Flood emergency response plan for a data centre, factory or building with a basement
A flood emergency response plan (FERP) sets out who watches for flooding, what warning triggers each action, who deploys barriers and how long that takes, how fuel and staff reach the site when roads flood, and how you recover. It matters most where warning time is short, as with flash floods in the Klang Valley and Singapore. FM Global's data centre guidance is widely cited as expecting a written FERP where the 500-year flood would reach the site, and Singapore's 2026 coastal law requires a flood response plan and drills for some coastal premises.
This is practical guidance for owners and facility teams. It is not a template certified by any regulator, insurer or standards body, and it does not replace advice from your engineer, your insurer or the relevant authority.
Why a plan matters more than the barrier
Most flood damage at critical sites comes from the few things that cannot get wet, and from losing access, not from the building failing. In Hurricane Sandy in 2012, floodwater disabled basement fuel pumps at 75 Broad Street in New York, and staff carried diesel up stairs in buckets to keep generators on the 17th floor running (Computerworld). In Houston in 2017, data centres stayed online but access roads flooded, and Equinix had pre-staged food, water and cots for staff (Data Center Knowledge).
Closer to home, more than 100 Celcom network sites were affected in the December 2021 Klang Valley floods, mainly by power cuts, and high water slowed repairs (SoyaCincau). We have found no public report of a data centre building in either country flooding. The exposure is real anyway.
Triggers: what starts the plan
Link each stage of the plan to a warning you can actually receive. The sources available to you include:
- PUB (Singapore). PUB issues flood alerts during heavy rain (Malay Mail, Jan 2025). Liat Towers' barrier was set up to respond to PUB SMS alerts from drain sensors (CNA via Wild Singapore News).
- JPS (Malaysia). JPS monitors river levels against danger levels; Sungai Siku in Kulai passed its danger level in January 2025 (Malay Mail). Its forecasting and warning system for 74 river basins is due by 2030 (Malay Mail), so coverage varies until then.
- Your own site. Water level in the nearest drain, rain intensity, and the state of your own pumps. A local sensor is often the earliest warning a flash flood gives.
A simple structure uses three stages: watch (heavy rain forecast or the monsoon season under way), prepare (alert issued or drains rising: staff the site, check pumps, stage barriers) and act (water approaching: deploy barriers, protect or shut down equipment, move people).
Roles
Name people, not departments, with a deputy for each.
| Role | Responsible for |
|---|---|
| Plan owner | Keeps the plan current, runs drills, signs off changes |
| Duty monitor | Watches alerts and site sensors, and calls each stage |
| Barrier team | Fetches, installs and checks barriers; knows where every panel and seal is |
| Engineering lead | Pumps, backflow valves, generators, fuel, controlled shutdowns |
| Site access lead | Roads, staff transport, shelter, fuel and supplier contacts |
| Communications | Customers, insurer, landlord, authorities |
Plan for the barrier team to be the night shift on a public holiday.
Barrier deployment: time it, then compare it with your warning
Demountable barriers only work if they go up before the water arrives. We found no authoritative standard setting deployment time against warning time, so measure it yourself:
- Run a full deployment drill, from alert to the last seal checked, and record the time.
- Do it at night and with the deputy team.
- Compare the time with the shortest warning your site has had.
- If deployment takes longer than your warning, you need fewer manual openings, permanent or automatic barriers, or higher levels.
Singapore's drainage code points the same way: engineers must advise owners to raise platform and crest levels "to the highest possible levels" before relying on flood protection measures (PUB Code of Practice). For new developments, details of those measures and their standard operating procedure go to PUB at Detailed Plan stage (clause 2.4), and owners of many building types must declare barriers to PUB each year, with an inspection certificate for automated barriers or a servicing report such as a leak test for manual ones (clause 13.2). Your FERP and drill records are the natural source for that. See commercial flood barriers for types and testing.
Fuel, staff and roads
Assume the roads flood before the building does. The October 2026 flash floods waterlogged the road past Cyberjaya's data centre area (theSun), and Johor listed 30 high-risk road locations for the 2026/27 monsoon (Malay Mail).
- Top up diesel when the watch stage starts, not when power fails.
- Agree in advance how your fuel supplier will reach you, and by which route.
- Pre-stage food, water and rest space for a shift that cannot go home.
- Keep fuel pumps, transfer panels and controls above flood level. Anchor tanks: FEMA warns that flooded fuel tanks can float, rupture and become a fire and debris hazard (FEMA P-348 summary).
- Provide an elevated connection point for a temporary generator. The US ASCE 24-24 standard now requires one for its higher flood design classes (FEMA).
Power and telecom dependencies
Your site may stay dry while the grid or the fibre does not. List the substation, incoming feeders, fibre routes and telecom exchanges you depend on, and ask the owners how they are protected. Decide in advance how long you will run on generators and what triggers a controlled shutdown or a move to another site. For data centres, this is also the core of the resilience and continuity work the data centre flood risk assessment covers.
Recovery
Write recovery down before the flood, because it is when people improvise.
- Who decides it is safe to re-enter, and who inspects electrical equipment before re-energising.
- Photographs and a damage log for the insurer before clean-up.
- Contacts for pumping, cleaning and specialist equipment suppliers. Lead times can stretch: after Thailand's 2011 floods, Western Digital's first drive came off the line 46 days after the flood (IEEE Spectrum).
- A debrief that updates the plan.
What insurers and regulators expect
- FM Global. Its data centre data sheet (DS 5-32) is widely cited as calling for a detailed written FERP wherever the predicted 500-year flood would cause flooding on site. We have not verified the current official wording.
- Insurers in the region. AXA XL said in November 2026 that Asia-Pacific data centre capacity is available for projects with "credible recovery plans", and weaker risks face higher retentions and tighter sub-limits (InsuranceAsia News). MAS guidelines let Singapore insurers impose underwriting conditions on higher-risk customers (MAS). See data centre flood insurance.
- Singapore coastal law. The 2026 amendments include duties to deploy deployable barriers before imminent flooding when required (s30K) and to keep a flood response plan with periodic drills for premises in transiently floodable areas (s30L). The obligations apply closer to the early 2030s (MSE). See Singapore flood protection.
- Singapore digital infrastructure law. The Digital Infrastructure Bill, passed in October 2026, requires business continuity and disaster recovery planning for licensed data centres of at least 10 MW, though public summaries do not mention flooding (Baker McKenzie).
Monsoon calendar
| When | What to expect | What to do |
|---|---|---|
| October | Flash floods in the Klang Valley; a Sepang councillor said the monsoon began on 27 October 2026 (The Star) | Full drill, clear drains, check pumps and fuel contracts |
| November to January | Northeast monsoon: east coast and Johor floods (Malay Mail); Klang Valley floods of December 2021 | Plan on standby; barriers staged; staff rota includes barrier team |
| January | Johor floods in 2024 and 2025; PUB flood alerts in January 2025 | Stay on standby |
| April to May | Inter-monsoon storms; Singapore flash floods in April 2025; extreme rainfall projected to rise most in this season (V3) | Second drill; check alerts still reach the right people |
| June to September | Isolated flash floods (Orchard Road, June 2010) | Review the plan, train new staff, service barriers before declarations |
For country detail, see Malaysia flood protection.
Frequently asked questions
- What is a flood emergency response plan?
- A FERP is a written plan for one site that links warning triggers to actions: who monitors the weather and drains, when to deploy barriers, shut down or move equipment, how staff and fuel reach the site, and how operations restart. It is tested with drills, not just filed.
- Does Singapore law require a flood response plan?
- For some sites, yes. Under the 2026 coastal protection amendments, s30L requires a flood response plan and periodic drills for premises in transiently floodable areas, and s30K requires deployable barriers to be put up before imminent flooding when required. These obligations are expected to apply closer to the early 2030s.
- Do insurers expect a flood emergency response plan?
- FM Global's data centre data sheet is widely cited as calling for a detailed written FERP where the predicted 500-year flood would cause flooding on site; we have not verified the current wording. AXA XL said in November 2026 that Asia-Pacific data centre capacity goes to projects with credible recovery plans.
- How much warning time do you get before a flash flood?
- Often very little. No authoritative source we found sets a standard ratio between barrier deployment time and warning time. Time your own deployment in drills and compare it with the shortest warning your site has actually had.
- Does PUB need to see the operating procedure for flood barriers?
- Yes, for new developments that rely on flood protection measures. Clause 2.4 of PUB's drainage code says details of the measures and their standard operating procedure go to PUB at Detailed Plan stage, and clause 13.2 requires annual declarations backed by inspection reports.