Simultaneous Operations: 4 Distortions That Make Permit-to-Work Look Controlled

The permit is signed, the isolation list is attached, and every contractor has completed the briefing. Then a production change moves one team into the same area where another team is opening equipment. Nothing looks obviously wrong, yet the risk picture has already changed.

Simultaneous operations are not controlled by collecting more signatures. They are controlled when leaders can see how one workfront changes another workfront's assumptions, barriers, timing, and authority to stop.

A permit-to-work system remains reliable during simultaneous operations only when it governs interfaces between jobs. The plant must know who owns the combined risk, which conditions can change, how isolation boundaries interact, and what evidence allows work to continue.

Why a signed permit is not enough

Permit systems make hazardous work deliberate by identifying the job, hazard, precautions, and authorizing person. ISO 45001:2018 requires organizations to control changes, contractors, and operational planning as connected parts of the management system. HSE guidance on permit-to-work makes the same practical point through coordination and handover. James Reason's work on latent failures helps explain why a visible field action can conceal a fragmented plan or unclear owner.

1. Ownership becomes shared, and therefore vague

Every workfront can have an owner while the interaction between workfronts has none. Maintenance owns the equipment, operations owns production, the contractor owns its crew, and EHS reviews paperwork. The combined risk sits between them. A named operational role must decide whether work may proceed after another job changes location, energy state, access, or sequence. In projects supported by Andreza Araujo, this is a recurring leadership test because accountability becomes visible when someone has authority to stop the combined plan.

2. Workfront maps miss the interaction between jobs

Individual permits identify the vessel, line, machine, roof, excavation, or panel involved in one job. They do not always map neighboring work that can change access, atmosphere, dropped-object exposure, traffic, communication, or emergency response. A simultaneous-operations review needs a workfront map showing physical overlap, shared equipment, rescue routes, energy sources, and conditions that can make one crew misread another boundary. The plant's difference between a permit, a job safety analysis, and control verification becomes critical at that interface.

3. Isolation boundaries are treated as static

Isolation is often recorded as if it were permanent. In simultaneous operations it changes when a valve opens for testing, a panel is re-energized for diagnosis, a bypass is installed, or a contractor needs new access. A permit may still display its signatures while the field condition is no longer authorized. Leaders need revalidation triggers for handover, workfront change, test, bypass, contractor change, weather, and interruption. HSE guidance and OSHA process-safety requirements support verified conditions rather than administrative continuity.

4. Timing is mistaken for control

A schedule can coordinate Job A before Job B, but it cannot prove that the field remains ready at the planned moment. Delayed isolation, late arrival, or incomplete testing can turn a sequence into an overlap, after which the permit is used to preserve production rather than challenge the condition. The permit handover failures that pass risk forward show why condition-based release is stronger than a time stamp. Each transition needs minimum evidence, a witness, and a clear response to contradictory results.

5. Field verification checks documents instead of interfaces

A field walk can confirm that a permit is posted, a barricade is visible, and equipment is present. It should also test the assumptions connecting workfronts. Can both crews explain the boundary? Do they use the same stop signal? Can each supervisor identify the other job's energy source? Does a rescue route remain open after hose, cable, material, or scaffolding is installed? Andreza Araujo's experience across more than 250 cultural transformation projects reinforces the difference between repeating a rule and demonstrating it under production conditions. The safety culture evidence walk should include these interaction tests.

6. Contractors receive a different operational picture

Contractors often receive the permit for their own activity while the plant retains information about adjacent work, temporary changes, and production constraints. Compliance with the document does not guarantee awareness of the combined risk. The worksite needs a common operating picture explaining what is changing, which boundaries are shared, who can stop the job, and how conflicts are escalated. If a contract rewards uninterrupted progress without protecting time for revalidation, the commercial decision has become a safety decision.

7. Escalation is delayed by production pressure

Contradictions appear throughout the shift. A crew needs access through another exclusion zone, a test is incomplete, a shutdown becomes shorter, or a barrier is moved for material handling. When there is no fast escalation path, people solve the conflict locally and a temporary exception becomes normal work. The escalation design should state what must stop, what may continue under a named compensating control, and which leader decides when teams disagree. The temporary field-change screen provides an adjacent discipline.

8. Closeout restores paperwork but not control

Closeout must restore the shared system to a known state. Tools may be removed, blinds changed, guards reinstalled, temporary cables left behind, and another crew may still be nearby. A permit can close while the next workfront inherits an altered condition. The accountable leader should answer what changed, what was restored, and who accepted the condition for the next activity. Otherwise the site has closed a document rather than closing the risk.

Comparison table for the four distortions

If a plant cannot explain how it reconciles conflicting workfronts within minutes, it does not yet have simultaneous operations under control. It has individual permits and an exposure between them.

The failure is usually organizational before it is technical. The work may be competent, the permit complete, and the equipment sound, yet interfaces can still defeat the intended barriers.

Plant leaders can use the Andreza Araujo safety leadership resources to connect field evidence, operational decisions, and cultural transformation.

What leaders should change before the next overlap

Start with one high-risk work window and map every active workfront, shared boundary, changing energy state, rescue route, and decision owner. Then observe transition points instead of reviewing only documents. Andreza Araujo's work in multinational environments, including a documented 50% accident-ratio reduction at PepsiCo South America in six months, points to the same leadership lesson: results come from changing decision cadence and ownership, not from asking people to sign more forms.

Simultaneous operations are controlled when the organization manages interaction as a first-class risk. The permit remains useful when leaders use it to coordinate changing conditions, shared authority, and field evidence.