How to hand back plant and close a permit to work safely

Do not close a permit just because its time window has ended or the contractor says the job is finished. The performing authority should confirm the state of the work, people, tools and temporary arrangements. The issuing or area authority should verify that the plant or area has been returned to a safe condition under the site procedure. The person taking operational control should acknowledge the hand-back and any outstanding restrictions.

HSE’s permit guidance specifically calls for a hand-over process on completion, and it asks whether the work is complete, the plant safe and operational control acknowledged. Closing a digital record and returning equipment to service are related but distinct decisions. A permit may be administratively complete while an item remains isolated awaiting testing, and a permit cannot be safely cancelled while workers are still in the work area. Record the actual state rather than forcing it into a single green status. HSE says a permit is a communication and coordination tool and does not itself make a job safe. HSE: permit-to-work systems; HSE: HSG250 permit guidance.

This guide explains the information and decision flow. It is not a procedure for removing an electrical isolation, opening a confined space, testing a pressure system or restarting a chemical plant. Those tasks require site-specific competent people, technical methods and authority. Use this framework to find hand-back gaps in the site’s own system.

Why the end of the job is a high-risk point

During maintenance, the normal operating state is deliberately changed. Equipment may be isolated, guards removed, pipes opened, temporary barriers installed or alarms inhibited. A contractor may finish its assigned repair while the plant is still not ready to run, and another team may believe the permit has closed and start production. HSE’s technical permit guidance identifies failure to hand over plant in a safe condition at permit completion or cancellation as a major-hazard issue in the process industries. HSE: permit technical measures.

The hand-back is a transfer of reliable information and control. The performing team knows what it did and what remains. The issuing authority knows the permit boundaries, isolations and concurrent work. Operations knows what normal use requires. Those three views must agree. A signature made at a desk without checking the plant may not bridge the gap. The need is wider than chemical plants, though technical details differ. A building maintenance team may need to reinstate a fire alarm zone after hot work, an electrician may have to hand an isolated distribution board back to an authorised person, and a roof contractor may leave temporary openings or barriers. The same question applies: who has verified the condition, and who now controls access and use?

Define hand-back before work starts

A strong permit sets the completion test at issue. Identify the work boundary, equipment, isolations, tests, inspections, temporary precautions, linked permits and the people who will sign or acknowledge the return. If the task may span a shift, state how the partially completed job will be left safe and communicated. HSE’s permit guidance highlights both shift handover and plant hand-over as core elements, and its COSHH permit page describes a declaration that equipment or machinery is ready for normal use before it returns to service. HSE: COSHH permits.

Do not write “return to normal” without defining what normal means. If a guard was removed, name which guard must be refitted and checked. If an isolation was applied, name who may remove it and in what sequence. If pipework was opened, state what testing or inspection is required. If a temporary fire watch was part of hot work, state when and by whom it ends. The answers depend on the work and the technical system, but the permit process should require them to be made explicit. Agree what happens if the job cannot be completed. A safe stopped state is not the same as a completed state, so the hand-back record should show whether plant remains unavailable, which isolation or barrier stays in place, who owns it, and what permit or plan controls the next step.

Confirm the work status with the performing authority

The person or team who performed the work should declare what was done, what was not done and any deviation from the permitted scope. Ask whether every person has left the controlled area, whether tools and materials have been accounted for, whether temporary access equipment is removed or controlled, and whether any damage or new defect has been reported. Do not assume that “job completed” means no further commissioning, inspection or cleaning is needed. HSE’s HSG250 hand-back questions begin with whether the work has been completed, confirmed by the performing authority. That declaration is a starting point for verification, not the end of the process. If the contractor found a different defect or changed the method, the issuing authority should know before any return-to-use decision.

If the work is incomplete, record the remaining scope and the current safe state. There may be a new permit for the next phase, an extension under the site’s rules, or a controlled handover to another crew. Do not create a false completion declaration merely because the original authorisation expires at the end of the shift.

A clear completion statement

Consider a statement such as this. “Valve replacement completed on line A. Tools and team withdrawn. Flange test pending. Isolation I-27 remains applied. Line A is not available for operation.” This says much more than “done”. The relevant competent people must decide the actual testing and isolation method for the plant. The example only illustrates the information a hand-back needs.

Verify the plant or area condition

The issuing or area authority should check the elements relevant to the permit. Are guards, covers and barriers restored? Are open systems closed? Are temporary supports or equipment removed or secured? Have required inspections, tests or commissioning steps been completed and recorded? Are fire detection or ventilation arrangements reinstated? Are any residual hazards labelled and communicated? This check should follow the site’s technical procedure. HSG250 asks whether plant or equipment has been returned to a safe condition and whether removal of isolations has been verified by the person responsible for signing off the permit. It does not mean every isolation should simply be removed at permit closure. Some must remain in place because work is incomplete or another permit depends on them, so verify the intended state and the authority for changing it.

For equipment with a defect, connect the permit hand-back to the defect-to-return-to-service process. A repaired component may require a separate competent inspection or test before use, and the permit can record that maintenance work ended while the asset status remains out of service. In the same way, a task can be completed while an area remains restricted for a reason unrelated to the contractor’s work. Keep those statuses separate and visible.

Reconcile linked permits and isolations

One isolation can protect several permits, and one permit can depend on multiple isolations. HSE says permit systems should link related permits and consider simultaneous or interdependent activities. Before a plant or area is returned, check whether another team is still working under a linked permit or relying on the same isolation or barrier. Use an isolation register or an equivalent site-controlled method to reconcile identifiers, boundaries and status. The person releasing an isolation should understand all dependants, not only the permit they happen to be closing. A digital system may show linked records, but the physical state and the people at work still need verification. Failure to see a permit because it sits in another contractor’s inbox is an interface problem, not a software formatting problem.

Scope changes matter at hand-back. If work moved to adjacent equipment, the original permit may not describe what was disturbed. Reconcile the actual work with the documents before normal operation resumes, and obtain a revised drawing or test record where one is needed. Ask the performing team to describe the deviation directly rather than inferring it from a completion photograph.

Obtain explicit operational acceptance

The person who will control the plant after maintenance should accept the hand-back with a clear understanding of its state and restrictions. HSG250 asks whether the person in control of operational activities has acknowledged on the permit that the plant or equipment has returned to production control. A local system may use a different title, but the decision should not be implied from a timestamp or an automatic expiry. State whether the plant is ready for normal use, ready only for testing, or still unavailable. Record outstanding defects, temporary arrangements, follow-up work, changed operating limits and who will monitor them. If the incoming operator is not satisfied, keep the hold and resolve the difference. The goal is a safe, shared picture of the plant, not a complete set of electronic signatures for an unresolved condition.

Communicate to affected people. Production staff, facilities managers, other contractors, security or occupants may need to know that an area has reopened or that a restriction remains. Update signs, locks, barriers and control-room displays consistently with the permit status.

Handle shift changes and unfinished work deliberately

HSE says many accidents have involved communication failures at shift handover, often during planned maintenance. Effective handover has preparation, a direct exchange of task-relevant information and cross-checking by incoming personnel. If a permit-controlled job spans shifts, the outgoing team should identify work done, remaining work, plant condition, isolations, barriers, simultaneous activities and any unexpected findings. The incoming issuing and performing authorities should check that they understand the current state and that the permit remains valid or is properly reissued under the site’s rules. A forwarded PDF with no discussion may be inadequate for a complex or high-hazard handover. HSE: shift handover.

The next shift should see a clear list of live permits and isolated equipment. HSE’s permit guidance recommends systematic display or recording of permits so staff can check which equipment is isolated or under maintenance. In a digital system, that means the current status must be accurate and accessible to the people making work and operations decisions.

Expiry is not hand-back

A time window can prevent new work being authorised after a deadline. It cannot prove the physical job ended, that everyone left the area, or that the isolation is safe to remove. If a permit expires while work is incomplete, control the stopped state and arrange extension or reissue under the site’s process. Do not let an automated clock event change the plant’s safety status without human verification.

Cancellation needs a controlled state too

A permit may be cancelled before work starts, after some preparatory isolation, or after partial work. The cancellation record should say which of those happened. If the area was opened, an isolation applied or a guard removed before cancellation, there may still be restoration steps, so a simple “cancelled” status should not imply that nothing changed physically. HSE’s technical permit guidance lists failure to hand over plant in a safe condition on permit completion or cancellation among significant hazards. The issuer should verify what was done and what remains before allowing ordinary use or other work in the area. If cancellation occurs because conditions changed or the work was unsafe, record the reason and what must be reassessed before a new permit is issued. Avoid cloning the cancelled permit without checking the new conditions, because the cancellation can be useful learning about planning or site information that was missing.

Worked example: electrical maintenance across shifts

A contractor has a permit to work on electrical equipment. At shift end, a replacement part has been fitted but final checks are incomplete. The outgoing team records who is clear of the equipment, the work completed, the outstanding test and the isolation that remains. The incoming team and authorised person review and cross-check the state before further work. Once the work and required checks are complete, the permit holder makes the appropriate declaration, the clearing person indicates whether the equipment is fit for service, and the permit is cancelled under the electrical safety procedure before re-energisation. HSE’s electrical safe-working guidance describes a similar sequence, including removal of tools and people, a fit-for-service indication and cancellation before re-energising. The exact roles and technical steps must follow the site’s authorised electrical procedure. This guide does not tell an unqualified person how to isolate or re-energise equipment. HSE: electricity at work safe practices.

Worked example: hot work in an occupied building

A maintenance contractor finishes hot work in a plant room. Before hand-back, the team accounts for people and tools, confirms the work-area condition, checks any fire-watch and temporary fire-protection arrangements under the site’s procedure, and reports any new defects. The building manager verifies that the area can return to its agreed state and that any affected alarm or detection arrangement is restored by the authorised people. If a test or reinstatement remains outstanding, the room stays restricted and the permit record says so. The example illustrates the separation between “welding finished” and “room ready for normal use”. It does not prescribe a universal fire-watch duration or a technical alarm test, which depend on the site, the work and competent fire-safety arrangements.

What the close-out record should show

Keep the permit identifier, plant or area, scope, issuer and holder, actual work status, declarations, isolation references, linked permits, tests or inspections, residual restrictions, operational acceptance and time. Record exceptions and attachments that explain the decision. A short, accurate record is more valuable than pages of boilerplate that do not reveal whether a line, circuit or room was safe. Match digital status to the real world: “closed” should mean the site’s closure criteria were met, while “work completed but plant unavailable” may need a distinct status or a linked defect and commissioning record. If the software offers only a closed or open choice, use explicit notes and a separate asset hold so the operational status stays clear. Product design should support the safety process, not force reality into a misleading label.

HSE cautions that electronic permit systems need consideration of the risks in changing from paper to digital, good interface design and training in the permit-to-work process, not just the screen. A QR acceptance or online closure can improve auditability but does not replace site verification and competent judgement.

Common failures to remove

• Permit expires, so plant is treated as available. Time-bound authority is not physical hand-back.
• Contractor signs “complete” while commissioning remains. Record the unfinished test and the hold state.
• Isolations are removed without checking linked permits. Reconcile dependencies and the people at work.
• Operations never acknowledges the returned plant. Obtain a clear acceptance and communicate restrictions.
• Cancellation is assumed to mean no work happened. Check the area and any preparatory changes.
• A shift inherits only an emailed permit. Give a direct handover of status, hazards and outstanding actions.
• Software status outruns physical checks. Keep the operational state visible even when administrative closure is complete.
• Every permit is treated alike. The hand-back evidence for a confined space, an electrical circuit and hot work differs, so use competent, task-specific procedures.

FAQs

Sources

• HSE: permit-to-work systems
• HSE: HSG250 permit-to-work guidance
• HSE: COSHH permits to work
• HSE: permit-to-work technical measures
• HSE: shift handover
• HSE: electricity at work safe working practices, HSG85

Related: equipment defect to return to service, contractor scope change, and managing contractors in shared workplaces.