USPA Nationwide Security

Volume 19

NFPA 25 Impairment Protocols (2026): Fire Watch, the Ten-Hour Framework and System Restoration

The 2026 NFPA 25 impairment procedure read against the International Fire Code's out-of-service provisions, the rolling ten-hour window, federal healthcare rules and the fire code official's decision, for a building whose adopted edition may not be the publisher's current one.

Fact check

Ten hours of sprinkler impairment in a 24-hour period automatically requires a hired fire watch, and the count restarts at midnight.

Neither is in the text. Ten cumulative hours inside a rolling 24-hour window moves the decision into the Chapter 15 framework, which offers evacuation of the affected portion, an approved fire watch, a temporary water supply, or approved ignition and fuel controls, and leaves the choice with the code official. Midnight resets nothing. CMS-regulated hospitals are narrower: over ten hours in 24 means evacuation or an approved fire watch.

Edition detail
Technical review edition 1.0
Edition detail
2026 NFPA 25 (publisher's current edition, with Errata No. 25-26-1 dated October 7, 2025); 2024 International Fire Code Chapter 9 including §901.7; 2025 California Fire Code Chapter 9 as an illustrative state regime; 2024 International Property Maintenance Code Chapter 7; CMS State Operations Manual Appendix A, A-0717 (Rev. 238); OSHA 29 CFR 1910.38, 1910.157, 1910.252, 1915.504 and 1926.150; New York City Fire Code §901.7.
Edition detail
23 pages
Edition detail
22 cited sources
Edition detail
Research cutoff 2026-11-10

By Brian Fitzgibbons, Director of Operations

No account, no payment. One email address delivers the complete edition and the library link.

The short version

What the national requirements actually say

Written for the facility engineer, property manager, construction supervisor, healthcare safety officer and contracting officer who has to defend a decision the night a required system is out of service, and for the vendor who has to document the watch that follows.

  • Notice is not conditional on ten hours. Section 901.7 of the International Fire Code requires immediate notification when a required system is out of service, and an official can direct a measure on the first hour.
  • The ten hours are cumulative across a rolling 24-hour window. Two episodes either side of midnight add together, and midnight is not a reset.
  • Four pathways exist in the general NFPA model, and they are not interchangeable: evacuation, an approved fire watch, temporary water, and approved ignition and fuel controls. The approval belongs to the authority, not the vendor.
  • CMS-registered hospitals lose most of that menu. A sprinkler shutdown over ten hours in 24 requires evacuation of the affected building or portion, or an approved fire watch with continuous patrol and a means to alert the fire department.
  • A fire alarm outage is a separate analysis under the adopted alarm provisions. A four-hour alarm threshold is not a sprinkler rule and importing it produces the wrong answer.
  • Repair, successful restoration testing and administrative closure are three milestones. The watch does not end because pressure came back.

Field reference

The national decision card

Immediate issueWhat the responsible manager must knowSource
Which edition binds the buildingNFPA 25's published edition is 2026, but the edition in force is whatever the state or local code adopted, with its amendments. Check the adopted text before quoting a clause. Publisher status verified; adoption is jurisdictional.[S01] [S06]
When notification is owedImmediately on discovering a required fire protection system out of service. Section 901.7 does not wait for ten hours, and California's published provision is an explicit example of that duty. Verified model code.[S06] [S07] [S08]
When the ten-hour decision point arrivesAt ten cumulative hours of impairment inside any rolling 24-hour period, on the published Chapter 15 framework. Episodes add; midnight does not reset. Verify against the adopted edition.[S02] [S03] [S05]
Whether a fire watch is mandatory at ten hoursNo. The general framework offers evacuation, an approved fire watch, temporary water, or approved ignition and fuel controls, and the code official determines which applies. Treating the watch as automatic is unsupported.[S03] [S05] [S07]
Hospitals and CMS-regulated occupanciesA sprinkler shutdown exceeding ten hours in 24 requires evacuation of the affected building or portion, or an approved fire watch with continuous patrol and a means to alert the fire department. Temporary water alone does not close the duty.[S10] [S11] [S12]
Fire alarm outagesA distinct analysis under NFPA 101 and the adopted alarm provisions, not NFPA 25's impairment procedure. Applying a four-hour alarm threshold to sprinklers is an error.[S06] [S13]
What the watch has to proveContinuous patrol of the affected area, traversal recorded by route or checkpoint, observations rather than initials, escalation to the fire department and no competing duties for assigned personnel. The interval comes from the authority, not the vendor.[S07] [S08] [S10]
When the watch can stand downAfter repair, successful restoration testing and administrative closure, with the tag removed and every notification closed out. A pressure reading is not a restoration.[S05] [S08]
What the record must holdStart, end, system, zone and restoration-verification timestamps for every episode so the rolling window can be reconstructed. Retention periods come from the authority, the insurer or the contract, not from a national figure.[S05] [S06]

Informational only. Applicable adopted codes, written orders and the authority having jurisdiction control in every case.

Inside the edition

Chapter index

A national reference for water-based fire protection impairment that keeps four questions separate: what protection has actually failed, which enforceable regime applies to the building, how long the exposure really runs on a rolling 24-hour ledger, and who is authorised to choose the interim measure. It treats the ten-hour provision as a decision framework rather than an automatic hiring order, covers partial isolation, pumps, standpipes, dry and preaction systems, construction and hot work overlays, and the healthcare rules that remove temporary water from the options.

Download the two-page brief
  1. 01

    01. NFPA 25's function and the boundary of legal authority

    The standard sets inspection, testing and maintenance expectations for water-based equipment; it becomes an obligation only through the code that adopts it.

  2. 02

    02. The layered authority model: standard, code, order and occupancy

    Federal rules, state adoptions, local ordinances, permits and inspector orders each bind differently, and the hierarchy decides which one you cite.

  3. 03

    03. Reading 2026 NFPA 25 with the errata and revision record

    The publisher's edition status and its October 7, 2025 errata are not the same thing as the edition a state or city has adopted.

  4. 04

    04. The IFC Section 901.7 interface

    The code's out-of-service provision covers any required system and can require immediate notification and a watch without waiting for ten hours.

  5. 05

    05. Why national tables do not produce municipal exemptions

    An outage under ten hours is not a safe harbour: notification, tagging and an early official order can apply on the first minute.

  6. 06

    06. NFPA 101 and the separate fire-alarm question

    A fire alarm outage runs on its own code path and is not governed by NFPA 25's water-based impairment procedure.

  7. 07

    07. Hospital and federal healthcare overlays

    CMS narrows the choice for Medicare hospitals: a sprinkler shutdown over ten hours in 24 means evacuate the affected portion or post an approved watch.

  8. 08

    08. Facilities across multiple campuses or legal parcels

    A shared supply, pump house or campus alarm network can put several buildings, uses and jurisdictions inside one impairment.

  9. 09

    09. Impairment, critical deficiency and noncritical deficiency

    Classification turns on the protected risk and the lost function, not on the name of the component that failed.

  10. 10

    10. Functional impairment and the hydraulic boundary

    Protection is a delivered function: the question is whether remaining equipment still delivers design flow and pressure where it matters.

  11. 11

    11. The ten-hour/24-hour accounting convention

    The hours are cumulative across a rolling 24-hour window, so two episodes either side of midnight add together and midnight resets nothing.

  12. 12

    12. Time forecasting versus elapsed time

    Elapsed exposure and the prospective repair interval are different numbers, and the decision gets easier when both are written down.

  13. 13

    13. The four compensatory pathways in the general NFPA model

    Evacuation, an approved fire watch, temporary water, or approved ignition and fuel controls, each with its own approval requirement and limits.

  14. 14

    14. Fire watch is an operational compensatory measure

    A watch is an approved, planned patrol and response function, not an officer seated in a lobby waiting for something to happen.

  15. 15

    15. Evacuation and the meaning of the affected portion

    The affected portion has to follow the hydraulic and compartmentation boundary, not the mailing address.

  16. 16

    16. Temporary water supply and engineering acceptance

    Temporary supply is engineering work: verified flow, pressure, duration and reliability, accepted by the authority before it counts.

  17. 17

    17. Ignition-source and fuel controls: when the option is credible

    Removing ignition and fuel only works where the means are enforceable and the occupancy can actually be controlled.

  18. 18

    18. Partial isolation: avoiding the whole-building fallacy

    A closed valve can isolate a small zone, but the assessor carries the burden of proving the separation is real.

  19. 19

    19. Fire pumps, controllers and redundant systems

    An unavailable pump is a different impairment from a closed floor valve, and redundancy has to be demonstrated rather than assumed.

  20. 20

    20. Dry, preaction and deluge system nuances

    These systems carry air supply, detection and release hardware whose failure is also a loss of protection.

  21. 21

    21. Standpipes, fire department connections and fire-service interface

    A standpipe outage degrades firefighting hose operations even where the sprinkler system still holds pressure.

  22. 22

    22. Alarm, monitoring and supervisory interdependencies

    Waterflow, tamper and pump status signals tie the water system to the alarm, so one loss can conceal the other.

  23. 23

    23. High-rise vertical geography and patrol feasibility

    In a tall building the risk geography is vertical, and route time has to be measured on site rather than assumed.

  24. 24

    24. High-hazard storage, industrial processes and occupancy sensitivity

    The same deficiency is a different problem in a hazardous process area than in an ordinary office floor.

  25. 25

    25. The impairment coordinator's authority and continuity

    One accountable coordinator owns assessment, notification, tagging, mitigation and closure, and the role needs a named deputy.

  26. 26

    26. Planned impairment authorization: the control package

    Planned work allows boundaries, notifications, mitigation and a schedule to be approved before the system goes down.

  27. 27

    27. Emergency impairments: discovery under uncertain conditions

    A burst main or failed pump is found mid-loss, so the first minutes go to securing the condition and fixing the boundary.

  28. 28

    28. Notification sequencing and evidence of receipt

    Dispatch, the fire code official, the supervising station, the insurer, the owner and occupants each need a record of receipt.

  29. 29

    29. Impairment tagging and field configuration control

    Tags record what is out and where the boundary sits, and they come off only after approved restoration.

  30. 30

    30. Selecting watch personnel and eliminating competing duties

    The plan assumes people who can walk the area, recognize a hazard, reach an extinguisher and summon the fire department without other duties.

  31. 31

    31. Route engineering and proof of actual coverage

    A log has to show traversal of the risk areas with observations, not a time and initials written at a desk.

  32. 32

    32. Alerting, extinguisher limitations and emergency escalation

    Alerting the fire department, understanding extinguisher limits and escalating on discovery belong in the written watch plan.

  33. 33

    33. Construction, renovation and staged protection

    Construction impairs permanent protection while adding fuel and ignition, which is the problem NFPA 241 addresses.

  34. 34

    34. Hot work during suppression impairment

    Welding or cutting under an impairment puts two separate rule sets on the same activity at the same time.

  35. 35

    35. Healthcare defend-in-place and patient movement constraints

    A hospital cannot simply empty a floor, so interim measures need clinical, engineering and fire-safety agreement.

  36. 36

    36. Insurer instructions and contractual overlays

    A carrier or a lease often requires earlier notice, more mitigation and better records than the code does.

  37. 37

    37. Occupancy restrictions, hazardous processes and enforcement orders

    An official can restrict a use or a process for the duration, and that order is part of the requirement.

  38. 38

    38. Restoration tests, re-impairment and controlled return to service

    Repair, successful testing and administrative closure are three milestones, and a pressure reading is not a restoration.

  39. 39

    39. Records, causation and retrospective auditability

    The file should let another professional reconstruct the event without interviewing the original team.

  40. 40

    40. The integrated national decision record

    One record ties the impaired function to the governing sources, the official direction, the mitigations and the timestamps.

  41. 41

    SCENARIO 1 — Eleven cumulative hours across midnight

    Two episodes, five and six hours, sit inside one rolling 24-hour window and reach the ten-hour decision point together.

  42. 42

    SCENARIO 2 — High-rise branch isolation versus central supply failure

    Twenty occupied stories: a branch isolation and a riser or supply failure produce materially different decisions.

  43. 43

    SCENARIO 3 — Hospital sprinkler outage at ten hours and thirty minutes

    The CMS rule leaves evacuation or an approved fire watch, and temporary water alone does not close the duty.

  44. 44

    SCENARIO 4 — Fire pump trouble with apparently available municipal pressure

    Residual pressure on a gauge does not establish redundancy or design flow, so the impairment stands until it is proven.

  45. 45

    SCENARIO 5 — Painted sprinklers in different protected hazards

    Three painted heads in an office and three in a hazardous process are not the same deficiency.

  46. 46

    SCENARIO 6 — Renovation with welding and a shut sprinkler branch

    Hot work beside a deactivated branch combines the hot-work watch with the impairment decision.

  47. 47

    SCENARIO 7 — Four-hour fire alarm rule mistakenly applied to water systems

    A citation describing an alarm threshold is imported into sprinkler work, and the standard it appears to cite says something else.

  48. 48

    APPENDIX A — Impairment Coordinator decision record

    One form per impairment event, holding the boundary, the sources, the official direction and the mitigation chosen.

  49. 49

    APPENDIX B — Required notification and acknowledgment matrix

    Recipient, contact, trigger, method, timestamp, content, acknowledging person and reference number.

  50. 50

    APPENDIX C — Physical tag and impairment boundary form

    System, valve, affected floors, coordinator, start time, control number and the contacts to be told at restoration.

  51. 51

    APPENDIX D — Watch route engineering worksheet

    Protected zone, floor plans, ignition points, checkpoints, measured travel times, locked rooms and blind spots.

  52. 52

    APPENDIX E — Continuous patrol log and exception record

    Officer, shift, route version, checkpoint and time, observation, hazard found and the notification that followed.

  53. 53

    APPENDIX F — Temporary water engineering approval sheet

    Engineer, source, verified flow and pressure, design demand, duration, pump and power reliability, acceptance.

  54. 54

    APPENDIX G — Occupancy and operational restriction register

    Occupancy group, occupants needing assistance, hazardous process, fuel, ignition activity and feasible curtailment.

  55. 55

    APPENDIX H — Restoration acceptance and watch release

    Contractor report, parts repaired, test protocol, observed values and the release signed before the watch stands down.

  56. 56

    APPENDIX I — Regulatory source and decision assurance register

    Every assertion mapped to its official document, with a flag for edition dependence and the review date.

  57. The complete edition runs 23 pages and carries the full analysis, forms and citation registry.
Figure 1. The standard, the adopted code, the official order and the occupancy as one stacked requirement.
Figure 1. The standard, the adopted code, the official order and the occupancy as one stacked requirement.
Figure 2. The rolling 24-hour ledger that carries two episodes across midnight.
Figure 2. The rolling 24-hour ledger that carries two episodes across midnight.
Figure 3. The impairment response chain from discovery to the approved compensatory measure.
Figure 3. The impairment response chain from discovery to the approved compensatory measure.
Figure 4. Restoration testing, watch release and notification closure as separate milestones.
Figure 4. Restoration testing, watch release and notification closure as separate milestones.

Free delivery

Get the complete edition

The complete edition carries the code-by-code analysis, fire-watch design methodology, incident scenarios, the field forms, the permit review matrix and the full source registry. It is free, and it is sent to one address of your choosing.

  • Complete edition as a PDF, downloadable for one hour from the email.
  • The two-page field brief, always free to read.
  • A link to every other published volume in the library.
  • No account, no payment, no subscription required.

Need coverage on a site tonight? Dispatch answers around the clock at (800) 214-1448.

Free complete edition

Email me the complete guide

One email address is all we ask for. You will receive the full edition as a PDF, the free two-page field brief, and a link to the rest of the regulatory library. No account, no payment, no subscription.

We use your address to send this guide and to honour the contact choice above. It is not sold, and it never appears on a public page. See the privacy notice.

Evidence

Source and evidence registry

Every citation is listed so a reader can check the underlying document rather than take a summary on trust.