A permit to work is only as good as the information it contains. A well-written permit gives everyone involved a clear, shared understanding of what is happening, where, who is responsible, and what controls are in place. A poorly written one creates ambiguity at exactly the moments when clarity matters most.
Understanding what a permit to work system is designed to achieve is the essential starting point. Once that foundation is in place, writing an effective permit becomes a more disciplined and purposeful exercise.
Start With the Work Scope
The first thing a permit must do is describe the work clearly and specifically. This sounds straightforward, but it is where many permits fall short. Vague descriptions such as "maintenance work" or "electrical checks" are not adequate for high-risk tasks. They leave too much room for interpretation and make it impossible to assess hazards properly.
A good work scope should state exactly what is being done, the precise location including plant item, equipment tag or area reference, the start date and expected duration, and which activities are included and, where relevant, which are explicitly excluded. If the work is being done in stages or by multiple teams, that structure needs to be clear in the permit from the outset.
The scope also defines the boundary of authorisation. Work that falls outside the permit description is not covered, and proceeding with it without a separate permit is a serious control failure. Getting the scope right at the start prevents misunderstandings later.
Identify the Hazards Specifically
Generic hazard lists are one of the most common weaknesses in permit writing. Ticking a box that says "electrical hazard" or "chemical exposure" without further detail provides little practical value to the people carrying out the work.
Effective hazard identification in a permit should be specific to the task, the location and the timing. Consider what energy sources are present and whether they are adequately isolated. Think about what other activities are happening nearby and whether they introduce additional risk. Account for environmental conditions such as weather, temperature, lighting, and confined or restricted access.
Consider the people involved: their competence, the number of personnel, and how they will communicate if something goes wrong.
The permit should also consider hazards that arise from the work itself rather than just the environment. A grinding operation creates sparks. A vessel entry creates oxygen deficiency risk. Pressure testing creates the potential for sudden release of stored energy. These task-specific hazards need to be captured clearly, not buried in a generic list.
If existing risk assessments or method statements are being referenced, the permit should reflect how those documents apply to this specific instance of work, rather than simply citing them and moving on.
Define Control Measures in Practical Terms
Once hazards are identified, the permit must specify the controls that will be in place. Again, specificity matters. Stating that "appropriate PPE will be worn" is not sufficient. The permit should name the specific PPE required for each hazard, such as respiratory protection to a defined standard, chemical-resistant gloves of a particular type, or a harness with a specified fall arrest system.
The same principle applies to isolations. The permit should reference the isolation schedule or lockout/tagout register by document number, identify which energy sources are being isolated and by what method, and confirm who is responsible for applying and verifying each isolation. An isolation that is assumed rather than confirmed is a potential fatal flaw in the permit.
Other controls to specify clearly include the atmospheric testing requirements and frequency for confined space or hot work permits, the barriers, exclusion zones or safe distances required, communication arrangements including check-in intervals, the supervision level required and whether continuous supervision is needed, and any environmental controls such as drip trays, spill kits or weather limitations.
Controls should be proportionate to the risk. A permit that lists twenty controls for a low-risk task loses credibility. A permit that undersells the controls for a high-risk task creates a false sense of security. The person writing the permit should be able to explain why each control is there.
Assign Roles Clearly and by Name
A permit that assigns responsibility to a job title rather than a named individual invites confusion. In practice, multiple people may hold the same title on a given shift. When something goes wrong or a decision needs to be made, "the supervisor" is not a specific enough point of accountability.
Where possible, the permit should name the individuals holding each key role. The permit issuer is the competent, authorised person who has reviewed the work scope, confirmed that hazards are identified and controls are in place, and formally authorised the work to proceed. The permit holder is the person responsible for ensuring the work is carried out in accordance with permit conditions and that the workforce understands those conditions before starting. Where specialist tasks are involved, additional roles such as an isolating authority or a gas tester should also be named.
Each person named on the permit should acknowledge their role formally, either by signing the permit or, in a digital system, by confirming acceptance through the workflow. This is not a procedural nicety. It is the moment at which each person takes on responsibility for their part of the control system.
Verify Before You Authorise
Writing a permit and issuing a permit are two different things. Between the two sits a verification step that is critical and that should never be treated as a formality.
Before a permit is issued, the controls it describes must be confirmed as being in place. This typically means a physical check of the work area. Isolations should be visibly locked out and tagged, not just assumed to have been applied. Atmospheric testing should be completed and results recorded. Barriers should be erected. Equipment should be present and in serviceable condition. Access should be clear and safe.
The issuing authority should visit the work location before signing. Remote authorisation, where a permit is approved without the issuer having seen the conditions first-hand, is a recognised failure mode in PTW systems and is explicitly discouraged in the UK's HSG250 guidance. If the work location cannot be visited, that itself is information that should inform whether the permit is appropriate to issue at that time.
Think About What Could Change
A permit captures conditions at a point in time. Conditions change. Part of writing a good permit is thinking ahead about what might change and how that will be managed.
If the work is expected to run across shift changes, the permit should specify how handover will be managed and what confirmation is required before the incoming shift continues. If the task is likely to overrun, the process for extending the permit should be clear. If conditions could change in ways that would invalidate the permit, such as weather limits for working at height or changes in adjacent operations, those conditions should be defined and the response to them agreed in advance.
A permit that does not account for change forces people to make decisions without a framework when those changes occur. The result is often improvisation under pressure, which is exactly the situation that PTW systems are designed to prevent.
Close Out Properly
Permit close-out is often rushed or treated as an afterthought, but it is a genuine safety step. Closing a permit confirms that work is complete, that the work area has been made safe, that isolations have been removed or left in place as intended, that temporary controls have been reversed, and that all personnel have left the area.
The permit holder should conduct a final inspection of the work area before closing the permit. Any deviations from the original scope, any actions that could not be completed, or any conditions that remain outstanding should be documented at close-out, not overlooked. If further work is needed, a new permit should be raised rather than extending the scope of a closing one.
The close-out record creates a permanent account of how the work was managed. In the event of an incident or audit, this record is often the first thing that is reviewed.
Common Mistakes to Avoid
A few patterns consistently undermine permit quality and are worth being deliberate about avoiding.
Copying a previous permit without reviewing it for current conditions is one of the most common. Every permit should be written for the specific instance of work, not adapted from an earlier one that covered a similar task. Conditions, personnel, and surrounding activities will rarely be identical.
Filling in the hazard and controls sections from memory rather than from a review of the actual work location leads to permits that describe a generic version of the task rather than the real one. The permit should be written in the field, or at least with first-hand knowledge of current conditions.
Issuing a permit under time pressure without completing the verification step is a serious risk. The pressure to get work started quickly is real in operational environments, but the permit process exists precisely to create a disciplined pause at that moment. Bypassing verification because a job seems straightforward is how assumptions become incidents.
Finally, writing a permit that no one can practically read or follow in the field defeats its purpose. A permit is a working document. It should be clear, direct and accessible to everyone who needs to use it, not a record of compliance written primarily for auditors.
