The Storm Doesn’t Care About Your Dinner Rush
I’ve worked in Florida nearly my entire professional life. I have become VERY familiar with the impact hurricanes can have — how they can take a normal Friday night and turn it on its head in minutes. And as someone who works in a tourist town, I can tell you: people are still going out to eat, even when the news lady is ranting about the dangers of approaching Tropical Storm George, or Hurricane Nancy, or whatever.
Here’s how it looks: the dining room is full. The kitchen is running the way a good kitchen runs on a Friday night — fast, loud, and busy… in a good way.
Then the lights flicker. All the cooks give out a low groan in unison, sounding like a depressed choir. The lights give another sad little flicker, go off, and don’t come back.
Emergency lights blink on, bright and glaring. The walk-in compressor stops humming. The hood over your flat-top whirs down and goes silent. Your POS system switches to battery backup, but the printer goes dark, an ominous stream of tickets still hanging in the shadows.
Nothing about the food changed in that moment. The chicken you pulled ten minutes ago is still the same temperature it was. The frozen steaks in deep storage are still solid blocks of ice… at least for now. But something has changed — something bigger than any single pan of food. Your building just stopped being able to guarantee that the food you serve is safe.
That’s a different kind of problem than a slow cooler or a missed temp check. It’s the kind of problem this lesson is all about.
Quick Recall
We’ve spent this part of the course talking about the building itself — the equipment, the plumbing, the water, the pests, the cleaning. All the stuff that has to work behind the scenes before you can safely cook a single plate of food.
But buildings, life, and Mother Nature don’t always cooperate. The power goes out. The water gets shut off. A sewer line backs up. A storm puts three inches of water through your dining room.
And that’s when this becomes a manager problem. Managers don’t get to stand in the kitchen, look around, and say, “Well… what do you guys think?” It’s your call, baby. That’s why you make the BIG bucks.
There is a right way to handle emergencies like these, because the first few decisions you make matter — a lot. Get them right, and you’ve got a bad night to manage. Get them wrong, and that bad night can become a closed restaurant, a health department investigation, or a whole bunch of sick customers.
Fortunately, there are really only three parts to this thing: prepare, respond, recover.
Most of this lesson is about what happens once everything has already gone sideways. But first, we have to talk about what should have happened before the lights went out.
Building the Plan Before You Need It
Here’s the thing: nobody is happy about a weird power outage. Nobody. Worse, nobody is thrilled they have to deal with a walk-in refrigerator WAY out of temp. That’s a problem for any operator.
But here’s what you really don’t want: you really, REALLY don’t want to be figuring out who’s supposed to call the health department, who should be talking to the guests, where the flashlights are, or whether the emergency contact list is a real thing you should go find — or just another bullet on the manager’s to-do list that never got to-done.
Before the storm, before the pipe bursts, before somebody smells smoke coming out of the electrical room, somebody should already know: Who is in charge? Who makes the call? Who needs to be contacted? Where is the emergency equipment? What happens to the food? What has to happen before you can reopen?
And don’t do this to your poor PM manager: don’t make them rely on a supervisor having a cell phone nearby and willing to take a call from work while the building is actively falling apart. That’s just mean.
They should KNOW.
That’s what a crisis management program is for: making sure the PM manager knows how to handle the emergency and has a real plan to follow. Somebody has to be responsible for keeping that plan alive, too. That’s your crisis management team.
In a standalone restaurant, that is likely the chef, the GM, and the owner. In a giant hotel, hospital, or other large operation, the team will be much, much bigger, with people responsible for very specific pieces of the response in different sections of the operation.
The written plan should also make clear who has the authority to stop service when the operation is no longer safe.
A plan like this starts with an emergency contact list. Not a number saved on the sous chef’s phone or a reminder to “call corporate.” The actual numbers for the regulatory authority, ownership, insurance, and management. You might also need numbers for testing labs or emergency public relations if your operation uses them. Basically, anybody you may need to call in a hurry.
IMPORTANT: once you have the list… Don’t Hide It! Put it somewhere the people who NEED it can actually FIND it.
Speaking of things you want to be able to find, you’re also going to need a crisis kit.
Think about the stuff that becomes weirdly important the second the building stops working normally: flashlights, batteries, a basic first-aid kit, copies of key documents, maybe a battery-powered radio depending on the operation. None of that is exciting. All of it is useful when the lights are out and we’ve got to help wheel Grandma out the side door in the dark. And the rain.
Finally, you need to decide in advance your communication strategy. Somebody needs to be the spokesperson — one person, chosen ahead of time, who speaks for the operation to guests, the media, or anybody else asking what happened.
This is not the moment for an ambitious busser to talk to Channel 9 about what happened.
The person who talks to the public may not even be part of the management team. Their job is to know what’s going on, tell people the truth, and make sure the restaurant speaks with one voice. Everybody else’s job is to let them.
Would you go parachuting with a team that had never tested its emergency response plan? No. You would not. Writing down a crisis plan is like skydive trainers talking about checking the parachutes. Good start. But at some point we need a little more actual doing and a little less chitty-chat-chat daydreaming.
Call the numbers on the emergency contact list and make sure they still work. Check the flashlights and batteries. Open the crisis kit and make sure what’s supposed to be in there is actually in there. Make sure your spokesperson knows they’re the spokesperson, knows what they should say in an emergency, and practices saying it.
Then walk through the ugly stuff.
- The power goes out during dinner. Who does what?
- A water main breaks and you’ve got no potable water. Who makes the call?
- Smoke starts pouring out of an electrical room and the building has to be evacuated. Where do the guests go? Who accounts for the employees? Who speaks for the restaurant?
You are trying to find the holes in the plan before there are people standing in those holes. Find the dead flashlight, the disconnected phone number, the missing document, and clarify what each manager is supposed to do when it’s boring, like on a Tuesday afternoon.
Not Friday night. In the dark.
During a hurricane.
What Makes a Hazard “Imminent”
Shutting down a restaurant is a BIG deal. You are talking about lost sales, wasted food, employees still on the clock, disappointed guests, and a whole bunch of explaining to do afterward. Nobody makes that decision casually.
Shutting down when you don’t need to can cost the operation a fortune. Not shutting down when you should can cost you the business.
That means managers need to know where the line is.
An imminent health hazard is a situation serious enough that continuing to operate could put people at real risk. Once you cross that line, this is not a “fix it when you get a chance” problem anymore. You stop.
The Food Code looks at two things when deciding how serious that danger is:
The bigger those answers get, the farther away you are from an ordinary correction and the closer you are to a situation where the operation needs to shut down.
The Named Emergencies
The FDA Food Code gives us a list of emergencies that can rise to the level of an imminent health hazard. They are not random: each one could potentially harm workers and guests, and each one can create a situation serious enough that the restaurant has to stop operating to protect public health.
Two of them are pretty obvious:
- Fire
- Flood
Nobody needs a paragraph explaining why smoke, fire-suppression chemicals, structural damage, or floodwater can make a restaurant unsafe. But one of the Imminent Health Hazards is not so easily decoded and deserves a little more explanation.
Extended Interruption of Electrical Service
Power loss is probably the imminent health hazard every restaurant manager is most likely to deal with at some point. And when you hear “power outage,” your brain probably goes straight to the refrigerators and freezers. Good. It should.
But refrigeration is only the obvious part. The same power that keeps food safe also keeps workers safe. Electrical service also supports ventilation, lighting, pumps, dishmachines, controls, and other systems that make the building safe to work in.
Gas equipment is a good example. Your range may still have gas coming to it after the electricity goes out, but the hood sitting over it isn’t moving air anymore. Now we’re not just talking about keeping chicken cold. We’re talking about heat, smoke, grease-laden vapors, and carbon monoxide — a colorless, odorless gas that can make people seriously ill or kill them. A kitchen can still have plenty of gas and absolutely no business cooking with it.
The word extended matters here, too. There is no single Food Code number that says an outage becomes “extended” after thirty minutes, two hours, four hours, or six hours. And that makes sense.
A closed walk-in holding at 38°F is a very different problem from one already creeping into the Temperature Danger Zone. You already know that when we intentionally use Time as a Public Health Control with cold TCS food, the outside limit can be six hours under very specific conditions. That gives you some context — but it does not turn six hours into a power-outage rule. The clock is not the hazard. The loss of control is.
An extended loss of power means those systems have been unavailable long enough that safe service is no longer possible. So the real question is not simply: “How long has the power been out?”
The real question is: “When did the food start inching into the Temperature Danger Zone, how long has it been there, and what other safety systems have I lost?”
A loss of power is not merely a loss of lights. It’s a loss of control — and therefore a loss of safety. The rest of the named emergencies do not need quite that much real estate, but they do need enough explanation that the words actually mean something.
| Emergency | What does it actually mean? | Why could it shut you down? |
|---|---|---|
| Extended interruption of water service | Potable water is no longer coming through the building’s normal plumbing, and the interruption lasts long enough that the operation has to rely on an emergency supply brought in from somewhere else. | If you can’t send someone for emergency water, there is no handwashing, no warewashing, and very limited beverage service. If there is no potable water coming through the pipes, you can only stay open as long as the potable water you bring in can actually support safe service. |
| Sewage backup | Wastewater is supposed to leave the building. A sewage backup means it starts coming back the wrong way — up through a floor drain, toilet, sink, or another part of the plumbing system. | Sewage can carry pathogens and spread contamination across floors, equipment, food-contact surfaces, food, and anything else it reaches. Once sewage is actively entering the operation, normal service cannot safely continue around it. |
| Misuse of poisonous or toxic materials | This does not mean somebody made one sanitizer bucket too strong. We are talking about a chemical mistake big enough that you may no longer know what food, equipment, or parts of the building are safe — a pesticide sprayed through a prep area, a major chemical spill, or another toxic-material exposure that spreads beyond one easy-to-isolate spot. | If you cannot confidently identify what was exposed, remove the chemical, discard affected food, and clean the contaminated area, then you cannot safely keep serving around it. At that point, the chemical problem has become an operation-wide safety problem. |
| Onset of an apparent foodborne illness outbreak | This is NOT a couple of guests calling to say, “I got sick after dinner.” That is a potential outbreak. It deserves investigation and follow-up. Now we’re talking about an actual outbreak: multiple people with similar symptoms, eating around the same time, connected to the same food or meal at your restaurant. | Now you have evidence that something in the operation may actually be making people sick. Continuing to serve before the source is identified and controlled could expose even more guests. |
| Gross insanitary occurrence or condition | This is Food-Code language for something way beyond ordinary dirty. Picture rats playing bouncy house on the salad buffet, a roach infestation worthy of a horror flick, prep cooks working in puddles of backed-up sewage. | The condition is too severe or widespread for normal corrective action. You cannot wipe down one surface, throw away one pan, and keep moving when the whole operation—or a major part of it—can no longer be trusted as sanitary. |
| Any other circumstance that may endanger public health | This simply means the named list cannot possibly predict every emergency. If some other event creates the same kind of serious, immediate public-health danger as the other named items in the FDA’s list, it still counts even though the Food Code did not give that exact disaster a name. | The rule is based on the risk, not the label. If continuing to operate would expose workers or guests to the same kind of serious danger as the named emergencies above, the fact that your exact disaster is unusual does not make it safe. |
Not every problem means you shut the restaurant down. Think about the difference:
A refrigeration unit struggling to hold temperature? Problem.
A sink backing up? Problem.
A building without enough refrigeration left to safely hold its TCS food? Imminent health hazard.
A floor drain pouring half an inch of sewage all over the kitchen floor? Imminent health hazard.
One requires corrective action. The other requires you to stop operating until the danger is under control.
The difference is not how annoying, expensive, or inconvenient the problem is. The difference is whether you can still protect the people you are serving.
The Five-Step Response
Once you’ve decided the crisis in your restaurant is an imminent health hazard, the discussion changes. We’re not deciding whether there is a serious problem anymore. We already know there is. That’s why it’s called a crisis. Now your question becomes: what do I do next?
- Determine the risk. What exactly has failed, and what is now unsafe?
- Stop service and notify the regulatory authority.
- Discard affected food.
- Correct the problem.
- Get approval before reopening.
This is where a lot of operators make mistakes. They are so anxious to get open again that they stop treating the imminent health hazard like an imminent health hazard. They did Steps 1 and 2 right. They recognized the risk. They stopped service. They made the call. Then they start getting impatient.
Suddenly, they are a little less careful about throwing out product that might have been affected. They are a little less rigorous about making sure whatever caused the crisis is actually fixed. And they are certainly not excited about inviting the health inspector back in for a walkabout after the cleanup is finished.
But those last three steps are not paperwork you have to get through so you can reopen. They are the part where you prove the crisis is actually over. You can fix the problem, clean everything up, throw out what needs to go, and get the equipment running again. Great. You are still not automatically allowed to reopen.
Once an imminent health hazard shuts your operation down, the regulatory authority has to approve reopening. That means an inspector walks the operation with you. It means they review what happened, what was discarded, what was repaired, and what you did to make sure the hazard is actually gone.
Is any of this convenient? No. Is it irritating, time-consuming, and patience-challenging? Absolutely. But you shut down your restaurant because you couldn’t prove you wouldn’t hurt or kill people who ordered your food. It was a serious event, and it deserves a serious response.
The One Narrow Exception
There is one narrow exception to the normal rule that an imminent health hazard means you stop operating. And I mean narrow: it only applies to an interruption of electrical service or water service.
If the restaurant already has a written emergency operating plan that was approved by the regulatory authority before the emergency happened, you may be allowed to continue operating under that plan.
Three things have to be true:
- The plan already existed and was approved before Hurricane Helga knocked down three trees and made your place of business go dark. The approved part is important. You write the plan, send it to your health inspector or regulatory authority, and they basically say, “Good plan. Use it.”
- You can immediately control the actual risk created by the outage. Maybe you have mobile cold storage and lots of ice. Maybe you have a generator. Maybe you’ve got some other creative solution. As long as you can control the risk and you planned for it ahead of time, the approved plan may let you keep operating.
- During or directly after, you notify your health inspector or regulatory authority that, yes, you did indeed use the plan you came up with.
You do not get to write the plan after the lights go out:
“Well, this seems like a pretty good emergency plan. Go get bottles of water from the gas station. We’ll wash our hands with that.“
Nope. You don’t get to on-the-spot public health, no matter how much you might wish you can – you can’t.
After the Crisis
Once the doors are open again, you’re not quite finished. Remember that crisis management program we built before any of this happened? Now you get to find out whether it was actually any good.
Did the emergency numbers work? Did somebody spend twenty minutes looking for the crisis kit? Did the PM manager know what to do? Did the spokesperson actually speak for the restaurant, or did our ambitious busser somehow still end up on Channel 9? Most importantly: where did the plan fail?
Trust me. I’ve been in lots of crazy situations and had to make some hard calls. And more times than I am comfortable to report, we survived and reopened through determination, ignorance, and a whole lot of luck. If I could go back in my career and fix one thing, it would be this: use the crisis point to learn something. Even if all you’re learning is a very specific list of things to fix before the next one.
Closing Side Work
Chef’s Explanation
There are really two different mistakes in this story, and they happen on two different days. The first one happens the night the power goes out.
Trying to limp along for a few minutes with cold food is not automatically crazy. The power is out, but the salads are still cold, the sushi is still cold, and everybody is hoping the lights come back on before this turns into something bigger. That is a fairly normal reaction to the situation. A short power outage is almost never, by itself, an imminent health hazard. Then water starts coming up through the drains.
At that point, I don’t care whether somebody from the building calls it sewage, a pump problem, wastewater, or Steve. The stuff that is supposed to be leaving the building is now coming back into the kitchen, and people are walking through it with soaked socks and wet pant legs. That’s the moment the problem changes.
The Assistant Manager should not be standing there trying to get another update from corporate while the cooks keep working. Service should stop, the regulatory authority should be notified, and now we deal with the mess.
And I want to be fair to that manager, because this is exactly why we spent time talking about planning before the crisis. Twelve thousand dollars an hour is an ugly number. The Assistant Manager knows people above him are going to want answers. He may not even believe he has the authority to shut the whole operation down without somebody higher up approving it. That’s a management-system failure. If the person RUNNING the operation doesn’t know if they can STOP the operation — even when wastewater is coming through the floor — the whole system is messed up.
The second mistake happens the next morning, and honestly, this one is easier to understand. The floors are clean. Somebody worked all night. The ugly water is gone. The kitchen looks a whole lot better than it did six hours earlier, and everybody desperately wants that to mean the problem is over. HERE’S THE THING: cleaning up the aftermath is not the same as fixing what caused it in the first place. The drain is still gurgling. Water is still moving underneath it. The kitchen still smells like a port-a-potty at the fair.
So when the cook asks, “Is the plumbing actually fixed?” that’s the right question. “They cleaned everything” is the wrong answer. And “Corporate says we’re okay to open” is definitely worse.
This was a bad call higher up the chain, and it shows a disturbing reality: sometimes the fear of what a shutdown will do to the bottom line becomes stronger than the fear of what can happen if you keep serving contaminated food.
TL;DR – The Least You Need To Know
- A crisis management program should exist before the crisis. The people in charge should already know who does what, who gets called, where the emergency supplies are, who has the authority to stop service, and who speaks for the operation.
- If you haven’t tested the plan, you don’t really have one.
- An imminent health hazard is the point where the operation can no longer safely control the risk while staying open.
- Fire, flood, extended loss of power or water, sewage backup, major chemical misuse, an apparent foodborne illness outbreak, gross insanitary conditions, and other serious public-health dangers can all get you there.
- An extended power outage is not just a refrigeration problem. Electricity keeps food safe and workers safe. Once you lose enough control, safe service is no longer possible.
- Once you have an imminent health hazard: determine the risk → stop service and notify the regulatory authority → discard affected food → correct the problem → get approval before reopening.
- A pre-approved written emergency operating plan may let you continue operating through certain electrical or water interruptions — but you do not get to invent that plan after the emergency starts.
- Reopening is not the end of recovery. Look at what failed, fix the plan, and learn something before the next crisis.
Key Terms
A plan created before an emergency that explains how the operation will prepare for, respond to, and recover from a crisis.
The people responsible for maintaining and carrying out the crisis management program.
The person designated to speak for the operation during a crisis.
Current contact information for the regulatory authority, ownership, management, insurance, and anyone else the operation may need to reach during an emergency.
Emergency supplies and important documents assembled ahead of time for use during a crisis.
A serious threat to public health that requires the operation to stop serving until the risk is controlled.
The agency responsible for enforcing food-safety rules and approving reopening after an imminent health hazard.
A plan approved by the regulatory authority before an electrical or water interruption that may allow limited operations to continue while the risk is controlled.
Contamination or unsanitary conditions severe enough that normal corrective action cannot make the operation safe.
Wastewater flowing back into the facility instead of leaving through the plumbing system.