Arc Flash Risk Assessment: NFPA 70E Structure, Incident Energy Analysis, and the Electrical Safety Program

Published: June 2026 Technical Level: Advanced Category: Safety Standards

Abstract

NFPA 70E, Standard for Electrical Safety in the Workplace, requires a documented arc flash risk assessment before any employee performs work on or near energized electrical equipment. The standard structures this requirement within a two-part risk assessment framework — shock risk and arc flash risk — that collectively determine the approach boundaries, personal protective equipment requirements, and work practices governing every energized electrical task. This paper explains how arc flash risk assessment is conducted under NFPA 70E, the distinction between the incident energy analysis method (based on IEEE 1584-2018 short-circuit and protective device modeling) and the arc flash PPE category method (table-based, with explicit applicability limits), and how the results of the assessment feed equipment labeling, PPE selection, and the broader Electrical Safety Program that NFPA 70E requires employers to maintain. The paper addresses the conceptual basis of the hazard-versus-risk distinction that NFPA 70E embeds in its risk assessment framework, the limitations of simplified approaches, and the engineering judgment that remains central even when quantitative analysis methods are applied.

1. Introduction

NFPA 70E is a consensus standard developed by the National Fire Protection Association for workplace electrical safety. Unlike the National Electrical Code (NEC), which governs the installation of electrical systems, NFPA 70E governs the behavior of workers interacting with those systems — the procedures, equipment, training, and documentation that employers must provide to protect employees from electrical hazards during operation, maintenance, and construction activities. OSHA does not adopt NFPA 70E directly into federal regulation, but it recognizes NFPA 70E as a broadly accepted industry practice under the General Duty Clause (Section 5(a)(1) of the OSH Act), and OSHA enforcement actions regularly cite NFPA 70E noncompliance as evidence of a hazardous condition. For practical purposes, NFPA 70E compliance is the minimum standard of care for employer electrical safety programs in the United States.

The current edition of NFPA 70E (2021, with the 2024 revision cycle underway as of this writing) defines two primary electrical hazards — shock and arc flash — and establishes a risk assessment process for each. Arc flash is the thermal and pressure hazard produced when an electrical arc develops between energized conductors or between an energized conductor and ground. The arc plasma temperature reaches 20,000 K to 35,000 K, and the radiant heat flux at a worker's position within one to three feet of the arc source can cause second- and third-degree burns within milliseconds. The severity of the injury depends on the energy released by the arc (measured in calories per square centimeter at the worker's position) and the arc-rated protection the worker is wearing.

Arc flash risk assessment is one element of the broader Electrical Safety Program that NFPA 70E Article 110 requires employers to establish and maintain. It is not a one-time study that can be filed and forgotten: it is a living engineering document that must reflect the current system configuration, must be updated when the configuration changes, and must be actively used — through labeling, training, and documented work practices — to reduce exposure to electrical hazards. Facilities that conduct an arc flash study but do not integrate the results into their Electrical Safety Program have satisfied one administrative requirement while failing the underlying safety obligation.

2. The NFPA 70E Risk Assessment Framework

2.1 Shock Risk Assessment and Arc Flash Risk Assessment

NFPA 70E Section 130.5 requires that both a shock risk assessment and an arc flash risk assessment be performed before any work on or near energized electrical equipment. These are distinct assessments with distinct outputs, and addressing only one while neglecting the other is a common gap in field practice.

The shock risk assessment determines the approach boundaries — limited, restricted, and prohibited — that establish the distances within which unqualified and qualified workers may approach energized conductors, and identifies the shock-rated PPE (rubber insulating gloves, sleeves, and tools) appropriate for the voltage level. The approach boundaries are defined in NFPA 70E Table 130.4(E)(a) as a function of system voltage; they are not calculated per installation but applied from the standard's tables based on the nominal voltage of the equipment being worked.

The arc flash risk assessment determines the incident energy at the worker's position, establishes the arc flash boundary within which arc-rated PPE is required, and identifies the minimum arc rating of the PPE ensemble needed to limit the probability of a second-degree burn to an acceptable level. The arc flash boundary is the distance from the prospective arc source at which the incident energy equals 1.2 cal/cm² — the threshold for onset of second-degree burn on unprotected skin. Within this boundary, arc-rated clothing and face protection rated at or above the calculated incident energy are required for any energized work. Unlike the shock approach boundaries, the arc flash boundary is not tabulated generically — it is installation-specific, depending on the available fault current, the protective device clearing time, and the equipment geometry.

2.2 Hazard vs. Risk: The Conceptual Distinction NFPA 70E Embeds

NFPA 70E's 2018 and subsequent editions explicitly incorporate risk terminology from ANSI/AIHA Z10 and ISO 31000 into the risk assessment requirements. The distinction between hazard and risk is not semantic; it has direct engineering consequences. A hazard is the potential source of harm — the presence of an electrical arc source with available fault energy. Risk is the combination of the hazard with the likelihood of an arc flash occurring given the specific task being performed and the condition of the equipment.

A 480 V motor control center with 25 kA available fault current is a hazard. The risk associated with reading a meter on the front of that MCC with the doors closed and the equipment in normal operating condition is low, because the likelihood of an arcing fault occurring during a visual observation task — with no intrusive contact, no covers removed, and properly maintained equipment — is very low. The risk associated with racking a draw-out circuit breaker in that same MCC is substantially higher, because racking involves mechanical interaction with the equipment, creates opportunities for tool contact with energized parts, and has historically been associated with arcing fault incidents. NFPA 70E Section 130.2 acknowledges this distinction by specifying that the need for arc-rated PPE is determined not solely by the presence of a calculated incident energy, but by the combination of incident energy and task-based likelihood.

This is the nuance that oversimplifications such as "if there is any chance of an arc flash, always wear maximum PPE" obscure. Maximum PPE is not appropriate for every energized task, and requiring it for low-risk tasks creates a compliance culture in which PPE requirements are viewed as excessive and are consequently ignored for high-risk tasks as well. NFPA 70E's risk-based framework requires engineering judgment to identify, for each task, the realistic likelihood of an arcing event and to select the PPE accordingly — accepting that for some tasks on properly maintained equipment, the likelihood is low enough that standard arc-rated daily wear (Category 1 or 2) is appropriate, while for other tasks, the highest available protection is justified.

3. Incident Energy Analysis and the PPE Category Method

3.1 The Two NFPA 70E Methods

NFPA 70E provides two methods for determining arc flash hazards and selecting PPE. The incident energy analysis method produces a site-specific, equipment-specific calculated incident energy value — in cal/cm² at a specified working distance — derived from an engineering study of the system. The arc flash PPE category method uses NFPA 70E tables to assign a PPE category based on equipment type and voltage, without requiring an engineering calculation. The two methods are alternatives, not complements: an employer selects one method and applies it consistently; the results of one method cannot be mixed with the inputs of the other.

3.2 Incident Energy Analysis Method

The incident energy analysis method begins with a short-circuit study that determines the available three-phase bolted fault current at each piece of equipment in the system. This requires a current electrical one-line diagram showing source impedances, transformer ratings, cable sizes and lengths, and motor contribution assumptions. The accuracy of the incident energy results is directly limited by the accuracy of the one-line diagram: a diagram that does not reflect the as-built system — because of undocumented field modifications, equipment replacements, or utility fault current changes — will produce incident energy values that do not reflect the actual hazard.

With the available fault current established, the arcing current and incident energy are calculated using IEEE 1584-2018, which provides regression-based models developed from more than 1,800 arc flash tests at voltage levels from 208 V to 15 kV. The incident energy at the working distance is a function of the arcing current, the arc duration, and the equipment geometry — electrode configuration, enclosure dimensions, and working distance:

E∝IaK1⋅IbfK2⋅exp⁡(K3⋅G)⋅(t0.2)⋅(610xDx)E \propto I_a^{K_1} \cdot I_{bf}^{K_2} \cdot \exp(K_3 \cdot G) \cdot \left(\frac{t}{0.2}\right) \cdot \left(\frac{610^x}{D^x}\right)

Where: EE is the incident energy in J/cm².

IaI_a is the arcing current in kA, calculated from the bolted fault current using the IEEE 1584 arcing current model.

IbfI_{bf} is the three-phase bolted fault current in kA.

GG is the electrode gap in mm, specific to the equipment type (25 mm for 480 V MCC, 102 mm for medium-voltage switchgear).

tt is the arc duration in seconds, determined by the upstream protective device's time-current characteristic at the arcing current.

DD is the working distance in mm (457 mm / 18 in for low-voltage equipment per NFPA 70E Table 130.5(C)(9)).

xx is the distance exponent for the electrode configuration class.

K1,K2,K3K_1, K_2, K_3 are regression coefficients from IEEE 1584-2018 for the specific electrode configuration.

The arc duration tt is the dominant variable in most practical arc flash calculations, because it is determined by the upstream protective device clearing time — the one variable the design engineer can directly control through protection system modifications. A relay with a 300 ms time delay clears an arc flash event in 300 ms; one operating instantaneously clears it in 50 ms; the incident energy scales proportionally, so the 300 ms case produces six times the incident energy of the 50 ms case. This proportionality is why protective device settings are the primary engineering lever for arc flash hazard reduction.

The arc flash boundary — the distance at which the incident energy equals 1.2 cal/cm² (5 J/cm²) — is found by solving the distance relationship in the IEEE 1584 model for the condition E=5E = 5 J/cm²:

DAFB=610⋅(E05.0)1/xD_{AFB} = 610 \cdot \left(\frac{E_0}{5.0}\right)^{1/x}

Where: DAFBD_{AFB} is the arc flash boundary in mm.

E0E_0 is the incident energy at the 610 mm reference distance in J/cm².

The sensitivity of incident energy to arc duration is illustrated in Figure 1, which plots incident energy against protective device clearing time at a fixed arcing current and working distance.

Incident energy as a function of protective device clearing time. The horizontal axis is clearing time in cycles and the vertical axis is incident energy in cal/cm². Because incident energy is proportional to arc duration.

Figure 1. Incident energy as a function of protective device clearing time. The horizontal axis is clearing time in cycles and the vertical axis is incident energy in cal/cm². Because incident energy is proportional to arc duration, the relationship is linear; the engineer should observe that the single most effective risk-reduction measure is reducing the upstream device's clearing time — through an arc-energy-reducing maintenance setting or a faster device — because it lowers the incident energy and therefore the required PPE category in direct proportion.

3.3 Arc Flash PPE Category Method

The PPE category method uses NFPA 70E Table 130.5(C) to assign a minimum PPE category — and therefore a minimum arc rating in cal/cm² — based on the equipment type, voltage, and task. The method is applicable only within defined applicability limits: the system voltage must not exceed 600 V for most table entries, the available fault current must not exceed 42 kA, and the fault clearing time must not exceed 12 cycles (0.2 seconds). When any of these conditions is exceeded, the PPE category method cannot be used and an incident energy analysis is required.

Even within its applicability limits, the PPE category method is a conservative approximation: the table entries are developed from incident energy calculations at the upper end of the applicable fault current and clearing time ranges, which means the PPE category assigned may be higher than an incident energy analysis would require for a specific system with lower fault current or faster clearing. For facilities with engineering resources to conduct a proper incident energy analysis, the analysis method is generally preferred because it produces more accurate results and can identify opportunities for PPE category reduction through engineering controls. The PPE category method is most appropriate for small facilities or systems where the engineering resources for a full incident energy study are not available and the system parameters are well within the table applicability limits.

The PPE category thresholds established by NFPA 70E are: Category 1 (minimum 4 cal/cm² arc rating), Category 2 (8 cal/cm²), Category 3 (25 cal/cm²), and Category 4 (40 cal/cm²). For incident energy exceeding 40 cal/cm², NFPA 70E Section 130.2 specifies that energized work is not recommended; if energized work is required above this threshold, additional engineering controls — arc-resistant equipment, zone-selective interlocking, or maintenance mode instantaneous tripping — must reduce the incident energy to a level where Category 4 PPE provides adequate protection, or the work must be performed with the equipment de-energized.

4. Electrical Safety Program and Documentation Integration

4.1 The Electrical Safety Program Requirement

NFPA 70E Article 110 requires employers to establish, document, implement, and audit an Electrical Safety Program (ESP). The arc flash risk assessment — the study, the labels, and the PPE requirements — is one deliverable within the ESP, not the ESP itself. The ESP must also include documented energized work procedures (including the justification for performing energized work when de-energized work is feasible), employee training records demonstrating that qualified workers understand NFPA 70E requirements and can identify electrical hazards, an energized electrical work permit system for tasks where energized work is justified, a program for maintaining protective equipment (testing of rubber goods, inspection of arc-rated clothing), and a periodic audit process that verifies that the ESP is being followed in the field.

The connection between the arc flash study and the ESP is the equipment label. NFPA 70E Section 130.5(H) requires that electrical equipment likely to require examination, adjustment, servicing, or maintenance while energized be marked with a label showing the nominal system voltage, the incident energy in cal/cm² at the working distance (or the PPE category if the category method is used), the arc flash boundary, the minimum arc rating of required clothing, and the date of the assessment. The label is the point at which the engineering study becomes a field-usable work practice: it tells the qualified worker, at the equipment, what PPE to wear and where the arc flash boundary is. Labels that do not include all required elements, or that reference an assessment date more than five years in the past, are non-compliant under NFPA 70E-2021.

4.2 Updating and Maintaining Assessments

NFPA 70E Section 130.5 requires that the arc flash risk assessment be reviewed and updated at intervals not exceeding five years and whenever a major modification or renovation of the electrical system occurs, whenever the utility available fault current changes by more than five percent, or whenever the protective device settings are changed. The five-year maximum is not a suggestion; it is a compliance requirement, and facilities whose arc flash labels show assessment dates older than five years are in technical violation of NFPA 70E regardless of whether the system has changed.

The more challenging compliance issue is the update trigger for system changes. Many facilities do not have a formal change management process that flags arc flash assessment validity when a protective device is replaced, a cable run is modified, or the utility upgrades its substation. A motor control center that was correctly labeled at 12 cal/cm² under one system configuration may be under-labeled at 24 cal/cm² after the addition of an upstream generator that increases the available fault current. Without a process that connects arc flash assessment validity to the change management system, the labels drift out of accuracy silently.

Best practice is to treat the arc flash study as a living document — not a report to be filed after completion but a database of system parameters and calculated results that is updated in parallel with the one-line diagram whenever the system changes. Some facilities maintain this as a dedicated power system model (ETAP, SKM PowerTools, EasyPower) that is updated by the facility electrical engineer as part of the design change approval process. Smaller facilities without in-house engineering resources should include arc flash assessment update in the scope of any electrical design contractor engaged for system modifications, as a contractual requirement rather than an optional add-on.

5. Practical Engineering and Risk-Based Nuance

The engineering judgment that NFPA 70E calls for in task-based risk assessment is one of the areas most frequently oversimplified in corporate safety programs. A blanket policy of "Category 4 PPE required for all energized electrical work" applied regardless of the task, the equipment condition, and the calculated incident energy is not a conservative interpretation of NFPA 70E — it is a departure from NFPA 70E's risk-based framework that, paradoxically, can produce worse safety outcomes by normalizing PPE requirements that workers perceive as disproportionate to the actual hazard.

NFPA 70E Section 130.2(A) specifies that for tasks performed on electrical equipment that is in normal operating condition, has its covers in place, and does not involve any direct contact with energized parts — meter reading, visual inspection, operation of properly maintained circuit breakers and switches at their normal operating positions — the risk of an arcing fault is low and the standard does not require arc-rated PPE. This exception applies only when the conditions are met: the equipment must be in normal operating condition (no known defects, proper maintenance history), the task must not involve exposed energized conductors, and the operation must be within the normal design function of the equipment.

For intrusive tasks — removing enclosure covers, racking draw-out circuit breakers, connecting or disconnecting conductors at energized terminals, or working within the restricted approach boundary on bare conductors — the risk is materially higher, and arc-rated PPE at the appropriate incident energy level is required. The distinction is not about the presence of a calculated incident energy; it is about the likelihood that the specific task, performed on the specific equipment in its current condition, will result in an arcing event. That likelihood assessment is an engineering judgment that requires knowledge of the equipment, the task, the maintenance history, and the physical conditions under which the work will be performed — knowledge that a generic checklist or table cannot substitute for.

6. Conclusion

The most consequential point is that arc flash risk assessment is a living engineering process, not a deliverable that ends with the printing of labels: the incident-energy calculation is only valid while the system data and protective-device settings it assumed remain true, and a modification that changes a clearing time silently invalidates every label downstream of it. The study is accurate on the day it is sealed and decays from that day forward unless it is maintained.

The most common implementation failure is the disconnect between an accurate study and the field practice it is meant to govern — labels that are current but treated as wallpaper, PPE categories applied interchangeably across tasks of very different risk, and settings drifted from the values the study assumed. The hazard analysis can be flawless and the safety outcome still poor if the operational layer does not carry it into how qualified workers actually approach each task.

The engineer and safety professional should next institutionalize the distinction between hazard and risk that NFPA 70E's framework demands — the available arc energy versus the likelihood of an arcing event for a specific task — because the next problem is not computing incident energy more precisely but ensuring that the task-based risk judgments, the label currency, and the setting integrity are sustained as the system and its workforce change.

Related Work

The analysis in this paper connects to several companion studies in this library. Readers concerned with the upstream and downstream engineering will find Arc Flash Risk Assessment develops a closely related aspect of the same problem, while Arc Flash Calculation Software extends the treatment into an adjacent domain. For the broader methodological context, Protection Coordination Study provides complementary depth.

References

[1] NFPA 70E, Standard for Electrical Safety in the Workplace, 2021 edition. National Fire Protection Association, 2021.

[2] NFPA 70E, Standard for Electrical Safety in the Workplace, 2024 edition (revision cycle). National Fire Protection Association, 2024.

[3] IEEE Standard 1584-2018, Guide for Performing Arc-Flash Hazard Calculations. IEEE, 2018.

[4] OSHA, "Controlling Electrical Hazards," OSHA Publication 3075, U.S. Department of Labor, 2002 (revised 2016).

[5] OSHA 29 CFR 1910.333, Selection and Use of Work Practices — Safeguards for Personnel Protection. U.S. Department of Labor.

[6] OSHA 29 CFR 1910.269, Electric Power Generation, Transmission, and Distribution. U.S. Department of Labor.

[7] D. R. Doughty, P. E. Murray, and A. M. Bingham, "Predicting Incident Energy to Better Manage the Electric Arc Hazard on 600V Power Distribution Systems," IEEE Transactions on Industry Applications, vol. 36, no. 1, pp. 257–269, 2000.

[8] P. E. Sutherland, "NFPA 70E-15 Shock and Arc Flash Risk Assessment Best Practices," IEEE Industry Applications Conference Proceedings, 2016.

[9] D. M. Daly and A. D. Stokes, "Review of the Development of Incident Energy Equations," IEEE Transactions on Industry Applications, vol. 47, no. 2, pp. 593–603, 2011.

[10] National Fire Protection Association, Arc Flash and the NFPA 70E Standard: Electrical Safety in the Workplace, NFPA white paper, nfpa.org, 2023.

[11] J. C. Das, Arc Flash Hazard Analysis and Mitigation. IEEE Press / Wiley, 2012.