Most permit-to-work audits focus on paperwork, completed permits, signatures, validity periods, training records. Those checks are necessary. They do not surface operational weaknesses.
Serious incidents happen on sites where permit documentation looks compliant. Documentation reviews confirm whether procedures exist, not how the system behaves under real working conditions.
This checklist covers the six areas where permit systems most commonly break down.
It assumes a basic understanding of how permit systems operate. If needed, see The Permit-to-Work Guide: Managing High-Hazard Control of Work (2026).
1. Permit Issuer Behaviour
Permit issuers are the gatekeepers of the system. Weak issuing practices are one of the most common causes of permit failures.
Check:
- Are issuers actively challenging routine work, or has familiarity removed the challenge?
- Is the job scope properly understood before the permit is issued?
- Are hazards discussed directly with the workforce?
- Is the permit issued near the worksite where conditions can actually be verified?
Warning signs:
- permits issued quickly with minimal discussion
- identical permits repeated for routine tasks without review
- hazards copied from previous work rather than assessed for the current job
2. Isolation and Energy Control
Isolation failures are involved in a significant proportion of serious permit-related incidents. Most of them do not show up in paperwork reviews. They show up at the worksite. The interaction between isolation control and permit systems is examined in Lockout Tagout and Permit-to-Work: Where Isolation Control Fails.
Check:
- Are isolations physically verified rather thanassumed?
- Are isolation points are clearly identified?
- Are lockout devices applied consistently?
- Is responsibility for isolation verification clearly assigned?
Warning signs:
- isolations assumed from previous work
- reliance on control systems or interlocks instead of physical isolation
- unclear ownership of verification
Isolation control has to be checked in the field. Paperwork alone will not tell you what is actually isolated.
3. Permit Scope and Job Definition
A permit should clearly describe the work being authorised. Vague scopes create room for assumptions.
Check:
- Is the job scope is specific and clearly defined?
- Do hazards relate directly to the actual work activity?
- Does the workforce understands the conditions of the permit?
Warning signs:
- broad or generic descriptions
- permits covering multiple unrelated activities
- controls that don’t reflect what is actually being done
If the scope is unclear, the permit cannot effectively control the work.
4. Simultaneous Operations (SIMOPS)
A permit normally assesses hazards within a single job. Risks often emerge between permits, particularly during simultaneous operations. The coordination failures this creates are examined in SIMOPS and Permit-to-Work: Managing Overlapping Risks in High-Hazard Operations.
Check:
- Are active permits visible across the site?
- Is high-risk work coordinated with nearby activities?
- Are interactions between permits reviewed before issuing?
Warning signs:
- lifting operations near hot work
- confined space entry alongside process work
- permits issued without awareness of what else is happening nearby
5. Shift Handover
Permit systems degrade at shift change. Permits get transferred, but the reasoning behind them often does not.
Check:
- Are active permits discussed during handover, not just listed?
- Are isolations clearly communicated between shifts?
- Is responsibility for ongoing work explicitly transferred?
Warning signs:
- confusion about which permits remain active
- incomplete briefings at shift change
- permits continuing without clear ownership
When the intent behind a permit is lost at handover, the permit becomes a piece of paper rather than a control.
6. Permit Closure and Restart
Restart and return to service are frequently treated as administrative steps. They are not. Restart represents one of the highest-risk phases of permit control. This is examined further in Restart Is the Most Dangerous Phase of a Permit System.
Check:
- Is equipment inspected before restart?
- Are isolations are removed in a controlled sequence?
- Are permits closed only after physical verification, not remotely or as a formality?
Warning signs:
- permits closed without a site visit
- restart rushed under production pressure
- incomplete checks before re-energisation
When a Checklist Isn’t Enough
This checklist identifies where to look. How to look, examining permits under live working conditions rather than in documentation reviews, is covered in How to Audit a Permit-to-Work System: The Operational Approach.
The 3-minute Permit System Pressure Test highlights where permit controls weaken under operational pressure.
Key concepts are summarised in the Permit-to-Work Reference Guide.
A Structured Permit System Diagnostic
The Permit System Diagnostic Toolkit provides a structured way to examine each of these areas under real operational conditions, not as a paperwork exercise.
Permit systems rarely fail because paperwork is missing. They fail because pressure quietly changes how the system gets applied.
Assessing Permit Systems in Practice
For organisations that want a structured assessment of how their system performs in practice, see Permit-to-Work System Review (Northshore Safety Services).