1. Purpose
Define a controlled process for planned replacement of a UPS power module while minimizing operational risk to protected critical loads and maintaining visibility of system redundancy and operating state.
2. Scope
Applies to planned replacement activities involving modular UPS systems supporting critical infrastructure environments such as data centers, technical facilities or other continuously operated systems.
This example does not replace manufacturer instructions, electrical safety procedures, lockout/tagout requirements, local regulations, commissioning procedures or site-specific operational controls.
3. Preconditions
- ☐ Approved maintenance window confirmed
- ☐ Formal change approval completed
- ☐ Stakeholders informed according to communication plan
- ☐ UPS operating normally with no unresolved critical alarms
- ☐ Required redundancy verified available
- ☐ Spare module verified compatible and available onsite
- ☐ Vendor and operational responsibilities confirmed
- ☐ Rollback plan reviewed and understood
- ☐ Monitoring systems operational
- ☐ Required PPE and electrical safety controls available
4. Responsibilities
| Role | Responsibility |
|---|---|
| Operations Lead | Coordinate activity, verify operational readiness and approve progression between phases. |
| UPS Vendor / Specialist | Perform module replacement according to approved technical procedure. |
| Facility Operations | Monitor alarms, environmental conditions and infrastructure impact. |
| Change Manager | Ensure approvals, communication and documentation requirements are completed. |
| Electrical Responsible Person | Confirm electrical safety controls and work authorization requirements. |
5. Execution Procedure
| Step | Room/Tag | Action | Verification | Sign-1 | Sign-2 |
|---|---|---|---|---|---|
| 1 | UPS-ROOM / UPS-A | Conduct pre-job review with all participating personnel. | Roles, communication path, escalation path and rollback reviewed. | ||
| 2 | UPS-A | Verify UPS system operating state, load level and redundancy status. | System stable with acceptable redundancy margin before work begins. | ||
| 3 | BMS / EPMS | Verify monitoring visibility and active alarm monitoring. | UPS alarms, events and environmental monitoring operational. | ||
| 4 | UPS-A / MODULE-03 | Identify the correct UPS module scheduled for replacement. | Asset tag and serial reference confirmed against approved work scope. | ||
| 5 | UPS-A | Confirm UPS load can tolerate temporary redundancy reduction if applicable. | Operations Lead authorizes progression to replacement phase. | ||
| 6 | UPS-A / MODULE-03 | Place affected module into approved maintenance or isolation state according to manufacturer procedure. | No unexpected alarm, load transfer or instability observed. | ||
| 7 | UPS-A / MODULE-03 | Remove the designated UPS module using approved handling procedure. | Module removed without visible damage or operational impact. | ||
| 8 | UPS-A / MODULE-03 | Install replacement module and confirm correct seating and connection. | Module physically secured and installation verified. | ||
| 9 | UPS-A | Return module to approved operational state according to manufacturer procedure. | Module recognized correctly and synchronization normal. | ||
| 10 | BMS / EPMS | Review alarms, events and UPS operating status after replacement. | No unresolved alarm or abnormal operating condition present. | ||
| 11 | UPS-A | Confirm UPS redundancy restored to approved operational level. | Operations Lead confirms stable post-maintenance condition. | ||
| 12 | CMMS / CHANGE RECORD | Update maintenance records, module serial references and change documentation. | Documentation completed and maintenance activity formally recorded. |
6. Risk Considerations
UPS module replacement is a planned activity involving temporary operational exposure. The level of risk depends on system design, redundancy configuration, current loading conditions and the ability of the remaining infrastructure to tolerate component loss.
- Loss of redundancy may increase operational exposure during maintenance.
- Incorrect module identification can affect the wrong UPS path.
- Unexpected alarms or synchronization issues may occur during isolation or reintegration.
- Human error during maintenance activities can affect protected loads.
- Improper handling may damage replacement modules or connectors.
- All electrical safety controls must follow approved site and legal requirements.
Operational rule: Stop the activity immediately if system behavior differs from the expected operating state or if redundancy becomes uncertain.
7. Rollback Procedure
If the replacement module cannot be returned to stable operation, stop progression and evaluate rollback options before continuing.
- Reinstall original module if technically safe and approved
- Return UPS to previously verified operating state
- Escalate unresolved alarms immediately
- Delay additional maintenance activity until stability is confirmed
- Update stakeholders regarding operational risk or reduced redundancy
Rollback decisions should be made by the responsible operational and technical authority according to site governance requirements.
8. Post Verification
- ☐ Replacement module operating normally
- ☐ UPS redundancy restored to approved level
- ☐ No unresolved alarm or event condition remains
- ☐ Monitoring and alarm visibility confirmed
- ☐ CMMS and maintenance records updated
- ☐ Stakeholders informed of completion status
- ☐ Work area left clean and secure
9. Operational Notes
Planned UPS maintenance should be treated as a controlled operational event, not only a technical activity. Communication, verification, escalation readiness and rollback planning are part of the procedure, not separate administrative tasks.
Real UPS maintenance procedures must always follow manufacturer instructions, electrical safety regulations, site operational governance and the approved maintenance strategy for the facility.
Modular UPS systems are commonly designed to support maintainability and redundancy, but maintenance activities can still reduce resilience temporarily if not planned and controlled carefully.
Key principles: planned execution, verification, redundancy awareness, rollback readiness, controlled communication and formal signoff.
Template provided by © Tom Jensen | tomjensen.no