Ask most site managers what an electrical permit to work is for, and they will tell you it stops people getting near live equipment. That is true, but it is only half the answer. The harder question — the one that actually causes disputes on site — is when live working is permitted at all, and what has to be in place before it is.
This is the gap that generic permit-to-work guidance tends to skip over. Most vendor pages describe the permit as a form: who signs it, what fields it has, how it gets closed out. Very few address the actual process safety question underneath it, which is that isolation is the default position, live working is the exception, and the exception has to be justified and controlled, not assumed.
The default position: isolate before you work
Under electricity at work regulations, the starting assumption is that conductors are made dead before anyone works on or near them. Live working is only permitted where it can be shown that isolation is not reasonably practicable, and that suitable precautions have been taken to prevent injury. That is a deliberately high bar. It is not a convenience clause for jobs that are awkward to isolate, and it is not something a supervisor can wave through verbally because the job is running late.
In practice, this means the permit to work system has to force a decision, not just record one. Before any live work is authorised, someone competent needs to have actively considered isolation first and documented why it was not reasonably practicable in this specific case — not in general, and not for a similar job last month.
When live working is the exception, not the rule
The recognised exceptions are narrow: testing and fault-finding that can only be done live, situations where isolating would create a greater danger elsewhere, and a small number of operational cases where continuity of supply is essential and cannot be interrupted safely. Even within these exceptions, the justification has to be specific to the task, the equipment and the person doing the work — including whether they hold the right competence for live working, which is a distinct and higher bar than general electrical competence.
Our earlier practical system guide to electrical permit to work sets out how the permit itself should be structured for contractor sites and data centres. This piece goes a level deeper: the exception to isolation is where most real-world incidents and near misses actually originate, because it is where judgement is being exercised under pressure, often with a deadline attached.
Isolation and lock-out as process safety barriers, not paperwork
It helps to think of isolation and lock-out not as administrative steps but as physical barriers in a process safety sense — closer in logic to isolation and lock-out on a process plant than to a piece of compliance paperwork. Each barrier (isolate, prove dead, lock, tag, verify) has to be independently checked, because a permit that looks complete on paper is not the same as isolation that has actually been verified in the field.
This is the same principle that underpins other high-consequence control of work regimes. The reasoning in why joint integrity management matters offshore makes a similar point about bolted connections: the paperwork trail is only useful if it reflects a barrier that was genuinely tested and verified, not one that was assumed to be sound because the last job went fine.
Why generic permit-to-work software misses this nuance
Most permit-to-work software is built around workflow: raise, approve, issue, close. That works for routine isolated jobs. It does not, on its own, capture the specific justification, competence check and additional precautions that a live-working exception legally requires. A system that treats live working as just another permit type — rather than a distinct, higher-scrutiny path with its own mandatory fields and sign-offs — will let genuinely risky exceptions through with the same ease as routine isolated work.
The same gap shows up in adjacent high-hazard environments. Critical equipment integrity for data centres makes the case that ongoing assurance, not a one-off test certificate, is what actually keeps equipment safe over its life. The same logic applies to live-working authorisations: a permit issued once is not assurance that the justification still holds an hour later.
Building the exception into your system, not around it
If your organisation genuinely needs a live-working exception route — and some do — it should be a distinct, harder-to-issue path within the permit system, not a checkbox on the standard form. That means mandatory justification text, a named competent person sign-off, and a review point that is separate from routine permit approval.
If you are reviewing your electrical permit to work process, or evaluating whether your current software actually enforces the isolation-first principle rather than just recording it, we would be glad to walk through what a properly structured exception path looks like in practice.