Steel Plant Pre-Startup Safety Review PSSR Checklist

Permit-to-work systems are the primary control mechanism protecting workers performing high-risk tasks in steel mills. A permit verifies that: the work scope is clearly defined, the location is isolated from hazards, the atmosphere is safe (for confined spaces), the worker has required certifications, and that supervisors and the permit issuer have reviewed and approved all controls. Yet 41% of steel mill confined space incidents and 34% of hot work fires occur despite a permit being issued—meaning the permit was issued but controls were either inadequate, not verified, or abandoned during execution. The gap is not the permit system itself but poor execution: permits issued without site verification, permits issued by unqualified personnel, permits extended beyond their expiration time without re-evaluation, permits issued without atmospheric testing despite being required, and workers operating without posted permits. Oxmaint's digital work permit platform automates permit issuance, embeds a risk-scoring engine that flags high-risk permits for elevated approval authority, timestamps all verifications, and prevents permit extensions without full re-evaluation—ensuring permits protect rather than merely document.

Enforce Permit-to-Work Compliance Through Digital Control Risk-scoring engine, permit issuance checklists, atmospheric testing integration, continuous monitoring, and audit-ready documentation.

Start Free Trial Book a Demo

1. Permit Request & Scope Verification Before Issuance

A permit should never be issued for vague work scope. "Replace bearings on pump" requires a 30-minute discussion to clarify: which pump, what type of bearing, will the pump need to be de-energized and locked out, is the bearing sealed or exposed (splash hazard), are there confined space risks below the pump deck, what is the scheduled completion time. Vague scope leads to scope creep, unauthorized equipment entry, and incidents. Permit scope must be so specific that any technician reading it understands exactly what work is authorized and what work is prohibited.

Validate Permit Request Completeness & Assign Risk Score When a request for a permit arrives, verify that all required information is present: (1) Work scope (specific, not vague); (2) Work location (equipment ID, zone, exact location on equipment); (3) Scheduled start date and estimated duration; (4) Work type (hot work / confined space / height / electrical / pressure isolation); (5) Requestor name and job title; (6) Equipment shutdown/isolation status. Auto-generate a risk score based on: work type (hot work + confined space = higher score), location (PSM area = higher score), identified hazards in clearance radius (gas lines = higher score), atmospheric hazards (oxygen deficiency potential = higher score), and active adjacent permits (concurrent hot work in same zone = higher score). In Oxmaint, assign score thresholds: score 1-3 standard single-sign-off, score 4-6 dual-authority approval, score 7+ requires safety officer review and approval.

Perform Site Visit & Physical Verification of Work Area Conditions The permit issuer (typically the Plant Safety Director or authorized Permit Authority) must physically visit the work location to verify: (1) Equipment is in the stated location and matches the description; (2) Identified hazards in the clearance radius (gas lines, electrical equipment, other active equipment) are correctly identified on the permit; (3) Space for conducting the work is adequate and safe; (4) Isolation points are physically accessible and clearly marked; (5) Emergency exits and assembly points are within safe distance; (6) Fire suppression equipment (extinguishers, hose racks) is positioned and accessible. Do not issue permits based solely on a phone call or work order description. Physical verification prevents issuing a permit for work on equipment that is in a different location than expected, or for work in a space that has additional hazards not captured in the initial request. In Oxmaint, require the permit issuer to attach a dated photo of the work area during site verification—this photo becomes proof the inspection occurred.

Verify Worker Qualifications & Required Certifications A permit must not be issued to a worker who lacks required certifications. Examples: (1) Hot work permit to a welder without current hot work permit training or medical surveillance for welding fumes; (2) Confined space entry permit to personnel without confined space rescue training and medical fitness clearance; (3) Work-at-height permit to someone without fall protection training; (4) Electrical work permit without electrical safety training. Query the training database or CMMS to confirm certifications are current (not expired). If certifications are missing or expired, the permit cannot be issued—the work must be rescheduled or a different technician assigned. In Oxmaint, auto-check certifications against the permit work type and flag mismatches before permit issuance.

Identify Concurrent Work & Assess Permit Conflicts A hot work permit in zone A combined with an overhead crane operation in zone A creates a conflict (falling debris from hot work could land on crane operator, hot work may prevent crane operation). Before issuing a new permit, query active permits in the same location. If conflicts exist, either: (1) Delay the new permit until existing permits expire, (2) Issue the new permit with explicit conflict-avoidance conditions (e.g., "hot work suspended when crane is in operation"), or (3) Escalate to the permit authority for executive decision. In Oxmaint, create a permit scheduling view showing all active permits by zone and date. When a new permit is requested, the system auto-flags overlapping permits and requires conflict resolution before issuance.

2. Permit Conditions & Safety Controls Verification

The permit conditions section lists the specific controls that must be in place before work can start. These controls translate the permit's work scope and hazard identification into concrete, verifiable requirements: "Atmospheric test required—O₂ minimum 19.5%, maximum 23.5%" is a testable condition; "Ensure adequate ventilation" is not. Inadequate conditions lead to incomplete control implementation and incidents.

Define Isolation & Energy Control Conditions If work requires equipment isolation (lockout-tagout), the permit must specify: (1) Equipment to be isolated (equipment ID and name); (2) All energy sources (electrical, pneumatic, hydraulic, thermal, potential); (3) Isolation method for each source (electrical disconnect location, pressure bleed valve location, mechanical lock point); (4) Zero-energy verification requirement (pressure gauge test to confirm zero, electrical continuity test to confirm de-energized); (5) Authorized LOTO coordinator and certified lock/tag ID numbers. The permit must be explicitly tied to the LOTO procedure document so workers can reference the exact isolation sequence. In Oxmaint, link each permit's isolation requirement to the stored LOTO procedure for the specific equipment, and auto-populate the permit with equipment-specific isolation details.

Establish Atmospheric Test Requirements & Scheduling For confined space entry or hot work adjacent to confined spaces, a permit must specify: (1) Atmospheric parameters to test (oxygen level, hydrogen sulfide, carbon monoxide, etc.); (2) Acceptable test ranges (e.g., "O₂ 19.5%-23.5%, H₂S less than 10 ppm"); (3) Test frequency (initial test before entry, retest every 2 hours during work, retest after any ventilation stoppage); (4) Certified gas tester identity and credentials. Atmospheric testing is not optional or estimated—it must be performed with calibrated equipment and results recorded. In Oxmaint, store atmospheric test results in the permit record with timestamp, tester name, equipment ID, and readings. If an atmospheric test is due and not completed, the permit status automatically shifts to "At Risk" and alerts the permit authority.

Define Fire Watch & Fire Prevention Control Requirements For hot work permits, the permit must specify: (1) Fire watch assignment (trained personnel designated to monitor for fire); (2) Fire watch duration (typically work time plus 30 minutes post-work); (3) Fire suppression equipment present and ready (type and quantity of extinguishers); (4) Clearance radius (typically 35 feet for outside surfaces, additional distance for enclosed spaces); (5) Combustible materials removed or protected; (6) Opening sealed (if work is adjacent to cavities); (7) Ventilation procedures to prevent spark travel. A common failure is issuing a hot work permit without assigning a specific fire watch person—work proceeds unmonitored, a spark lands in a wall cavity, and a fire develops. In Oxmaint, the fire watch assignment is a required field on hot work permits; the permit cannot be issued without a named, trained fire watch assigned and confirmed available.

Specify PPE & Respiratory Protection Needs The permit must be explicit about required PPE: "Hard hat, safety glasses with side shields, steel-toe shoes, fire-resistant jacket, insulated gloves (ANSI Class 0 minimum)" rather than generic "wear PPE." If respiratory protection is required (welding fumes, dust, potential toxic gas), the permit must specify: type (N95 mask / half-mask respirator / supplied air), fit-testing requirement (employee must have current fit-test certification), cartridge type, and cartridge change frequency. Respiratory protection cannot be guessed or assumed—workers without fit-testing will not achieve expected protection despite wearing a mask. In Oxmaint, link respiratory protection requirements to the certified fit-test database; the permit cannot be issued if the assigned worker's fit-test is expired or absent.

3. Permit Execution & Real-Time Monitoring

A permit issued is not a permit executed. Permit execution requires: pre-work verification that all conditions are in place, continuous monitoring during work to ensure conditions remain met, and post-work verification that work is complete and site is restored. Many steel mill incidents occur when conditions change mid-work (e.g., adjacent equipment starts up, atmospheric test was performed 4 hours ago and atmospheric conditions have shifted, isolation is broken to move equipment) and the permit is not updated or work is not immediately stopped and reassessed.

Conduct Pre-Work Verification & Issue Work Authorization Before work begins, the permit holder (the worker or shift supervisor) must verify that all permit conditions are physically in place: (1) Equipment is isolated and zero-energy confirmed (locks in place, tags affixed, test performed); (2) Atmospheric tests completed and results acceptable (for confined space); (3) Fire watch assigned and positioned (for hot work); (4) Required tools and PPE are available; (5) Emergency equipment (eye wash, emergency shower) is accessible; (6) Communication system (radio or phone) is tested and working. Create a pre-work checklist that the permit holder completes and signs before work authorization is granted. In Oxmaint, this checklist is mobile and includes a simple go/no-go decision: all items confirmed = permit authorized to proceed; any item not confirmed = work delayed until corrected.

Monitor Permit Conditions During Work & Log Compliance Status During work execution, a supervisor or observer (not necessarily the permit issuer) must periodically monitor that permit conditions remain in compliance. For hot work: is the fire watch actually in position and alert (not working on a laptop), is the 35-foot clearance still maintained (materials have not been moved into the clearance zone), is the fire suppression equipment accessible? For confined space: are atmospheric tests being re-performed on schedule, is the communication system still functioning, is the rescue equipment ready? Create a monitoring log where the observer documents spot checks (e.g., "1400 hrs check: fire watch present, clearance zone clear, extinguisher accessible") or identifies issues (e.g., "1430 hrs: adjacent equipment started, permit authority contacted for conflict assessment"). In Oxmaint, allow observers to log compliance updates via mobile; critical issues (e.g., lost atmospheric test, isolation broken) auto-alert the permit authority and trigger immediate work suspension.

Enforce Permit Expiration & Prevent Unauthorized Extensions A permit issued from 0800 to 1600 hours is valid only during that window. If work is not complete by 1600 hours, the permit expires and work must stop. Do not permit informal extensions ("We'll finish in 10 more minutes"). Require a formal permit extension process: stop work, verify that all conditions are still acceptable, re-verify isolations and atmospheric tests, confirm worker availability and fatigue status, and issue a new permit (not an extension of the old permit). Many incidents occur when workers continue work beyond permit expiration, atmospheric conditions have deteriorated, and incidents ensue. In Oxmaint, set permit expiration alerts at 30 minutes before expiration and block work from continuing past expiration unless a new permit is explicitly issued. Do not allow workarounds like extending shift hours—require full re-verification.

Close Permit & Verify Work Completion & Site Restoration When work is complete, the permit must be closed formally. Closing checklist: (1) Work is complete and meets specification (not "approximately done"); (2) Equipment is restored to normal operation (locks and tags removed by authorized personnel only, isolation restored); (3) All debris and waste removed from work area; (4) Fire watch extended at least 30 minutes past work completion (for hot work) with no fire indicators; (5) Site is secure and safe for normal operations. Only after this verification is complete should the permit be marked "Closed." If work scope was not fully completed, issue a new permit for the remaining work rather than extending the closed permit. In Oxmaint, the permit closure checklist mirrors the pre-work verification—ensuring equal rigor at the beginning and end of work.

4. Permit Authority & Approval Process Documentation

A permit is only as strong as the authority issuing it. An unqualified permit issuer or an overworked issuer rushing through approvals introduces systematic risk. Permit authority must be clearly defined, limited to trained and authorized personnel, and documented with approval trails. OSHA expects to see evidence that the person signing a permit had the authority to approve it, understood the hazards, and verified conditions before approval.

Define Permit Authority Roles & Training Requirements Establish clearly who has authority to issue different permit types: (1) Standard confined space entry—qualified supervisor trained in confined space procedures; (2) Hot work with PSM area involvement—safety officer or plant manager; (3) Emergency permits (urgent work outside normal schedule)—plant manager only; (4) Permit extensions—same authority level as original issuer; (5) Work-at-height involving fall protection—trained fall protection competent person. Each authority role must have formal training on: permit system procedures, hazard identification, control adequacy, OSHA requirements, and documentation. Maintain a "Permit Authority" list in Oxmaint with each person's name, role, authority limits (which permit types they can issue), training date, and certification expiration. Review authority status annually and update as personnel change roles or leave.

Implement Risk-Scored Approval Authority & Escalation Use the risk scoring system to determine approval pathway: low-risk permits (score 1-3) require single approval from a standard permit issuer; medium-risk (score 4-6) require dual approval (permit issuer + shift supervisor); high-risk (score 7+) require safety officer and plant manager approval. Establish an escalation procedure: if a permit scores high-risk but the requestor wants to proceed with minimal controls, escalation is required. Example: requested to issue a hot work permit in a confined space during night shift with minimal supervision—this scores high-risk and must be escalated to plant manager for approval or rejection. In Oxmaint, auto-route permits based on risk score; high-risk permits automatically queue for safety officer review and cannot proceed without explicit approval.

Maintain Audit Trail & Document Approval Decisions Every permit must have a complete audit trail: requestor, request date/time → risk score and justification → approval authority → approvals/rejections with dates/times → permit execution log → closure. If a permit is rejected or escalated, document the reason for rejection so future permits can address the gap. Example: permit rejected because "worker lacks hot work certification—reschedule after certification completed." This rejection is searchable evidence that the facility enforced certification requirements. In Oxmaint, the permit record is an immutable log—once entered, information cannot be deleted or modified without a secondary approval. All approvals are electronically timestamped and signature-captured (digital signature or employee badge ID).

Generate Compliance Reports & Track Permit Program KPIs Monthly, analyze permit data: (1) Total permits issued; (2) Percentage by permit type (hot work / confined space / height / electrical); (3) Average permit duration; (4) Permits that required risk escalation (medium and high-risk percentage); (5) Permits cancelled or rescheduled (indicates planning gaps); (6) Average approval turnaround time; (7) Any permits closed with issues or incomplete work. These KPIs reveal systemic trends: if 40% of permits are high-risk and being escalated, it indicates either high hazard load or inadequate planning. If permits consistently miss expiration times, it indicates work estimation is poor. Use these insights to drive preventive maintenance improvements (reduce high-risk work through better PM) or planning improvements (better upfront scope definition). In Oxmaint, generate these reports automatically and present them to plant management monthly as part of the safety dashboard.

Enforce Permit Compliance & Control High-Risk Work Risk-scoring engine, condition verification, continuous monitoring, permit authority training, and compliance dashboards—permit system that protects.

Start Free Trial Book a Demo

Work Permit Issuance & Compliance — Frequently Asked Questions

1. What is the purpose of a permit-to-work system in steel mills?

A permit-to-work system ensures high-risk work (hot work, confined space entry, energy isolation) is performed only with documented hazard assessment, required controls in place, competent personnel, and supervisory approval. Permits prevent scope creep and ad-hoc work without hazard review.

2. What is risk scoring in permit issuance?

Risk scoring evaluates permit characteristics (work type, location, identified hazards, concurrent work) and assigns a numerical score. Higher-risk permits require elevated approval authority—medium-risk permits require dual approval, high-risk require safety officer review—preventing inadequately-reviewed permits from proceeding.

3. Why is atmospheric testing required for confined space permits?

Confined spaces may contain insufficient oxygen, toxic gases, or explosive atmospheres that kill workers within minutes. Testing with calibrated equipment verifies the atmosphere is safe before entry and monitors for atmospheric change during work. Testing cannot be estimated or guessed.

4. Who should be assigned as the fire watch for hot work permits?

Fire watch must be a trained, alert person dedicated solely to monitoring for fire—not a person multitasking or working on a laptop. The fire watch must remain in position until at least 30 minutes after hot work completes. Fire watch cannot be assigned informally; the permit must explicitly name the fire watch person.

5. Can a permit be extended if work is not complete by the expiration time?

No permit should be extended informally. If work is not complete, the original permit expires and work stops. A new permit must be issued with full re-verification of conditions, atmospheric tests, isolations, and worker fatigue status before work resumes.

6. What happens if conditions change mid-work (e.g., adjacent equipment starts)?

Conditions change may invalidate the permit. Work must immediately stop, the permit authority must reassess the new conditions against the permit scope, and either work resumes with updated controls or the permit is cancelled and rescheduled.

7. Why must the permit issuer perform a site visit before issuing a permit?

A site visit verifies that hazards are correctly identified, work area conditions are suitable, equipment matches the description, isolation points are accessible, and emergency procedures are feasible. Phone-based permitting without site verification misses critical hazards.

8. How should incomplete or cancelled permits be documented?

Cancelled permits must be marked "Cancelled" with reason noted (e.g., "work rescheduled, weather delay") and approver signature. Incomplete work must result in a new permit for the remaining scope, not an extension of the original. All permit history is maintained for audit trail.

Control High-Risk Work Through Rigorous Permit Compliance Risk-scored permits, condition monitoring, authority training, escalation procedures, and comprehensive documentation for OSHA compliance.

Start Free Trial Book a Demo