Paper-based permit to work systems are not free. They carry costs that rarely appear in a budget line — until an incident, an audit finding, or a near-miss makes them visible all at once.
Most operations teams know their current permit system is imperfect. Forms get lost. Permits expire without anyone noticing. The person who needs to know what is currently isolated has to walk to a control room, find the right folder, and hope it is up to date. These are accepted as the friction costs of doing business — small inefficiencies that the team has learned to work around.
What is harder to see is what those workarounds are costing.
The permit that nobody could find
Ask any HSE manager who has been through a serious incident investigation how the permit system performed, and the answer is rarely that the paperwork was missing entirely. It is more often that the permit existed, but the people who needed to act on it did not have access to it in time — or that what was written on the form no longer reflected the actual state of the plant when the incident occurred.
Paper permits are point-in-time documents. They record what was known and agreed at the moment of issue. They do not update when circumstances change. They do not alert anyone when a permit is approaching expiry. They do not prevent a second team from starting work in an area that a first team has already isolated. And they do not give a shift supervisor — walking into a handover at six in the morning — a reliable picture of what is live and what is safe to approach.
The gap between what the permit says and what is actually happening on the plant is where incidents develop.
What paper-based systems cost in practice
The direct costs of a paper permit system are visible but underestimated. Permit issuers spend time writing, copying, and filing documents that could be generated and distributed electronically in a fraction of the time. Supervisors spend time chasing permit status that should be available instantly. Audits require manual retrieval and review of paper records that may be incomplete, illegible, or filed incorrectly.
The indirect costs are harder to quantify but substantially larger.
A permit that cannot be located during an emergency is a failed control. A permit that was never formally closed out because the contractor left site at the end of the day is an open isolation with no record of reinstatement. A permit that was verbally extended because the job ran over — without the extension being documented — is a scope change with no authorisation trail. Each of these represents a control failure that only becomes visible when something goes wrong.
The cost of a RIDDOR-reportable incident, an HSE improvement notice, or an enforcement action dwarfs any investment in a more robust system. But the more significant cost is the one that precedes the incident — the accumulated risk carried by a system that relies on individual discipline and physical proximity to a filing cabinet to function.
The audit problem
Regulators and major clients conducting supply chain assurance reviews are increasingly specific in what they ask for. A permit to work audit is no longer satisfied by a folder of completed forms. Inspectors want to understand the system: how permits are authorised, how isolations are tracked, how conflicts between concurrent permits are identified and resolved, and how reinstatement is confirmed and recorded.
Paper systems struggle to answer these questions confidently. The evidence is fragmented across multiple files, multiple shifts, and — on larger sites — multiple control rooms. Producing a coherent audit trail requires significant manual effort, and the result often reveals gaps that nobody was aware of while the work was in progress.
The facilities that perform best in permit to work audits are not necessarily the ones with the most rigorous procedures on paper. They are the ones that can demonstrate, in real time, that the system is functioning as intended — that every active permit is visible, every active isolation is tracked, and every closed permit has a complete reinstatement record.
The contractor management problem
Paper permit systems were designed for a simpler operating model — a single facility, a known workforce, a predictable maintenance schedule. They were not designed for the reality of modern industrial operations, where multiple contractors may be working across the same asset simultaneously, each with their own toolbox of procedures and their own interpretation of what adequate controls look like.
When a principal contractor is managing several subcontractors, a paper-based permit system cannot give them a consolidated view of what is permitted, what is isolated, and where the conflicts are. That information exists — spread across different permit folders, different control rooms, and different contractors' own paperwork — but assembling it into a coherent picture requires manual effort that realistically only happens when something has already gone wrong.
A digital permit to work system does not eliminate contractor risk. But it does give the principal duty holder the visibility they need to identify conflicts before they become incidents — and the audit trail they need to demonstrate due diligence if they do not.
The questions that reveal the real cost
If you want to assess what your current permit system is actually costing — beyond the stationery — these questions will give you an honest picture:
- How long does it take a shift supervisor to establish what permits are currently active and what equipment is currently isolated?
- In the last twelve months, how many permits were found to be open at the end of a shift with no record of closure or reinstatement?
- If two contractors are working in adjacent areas today, is there a single person who can confirm there is no isolation conflict between them?
- When was the last permit to work audit, and how long did it take to compile the evidence?
- If the HSE arrived on site tomorrow and asked to see your permit records for the last six months, how long would that take to produce?
If any of those answers involve significant time or uncertainty, the system is carrying risk that is not visible in the day-to-day operation — but will be visible in an investigation.
The alternative is not complexity
The case for moving away from paper is not a case for replacing a simple system with a complicated one. The permit to work process itself does not need to change — the sequence of authorisation, isolation, work, reinstatement remains the same. What changes is that every step in that sequence is recorded in a system that is accessible to everyone who needs it, in real time, from wherever they are.
That means a shift supervisor walking into a handover can see what is live. A permit issuer can see whether a new request conflicts with an existing isolation. An HSE manager can run an audit report without spending a day in a filing room. And a contractor on site can confirm their permit is current without having to find the right person with the right folder.
If you are reviewing your permit to work arrangements and want to understand what a digital system would look like in practice for your operation, get in touch. We work with facilities across the energy sector — and increasingly beyond it — to replace paper-based control of work with systems that provide the visibility and audit trail that modern operations demand.