12.3 Switching Procedures: Development, Review, Confirmation, and Execution

Switching Procedures: Development, Review, Confirmation, and Execution

Quick Answer: Level III devotes three separate tasks to switching — 3.2b.3 "Evaluate existing switching procedures," 3.2b.4 "Confirm switching," and 3.2b.5 "Develop switching procedures" — and Level III's own role statement opens with "Manage switching procedures." Level II's supporting task is reading and interpreting switching instructions. Nothing else in the outline gets three tasks. Switching errors kill people and destroy equipment, and they are almost always communication or sequence failures rather than technical ones.

---

1. What a switching order is

A switching order (also called a switching plan or clearance procedure) is a written, numbered, step-by-step sequence of device operations that takes a system from one defined state to another.

One operation per step. A step reading "open breakers 52-1, 52-2, and 52-3" is defective: it cannot be individually verified, cannot be individually signed, and if the sequence is interrupted after the second breaker nobody can reconstruct the state from the record.

Devices are identified by their marked label, because "the main breaker" is ambiguous in a room with several and a technician under time pressure will resolve the ambiguity wrongly. If the label on the equipment does not match the label on the drawing, that is a stop-work condition resolved before switching begins, not a puzzle solved at the switchboard.

2. Developing a switching order

1. Define the objective precisely. "Isolate transformer T-2 and its secondary cable for testing, with grounds applied at both ends."
2. Study the current one-line and confirm the actual present state of every device — normally-open ties get closed and left closed, and the drawing will not know.
3. Identify every source, including backfeeds: alternate feeders, ties, generators, UPS outputs, transfer switches, and control power transformers fed from the load side.
4. Determine the isolation points and confirm each provides a verifiable open.
5. Sequence the operations per the rules in Section 4.
6. Include the safety steps as numbered steps in their own right: absence-of-voltage test, discharge of stored energy, grounding, LOTO application.
7. Write the restoration sequence at the same time. Writing it later, under time pressure, at the end of a long outage, is how restoration errors happen.
8. Identify the switching authority — the single person with authority to direct and authorize each step.
9. Review and approve before execution, per Section 3.

3. Review and confirmation

Level III's tasks separate evaluating an existing procedure from developing one, and a review asks specific questions:

• Are all sources accounted for, including backfeed and control power?
• Is each device identified by its actual marked label?
• Is the sequence correct — does any step operate a device beyond its rating?
• Are the safety steps present: test for absence of voltage, discharge, ground, LOTO?
• Is the restoration sequence written and correct?
• Does the procedure match the current drawings and the current field configuration?
• Have recent changes been incorporated — new feeders, replaced equipment, temporary connections?
• Are the verification methods for each step stated?

"Confirm switching" (3.2b.4) is the verification that the switching was actually performed as written and that the resulting system state is what the procedure intended. In practice: walk down the equipment, confirm each device's actual position, confirm locks and tags are applied, confirm grounds are in place, and confirm the record is complete and signed. It is a separate task from performing the switching precisely because a self-check by the person who did the work is the weakest form of verification.

4. Sequencing rules

Interrupt load with a device rated to interrupt it, before opening an isolating device.

A disconnect switch is a no-load device. The correct de-energization order for a typical feeder:

1. Open the circuit breaker — a device rated to interrupt load and fault current.
2. Verify it is open by position indication and, where design permits, visually.
3. Then open the disconnect switch, which now carries no current.

Restoration is the exact reverse: close the disconnect first with no load on it, then close the breaker. Operating a disconnect under load draws an arc it cannot quench.

Other sequencing rules:

• Work from the source toward the load when de-energizing; from the load toward the source when energizing. This keeps the newly operated device always facing a de-energized section.
• Consider transformer inrush on restoration. Energizing a large transformer draws inrush current with a heavy DC offset that can trip an instantaneous element, so the sequence and the protection settings must accommodate it.
• Consider capacitor bank switching order. A discharged bank must have completed its discharge time before re-energizing, or the switching transient is severe.
• Check synchronizing requirements where two energized sources are being paralleled — device 25 exists for this reason, and closing out of synchronism can wreck a generator.
• Watch the automatic devices. Automatic transfer switches, automatic reclosers, and load-shedding schemes will act on their own during switching. Either block them or plan for their action; being surprised by an ATS transfer mid-sequence is a serious event.

5. Three-part communication

This is the single most effective error-prevention technique in switching, and it is directly examinable.

1. The sender states the instruction, using the exact device identification: "Open breaker 52-14, Substation 3."
2. The receiver repeats it back verbatim: "Open breaker 52-14, Substation 3."
3. The sender confirms: "That is correct, proceed."

Then, after the operation:

1. The receiver reports completion with the device identification and the result: "Breaker 52-14 Substation 3 is open, indication confirmed, time 14:32."
2. The sender acknowledges and records it.

The repeat-back catches the entire class of errors that kill: mishearing 52-14 as 52-40, radio interference dropping a word, and the receiver's assumption about which device was meant. Paraphrasing defeats it — the value is in the verbatim repetition, which is why "yeah, got it" is not an acceptable second part.

Additional communication discipline: use a dedicated channel, avoid unnecessary traffic during switching, spell out ambiguous identifiers phonetically, and never accept an instruction from anyone other than the designated switching authority.

6. Execution discipline

• One step at a time, in the written order.
• Check off each step as it is completed, with time and initials. Not in a batch afterward.
• Verify each step before proceeding — indication, position, or measurement as the procedure specifies.
• Stop if anything is unexpected. A device that does not operate, an indication that does not agree with the expected state, an unexpected alarm — stop, report to the switching authority, and do not improvise. Improvised switching is the failure mode this whole system exists to prevent.
• Do not skip ahead even when a later step seems obviously safe.
• PPE for the operation itself — operating a medium-voltage device is a high-energy activity and the arc flash label applies to the act of switching.
• Remote operation where available. Remote racking and remote operation remove the operator from the arc flash boundary and should be used wherever the equipment supports it.

7. The restoration trap

More errors occur on restoration than on de-energization, for predictable reasons: the crew is tired, the work is "finished," time pressure is at its peak, and attention has moved on.

The restoration checklist:

• All grounds removed and counted against the log. Every one.
• All test leads and jumpers removed.
• All test switches closed and links landed, verified by an independent second person.
• All covers, barriers, and doors restored and secured, with gaskets intact.
• All LOTO removed by the person who applied it, in the correct order.
• Relay settings and trip unit settings as-left verified against the approved study.
• All personnel clear and accounted for before energization.
• Switching performed in the written restoration sequence.

Exam trap: A question describes a technician who receives a radio instruction to open a breaker and replies "yeah, got it" before operating. The failure is the repeat-back: three-part communication requires the receiver to state the instruction verbatim and the sender to confirm it, because that is what catches a misheard device identifier before the wrong device is operated.