A permit to work (PTW) is one of the most heavily audited systems in any oil and gas facility — and one of the first things a client auditor, Authorized Inspector, or insurance surveyor checks. This guide explains how PTW systems work, the permit types you need to know, the step-by-step process, and a complete checklist you can use on the job.

What Is a Permit to Work System?

A Permit to Work (PTW) system is a formal, documented control process used to authorize, manage, and monitor work that carries a higher-than-normal risk — hot work, confined space entry, excavation, electrical isolation, and working at height. It is a written record that confirms a specific job, in a specific location, has been risk-assessed, isolated where necessary, and approved by named, authorized people before anyone is allowed to start.

A PTW is not a formality. It is a legal and contractual control document, and it forms part of the wider Safe System of Work required under frameworks such as OSHA process safety standards, API RP 2220 and RP 754, ISO 45001, and operator-specific HSE manuals used by companies like Saudi Aramco and ADNOC.

Why Permit to Work Systems Matter

PTW failures are not abstract risks — they are the direct cause of some of the industry’s worst disasters. The 1988 Piper Alpha platform explosion, which killed 167 people, was traced back to a breakdown in permit-to-work control: a pressure safety valve had been removed for maintenance under one permit, while a separate, unrelated permit allowed a pump connected to the same system to be restarted during shift handover. Neither team knew about the other’s permit.

That single failure — a missing cross-check between two live permits — is still taught in every HSE induction in the industry today. It is the reason permit systems insist on visible permit boards, shift handover protocols, and a clear chain of accountable signatures rather than verbal approval.

For a fabrication workshop or contractor working inside a refinery, terminal, or offshore platform, PTW discipline is treated as a direct measure of safety culture — and it is scored accordingly during client and AVL vendor audits.

Types of Work Permits in Oil and Gas

Most operators run several permit types in parallel, each addressing a specific hazard category. The exact names vary by company, but the categories below are universal.

On larger sites, a single job often needs more than one permit running together — for example, hot work inside a confined space requires both permits to be valid and cross-referenced at the same time.

Key Roles in the Permit to Work Process

A PTW system only works because no single person is allowed to authorize and execute the same job. That separation of duties is the control.

The Permit to Work Process, Step by Step

1. Task identification and risk assessment

A Job Safety Analysis (JSA) or HIRA identifies the hazards of the specific task before any permit is requested.

2. Isolation of hazards

Energy sources are isolated — lockout-tagout, blinding, depressurizing, draining — and isolation is physically verified, not assumed.

3. Permit application and review

The performing authority applies for the correct permit type; the area authority reviews the job scope and isolation status.

4. Atmosphere / gas testing

For hot work and confined space entry, the atmosphere is tested and the result recorded with a validity window — typically 30–60 minutes for hot work.

5. Permit issuance and briefing

The permit is signed and a toolbox talk briefs the crew on hazards, PPE, and emergency response before work begins.

6. Work execution and monitoring

The job proceeds only under the conditions stated on the permit. Any change in scope stops the work and triggers a new risk assessment.

7. Shift handover

If the job spans a shift change, the outgoing and incoming teams jointly review the live permit — the exact control that failed at Piper Alpha.

8. Permit suspension

Permits are suspended (not silently ignored) for breaks, emergencies, or weather stoppages, and re-verified before work resumes.

9. Job completion and closure

The work area is inspected, isolations are removed or reapplied for the next job, and the permit is formally signed off as closed.

10. Filing for audit trail

Closed permits are filed alongside the JSA, gas test certificate, and isolation certificate — this trail is what an auditor asks for first.

Permit to Work and Your Documentation Trail

A permit is rarely a standalone form. On an active job it sits inside a small documentation package: the JSA/HIRA, the isolation certificate, the gas test certificate, and the toolbox talk attendance record. Together, these are the evidence an Authorized Inspector or client QA auditor expects to see attached to the permit file — not produced after the fact.

For fabrication workshops pursuing or maintaining Aramco AVL status or ASME certification, this is where many otherwise well-run shops lose points during an audit. The welding and material records may be flawless, but a missing or backdated PTW trail is treated as a process-control finding, because it suggests the same gap could exist anywhere else in the QC system.

If your shop is building out its broader QA/QC documentation system, our guide on Material Test Reports (MTR) Explained covers the same evidence-trail discipline applied to material traceability.

For the wider operational context PTW sits inside, see our Oil and Gas Industry Guide covering upstream, midstream, and downstream operations.

Common Mistakes That Fail Audits

• Permits signed and dated after work has already started (“backdating”)
• The same person acting as both permit issuer and performing authority
• Gas test certificate missing, or used past its validity window
• Permit left open after the job is physically finished
• No check for simultaneous operations (SIMOPS) conflicting with another live permit
• Vague hazard descriptions copied from a previous, unrelated job
• No record of the shift handover review for permits spanning a shift change

Permit to Work Checklist

Use this checklist as a working reference for any hot work, cold work, or confined space job. It is also available as a one-page downloadable PDF/Word reference — see the box below.

Before Work Starts

• JSA / risk assessment completed and reviewed by the crew
• Correct permit type selected for the actual work being done
• Isolation completed and physically verified (lockout-tagout applied, tagged)
• Gas test completed and within its validity window
• Required PPE specified on the permit and confirmed available
• Fire watch / standby person assigned for hot work
• Emergency response and escape route briefed to the crew
• All required signatures obtained — issuer, holder, area authority
• Simultaneous operations (SIMOPS) conflict check completed

During the Work

• Permit displayed and visible at the job site
• Site conditions match what is stated on the permit
• Periodic gas re-testing carried out where required
• Supervisor or performing authority available on site
• Any change in scope stops work and triggers a new risk assessment

After Completion

• Work area inspected and left in a safe condition
• Isolations removed, or formally re-applied for the next job
• Permit signed off and formally closed — not left open
• Permit filed together with JSA, gas test, and isolation certificates
• Lessons learned recorded if anything deviated from plan

Final Thoughts

A permit to work system is the control that stands between a routine job and a serious incident — and, on paper, between a passing and failing audit. The mechanics are simple: separate the person who authorizes the work from the person who performs it, verify every isolation rather than assuming it, and keep the supporting evidence trail attached to the permit, not scattered across separate files.

Workshops that treat PTW discipline as part of their QC system — not a separate HSE task — consistently perform better in both safety outcomes and client audits.