How to Run a Hot Work Permit Review in 20 Minutes

A hot work permit is not permission to create sparks. It is a live control check that asks whether ignition sources, fuel load, fire watch, ventilation, and stop authority still match the field.

Across 25+ years leading EHS in multinational operations, Andreza Araujo has seen this fail in the same way every time. The document looks complete, but nobody walked the area, checked adjacent work, or confirmed that the fire watch was a real role and not a name on the page.

In Make The Difference: Be a Leader in Health & Safety, Andreza Araujo argues that supervisors own the release decision. That view fits hot work because OSHA 1910.252, HSE permit-to-work guidance, and ISO 45001:2018 all place operational control ahead of ceremony, even when the paperwork is pristine.

The practical thesis is simple. If the supervisor cannot prove the boundary in 20 minutes, the job is not ready. A permit that cannot survive a short field review is usually a control theater problem, not a tooling problem.

Key takeaways

• A hot work permit is a live release decision, not a signature that starts the spark.
• The supervisor should walk ignition sources, fuel load, fire watch, ventilation, and adjacent work before approval.
• OSHA 1910.252, HSE permit-to-work guidance, and ISO 45001:2018 all support operational control, but the field test proves it.
• The two biggest traps are stale assumptions and a fire watch that exists only on paper.
• A 20-minute review is fast enough to use daily and strict enough to stop weak jobs.

What you need before starting

The supervisor needs the permit, the work order, the area map, the current task description, the name of the fire watch, the extinguisher location, and the site rule for stopping the job. If the site requires gas testing, ventilation checks, or a hot work coordinator, those records must be current before anyone lights up equipment.

The key is not paperwork volume. The key is whether the documents still describe the field. Andreza Araujo has said in more than one leadership setting that a permit is only as strong as the boundary the crew can explain at the opening. When the spoken task, the permit, and the staged tools do not match, the work is not ready.

Hot work becomes more fragile when the area has residues, paint, insulation, dust, packaging, or nearby process lines. That is why the checklist must stay physical and specific instead of abstract.

Step 1: Define the exact task

Start by asking what the crew will actually do, what tool they will use, and which surface will receive heat or sparks. Welding, grinding, cutting, torch heating, and temporary repair work are not the same control problem, even when the permit form uses one generic label.

The common error is to approve the permit from the title alone. If the permit says welding but the crew begins cutting, cleaning, or heating a different point, the field has already moved away from the approved scope. Verify that the task description, the work order, and the tools staged at the point of work all match.

Step 2: Walk the ignition and fuel boundary

Walk the area where sparks may land, because the places that matter are often the ones that feel outside the job. Check the floor, the overhead space, cable trays, insulation, tarps, pallets, solvents, dust, and any container or duct that could collect heat or debris.

James Reason's idea of latent failures fits hot work very well. The permit does not usually fail because one thing goes wrong. It fails because housekeeping, supervision, and boundary control drift in separate places until the spark finds a path. Verification is simple. If the combustibles are not removed, shielded, or isolated, the permit is not ready.

Step 3: Verify the permit conditions and sign-off chain

Check who issued the permit, who accepted it, and who owns the area while the work is active. A good form still fails when the sign-off chain is unclear or when the area owner expects someone else to manage the risk. The supervisor should be able to explain why this permit belongs to this crew, in this place, right now.

The biggest trap is stale approval. A permit signed yesterday can be wrong this morning if adjacent work changed, if the shift changed, or if the fuel load changed. That is why the review must be live, not ceremonial. If the site rule requires a fresh permit after a break, a shift handover, or a change in scope, the supervisor should stop and reissue it.

Step 4: Recheck atmosphere, ventilation, and housekeeping

Hot work does not always require gas testing, but when the site procedure requires it, the reading must be current and representative. Ask where the sample was taken, whether ventilation was stable, and whether any nearby operation could have changed the air after the reading.

Then look at ventilation and housekeeping as one control. A fan that moves air in the wrong direction, a blocked extraction point, or a pocket of dust near the work zone can turn a small job into a wider exposure. Verification is not a paper exercise. The supervisor should be able to point to the airflow, the clean boundary, and the stop trigger without guessing.

Step 5: Place the fire watch in a real position

A fire watch is not a witness. It is an active control with line of sight, extinction means, and the authority to stop work the moment the boundary changes. If the person assigned to the watch is also expected to fetch tools, answer calls, or leave for another task, the control is already broken.

The supervisor should ask the fire watch to explain the stop criteria in plain language. That check exposes whether the role is real. If the answer is vague, the person is not ready. The watch must know where the extinguisher is, where the nearest exit is, and how long the post-job monitoring continues under site rule.

Step 6: Verify protection equipment and shutdown options

Check the extinguisher, fire blankets, spark containment, screens, and any temporary barrier that protects nearby work. If the job touches equipment that can be isolated, the supervisor should verify the shutdown option before the job starts, not after the torch is already on.

Hot work often sits close to other controls, and that is where confusion starts. If the job also involves opening piping, breaking a line, or touching stored energy, compare the boundary logic with Area Owner in 60 Days: Line Break Isolation Plan. The point is the same. A good permit protects the job because it understands the field, not because it was typed well.

Step 7: Test adjacent work and energy isolation

Ask what else is happening nearby. Grinding, painting, solvent use, tank cleaning, loading, flushing, or steam transfer can create a mixed-exposure zone that the original permit never saw. The review should include the crews who share the space, because the hottest failure is often the one that comes from another team.

Andreza Araujo has seen in more than 250 cultural-transformation projects that the same pattern repeats across industries. The permit fails when leaders assume that one control can survive every other job around it. It cannot. If the adjacent work changes the risk picture, the supervisor must refresh the permit or stop the job.

Step 8: Make the stop decision and record the learning

Close the review with a direct question. Is the job ready now, and what would force a stop? If the answer is unclear, do not convert uncertainty into permission. The supervisor should record what changed, what was checked, and what would have broken the permit if the work had gone ahead.

That record matters because learning is fastest when the leader writes down the reason for the stop, not just the reason for the start. In Safety Culture: From Theory to Practice, Andreza Araujo returns often to the idea that visible field decisions shape culture more than slogans do. Hot work is one of the clearest tests of that idea.

Final checklist

• The task, work order, and staged tools all describe the same job.
• The ignition and fuel boundary has been walked and cleared or protected.
• The permit conditions and sign-off chain are current and understood.
• Atmosphere, ventilation, and housekeeping still match the approved release.
• The fire watch is present, trained, visible, and ready to stop the job.
• Protection equipment and shutdown options were checked before the spark started.
• Adjacent work and energy isolation were reviewed before the permit was accepted.
• The supervisor made an explicit go or no-go decision based on live conditions.

FAQ

What is a hot work permit review?

It is a short field check before welding, cutting, grinding, or other spark-producing work starts. The review confirms that ignition sources, fuel load, fire watch, ventilation, isolation, and stop authority still match the live work.

Who should lead the review?

The operational supervisor or area owner should lead it, with EHS supporting when needed. Andreza Araujo argues in Make The Difference: Be a Leader in Health & Safety that the release decision belongs to the leader closest to the work.

Does every hot work job need the same review?

No. The exact controls depend on the task and the site rule. A simple repair on clean metal is not the same as hot work near residues, coatings, ducts, or an adjacent line break.

Does a fire watch replace the supervisor?

No. A fire watch is one control, not the whole decision. The supervisor still owns the permit, the field walk, and the stop decision, because the watch cannot repair a weak release process.

When should the job stop?

It should stop whenever the area changes, the fire watch is distracted, ventilation fails, a new ignition source appears, or the crew cannot explain why the permit still matches the field.