was impaired during the closure without notice. Contemporaneous records, closed permits, panel test logs, pump-run logs and timestamped isolation photographs, are what answer those arguments.
Should we tell the insurer before we shut the plant for a festival?
For a routine one-day or one-week closure, no separate notice is needed. Notice becomes necessary in two situations. First, if a protection system will be impaired during the closure, for example a sprinkler system drained for maintenance or a manned fire post stood down, tell the broker in writing before the closure with dates and interim measures. Second, if the closure will extend past the unoccupancy period in the schedule, seek written agreement in advance. An impairment notified beforehand is a managed exposure. The same impairment found by a loss adjuster after a fire becomes a breach argument.
What should the security guard be told to do if a fire is found on a closed day?
Give written instructions in the language the guard reads, posted at the gate. Call the fire service on 101 first with the full address and the access route, then the plant head or owner, then the fire officer, working down a named list of three mobile numbers issued for that specific closure. Open the main gate and clear the tender access route. Do not enter a smoke-filled hall. If the hydrant pump needs manual starting, the guard must have been shown where the start is and must hold the key. The Alwar fire was found by the guard on duty, which is the best available outcome when detection is not routed to someone who will answer at 6 am.

Related Glossary Terms

Related Insurance Types

Related Industries

Related Articles

Sarvada Intelligence

Ready to see Sarvada in action?

Explore the platform workflow or start a product conversation with our underwriting automation team.

Explore the platform