15.2 Emergency Systems and Backup Power
Key Takeaways
- Backup-power planning starts with the loads needed to maintain safe treatment and service, including starting demands—not with the generator's headline rating alone.
- Readiness includes the generator, fuel, starting system, ventilation, transfer equipment, connection points, controls, communications, and qualified support.
- An exercise is useful only when its documented scope demonstrates the intended function; test frequency and load follow the site plan, manufacturer, and applicable requirements.
- Operators never improvise generator connections or backfeed facility wiring; transfer and electrical verification remain within qualified-person authorization.
Treat emergency power as a system
The WPI Class I outline names emergency systems, power-generation systems, and an onsite backup generator within Equipment Operation and Maintenance. A generator is only one link. The full resilience chain can include utility-service monitoring, the engine or other prime mover, generator, fuel, battery and charger, cooling and exhaust, switchgear, transfer equipment, distribution panels, uninterruptible power for controls, alarms, stored water, alternate pumps, communications, and trained people. Failure of a small supporting component can make a correctly sized generator unavailable.
Start with the required service. A plant should identify which functions must continue to protect public health and equipment: source pumping, treatment barriers, disinfectant feed and monitoring, essential laboratory or sampling support, critical controls, ventilation where needed for safety, communications, and selected building services. Not every load must run simultaneously. The approved emergency plan may stage or shed loads so the highest-consequence functions operate first.
What a power assessment must connect
| Question | Evidence the plan needs |
|---|---|
| What must operate? | Critical-load list, operating sequence, acceptable interruption, and process consequence |
| Can the source serve it? | Voltage, phase, frequency, running demand, starting demand, and qualified engineering assessment |
| How will it connect? | Listed transfer equipment or approved quick connection, cable and switchgear information, and qualified personnel |
| How long can it run? | Usable fuel, load-specific consumption, resupply plan, fuel quality, and any required additives or fluids |
| How will success be known? | Transfer status, stable critical loads, treatment indicators, alarms, communications, and documented test results |
Motor starting matters because a pump or blower may demand substantially more power while accelerating than after it reaches normal operation. Actual starting characteristics depend on the motor, starter, variable-frequency drive, load, and sequence. A Class I operator does not size a generator from a single nameplate total or assume every unit can start together. Qualified personnel use the plant's load study and approved sequence.
A transfer switch separates the normal and alternate supplies and connects the facility load according to its design. It may be automatic or manual. An automatic transfer switch (ATS) can detect loss of normal power, initiate the standby source, and transfer after acceptable conditions are established; the exact logic and delays are site-specific. Uninterruptible power supply equipment may bridge short interruptions for controls or communications, but it is not automatically a long-duration source for large motors. Never connect a portable generator by improvising wiring or energizing a building through an outlet. Such backfeeding can endanger utility workers, damage equipment, and bypass required protection.
Build readiness before the outage
Routine rounds use the approved checklist. From authorized access points, review controller status and alarms; fuel inventory and signs of leakage; battery-charger indication; oil, coolant, and temperature indications; ventilation and exhaust condition; breaker or transfer status; housekeeping; and access for qualified staff or a rental unit. The operator records anomalies instead of silencing or repeatedly resetting them. Fuel plans include usable quantity, consumption at the expected load, resupply contacts, access during regional emergencies, and product condition. Stored fuel and emissions-fluid requirements vary by engine and jurisdiction.
Exercises answer a defined question. A start-only check may show that the engine cranks, but it does not prove that transfer equipment operates or that critical treatment loads can be sustained. A loaded exercise gives different evidence; a planned transfer exercise gives still more. The scope, frequency, duration, and loading follow manufacturer instructions, the utility's emergency program, permit or code requirements, and qualified electrical guidance. The U.S. Environmental Protection Agency's power-outage checklist recommends assessing required kilowatts, voltage, and phase; maintaining generators to manufacturer recommendations; exercising them under load; and planning fuel and qualified access. Those are planning principles, not permission for an operator to perform electrical work or a universal schedule for every WPI jurisdiction.
Respond in process order
When normal power is lost, confirm the condition and follow the emergency response plan. Determine which treatment and control functions actually stopped, check water-quality and storage consequences, and make the required internal notifications. Allow automatic systems to operate as designed unless the procedure directs an authorized manual action. After transfer, verify from normal operator interfaces that critical equipment is running, process values remain credible, alarms and communications work, and the standby source is stable. Shed or sequence noncritical loads only as the approved plan directs. Track fuel and expected resupply time.
A portable or permanently installed source may require qualified personnel to verify voltage, phase rotation, frequency, grounding/bonding arrangements, protective devices, and connection integrity. The operator should not infer electrical safety from a green status lamp. During operation, watch for changing engine or generator indications, leaks, abnormal sound, exhaust or ventilation issues, and treatment instability. Escalate rather than defeating an alarm.
Restoration is another transition, not simply flipping a switch. Follow the approved retransfer and cooldown sequence, confirm that normal power is stable, verify treatment units and controls after transfer, restore shed loads in the planned order, replenish consumables, and document alarms, runtimes, load served, fuel used, process effects, actions, and defects. A post-event review should create work orders for deficiencies. Reliable emergency power is demonstrated by the whole treatment service surviving the event—not merely by hearing the generator run.
A standby generator starts during an exercise, but no treatment load is transferred. What can the result establish?
Which input is most important when deciding the order in which backup power serves plant equipment?
A portable generator arrives during an outage. What should the Class I operator do before connection?