What is a permit to work system
A permit to work system is a formal process that controls high-risk activities by requiring written authorisation before work begins. It exists because some tasks carry risks that cannot be managed through standard operating procedures alone. When a welder is cutting near a fuel line, when a technician is entering a confined space, or when an electrician is working on a live switchboard, the consequences of a failure are severe enough to warrant a specific, documented assessment and approval before anyone picks up a tool.
The permit serves multiple purposes. It forces a systematic hazard assessment for the specific task in the specific conditions. It ensures that the person performing the work and the person authorising it agree on the hazards and the controls. It communicates the activity to everyone else on site who may be affected. And it creates a documented record that the work was properly assessed, authorised, and controlled.
Under Australian WHS regulations, while a PTW system is not universally mandated by name, the duty to manage risks associated with high-risk activities effectively requires the kind of systematic control that a PTW system provides. Safe Work Method Statements (SWMS) are legally required for 19 categories of high-risk construction work, and a PTW system complements SWMS by adding the authorisation and communication layers that SWMS alone do not provide.
For operations teams managing complex sites with multiple contractors and simultaneous activities, a PTW system is not optional. It is the mechanism that prevents one crew's work from creating a hazard for another. Without it, the coordination of high-risk activities relies on informal communication, which fails under pressure, during shift handovers, and as site complexity increases.
Types of work permits
Different activities require different types of permits, each tailored to the specific hazards involved. Using a generic one-size-fits-all permit for all activities dilutes the system's effectiveness. The most common permit types in Australian operations environments cover the following activities.
Hot work permits cover any activity that produces sparks, flame, or heat sufficient to ignite flammable materials. This includes welding, cutting, grinding, brazing, soldering, and the use of open flames. The permit specifies fire prevention measures: removal of combustible materials, fire watch requirements, fire extinguisher placement, and gas testing where explosive atmospheres may be present. Hot work permits are among the most common and most critical, as hot work is a leading cause of industrial fires.
Confined space entry permits are required before any person enters a confined space as defined under WHS regulations. The permit documents atmospheric testing results, ventilation arrangements, rescue provisions, communication methods, and the names of all entrants and standby persons. Confined space work is high-risk and has specific regulatory requirements including mandatory training, atmospheric monitoring, and emergency rescue capability.
Electrical work permits apply to work on or near electrical installations, particularly live work. They document isolation procedures, testing for dead, personal protective equipment requirements, and the specific circuits involved. Electrical permits must be issued or endorsed by a person competent in electrical safety.
Excavation permits cover any ground disturbance beyond defined limits (typically 300mm depth). They require identification and location of underground services, consultation with service owners, and specification of safe digging methods. Striking an underground power cable or gas main during excavation is a life-threatening event that the permit process is designed to prevent.
Working at height permits apply when work is performed above a defined threshold, typically two metres in general industry and adjusted for construction. The permit documents the fall prevention method (guardrails, safety nets, harnesses), anchor points, rescue plan, and the competency of workers.
Each permit type should have its own form with hazard-specific fields. A hot work permit needs fields for fire watch duration and gas testing results. A confined space permit needs fields for atmospheric readings and rescue equipment checks. Generic fields do not capture the information needed to control specific hazards.
Designing the approval workflow
The approval workflow is the backbone of the PTW system. It defines who can request a permit, who assesses and approves it, who must be notified, and who can close it out on completion. A poorly designed workflow creates bottlenecks that slow work or, worse, encourages workers to bypass the system when the approver is unavailable.
A typical workflow follows these stages. The work team or contractor submits a permit request, describing the work, location, duration, hazards, and proposed controls. The area authority or site supervisor reviews the request, verifying that the controls are adequate and that the work does not conflict with other activities. The permit issuer, who must be an authorised and competent person, approves the permit and communicates it to all affected parties. Work proceeds under the permit conditions. On completion, the work team confirms that the area is safe and restored, and the permit is closed out.
Define the authority levels clearly. Not everyone can approve every type of permit. A confined space entry permit may require safety manager approval. A routine hot work permit may be approved by a trained supervisor. Document these authority levels in a permit issuer register and ensure that sufficient authorised issuers are available across all shifts and sites to avoid delays.
Build in conflict checking. Multiple permits active in the same area at the same time can create conflicting hazards. A hot work permit and a coating application permit in adjacent areas is a recipe for an explosion. The approval process must include a check of all active permits to identify conflicts before a new permit is approved. This is straightforward in a digital system that maintains a real-time register of active permits but nearly impossible with paper permits spread across multiple clipboards.
Include a suspension and cancellation process. Conditions change: weather deteriorates, an emergency occurs, or the scope of work changes. The workflow must allow permits to be suspended or cancelled, with immediate notification to the work team. If a permit is suspended, work must stop until the permit is revalidated or a new permit is issued.
Isolation and lockout procedures
Many permitted activities require isolation of energy sources, whether electrical, mechanical, hydraulic, pneumatic, thermal, or chemical. Isolation is the process of disconnecting and securing the energy source so it cannot be re-energised while work is underway. Lockout/tagout (LOTO) is the physical mechanism that prevents re-energisation.
The PTW system and the isolation procedure must be tightly integrated. The permit should reference the specific isolation points, the isolation method, and the person responsible for each isolation. Before the permit is approved, the isolation must be verified as complete. This is not a formality. Failure to isolate, or incomplete isolation, is a leading cause of fatalities in maintenance and construction work.
A robust isolation procedure includes identifying all energy sources that must be isolated, notifying all affected personnel, shutting down the equipment or system through the normal operating procedure, isolating each energy source at the isolation point, applying personal locks and tags to each isolation point, verifying isolation by attempting to start the equipment (try-test), and documenting the isolation on the permit.
Personal locks are critical. Each person working under the isolation must apply their own lock to each isolation point. The equipment cannot be re-energised until every lock is removed. This ensures that no person is exposed to re-energisation while they are still in the danger zone. Master keys or override procedures should be restricted to emergency situations and require senior management authorisation.
For complex isolations involving multiple energy sources across multiple systems, an isolation plan should be prepared and attached to the permit. The plan maps every isolation point, the sequence of isolation, and the person responsible. When the work is complete, de-isolation follows the reverse sequence, with each step verified before the next energy source is restored. Linking isolation records to the relevant maintenance records ensures a complete history of every isolation performed on each piece of plant.
Moving from paper to digital PTW
Paper-based PTW systems have served Australian industry for decades, but they carry limitations that become more significant as operations grow in complexity. Paper permits exist in one physical location. The site office has a copy, but the work crew has the original in the field. If conditions change and the permit needs to be suspended, someone has to physically locate the permit holder. If the control room needs to know how many active hot work permits are on site right now, someone has to walk around and count them.
Digital PTW systems address these limitations directly. A digital permit is created, assessed, approved, and closed through a mobile app or web platform. Every authorised person can see the status of every permit in real time. Notifications are automatic. Conflict checking is systematic. The audit trail is complete and tamper-resistant.
Key advantages of digital PTW include workflow enforcement (the system prevents work from starting before all approvals are complete), real-time visibility (the control room sees all active permits on a map or list), automatic expiry (permits that exceed their validity period are flagged or closed automatically), conflict detection (the system identifies overlapping permits in the same area), and complete audit trails (every action is timestamped and attributed to a specific person).
The transition from paper to digital requires careful planning. Start with one permit type, typically hot work, as it is usually the most frequent. Run the digital system in parallel with paper for two to four weeks. Use the parallel period to refine the digital workflow, train users, and resolve any access or connectivity issues. Once confidence is established, retire the paper system for that permit type and move to the next. Trying to digitise all permit types simultaneously increases risk and resistance.
Connectivity is a common concern for remote or underground operations. The best digital PTW systems support offline mode, allowing permits to be created and approved in the field without connectivity and synchronised to the central system when connectivity is restored. Mobile platforms designed for field use handle this seamlessly.
Audit trail and compliance records
The audit trail is what transforms a PTW system from an operational tool into a compliance asset. Every permit creates a record: who requested it, who approved it, what conditions were set, when work started, when it finished, and how the area was restored. This record is invaluable during regulatory inspections, incident investigations, and client audits.
Under Australian WHS legislation, records of risk management activities must be kept for the life of the hazard and, in practice, for at least seven years. For permit records, this means retaining every permit issued, including the hazard assessment, the controls specified, the approval chain, and the close-out confirmation. Paper systems make long-term retention and retrieval difficult. Digital systems make it automatic.
When an incident occurs that is related to a permitted activity, the permit record becomes a key piece of evidence. Investigators will examine whether a permit was issued, whether the controls specified were adequate, whether the controls were actually implemented, and whether the permit conditions were followed. A digital record provides unambiguous answers to each of these questions.
Audit your PTW system regularly. Review a sample of permits each month to verify that the forms are completed correctly, that the hazard assessments are adequate, that approvals followed the defined workflow, and that close-outs were completed. Track compliance metrics: permit completion rate, average approval time, overdue close-outs, and any instances of work proceeding without a valid permit.
Report PTW metrics to management alongside other safety indicators. The number of permits issued by type, the number of permit conditions violated, and the trends over time provide insight into the volume and management of high-risk work on your sites. Integrating this data with your broader compliance tracking gives management a complete view of how high-risk activities are being controlled across the organisation.
Common PTW failures and how to avoid them
PTW systems fail in predictable ways. Understanding these failure modes helps you design a system that avoids them and audit for them when reviewing your existing system.
Permits become a rubber stamp. When the permit process is treated as a formality rather than a genuine risk assessment, hazards are missed, controls are inadequate, and the permit provides false confidence. The fix is training and competency for permit issuers, and regular audits of permit quality. If every permit lists the same generic hazards and the same generic controls, the assessment is not being done properly.
Work proceeds without a permit. This happens when the permit process is too slow, when authorised issuers are unavailable, or when the perceived urgency of the work overrides the perceived importance of the permit. The fix is ensuring sufficient authorised issuers across all shifts, streamlining the approval process (digital systems reduce approval time significantly), and enforcing a zero-tolerance policy for unpermitted high-risk work.
Permits are not closed out. Work finishes, the crew moves on, but the permit remains open. This creates confusion about the status of the work area and may prevent subsequent permits from being issued. The fix is including close-out as a required step in the workflow and escalating open permits that exceed their validity period.
Isolation is not verified. The permit states that isolation is required, but no one verifies that the isolation is actually in place before work begins. This is a life-threatening failure. The fix is including a mandatory verification step in the workflow that requires the permit issuer or a competent person to confirm isolation before the permit is activated. Implementing structured risk assessment at the permit stage helps ensure nothing is missed.
Conflicting permits are issued. Two permits for incompatible activities in the same area are approved independently. Paper systems are particularly vulnerable to this because there is no central, real-time register of active permits. Digital systems with conflict-checking logic prevent this by alerting the approver to overlapping permits and requiring explicit acknowledgement before approval.
Building a robust PTW system takes effort, but the alternative is uncontrolled high-risk work, which is the highest-risk situation in any operation. Get the system right, train your people thoroughly, audit it regularly, and your PTW system becomes one of the most effective safety controls in your organisation. Book a demo to see how digital compliance tools support PTW workflows.
