Shared Riser Shutdown and Tenant Notification

Purpose

A shared riser shutdown is measured in occupied units, not in valve turns, and the half that hurts people is the restore rather than the isolation. Water heaters left energized with a falling level, air driven into a system at the wrong end, a backflow device or a regulator left in a state the drain-down created: all of it happens on the way back up, with tenants already running taps. This procedure guarantees the riser's real extent is verified rather than read off a chart, that every affected occupant is notified with a stated lead time, and that the return to service is a set of checks rather than an opened valve.

Scope

Covers planned isolation of a shared domestic water riser or branch serving more than one unit or tenancy in apartment buildings, small mixed-use and small office properties, from survey and notification through isolation, restore and verification.

Does not cover the repair the shutdown exists to allow, which belongs to the SOP for that work. Does not cover any fire protection system: a valve serving sprinklers, standpipes or a fire pump leaves this procedure at step 2 and becomes an impairment managed by the fire protection contractor under NFPA 25 in the edition your authority having jurisdiction has adopted. Does not cover emergency shutdowns, where the loss is already running and notification follows the valve.

Roles and responsibilities

Procedure

1. Verify the riser's real extent by isolating and testing, before anybody writes a notice. Close the candidate valve and check a cold fixture in every unit you believe is on it, and in the units either side of it. Acceptance: a unit-by-unit list of who lost water and who did not, taken from fixtures rather than from a valve chart. Wrong looks like trusting a chart drawn at construction and amended by three shops since. Stop rule: any unit that loses water and is not on your list, or any listed unit that keeps water, stops the plan; the list is corrected and the notice period restarts for the newly affected units. Hazard: a valve that has not moved in years can break its stem or split its packing under your hand, so stand to the side of the handwheel, keep a bucket under it, and know where the next valve upstream is before you turn it.

2. Identify special occupants and confirm nothing on this valve serves fire protection. Ask about home medical equipment, dialysis, food service tenants, laundries and any tenant whose business stops without water, and trace whether the riser feeds a sprinkler, standpipe or fire pump connection. Acceptance: a written special occupant list and a stated yes or no on fire protection. Wrong looks like discovering a ground-floor restaurant after the water is off during its prep window. Stop rule: any fire protection connection ends this procedure and becomes a managed impairment run by the fire protection contractor. Hazard: none at this step beyond the phone, and getting it wrong takes a building's fire protection out of service without anyone knowing.

3. Notify in writing with a stated lead time and confirm receipt. Shop default, tuned to your lease terms: 72 hours written notice to every verified unit, a posted notice at each entrance and elevator, and a reminder about two hours before the valve closes. Acceptance: notices delivered, receipt tracked per unit, and the notice naming the date, the start time, the expected duration and what to do beforehand. Wrong looks like a single lobby notice, which reaches nobody who uses the garage door. Stop rule: any unit not reached is door-noticed with a photograph, and if a special occupant from step 2 has not been reached, the window moves rather than proceeding. Hazard: none at this step, it is paper and email, and it is the single thing that decides whether a shutdown is a maintenance event or a complaint.

4. Prepare every affected unit before the valve closes, water heaters first. Have electric water heaters de-energized at their breaker, gas heaters set to pilot or vacation, and timer-filled appliances switched off. Acceptance: each in-unit heater confirmed off, written per unit, before the valve moves. Wrong looks like an electric heater left energized while the level drops, which destroys an element in seconds. Stop rule: an in-unit heater you cannot confirm off means the valve does not close until you can. Hazard: where anyone works at the panel it is proved dead on a known live source before and after, per NFPA 70E-2021, 120.5, with work practices at 29 CFR 1910.333(b)(2) and by a qualified person under 1910.332; if nobody on site is qualified, an electrician does it.

5. Close the valve and prove it holds at the far end of the riser. Close it slowly, then open the highest and the lowest fixture on the riser and watch. Acceptance: flow stopping and staying stopped at both for a full two minutes, with both fixtures left open to break the vacuum. Wrong looks like a valve that closes to a trickle, which will keep the joint wet and the work impossible. Stop rule: a valve that will not hold means isolating further upstream, which is a larger shutdown and a new notification, not a job you push on with while it seeps. Hazard: leave the top and bottom fixtures open through the whole job, because a riser drained with everything closed can pull a vacuum that collapses a trap seal or draws waste water back through a fixture.

6. Drain the riser and do the work, keeping the drain path controlled. Acceptance: the riser drained to a hose or a bucket you are watching, not to a floor, and the work performed under its own SOP. Wrong looks like a drain valve opened onto a corridor floor, which turns one work order into a flooring claim. Stop rule: if the drain rate exceeds what your path can carry, throttle it rather than fetching more towels. Hazard: hot side drainage from a heated riser arrives scalding, so drain the cold leg first, route hot to a drain rather than a bucket you will carry, and keep the discharge below waist height where a splash reaches your leg and not your face.

7. Refill from the bottom and bleed from the top, slowly. Crack the valve open, let the riser fill from the lowest point upward, and go floor by floor opening the highest fixture on each until it runs solid. Acceptance: each floor's highest fixture running solid with no spitting, then the top fixture on the riser running clear for a full minute. Wrong looks like a valve snapped fully open, which drives an air slug up the riser and can unseat a flushometer diaphragm or fire an arrestor into a fixture. Stop rule: air still spitting at a fixture after a minute means there is a trapped pocket and you keep bleeding rather than declaring the riser back. Hazard: this is the step that puts pressure back with tenants in the building, so open the valve in stages with a hand on it, and warn anyone at a fixture that the first water out may arrive hot, dirty and hard.

8. Restore the protective devices and prove each one before you leave it. Re-energize water heaters only once the tank is proven full at a hot fixture, then check the regulator, the expansion tank and any backflow assembly the drain-down could have disturbed. Acceptance: static pressure recorded at a hose bib, expansion tank pre-charge checked against the regulator setpoint with the water side relieved, backflow assembly holding with a dry relief port. Wrong looks like an element energized on a tank never confirmed full. Stop rule: an assembly discharging after restore gets a certified test before that connection is used, not a tap with a wrench. Hazard: energy and pressure both go back here, so the heater breaker closes last, after hot has run solid, and anybody at the panel repeats step 4's proving sequence.

9. Verify at every affected unit and close out with the occupants. Acceptance: hot and cold run clear at one fixture per unit, no fixture spitting, no weep at anything you touched after five minutes, and any unit you could not enter noted with a follow-up. Wrong looks like a shutdown closed out from the boiler room. Stop rule: discoloured water at any unit gets flushed at a hose bib until clear before you leave, and if it does not clear, the shutdown is not closed and the lead is called. Hazard: dry traps in a unit that was drained let sewer gas into the room, so refill every trap you drained and tell the occupant to run each fixture once before using it.

The record this produces

Per shutdown: the verified unit list from step 1 with the chart's list beside it, the special occupant list, the fire protection answer, notice dates with per-unit receipt, water heaters confirmed off, valve closed and reopened times, the drain path used, restore static pressure, expansion tank pre-charge, backflow result, and the per-unit verification with any unit not entered.

These land on the building record. The next shutdown starts from the verified list rather than the chart, which is how a building's valve chart eventually becomes true. The property manager reads the notice receipts when a tenant complains they were not told. The lead reads the closed and reopened times to price the next one honestly, and the restore readings are the evidence that the building was handed back in the state it was taken in.

One worked pass, including a failure

Three-story, 12-unit building, four units per floor, riser B needs a section replaced in a first-floor ceiling. Notices go out 96 hours ahead for the 12 units the valve chart puts on riser B.

Step 1 runs 48 hours before the slot, and it fails. With the riser B valve closed, unit 1C still has cold water and unit 3D, which the chart puts on riser A, loses it. The chart is wrong in both directions. Stop rule taken: the list is corrected to 12 units, dropping 1C and adding 3D, and the notice period restarts for 3D. At 48 hours out, 3D would have only 48 hours of notice against the 72 hour default, so the window moves 24 hours: 48 plus 24 is 72, and the shutdown slips from Tuesday to Wednesday at the same start time.

Step 2 finds no fire protection on the valve and one special occupant, a ground-floor cafe that opens at 7 am, so the window is set 9 am to 12 noon.

Step 4 confirms nine in-unit electric heaters off at their breakers; three units have no in-unit heater. Step 5 closes the valve at 9:04 and the top and bottom fixtures both go dry and stay dry for two minutes, and both stay open.

Step 7 refills at 11:20, floor by floor, and the third floor bleeds for nearly two minutes before it runs solid. Step 8 reads static at 63 psi at the hose bib, expansion tank pre-charge checked against the regulator setpoint with the water side relieved and found 2 psi low, corrected, backflow assembly holding with a dry relief port. Heater breakers close after hot runs solid at a fixture in each unit.

Step 9 finds discoloured water at two second-floor units, flushed clear at the hose bib inside four minutes, and one unit nobody answered, noted for follow-up. Valve reopened 11:20, all units verified by 12:05, inside the noticed window.

References

• NFPA 25 for water-based fire protection system impairment and NFPA 72 for fire alarm impairment, each in the edition your authority having jurisdiction has adopted, which bind the building owner and reach the shop through the property's own impairment procedure.
• NFPA 70E-2021, 120.5 for the proving sequence and 29 CFR 1910.333(b)(2) with 1910.332 for who may perform electrical work, which is why a breaker is not opened by whoever is nearest.
• See related: the Plumbing property manager work order triage SOP, the multifamily unit turnover plumbing check SOP, and the pressure reducing valve replacement SOP for the regulator and expansion checks at step 8.