4.4 Permits to Work
Key Takeaways
- A permit to work (PTW) is documented authorisation for specific high-risk work by named persons within a defined time window.
- Classic types include hot work, confined space entry, live electrical work, certain work at height, and isolation-related permits.
- Key stages include issue, accept, handback, and cancel; time limits and cross-discipline isolation must be controlled.
- A PTW does not replace risk assessment or SSoW — it supports control of residual risk for exceptional tasks.
- Effective PTW depends on clear roles, communication at interfaces, and no work outside the permit’s scope or time.
4.4 Permits to Work
Quick Answer: A permit to work (PTW) is a documented authorisation allowing named people to carry out specified high-risk work in a defined place and time window, under stated controls. Classic types include hot work, confined space entry, live electrical work, and isolation-related permits. A PTW does not replace risk assessment — it helps control residual risk for exceptional tasks.
Some work is so hazardous, or so easily done wrongly under production pressure, that a general SSoW is not enough. Organisations use a permit-to-work system so that hazardous activities only start when isolations, tests, and authorisations are confirmed — and stop when the permit expires or conditions change.
What a permit to work is
A permit to work is a formal, written (or controlled electronic) document that:
- Authorises specific work to proceed
- States where, when, and what may be done
- Names the people authorised to do the work and who issued the permit
- Lists precautions that must be in place before and during work
- Defines handback and cancellation so plant is returned to a safe state
Think of PTW as a controlled gate on residual risk. The gate stays closed until the right checks are signed; it opens only for a limited period; it closes again when work ends or time runs out.
PTW is not…
| Myth | Reality |
|---|---|
| A substitute for risk assessment | Assessment (and usually SSoW) come first; PTW adds authorisation and live control |
| Just a signature to “cover” the company | Without real isolations and checks, the paper is dangerous false assurance |
| Needed for every routine low-risk task | Used for defined high-risk or exceptional activities |
| A one-person formality | Involves issuer, acceptor, and often isolation authorities and stand-by persons |
Classic types of permit
Exact titles vary by site, but Managing Safely expects familiarity with common categories:
| Permit type | Typical high-risk work | Why special control is needed |
|---|---|---|
| Hot work | Welding, cutting, grinding that produces sparks/heat | Fire and explosion if flammables or poor housekeeping |
| Confined space entry | Entry into tanks, vessels, sewers, poorly ventilated voids | Oxygen deficiency, toxic gases, engulfment, difficult rescue |
| Live electrical | Work on or near live conductors (only when justified) | Electrocution, arc flash; live work is tightly restricted |
| Isolation / lock-out | Complex multi-energy isolations for maintenance | Incomplete isolation is a major killer |
| Work at height (on some sites) | Specific high-risk access methods or fragile surfaces | Falls; may be controlled by SSoW alone on simpler jobs, PTW when site rules require |
| Excavation / breaking ground | Digging near services | Striking cables/gas lines |
| Other site-specific | Radiation, process opening, diving, etc. | Local major hazards |
You do not need every industry’s form set for the exam, but you must recognise hot work, confined space, live electrical, and isolation as classic PTW territory.
The permit lifecycle — issue, accept, handback, cancel
A robust system follows clear stages. Names differ slightly between sites; the logic does not.
1. Request / prepare
Someone identifies that the planned task falls under PTW rules. Risk assessment and method/SSoW are checked or created. Isolations are planned. Tools, PPE, gas detectors, fire watch, and rescue plans are arranged.
2. Issue
An authorised issuer (competent person with authority) confirms precautions are in place and issues the permit for a defined time window. The permit states scope boundaries — what is allowed and what is not.
3. Accept
The work party leader (or named workers) accepts the permit, confirming they understand the hazards, limits, and controls. Work must not start before acceptance. Only named persons work under that permit unless the system allows controlled additions.
4. Work under control
Work proceeds only within scope and time. If conditions change (gas alarm, weather, isolation broken, scope creep), work stops and the permit is revalidated or cancelled. Cross-discipline jobs need clear communication so one trade does not defeat another’s isolation.
5. Handback
When work is complete (or stops for the day per site rules), the work party hands back the permit: tools removed, openings closed as required, people clear, status of plant declared. Issuer or authorised person inspects as required.
6. Cancel / close
The permit is cancelled so it cannot be reused. Isolations are removed only under controlled procedures so plant is safely reinstated. Shift handovers never leave “open” ambiguity about whether a permit is still live.
| Stage | Core question |
|---|---|
| Issue | Are controls and isolations ready so high-risk work may start? |
| Accept | Do the workers understand and agree to the limits? |
| Handback | Is the work area left in a declared safe state? |
| Cancel | Is the authorisation closed so nobody works on a dead permit? |
Time limits matter
Permits are time-bound for good reasons:
- Gas atmospheres change
- Isolations can be disturbed
- Weather and lighting change
- Night crews may not share morning assumptions
- Fatigue and shift handover increase error risk
If work overruns, the permit must be extended or reissued under the site procedure — not silently continued. “We’ll just finish off” without revalidation is a classic incident precursor.
Cross-discipline isolation
Many permits fail at interfaces:
- Electricians isolate power, but mechanical stored energy remains
- Process team blinds a line, but a parallel feed is forgotten
- One permit’s fire watch leaves while another hot-work team continues
- Confined-space stand-by person is pulled away “for a minute”
Good PTW systems require isolation certificates, lock-out/tag-out, and communication between disciplines before issue. Managers must treat isolation as a system, not a single switch.
Roles (overview)
| Role | Typical responsibility |
|---|---|
| Issuer / authoriser | Competent to verify precautions and issue/cancel |
| Acceptor / work supervisor | Ensures team follows permit; stops unsafe work |
| Work party | Only named competent people; stay in scope |
| Isolation authority | Applies and removes isolations under procedure |
| Stand-by / fire watch / hole watch | Continuous support duties defined on the permit |
| Area operator / plant owner | Knows process state; coordinates production with maintenance |
Exam staple — PTW vs risk assessment vs SSoW
Remember this hierarchy of documents:
- Risk assessment — what can harm people and what controls are needed
- SSoW / method — how the job will be done safely in sequence
- Permit to work — live authorisation that residual-risk controls (especially isolations and time-limited precautions) are in place now for these people
A PTW does not replace risk assessment. If the exam offers an option that “the permit means no assessment is needed,” that option is wrong. PTW supports control of residual risk for exceptional high-risk tasks after higher ERICPD controls and assessment thinking.
Under ERICPD:
- Isolation hardware and engineering still sit higher where possible
- PTW + SSoW are Control (administrative) measures
- Checking compliance and stopping unauthorised work is Discipline
Worked micro-scenarios
Hot work in a warehouse
Risk assessment identifies fire from sparks near packaging. SSoW requires clearing combustibles, extinguishers, fire watch. PTW is issued for 2 hours to named welders; fire watch remains; handback includes a post-work fire check period. Without PTW, someone might weld “quickly” after hours with no watch.
Confined space vessel entry
Assessment covers toxic gas and rescue difficulty. SSoW sequences isolation, purging, atmospheric testing, PPE, and rescue plan. PTW authorises entry only after gas tests pass and a stand-by person is present; time limit forces re-test. Permit cancellation prevents casual re-entry later without checks.
Common PTW failures
| Failure | Why it is dangerous |
|---|---|
| Blank or pre-signed permits | No real check of conditions |
| Work outside scope or time | Unassessed residual risk |
| Unclear handback | Plant restarted while people still inside |
| Poor isolation coordination | Residual energy remains |
| Treating PTW as paperwork after starting | Defeats the whole purpose |
| No training on the PTW system | Forms filled wrongly under pressure |
Manager checklist — PTW health check
- Is it clear which tasks require a permit on this site?
- Are issuers competent and authorised?
- Does issue require proof of isolation, tests, and precautions?
- Are time limits and extensions controlled?
- Do accept and handback force two-way communication?
- Are cross-discipline isolations coordinated?
- Is it understood that PTW supports assessment/SSoW and does not replace them?
- Do audits sample live jobs, not only completed forms in a drawer?
Linking back across Controlling Risks
| Topic | Link to PTW |
|---|---|
| ERICPD | PTW is Control; isolations may implement Isolate/Control; enforcement is Discipline |
| SFAIRP | For high residual risk, a formal PTW system is often reasonably practicable and expected |
| SSoW | Method describes how; permit authorises when residual-risk conditions are met |
| Assessing risks | Assessment identifies when PTW is a necessary control |
If you can define PTW, list classic types, walk the issue–accept–handback–cancel cycle, and insist that permits never replace assessment, you have the Controlling Risks chapter’s operational core for the written assessment and the workplace project.
What is a permit to work (PTW) primarily?
Which activity is a classic candidate for a permit-to-work system?
In a typical permit lifecycle, what should happen after the work party finishes and before plant is returned to normal operation?
Which statement about permits to work is correct for Managing Safely exams?