When developing an electrical safety program, you need to build a structured system that covers risk assessment, worker classification, protective equipment, permitting for energized work, and ongoing audits. A solid program isn’t just a binder on a shelf. It’s a living framework that determines who can work on what, under which conditions, and with what protections. OSHA requires it, and NFPA 70E provides the detailed blueprint for how to do it right.
Start With a Risk Assessment
Every electrical safety program begins with identifying what can hurt your workers and how badly. A proper hazard assessment covers four things: identification of both electrical and non-electrical hazards at each work location, the likelihood that each hazard will actually occur, the severity of harm if it does, and the mitigation measures that will bring risk down to an acceptable level. This isn’t a one-person task. OSHA recommends that employers conduct this assessment in consultation with workers, reviewing existing information about workplace hazards and periodically inspecting for new ones.
For arc flash hazards specifically, the assessment needs to estimate the “incident heat energy” available at each energized conductor or piece of equipment. That estimate drives three critical decisions: the distance between the arc flash boundary and the energized source, the incident energy a worker would be exposed to at their working distance, and the level of protective equipment needed to perform any permitted energized work safely. You also need to establish shock protection boundaries. The “limited approach boundary” marks where an electric shock hazard exists. The “restricted approach boundary” sits closer to the source, where the likelihood of shock is highest. Both boundaries must be determined and communicated alongside the arc flash boundary.
Classify Your Workers
Your program must distinguish between qualified and unqualified persons, because the rules for each group are fundamentally different. Under OSHA’s standard (29 CFR 1910.332), any employee who faces a risk of electric shock that isn’t already eliminated by the electrical installation itself needs training. But the depth of that training depends on classification.
A qualified person is someone permitted to work on or near exposed energized parts. To earn that designation, a worker must demonstrate electrical knowledge and skills sufficient to work safely on energized circuits. That includes familiarity with the construction and operation of the equipment they’ll encounter, the specific electrical hazards involved, proper use of insulating and shielding materials, insulated tools, and personal protective equipment. They also need to know the clearance distances for the voltages they’ll be exposed to. Without this training, a person cannot be classified as qualified, period.
Unqualified persons still need training, but it focuses on recognizing electrical hazards and understanding why they must stay outside approach boundaries. Your program should spell out exactly which roles fall into each category and what training path each requires.
Training Requirements
OSHA allows training to be classroom-based, on-the-job, or a combination of both. The key rule is that the degree of training must match the risk the employee faces. Someone who occasionally resets a breaker in a well-marked panel needs less training than an electrician opening energized switchgear.
All employees covered by the standard need to be trained in the safety-related work practices that pertain to their specific job assignments. For qualified persons, training must additionally cover the skills needed for direct contact with energized equipment or contact through tools and materials. This means hands-on competency, not just awareness. Your program should document what training each person received, when they received it, and how competency was verified. Retraining intervals should be defined based on risk level and any changes to equipment or procedures.
Protective Equipment by Hazard Level
Personal protective equipment for electrical work is categorized into four tiers based on incident energy, the measure of thermal energy a worker could be exposed to during an arc flash. Each category sets a minimum arc rating that clothing and gear must meet.
- Category 1 covers exposures up to 4 cal/cm² and requires arc-rated long-sleeve shirts and pants (or a coverall) plus an arc-rated face shield or flash suit hood.
- Category 2 covers exposures up to 8 cal/cm² and adds the option of an arc-rated balaclava worn under the face shield or hood.
- Category 3 covers exposures up to 25 cal/cm² and requires a full arc flash suit hood along with arc-rated gloves or rubber insulating gloves with leather protectors.
- Category 4 covers exposures up to 40 cal/cm² and demands the highest-rated arc flash suit, hood, and glove combination available.
Your program needs to tie PPE selection directly back to the risk assessment. Each task on energized or potentially energized equipment should have a documented PPE requirement based on the incident energy calculation for that specific location. Generic “one size fits all” PPE assignments don’t satisfy the standard and, more importantly, don’t protect workers whose exposure varies from one panel to the next.
Energized Electrical Work Permits
Any time work must be performed on energized equipment, your program should require a formal written permit. The default position is always to de-energize first. The permit exists for situations where that genuinely isn’t possible or where the work must happen before the next scheduled outage.
A complete energized work permit has three parts. The requester fills out the first section, describing the circuit or equipment, the work location, the work to be done, and a written justification explaining why the equipment cannot be de-energized or the work deferred. This justification is not optional. If you can’t articulate a legitimate reason for working energized, the permit shouldn’t be issued.
The qualified person performing the work completes the second section, which is the technical core. It includes a detailed job procedure, the safe work practices to be employed, results of both the shock hazard analysis and the flash hazard analysis, determination of shock protection and flash protection boundaries, the PPE required, how unqualified persons will be kept out of the work area, and evidence that a job briefing covering all hazards took place. The qualified worker must also confirm in writing that they believe the work can be done safely. If the answer is no, the permit goes back to the requester.
The third section collects approvals. Depending on your organization, this typically involves signatures from maintenance or engineering management, a safety manager, an electrically knowledgeable person, and potentially a general manager. Your program should define exactly who has approval authority and make clear that no energized work begins without a fully signed permit.
Contractor Coordination
If outside contractors perform electrical work at your facility, your program must address how hazard information flows in both directions. As a host employer, you’re required to establish a procedure that ensures contractors know about the electrical hazards present on site and the control measures already in place. Contractors, in turn, must inform you about the hazards their work introduces and the procedures they’ll use to protect their own workers.
This exchange needs to happen before work begins, not after someone gets hurt. Your program should specify who is responsible for this communication, how it’s documented, and how conflicts between the contractor’s methods and your facility’s safety rules get resolved. If a contractor’s electrical safety practices don’t meet your program’s standards, you need a process for addressing that gap before granting site access.
Audit Schedule and Program Review
Building the program is only half the job. Keeping it effective requires two layers of auditing on different timelines. OSHA mandates that specific electrical safety elements, including lockout/tagout procedures, be reviewed annually. These annual reviews focus on whether workers are actually following the written procedures in the field. That means observing real work being performed, not just reviewing paperwork.
Every three years, NFPA 70E (Article 110.3) requires a comprehensive audit that goes deeper. This triennial review examines the entire written program, evaluates whether procedures still match current equipment and work conditions, and identifies gaps that annual observations might miss. Think of the annual review as checking whether people follow the rules, and the triennial audit as checking whether the rules themselves are still adequate.
Your program document should define both audit cycles, assign responsibility for conducting them, and establish a process for correcting deficiencies found during either type of review. Field audit findings should feed directly into training updates, so the gap between what’s written and what’s practiced stays as small as possible.