The Permit Was Signed. But Was the Job Actually Safe?

It is 9:10 in the morning. Production reports a leak from a process pump and wants maintenance to attend immediately.

The maintenance supervisor raises a work order. A fitter is available. The spare seal is in stores. Everyone wants the pump back before the next batch starts.

From the office, it looks like a straightforward repair.

But when the maintenance team reaches the area, the situation is different.

The pump is connected to a live process line. Pressure may still be trapped inside the casing. The motor has an electrical supply. The surrounding area has restricted access. A contractor will help open the coupling guard. Another team is working on a nearby pipeline.

Now the real question is not:

“Has the maintenance job been approved?”

The real question is:

“Has this job been made safe to start?”

That is the purpose of a Permit to Work.

A signed permit is important, but the signature alone does not control the hazard. The safety comes from defining the job correctly, identifying the risks, isolating the equipment, verifying the conditions, communicating with everyone involved, controlling changes, and handing the plant back safely.

What is a Permit to Work?

A Permit to Work, often called a PTW or safety permit, is a formal authorization to perform a specific job under clearly defined conditions.

It should answer practical questions such as:

• What work is being performed?

• Where will the work happen?

• Which equipment, asset, or area is involved?

• Who will perform and supervise the work?

• What hazards are present?

• Which precautions are required?

• What must be isolated?

• Which readings or inspections are required?

• When can the work start?

• When does the permit expire?

• Who approved the work?

• How will the area or equipment be returned to service?

A permit is not simply another form for the maintenance file. It is the agreement between operations, maintenance, safety, contractors, and other affected teams about how the job will be controlled.

It is also not a replacement for a risk assessment, job safety analysis, standard operating procedure, or lockout/tagout process. It brings these controls together for the specific job taking place at that time.

A work order and a safety permit are not the same thing

This distinction is crucial.

A maintenance work order authorizes and tracks the maintenance activity. It may contain:

• The reported problem

• The asset or location

• Work priority

• Assigned technicians

• Planned date and time

• Required parts

• Work instructions

• Photos and completion notes

• Labor and downtime records

The Permit to Work controls whether that job can be performed safely under the current plant conditions.

Think of it this way:

The work order explains what maintenance must do. The safety permit defines the conditions under which the team is allowed to do it.

A pump-repair work order may remain open for two days because the team is waiting for a spare. The safety permit may be valid only from 10:00 AM to 4:00 PM on the first day.

A work order may be approved, assigned, and planned. That does not automatically mean the technician can start work.

The system should prevent the job from moving into execution when the required permit is missing, awaiting approval, suspended, rejected, or expired.

Start with the exact job—not a generic description

A weak permit begins with a vague scope:

“Pump maintenance.”

That description is not enough.

Is the team inspecting the pump? Replacing a seal? Removing the motor? Opening the casing? Disconnecting the suction line? Welding the base frame?

Each activity introduces different hazards and may require different controls.

A useful permit scope could say:

“Isolate process pump P-204, disconnect electrical supply, drain and depressurize the casing, remove the coupling guard, replace the mechanical seal, reassemble, test for leakage, and hand the pump back to operations.”

The scope should identify the correct equipment and location. Connecting the permit to a structured asset record and maintenance history reduces confusion when similar pumps, motors, panels, valves, or production lines exist in the same area.

If the job scope changes, stop and review the permit.

A permit approved for replacing a coupling guard should not quietly become authorization to open a process line. The new activity may introduce pressure, chemical exposure, gas testing, additional isolation, or another permit type.

Select the right permit type

Plants normally use different permit types for different categories of controlled work. The exact names and requirements vary by site, industry, and local regulation.

Common examples include:

• Hot work permit

• Cold work or general maintenance permit

• Electrical work permit

• Electrical isolation permit

• Confined space entry permit

• Working at height permit

• Line breaking permit

• Excavation permit

• Lifting permit

• Chemical handling permit

One maintenance job may require more than one permit.

For example, welding inside a vessel may involve:

• A confined space entry permit

• A hot work permit

• Electrical isolation

• Mechanical or process isolation

• Gas testing

• Fire watch requirements

• Rescue arrangements

The team should be able to see that these permits are related. Closing one permit should not accidentally suggest that the entire job is safe to continue when another required permit has expired or been suspended.

Walk to the job before approving it

This is where a paper process often becomes a signature process.

The permit is prepared in one office. The maintenance supervisor signs it. Operations signs it. The safety officer signs it. The contractor takes the paper to the worksite.

But who physically checked the area?

The person authorizing the permit should understand the actual job conditions. Depending on the work, the review may need to confirm:

• Correct asset and location

• Nearby production activity

• Access and escape routes

• Moving machinery

• Electrical hazards

• Pressure, steam, chemicals, or stored energy

• Flammable or toxic atmosphere

• Work above or below the area

• Vehicle movement

• Weather exposure

• Barricading requirements

• Fire protection

• Emergency arrangements

• Simultaneous work nearby

This does not mean every approval stage must repeat the same inspection. It means the workflow must clearly assign responsibility.

One person verifies isolation. Another confirms the area is released. Another may review safety controls. The permit should show who checked what instead of collecting several signatures with no clear accountability.

Isolation must be specific and verifiable

“Pump isolated” is not a useful isolation record.

The team needs to know:

• Which electrical source was disconnected?

• Which breaker or isolator was locked?

• Which valves were closed?

• Were lines drained and depressurized?

• Was stored hydraulic, pneumatic, mechanical, thermal, or chemical energy released?

• Were blinds or spades required?

• Who applied each lock?

• Who verified the isolation?

• Was zero energy confirmed?

• What must happen before the isolation is removed?

For the leaking pump, the isolation plan may include:

1. Stop the pump from the approved control point.

2. Isolate the motor supply at the correct panel.

3. Apply the required lock and tag.

4. Close and secure suction and discharge valves.

5. Drain and depressurize the pump casing.

6. Verify that the equipment cannot start.

7. Confirm that no pressure or hazardous material remains.

8. Record who applied and verified each isolation.

The permit should link the isolation to the exact asset, line, panel, valve, or isolation point wherever practical.

A checkbox that says LOTO completed may be convenient, but it is weak evidence unless the record shows what was isolated and who verified it.

Record the checks that matter for this job

Permit forms often contain long lists of standard precautions. PPE, housekeeping, barricading, lighting, tools, fire extinguishers, and emergency access may all be important.

But the form should not bury the job-specific controls inside fifty routine checkboxes.

For the pump repair, the critical checks may be:

• Electrical isolation confirmed

• Process line isolated

• Pump drained

• Pressure released

• Chemical residue checked

• Correct PPE selected

• Spill-control material available

• Nearby work reviewed

• Area owner informed

• Test-run conditions agreed

For hot work, the record may require gas readings, fire watch details, removal of combustible material, and firefighting equipment.

For confined space entry, the permit may require atmospheric readings, an attendant, communication arrangements, entry controls, rescue readiness, and periodic monitoring.

Digital inspection and checklist workflows can help standardize these checks, but the checklist must still match the permit type and the actual job.

The goal is not to collect more ticks. The goal is to prevent a critical condition from being assumed, skipped, or forgotten.

Approval should confirm readiness—not just hierarchy

Many factories use approval stages such as:

1. Maintenance supervisor

2. Area owner or production manager

3. Safety or HSE reviewer

4. Plant manager for selected high-risk work

The workflow can vary by permit type, plant area, risk level, and operating condition.

The important question is not how many approvals exist.

The important questions are:

• Does each approver know what they are confirming?

• Can the approver review the current job details?

• Are mandatory checks completed before approval?

• Can an approver reject the request with a clear reason?

• Does a changed permit return to the correct approval stage?

• Is the approval timestamp recorded?

• Can work begin before all mandatory approvals are complete?

An approval chain with five names is not stronger than a chain with three names when everyone assumes somebody else inspected the job.

The permit should make responsibility visible.

The working team must accept the permit

Approval is not the final step before work.

The technician, contractor, operator, attendant, fire watch, and supervisor must understand the job boundaries and controls.

Before starting, the team should be able to answer:

• What exactly are we doing?

• Which equipment is isolated?

• What must not be touched?

• What PPE is required?

• Which conditions would make us stop?

• When does the permit expire?

• Who is supervising the work?

• What should happen during an emergency?

• Is any other team working nearby?

This discussion may be handled through a toolbox talk, pre-job briefing, or permit acceptance process.

The permit should be available where the work is happening. With a mobile maintenance workflow, technicians and supervisors can review the permit, related work order, checklist, photos, documents, and current status without repeatedly returning to an office.

Digital access does not replace the conversation. It helps ensure everyone is discussing the same current information.

Keep controlling the work after it starts

A permit is not something the team signs and forgets.

Conditions can change while the job is in progress.

Stop or suspend work when:

• The job scope changes

• A required isolation is disturbed

• Gas readings move outside the permitted conditions

• A leak, alarm, fire, or process upset occurs

• Weather conditions make the work unsafe

• Barricades or access controls are removed

• The responsible supervisor changes without handover

• The permit expires

• Another job creates a conflict

• The required attendant or fire watch leaves

• The worksite is no longer in the condition that was approved

The person doing the work must have the authority to stop. They should not feel pressured to continue because production is waiting or because several managers have already signed the permit.

A good permit process makes suspension clear. It also records why work stopped and what must be rechecked before it can resume.

Watch for simultaneous work

One permit may look safe when reviewed alone and become unsafe when another job starts nearby.

Consider these examples:

• Hot work begins near a chemical-transfer activity.

• A crane lifts equipment above technicians working below.

• One team opens a pipeline connected to equipment another team is repairing.

• Electrical testing begins while mechanical work is still in progress.

• Cleaning chemicals are introduced near a confined-space entry.

• Production restarts part of a line that maintenance believes is still isolated.

This is why the plant needs visibility of active permits by area, asset, time, contractor, and permit type.

The shift manager should not have to walk through several offices and read a stack of papers to understand who is working where.

A useful permit dashboard should answer:

• Which permits are awaiting approval?

• Which permits are approved but not started?

• Which permits are active now?

• Which permits will expire soon?

• Which permits are suspended?

• Which assets and areas are isolated?

• Which contractors are on controlled work?

• Which jobs overlap in the same area?

• Which permits remain open from the previous shift?

That visibility becomes increasingly important when the plant handles dozens—or even hundreds—of permits each day.

Do not extend a permit casually

It is 3:40 PM. The pump permit expires at 4:00 PM, but the old seal is difficult to remove. The fitter says the team needs another two hours.

The easy response is:

“Just extend the permit.”

But an extension is not only a new expiry time.

Before approving it, the responsible people should review:

• Is the job scope still the same?

• Are all isolations still intact?

• Have plant conditions changed?

• Is the same team continuing?

• Is another shift taking over?

• Are gas readings or other checks still valid?

• Is the area owner still able to keep the equipment unavailable?

• Has another permit started nearby?

• Are lighting, weather, access, or supervision still acceptable?

If the permit expires before the extension is approved, work should not continue in the gap.

The extension should record the requested duration, reason, review, approval, and new validity period. Plants may also define limits on the number or total duration of extensions before requiring a new permit.

Shift handover is a safety control

When work crosses a shift boundary, the outgoing team must not simply leave the permit on a desk.

The handover should explain:

• Work completed

• Work still pending

• Current equipment condition

• Active isolations and lock details

• People remaining in the area

• Open panels, lines, guards, or access points

• Tools and temporary equipment left at the site

• Latest readings or inspections

• Changed conditions

• Actions required before work resumes

• Permit validity and extension status

The incoming responsible person should acknowledge the handover and confirm whether the permit can continue, requires revalidation, or must be replaced.

This is especially important when operations, maintenance, contractors, and safety teams change at different times.

Maintenance complete does not mean the permit can be closed

At 5:20 PM, the fitter reports:

“Seal replaced. Job complete.”

That statement only confirms the mechanical task may be finished.

Before closing the permit, the team still needs to verify:

• All workers are clear of the equipment

• Tools and temporary materials are removed

• Guards, covers, and access panels are restored

• Flanges, drains, vents, and connections are secured

• Waste and chemical residue are cleared

• The work area is safe and clean

• Temporary barricades are removed or formally retained

• Isolation removal is authorized

• The equipment is ready for controlled testing

• Operations accepts the handback

• Any remaining defect or follow-up work is recorded

The work order may be completed after the repair details, parts used, findings, photos, labor, downtime, and follow-up actions are captured.

The permit should be closed only after the safety controls are cleared correctly and the asset or area has been formally handed back.

The related SOP, isolation procedure, drawing, or safety instruction should also be easy to retrieve through controlled maintenance document management, rather than depending on an old printed copy or a file forwarded through WhatsApp.

Why paper permits struggle in real factories

Paper can work when the process is disciplined, the number of permits is manageable, and everyone follows the same procedure.

The problem is what happens during a busy shift.

The safety officer is in another building. The plant manager is in a meeting. The area owner is on the shop floor. A contractor is waiting at the gate. Rain makes it difficult to carry documents between locations. Production keeps asking when the equipment will return.

Under pressure, shortcuts appear:

• Signatures are collected without a complete review.

• Work begins while one approval is still pending.

• Permit extensions are agreed verbally.

• Handwriting is difficult to read.

• Gas readings sit on a separate sheet.

• Isolation details are recorded in another register.

• The work order and permit have different job descriptions.

• Nobody has one view of all active permits.

• The next shift cannot see what remains open.

• Completed permits are filed but difficult to retrieve.

• Audit preparation becomes a search through cabinets, spreadsheets, emails, and photographs.

Digitalization should not merely reproduce the same paper form on a screen.

A practical Permit to Work software workflow should connect the permit to the work order, asset, location, permit type, hazards, precautions, isolation points, checks, approvals, validity, extensions, handovers, attachments, and close-out record.

The purpose is not to add another system. It is to make the actual state of controlled work visible.

What should a plant manager be able to see?

At any point during a shift, management should be able to answer:

• How many permits are awaiting approval?

• Where are the active permits?

• Which high-risk jobs are underway?

• Which equipment is isolated?

• Which permits are close to expiry?

• Which permits were extended?

• Which jobs are continuing into the next shift?

• Which contractors are working under active permits?

• Are conflicting jobs taking place in the same area?

• Which permit is linked to each work order?

• Who approved, accepted, suspended, extended, and closed each permit?

• Can the complete record be retrieved later?

This supports both daily control and audit-ready maintenance records.

The plant should not first discover during an incident review or audit that a permit was missing, expired, changed verbally, or closed without proper handback.

Questions to test your Permit to Work process

Walk through your current system and ask:

1. Can a maintenance job start before the required permit is approved?

2. Does the permit identify the exact asset and location?

3. Are the work order and permit scopes consistent?

4. Can one job have multiple related permit types?

5. Does the permit record specific isolation points?

6. Is isolation independently verified where required?

7. Are mandatory readings and checks time-stamped?

8. Can approvers see incomplete requirements before approving?

9. Does the working team formally accept the permit conditions?

10. Can anyone see all active permits in one plant area?

11. What happens automatically when a permit expires?

12. Can work continue while an extension is awaiting approval?

13. Is shift handover recorded?

14. Can a changed scope trigger reapproval?

15. Is equipment handback confirmed before closure?

16. Can the complete permit history be retrieved later?

17. Are users trained in the PTW process—not only in how to operate the software?

Any unclear answer is a control gap worth reviewing.

The permit should help the job move safely

A badly designed Permit to Work process creates two risks.

The first is obvious: unsafe work may begin without proper controls.

The second is operational: genuinely ready work is delayed because approvals, information, checks, and responsibilities are scattered.

A practical PTW process should do both jobs well:

• Stop work that is not safe to start

• Help properly prepared work move without unnecessary confusion

The test is not whether the permit contains enough signatures.

The test is whether the plant can clearly prove:

• The right job was reviewed

• The correct hazards were identified

• The equipment was safely isolated

• The required checks were completed

• The right people understood and approved the work

• Changes were controlled

• The job was handed over safely

• The plant was restored before closure

That is when a Permit to Work becomes more than a form.

It becomes an active control over maintenance work inside the factory.

Connect safety permits with maintenance execution

MaintBoard helps industrial teams connect Permit to Work requests with work orders, assets, safety checks, isolations, approval stages, extensions, execution records, and safe close-out.

See how MaintBoard Permit to Work software supports controlled maintenance work.

Safety note: This article provides general operational guidance. Always follow your site-specific risk assessments, permit procedures, emergency arrangements, and applicable legal or regulatory requirements.