5 Myths About Permit-to-Work That Supervisors Still Believe

A permit-to-work system is a formal control for high-risk work, but it becomes fragile when the team treats the permit as proof that the job is safe instead of a decision that must stay true as the work changes. The document is useful only when the field, the shift, and the controls still match the assumptions written on it.

Permit-to-work fails quietly because the form looks disciplined. Signatures collect, boxes fill, and the crew starts moving, while the hazard changes after the permit is issued or the next shift inherits a job it did not authorize.

The practical thesis is simple. A permit-to-work is not paperwork with a safety label. It is a live operating decision. Across 25+ years leading EHS in multinationals and more than 250 cultural transformation projects, Andreza Araujo has seen that the permit gets stronger only when supervisors test the field instead of trusting the page. In Safety Culture: From Theory to Practice and A Ilusão da Conformidade, the pattern is the same: repeated decisions under pressure define control far more than polished documentation.

Myth 1: A signed permit means the job is safe

This myth sounds reasonable because a signature feels final. The permit has names, dates, and boxes, so the team assumes the risk has been handled. In practice, the signature only proves that someone approved a plan at a moment in time. It does not prove that the worksite stayed stable after approval or that the controls still match the job when the crew starts.

James Reason's work helps here because latent conditions do not disappear when the form is complete. The permit may look strong while the hazard has shifted, the barrier is missing, or the task has changed in a way the paper cannot see. ISO 45001 expects operational control, which means the system must control the work, not just document the intention to control it.

The safer habit is to treat the permit as a start point and then recheck the critical controls at the moment work begins. If the work changes, the permit changes with it. If the permit cannot survive the change, it never controlled the job in the first place.

Myth 2: The permit issuer owns the risk after signature

This myth survives because authority is attached to the issuer's name. People see the approved permit and assume the issuer now carries the risk. That assumption is convenient, but it is false. The work still belongs to operations, the crew still works in the area, and the supervisor still has to manage the conditions that can break the control.

Across multinational operations, Andreza Araujo has seen this pattern repeat. When ownership is vague, people wait for someone else to notice the drift. That delay is how a permit becomes a paper shield instead of a field control. The issuer can authorize the job, but the issuer cannot stand beside every exposure once the work starts.

What works better is explicit ownership. Name who owns the control, who owns the stop-work decision, and who owns the closeout check. When those roles are clear, the permit becomes a shared operating discipline instead of a handoff that hides responsibility.

Myth 3: If the permit was valid at the start, it stays valid until the end

This is one of the most expensive assumptions in high-risk work because the job rarely stays still. Weather changes, staffing changes, nearby work begins, a lift moves into the area, a contractor arrives late, or the crew finds a condition that was not visible at the start. A permit that looked correct at 8 a.m. may be weak by noon.

That is why permit-to-work handover matters so much. The article on how to audit permit-to-work handovers in 8 steps shows how to check the transition before a changed job gets mistaken for a continuous one. If the next shift receives the old permit without a fresh look at the field, the team is trusting continuity where discontinuity now exists.

The right question is not whether the permit was valid when signed. The right question is whether the permit is still valid after the work, the people, and the surrounding exposure have changed. If the answer is uncertain, the permit needs revalidation before the crew goes on.

Myth 4: A full checklist proves supervision

This myth feels true because a checklist creates the image of discipline. The boxes are full, the permit is tidy, and the supervisor has a copy. None of that proves the supervisor saw the barricade, checked the access route, verified the gas test point, or noticed that fatigue had already weakened the crew's attention.

A checklist is administrative evidence. Supervision is field judgment. The two are related, but they are not the same thing. A site can have a complete form trail and still lack real supervision if the person responsible never touched the worksite while the job was active.

In Make The Difference: Be a Leader in Health & Safety, Andreza Araujo treats leadership as visible action, not background approval. That is the right standard here. If the supervisor only appears at the office door, the checklist is carrying a job that the supervisor should be doing.

Myth 5: PTW is an EHS task, not an operations decision

This myth survives in organizations where EHS owns the template, the audit, and the language, while operations owns the schedule, the crew, and the pressure. Once that split is accepted, the permit becomes a compliance object. EHS checks the file, operations pushes the work, and the real decision moves into the gap between them.

The operational reality is different. PTW exists because the work is risky, which means the line leader, the supervisor, and the area owner must treat it as a production decision with safety consequences. If operations does not own the permit quality, then the permit will always be a late attempt to correct a decision that should have been governed earlier.

Andreza Araujo's experience in more than 250 cultural transformation projects points to the same lesson. Safety improves when leaders stop outsourcing control to EHS and start making the work decision visible where the work is actually done. That is how the permit stops being ceremony and starts being governance.

FAQ

What is the simplest way to judge permit-to-work quality?

Ask whether the permit still matches the field when work begins, when work changes, and when the next shift takes over. If the answer depends on the paper rather than the worksite, the permit is too weak.

Should EHS own permit-to-work?

EHS should define the standard, coach the system, and audit quality, but operations must own the work decision. If EHS becomes the owner of the job itself, the operation learns to treat the permit as someone else's problem.

What should supervisors verify first?

Supervisors should verify the controls that would fail fastest if the job changed. That usually means isolation, access, atmosphere, adjacent work, and the presence of the right people before the task moves forward.

Why do strong permits still fail?

Strong permits still fail when the job changes after the signature, when the supervisor trusts the checklist more than the field, or when operations treats the permit as a form to complete rather than a decision to govern.

Which Andreza Araujo book should a supervisor read first?

Make The Difference: Be a Leader in Health & Safety is the best starting point for supervisors, because it connects daily leadership behavior to control. Safety Culture: From Theory to Practice is the next step when the team needs the larger operating model.

What to do now

Start with one permit family and test it against five checks. Ask whether the permit still matches the field, whether the control owner is named, whether the change trigger is explicit, whether the supervisor saw the worksite, and whether operations owns the decision instead of handing it to EHS.

If the permit only looks safe on paper, it is not protecting the crew. The next step is to make the permit prove control in the field, and that starts with the permit-to-work audit trail guide and the leadership discipline in Andreza Araujo's books and tools.