Running a Hot Work Permit That Would Hold Up

Purpose

A hot work permit exists to make the END of the hazard somebody's decision instead of a side effect of the crew packing up. It does that by binding three things together on one piece of paper: a named person with authority to authorize the work, a bounded window with a stated end time, and a list of the controls that have to be in place for the whole window and removed before it closes. Everything else on a permit form supports those three. A permit that records what was cut but not who owns the end time has not done its job, and it is the shape most contractor permits take.

Scope

Applies to all hot work performed by our crews on customer property and in our own shop: welding, cutting, brazing, soldering, grinding, thermal spraying, and torch-applied roofing. The one exception is a designated area established and maintained under the criteria in NFPA 51B, in the edition your authority having jurisdiction has adopted and amended, which in practice means a dedicated shop bay; work there does not need a per-job permit but still needs the daily area check. The AHJ is a named role with authority to interpret and enforce that adopted edition, not a synonym for whoever inspects.

Where the customer's facility runs its own hot work program, their permit governs and ours is not issued. Many industrial and institutional sites forbid contractor-issued permits entirely; find out before the truck loads, not at the gate.

The perimeter, the openings, the extinguishing equipment, and the respiratory controls are set out in the card on what hot work requires before it starts. This SOP does not re-derive them; it makes them permit fields.

Roles and responsibilities

Procedure

1. Ask whether the hot work is necessary at all. The adopted NFPA 51B edition requires alternatives to be considered before hot work is authorized, and this is the step that gets skipped in every program that fails. Mechanical cutting, a grooved or threaded connection, a pre-fabricated section brought to site cold, or moving the assembly to the shop bay each remove the hazard entirely instead of controlling it. Record what was considered and why it was rejected. A permit whose first line is a decision reads very differently a year later than one that opens at "welding."

2. Establish system status before you write anything. Confirm the sprinkler system serving the area is in service by looking at the control valve, not by asking. A valve chained and sealed in the open position with a current inspection tag is evidence; "it should be on" is not. If the system is impaired, the adopted NFPA 51B edition requires compensating measures before hot work proceeds, and the impairment belongs to the facility, so find out who holds the tag. Do the same for detection: if smoke from your cutting will alarm the space, the zone gets placed on test or bypassed with the monitoring station notified in advance under the adopted NFPA 72 edition, and a person is assigned to that zone as the compensating measure for as long as it is bypassed.

3. Walk the perimeter and set the controls, then write them down one by one. Not "area cleared." Each control gets its own line, with its location, so that the person closing the permit knows exactly what has to come back off. A temporary sprinkler heat shield left in place is a permanently impaired head, and the only thing that catches it is the line on the permit.

4. Name every volume the fire watch is covering. List the work space and, by name, each adjacent space: the room on the other side of the wall, the space below the slab, the concealed ceiling cavity, the tenant suite past the demising wall. A watch assigned to "the area" covers the volume the watch can see, which is the diagnosis the card on the fire watch that failed works through in detail. On the permit it is one field with real room names in it.

5. Set the end time by working backwards from the watch period, not forwards from the cutting. This is the arithmetic every permit gets wrong. The window has to contain the cutting, then the full fire watch, then the monitoring period. The general industry federal floor at 29 CFR 1910.252(a) is a fire watch maintained at least 30 minutes after completion of welding or cutting; current NFPA 51B editions require at least 60 minutes of watch followed by a monitoring period whose duration is set by the adopted edition. Where both apply, the longer one governs through the adopted code. So the last permitted spark is the stated end time minus watch minus monitoring, and the operator needs that time, not the end time.

6. Post the permit at the work, and treat any change as a new permit. The permit hangs at the work location where the watch and anyone walking by can read it. Concrete defaults worth adopting and then tuning to your own program: a relocation of the work, a change of elevation, exposure of a new opening, or a lapse of more than 30 minutes ends the permit, and only the authorizing individual re-issues. The reason for the lapse rule is that controls get borrowed during a break, and a blanket that walked off is not visible from a truck.

7. Close the permit in person, with times. Record last spark, watch start, watch end, monitoring end, and final check. Remove every control on the list and initial each one. Restore every system placed on test or bypassed and record that time too. Hand the closed permit to the owner representative rather than filing it from the truck, because the handover is what makes the end time real to the person who owns the building overnight.

Worked artifact: one permit, and the end time that was wrong when it was written

Replacing a corroded steel pipe support in a second-floor mechanical room, work at 9 ft from a rolling scaffold, directly above a tenant's paper records storage room. Casters locked and nobody riding the platform when it moved. Overhead cutting, so the operator wore leathers with a cape sleeve and a closed collar and the fall path was cleared before the first cut. Base metal and coating confirmed before issue, with ventilation and respiratory protection set under 29 CFR 1910.252(c) and a written program per 29 CFR 1910.134.

The arithmetic the permit failed. For the window to close at 14:00, the last spark had to be at 14:00 minus 60 minutes of watch minus 180 minutes of monitoring, which is 10:00. Controls were set from 08:15 to 09:05, so the 14:00 end time actually authorized 55 minutes of cutting. Nobody did that subtraction at issue, and the consequence is the number to carry: cutting ran to 11:40, which is 155 minutes, so the crew cut 100 minutes past the last spark this permit could lawfully authorise, about 2.8 times the authorised cutting time, and nobody knew it because the stated end time read as permission to cut until 14:00.

Cutting ran from 09:05 to 11:40, which is 2 hours 35 minutes, or 2.58 hours. The watch and monitoring that then had to follow ran 4.0 hours, closing at 15:40. That is 1.55 times the cutting time spent watching, and it is the single number worth carrying out of this SOP, because it is the honest reason crews shorten the watch.

What happened at 11:40. The authorizing individual re-issued rather than letting the crew work past a dead permit. New stated end time 15:45, re-signed by both parties, and coverage confirmed for the additional 1 hour 45 minutes beyond the original window. The re-issue cost the shop 1.75 hours of a second person's time that was never estimated.

Close-out at 15:45. Last spark 11:40, watch 11:40 to 12:40, monitoring 12:40 to 15:40, final check 15:40. Heat shield removed and initialled. Slab cover removed and initialled. Blankets removed and initialled. Return opening cover removed, fan lockout released, fan restarted and confirmed. Detection zone restored 15:42, monitoring station confirmed the restoration by callback, recorded. Closed permit handed to the facility representative at 15:45.

Sibling-rule check. The 30 minute federal floor and the adopted 60 minute watch are stated separately and the longer one governs, which matches the hot work card. The perimeter, the openings, and the inhalation controls are permit fields here and are not re-derived. The volumes named for the watch include the space below the slab and the concealed cavity, which is the condition the fire watch card identifies as the one that fails. The bypassed detection zone carries a start time, a named compensating measure, and a restoration time confirmed by callback, and the sprinkler heat shield carries a removal initial, so no out-of-service state left this job without a dated end, which the records card requires. No control on the list stayed in place past the permit.

References

• 29 CFR 1910.252(a) for fire prevention and protection during welding, cutting, and brazing and the 30 minute general industry fire watch floor, and 1910.252(c) for ventilation; 29 CFR 1926.352 and 29 CFR 1926 Subpart F for construction work
• NFPA 51B, Standard for Fire Prevention During Welding, Cutting, and Other Hot Work, in the edition adopted and amended by your authority having jurisdiction, for permit content, designated areas, alternatives, and the watch and monitoring periods
• NFPA 72, National Fire Alarm and Signaling Code, in the adopted edition, for placing detection on test or bypass and for notification
• 29 CFR 1910.134 for respiratory protection under a written program
• See related: What Hot Work Actually Requires Before It Starts; The Fire Watch That Was Posted and Did Not Work