Permit-to-Work Reference Guide

The standard used to determine whether residual risk is acceptable after control measures have been applied. ALARP does not mean “do everything possible” — it means the effort required to reduce risk further would be grossly disproportionate to the benefit gained. In PTW terms, it governs decisions about whether compensating controls are sufficient when isolation to the minimum standard cannot be achieved. The common misapplication is treating ALARP as a justification for tolerating risk without documenting why further reduction is impracticable. See: ALARP and PTW

The person with operational responsibility for a defined plant area or system. The area authority authorises work to proceed within their area, confirms that isolations are in place, and is responsible for ensuring the area is safe for the permitted work. Often also the permit issuer — though in larger operations, these roles may be separate. The area authority’s signature is the point at which operational ownership of the hazard is formally declared.

A supporting document, separate from the permit itself, that records the specific isolation points applied to a piece of equipment or system. It identifies each isolation point, who applied it, and what verification was carried out. The permit cannot be issued until the certificate of isolation is complete. At reinstatement, the certificate is the reference for confirming that all isolations have been removed — missing or ambiguous certificates are a common cause of partial reinstatement errors. See: LOTO and PTW

Work that does not introduce an ignition source into the work area, as distinct from hot work. Cold work permits typically have fewer pre-conditions than hot work permits but still require isolation verification, hazard assessment, and defined control measures. The risk with cold work classification is misclassification — activities that introduce incidental ignition sources (power tools, impact, friction) being permitted under cold work conditions. Classification should be based on what could happen, not what is planned.

In UK health and safety law (MHSWR 1999), a person with sufficient training and experience to recognise and control the risks associated with a particular activity. In PTW systems, competency is required for permit issuers, area authorities, and workers carrying out permitted tasks. The problem in practice: competency is often defined as “has attended training” rather than “can demonstrate the necessary knowledge and judgement”. Training records do not equal competence. See: Roles and Responsibilities

A place that is substantially enclosed, where serious injury can occur from hazardous substances or conditions within it, including lack of oxygen, toxic gases, fumes, free-flowing solids, or temperature extremes. The legal definition under the Confined Spaces Regulations 1997 is based on the nature of the risk inside the space, not its physical dimensions. Many spaces that look confined are not regulated; some spaces that look open do qualify. Classification should be confirmed through risk assessment, not appearance. See: Confined Space Entry and PTW

The process of removing all forms of hazardous energy from a system before maintenance or work begins. Energy sources include electrical, mechanical, hydraulic, pneumatic, thermal, chemical, and gravitational. Isolation is not complete until each energy source has been identified, isolated, and verified as de-energised — not just switched off. The verification step (proving the isolation has held) is where most isolation failures occur. See: LOTO and PTW

Any work activity that introduces or has the potential to introduce an ignition source into an area. Includes welding, cutting, grinding, brazing, and any use of open flame or equipment that generates heat or sparks. Hot work permits require pre-work atmosphere verification, defined safe working zones, active fire watch during and after work, and specific permit closure conditions. The fire watch obligation extends beyond the end of the task — most post-hot-work fires ignite after the worker has left. See: Hot Work and PTW

The person with the authority to issue a permit for a specific type of work within a defined area. The issuing authority is responsible for confirming that the preconditions for safe work are met before issuing — not simply countersigning what the requesting party has prepared. The most common systemic failure: issuing authority becomes a rubber stamp when permit volumes are high or when the role holder is under time pressure. When that happens, the permit stops being a control and becomes a record. See: Roles and Responsibilities

A specific energy control procedure in which isolation devices are physically locked in the safe (de-energised) position, and each worker places their own lock and personal tag on the device. The lock cannot be removed by anyone other than the person who placed it, ensuring that equipment cannot be re-energised while any worker is still exposed. LOTO is the execution method for energy isolation; the permit provides the authorisation framework within which LOTO takes place. Tagout (no lock, tag only) is permitted only where the isolation point does not accommodate a lock — and is significantly less secure. See: LOTO and PTW

The termination of a permit where work will not recommence. Cancellation requires that all workers are accounted for, all tools and materials removed, the area made safe, and all isolations confirmed as either removed (if reinstatement is complete) or formally handed over if isolations are to remain. Cancellation is different from permit suspension — cancellation means the permit is closed and cannot be resumed. A new permit is required if work is to recommence. Cancellations that leave isolations in place without formal handover are a significant accident pathway.

A temporary hold placed on active permitted work where conditions require work to stop but the permit is intended to continue later — typically during a shift change, an emergency, or a change in plant conditions. A suspended permit cannot be resumed without formal sign-back. The key control: the suspended permit must clearly record the state of the work area, the status of all isolations, and what verification is required before work restarts. Verbal handover of a suspended permit is the failure mode most commonly identified in incident investigations. See: Shift Handover in PTW

A formal documented system used to manage high-hazard work activities where standard operating procedures are insufficient to control risk. A permit is not a risk assessment — it is the authorisation that confirms a risk assessment has been carried out, controls are in place, and a competent person has confirmed the area is safe for the specific work to begin. The permit defines the work scope, the people authorised to carry it out, the preconditions, and the actions required on completion. Without an embedded verification culture, a PTW system can function as a paperwork exercise while providing little actual control. See: The PTW Guide

The process of returning plant, equipment, or a system to its operational state following permitted work. Reinstatement requires confirmation that all work is complete, all workers are accounted for, all tools and materials are removed, and all isolations have been removed and verified. It is formally signed off before operations resumes control. Reinstatement is consistently one of the highest-risk phases of permitted work — the pressure to return plant to service can compromise the verification steps. See: Plant Restart and PTW

A formal procedure that results from a systematic examination of a task to identify all the hazards and define methods to eliminate or minimise risk. Under HSWA 1974 s.2(2)(a), employers have a duty to provide and maintain safe systems of work. A permit-to-work system is one type of safe system of work, used when the hazards are such that a less formal approach is insufficient. A safe system of work is not just a written procedure — it requires that the procedure is followed in practice, monitored, and updated when conditions change.

Situations where two or more work activities are occurring concurrently in the same area or on connected systems, creating interaction risks that would not exist if each activity were considered in isolation. SIMOPS risk is not visible within any single permit — it exists between them. It requires a coordination layer above individual permit issuers: someone with visibility of all active work who can identify conflicts and impose sequencing or separation controls. Most PTW systems deal poorly with SIMOPS because individual permit issuers are not expected or equipped to see across the whole operation. See: SIMOPS and PTW

A brief, task-specific safety briefing given to workers before they start permitted work. The toolbox talk is the point at which permit conditions are explained verbally, workers confirm understanding, and questions are raised. It is a required step in most PTW systems — not an optional briefing. In practice, toolbox talks are the step most commonly compressed under time pressure. A signed attendance sheet without a genuine conversation does not provide the control the toolbox talk is meant to deliver.

The person stationed outside a confined space entry point throughout the duration of an entry. The topman maintains communication with the entrants, monitors conditions, raises the alarm in an emergency, and initiates rescue without entering the space themselves. The topman must remain at their post for the duration of the entry — leaving the post while entrants are inside is a permit violation regardless of the reason. The topman’s presence is not a formality: they are the primary emergency control for the entrant. See: Confined Space Entry and PTW

The categorisation of areas where explosive or flammable atmospheres may be present, based on the likelihood and duration of the atmosphere occurring. Under DSEAR, zones are classified as Zone 0 (continuous), Zone 1 (likely), or Zone 2 (not likely in normal operation but possible). Zone classification determines what equipment and activities are permitted within an area — and directly informs the conditions that must appear on a hot work permit. Work in or adjacent to classified zones requires atmosphere verification before any ignition source is introduced. See: Hot Work and PTW