Commissioning & Safety Systems
Proving the plant works and proving the protections work, in that order and at a deliberate pace - because commissioning is the point where a construction site stops being a construction site and becomes a hazardous facility with an operator, a permit system and emergency arrangements of its own.
Last updated 2026-08-25
Typical duration
Typically 3-6 months from first energisation to full handover on a utility-scale plant, and longer where it is the first plant of its kind for the operator. The testing itself is rarely what governs. Outstanding construction work, incomplete records from earlier phases and the availability of the operator's trained people usually are.
What is Commissioning & Safety Systems?
Commissioning is a change of ownership as much as a set of tests. Up to this point the site has belonged to a contractor, run under construction rules, and been populated by people whose job was to build things. Afterwards it belongs to an operator, runs under a permit system, and is populated by people whose job is to keep a hazardous plant inside its safe operating limits. The two regimes do not overlap comfortably, and the period where they exist side by side is the most dangerous window on the whole project. Everybody on site during that window needs to know which rules apply to them, in which area, today. That is a management problem long before it is a technical one.
The sequence is deliberately slow, and it runs in a direction that surprises people who have not done it before. The protections are proved before there is anything to protect against. Utilities and support systems are brought up first, then the electrical system in stages, then the detection, ventilation, shutdown and relief arrangements are functionally tested while the plant is still empty and nothing flammable is anywhere near it. Only when all of that has been proved and recorded do the process systems get prepared, inerted and taken through the staged introduction of gas the designer and the operator have written. The regimes for cleaning, drying, inerting, purging and introduction belong to them. They are specific to this plant, these materials and this layout, they are written down before anyone starts, and nothing about them is improvised on the day.
The third strand is people, and it is the one most often left until last. A plant handed to an operator whose staff have not been trained on it has not really been handed over. Operating and emergency procedures are written before commissioning and then proved during it, so that what the operator inherits has been used rather than filed. Operators, maintenance staff and supervisors learn the plant while it is being brought up, alongside the people who built it and the supplier who designed it, because that opportunity exists once and never again. The emergency services are brought onto the site and shown what is there before the plant is live rather than after. And the documented history of the whole job - the weld records, the alignment sheets, the earthing tests, the calibrations, the as-builts - comes together here as the asset's record. Commissioning is where it becomes obvious whether the earlier phases kept it honestly.
Compare the methods at a glance
When and why is Commissioning & Safety Systems used?
Commissioning comes last because nothing can be introduced into a system that is not complete, and it governs the date the plant starts earning, which makes it the most pressured phase on the project. That pressure is worth naming plainly, because it points in exactly the wrong direction. Grid connections, offtake agreements and supply commitments all have real dates attached, every week of delay is visible to everyone, and the natural response is to compress the one activity that must not be compressed. Commissioning is also where every shortcut taken earlier arrives at once. A loop that was never checked, a bolted joint made by feel, a detection device installed but never calibrated, a system whose records have gaps - none of them announced themselves during construction, and all of them turn up here, in the most expensive window on the programme, in front of the operator. There is a second reason for the deliberate pace. This is the first time the plant has ever been asked to do the thing it was built to do, and the first time is when unexpected behaviour appears. A staged approach with proving at every step means that when something behaves unexpectedly, the number of things it could be is small. Rushing the stages together means the number of things it could be is everything. The last reason is the plainest. Once gas is in the plant the site is no longer a place where mistakes are recoverable in the way they were during construction, and the whole point of going slowly is to have proved the protections while mistakes were still cheap.
Types of Commissioning & Safety Systems
Explore each method in depth - benefits, limitations, plant and quality control on its own page.
System-by-system commissioning with progressive handover
The plant is divided into systems, each one completed, proved and handed to the operator on its own, so commissioning can start on the first while the last is still being built. The usual approach on a large plant because it lets work run in parallel. It demands real discipline at the boundaries - every system handed over needs its records complete and its isolation from unfinished work unambiguous, or the operator inherits a live system sitting next to a construction site.
Supplier-led commissioning under a performance guarantee
The technology supplier commissions its own equipment and demonstrates that it performs as sold, with the contractor and the operator supporting. Sensible where the process is proprietary and the supplier carries the performance risk, and it usually produces a well-run demonstration. The gap to watch is everything between the packages, which is nobody's guarantee and is exactly where an assembled plant tends to fail.
Operator-led commissioning with the contractor in support
The operator's own commissioning and operating team takes the lead from an early stage, with the contractor and the suppliers providing technical support. Slower to start, because the team has to be recruited and trained ahead of the plant, and much stronger at handover, because the people who will run the asset for the next twenty years learned it while it was being brought up rather than from a manual afterwards.
Phased commissioning on a plant built to expand
The first units are commissioned and put into service while later ones are still being installed, which is what a repeat-unit layout is for. It gets revenue moving early and each subsequent commissioning is quicker than the last. It also means construction continues alongside an operating hazardous plant, so the separation between the two, and the rules that apply either side of it, become the dominant safety question on the site.
Best suited for
- New plants where the operator will run an asset nobody on the construction team has ever operated
- Sites near other operators, occupied buildings or public roads, where the emergency arrangements matter beyond the fence
- Schemes tied to a fixed supply commitment, where a protected commissioning window is what makes the date achievable
- Plants built to expand, where the first commissioning sets the pattern every later unit will follow
Commissioning & Safety Systems: step by step
- 1
Step 1: Plan the commissioning long before the plant is finished
Commissioning is planned while the plant is still being designed, not when it is nearly built. The plant is divided into systems, the order in which they will be brought up is agreed, and the boundaries between them are drawn so that a completed system can be proved and isolated while its neighbour is still under construction. The procedures themselves are written by the designer and the technology supplier and approved before anything begins, because a procedure written under programme pressure by people who want to finish is not really a procedure. Roles are settled in the same exercise: who runs each activity, who witnesses it, who accepts it, and the point at which each system stops belonging to the contractor. Left late, all of this happens by default and by argument, in the window where there is least time to do it, which is why so many commissioning programmes are already behind before the first system is started.
- 2
Step 2: Prove the utilities and the support systems first
Nothing else can be proved until the things that support it are working, so the unglamorous systems go first - power distribution, control system availability, instrument and service air, inert gas supplies, cooling, water treatment, drainage, lighting, communications and the site's own fire and detection infrastructure. These are conventional systems and the commissioning is conventional, which is precisely why it gets underestimated. A control system that drops out intermittently, or an air supply that cannot hold up under demand, will not stop the plant being commissioned. It will simply make every later test unreliable and every fault ambiguous, and the time lost chasing that is never recovered. This is also the first time the operator's people work on their own plant, so it is a useful place for them to learn the systems while the consequences of getting something wrong are still small.
- 3
Step 3: Energise the electrical system in stages
Energisation turns a site where people work on cables into a site where cables can kill, and it happens in deliberate stages with the status of every part of the system known and controlled at each one. Protection settings are applied and proved before anything is energised through them. Insulation, continuity and cable identity testing is completed and recorded first, and outstanding work on a circuit is cleared before that circuit goes live rather than afterwards. The connection to the network is made under the network operator's own arrangements, on their timescale and to their requirements, and that is not a date the project controls. From first energisation onwards the site carries permanently live plant, the electrical safety rules change, and everyone working there has to be told plainly which parts are live, because the visual difference between an energised switchboard and a dead one is nothing at all.
- 4
Step 4: Prove the safety systems while the plant is still empty
This is the heart of the phase and the reason it is sequenced the way it is. Detection, ventilation, emergency shutdown, isolation, relief and the fire systems are all proved to work before there is any flammable gas on the site to test them against. Every device is calibrated and every loop is proved end to end - from the sensor in the field, through the control system, to the thing that is actually supposed to move, whether that is a valve closing, a fan starting, an alarm sounding or a machine tripping. Testing the signal and assuming the action is the classic failure in this trade, and it is caught here or it is not caught at all. The shutdown philosophy is then demonstrated as a whole rather than device by device, so the plant is seen to reach its safe state from each of the conditions the designer says should take it there. Every result is recorded against the tag it belongs to. Any override applied to allow testing goes on a register with a named owner, because an override that survives commissioning is a protection the plant no longer has.
- 5
Step 5: Hand the plant into the operator's permit system
At some point the site stops being a construction project and becomes an operating facility, and that transition is managed rather than allowed to happen quietly. In practice it happens system by system, but the decisive moment comes before anything flammable is introduced. From then on the operator's permit system governs. Hot work is controlled under their rules, access is controlled under their rules, and the classified areas of the plant are real rather than lines on a drawing. Anyone still working on site - and there are always people still working on site - is inducted into the new regime and told plainly what has changed. The most dangerous confusion on any commissioning job is somebody working to the rules they learned six months ago in an area that has since become something else. Clear physical separation between the operating plant and any remaining construction, with the boundary marked and controlled, does more for safety here than any amount of briefing.
- 6
Step 6: Prepare, inert and introduce gas in stages
The process systems are cleaned, dried and inerted before anything flammable goes near them, and gas is then introduced in a controlled, staged way that was written down in advance. The regimes for all of it - the media, the sequence, the acceptance criteria and the point at which each stage is judged complete - are set by the designer and the technology supplier for this specific plant, they are carried out under the operator's control, and none of it is a matter for judgement on the day. What everyone on site needs to understand is the shape rather than the detail: the plant is taken through a sequence in which flammable and oxidising atmospheres are never allowed to meet, each stage is proved and recorded before the next one begins, and the whole thing moves at the pace of the proving rather than the pace of the programme. The area is controlled while it happens and the number of people present is kept to those who need to be there. This is the step that people outside the industry imagine is dramatic. Done properly it is the opposite - slow, quiet, heavily supervised and almost entirely uneventful.
- 7
Step 7: Bring the plant up and prove it does what was sold
With gas in the system the plant is brought towards normal operation in steps, and its behaviour is watched and recorded rather than assumed. Machinery is run and monitored, control loops are tuned against a plant that is now real rather than modelled, and the protections that were proved on a dead plant are seen to behave correctly on a live one. This is where the quality of every earlier phase shows itself: an alignment done properly stays quiet, a joint made properly stays tight, a loop checked properly does what it says on the drawing. Performance testing follows, to a procedure usually agreed commercially long before, demonstrating output, quality, consumption and availability against what the technology supplier committed to. Those results matter to the contract, but the more useful output for the operator is the trend data and the record of how the plant actually behaved in its first weeks of running, because that becomes the baseline everything is compared against for the rest of the asset's life.
- 8
Step 8: Train the operator's people, brief the emergency services and hand over the record
Handover is not a delivery of files. The operator's people are trained on the plant while it is being brought up, working alongside the people who built it and the supplier who designed it, because that chance exists once. Operating and emergency procedures are proved during commissioning rather than filed at the end of it, and competence is assessed and recorded rather than assumed. Separately, the emergency services are brought onto the site, shown the layout, told what is held where, walked through the access routes and the isolation arrangements and given the information they would need if they were ever called - and that happens while the plant is being commissioned, not after something has gone wrong. The documentation is then assembled into a single asset record: design intent, as-builts, the test and inspection results from every earlier phase, calibration certificates, commissioning results, operating procedures and maintenance requirements. Anything missing is chased now, while the people who produced it are still reachable, because six months after demobilisation it is gone for good.
Plant & equipment
- Inert gas supplies and the temporary equipment to deliver them, controlled by the commissioning team
- Fixed and portable gas detection, with calibration gases stored, issued and in date
- Loop testing, signal simulation and calibration equipment for proving control and shutdown loops
- Electrical test equipment for insulation, continuity, protection settings and thermal imaging at first load
- Leak detection equipment suited to the service, used to the procedure the designer specified
- Control system data logging and trending to record how the plant actually behaves from the first day
- Temporary power, lighting, ventilation and dehumidification for systems not yet on permanent supply
- Barriers, signage, radios and the controlled-area equipment needed while staged activities are in progress
Quality control & testing
- Commissioning procedures written and approved before any activity starts, not drafted as it proceeds
- System boundaries defined, and isolation from unfinished work proved before a system is declared ready
- Every control and shutdown loop proved end to end, from field device to final element, and recorded
- Detection and safety devices calibrated on site, with results recorded against their own tags
- Overrides and defeats held on a register with a named owner, and reconciled to none before service
- Temporary items - blanks, spades, strainers and test equipment - logged in and signed out individually
- The full asset record from every earlier phase assembled and checked for gaps before handover
Safety watchpoints
- A plant that becomes live in stages, so what was safe to work on yesterday may not be safe today
- Asphyxiation risk anywhere inerting has been carried out, especially in enclosed or poorly ventilated spaces
- Ignition control across the whole site once flammable gas is present, with hot work under the operator's permits
- Stored energy in pressurised systems, in rotating machinery and in an electrical system that is now live
- Two safety regimes side by side while construction finishes next to a plant being brought into service
- Protective systems temporarily overridden for testing, and the risk of one being left that way
- Construction workers unfamiliar with an operating plant, and operators unfamiliar with an unfinished one
- Emergency arrangements that have to work from the first day gas is present, not from the day of handover
Common defects to hunt
- Commissioning planned as the tail of construction, so the programme is written late and immediately compressed
- Mechanical completion declared optimistically, moving construction work into the commissioning window
- Loops proved at the signal but never through to the final element, so a protection has never actually operated
- Safety devices installed in exactly the right place and then never calibrated on site
- Overrides applied for testing and left in, with no register to catch them before the plant enters service
- Records missing from earlier phases, so systems cannot be declared ready and the tail of the job runs long
- Training treated as a handover of manuals rather than as competence somebody actually assessed
- The emergency services seeing the site for the first time on the day they are called to it
How long does Commissioning & Safety Systems take?
Typical duration: Typically 3-6 months from first energisation to full handover on a utility-scale plant, and longer where it is the first plant of its kind for the operator. The testing itself is rarely what governs. Outstanding construction work, incomplete records from earlier phases and the availability of the operator's trained people usually are..
Related processes
Previous in sequence
04 - Pipework & Distribution