Risk management and emergency response

Risk management and emergency response

From prevention in design to controlled shutdown and documented reopening

The urban fountain operates in an environment where technical equipment, water, electricity and public presence are close to each other. Children may approach fountains, spectators may gather in one spot, and maintenance staff may access equipment at different times. Wind conditions, precipitation, water quality and technical conditions also change during operation.

Risk management should examine these connections from the design stage and continue for operation, maintenance and abnormal conditions. The outcome of this process should be seen in actionable detail: appropriate access route, effective protection, clear responsibility, stop order and reopening criteria.

This chapter presents the management framework of this issue. Specialized electrical, structural, water quality and control details should be used in conjunction with relevant chapters, approved design and project site requirements.

33–1. Hazard, risk and control action

In safety assessment, three concepts should be clear:

The risk depends on the conditions of use. A hatch in a locked facility space does not have the same status as a similar hatch in a spectator area.

The ISO 31000 standard introduces a general framework for risk identification, analysis, assessment, control and review. This standard is a guide and is not considered a technical safety standard of a water fountain or a product safety certificate. Official introduction of ISO 31000 ^[232]

In the water fountain project, this framework should be converted into a list of specific situations and actions that can be followed.

33–2. Determining the scope of assessment and foreseeable use

The evaluation should cover all phases of the project life cycle:

• Construction and installation.

• Testing and commissioning.

• Normal operation.

• Special programs and crowds.

• Cleaning and repair.

• Seasonal stop.

• Renovation and collection.

It should also be considered who may be at risk: users, children, companions, employees, service contractors and bystanders.

The actual behavior of people is also important. If a water feature visually suggests the possibility of entry and play, the installation of a "decorative" sign alone does not solve the problem of predictable water contact.

For each project, the following questions are asked:

1. Which parts do people approach? 2. What parts are accessible to hands or feet? 3. How is the space used during downtime? 4. What new risk is created during breakdown or repair? 5. Which users need help logging out or getting help?

33–3. Responsibilities, stop authority and incident command

Before operation, it should be determined who has the authority to stop, who evaluates the situation and who allows reopening.

In a small project, multiple roles may be assigned to one qualified person, but the boundaries of responsibility should still be clear.

Instructions should specify the authority for immediate action by trained personnel so that exposure to obvious danger does not delay administrative decisions.

For holidays, night hours and absence of the main official, a substitute is also appointed. Name, contact number and access point for essential information must be up to date.

33–4. Project risk register

The risk register should show for each situation the risk, consequence, control in place and next action.

In the executive version, the person in charge, the deadline, the status of the action and the remaining risk are also included.

The mere presence of a protective device does not prove its functionality. For each significant control, it must be known how it is checked or tested.

Place Figure 33–1—Hazards and Controls Map

Suggested form: Fountain plan with the location of signs, valves, public paths, gathering points, relief access and related controls.

Subtitle: "The risk office must be connected to the actual location of components and paths of use."

33–5. Risk prioritization and limitation of numerical points

Defined scales of probability and consequence severity can be used to sort the issues.

In a teaching method:

$R=L\times S$

where, $L$ is the probability score and $S$ is the consequence severity score.

If on a hypothetical scale of one to five, probability is considered to be three and severity is considered to be four:

$R=3\times 4=12$

This number is not the actual probability of an accident or the physical value of the risk. Also, a score of 12 does not necessarily mean that the risk is twice as high as a score of six.

Scales must be defined before use and the scoring basis recorded. Low-probability events with severe consequences also require independent investigation.

Deficiency of an essential protection or non-compliance with a safety requirement cannot be justified by a low numerical score.

After the action is implemented, the residual risk is reassessed. Reduction of points should be based on implemented control and evidence of its performance.

33–6. Effective control selection

In choosing a solution, the possibility of eliminating or reducing the risk in the design is first checked. Then the engineering protection, implementation method and other controls are completed.

NIOSH introduces this general arrangement in the Hazard Control Hierarchy. Controls that are less dependent on the momentary behavior of individuals usually play a more fundamental role in prevention. NIOSH Hazard Control Hierarchy ^[233]

For example, a slip warning sign can be a temporary measure; Sprinkler correction, drainage and surface condition should also be checked.

New controls may have side effects. Barrier installation, for example, should be coordinated with people's exit and access routes.

33–7. Controlling the main risks in design and installation

The technical assessment should cover at least the following areas:

Electrical and control equipment: protection against electric shock, installation conditions, connection, access and fault behavior.

Suction and moving parts: designing inlets, covers and preventing hazardous access to equipment.

Surfaces and grounds: slippage, jamming, surface differences, sharp edges, valve resistance and water accumulation.

Ponds and reservoirs: public access, possibility of falling, conditions of entry of employees and requirements for working in confined spaces, if applicable.

Fountain and effect: direction and conditions of water impact, movement of equipment and distance according to use.

Special equipment: flame effects, lasers or other special components must have their own specialized evaluation and design.

The safety test should not be done by putting the person in danger. Tests should be defined with appropriate methods, tools and conditions.

Changing the type of use also requires review; For example, converting a decorative water feature into a water play area changes the basis of assessment.

33–8. Normal stop, emergency stop and energy isolation

These three situations should be separated in education and documents.

Pressing the stop button or turning off the display does not alone confirm that the equipment is safe to open or repair.

Energy control should cover power, pressure, motion and stored energy sources as appropriate for the equipment. OSHA describes principles for preventing inadvertent activation and release of energy during service. OSHA Hazardous Energy Control Guide ^[234]

In the design of emergency stop, the effect of the action on all related parts should be considered. The same disconnection of all circuits may also disable services such as exit lighting; The behavior of each section must be specified in the plan.

Resolving the emergency situation should not lead to an unwanted start. How to reset and restart should be clear in the approved logic and project tests.

Figure 33–2—Stop and return states

Suggested figure: status diagram of "Normal work", "Controlled stop", "Emergency situation", "Technical check" and "Authorized start-up".

Subtitle: "Getting out of the error state and restarting work are two separable decisions."

33–9. Spectator safety and crowd management

The show fountain may move the crowd in a concentrated manner at the beginning or end of the show.

In the population management program, it should be checked:

• Entry and exit routes.

• Narrow points and places where movement interferes.

• Place to stand and sit.

• Usable routes for people with different needs.

• Relief access.

• Temporary barriers and event equipment.

• How to direct the crowd after the show is over.

The HSE's guidance on crowd management emphasizes route planning, preparedness for exits and emergency arrangements before people enter. These management principles should be adapted to the conditions and requirements of the project site. HSE Population Control Guide ^[235]

Spectator capacity cannot be obtained only from the area of the area. The shape of the space, bottlenecks, exit route and event conditions are also effective.

The exit route must remain usable in practice. Temporary vendor deployment, vehicles, seating, or audio equipment can create conditions that differ from the plan.

33–10. Management of incidents related to water quality

There must be a clear order for water quality impairment; Especially in interactive fountains.

This command should specify:

1. What conditions cause restriction or suspension of use. 2. Who checks the result? 3. What data and samples are required. 4. What corrective action is allowed. 5. What evidence does reopening require?

CDC guidelines for water play areas emphasize cleaning and disinfection functions, pre-opening inspections, monitoring and record keeping. Guidelines for using CDC water playgrounds ^[236]

In the event of contamination, the apparent clarity of the water or the elimination of unpleasant odors is not the sole criterion for reopening.

Chemical action and cleaning should be done by trained people and according to the relevant method. The responsibility of contacting the health authority or other authorities, if necessary, should be clear in advance.

33–11. Abnormal weather and environmental conditions

The operation plan should cover high wind, lightning, heavy rain, freezing and other conditions related to the site.

The wind sensor can be used to change the display mode. For example, Crystal Fountains' ECW sensor has been introduced to adjust the fountain based on wind conditions. This equipment is part of the solution and does not replace the complete weather response plan. ECW wind sensor ^[237]

In a thunderstorm, stopping the sprinkler alone does not make it safe to be outdoors. The US Weather Service's guidance emphasizes going to a suitable building or fully enclosed vehicle with a metal roof and recommends waiting at least 30 minutes after the last sound of thunder before returning outdoors. The site plan should coordinate this with applicable warnings and requirements. Lightning Safety Guide ^[238]

After rain or flood, the condition of signs, paths, tank and possible pollution is checked. The entry of employees into the flooded section suspected of electrical danger is not considered a routine visit and requires specialized security.

33–12. Reaction table to main scenarios

The table below is a template for compiling instructions. For each project, a detailed action, responsible person and communication method must be completed.

If electrocution is suspected, getting into water or coming in contact with suspicious person and components can spread the risk. Rescue should be coordinated with securing the scene and directing trained personnel.

This table is not a prescription for treatment or a substitute for first aid training.

33–13. Emergency plan and communication with people

The emergency plan must be available to the employees and must match the actual site map.

Its main components are:

• Basic scenarios.

• Coordinator and deputy.

• Status notification method.

• Control and isolation points.

• Emergency exit and access routes.

• Safe places and how to guide people.

• First aid resources and trained people.

• Numbers and methods of contact with local emergency services.

• Stopping and reopening conditions.

HSE guidance emphasizes the fit of the emergency plan to the hazards and coverage of visitor needs in the relief plan. HSE incident and emergency planning guide ^[239]

The general message should be short, clear and relevant to the approved situation.

Example of temporary stop message

"The water fountain has been temporarily stopped. Please do not enter the marked area and keep the crosswalks open. The staff of the collection will guide you."

The reopening time should not be announced definitively before the conditions are determined.

Place Figure 33–3 — Emergency response map

Suggested form: simple and readable map with directions, relief access, location of essential equipment and identification of control points.

Subtitle: "Emergency plan must be usable by employees and correspond to the actual situation of the place."

33–14. Teaching and practicing scenarios

Education should be role-oriented. Operator, technician, crowd manager and collection manager do not have the same duties.

Common topics include recognizing alerts, stop options, communication, range protection, and reopening conditions.

The exercise can start with a scenario conversation:

"During the show, there was a level warning and then the pump stopped, and a group of users approached the equipment. What action does each person take and what information does he convey to whom?"

Next, a controlled practical exercise can examine the relevance, accessibility and implementation of the instruction.

The practice evaluation criteria are:

• Correct diagnosis of the situation.

• Clear transmission of the message.

• Access to the relevant official.

• Implementation of action within the limits of authority.

• Maintain exit routes.

• Record decisions.

• Prevent unauthorized restarts.

The exercise should not be carried out by creating a real danger, removing protection or inappropriately surprising the public. Retraining schedules are also revised as personnel, equipment, and training results change.

33–15. Criteria for reopening and returning to service

Reopening must depend on concrete evidence.

Necessary items, according to the event, include:

1. The range of damage or disorder has been identified. 2. The cause or condition of the risk has been controlled as much as necessary. 3. The repair or corrective action has been accepted. 4. Relevant tests have been done. 5. Protections and normal settings are in place. 6. The conditions of water, surface and environment are confirmed. 7. The tools, temporary barriers and repair agents have been assigned tasks. 8. Employees should be aware of the new situation. 9. Necessary permits, if any, have been received.

Reopening permission must be registered by the designated authority in the project plan. In specialized events, the opinion of the relevant person or reference is also necessary.

If the cause is still unclear, limited continuation can only be considered if the scope of the risk and the permissible conditions have been documented. The existence of an alternative software mode is not, by itself, a license to continue.

Figure 33–4 — Pre-opening control

Featured image: Operations team and technical officer completing the reopening form, along with a view of the revised range and the hatches being closed.

Caption: "Fixing the appearance of the symptom must be completed by reviewing and confirming the conditions for return to service."

33–16. Incident registration, quasi-incident and review

A quasi-accident is an event that could have resulted in harm, but in that case, the harmful outcome did not occur. Its registration can provide an opportunity for correction before the incident.

The registration form should include the following:

After a significant event or effective change in the portfolio, the risk book and emergency plan are reviewed.

In the range of equipment introduced on the GSO site, there are pumps, lighting, level control, display control and installation accessories. For each project, the actual information of this equipment should be entered in the control plan, stop order and operation file. Equipment and services of GSO urban fountain ^[240]

The incident file is closed when the determined actions have been carried out, their results have been reviewed and the necessary changes have been transferred to the employees.