Permit to Work

What a Permit to Work Is

A permit to work (PTW) is a formal authorisation for defined high-risk work. It is not a substitute for competence, supervision, or planning. It confirms hazards were considered, controls and isolations are in place, roles are clear, the job may proceed only within stated limits, and the area is handed back safely when work stops.

PTW is most valuable where mistakes are hard to reverse: energy release, confined spaces, hot work, complex lifting, or several parties sharing a space. If every trivial task requires a permit, people invent shortcuts. If truly high-risk work skips the permit, the process is decoration.

Think of the permit as a temporary contract between the issuer and the people doing the work: conditions of entry, conditions of stay, and conditions of exit.

When Teams Typically Use a Permit

• Hot work such as welding, cutting, or grinding
• Confined space entry
• Work at height beyond routine thresholds set by your organisation
• Electrical isolation or controlled live work where allowed
• Excavation, lifting, or lock-out / tag-out jobs
• Simultaneous operations that create shared risk
• Work on process equipment where residual energy remains

Exact trigger lists vary by organisation and local rules. Write yours down so supervisors are not inventing thresholds under production pressure. Review the list after incidents, near misses, and audits of real jobs.

Core Process Steps

1. Request. Describe the work, location, timing window, people and companies involved, and interfaces with other activities.
2. Link planning. Reference the risk assessment, method steps, drawings, and isolation plan as required by your rules.
3. Prepare the area. Complete isolations, gas tests, fire watch arrangements, barriers, and rescue provisions before authorisation.
4. Authorise. A competent issuer verifies conditions; the receiver accepts responsibility for controls during the validity period.
5. Brief and display. Cover hazards, controls, stop-work, and emergency actions. Keep the permit available at the worksite.
6. Monitor. Stop if conditions change. Re-issue or revalidate if scope, weather, crew, or isolations drift.
7. Suspend or cancel when needed — never leave a stale authorisation looking live.
8. Close out. Confirm work complete or safely paused, isolations restored as planned, housekeeping done, signatures and times recorded, lessons noted.

Roles That Must Be Clear

Worked Scenario: Hot Work Near Operations

A maintenance crew needs to grind a bracket near a production line. Without PTW, people rely on “we will be careful.” With PTW, the request forces questions: combustibles, spark travel, extinguishers, fire watch duration after work, isolation of nearby equipment, and whether production must pause.

The issuer walks the area, rejects a vague “afternoon” window, sets a two-hour validity, requires removal of packaging within a defined radius, and assigns a fire watch for a hold time after grinding stops. When the job runs long, the crew stops and revalidates rather than stretching a dead permit.

Close-out includes a final look for smouldering material and confirmation that barriers are removed only when safe. The form can stay short; the discipline is the point.

Suspension, Expiry, and Scope Creep

Most permit failures are ordinary. Validity expires and work continues. Scope creeps from “replace gasket” to “also cut a new hole.” A second contractor arrives and never hears the brief. Night shift inherits a permit they did not walk.

Build hard habits: stop at expiry; treat scope change as a new authorisation; re-brief after crew change; and make suspending a permit a normal professional act, not an admission of defeat.

Questions That Expose Weak Permit Control

Before you treat the process as “done,” walk these questions with the people who will live with the result:

• Who walked the job with the issuer?
• What happens at the exact expiry time?
• How do we stop work if gas tests drift or weather turns?
• Who can suspend this permit without calling a director?
• What does close-out look like for isolations and housekeeping?
• If the crew changes at shift handover, what must be repeated?

Going Deeper in Practice

Map your top five high-risk job types and confirm each has a clear permit path, not a generic form that fits nothing well. Train issuers on field verification, not only form completion. Pair new issuers with experienced ones on live jobs before they authorise alone.

Integrate PTW with contractor control: no high-risk contractor work without the same gates employees use. Integrate with emergency readiness: rescue plans for confined space and hot work must be more than a phone number on a page.

When production pressure rises, leaders should ask which permits were suspended today — and thank people who stopped work for the right reasons. Culture shows up at the permit desk.

Failure Patterns to Watch

• Office-signed permits without site walks
• Controls listed but not verified
• Expired permits still “live” on the board
• Fire watch ending when sparks stop, not when hold time ends
• Close-out skipped overnight
• Unclear issuer competence
• Scope creep without re-brief
• Punishing stop-work decisions

What Good Looks Like After 90 Days

People can explain the process without reading a slogan poster. Records match reality. Actions close on time more often than they slip. Leaders sample quality, not only quantity. Near misses and changes reopen the right documents instead of creating orphan notes.

New supervisors receive a practical walkthrough within their first weeks. Contractors hear the same expectations as employees for the work they share. Stop-work and escalation routes are used without career punishment for good-faith calls.

Designing Permit Types Without Chaos

Too many permit templates create confusion; too few force every job into a blunt instrument. Start from your actual high-risk work types and design the minimum set that covers them. Each type should have clear entry criteria, mandatory checks, and close-out steps.

Train issuers on the differences between types using real site photos and near-miss stories. A classroom slideshow without field coaching rarely produces confident authorisation decisions.

Retire unused templates. If a form has not been used in a year and is not required for a credible scenario, it is clutter that slows people down in a crisis.

Interfaces and Simultaneous Operations

Permits break at interfaces: two crews, one energy source; maintenance and production sharing a line; a contractor hot work permit beside a live process. Map simultaneous operations explicitly on the permit or an attached board so everyone sees conflicts.

Require cross-briefing when permits overlap in space or energy. The second crew must know what the first crew isolated and what would injure them if restored early.

End-of-day boards should show live permits at a glance. If only a filing drawer knows what is live, night shift inherits invisible risk.

Measuring PTW Health

Count more than permits issued. Sample how many required a site walk, how many were revalidated, how many expired before close-out, and how often stop-work was used. Celebrate clean suspensions when conditions changed.

Interview receivers quarterly: Do issuers rush? Are controls real? Is close-out respected? Perception gaps predict the next incident more accurately than perfect filing scores.

When production leaders understand that strong PTW protects uptime by preventing catastrophic stops, they stop treating permits as optional friction.