How to Secure a Vacant Commercial Building: From Day One Through Long-Term Vacancy

A commercial building does not sit quietly when it goes vacant. The insurance carrier starts a clock. The municipality starts a clock. The building's own systems — plumbing, HVAC, fire suppression, roof drainage — start degrading without the load and attention that occupancy provides. The first weeks are when a building is least protected, not because damage is known to cluster there — we have no figure for that and do not state one — but because the owner has not yet established a maintenance protocol and the building sits in limbo between occupied and secured. This covers the full securing and stabilization sequence from the day the last tenant leaves through long-term vacancy, including the insurance requirements that drive the timeline, the municipal obligations that vary by city, and the decision point where maintaining gives way to mothballing.

The First 72 Hours: Securing the Building

The first priority is physical securing — preventing unauthorized entry. What makes a commercial building harder to secure than a house is not a measured difference in risk, which we cannot source either way. It is the inventory: more entry points, larger openings in the form of loading docks, overhead doors and storefront glass, and a vacancy that is visible from the street rather than from a driveway.

• Change locks on all entry doors — front, rear, service, and roof access. Every key that the previous tenant, their employees, their vendors, or their contractors held is now a security gap. Re-key to a single master system that the owner controls.
• Secure or board all broken or vulnerable openings. Ground-floor storefront glass, loading dock doors, service windows, and any opening with damaged hardware should be boarded or fitted with temporary security panels. On commercial buildings, polycarbonate or steel security panels are commonly specified over plywood on the reasoning that they resist forced entry longer and signal active management. That is vendor and field practice rather than a tested standard — we have found no published comparison of hold times, so treat it as the trade's judgement, and check what the municipality or the insurer will accept before pricing it.
• Secure the perimeter. Lock gates, remove or secure ladders, and close any opening in the fence line. If the property has an unfenced parking lot that invites after-hours use, that exposure needs to be addressed — either with fencing, barriers, or posted signage with trespass enforcement.
• Remove immediate hazards. Walk the interior and exterior for anything that creates an immediate liability — standing water, unsecured chemicals, protruding hardware, open shafts, damaged walkways, or fire hazards.
• Document the condition. Photograph every room, every exterior elevation, every secured opening, and every deficiency. This baseline documentation is what you compare against in future inspections, and it is what answers an insurance claim if damage occurs.

The First 30 Days: Systems Decisions

Once the building is physically secured, the next decisions involve building systems. Each active system has a cost to maintain and a cost to not maintain — and the decision depends on how long the building will be vacant, the climate, and the insurer's requirements.

The Insurance Clock: The Vacancy Provision

The timeline that matters most in vacant commercial property is the vacancy provision in the policy, and one caveat belongs at the top of this section. The form most commercial policies are built on is ISO's CP 00 10, and the 60-day trigger described below is what that form is widely reported to provide. ISO forms are licensed rather than published and we have not been able to obtain the text, so nothing in this section is stated as read. The operative document is the policy in hand: find its vacancy clause and read the number in it. Sixty days is the figure associated with the commercial form, but shorter periods are in use, 30 days among them, and some carriers define vacancy differently from the form.

The definition reported for the form turns on contents rather than on visits: a building counts as vacant when it does not contain enough business personal property to conduct customary operations. On that reading a building cleared of furniture, equipment and inventory is vacant even though the owner attends weekly, which is the part owners are most often surprised by. The provision operates by the policy language rather than by any carrier action, so there is no notice to wait for – again, confirm this against your own wording.

Past the trigger, the restriction reported for the commercial form is in two parts. Named perils drop out altogether — vandalism, sprinkler leakage unless the system is protected against freezing, building glass breakage, water damage, theft and attempted theft — and on every other covered loss, payment is reduced by 15 percent. Those named perils are the ones a vacant building is most exposed to, which is the whole problem with the clause. Treat the list and the percentage as the shape of the provision to look for in your policy rather than as text we have verified.

The practical response is to contact the carrier before or immediately upon vacancy and request a vacancy permit or endorsement. This is an add-on to the policy that restores some or all of the restricted coverage in exchange for an additional premium and, usually, a maintenance and inspection commitment. The carrier may require evidence of securing, a written inspection schedule, and proof of active maintenance. Our insurance preservation guide covers the coverage provisions and what carriers expect.

Municipal Requirements: Registration and Maintenance

Most cities that Ethreon covers require some form of vacant building registration or impose heightened maintenance standards on vacant commercial property. The requirements vary significantly:

• Cincinnati: mandatory registration with annual fees, and a liability insurance minimum that is tiered — $300,000 for residential buildings of four units or fewer, and $1,000,000 for commercial, industrial, manufacturing or residential buildings of five or more units, carried for the entire time the building is vacant or under a vacate order. Maintenance standards are enforced through the city's building department.
• Dallas: Chapter 48B registration required within 30 days of vacancy, with an emergency contact designation and annual renewal fees.
• Houston: enforces through the dangerous building framework — a vacant commercial building in disrepair triggers the full enforcement process. A proposed standalone vacant building registration program would add perimeter fencing requirements within 10 days of commercial vacancy.
• Columbus: registration required for commercial and residential vacant property, with fees based on property type and duration of vacancy.
• Pittsburgh: no formal registration program, but enforces through the International Property Maintenance Code — a vacant building that does not meet exterior maintenance standards triggers code enforcement and potential conservatorship under Pennsylvania Act 135.
• New Orleans: aggressive blight enforcement with the Hearing Bureau process — a commercial property found in violation can be ordered to correct within timeframes as short as 30 days, with daily fines and potential lien foreclosure.

The common thread is that municipalities do not give vacant commercial buildings a grace period. Registration, maintenance, and insurance obligations begin at vacancy — and the enforcement machinery is already running when the first notice arrives.

Ongoing Maintenance and Inspection

A secured vacant commercial building still requires regular maintenance and inspection. The minimum program includes:

• Monthly interior and exterior inspection with dated photographs — condition of all secured openings, roof and drainage, evidence of water intrusion or pest activity, condition of any active systems, and any new damage or code violation. Monthly is our own cadence; the one published schedule for a closed building is the National Park Service maintenance chart set out below, which is less frequent indoors and more frequent at the kerb.
• Exterior maintenance: grounds maintenance (mowing, weed control, debris removal) on a schedule that keeps the property compliant with municipal code — typically biweekly during growing season.
• Securing maintenance: re-securing any opening that has been breached, replacing damaged boards or security panels, maintaining locks and hardware.
• Seasonal work: winterization of plumbing and sprinkler systems before the first freeze; de-winterization and system check before reoccupation.
• Documentation: every visit, every maintenance action, and every deficiency should be documented with photographs and stored in a format that can be produced for the insurer, the municipality, or a potential buyer's due diligence.

When to Mothball

Mothballing is not abandonment — it is a deliberate long-term closure protocol that reduces operating costs while preserving the building's structure and systems for eventual reuse. The decision to mothball rather than hold in ready condition is driven by timeline and economics. Our own threshold is a vacancy expected to run beyond six to twelve months with no near-term reoccupation plan, at which point maintaining active HVAC, full utilities and frequent inspection usually costs more than a controlled shutdown with monitoring. That threshold is a judgement from our own bidding, not a published figure. What is published is the horizon the protocol is designed for: the National Park Service states that the steps in Preservation Brief 31 can protect a building for periods of up to ten years.

Our mothballing guide covers the protocol in detail. The reference document is the National Park Service's Preservation Brief 31, written for historic buildings but structured around problems any closed building has, and it is worth using as written rather than paraphrased. It sets out nine steps: document the building's significance; prepare a condition assessment; structurally stabilize it; exterminate or control pests; protect the exterior from moisture penetration; secure the building and its features; provide adequate ventilation to the interior; secure or modify utilities and mechanical systems; and develop and implement a maintenance and monitoring plan. The order matters, because securing a building that is still taking water in simply seals the damage inside.

The brief also gives the one figure this subject usually lacks. The absolute minimum air exchange for most mothballed buildings is one to four air exchanges every hour — one or two per hour in winter, and often twice that in summer. It sorts buildings into four climate zones for this purpose: hot and dry in the southwestern states, cold and damp in the Pacific northwest and northeast, temperate and humid across the Mid-Atlantic and coastal areas, and hot and humid in the southern states and the tropics. Five of the seven states Ethreon covers fall in that last zone, which is the hardest to ventilate passively. The brief is candid that there is no exact science to it, and notes that a frame building loose enough to exchange air three or four times an hour naturally may need no added ventilation in an arid or temperate climate — while even the minimum exchange can still foster mould in a damp one, which is why the monitoring matters more than the louvre count.

Two details from the brief are easy to get wrong on a commercial shutdown. An oil tank left in place has to be either filled to the top to eliminate condensation or drained; left empty for more than a year it will likely rust and not be reusable. And a sewer line needs the traps filled with glycol or the line capped at the building line, because sewer gas is explosive — a point worth making to anyone who plans to simply shut the water off and walk away. The brief also observes that entering the building more often is itself part of the ventilation strategy, which is a better argument for the quarterly interior visit than paperwork is.