Emergency muster roll call: using RFID card data to account for everyone in an evacuation
How to run an emergency muster roll call from RFID card data: who is on site, assembly points, wardens, visitors and contract workers, drills and the report.
Last checked 6 min read
The fire alarm goes off at 2:55 pm, five minutes before the shift change. Six hundred people walk out to three assembly points. The safety officer has a clipboard with yesterday's attendance sheet. Within ten minutes the fire team asks the only question that matters: is anyone still inside? An emergency muster roll call that relies on a printed list cannot answer that. One built on live card and attendance data can, if you set it up and practise it.
Emergency muster roll call: the basic idea
A muster has three steps:
- Know who was on site at the moment of the alarm.
- Account for each of them at an assembly point.
- Report the gap, the people not yet accounted for, to the fire or rescue team with their last known location.
The hard part is step one. In a modern plant the who is on site list comes from several sources:
| Source | Covers |
|---|---|
| Door and turnstile card taps | Employees and contract workers with cards |
| Attendance punches (biometric or face) | Employees not using cards at doors |
| Contract labour daily muster | Contract workers on today's deployment |
| Visitor register | Visitors checked in and not checked out |
| Vehicle log | Drivers waiting in the yard |
None of these is perfect alone. Together they give a list good enough to start with.
Making card data trustworthy
An RFID system only knows what it is told. Three habits decide whether its list is right in an emergency.
Tap out as well as in. If people tap in at the turnstile but leave through an open gate, the system thinks they are still inside. Put readers on both directions at the perimeter, and make the exit path through a reader the easiest path.
Use anti-passback where it makes sense. Anti-passback refuses a card that is already "inside" from entering again, which stops one card being passed back through the fence for a friend and forces a tap on the way out. Reset it at the end of the person's shift day, not at midnight, or night-shift workers who tapped in at 22:00 will be locked out at 00:30.
Discourage tailgating. One tap, one person. Security should treat a door held open for a group as a safety issue, not a courtesy.
Visitors and contract workers count too
The people most likely to be missed in an evacuation are the ones least familiar with the site: a visiting auditor, a vendor's engineer fixing a compressor, a contract painter on the roof.
- Visitors should be in the muster list from the moment they check in until they check out. Hosts are responsible for walking their visitors to the assembly point. Our post on visitor management under DPDP covers what visitor data to collect and keep.
- Contract workers should carry cards like employees, or be on the contractor's daily muster. The principal employer's safety duties do not stop at the contractor's payroll, as our guide to contract labour compliance under the OSH Code explains.
- Short-stay people such as truck drivers and courier staff should be logged at the gate with a time in and out.
Assembly points and wardens
Every building or zone needs a named assembly point, and every assembly point needs a warden and a deputy for each shift.
The warden's job during a muster:
- Collect people at the point and stop them wandering off.
- Account for each person, by ticking names on a phone, scanning cards on a portable reader, or asking people to confirm themselves in an app.
- Report the count and the missing names to the incident controller.
- Pass on anyone reported hurt or trapped.
Give wardens their list on a phone, not on paper. A phone list can be updated by people marking themselves safe from wherever they ended up, which a clipboard cannot.
A worked example from a Hosur plant
A plant in Hosur runs a drill at 2:55 pm, five minutes before the A to B shift change, the worst moment for a headcount.
- On-site list at the alarm: 612 people from card taps and punches, 184 contract workers on the day's muster, 21 visitors checked in. Total 817.
- After 8 minutes: 761 accounted for, by self check-in on the app and warden ticks.
- After 12 minutes: 803 accounted for. 14 not accounted for.
- Following up the 14: 9 had left before the alarm through the side gate without tapping out; 3 were B-shift workers who had tapped in early and were still in the locker room; 2 were visitors whose host had left them in a meeting room.
The fire team would have searched for all 14. The lessons were practical: a reader on the side gate, a rule that hosts escort visitors out, and a reminder to wardens to check locker rooms at changeovers. The next drill had 3 unaccounted at 12 minutes.
Running drills and keeping the fire drill report
Drills are where the system is tested. For each drill record:
- the date, time, shift and scenario;
- time to clear the building and time to complete the evacuation headcount;
- the number on the on-site list, accounted for, and not accounted for;
- why each unaccounted person was missed;
- actions, owners and dates.
Follow the drill frequency in your state's factory rules, your fire licence conditions and your own risk assessment. Run at least one drill at a shift changeover each year, because that is when lists are least accurate. Keep the fire drill report with your safety records; inspectors and insurers ask for them.
Shift data matters here as well. If your attendance system reads night-shift punches correctly across midnight, the on-site list will too; our guide to shift detection for rotating shifts covers that.
Privacy and access to the list
A live list of who is where is sensitive. Limit the live view and muster to security, the safety team and wardens. Keep muster reports, but do not use emergency data to discipline people for being in the wrong place unless there is a genuine safety breach.
A short checklist
- Readers on every perimeter exit, both directions.
- Anti-passback reset at the end of the shift day.
- Visitors, contract workers and drivers in the on-site list.
- Named assembly points with a warden and deputy per shift.
- Self check-in on phones, warden ticks for everyone else.
- A drill at a shift changeover every year, with a written report.
In Vatsin Access, the live view shows who is inside each zone and Run muster lists who is in; with the Safety module, an emergency alert reaches everyone seen on site, people answer I am safe or I need help, wardens tick people off and a muster report is kept. The method above works with any system that can produce a reliable on-site list.