Automatic Transfer Switch Installation AHA (Activity Hazard Analysis / Job Hazard Analysis)
Updated 2026-06-23
An Automatic Transfer Switch Installation AHA (Activity Hazard Analysis / Job Hazard Analysis) plans the installation of automatic transfer switches (ATS) — the switches that automatically transfer the electrical load between two sources (typically utility and generator) when normal power fails and returns. The ATS is a switching interface between two sources, which gives it a distinctive hazard: it has two live sources feeding it, and it can operate on its own.
Why automatic transfer switch needs its own AHA
An ATS sits between two power sources — the normal source (utility) on one side and the alternate source (generator) on the other — and transfers the load from one to the other. That gives it distinctive hazards. First, it connects to multiple sources, so its enclosure has two sources feeding it, both potentially energized — working inside an ATS means more than one live source is present, and the generator side becomes energized when the generator starts. Second, it operates automatically: the ATS transfers on its own when it senses a power change, so it can switch and energize the load from the alternate source without warning. And its transfer function must never connect the two sources together (break-before-make), a safety-critical interlock. So the plan centers on the multiple live sources, the automatic operation, and the source-isolation interlock.
Three concerns carry the plan: the ATS install, the multiple live sources and automatic operation, and the source-isolation interlock.
Breaking automatic transfer switch into steps
- Confirm the ATS, its two sources, and the load from the design
- Install the ATS and connect the normal source, alternate source, and load
- Recognize both sources can feed the ATS enclosure
- Disable automatic operation and isolate both sources before working inside
- Verify the source-isolation interlock (break-before-make)
- Test and commission the transfer operation
The hazards step by step
The multiple live sources in one enclosure
The ATS's distinctive hazard is that two sources feed it, so its enclosure can have multiple live sources present. The normal source (utility) connects to one side and the alternate source (generator) to the other, with the load in between — so inside an ATS, there are conductors and terminals energized from different sources. Working inside an ATS therefore means recognizing and isolating more than one source: de-energizing only the utility side leaves the generator side able to energize (when the generator starts), and vice versa. So both sources are isolated before working inside — the utility source de-energized and locked out, and the generator prevented from starting and its side isolated — because a worker who addressed only one source could be shocked by the other. So the multiple-source nature means the isolation discipline must account for every source feeding the ATS, not just one.
The automatic operation
The ATS operates automatically — it transfers the load between sources on its own when it senses a power change (loss or return of normal power) — so it can switch and energize without warning. During work, if the automatic operation isn't disabled, the ATS could transfer (a real power change or a signal), operating the switch and energizing the load from the alternate source, and starting the generator. So before work, the automatic operation is disabled, so the ATS can't transfer on its own while someone is working on it or the connected system. So the ATS's self-operating nature is a hazard addressed by disabling the automatic transfer during work — like disabling a generator's auto-start.
The source-isolation interlock
The ATS's core function includes never connecting the two sources together — it transfers the load from one to the other with a break-before-make action (disconnecting from one source before connecting to the other), so the utility and generator are never paralleled (which would be dangerous — connecting an out-of-sync generator to the utility, or backfeeding the utility). So this source-isolation interlock is safety-critical and is verified: the ATS must reliably break from one source before making to the other, keeping the sources isolated from each other. So the interlock's integrity — never paralleling the sources — is a key part of the ATS's safe function, confirmed at commissioning.
The install, code, and source fundamentals
The ATS install and connections, the codes (transfer equipment, emergency power NFPA 110), the source-side discipline (backfeed, generator auto-start — from the power-source family), and the general electrical fundamentals apply.
A simple Automatic Transfer Switch Installation AHA structure
| Step | Hazard | Control | Standard |
|---|---|---|---|
| Work inside ATS | Multiple live sources | Isolate BOTH sources (utility + generator) before work | OSHA 1910.147 |
| Generator side | Energizes when generator starts | Prevent generator start; isolate alternate source | NFPA 70E |
| Automatic operation | ATS transfers on its own | Disable automatic operation during work | OSHA 1910.147 |
| Source interlock | Paralleling utility + generator | Verify break-before-make; sources never paralleled | NFPA 110 |
| Commission | Transfer hazards | Test transfer operation safely | NFPA 110 |
Where the two sources and automatic operation define the work
An ATS is defined by interfacing two sources and operating automatically — so its hazards are the multiple live sources in its enclosure (both must be isolated for work) and its self-operating transfer (which must be disabled during work), plus the safety-critical interlock that keeps the sources from being paralleled. So the plan centers on isolating every source feeding the ATS, disabling the automatic operation, and verifying the source-isolation interlock. The dual-source, self-operating nature is what sets the ATS apart.
From the field: what actually goes wrong
The ATS incident is contact with a source the worker didn't isolate — working inside an ATS after de-energizing only one source (say the utility) and being shocked by the other (the generator side energizing when the generator started), because both live sources weren't isolated. Or the ATS transferring automatically during work (auto-operation not disabled), energizing the load or starting the generator unexpectedly. And a failed interlock paralleling the sources is a serious fault. The lessons: isolate every source feeding the ATS (both utility and generator) before working inside — not just one; disable the automatic operation during work; and verify the break-before-make interlock so the sources are never paralleled.
The bottom line
An Automatic Transfer Switch Installation AHA covers the switch between two power sources — so its enclosure has multiple live sources (isolate both the utility and generator sides before working inside), it operates automatically (disable the auto-operation during work), and its interlock must keep the sources from ever being paralleled (verify break-before-make). The dual-source, self-operating nature is what defines ATS work — one isolated source is not enough.
Frequently asked questions
Why does an ATS have multiple live sources?
Because its function is to switch the load between two power sources, so both sources connect to it. An automatic transfer switch sits between a normal source (typically the utility) and an alternate source (typically a standby generator), with the load connected to its output — so the utility connects to one side, the generator to the other, and the load in the middle. That means the ATS enclosure has conductors and terminals fed from two different sources, either of which can be energized: the utility side is normally energized, and the generator side becomes energized when the generator runs. So working inside an ATS means multiple sources are present — and de-energizing one (say, opening the utility feed) leaves the other (the generator side) able to energize. So the hazard is that a worker who isolates only one source can be shocked by the other. This is why both sources must be isolated before working inside an ATS — it's fed from two sources, unlike most equipment fed from one, so the isolation must account for all of them.
Why is the automatic operation a hazard during work?
Because the ATS transfers automatically — it operates on its own when it detects a power change — so it can switch and energize without warning while someone is working on it. The ATS constantly monitors the normal source and, when it senses a loss (or the return) of power, automatically transfers the load between sources: disconnecting from one and connecting to the other, and signaling the generator to start when transferring to it. So if the automatic operation isn't disabled during work, a power change or control signal could cause the ATS to transfer while a worker is inside or on the connected system — operating the switch mechanism, energizing the load from the alternate source, and starting the generator, all unexpectedly. This is a serious hazard (mechanical operation, unexpected energization). So before working on an ATS or its system, the automatic operation is disabled, so the switch can't transfer on its own. This is analogous to disabling a generator's auto-start — the self-operating capability is made safe by disabling it during work.
What is the source-isolation interlock, and why is it critical?
The source-isolation interlock is the mechanism ensuring the ATS never connects its two sources together — it transfers the load with a "break-before-make" action, disconnecting from one source before connecting to the other, so the utility and generator are never paralleled (electrically joined) through the ATS. It's critical because connecting the two sources together would be dangerous: joining an out-of-synchronization generator to the utility can cause a violent fault (the generator and grid fighting), and it could backfeed the utility (energizing utility lines that should be dead, endangering utility workers). So a standard ATS is designed to keep the sources isolated from each other — it's a transfer switch, not a paralleling device — with the break-before-make action ensuring only one source is ever connected to the load at a time. So this interlock is a safety-critical part of the ATS's function, and it's verified at commissioning to confirm the ATS reliably breaks from one source before making to the other, keeping the two sources isolated. (Paralleling sources is done only with specific paralleling switchgear designed and synchronized for it, not a standard ATS.)
How does the ATS relate to the generator and backup power system?
The ATS is the switch that makes automatic backup power work — it connects the standby generator to the load automatically when normal power fails. In a typical standby power system: the utility normally feeds the load through the ATS; when the utility fails, the ATS senses the loss, signals the generator to start, and (once the generator is running and stable) transfers the load to the generator; when utility power returns, the ATS transfers the load back and signals the generator to stop. So the ATS is the automatic control point of the backup system, coordinating with the generator (covered in the generator plans) to provide seamless backup power. This is why the ATS's hazards connect to the generator's — the generator side of the ATS energizes when the generator runs, and the ATS starts the generator. So the ATS, the generator, and their interconnection form the backup power system, and the ATS is the switching element that makes the transfer automatic, with the multiple-source and auto-operation hazards that come from that role.
Related AHAs and JHAs
- Facility Electrical Power Generating and Storing Equipment AHA — the power-source family fundamentals
- Diesel Engine-Driven Generators AHA — the generator source the ATS transfers to
- Battery Equipment AHA — the storage source in backup systems
- Generator Synchronization Panel Installation JHA — the generator-control fundamentals
Written by Mustafa Tok, CSP, ASP, CHST — OSHA Authorized Outreach Trainer with 14+ years of international construction safety experience across federal, heavy civil, and industrial projects.