The Permit Systems That Come With Industrial Sites
Why this matters
A plant, hospital or campus that runs a permit system is not asking you to prove you are competent. It decided that when it onboarded you as a vendor. What it cannot know on its own is what its other crews are doing in the same room in the same hour, and the permit is how it finds out and how it tells you. Techs who read a permit as a safety quiz get it wrong twice: they resent the paperwork, and they skim past the one line that would have told them a second crew is cutting into the same drain stack at 1400. The permit is a deconfliction instrument first. Read it that way and the day gets shorter, not longer.
The seven families you will meet
| Permit family | What it releases you to do | Who is downstream of it | Where the duty lives |
|---|---|---|---|
| Hot work | Produce spark, flame or heat outside a designated shop area | Everyone the building's fire protection covers during the window | 29 CFR 1910.252(a) general industry, 29 CFR 1926.352 construction, NFPA 51B |
| Confined space entry | Put your body into a space with restricted egress and a possible hazardous atmosphere | Your attendant, the rescue service, anyone who would attempt an untrained rescue | 29 CFR 1910.146 general industry, 29 CFR 1926 Subpart AA construction |
| Energized electrical work | Work on or near exposed energized parts where de-energizing is infeasible | Anyone inside the arc flash boundary, including staff walking past an open panel | The permit itself is an NFPA 70E-2021 construct at 130.2, with the arc flash risk assessment and PPE at 130.5 and 130.7. The OSHA duties are 29 CFR 1910.333(a)(1), which permits energized work only where the employer can demonstrate de-energizing introduces additional or increased hazards or is infeasible; 1910.333(c) for working on or near exposed energized parts; 1910.334(c) for test instrument condition; and 1910.335 for protective equipment. De-energizing and lockout, the other case, is 1910.333(b)(2) |
| Line break | Open a pipe or vessel that has held pressure or a hazardous material | People on the floor below the flange, and whatever drain it lands in | Facility procedure; at covered process sites, 29 CFR 1910.119(f)(4) |
| Ground disturbance | Break ground, trench, or core a slab | Buried and embedded utilities, post-tension tendons and rebar, and the crew in the trench | Excavation and trenching under 29 CFR 1926 Subpart P, with the duty to locate underground installations before opening at 1926.651(b). Utility locating itself runs under your state's one-call statute, a separate obligation with its own notice period. Coring a slab is outside Subpart P; there it is the facility's own procedure and a structural review |
| System impairment | Take fire protection, ventilation or life safety out of service | Every occupant, for the whole duration | NFPA 25 for water-based fire protection impairments; NFPA 72 for fire alarm impairment, which carries its own notification and interim measures; ventilation and smoke control under the facility's own program. These bind through the edition the authority having jurisdiction has adopted or through the contract, so ask which edition the site runs |
| General work or area permit | Be in a stated area at a stated time doing a stated task | Patients, students, adjacent trades | Facility policy; in healthcare this is where infection control conditions attach |
Most sites run some subset of these and give them local names. The names change; the seven functions do not.
What the permit is actually controlling
Your own hazard controls are yours regardless of paperwork. If you are going into a drive, you isolate the energy source, apply your own lock and tag, and verify zero energy before your hands go past the guard, under 29 CFR 1910.147 for mechanical and stored energy. Nobody signs that for you. What the facility controls is everything you cannot see:
- Simultaneous operations. Two safe jobs that intersect are one unsafe job. Draining a line into a floor drain is fine until someone is in the pit that drain feeds.
- The building's protective state. A sprinkler branch valved shut for your tie-in is a fire-protection impairment for every occupant in that zone until it is restored and proven.
- Occupant exposure. In an occupied building the consequence of your act lands on people who did not choose it and do not know it happened.
- The clock. Permits carry a window because the conditions they were written against expire. A shift change repopulates the space you cleared.
The negative space: what a permit does not cover
This is the part that hurts people, because a signed permit reads like blanket authorization and is not.
It does not cover a different piece of equipment. A permit naming one pump names one pump. The identical pump beside it, on the same skid, fed by the same header, is not on it.
It does not cover the hazards you brought. The permit desk does not know your cutting operation is on stainless. Welding, cutting or grinding stainless and many coated steels releases hexavalent chromium, an inhalation carcinogen. The exposure controls are 29 CFR 1910.1026 in general industry and 29 CFR 1926.1126 on construction work: determine the exposure, control it with engineering and work practice controls first, and use respiratory protection selected under a written program per 29 CFR 1910.134 where those controls do not bring exposure under the limit. A respirator worn instead of ventilation is the wrong order. Gloves and a face shield do not address an airborne route.
It does not cover the task drift. The permit was written for a bearing change. It does not become a permit to also re-pipe the seal flush line because you were already there and the parts were on the truck.
It does not cover your training records. Site orientation is not a substitute for your own annual respirator fit test under 29 CFR 1910.134(f)(2), your annual lockout program inspection under 29 CFR 1910.147(c)(6), or the three-year powered industrial truck operator evaluation under 29 CFR 1910.178(l)(4)(iii). A facility that asks for these is asking whether you have them, not offering to supply them.
It does not cover what the permit desk was not told. A permit is only as good as the description you gave. A vague scope line buys you a signature and nothing else.
Who signs, and what a signature means
The signature block is the fastest way to understand a site's real structure. Three roles show up on almost every form, sometimes collapsed into one person on a small site:
- The issuer is facility staff with authority over the area and visibility of other work. Their signature says the area has been checked and no conflicting operation is authorized in the window.
- The performing authority is you or your foreman. Your signature says the described work is the work you will do, with the controls listed, and that you will stop if a condition changes.
- The acceptor or closer confirms the space was returned to its normal state: guards on, valves back to normal position, impairments restored, permit closed.
The one that catches small shops is closure. An open permit is a live impairment in the facility's own records. Leaving site at 1600 with an unclosed hot work permit means the facility believes fire watch coverage is still someone's responsibility, and that someone is you.
Validity has three dimensions, and all three void it
A permit is bounded in time, in space and by condition, and any one of them expiring ends it:
- Time. Most are shift-length or shorter. Hot work permits are commonly issued for a single shift. A permit does not roll over because the job did.
- Space. The permit names an area or an asset. Moving one room over is a new permit, even for identical work.
- Condition. The permit lists the conditions it was issued under: fire watch present, atmosphere within limits, adjacent line isolated. If a listed condition fails, the permit is void the moment it fails, not when someone notices.
That third one is why permits carry conditions in writing rather than in the issuer's head. It gives you the authority to stop without arguing.
A worked example: two crews, one drain stack
A four-hour scope on a plant maintenance shutdown: replace a failed circulator on a process cooling loop, second floor, plus swap the mechanical seal. The shop plans one tech, four hours. Here is what the permit system does to that plan and why the arithmetic changes.
Permits required, as issued that morning: a line break permit for opening the pump flanges, a general work permit for the area, and a ground-level exclusion for the drain the loop will be dumped to. No hot work is planned. No entry is planned.
Hour zero. The line break permit lists a condition: the loop is isolated at two valves and depressurized, with the isolation verified at a gauge, before any flange bolt is loosened. That condition is not optional and it is not yours to waive - a loop that reads pressure at the gauge stays bolted until plant operations has closed and locked the second valve. This costs 40 minutes of waiting on an operator, which is 17% of the four-hour plan gone before a wrench turns.
Hour one. The drain condition on the permit names a floor drain that discharges to a sump on the level below. The permit carries a line the tech nearly skipped: the sump is under a separate confined space permit that afternoon for a different contractor. Dumping the loop while that entry is live would put hot process water into a space with a person in it. The issuer's alternative is a portable containment tote, hand-pumped, which adds 50 minutes and costs about a fifth of the total plan.
Two conditions have now cost 90 minutes against a 240-minute plan, or 38%. Nothing has gone wrong. This is a permit system working.
Hour two. With the loop drained and the pump out, the tech finds the seal flush line badly scaled and wants to cut and re-pipe it. That work is not on the permit and involves a torch, so it is a different permit family entirely. Stopping to add it means finding the issuer, a hot work permit with a fire watch, and a check on the sprinkler zone above. Realistically this is a second visit.
How this should have been bid. Four hours of wrench time on a permitted site is not a four-hour visit. Add the 90 minutes the two conditions cost and it was a five and a half hour visit, near enough a 1.4x multiplier on the hands-on estimate. A shop that has done ten of these on the same site can read its own history and see whether that multiplier holds. The failure mode is bidding wrench time on a site that sells you clock time, then eating the difference on every ticket for a year and concluding the account is unprofitable when the estimate was simply measuring the wrong thing.
What would change the answer. If the shutdown had been scheduled with plant operations doing the isolation ahead of the crew's arrival, the first 40 minutes disappear and the multiplier drops to about 1.2x. That is a request you can make at the pre-job meeting, and it costs the facility nothing. If the sump entry had been on a different day, the containment tote is unnecessary. Neither of these is discoverable from the equipment. Both are discoverable from the permit desk, the day before.
Verifying you have the right permits before you start
Run this in the first ten minutes on site, not at the truck:
- Read the asset identifier on the permit against the tag on the machine, character for character. Sites run near-identical equipment in pairs and lines.
- Read the listed conditions aloud and name who satisfies each one. If a condition has no owner, it will not be satisfied.
- Ask what else is permitted in the area today. This is the question the form exists to answer, and it is the one most techs never ask.
- Confirm the window and set an alarm 30 minutes before it closes. That is the point at which you either close out or request an extension, and the extension is far easier to get before the expiry than after.
- Confirm who closes it and how. If the closer leaves at 1500 and your work runs to 1700, that is a problem to solve at 0800.
References
- 29 CFR 1910.147, control of hazardous energy for mechanical and stored energy; the electrical case is at 29 CFR 1910.333(b)(2), which 1910.147(a)(1)(ii)(C) carves out
- 29 CFR 1910.146 (general industry) and 29 CFR 1926 Subpart AA (construction), permit-required confined spaces
- 29 CFR 1910.252(a) and 29 CFR 1926.352, welding and cutting fire prevention; NFPA 51B for the hot work permit framework
- 29 CFR 1910.1026 and 29 CFR 1926.1126, hexavalent chromium; 29 CFR 1910.134 for the respiratory program the exposure requires
- See related: What a Hot Work Permit Is Actually Protecting; What a Confined Space Permit Changes About Your Day; How to Read a Site Safety Orientation for What It Requires