This page is part of the Oracle Safety PTW Knowledge Hub a series of connected guides covering every aspect of permit to work, from its industrial origins through to system design, governance, and training. If you’ve arrived here from the history page, you’ll already understand why PTW exists. This page explains what a competent system actually looks like and why so many fall short in practice.

Permit to Work systems are used to control high-risk work where a single failure could result in serious injury, fatality, or catastrophic loss. They are not generic paperwork and they are not a substitute for proper planning, engineering controls, or supervision.

A PTW system is a formal management control used to authorise, coordinate, and monitor high-risk work. When designed and operated correctly, it provides a structured method for authorising, coordinating, and monitoring hazardous work as part of a wider control of work framework. When treated as a form-filling exercise, it creates false assurance while risk remains unmanaged.

What a Permit to Work system is, and is not

A Permit to Work system is a documented process used to ensure that defined high-risk work is properly planned, authorised, communicated, monitored, and completed safely.

It is a system, not a form.

A properly designed PTW system consists of three inseparable elements:

1. A policy arrangement that defines scope, responsibilities, competence, and accountability
2. Procedures that govern how permits are requested, issued, monitored, suspended, and cancelled
3. Permit forms and certificates that record verification of control measures at the point of work

A PTW system is not:

• A replacement for risk assessment
• A substitute for safe systems of work
• A behavioural intervention
• A means of transferring responsibility to the workforce
• A guarantee that work is safe

Permits do not make unsafe work safe. They only confirm that agreed controls are present and functioning at a specific point in time. Understanding why PTW systems exist, the industrial disasters that shaped their development – transforms the permit from paperwork into purpose.

Why Permit to Work systems exist

Permit to Work systems exist to control work where the consequences of failure are severe and where routine supervision or standard procedures are insufficient.

Typical applications include hot work, confined space entry, intrusive maintenance, work on energised or potentially energised systems, and contractor activities in unfamiliar or shared environments.

In these situations, a Permit to Work system provides:

• Formal confirmation that hazards have been identified and controlled
• Coordination between multiple activities, departments, or contractors
• Clear authority to start, suspend, or stop work
• A shared understanding of the limits and conditions of the task

Used properly, Permit to Work systems reinforce discipline and clarity. Used poorly, they become for show only.

Where Permit to Work systems sit within the control of work framework

PTW systems do not stand alone. They sit downstream of other legally required and operationally essential controls. HSE guidance on permit-to-work systems is published in HSG250 and remains the primary UK reference for system design and governance.

Before a permit can be issued, the following must already exist:

• A suitable and sufficient risk assessment
• A defined safe system of work or safe operating procedure
• Appropriate engineering and physical controls
• Effective isolation of hazardous energy where required
• Competent people with defined authority

The Permit does not create these controls. It verifies that they have been implemented and remain effective.

Where organisations rely on permits to compensate for weak or missing upstream controls, failure is predictable.

Understanding when a permit to work is required and when it is not, is one of the most important judgements in operating the system.”

Common failure modes in Permit to Work systems

Most PTW failures are not caused by paperwork errors. They are caused by system design and governance weaknesses.

Common failure modes include:

• Permits issued without the issuer attending the work location
• Inadequate competence or authorisation of issuers and receivers
• Over-reliance on generic permit wording
• Poor integration with risk assessment and isolation procedures
• Excessive numbers of active permits under a single issuing authority
• Lack of supervision once work has started
• Permits treated as permission rather than verification

These failures are rarely the result of individual negligence. They arise when PTW systems are treated as administrative requirements rather than safety-critical controls. Understanding why systems fail in practice and what the warning signs look like is covered in full in our dedicated guide: Why PTW Systems Fail.

Permit to Work systems misused as contractor permissioning

One of the most common misapplications of PTW systems is their use as a proxy control for contractor activity.
In many organisations, the Permit to Work process has effectively become a permissioning mechanism used to check that contractors have submitted risk assessments and method statements. The permit is issued once RAMS are reviewed, signed, and filed, and work is then allowed to proceed.

On the surface, this appears reasonable. In practice, it represents a fundamental misunderstanding of what a Permit to Work system is for.

A PTW system is not designed to compensate for weak contractor control arrangements. It does not replace contractor selection, competence assessment, induction, supervision, or integration into site systems. It is intended to verify that site-specific hazards are controlled at the point of work, not to act as a gateway document for third-party paperwork.
Where Permit to Work systems are used primarily to validate contractor RAMS, several predictable problems arise:

• Permits become detached from real-time site conditions
• Issuers focus on document checks rather than physical verification
• Responsibility for hazard control is implicitly transferred to the contractor
• Site hazards and interface risks are under-managed
• The permit is treated as permission rather than confirmation

In these situations, the Permit to Work system often exists in the absence of the very controls it is supposed to verify. There may be no robust contractor management system, no effective supervision, no clear authority to stop work, and limited oversight once the task has started.

When this distinction is made explicit during training, it is often met with surprise. Many organisations genuinely believe they are operating a Permit to Work system, when in reality they are operating a document-checking process with a permit label attached.

Using a Permit to Work system to support contractor control is not inherently wrong. Using it in place of contractor control is.
A Permit to Work system can only function as intended where contractor management arrangements already exist and where the permit is used to coordinate, verify, and control high-risk work on site, not to legitimise it.

Governance, authority, and accountability

A PTW system only functions where authority is real and accountability is explicit.

This requires:

• Clear allocation of roles and responsibilities
• Defined competence criteria for permit issuers and receivers
• Formal authorisation processes
• Sufficient time and resource to supervise permit work properly
• Senior management oversight and review

Accountability does not mean blame. It means that those with authority are expected to exercise it properly, and that the organisation provides the conditions necessary for them to do so.

Where people are expected to manage permits without training, time, or support, the system is already broken.

Monitoring, supervision, and review

Permit to Work systems do not control work by themselves. Control is maintained through active supervision and monitoring.

Effective systems include:

• Issuer presence at critical stages of the work
• Periodic checks during the task, proportionate to risk
• Clear rules for suspension and cancellation
• Formal review of permit records and system performance
• Management review at appropriate intervals

A Permit to Work system that is not monitored is an assumption, not a control.

The role of permit to work training

Training does not make a PTW system effective. It enables people to operate within an effective system.

Permit training should focus on:

• Understanding system purpose and limits
• Role-specific responsibilities and authority
• Recognition of failure conditions
• Decision-making thresholds
• Knowing when work must not proceed

Training that focuses only on completing forms creates confidence without competence.

Our PTW training course develops this understanding into practical competency for issuers, receivers, and system managers.

Summary of the permit to work system

PTW’s are governance tools. They exist to control high-consequence risk through structure, authority, and verification.

Where organisations treat permits as paperwork, they fail. Where organisations design and operate Permit to Work systems as part of a wider control framework, they remain one of the most effective tools available for managing hazardous work.

Understanding how Permit to Work systems are intended to function is a necessary starting point, but it does not, by itself, create control. Effective systems depend on competent design, clear governance, and people who understand their authority and responsibilities within the system.

For organisations seeking to strengthen the operation of their Permit to Work systems, role-specific training can support those with responsibility for issuing, receiving, supervising, or managing permit-controlled work.

PTW Frequently asked questions