Most permit-to-work audits focus on paperwork. Completed permits, signatures, validity periods, training records.
Those checks are necessary. They don’t surface the operational weaknesses.
Serious incidents happen on sites where permit documentation looks compliant, because documentation reviews check whether procedures exist, not how the system behaves under real working conditions.
This checklist covers the areas where permit systems most commonly break down.
This checklist assumes a basic understanding of how permit systems operate. If needed, see Permit-to-Work System Explained.
1. Permit Issuer Behaviour
Permit issuers are the gatekeepers of the system. Weak issuing practices are one of the most common causes of permit failures.
Check:
- Are issuers actively challenging routine work, or has familiarity removed the challenge?
- Is the job scope properly understood before the permit is issued?
- Are hazards discussed directly with the workforce?
- Is the permit issued near the worksite where conditions can actually be verified?
Warning signs:
- permits issued quickly with minimal discussion
- identical permits repeated for routine tasks
- hazards copied from previous work rather than reviewed
2. Isolation and Energy Control
Isolation failures are involved in a significant proportion of serious permit-related incidents, and most of them don’t show up in paperwork reviews. They show up at the worksite. See Lockout Tagout (LOTO) and Permit-to-Work: Where Isolation Control Actually Fails.
Check:
- Are isolations physically verified, not assumed?
- Are isolation points are clearly identified?
- Are lock-out devices are applied consistently?
- Is responsibility for isolation verification is clearly assigned?
Warning signs:
- isolations assumed from previous work
- reliance on control systems or interlocks instead of physical isolation
- unclear ownership of verification
Isolation control has to be checked in the field. Paperwork alone will not tell you what is actually isolated.
3. Permit Scope and Job Definition
A permit should clearly describe the work being authorised. Vague scopes create room for assumptions.
Check:
- Is the job scope is specific and clearly defined?
- Do hazards relate directly to the actual work activity?
- Does the workforce understands the conditions of the permit?
Warning signs:
- broad or generic descriptions
- permits covering multiple unrelated activities
- controls that don’t reflect what is actually being done
If the scope is unclear, the permit cannot effectively control the work.
4. Simultaneous Operations (SIMOPS)
A permit normally assesses hazards within a single job. But risks often emerge between permits, particularly during simultaneous operations. See SIMOPs and Permit-to-Work: Where Work Coordination Fails.
Check:
- Are active permits visible across the site?
- Is high-risk work coordinated with nearby activities?
- Are interactions between permits reviewed before issuing?
Warning signs:
- lifting operations near hot work
- confined space entry alongside process work
- permits issued without awareness of what else is happening nearby
5. Shift Handover
Permit systems degrade at shift change. Permits get transferred, but the reasoning behind them often does not.
Check:
- Are active permits are discussed during handover, not just listed?
- isolations are clearly communicated between shifts
- Are responsibility for ongoing work is explicitly transferred?
Warning signs:
- confusion about which permits remain active
- incomplete briefings
- permits continuing without clear ownership
When the intent behind a permit is lost, the permit becomes a piece of paper rather than a control.
6. Permit Closure and Restart
Restart and return to service are frequently treated as administrative steps. They are not, they represent one of the highest-risk phases of permit control.
Check:
- Is equipment is inspected before restart?
- Are isolations are removed in a controlled sequence?
- Are permits are closed only after verification, not remotely or as a formality?
Warning signs:
- permits closed without a site visit
- restart rushed under production pressure
- incomplete checks before re-energisation
This area is explored further in Restart Is the Most Dangerous Phase of a Permit System.
When a Checklist Isn’t Enough
This checklist identifies where to look. How to look, examining permits under live working conditions rather than in documentation reviews, is covered in How to Audit a Permit-to-Work System which examines how permits function during live work activities rather than just documentation reviews.
The 3-minute Permit System Pressure Test highlights where permit controls weaken under operational pressure.
Key concepts are summarised in the Permit-to-Work Reference Guide.
A Structured Permit System Diagnostic
The Permit System Diagnostic Toolkit gives you a structured way to examine each of these areas under real operational conditions, not as a paperwork exercise.
→ View the Permit System Diagnostic Toolkit
Permit systems rarely fail because paperwork is missing. They fail because pressure quietly changes how the system gets applied.
Moving Beyond Checklists
This checklist highlights areas to review. For a structured assessment of how your system performs in practice, see Permit-to-Work System Review (Northshore Safety Services).