Pan ERP

A pan fire or pan-related incident ERP should clearly define whether employees will evacuate only or whether designated, trained responders will take limited defensive actions or full emergency response actions. Under OSHA, employers that evacuate employees from the danger area and do not permit them to assist in handling the emergency may rely on an emergency action plan under 29 CFR 1910.38; if employees take response actions beyond evacuation, the plan must address emergency response requirements under 29 CFR 1910.120(q). For PSM-covered operations, the employer must establish and implement an emergency action plan for the entire plant and include procedures for handling small releases. [8] [7]

For a practical pan fire ERP, include the following elements:

• Hazard assessment for the pan operation: identify fuel sources, combustible/flammable liquids, hot oil or grease, nearby combustibles, ignition sources, ventilation effects, splash/boilover potential, toxic smoke, and whether the incident could escalate into a hazardous substance release or process upset.
• Alarm and notification procedures: define how to report the fire, activate internal alarms, notify supervision, summon the fire department, and notify outside emergency response parties and mutual-aid partners.
• Roles and command structure: establish an incident command system (ICS), identify the incident commander, and assign shutdown, evacuation, accountability, fire brigade, medical, and liaison responsibilities.
• Evacuation and accountability: specify alarm tones, exit routes, assembly points, headcount procedures, criteria for shelter-in-place versus evacuation, and methods to keep personnel out of hazard zones.
• Emergency shutdown and isolation: identify who may shut off burners, electricity, fuel, ventilation, pumps, or feed systems; what valves or disconnects may be operated; and when shutdown must stop because conditions are unsafe.
• Fire response procedures: state when a small incipient-stage pan fire may be attacked with the correct extinguisher or fixed suppression system, and when employees must back out and wait for the fire department.
• PPE requirements: specify task-based PPE for evacuation wardens, incipient-stage extinguisher users, fire brigade members, and hazmat responders, including limitations, inspection, maintenance, and decontamination where contamination is possible.
• Medical and rescue interface: define first-aid, burn treatment, EMS activation, and rescue limitations so untrained employees do not attempt hazardous rescue.
• Post-incident actions: secure the area, preserve evidence as appropriate, investigate root causes, document corrective actions, review findings with affected personnel, and retain required records.
• Training, drills, and plan review: train employees on alarms, evacuation, extinguisher use if authorized, shutdown steps, PPE, and ICS roles; conduct drills if required by the employer's own plans; and periodically audit and update the ERP.

[6] [5] [7] For hazard assessment, evaluate the pan process before an incident occurs and again dynamically during the event. Key factors include what is burning, whether water contact could worsen the fire, whether the pan is part of a larger process, whether there are pressurized or energized systems nearby, whether smoke or vapors create inhalation hazards, and whether responders would need to enter a contamination or high-heat zone. If the pan incident involves hazardous substances or process chemicals, the ERP should align with local or state emergency response plans and outside responders must understand their roles and any limitations that could delay response. [4] [6] [2]

For fire safety procedures, the ERP should require immediate alarm activation, rapid size-up, and strict control of extinguishment methods. For pan fires involving cooking oils, flammable liquids, or reactive materials, employees should never apply an extinguishing agent that can spread burning liquid or cause violent splatter. The plan should identify the correct extinguishing media and fixed systems for the specific pan hazard, require responders to approach from a safe position with a clear exit path, and mandate withdrawal if the fire is beyond incipient stage, threatens adjacent equipment, or produces untenable heat or smoke. Emergency equipment inventories must be known so responders can use PPE and response equipment effectively. [1] [3]

For evacuation, the ERP should establish immediate evacuation triggers such as loss of control of the pan fire, activation of suppression systems, smoke migration into occupied areas, suspected hazardous atmosphere, or inability to safely isolate energy sources. Evacuation routes must avoid the fire area and any smoke or contamination zones, and the plan should include accountability at assembly points. If the employer's strategy is evacuation-only, employees must not re-enter or attempt emergency control actions beyond those specifically allowed in the plan. [8] [9]

For emergency shutdown, the ERP should identify pre-authorized shutdown steps for the pan system and adjacent hazards, including fuel isolation, electrical disconnects, process feed cutoffs, ventilation controls, and lockout points where applicable. If operators are expected to take limited actions such as closing valves or isolating equipment from outside the immediate hazard area, those actions must be specifically addressed in the ERP and matched to the employees' training level. Shutdown procedures should be simple, posted, and drilled so employees do not improvise during an emergency. [9] [9]

For incident response organization, use an ICS with one incident commander controlling tactical decisions, communications, and scene safety. The ERP should define when command transfers to the fire department or unified command, how the safety officer function is assigned, and how contractors or skilled support personnel are briefed before entering any exposure area. Outside agencies should be integrated into the ERP through local/state plans or written agreements so responsibilities are clear before an event occurs. [5] [4] [1]

For PPE, the ERP should specify PPE by task and hazard level rather than using one default ensemble. At minimum, identify protection for heat/flame exposure, eye/face hazards, hand protection, foot protection, respiratory hazards, and contamination potential. A written PPE program should cover hazard identification, selection, use, maintenance, decontamination, training, and periodic evaluation. The plan must also address the limitations of PPE, since over-protection can create heat stress, impaired vision, mobility, and communication problems. Where respiratory protection is needed for smoke, toxic vapors, or oxygen-deficient atmospheres, only properly selected and trained responders should enter. [5] [5] [1]

For post-incident response, the ERP should require scene stabilization, medical evaluation of exposed employees, preservation of key evidence where feasible, formal incident investigation, root-cause analysis, corrective action tracking, communication of findings to affected personnel, and retention of investigation records. Near misses and small fires should also be reviewed because they may reveal conditions that could reasonably have resulted in a catastrophic event. [7] [7] [10]

For OSHA and regulatory compliance, the ERP should be written, site-specific, accessible, and coordinated with the facility emergency action plan, hazard communication program, lockout/tagout procedures, fire brigade procedures if applicable, and any PSM documentation. If the facility is covered by PSM, emergency planning and response under 1910.119(n), incident investigation under 1910.119(m), and compliance audits at least every three years under 1910.119(o) are key requirements. If employees respond to hazardous substance emergencies, the employer must implement the applicable HAZWOPER emergency response provisions, including ICS, PPE, training, and coordination with outside responders. If the ERP or EAP includes drills, the employer must conduct them as written. [7] [7] [8]

In practice, the strongest pan fire ERP is one that limits employee actions to their actual training level, pre-plans shutdown and evacuation decisions, integrates outside responders, and treats every fire, near miss, or uncontrolled pan event as a trigger for corrective action and plan improvement.