15.2 Control Zones and the Site Safety Plan

15.2 Control Zones and the Site Safety Plan

Quick Answer: Draw three zones. The hot zone (also called the exclusion zone) contains the release and the entry team. The warm zone (also called the contamination reduction zone) is the decontamination corridor. The cold zone (also called the support zone) holds command, staging, rehab, and uncontaminated people and apparatus. Place warm and cold upwind and uphill of the product when you can. Isolation is the initial all-directions radius. Evacuation moves people out. Shelter-in-place keeps them inside when walking would raise the dose. The working document is a site safety and control plan. ICS Form 208 HM is the common Federal Emergency Management Agency (FEMA)/NIMS form technicians should recognize. It is not a federal rule that every volunteer fire department must file that exact numbered form.

Chapter 1 previewed hot, warm, and cold in one paragraph. This section is the control problem: who may enter, where the wind puts the tape, and what written plan OSHA and NIMS expect before anyone crosses into the exclusion zone. NFPA 470 (2022) 11.3.1 (strategies and tactics), 11.3.4 (plan of action / IAP, including site safety), and 11.4.1 all fail if the corridor and the command post sit in the plume.

Three zones, three jobs

Use both names. Written tests switch vocabularies.

OSHA 1910.120(q)(3)(v) is the occupancy rule that matches the hot-zone column: the individual in charge of the ICS shall limit the number of emergency response personnel in areas of potential or actual exposure to those actively performing emergency operations. “Everyone with a technician patch gets to walk the tank” is a violation, not teamwork.

Access control is how those limits become physical: one way in from the cold zone, one way out through decon, accountability tags or a board, and a person whose job is site access — the ICS 208 HM Site Access Control Leader box. Staging is a cold-zone holding area for uncommitted resources. Parking the second-due engine “closer to the leak so we save time” is how you contaminate a pump operator who was never assigned to enter.

Wind, slope, and the map

Vapors and runoff do not respect yellow tape. Field layout:

• Upwind of the release for the warm-zone corridor and the cold-zone command post, so the plume does not occupy decon and the IC at the same time.
• Uphill of liquid product and wash water so gravity is not a second release into staging.
• Crosswind approach for entry when the book and the terrain allow, rather than walking the centerline of the cloud.
• Re-check wind when it shifts. A “perfect” corridor that is now downwind is a new IAP problem, not a reason to keep working because the cones are already out.

If the only hard surface is downhill, you dike and pump; you do not pretend topography is optional. ERG 2024 initial isolation distances are the first circle (all directions). Technician monitoring and container analysis refine the endangered area; they do not erase the wind.

Isolation, evacuation, shelter-in-place — different verbs

Do not treat these as one protective-action blob.

OSHA (q)(2)(iv) requires the ERP to address safe distances and places of refuge. (q)(2)(v) is site security and control. (q)(2)(vi) is evacuation routes and procedures. A technician who tells the IC “just evacuate everyone three miles” without a route, a wind, or a shelter option has not planned; they have shouted.

Places of refuge (safe refuge) are not the cold zone. They are controlled locations — often still inside the larger isolation footprint — where contaminated or trapped people can be held until decon or rescue is ready. Staffing Safe Refuge Area Manager on ICS 208 HM is how you keep a parking lot of victims from becoming a second hot zone around the command post.

The site safety and control plan — 208 HM and OSHA’s two lists

ICS Form 208 HM, Site Safety and Control Plan, is the standard NIMS/FEMA hazmat form. FIRESCOPE and FEMA instructions say it is completed by the Hazardous Materials Group Supervisor and reviewed by all within the Hazardous Materials Group before operations commence in the Exclusion Zone. Typical blocks technicians must be able to fill, not just name:

• Organization: IC, HM Group Supervisor, Tech. Specialist — HM Reference, Entry, Decon, Site Access, Safe Refuge, Assistant Safety Officer — HM
• Entry and decon names and PPE levels (buddy system and backup are the reason the form expects a minimum of four people for an entry: two in, two back-up)
• Hazard/risk analysis: material, container, quantity, physical state, pH, IDLH, flash point, vapor pressure and density, specific gravity, LEL/UEL
• Hazard monitoring instruments and frequencies
• Decontamination method and runoff
• Medical, communications, emergency procedures
• Signatures: ASO-HM, HM Group Supervisor, IC, and a recorded safety briefing time

Do not invent a federal requirement that every volunteer fire department must file ICS 208 HM by that exact number. OSHA does not say “use Form 208 HM.” OSHA says: write an ERP, run a site-specific ICS, and protect employees. 208 HM is the NIMS tool technicians should recognize because CDP, TEEX, and most U.S. fire-service IAP packages use it. A department that captures the same elements on an equivalent AHJ form is not automatically illegal. A department that skips the content because “we don’t have the pad” is.

Know which OSHA paragraph you are in.

1910.120(q)(2) — emergency-response ERP elements (fire-department technician world):

• Pre-emergency planning and coordination with outside parties
• Personnel roles, lines of authority, training, and communication
• Emergency recognition and prevention
• Safe distances and places of refuge
• Site security and control
• Evacuation routes and procedures
• Decontamination
• Emergency medical treatment and first aid
• Emergency alerting and response procedures
• Critique of response and follow-up
• PPE and emergency equipment

1910.120(b)(4) — site-specific safety and health plan for hazardous-waste operations (cleanup HASP, kept on site): hazard analysis per task; training assignments; PPE; medical surveillance; air monitoring frequency and methods; site control; decontamination; emergency response plan; confined-space entry; spill containment. (d)(3) adds the site-control minimums: site map, work zones, buddy system, communications including emergency alerting, SOPs, and identification of the nearest medical assistance.

Written tests mix (b)(4) and (q)(2). For a leaking cargo tank on the interstate you are in (q). For a Superfund excavation you are in (b)/(d). The content overlap — PPE, medical, monitoring, decon, buddy system, communications, nearest medical assistance — is why both lists appear in technician courses. Do not call the 40-hour (e) site-worker HASP your fire-department ERP.

Buddy system in the operational context

OSHA 1910.120(a)(3) defines buddy system: organizing employees into work groups so each employee is designated to be observed by at least one other employee in the work group. The purpose is rapid assistance in an emergency — not companionship, not a radio to dispatch, and not “the IC can see the tank from the hill.”

(q)(3)(v) applies it to emergency response: operations in hazardous areas shall be performed using the buddy system in groups of two or more. (q)(3)(vi) adds backup personnel standing by with equipment ready and advance first aid support with medical equipment and transportation capability. OSHA’s inspection policy treats a hazardous-area entry as at least two in and at least two additional personnel outside as backup, with at least four people on site for that reason. Chapter 6.3 taught the definition inside PPE and heat stress. On this page the operational meaning is: no solo hot-zone work, visual or voice observation of your partner, identically equipped backup, and medical transport on deck before the entry clock starts. Loss of a partner is an emergency, not a reason to finish the patch.

Scenario: wind shift after the cones are out

A pesticide tote is leaking on a loading dock. The Group Supervisor lays hot tape around the dock, a warm-zone corridor upwind, and command in the cold parking lot uphill. Entry and backup are named on 208 HM; decon is staffed; Safety briefs. Mid-entry the wind reverses. The corridor and command post are now downwind. The correct action is Safety or the IC alter, suspend, or redirect — move people, rebuild the corridor, and update the site safety plan — not “we already signed the form.” Isolation stays; evacuation versus shelter-in-place for the office wing is a new protective-action decision based on the new plume, not a copy-paste of the first radio report.

If you remember one sentence: hot is the product, warm is decon, cold is support; put them upwind and uphill; isolation is not evacuation; 208 HM is the NIMS site-safety tool, not a magic federal form number; buddy plus backup is how the hot zone is legal.