What is a Locked Valve Register?
A locked valve register is a controlled record of all valves on a site that have been locked in a fixed position — either open or closed — as part of a deliberate operational or safety decision. These are valves that must not be operated without a formal authorisation process, typically because their inadvertent operation could result in a process upset, a safety hazard, or an environmental release.
In oil and gas, locked valves appear across a wide range of scenarios: isolation of redundant lines, protection of safety-critical systems, prevention of backflow, and segregation of hazardous fluids. The register records which valves are locked, why, who authorised the lock, when it was applied, and — critically — when it is due for review.
Why Auditors Focus on Locked Valve Registers
The locked valve register sits at the intersection of process safety and operational discipline. Auditors — whether internal, from a duty holder, or from a regulatory body such as the HSE — focus on it for a specific reason: it is one of the clearest tests of whether a site's safety management system is being maintained in practice, not just on paper.
A register that is incomplete, out of date, or lacks authorisation records is a red flag. It suggests that other safety-critical documentation may be equally unreliable. Conversely, a well-maintained register with clear ownership, regular reviews, and a complete audit trail is strong evidence of operational discipline.
The most common audit findings against locked valve registers are:
- Valves present in the field with a lock that do not appear in the register
- Register entries with no named authoriser or no authorisation date
- Entries that have not been reviewed within the required period
- No evidence of a periodic walkdown to verify register accuracy against field conditions
- Locks applied without a documented reason or risk assessment
The Structure of a Register That Passes Audit
A locked valve register that consistently passes audit is not just a list of valves. It is a living document with defined ownership, a review cycle, and a link to the authorisation process that controls changes to it.
Each entry should capture, at minimum:
- Valve identification — a unique tag number tied to the P&ID, not just a description. "The valve near the pump" is not acceptable.
- Lock status — locked open or locked closed, with the physical lock type and identifier where applicable.
- Reason for locking — a brief but specific explanation. "Process requirement" is not sufficient. The entry should reference the operational condition or hazard that necessitates the lock.
- Authorising person and date — the named individual who authorised the lock, their role, and the date of authorisation. This establishes accountability and provides a starting point for any subsequent investigation.
- Review due date — every locked valve should have a defined review frequency. Long-standing locks — those that have been in place for months or years — are particularly vulnerable to becoming invisible. A mandatory review date forces the question: is this lock still required, and are the conditions that justified it still valid?
Associated permit or isolation certificate — where the lock was applied as part of a permit to work or an isolation, the register entry should reference that document.
The Walkdown Requirement
A register that exists only in a spreadsheet or a filing cabinet will not survive a thorough audit. Auditors will walk the asset. They will look for locks in the field that are not on the register, and they will look for register entries that cannot be found in the field.
The only way to maintain register accuracy is a periodic field walkdown — a physical verification that every entry in the register corresponds to a lock that exists in the field, and that every lock in the field has a corresponding register entry. The frequency of this walkdown should be defined in the site's safety management system, and each completed walkdown should be recorded with a date and a signature.
This is the step that most paper-based registers cannot demonstrate. Walking the asset and then updating a spreadsheet leaves no inherent record of the verification. A digital system that captures walkdown completion — with a timestamp and a named individual — provides the evidence that auditors are looking for.
Where Paper-Based Registers Fail
Paper and spreadsheet-based locked valve registers have three structural weaknesses that make them vulnerable at audit:
- No real-time visibility. A paper register held in the control room is not visible to the person working in the field, and the field lock is not visible to the control room. Changes made on one side are not automatically reflected on the other.
- No automated review prompts. If a valve's review date passes and no one notices, the register becomes non-compliant. Paper systems rely entirely on individuals remembering to check — and that memory degrades under operational pressure.
- No audit trail of changes. When a paper register is updated, the previous entry is typically overwritten or crossed out. There is no reliable record of what the entry said before, who changed it, or why. In a regulatory investigation, this absence of history is a significant problem.
What a Digital Locked Valve Register Looks Like
A digital locked valve register addresses each of these weaknesses directly. Entries are accessible from any device on the network, so the control room and the field have the same view. Review due dates trigger automatic alerts before they are breached. Every change to every entry is logged — who made it, when, and what it replaced — creating a tamper-evident history of the register's entire lifecycle.
When it is integrated with the site's permit to work system, the picture becomes even clearer. A lock applied as part of an isolation appears in both the permit record and the valve register, with a cross-reference between the two. Clearing the isolation automatically flags the valve entry for review.
The Elisian platform provides this integration as part of its process safety and permit to work modules — a single connected system where locked valve management is not a separate spreadsheet but part of the operational record of the site.
Summary
A locked valve register that passes audit is one that is complete, current, and evidenced. Every valve is tagged and traceable. Every lock has a named authoriser and a review date. Walkdowns are recorded, not just performed. And when something changes, there is a clear record of what was changed, by whom, and why.
The difference between a register that passes and one that generates findings is almost always about discipline and visibility — whether the system in place makes it easy to maintain the register correctly, or whether it relies on individuals remembering to do the right thing under operational pressure.
Digital systems don't replace the discipline. They make it far easier to sustain.