Permit to Work Systems: A Practical Guide for Construction and Oil & Gas Sites
A permit to work (PTW) is a formal authorisation for a defined task, at a defined location, within stated conditions and a specified period. It connects the work team with the people controlling the area and equipment. A signed permit does not replace risk assessment or prove that the precautions are working.
This guide helps construction supervisors, maintenance teams and HSE professionals understand what a permit system should communicate, who owns each decision, and what happens when work changes or crosses a shift. It includes practical review questions and an original example of conflicting work activities.
Scope: This is an educational overview of permit management, drawing on published UK Health and Safety Executive guidance. It is not a site operating procedure or a statement of Pakistani law. Apply the relevant local requirements and the employer’s approved system. Specialist work needs competent assessment and task-specific procedures.
Key takeaways
Define the job precisely. A permit should make it clear which equipment and activity are covered, rather than offering general permission to work in an area.
Connect people and documents. The permit, risk assessment, work method and supporting certificates should describe the same task.
Separate authorisation from verification. A signature records a decision; the supporting evidence must show what was checked.
Manage the whole job. Handover, interrupted work and return of equipment to operations need as much attention as initial issue.
What is a permit-to-work system?
The HSE’s permit-to-work overview describes a documented process for authorising specified people to perform particular work during a stated period. The precautions come from the risk assessment; the method statement can explain how the activity will be carried out.
Think of the permit as the job’s authorisation record, not the entire safety system. If the task is described one way in the risk assessment and another way on the permit, the team has two different versions of the job. Resolve that mismatch before relying on either document.
Document or process | Main question it answers |
|---|---|
Risk assessment | What could cause harm, and what controls are needed? |
Method statement or work instruction | How is this particular task intended to be performed? |
Permit to work | Who has authorised this defined work, under which conditions and for what period? |
Supporting certificate or record | What specialist preparation or verification supports that authorisation? |
For the assessment stage, see our practical guide to the 5×5 risk assessment matrix. The risk score helps prioritise action; it is not a substitute for a required permit or a missing safeguard.
Which activities may need a permit?
The HSE’s human factors guidance on PTW identifies examples such as hot work, vessel entry, breaking into hazardous pipework and activities needing electrical or mechanical isolation. The organisation’s procedure determines the applicable permit categories and interfaces.
Names and colours vary between sites. Do not assume that a green form means the same thing at two different employers. Check the written scope of the permit category and any supporting authorisations.
Common category | What the supervisor needs clarified |
|---|---|
Hot work | Which heat-, spark- or flame-producing activity is proposed, and what fire precautions apply? |
Confined-space entry | Which space and entry task are covered, and where are the specialist entry and emergency arrangements defined? |
Intrusive maintenance or line opening | Which equipment boundary is involved, and which preparation and isolation records support the work? |
Electrical or mechanical work | Which authorised people and specialist procedures govern the activity? |
Excavation or other site-controlled work | What additional authorisations are required under this site’s system? |
This is a list of discussion prompts, not a universal permit register or a complete control checklist. A task can involve several hazards without fitting neatly into one category.
Why a hot-work signature is not enough
The HSE’s construction process-fire guidance explains that heat, sparks and flames can start fires and that a permit system can help manage the risk on larger projects. The permit must connect to actual fire precautions, including consideration of combustible materials and affected areas.
For example, “welding near the service corridor” leaves important questions unanswered. Does the work affect occupied rooms on the other side? Can sparks reach another level? Who controls the adjoining area? A task-specific assessment must resolve those questions; the form’s category cannot answer them.
Who is responsible for a permit?
Use the role names in the approved site procedure. The table below is an editorial way to distinguish decisions, not a prescription that every organisation must use these job titles.
Function | Decision to make explicit |
|---|---|
Area or operations control | How does the proposed task affect the equipment, area and other work? |
Permit issuer or authoriser | Have the requirements for issuing this permit been satisfied? |
Performing authority or work supervisor | Does the team understand the scope, limits and conditions it has accepted? |
Specialist verification function | What preparation, testing or isolation has been verified within that person’s competence and authority? |
People doing the work | Does the actual activity remain within the agreed conditions, and how are concerns reported? |
The HSE’s technical measures document highlights authorisation, competence, supervision and communication failures as important issues. It also stresses the connection between maintenance work and the people operating the plant.
A practical test is to ask two people separately who can approve a scope change. If they give different answers, clarify the authority before the change occurs. An HSE job title alone should not be treated as evidence that someone has been appointed to every permit function.
What should the work pack make clear?
Review the permit and its referenced documents together. The following questions are a SIP editorial completeness check, not a replacement permit template:
Identity: can someone locate the exact asset, work area and job reference without guessing?
Boundary: what is included, what is excluded, and which changes require another decision?
Conditions: where are the relevant precautions and supporting verification recorded?
People: who issued and accepted the work, and who owns specialist checks?
Time: what period is authorised, and what is the process if it is exceeded?
Interfaces: which other jobs, teams or operating activities could affect this one?
Status: how can the next person distinguish active, suspended, completed and closed work?
A useful document test is whether the incoming supervisor can reconstruct the job from the record and a field discussion. A form that depends on the original issuer’s memory is fragile, even when every box contains a tick.
From issue to close-out: keep the status visible
HSE publication HSG250, Guidance on permit-to-work systems, remains linked from the HSE’s current PTW guidance; its first edition dates from 2005. It describes suspension, interacting permits, handover and hand-back as essential parts of the system.
Under that guidance, interrupted work needs a recorded status and a clear account of the condition in which equipment was left. Restart requires the responsible issuing authority to verify the situation and revalidate the permit or issue another one. Suspension must not be mistaken for equipment being available for normal service.
The following review stages help a supervisor identify missing decisions. They are management checkpoints, not technical instructions for undertaking the hazardous task:
Before issue: establish one agreed scope and identify the necessary supporting approvals.
At acceptance: confirm that the team and the authorising function are discussing the same equipment, activity and limits.
During work: keep the permit status consistent with what is happening at the worksite.
At interruption or change: record the actual position and route the decision through the approved process.
At hand-back: distinguish the work team’s completion statement from operations’ acceptance of the equipment.
Isolation needs its own technical assurance
An isolation reference on a permit is not evidence that an isolation has been correctly designed, applied or verified. The HSE’s HSG253 isolation guidance addresses process isolation standards and prevention of hazardous releases during intrusive work.
For electrical equipment, the HSE’s electrical safety FAQs also emphasise secure isolation, stored energy and competent verification. This article does not specify an isolation method. That requires the appropriate technical procedure and authorised personnel.
At close-out, do not infer that one completed job releases equipment for use when another activity still depends on an isolation. HSG250 calls for coordination of linked permits and shared isolations, followed by formal hand-back to the responsible operational function.
Worked example: two acceptable-looking jobs that conflict
Original teaching scenario: a construction contractor plans grinding at a pipe-support location. Another team plans nearby work that may release a flammable substance. Each supervisor initially reviews only their own task.
The permit coordinator’s useful contribution is to bring those plans together. A completed risk assessment for each job does not show that the combined activity has been evaluated. The question is whether one task changes the conditions assumed by the other.
Review question | Why it matters in this scenario |
|---|---|
Do both teams identify the same physical area? | Different work-area names can hide that the jobs are adjacent. |
Who sees both schedules? | Separate contractor plans can omit the combined exposure. |
Who decides whether the jobs can overlap? | The decision needs an identified authority, not an assumption by each team. |
How will a changed start time be communicated? | A safe planning assumption can become invalid later in the shift. |
The example does not establish a safe distance, testing limit or protective arrangement. Those require competent assessment. Its lesson is organisational: record the interface and resolve the conflict through the site’s process before authorisation. HSG250 discusses this problem as permit interaction.
Shift handover: transfer understanding, not just paperwork
The HSE’s handover guidance describes preparation by the outgoing team, two-way exchange and cross-checking by incoming personnel. It recommends combining verbal and written communication and giving the exchange enough time.
For permit-controlled work, make the discussion specific:
Job status: what was actually completed, and what remains?
Equipment condition: what is unavailable, incomplete or subject to restrictions?
Related work: what other permits or operational activities affect the task?
Next decision: who must check or authorise continuation under the site procedure?
“Same as yesterday” is not a useful handover record. “The replacement component has not arrived; the job remains suspended and the equipment remains unavailable under the recorded restrictions” tells the next team what they need to investigate and confirm.
Common weaknesses to look for during a PTW review
Use these original diagnostic questions when discussing the system with users. A “yes” identifies something to investigate, not proof that a particular incident will occur:
Copy-forward scope: does today’s permit contain yesterday’s equipment reference or task description?
Unclear ownership: do people disagree about who can authorise changes?
Invisible work: can operations see a suspended job as easily as an active one?
Paper-only evidence: can the team explain the check behind a tick or signature?
Shift-start pressure: are people rushing the discussion because every permit arrives at once?
Unrecorded changes: has the work method, location or team changed without the record catching up?
Does an electronic permit system solve these problems?
Software can make status and related records easier to find, but it does not verify a worksite by itself. The HSE’s PTW human factors guidance advises assessing the move from paper to electronic permits and training people in the permit process as well as the interface.
When reviewing a proposed system, ask a user to find an interrupted job, identify its linked documents and explain who can change its status. Test the actual workflow rather than judging the system by an attractive dashboard.
Frequently asked questions
No universal list applies to every workplace. The HSE distinguishes ordinary activities managed by instructions or procedures from work needing additional formal control. Follow the relevant site rules and task assessment.
Do not assume a standard duration from a previous employer. Read the period and conditions on the permit and the site’s rules for expiry, shift change and revalidation. An unexpired form does not justify work after its conditions have changed.
That depends on the responsibilities, authorisations and safeguards defined by the organisation. This guide does not grant someone either role. Ask the site authority how duties and any required independence are established.
No. HSG250 distinguishes interrupted work from cancellation and hand-back. Equipment may remain restricted while a job is suspended. Verify the actual status and follow the approved process before any restart or operational use.
No. It explains management principles and review questions. A usable site procedure or form needs competent development for the actual hazards, equipment, people and applicable requirements.
A practical test for your next permit discussion
Ask the issuer, work supervisor and area controller to describe the same job independently. Can each identify its boundary, its current status, its links to other work and the next decision needed? Differences between their answers are more useful than a perfect-looking stack of forms.
Start with the task’s risks, connect the authorisation to evidence, and leave a record the next team can understand.
Sources and further reading
HSG250: Guidance on permit-to-work systems, first edition 2005.
HSG253: The safe isolation of plant and equipment, second edition 2006.
Sources checked 4 November 2026. The practical questions and teaching scenario are SIP editorial material. This overview does not provide technical authorisation for hazardous work.
Categories :
