The short answer
A permit to work is a formal written system for controlling certain high-risk or non-routine jobs. HSE describes it as stating exactly what work is to be done and when, and which parts of the plant or site are safe.
HSE puts the reason simply: instructions or procedures are adequate for most work activities, but some require extra care. A permit is that extra care, written down, checked and signed.
The value is not the paperwork. It is the checks the paperwork forces people to make before anyone starts. Is the plant isolated? Has the atmosphere been tested? Who is in charge? What happens if something goes wrong?
What permits are there to prevent
HSE's technical guidance on permit-to-work systems at major hazard sites lists the kinds of failure a good system is meant to stop. They include:
- plant not isolated, or hazardous lines not drained, before work starts
- the wrong type of permit being used for the job
- people who are not authorised carrying out permit duties
- plant not handed back safely when the work is finished or the permit is cancelled
- the permit system not being properly monitored
None of these are exotic. They are ordinary slips that happen when people are busy, when jobs overrun, or when two teams assume the other one has done something. A permit puts a named person and a signature against each of those points.
Bringing the risk assessment to life
Your RAMS sets out the hazards, the controls and the method. It is usually written before the job, sometimes days or weeks before. If you need a refresher, see what are RAMS.
HSE is clear that a permit to work is not a replacement for robust risk assessment, but it can help bring the risk assessment "to life" at the sharp end, where it matters. On the day, a permit confirms that conditions on the ground still match what the RAMS assumed, and that the controls are actually in place.
That is why a permit works best alongside site-specific RAMS, not instead of them.
Communication and coordination
HSE describes permits as a means of communication between site management, plant supervisors, operators and the people doing the work. They are also a way of coordinating different activities so they do not clash.
Think of welding in one area while another trade is breaking into a fuel line nearby, or one electrician re-energising a circuit that another team is still working on downstream. A permit system, with related permits linked together, makes those conflicts visible before they happen. HSE recommends making links between related permits, especially where tasks run at the same time or depend on each other.
Communication matters most when work passes from one person or shift to another. HSE's human factors guidance notes that many accidents have occurred because of a failure of communication at shift handover, and cites the Piper Alpha disaster among its examples.
Clear lines of responsibility
A good permit system makes it obvious who is in charge and who does what. HSE says roles and responsibilities should be clear, with no important gaps or overlaps.
HSE's guidance on permit-to-work systems (HSG250) adds two simple rules. Where the potential for harm is particularly high, a second person should see the permit before it is issued. And in any case, a person should not issue a permit to themself. That separation means one person's blind spot does not become everyone's problem.
A safe finish, not just a safe start
The end of a job matters as much as the start. HSG250 describes a hand-back stage where the person who did the work confirms it is complete, the plant or area is returned to a safe condition (in particular by removing isolations), and the person in control of the plant or area acknowledges it is back under their control.
Some hazards also outlast the work. For hot work, HSE's fire safety in construction guidance (HSG168) recommends a continuous fire watch for at least an hour after hot work ends, followed by at least one more check two hours after it ends.
Records you can learn from
Every permit leaves a record of who asked for the work, who checked it, who issued it, who accepted it and when it was closed. HSE expects permits to be kept on file and the system to be managed, regularly inspected and reviewed.
Those records help you spot patterns, such as permits issued late, jobs that keep overrunning, or checks that are often skipped, and fix them before they lead to harm.
What a permit cannot do
HSE puts it plainly: the issue of a permit does not, by itself, make a job safe. A permit only works if competent people make the checks, the precautions stay in place, and everyone follows it.
Permits also lose their value if they are used for everything. HSG250 says permit systems should not be applied to all activities, because that can weaken their overall effectiveness. Routine, low-risk work is better controlled through your RAMS, briefings and supervision. Our guide on when a permit to work is needed covers how to decide.
Does the law require a permit?
The law does not always name a permit, but it often requires the things a permit delivers: a safe system of work, planning, isolation, emergency arrangements and coordination. For some activities, HSE guidance points firmly towards one. For example:
- Confined spaces: HSE's Approved Code of Practice (L101) says a permit-to-work system is usually required where there is a reasonably foreseeable risk of serious injury in entering or working in the space.
- Hot work: HSG168 says that where you cannot avoid hot work, you should use formal systems of management, such as a permit-to-work system.
- Construction sites: under CDM 2015, where more than one contractor is working on a project, each contractor must comply with directions from the principal contractor and the relevant parts of the construction phase plan. If the site uses permits, that includes you.
How AutoRAMS helps
AutoRAMS V2 adds a permits-to-work tool alongside your RAMS. It is built around the principles above:
- A permit can be linked to the RAMS for the job, so the plan and the on-the-day control sit together.
- The person who drafted a permit cannot approve it. A different person, a company administrator, approves it.
- Before issue, a competent person on the ground completes a site verification checklist, covering things like site conditions, RAMS controls and PPE, linked isolations and permits, rescue arrangements and worker briefing.
- Each named permit holder accepts the permit individually, and it only becomes active once every holder has accepted.
- Every step is recorded in a time-stamped log, and you can download a PDF permit record.
Please note: AutoRAMS is a tool for creating and recording permits. Your company and its competent people stay responsible for deciding when a permit is needed, for making and removing isolations, and for the work itself. Closing a permit in AutoRAMS is never the same as releasing an isolation.
Frequently asked questions
Is a permit to work the same as a risk assessment?
No. HSE says a permit is not a replacement for robust risk assessment. Your RAMS plans the job; the permit confirms on the day that the planned precautions are in place before work starts.
Does every job need a permit?
No. HSE's guidance says permit systems should not be applied to all activities, as overuse weakens them. Permits are for high-risk or non-routine work; routine low-risk work is normally covered by RAMS and supervision.
Is a permit to work a legal requirement?
The law does not always name a permit, but it does require safe systems of work, and HSE guidance points strongly to permits for some activities, such as confined space entry and unavoidable hot work. Clients and principal contractors also often make permits a site rule.
Can the same person write and issue a permit?
HSE's guidance (HSG250) says a person should not issue a permit to themself, and that where the potential for harm is particularly high a second person should see the permit before it is issued.
Does issuing a permit make the job safe?
No. HSE is clear that issuing a permit does not, by itself, make a job safe. The checks, isolations and precautions it records must actually be in place and stay in place.