A facility expands a compressor bay. A new chemical is introduced to an existing process train. A storage configuration changes after a contractor completes a tank re-purposing project. Each of these events triggers dozens of engineering reviews — process hazard analysis, pressure relief verification, electrical area classification re-evaluation. But one discipline is routinely left out of the conversation until an audit or an incident forces it back in: fire protection.

Management of Change — MOC — is the formal process by which industrial facilities evaluate, document, and control modifications to equipment, materials, procedures, and facility configurations before those changes take effect. OSHA’s Process Safety Management standard and Saudi Aramco’s internal safety management systems both require it. The problem is that fire protection is often treated as an afterthought in the MOC workflow, reviewed only at the final stage or not at all until the next scheduled inspection cycle.

That gap is where incidents originate. Not in the original design, which was engineered and reviewed — but in the space between the original design and what the facility actually looks like three years later.

What Fire Protection MOC Actually Covers

MOC for fire protection is not a single task. It is a structured review that evaluates whether an intended change — temporary or permanent — will affect the adequacy of existing fire detection, suppression, and alarm systems, and whether the change introduces new hazards that the current system was never designed to address.

The categories of change that require fire protection MOC review are broader than most operators realize:

• Process changes: New chemicals, altered flash points, changed flammable inventories, modified operating temperatures or pressures — all of these can shift the fire hazard classification of a space or process area.
• Equipment modifications: Adding or relocating pumps, compressors, heat exchangers, or vessels changes the physical geometry that fire detection and suppression systems were designed around.
• Structural and layout changes: New walls, partitions, mezzanines, and equipment pads alter airflow patterns, drainage paths, and sprinkler coverage geometry. A new structural element can create a shadow zone in a suppression system’s design envelope.
• Occupancy and use changes: Converting a low-occupancy utility room into an active operations area, or changing storage classifications from ordinary combustible to flammable liquid, changes the risk profile of the space entirely.
• Temporary changes: Bypass arrangements, out-of-service impairments, and temporary construction activities all require time-limited MOC review and formal impairment management in line with NFPA 25 requirements.

Each category has specific engineering checkpoints. Treating all MOC reviews as equivalent — or routing them through a generic checklist designed for process modifications — produces incomplete assessments and documented non-conformances.

The NFPA Framework for System Impairment and Change

NFPA 25, the standard for inspection, testing, and maintenance of water-based fire protection systems, establishes clear requirements for managing impairments — planned or unplanned periods when a system or component is out of service. An MOC-driven modification that requires a system to be temporarily disabled, isolated, or reconfigured triggers NFPA 25’s impairment management protocol.

Under this protocol, the responsible party must notify the authority having jurisdiction, implement compensatory measures (fire watch, hot work controls, temporary detection), and restore the system to service within a defined window. For Saudi industrial facilities, this requirement aligns with Saudi Civil Defense notification obligations and with Saudi Aramco SAES impairment tracking procedures for facilities operating under Aramco project requirements.

What NFPA 25 does not do is prescribe the engineering review process for determining whether a modified system remains adequate after a change. That engineering judgment — whether the existing hydraulic calculations still support the modified layout, whether detector spacing still meets coverage requirements, whether the suppression system’s design area still matches the hazard classification — must be performed by a qualified fire protection engineer.

NFPA 13, which governs the design and installation of sprinkler systems, requires that any modification affecting the system’s hydraulic design be accompanied by a revised hydraulic calculation demonstrating continued code compliance. This is not a recommendation. It is a design requirement, and it applies to modifications made years or decades after original system commissioning.

Where MOC Breaks Down in Practice

The most common failure mode is not ignorance of MOC requirements — it is organizational. The engineering review is initiated. The MOC form is completed. Fire protection is listed as a review discipline. But the review itself is cursory: a checkbox confirming that no new sprinkler heads are being removed, rather than a genuine evaluation of whether the modified hazard profile remains within the existing system’s design envelope.

Several structural factors contribute to this:

1. Fire protection is treated as a construction discipline rather than an engineering discipline. MOC routing paths that require mechanical, process, and electrical engineering sign-off will sometimes route fire protection to a maintenance supervisor rather than to an engineer with hydraulic and hazard analysis capability.
2. As-built documentation is incomplete or outdated. Without accurate as-built hydraulic calculations and system drawings, no engineer can reliably evaluate whether a change keeps the system within its design parameters. Facilities with aging infrastructure frequently discover that original design documentation does not reflect what was actually installed.
3. Temporary changes are treated as outside MOC scope. A temporary bypass that persists for three months while a contractor works in the area is, functionally, a three-month impairment with no compensatory measures in place. NFPA 25 does not recognize a duration threshold below which impairment management is optional.
4. The MOC process ends at commissioning, not at system verification. Changes are approved, installed, and commissioned — but the final step of verifying that the modified fire protection system still performs to its design intent through flow testing or detection verification is skipped to meet schedule pressure.

Engineering a Defensible MOC Process for Fire Protection

A defensible MOC process for fire protection does not require a separate workflow for every category of change. It requires a structured trigger matrix — a clearly defined list of change types that automatically route to fire protection engineering review — and a minimum technical scope for each category.

The trigger matrix should be specific enough to capture real hazard-generating changes and narrow enough to avoid review fatigue. A change to control room HVAC setpoints probably does not require fire protection MOC. A change that adds a Class I Division 1 area adjacent to an existing sprinkler zone does.

The technical scope for each review should include, at minimum:

• Confirmation that existing hydraulic calculations remain valid for the modified configuration
• Verification that hazard classification of the modified area has not changed, or re-classification if it has
• Review of detection coverage geometry against the modified layout
• Identification of any required impairments and confirmation that NFPA 25 impairment management procedures are in place
• Documentation of sign-off by a qualified fire protection engineer

For Saudi facilities operating under Saudi Aramco engineering standards, the MOC process must also verify alignment with applicable SAES requirements where they govern system design, and must produce documentation sufficient to support Saudi Civil Defense inspection and the Aramco project safety management review process.

The output of every fire protection MOC review should be a documented engineering record — not a completed form, but a technical record that shows what was evaluated, what was found, and what engineering basis supports the conclusion that the modified facility remains adequately protected.

The Bottom Line

Fire protection systems are designed for a specific facility at a specific point in time. Industrial facilities are not static. Every modification — a new piece of equipment, a changed chemical inventory, a structural alteration, a temporary impairment — is a potential gap between the facility as it exists and the protection system as it was designed. MOC is the engineering mechanism that closes that gap before an incident identifies it.

The facilities that manage this well share one characteristic: they treat fire protection engineering as a continuous obligation, not a construction-phase deliverable. The system was designed by engineers. Changes to the facility that affect that system require engineering review. That is not a regulatory burden. It is the baseline of responsible industrial operation.

Work With Ignis Sentinel Engineering

Need a fire risk assessment, a third-party plan review, or an NFPA/SAES
compliance check for your facility? Our engineers help Saudi and international
industrial operators design safer operations.

Book a consultation