How to Plan a Plant Turnaround

Last updated: September 1, 2026 | By the editors at Reliable

How We Evaluated

This guide is independent editorial analysis based on publicly available government documentation. Reliable Magazine does not sell shutdown, turnaround, or outage software, consulting, or certification and has no commercial interest in routing readers toward any particular platform or method. Reliable does not accept payment for inclusion in this guide. Vendors may sponsor enhanced listings with additional detail, but editorial rankings are independent. Read our editorial policy. The facts below come from OSHA 29 CFR 1910.119 (process safety management, including contractors, pre-startup safety review, mechanical integrity, hot work, and management of change), OSHA 29 CFR 1910.147 (lockout/tagout, including outside employers, group lockout, and shift transfer), NASA NPR 8831.2F Facilities Maintenance and Operations Management (effective October 7, 2015; Chapters 5 and 12), the U.S. Department of Energy Federal Energy Management Program Operations and Maintenance Best Practices Guide, Release 3.0 (Chapter 4), and the Warfighting Acquisition University Project / Program Management Fundamentals Handbook (Last Updated August 20, 2026).

What a plant turnaround is

The closest thing to a regulatory anchor is OSHA’s process safety management standard, 29 CFR 1910.119, which uses the word turnaround in two places and never defines it. OSHA’s Technical Manual, Petroleum Refining Process, Appendix IV:2-1 glossary, does define it, as a planned complete shutdown for major maintenance and inspection. In 1910.119(f)(1)(i)(G), written operating procedures must address “Startup following a turnaround, or after an emergency shutdown.” In 1910.119(h)(1), the contractor requirements apply to “contractors performing maintenance or repair, turnaround, major renovation, or specialty work on or adjacent to a covered process.”

Editorially, a plant turnaround is a planned, multi-craft outage to inspect, repair, and modify equipment that cannot be worked safely or accessibly while the unit is running. That is our framing, not an OSHA definition. The duration and the cost are yours to determine per unit, and we do not supply a number.

Whether the full process safety rule applies depends on 1910.119(a). The standard covers processes involving an appendix A chemical at or above its threshold quantity, or a Category 1 flammable gas or a flammable liquid with a flashpoint below 100 degrees Fahrenheit on site in one location, in a quantity of 10,000 pounds or more, with stated exceptions. Do not assume every plant or every unit is PSM-covered. The contractor, pre-startup, and management-of-change obligations discussed below attach to covered processes.

Freeze the scope

OSHA does not require a freeze date, and it does not use the phrase scope freeze. What OSHA does require, on a covered process, is management of change under 1910.119(l) for changes to process chemicals, technology, equipment, and procedures, except for replacements in kind. Before the change, the written procedure must address the technical basis, the impact on safety and health, modifications to operating procedures, the necessary time period, and authorization requirements. Affected operating, maintenance, and contract employees must be informed and trained before startup of the affected part.

NASA gives the authorization side of the same idea. Under NPR 8831.2F 5.6.3.2, final authorization checks that the work order is responsive, complies with safety, health, environmental, and security standards, is within the scope of the annual work plan, and is within funding and approval levels. Work that is not within the plan and the funding does not get authorized as written.

Plant-floor practice, and we label it as practice rather than a sourced rule, is to name a freeze: a date after which new jobs enter the work list only through change control. That change control assesses cost, schedule and critical-path impact, materials, and permits, and it routes covered changes except replacements in kind through MOC. A process-safety-information update is a possible result of that change, not the threshold that turns MOC on. We do not assign a universal freeze lead time. There is no sourced T-90, T-60, or T-10 in these documents, and we will not invent one.

Work-order quality going into the event

A turnaround is only as good as the work orders that go into it. NASA 5.2.1 separates the request from the approved work order: a request is received and processed, and only if approved is it converted into a work order. Under 5.5.3, each item of work gets a unique identifier, much like a serial number, and that identifier should not change once assigned, even if the work is later combined with another item.

The contents matter. NASA 5.6.1 and 5.6.4 describe a work order that carries the tasks or job steps per craft, the required materials, special tools and equipment, a time estimate per phase, sketches or drawings, and the safety requirements, which should include, but not be limited to, confined space entry, lockout/tagout, and other task-specific items. It also carries outages, job priority, and accounting information. Under 5.6.4.4, the final estimate, based on detailed job plans, is the one used for performance evaluation, not a rough scoping estimate.

For the anatomy of the document itself, see How to Write a Maintenance Work Order: What to Include and a Worked Example. Every equipment tag on those work orders should resolve to a clean asset hierarchy, so a bad tag does not send a crew to the wrong exchanger. For that structure, see How to Build an Asset Hierarchy in a CMMS: Structure and a Worked Example.

Materials and long-lead

Material is the quiet killer of a schedule. NASA 5.7.2 describes material management as ordering, stocking, storing, staging, issuing, and receiving, with the material manager working from the planning and estimating material lists and advising schedulers when material is available. The shop load plan under 5.7.3.1 considers long-lead-time material requirements as a distinct planning input.

The scheduling rule follows directly. Under 5.7.3.2, work orders are initially noted as awaiting material, and only when material is available and the job is ready to start is it firmly scheduled. In turnaround terms, you do not lock a job into the critical path if its bundle or its specialty gaskets are still on a truck somewhere.

On a covered process, OSHA adds a suitability requirement. Under 1910.119(j)(6)(iii), the employer must assure that maintenance materials, spare parts, and equipment are suitable for the process application for which they will be used. We do not supply lead times or spare-parts counts; those are yours to source from your own supply chain.

Critical path

The critical path is a scheduling concept, and the cleanest definition in our sources comes from the Warfighting Acquisition University Project / Program Management Fundamentals Handbook. The critical path is the sequence of tasks in the program schedule network with the longest total duration and the least amount of float. Those tasks cannot be delayed without delaying the project’s finish time.

WarU defines total float as the amount of time a scheduled task can be delayed without delaying the project’s completion. A forward pass through the network produces earliest start and finish times. A backward pass produces latest start and finish times. After both, you can determine the overall project length, the critical path, and the activities with float.

The practical consequence for a turnaround lead is narrow attention. Total float is the amount of time a task can be delayed without delaying project completion. Positive float, even a small amount, is still slack. A task that is not on the critical path can still delay oil-in once its float is consumed. We apply this as scheduling method language only. The handbook is a DoD program-management guide, not a turnaround manual.

Contractor control

On a PSM-covered process, contractor control is a regulation, not a preference. OSHA 1910.119(h)(1) applies to contractors performing turnaround work on or adjacent to a covered process, and it explicitly excludes incidental services such as janitorial, food, laundry, and delivery. The host employer under (h)(2) must obtain and evaluate the contract employer’s safety performance and programs, inform contractors of process hazards, explain the emergency action plan, control entry and presence, periodically evaluate performance, and keep a contract-employee injury and illness log for process areas. The contract employer under (h)(3) must train each contract employee, document that training, assure employees follow site safe work practices, and advise the host of hazards found in the work.

Those safe work practices are not optional. Under 1910.119(f)(4), the employer develops and implements safe work practices for lockout/tagout, confined space entry, opening process equipment or piping, and control over facility entrance, and those practices apply to employees and contractor employees alike.

NASA’s Chapter 12 offers a contracting philosophy, which we present as NASA facilities policy and not as OSHA. NASA favors performance-based contracts that buy outcomes rather than staffing, and it lists the problems of level-of-effort contracting in its own words: a “marching army” of contractor employees, and unplanned, often unnecessary extras added to the tasking. On a fixed-price contract, NASA notes, the contractor does not get paid for work that is unacceptable relative to the performance requirements, regardless of the maximum allowable defect rate. Read that as a caution about buying headcount instead of results, not as a rule that binds a chemical plant.

Permit-to-work and LOTO

Energy control is where a turnaround gets people hurt if it is sloppy. On a covered process, 1910.119(f)(4) makes lockout/tagout, confined space entry, and opening process equipment part of the required safe work practices, applying to employees and contractors. The mechanics live in 1910.147.

The energy control program under 1910.147(c) consists of energy control procedures, employee training, and periodic inspections. Procedures shall be developed, documented, and utilized, except that 1910.147(c)(4)(i) does not require the employer to document the procedure for a particular machine or equipment when all eight listed conditions are met. Where a documented procedure is required, (c)(4)(ii) must outline scope, purpose, authorization, rules, and techniques, including shutting down, isolating, blocking, securing, and testing to verify effectiveness. The sequence in (d) runs from preparation and shutdown to isolation, device application, relief of stored or residual energy, continued verification where reaccumulation is possible, and verification of isolation before work begins.

Contractors change the picture in specific ways. Under (f)(2), the on-site employer and the outside employer must inform each other of their respective lockout or tagout procedures, and the host ensures its employees understand and comply with the outside program’s restrictions. Group lockout under (f)(3) gives each authorized employee a personal lockout or tagout device on the group lockout device, group lockbox, or comparable mechanism, applied when they start and removed when they stop. Shift or personnel changes under (f)(4) require procedures for orderly transfer of protection. Hot work on or near a covered process needs a permit under 1910.119(k). For the full standard, see Lockout/Tagout Reference: 29 CFR 1910.147 and Its Most-Cited Provisions.

Readiness reviews

The pre-startup safety review is a defined gate, and it is narrower than a generic restart check. Under 1910.119(i), a PSSR is required for new facilities and for modified facilities when the modification is significant enough to require a change in the process safety information. It is not automatically triggered by every restart where the PSI did not change.

When it applies, the PSSR confirms, before highly hazardous chemicals are introduced, that construction and equipment are in accordance with design specifications; that safety, operating, maintenance, and emergency procedures are in place and adequate; that a process hazard analysis has been performed and its recommendations resolved for new facilities, or that modified facilities meet the management-of-change requirements of paragraph (l); and that training of each employee involved in operating the process is complete.

Operating procedures tie back to the outage directly. Under 1910.119(f)(1)(i)(G), those procedures must address startup following a turnaround. Restart is a written, procedure-governed step, and where the modification changed the PSI, the PSSR sits in front of it.

A planning gate list

The following table is a planning gate list, editorial synthesis of NASA milestones plus OSHA paragraphs (h), (i), (l), and (f)(4), plus the WarU critical-path method. It is not a published standard form, and it is not a government-documented six-gate overrun method. We include no invented savings percentage. Each row points at a control the sources actually name: authorization, MOC, material readiness, scheduling, contractor controls, or PSSR.

Punchlist and closeout

Closeout is where planning either captures its data or throws it away. NASA 5.7.5.1 calls for a final inspection appropriate to the nature and size of the work, and where the work was done for a customer, that customer should participate to accept it. On a turnaround, the acceptance is against the frozen scope, and a punchlist separates true punch items from work that was deferred out of the window.

Completion reporting under 5.7.5.4 records the completion in the CMMS along with the resources used, then closes the work order. NASA warns that care must be taken to identify and record all of the work accomplished, particularly when the initial request was sketchy, and to capture unanticipated conditions and extra material used but not listed. Supervisors should review the completion data. Where field effort differed substantially from the estimate, NASA 5.7.4 suggests a work-order amendment at a 20-percent or greater increase, which is NASA’s suggested threshold and not an industry rule.

Two safety steps close the loop. If the modification changed the PSI, the PSSR under 1910.119(i) comes before highly hazardous chemicals are introduced. Restoration from lockout under 1910.147(e) means inspecting the area, clearing nonessential items, positioning or removing employees safely, and removing each device by the employee who applied it. After the devices are removed and before startup, 1910.147(e)(2)(ii) requires notifying affected employees that the devices have been removed. Under 1910.147(e)(3), if that authorized employee is not available, the device may be removed under the direction of the employer when specified procedures and training are in the energy control program and equivalent safety is demonstrated, including verification that the employee is not at the facility, reasonable efforts to contact them, and ensuring they know before they resume work there.

When software helps vs when process fails

Software helps at the tracking layer. The Federal Energy Management Program describes a CMMS as management software that supports the management and tracking of O&M activities, with typical functions including work-order generation, prioritization, and tracking by equipment, historical tracking, PM generation, cost tracking, and parts and materials inventory control with automated reorder. The same logic extends to event and STO tools that track a frozen scope, a schedule, materials, permits, and contractor access.

The limit is also stated plainly. FEMP notes that the functionality of a CMMS lies in its ability to collect and store information in a retrievable format, and that a CMMS does not make decisions; it gives the manager the best information to act on. FEMP’s own pitfalls are improper vendor selection, inadequate training, lack of commitment to implement, and lack of commitment to persist, and the most successful installations have a champion.

Process fails independently of the tool. It fails when the freeze is not enforced, when work orders are incomplete, when material is not staged, when LOTO is not exchanged with contractors, when a covered change that is not a replacement in kind skips MOC, or when a modification significant enough to require a PSI change skips PSSR. A tool cannot rescue any of those. For product comparison across the event-software category, see Best Shutdown and Turnaround (STO) Software for 2026: An Independent Comparison. We do not name a winner here.

A worked plant example

The following example is illustrative and not a real plant. Northfield Processing is a fictional Midwestern process plant. Unit 400 is a hydrotreating-style reactor train with a charge heater, two feed pumps tagged F-401A and F-401B, a bank of feed and effluent exchangers, and a high-pressure separator. The planned event is a 14-day Unit 400 turnaround. That duration is illustrative, not a sourced average, and none of what follows is a purchase decision.

The scope is owned and frozen. The mechanical work list is locked as a named gate. Inspection findings, the “if found” work, have a change-control owner rather than an open door, so a discovery routes through cost, schedule, materials, and permit review before it lands on anyone’s critical path. A late coating job that arrives after the freeze is deferred to a future window rather than dumped onto the sequence. The exchanger bundle-pull work order carries a unique ID under NASA 5.5.3, plus isolation steps, lockout/tagout, the crane, a gasket kit, and craft hours under NASA 5.6.1. The replacement bundle and specialty gaskets are staged before the job is firmly scheduled, following NASA 5.7.3.2, so no crew stands idle waiting on steel.

The critical path is drawn in WarU terms as the longest, least-float chain: de-inventory, then isolation and blinds, then bundle pull on E-401, then NDE, then reassemble, then tightness test, then PSSR, then oil-in. In this illustrative schedule those tasks carry no float, and WarU’s rule is that such a sequence cannot slip without moving the finish. The mechanical contractor doing the bundle pull is treated under 1910.119(h) because this illustrative unit is written as PSM-covered, so the host evaluated the contractor’s safety performance, the two employers exchanged LOTO procedures under 1910.147(f)(2), and a group lockbox sits on the isolation. Readiness splits two tests. The new bundle metallurgy is not a replacement in kind, so it goes through MOC under (l). PSSR under (i) is a separate test: a modification significant enough to require a change in the process safety information. Materials of construction are process safety information under 1910.119(d)(3)(i), so a metallurgy change can meet that PSSR threshold, and that is why this illustrative job runs a PSSR. Non-replacement-in-kind does not, by itself, equal PSSR. At closeout the punchlist separates punch items from deferred work, completion data goes into the CMMS, and the extra gaskets used are recorded. Every paragraph here is illustrative and not a real plant.

Honest Limitations

These sources have edges, and it is worth naming them. OSHA 1910.119 applies only to covered processes under 1910.119(a); a plant or unit that falls outside that scope is not governed by its contractor, PSSR, or MOC paragraphs, though other OSHA parts still apply. NPR 8831.2F is a NASA document, mandatory for NASA employees at NASA Centers, and it is not an ISO plant standard or a chemical-industry rule. FEMP’s guide is written for Federal facilities. The WarU handbook is a DoD program-management guide, not a turnaround manual, and we used it only for critical-path and float language.

On numbers, we are deliberately quiet. No verified industry cost-overrun percentage appears in these sources, and we did not invent one. We are not claiming the sources contain no numbers at all: NASA’s 20-percent amendment figure is real, but it is NASA’s suggested amendment threshold, not an industry overrun statistic. Where we cross regulatory analogs, such as using MOC as the change-control rule behind a plant-floor freeze, we have labeled the synthesis as ours.

Frequently Asked Questions

What is a plant turnaround?

OSHA’s process safety management standard, 29 CFR 1910.119, uses the word turnaround without defining it. OSHA’s Technical Manual petroleum-refining glossary defines a turnaround as a planned complete shutdown for major maintenance and inspection. The standard requires written operating procedures for startup following a turnaround, and it applies its contractor paragraph to contractors performing maintenance or repair, turnaround, major renovation, or specialty work on or adjacent to a covered process. As Reliable frames it editorially, a plant turnaround is a planned, multi-craft outage to inspect, repair, and modify equipment that cannot be worked safely or accessibly while the unit is running. We do not supply a standard duration or cost.

What is a scope freeze in turnaround planning?

OSHA does not use the phrase scope freeze. NASA requires that final authorization confirm the work order is within the annual work plan and within funding, and PSM-covered technical changes, except replacements in kind, go through management of change under 1910.119(l). On the plant floor, a freeze is a named date after which new jobs enter only through change control that assesses cost, schedule and critical path, materials, and permits. There is no universal freeze lead time in these sources, so we do not quote one.

What is the critical path on a turnaround schedule?

Warfighting Acquisition University defines the critical path as the sequence of tasks in the program schedule network with the longest total duration and the least amount of float. Those tasks cannot be delayed without delaying the project’s finish time. Total float is the amount of time a scheduled task can be delayed without delaying the project’s completion. A forward pass through the network sets earliest start and finish times; a backward pass sets latest start and finish times; after both, you can determine the critical path and the activities with float. Positive float is still slack, and a task off the critical path can still delay the finish once that float is consumed.

How do OSHA PSM and LOTO apply to turnaround contractors?

If the process is PSM-covered, 1910.119(h) applies to turnaround contractors and excludes incidental services. The host evaluates contractor safety performance, controls entry, informs of hazards, evaluates performance, and keeps an injury log; contractors train their people, document it, and follow site safe work practices. Under 1910.119(f)(4) those safe work practices include lockout/tagout and apply to employees and contractor employees. Under 1910.147(f)(2) the host and the outside employer inform each other of their lockout procedures, and the group-lockout and shift-transfer rules still apply.

When does STO software help, and when does the process fail?

FEMP states that a CMMS collects and stores information and does not make decisions, and the same logic covers event software. NASA notes that you cannot firmly schedule a job until its material is available, and that incomplete requests make closeout harder. The process fails when the freeze is skipped, when a covered change that is not a replacement in kind skips MOC, when work orders lack tasks, resources, or safety, when isolations are not verified, or when a modification significant enough to require a PSI change skips the PSSR. For a product comparison, see the STO software guide; we do not name a winner here.

What belongs in punchlist and closeout?

NASA calls for a final inspection, with the customer participating where it is their work, and for completion to be recorded in the CMMS with resources used before the work order is closed. Capture unanticipated conditions, the work actually accomplished, and extra material, and have a supervisor review the completion data. If field effort exceeded the estimate substantially, NASA suggests amending the work order at a 20-percent or greater increase. If the modification changed the process safety information, the PSSR comes before introducing highly hazardous chemicals. Restoration from lockout means inspecting the area, clearing people, and having each device removed by the employee who applied it. After the devices are removed and before startup, 1910.147(e)(2)(ii) requires notifying affected employees that the devices have been removed. Under 1910.147(e)(3), employer-directed removal is allowed when that authorized employee is unavailable and the specified procedures and training are in the energy control program.

Related Guides

• Best Shutdown and Turnaround (STO) Software for 2026: An Independent Comparison
• How to Write a Maintenance Work Order: What to Include and a Worked Example
• How to Build an Asset Hierarchy in a CMMS: Structure and a Worked Example
• Lockout/Tagout Reference: 29 CFR 1910.147 and Its Most-Cited Provisions
• RCM vs FMEA: What’s the Difference, and Which One Do You Need?

Sources

• OSHA – Process safety management of highly hazardous chemicals (29 CFR 1910.119) (contractors, PSSR, mechanical integrity, hot work, MOC; startup following a turnaround)
• OSHA / eCFR – The control of hazardous energy (lockout/tagout), 29 CFR 1910.147 (energy control sequence, outside employers, group lockout, shift transfer)
• NASA – Facilities Maintenance and Operations Management (NPR 8831.2F) (Chapter 5 work-order preparation, materials, closeout; Chapter 12 contract support)
• U.S. Department of Energy, Federal Energy Management Program – Operations and Maintenance Best Practices Guide, Release 3.0 (CMMS work-order functions; a CMMS does not make decisions)
• Warfighting Acquisition University – Project / Program Management Fundamentals Handbook (Last Updated August 20, 2026; critical path and float)