Arc Flash Risk Assessment: NFPA 70E Structure, Incident Energy Analysis, and the Electrical Safety Program

Published: June 2026 Technical Level: Advanced Category: Safety Standards

Abstract

NFPA 70E, Standard for Electrical Safety in the Workplace, requires a documented arc flash risk assessment before any employee performs work on or near energized electrical equipment. The standard structures this requirement within a two-part risk assessment framework (shock risk and arc flash risk) that collectively determine the approach boundaries, personal protective equipment requirements, and work practices governing every energized electrical task. This paper explains how arc flash risk assessment is conducted under NFPA 70E, the distinction between the incident energy analysis method (based on IEEE 1584-2018 short-circuit and protective device modeling) and the arc flash PPE category method (table-based, with explicit applicability limits), and how the results of the assessment feed equipment labeling, PPE selection, and the broader Electrical Safety Program that NFPA 70E requires employers to maintain. The paper addresses the conceptual basis of the hazard-versus-risk distinction that NFPA 70E embeds in its risk assessment framework, the limitations of simplified approaches, and the engineering judgment that remains central even when quantitative analysis methods are applied.

1. Introduction

NFPA 70E is a consensus standard developed by the National Fire Protection Association for workplace electrical safety. Unlike the National Electrical Code (NEC), which governs the installation of electrical systems, NFPA 70E governs the behavior of workers interacting with those systems: the procedures, equipment, training, and documentation that employers must provide to protect employees from electrical hazards during operation, maintenance, and construction activities. OSHA does not adopt NFPA 70E directly into federal regulation, but it recognizes NFPA 70E as a broadly accepted industry practice under the General Duty Clause (Section 5(a)(1) of the OSH Act), and OSHA enforcement actions regularly cite NFPA 70E noncompliance as evidence of a hazardous condition. For practical purposes, NFPA 70E compliance is the minimum standard of care for employer electrical safety programs in the United States.

The current edition of NFPA 70E (2021, with the 2024 revision cycle underway as of this writing) defines two primary electrical hazards, shock and arc flash, and establishes a risk assessment process for each. Arc flash is the thermal and pressure hazard produced when an electrical arc develops between energized conductors or between an energized conductor and ground. The arc plasma temperature reaches 20,000 K to 35,000 K, and the radiant heat flux at a worker's position within one to three feet of the arc source can cause second- and third-degree burns within milliseconds. The severity of the injury depends on the energy released by the arc (measured in calories per square centimeter at the worker's position) and the arc-rated protection the worker is wearing.

Arc flash risk assessment is one element of the broader Electrical Safety Program that NFPA 70E Article 110 requires employers to establish and maintain. It is not a one-time study that can be filed and forgotten: it is a living engineering document that must reflect the current system configuration, must be updated when the configuration changes, and must be actively used, through labeling, training, and documented work practices, to reduce exposure to electrical hazards. Facilities that conduct an arc flash study but do not integrate the results into their Electrical Safety Program have satisfied one administrative requirement while failing the underlying safety obligation.

2. The NFPA 70E Risk Assessment Framework

2.1 Shock Risk Assessment and Arc Flash Risk Assessment

NFPA 70E Section 130.5 requires that both a shock risk assessment and an arc flash risk assessment be performed before any work on or near energized electrical equipment. These are distinct assessments with distinct outputs, and addressing only one while neglecting the other is a common gap in field practice.

The shock risk assessment determines the approach boundaries (limited, restricted, and prohibited) that establish the distances within which unqualified and qualified workers may approach energized conductors, and identifies the shock-rated PPE (rubber insulating gloves, sleeves, and tools) appropriate for the voltage level. The approach boundaries are defined in NFPA 70E Table 130.4(E)(a) as a function of system voltage; they are not calculated per installation but applied from the standard's tables based on the nominal voltage of the equipment being worked.

The arc flash risk assessment determines the incident energy at the worker's position, establishes the arc flash boundary within which arc-rated PPE is required, and identifies the minimum arc rating of the PPE ensemble needed to limit the probability of a second-degree burn to an acceptable level. The arc flash boundary is the distance from the prospective arc source at which the incident energy equals 1.2 cal/cm², the threshold for onset of second-degree burn on unprotected skin. Within this boundary, arc-rated clothing and face protection rated at or above the calculated incident energy are required for any energized work. Unlike the shock approach boundaries, the arc flash boundary is not tabulated generically; it is installation-specific, depending on the available fault current, the protective device clearing time, and the equipment geometry.

2.2 Hazard vs. Risk: The Conceptual Distinction NFPA 70E Embeds

NFPA 70E's 2018 and subsequent editions explicitly incorporate risk terminology from ANSI/AIHA Z10 and ISO 31000 into the risk assessment requirements. The distinction between hazard and risk is not semantic; it has direct engineering consequences. A hazard is the potential source of harm: the presence of an electrical arc source with available fault energy. Risk is the combination of the hazard with the likelihood of an arc flash occurring given the specific task being performed and the condition of the equipment.

A 480 V motor control center with 25 kA available fault current is a hazard. The risk associated with reading a meter on the front of that MCC with the doors closed and the equipment in normal operating condition is low, because the likelihood of an arcing fault occurring during a visual observation task (with no intrusive contact, no covers removed, and properly maintained equipment) is very low. The risk associated with racking a draw-out circuit breaker in that same MCC is substantially higher, because racking involves mechanical interaction with the equipment, creates opportunities for tool contact with energized parts, and has historically been associated with arcing fault incidents. NFPA 70E Section 130.2 acknowledges this distinction by specifying that the need for arc-rated PPE is determined not solely by the presence of a calculated incident energy, but by the combination of incident energy and task-based likelihood.

This is the nuance that oversimplifications such as "if there is any chance of an arc flash, always wear maximum PPE" obscure. Maximum PPE is not appropriate for every energized task, and requiring it for low-risk tasks creates a compliance culture in which PPE requirements are viewed as excessive and are consequently ignored for high-risk tasks as well. NFPA 70E's risk-based framework requires engineering judgment to identify, for each task, the realistic likelihood of an arcing event and to select the PPE accordingly, accepting that for some tasks on properly maintained equipment, the likelihood is low enough that standard arc-rated daily wear rated for the calculated incident energy is appropriate, while for other tasks, the highest available protection is justified.

3. Incident Energy Analysis and the Category Method

3.1 The Two NFPA 70E Methods

NFPA 70E provides two methods for determining arc flash hazards and selecting PPE. The incident energy analysis method produces a site-specific, equipment-specific calculated incident energy value, in cal/cm² at a specified working distance, derived from an engineering study of the system. The arc flash PPE category method uses NFPA 70E Table 130.7(C)(15) to assign PPE by equipment type and task, without requiring an engineering calculation. The two methods are alternatives, not complements: an employer selects one method and applies it consistently; the results of one method cannot be mixed with the inputs of the other.

3.2 Incident Energy Analysis Method

The incident energy analysis method begins with a short-circuit study that determines the available three-phase bolted fault current at each piece of equipment in the system. This requires a current electrical one-line diagram showing source impedances, transformer ratings, cable sizes and lengths, and motor contribution assumptions. The accuracy of the incident energy results is directly limited by the accuracy of the one-line diagram: a diagram that does not reflect the as-built system (because of undocumented field modifications, equipment replacements, or utility fault current changes) will produce incident energy values that do not reflect the actual hazard.

With the available fault current established, the arcing current and incident energy are calculated using IEEE 1584-2018, which provides regression-based models developed from more than 1,800 arc flash tests at voltage levels from 208 V to 15 kV. The incident energy at the working distance is a function of the arcing current, the arc duration, and the equipment geometry: electrode configuration, enclosure dimensions, and working distance:

IEEE 1584-2018 Equations 3 to 6 give the incident energy in J/cm² as

E=12.55250 T⋅10(k1+k2lg⁡G+k3Iarck4Ibf7+⋯+k10Ibf+k11lg⁡Ibf+k12lg⁡D+k13lg⁡Iarc+lg⁡1CF)E = \frac{12.552}{50}\, T \cdot 10^{\left(k_1 + k_2 \lg G + \frac{k_3 I_{arc}}{k_4 I_{bf}^7 + \dots + k_{10} I_{bf}} + k_{11} \lg I_{bf} + k_{12} \lg D + k_{13} \lg I_{arc} + \lg \frac{1}{CF}\right)}

Where: EE is the incident energy in J/cm² (1 cal/cm² = 4.184 J/cm²).

TT is the arc duration in milliseconds, determined by the upstream protective device's time-current characteristic at the arcing current.

IarcI_{arc} is the arcing current in kA from Equation 1, evaluated at 600 V, 2700 V and 14,300 V and interpolated to the system voltage; a reduced arcing current, Iarc(1−0.5 VarCf)I_{arc}(1 - 0.5\,VarC_f) with VarCfVarC_f from Equation 2, is evaluated as well and the higher of the two incident energies is reported.

IbfI_{bf} is the three-phase bolted fault current in kA.

GG is the gap between the electrodes in mm (Table 8 typical values: 25 mm for a 480 V MCC or panelboard, 32 mm for low-voltage switchgear, 104 mm for 5 kV switchgear, 152 mm for 15 kV switchgear).

DD is the working distance in mm (Table 10 typical values: 457.2 mm for low-voltage MCCs and panelboards, 609.6 mm for low-voltage switchgear, 914.4 mm for medium-voltage switchgear).

CFCF is the enclosure size correction factor of clause 4.8 (Tables 6 and 7, Equations 11 to 15); CF = 1 for open-air configurations.

k1k_1 to k13k_{13} are the coefficients of Tables 3 to 5 for the electrode configuration (VCB, VCBB, HCB, VOA or HOA) and the voltage level.

The arc duration tt is the dominant variable in most practical arc flash calculations, because it is determined by the upstream protective device clearing time, the one variable the design engineer can directly control through protection system modifications. A relay with a 300 ms time delay clears an arc flash event in 300 ms; one operating instantaneously clears it in 50 ms; the incident energy scales proportionally, so the 300 ms case produces six times the incident energy of the 50 ms case. This proportionality is why protective device settings are the primary engineering lever for arc flash hazard reduction.

The arc flash boundary, the distance at which the incident energy equals 1.2 cal/cm² (5.0 J/cm²), is found by solving the same relationship for the distance (Equations 7 to 10), with the same coefficients and the same correction factor; it is reported for the governing arcing-current case.

The sensitivity of incident energy to arc duration is illustrated in Figure 1, which plots incident energy against protective device clearing time at a fixed arcing current and working distance.

Incident energy as a function of protective device clearing time. The horizontal axis is clearing time in cycles and the vertical axis is incident energy in cal/cm². Because incident energy is proportional to arc duration.

Figure 1. Incident energy as a function of protective device clearing time. The horizontal axis is clearing time in cycles and the vertical axis is incident energy in cal/cm². Because incident energy is proportional to arc duration, the relationship is linear; the engineer should observe that the single most effective risk-reduction measure is reducing the upstream device's clearing time (through an arc-energy-reducing maintenance setting or a faster device), because it lowers the incident energy, and therefore the arc rating the PPE must carry, in direct proportion.

3.3 Arc Flash PPE Category Method

The PPE category method uses NFPA 70E Table 130.7(C)(15)(a) (AC systems) and (b) (DC systems) to assign PPE by equipment type and task, each table entry valid only within its stated parameters: a maximum available fault current, a maximum fault clearing time and a minimum working distance. When a parameter is exceeded the method cannot be used and an incident energy analysis is required. The method is conservative within its limits, because each entry was developed from the upper end of its parameter range, and it is appropriate where the engineering resources for a full incident energy study are not available and the system is well within the table's limits.

The two methods are not interchangeable and are never mixed on one piece of equipment: 130.5(G) Informational Note No. 1 states that a PPE category is not determined from a calculated incident energy. Where an incident energy analysis has been performed, the label and the PPE selection state the incident energy, the working distance and the minimum arc rating, as ZinaVee does. For incident energy above 40 cal/cm², arc-rated PPE at that rating exists but the arc blast is not addressed by it; engineering controls (arc-resistant equipment, zone-selective interlocking, maintenance-mode instantaneous tripping) that reduce the energy, or de-energized work, come first.

4. Electrical Safety Program and Documentation Integration

4.1 The Electrical Safety Program Requirement

NFPA 70E Article 110 requires employers to establish, document, implement, and audit an Electrical Safety Program (ESP). The arc flash risk assessment (the study, the labels, and the PPE requirements) is one deliverable within the ESP, not the ESP itself. The ESP must also include documented energized work procedures (including the justification for performing energized work when de-energized work is feasible), employee training records demonstrating that qualified workers understand NFPA 70E requirements and can identify electrical hazards, an energized electrical work permit system for tasks where energized work is justified, a program for maintaining protective equipment (testing of rubber goods, inspection of arc-rated clothing), and a periodic audit process that verifies that the ESP is being followed in the field.

The connection between the arc flash study and the ESP is the equipment label. NFPA 70E Section 130.5(H) requires that electrical equipment likely to require examination, adjustment, servicing, or maintenance while energized be marked with a label showing the nominal system voltage, the incident energy in cal/cm² at the working distance (or the PPE category if the category method is used), the arc flash boundary, the minimum arc rating of required clothing, and the date of the assessment. The label is the point at which the engineering study becomes a field-usable work practice: it tells the qualified worker, at the equipment, what PPE to wear and where the arc flash boundary is. Labels that do not include all required elements, or that reference an assessment date more than five years in the past, are non-compliant under NFPA 70E-2021.

4.2 Updating and Maintaining Assessments

NFPA 70E Section 130.5 requires that the arc flash risk assessment be reviewed and updated at intervals not exceeding five years and whenever a major modification or renovation of the electrical system occurs, whenever the utility available fault current changes by more than five percent, or whenever the protective device settings are changed. The five-year maximum is not a suggestion; it is a compliance requirement, and facilities whose arc flash labels show assessment dates older than five years are in technical violation of NFPA 70E regardless of whether the system has changed.

The more challenging compliance issue is the update trigger for system changes. Many facilities do not have a formal change management process that flags arc flash assessment validity when a protective device is replaced, a cable run is modified, or the utility upgrades its substation. A motor control center that was correctly labeled at 12 cal/cm² under one system configuration may be under-labeled at 24 cal/cm² after the addition of an upstream generator that increases the available fault current. Without a process that connects arc flash assessment validity to the change management system, the labels drift out of accuracy silently.

Best practice is to treat the arc flash study as a living document: not a report to be filed after completion but a database of system parameters and calculated results that is updated in parallel with the one-line diagram whenever the system changes. Some facilities maintain this as a dedicated power system model (ETAP, SKM PowerTools, EasyPower) that is updated by the facility electrical engineer as part of the design change approval process. Smaller facilities without in-house engineering resources should include arc flash assessment update in the scope of any electrical design contractor engaged for system modifications, as a contractual requirement rather than an optional add-on.

5. Practical Engineering and Risk-Based Nuance

The engineering judgment that NFPA 70E calls for in task-based risk assessment is one of the areas most frequently oversimplified in corporate safety programs. A blanket policy of "40 cal/cm² PPE required for all energized electrical work" applied regardless of the task, the equipment condition, and the calculated incident energy is not a conservative interpretation of NFPA 70E; it is a departure from NFPA 70E's risk-based framework that, paradoxically, can produce worse safety outcomes by normalizing PPE requirements that workers perceive as disproportionate to the actual hazard.

NFPA 70E Section 130.2(A) specifies that for tasks performed on electrical equipment that is in normal operating condition, has its covers in place, and does not involve any direct contact with energized parts (meter reading, visual inspection, operation of properly maintained circuit breakers and switches at their normal operating positions), the risk of an arcing fault is low and the standard does not require arc-rated PPE. This exception applies only when the conditions are met: the equipment must be in normal operating condition (no known defects, proper maintenance history), the task must not involve exposed energized conductors, and the operation must be within the normal design function of the equipment.

For intrusive tasks (removing enclosure covers, racking draw-out circuit breakers, connecting or disconnecting conductors at energized terminals, or working within the restricted approach boundary on bare conductors), the risk is materially higher, and arc-rated PPE at the appropriate incident energy level is required. The distinction is not about the presence of a calculated incident energy; it is about the likelihood that the specific task, performed on the specific equipment in its current condition, will result in an arcing event. That likelihood assessment is an engineering judgment that requires knowledge of the equipment, the task, the maintenance history, and the physical conditions under which the work will be performed, knowledge that a generic checklist or table cannot substitute for.

6. Conclusion

The most consequential point is that arc flash risk assessment is a living engineering process, not a deliverable that ends with the printing of labels: the incident-energy calculation is only valid while the system data and protective-device settings it assumed remain true, and a modification that changes a clearing time silently invalidates every label downstream of it. The study is accurate on the day it is sealed and decays from that day forward unless it is maintained.

The most common implementation failure is the disconnect between an accurate study and the field practice it is meant to govern: labels that are current but treated as wallpaper, one PPE ensemble applied interchangeably across tasks of very different risk, and settings drifted from the values the study assumed. The hazard analysis can be flawless and the safety outcome still poor if the operational layer does not carry it into how qualified workers actually approach each task.

The engineer and safety professional should next institutionalize the distinction between hazard and risk that NFPA 70E's framework demands (the available arc energy versus the likelihood of an arcing event for a specific task), because the next problem is not computing incident energy more precisely but ensuring that the task-based risk judgments, the label currency, and the setting integrity are sustained as the system and its workforce change.

Related Work

The analysis in this paper connects to several companion studies in this library. Readers concerned with the upstream and downstream engineering will find Arc Flash Risk Assessment develops a closely related aspect of the same problem, while Arc Flash Calculation Software extends the treatment into an adjacent domain. For the broader methodological context, Protection Coordination Study provides complementary depth.

References

[1] NFPA 70E, Standard for Electrical Safety in the Workplace, 2021 edition. National Fire Protection Association, 2021.

[2] NFPA 70E, Standard for Electrical Safety in the Workplace, 2024 edition (revision cycle). National Fire Protection Association, 2024.

[3] IEEE Standard 1584-2018, Guide for Performing Arc-Flash Hazard Calculations. IEEE, 2018.

[4] OSHA, "Controlling Electrical Hazards," OSHA Publication 3075, U.S. Department of Labor, 2002 (revised 2016).

[5] OSHA 29 CFR 1910.333, Selection and Use of Work Practices, Safeguards for Personnel Protection. U.S. Department of Labor.

[6] OSHA 29 CFR 1910.269, Electric Power Generation, Transmission, and Distribution. U.S. Department of Labor.

[7] D. R. Doughty, P. E. Murray, and A. M. Bingham, "Predicting Incident Energy to Better Manage the Electric Arc Hazard on 600V Power Distribution Systems," IEEE Transactions on Industry Applications, vol. 36, no. 1, pp. 257–269, 2000.

[8] P. E. Sutherland, "NFPA 70E-15 Shock and Arc Flash Risk Assessment Best Practices," IEEE Industry Applications Conference Proceedings, 2016.

[9] D. M. Daly and A. D. Stokes, "Review of the Development of Incident Energy Equations," IEEE Transactions on Industry Applications, vol. 47, no. 2, pp. 593–603, 2011.

[10] National Fire Protection Association, Arc Flash and the NFPA 70E Standard: Electrical Safety in the Workplace, NFPA white paper, nfpa.org, 2023.

[11] J. C. Das, Arc Flash Hazard Analysis and Mitigation. IEEE Press / Wiley, 2012.