Hot Work Permits in Oil & Gas: Beyond the Checklist
Hot work permits look simple — until you trace the root cause of any major refinery fire and find an expired permit or a missed gas test. Here is what separates a compliant permit from one that prevents incidents.
Reviewed by The QHSE Standard editorial team
Fact-checked against ISO 45001, OSHA, EU OSH Framework Directive, and CCPS guidance. Independent of vendor influence — see our review methodology.
Why Hot Work Permits Fail
Reviews of major oil & gas incidents (BP Texas City, Tesoro Anacortes, Husky Superior) consistently identify hot work permitting failures as contributing factors. The permit existed — but the process around it broke down.
The Four Failure Modes
- Atmospheric testing was a snapshot, not continuous — flammable atmosphere drifted in after testing
- Isolation was assumed, not verified — line was "isolated" by a closed valve, not a positive blind
- Fire watch was a name on a form — same person had three other jobs that shift
- SIMOPS were not coordinated — adjacent crew opened a drain while welding was in progress
Gas Testing Strategy (Not Just LEL)
For oil & gas, test for at minimum:
| Gas | Action level |
|---|---|
| LEL (combustibles) | < 10% LEL — stop work; < 5% LEL preferred |
| O₂ | 19.5–23.5% |
| H₂S | < 10 ppm (8-hr TWA), < 15 ppm STEL |
| Benzene (refining) | < 0.5 ppm action level |
| CO (combustion sources nearby) | < 25 ppm |
Continuous monitoring — not a one-shot pre-work test — is the standard for any work > 30 min in a process area.
Positive Isolation: Blinds, Not Just Valves
"Double block and bleed" is the minimum for hydrocarbon service. For high-risk work, insert a blind (paddle blind or spectacle blind) and document it on the blind register that closes out with the permit.
Fire-Watch Staffing
- Dedicated, not "in addition to" other duties
- Trained on the specific extinguishers and alarm procedures for that area
- Stays on station for 30 minutes minimum post-work (60 min for slag-producing work)
- Has clear line-of-sight to the work AND adjacent areas where sparks could land
SIMOPS Review Before Issuing
Before signing the permit, the permit issuer must verify no incompatible activities are scheduled within the impact zone:
- Drain / sample / vent operations on adjacent equipment
- Lifts overhead
- Adjacent confined-space entries
- Pigging / online cleaning operations
The Combined Permit Approach
Most incidents involve hot work + isolation + confined space — handled as separate permits that no one cross-references. The Hot Work + Energy Isolation Permit template combines all three into one auditable record with a single sign-off chain. Free download.
Software covered in this category
Browse all platforms →- Process Safety4.5
Haz360
Cloud-based process hazard analysis (PHA) software for managing the process safety lifecycle across multiple assets.
Read review - QHSE Management4.3
Cority
Enterprise EHSQ & Occupational Health Platform
Read review - QHSE Management4.3
Synergi Life (DNV)
Risk & QHSE management by DNV
Read review
Looking for the Right QHSE Software?
Take our 60-second quiz and get personalized recommendations.
Get Matched — Free