Handover: documentation, training and the owner's responsibilities

A fire alarm that works on handover day and is misunderstood the day after is a system in trouble. Dana Whitcombe will run the north wing for years; her maintenance staff will silence its troubles, its security officers will read its annunciator, and its nurses will hear its signals. None of them took part in the verification. 'Handover is where all our knowledge has to pass to people who weren't here,' Gerry tells Sasha. 'If we do it badly, the first nuisance alarm undoes three weeks of work.' This lesson covers what the owner receives, how the people who will live with the system are trained, the owner's duties from the first day, and how later changes are verified.

The documents the owner receives

The handover package is everything the owner needs to operate, maintain, inspect and change the system. For the north wing it includes:

• the record of completion, the signed test records and the integrated testing report;
• record drawings showing what was actually built: every device, its address, its circuit and its room, with the revision that matches the final program;
• the sequence of operation and the functional matrix as tested;
• a copy of the site-specific program, with its version and date, and the passwords or access arrangements the owner needs;
• battery and voltage drop calculations revised to match the installed load;
• equipment data sheets and the manufacturer's operating and maintenance manuals;
• the written approvals of any alternatives or deviations accepted by the authority;
• warranty terms and the service company's contact details for troubles and emergencies.

NFPA 72 requires a documentation cabinet at the control unit, or at another approved location, labeled as the system record documents, holding the record of completion, record drawings, the sequence of operation and a copy of the site-specific software. The owner must keep these records for the life of the system and make them available to the fire marshal.

Checking the record drawings

Record drawings are only useful if they match the building. Before handover Sasha reconciles three lists: the final design drawings, the panel's final point list, and the test matrix, which records what was found on site. Every device must appear in all three with the same address, type and room. Differences are corrected on the drawings before they are issued as records.

# Reconcile the as-built record: drawings, panel point list and test matrix
drawings = {"1-003": ("heat", "1.012"), "1-005": ("smoke", "1.014"), "1-006": ("smoke", "1.015"),
            "4-031": ("smoke", "4.108 med room"), "4-032": ("heat", "4.110 staff lounge"), "P-003": ("heat", "penthouse")}
panel =    {"1-003": ("heat", "1.012"), "1-005": ("smoke", "1.014"), "1-006": ("smoke", "1.015"),
            "4-031": ("smoke", "4.108 med room"), "4-032": ("heat", "4.110 staff lounge"), "P-003": ("heat", "penthouse")}
matrix =   {"1-003": ("heat", "1.012"), "1-005": ("smoke", "1.014"), "1-006": ("smoke", "1.015"),
            "4-031": ("smoke", "4.108 med room"), "4-032": ("heat", "4.110 staff lounge")}
problems = 0
for addr in sorted(set(drawings) | set(panel) | set(matrix)):
    seen = [src for src, d in (("drawings", drawings), ("panel", panel), ("matrix", matrix)) if addr in d]
    vals = {d[addr] for d in (drawings, panel, matrix) if addr in d}
    if len(seen) < 3 or len(vals) > 1:
        problems += 1
        print(f"{addr}: found in {', '.join(seen)}; values {sorted(vals)}")
print("record matches" if problems == 0 else f"{problems} difference(s) to resolve before issuing record drawings")

P-003: found in drawings, panel; values [('heat', 'penthouse')]
1 difference(s) to resolve before issuing record drawings

One difference remains: the penthouse heat detector P-003, added after the installation review, is on the drawings and in the panel but has no row in the matrix. It was installed after the penthouse was tested. Sasha tests it, adds the row, and only then are the record drawings issued.

Training the people who will use it

Training is part of handover, and the specification usually says who must be trained and for how long. At Eastview Gerry runs separate sessions for different groups, because each needs something different:

The private and public modes need particular care in training. Nursing staff must understand that the chime at the nurse station means a detector or station has operated on their unit, what the investigation steps are, and that the public signal will follow as the sequence describes. A staff member who resets the system to stop the noise may hide a real fire.

# Training record: who attended, and who still needs a session
required = {"security": 12, "maintenance": 8, "nursing leadership": 10, "facilities": 2}
attended = {"security": 9, "maintenance": 8, "nursing leadership": 7, "facilities": 2}
for group, need in required.items():
    got = attended.get(group, 0)
    print(f"{group:20s} {got:2d} of {need:2d} trained" + ("" if got >= need else f"  - {need - got} still to train"))
total_need, total_got = sum(required.values()), sum(attended.values())
print(f"overall {total_got} of {total_need}; schedule a make-up session before occupancy" if total_got < total_need else "all trained")

security              9 of 12 trained  - 3 still to train
maintenance           8 of  8 trained
nursing leadership    7 of 10 trained  - 3 still to train
facilities            2 of  2 trained
overall 26 of 32; schedule a make-up session before occupancy

The training record goes into the handover package with each person's name and the date. Gerry schedules a make-up session for the night shift, because the people most likely to be alone with an alarm at 3 a.m. are the ones least likely to attend a daytime class.

The owner's duties from day one

From occupancy, the owner is responsible for keeping the system in working order. Under the fire code and NFPA 72 Chapter 14, that includes the periodic visual inspections and tests at the frequencies the standard sets, by qualified people, and keeping the records. The first annual inspection is due within a year of the acceptance test, and Sasha's records become the baseline it is compared with.

The owner is also responsible for impairments. When the system or part of it is out of service, the owner must notify the fire department and the monitoring station, arrange a fire watch where required and get the system back in service. Dana's staff learn the hospital's impairment procedure in their training session, and the procedure is written into the fire safety plan.

Controlling later changes

Buildings change, and hospitals change constantly. A room becomes a lab, a wall moves, a new piece of equipment needs a heat detector. Each change to the fire alarm is a modification that must be designed, installed and verified. The owner's job is to make sure nobody changes the system without that process, including the hospital's own maintenance staff and other contractors.

Reacceptance testing under NFPA 72 covers the changed parts and everything they affect. Added devices are tested; deleted devices require testing another device on the same circuit to prove it still works; changes to site-specific software require testing all affected functions plus 10 percent of unaffected initiating devices, up to 50; changes to the panel's executive software require a 10 percent functional test including at least one device on each input and output circuit. The record of completion and the record drawings are updated after every change.

Changes also affect integrated testing. A change to a door, a damper or an elevator interface means the integrated scenarios that use it must be retested, and the integrated testing report updated.

Warranty and the first year

Most contracts include a one-year warranty on the installation, and many hospitals pay for a service visit or two during that year. The first year is when early failures show: a detector that drifts dirty because construction dust is still settling, a waterflow switch that sticks, a battery that was weak from the start. Gerry recommends that the first inspection after occupancy be done by a crew that has the acceptance test record in hand and compares every finding with it.

The fire safety plan

The fire alarm doesn't operate in isolation from people. The fire code requires a fire safety and evacuation plan for buildings like a hospital, describing what staff do when the alarm sounds, how patients are protected in place or moved, and how the fire department is met. Dana's team updates Eastview's plan for the north wing before occupancy, and Gerry reviews the parts that describe the fire alarm: the meaning of the private and public signals, the location of the annunciator, the procedure for silencing and resetting, and the impairment procedure. A plan that describes signals the system doesn't produce, or controls it doesn't have, is a problem waiting for a fire.

Hospitals also hold fire drills on every shift, and the first drills on a new wing are a useful final check. Staff hear the signals where they really work, at the times they really work, and any room where a signal can't be heard or a door doesn't close shows up quickly. Gerry asks Dana to send him the results of the first round of drills, and two of the north wing's remarks are closed on the strength of them.

The service contract

The owner also needs a service arrangement in place from the first day: who answers trouble calls, how fast, who does the annual inspection and who keeps the program copy and passwords. On the north wing, the hospital extends its existing service agreement with Bramwell to cover the new wing. Donna Achebe, Bramwell's service manager, adds the wing's devices to the hospital's inspection schedule, loads the verification records into the service crew's files, and books the first inspection for the anniversary of the verification, so that the interval doesn't drift.

Passwords and access codes deserve particular care. The panel's programming passwords, the network access arrangements and any remote connection must be documented, held by the owner and changed from the installer's defaults before handover. A system that only the installer can reprogram leaves the owner dependent on one company; a system anyone can reprogram leaves it open to changes nobody verified.

Finally, the owner should know who to call first. A laminated card inside the panel door lists the service company's 24-hour number, the monitoring station's number and account, and the hospital's own internal contacts, so that the person standing at the panel during a trouble at 3 a.m. doesn't have to search for them.