Recommended resources
The freely available resources this lesson will direct you to.
Hello again. In the previous lesson, you checked whether gas-test information and PPE were suitable for an instrumentation task. Those checks matter only while the conditions they describe remain true. A detector alarm, an unexpected release, or a change to the work can invalidate the plan after the job has started.
This final lesson in the safe-work module focuses on recognizing that change and responding without trying to solve an unsafe situation alone. You will distinguish a planned pause from an unexpected stop, decide whom to alert, and understand what must happen before work resumes. Allow about 35–40 minutes, including the selected reading and video. The examples are simulated; site procedures and your supervisor’s directions govern real work.
The permit describes a job under specified conditions
Imagine a team preparing to remove a pressure transmitter from a separator line. The permit and job safety analysis (JSA) identify the equipment, work scope, isolations, atmospheric checks, and people involved. They do not give permission to continue regardless of what happens next. If the team discovers a different connection than the one shown on the drawing, the planned task may no longer describe the work in front of them.
The same applies to conditions outside the instrument itself. Nearby maintenance may begin venting a system, an emergency alarm may sound, or a leak may appear near the access route. The question is not simply, “Can I still reach the transmitter?” It is “Do the agreed safeguards still cover the task and the surrounding area?”
Read the short stop-work passage in the International Association of Oil & Gas Producers’ Job Safety Analysis / Permit to Work. It connects changes, incidents, and emergency alarms to review of the JSA and permit.
7. Job Safety Analysis / Permit to Work
Read this short extract to see when the original work authorization must be reconsidered.
In the numbered requirements, start at item 3, where stop and review are described. Continue through item 4, from adjacent work. Focus on why a change elsewhere in the area can matter to your instrument task.
A planned hold point and an unexpected trigger are two ways to catch trouble:
- At a hold point, the team deliberately pauses before a critical step—such as the first break into a process connection—to verify that specified safeguards are in place.
- A trigger is something observed that calls the plan into question at any time: an unanticipated pressure indication, a missing required lock, a hiss at a flange, or a gas-detector alarm.
Neither requires you to prove that an injury or release will occur. The trigger is enough to stop proceeding while the risk is assessed by the appropriate people. Uncertainty is itself a reason to pause when continuing could expose people, equipment, or the environment.
The Leader’s Guide to Human Performance, hosted by Energy Safety Canada, develops these ideas with examples of hold points, triggers, and stop-work communication. Read the selected passages rather than the entire guide.
Leader's Guide to Human Performance
Use the guide to distinguish a pause built into the plan from a condition that unexpectedly interrupts work, then examine its expectations for notification and resumption.
Find “Hold points HP Short – Page 1” around the guide’s printed pp. 34–35. Read the hold-point explanation, noting its example of breaking containment. Then find “Triggers HP Short – Page 1” around printed pp. 36–37 and read the trigger definition. In the later examples headed “Energy Isolation,” “Breaking Containment,” and “Operator Rounds,” scan the relevant triggers. Finally, under “START and STOP work HP key concept leader’s guide” around printed p. 43, read Pause or STOP, Notify, and Correct then resume. Focus on who needs to know and why a worker should not restart solely because an alarm has cleared.
Recognize the difference between a question and an emergency
Not every discrepancy calls for the same physical response, but none should be worked around silently. Suppose the transmitter tag at the worksite differs from the permit. Before disturbing anything, stop that part of the task, keep others from proceeding on the mistaken identification, and ask the permit holder or supervisor to resolve it against the controlled documents. This is a pause for verification—not permission to choose the connection that “looks right.”
Now suppose a personal gas detector alarms, an emergency siren sounds, or vapor is visibly escaping as the team approaches. Stop work and follow the site’s emergency instructions immediately, including withdrawal by the designated safe route and notification from a safe location. Do not remain to finish a measurement, gather tools, or investigate the source. Do not enter a suspected hazardous area to help an incapacitated person; raise the alarm and leave rescue to trained, properly equipped responders.
The following short segment of RIGVIDS’ H2S Don’t Mess with H2S training video reinforces that last boundary. Use your site briefing—not the video—to determine the actual alarm signals, routes, muster arrangements, and emergency contacts.
H2S Don't Mess with H2S training video
Watch this segment for its warning about unprotected rescue and its emphasis on knowing facility-specific emergency procedures.
Watch the emergency guidance. Notice that alerting others and following the site response plan are different from attempting to rescue someone by entering the hazardous area yourself.
An abnormal plant indication deserves attention even if your own detector is quiet. For example, while checking a transmitter, you might notice a rising pressure on a local gauge, unexpected valve movement, a new leak, or a control-room message that the unit’s operating state has changed. You may not know whether the instrument is faulty or the process really has changed. Treat the indication as information to communicate, not a fault to dismiss or correct independently. Stop the affected task, reach a safe position, and report what you observed. Operations and other authorized personnel can assess the plant condition.
A useful boundary for a trainee is this: you can stop your participation and raise a concern; you cannot unilaterally change the plant’s operating state to make the concern disappear. Do not reset an alarm, operate an isolation valve, remove a lock, bypass a protective function, or substitute a different gas monitor unless you are authorized and the applicable procedure requires it.
Escalate clearly, then wait for a controlled restart
When there is no immediate need to evacuate, tell the work party promptly that the task has stopped so no one continues an affected step. Notify the permit holder or supervising technician through the agreed channel. A possible process upset, release, or impairment of a plant safeguard also needs to reach the responsible operator or control room under site procedures. For an emergency, use the specified alarm and emergency communication arrangements first; do not delay withdrawal while looking for a particular individual.
Make the message observable and specific. “The flange is hissing beside the transmitter connection; work has stopped and the team is withdrawing” is more useful than “the transmitter is dangerous.” Give the equipment identification if you can confirm it, your safe location, when the condition was noticed, any actual displayed reading and its units, who is affected, and what work had begun. Distinguish what you saw or heard from what you suspect. If communication fails, follow the site’s fallback and muster instructions rather than returning to the hazard to obtain more detail.
Consider the first-break hold point at the transmitter. The permit identifies the connection, but the team finds that the required lock is absent. The hold point has failed: no one opens the connection. The discrepancy is reported so authorized personnel can establish whether the isolation is correct and restore the required safeguard. The team does not add its own improvised lock and carry on.
A different response is needed if a detector alarms during the work. Even if the display later returns to its previous reading, the team does not declare the atmosphere safe and resume. The alarm, possible exposure, and status of the worksite need to be handled under the emergency and permit procedures. Depending on the event, responsible personnel may require investigation, new atmospheric testing, revised controls, and permit review or re-authorization. An incident or near miss likewise calls for reporting and review rather than an informal agreement to “be more careful.”
Restart is a separate decision from stopping. The appropriate people must establish what changed, whether the hazard has been eliminated or controlled, and whether the JSA, permit, isolations, tests, and briefing still fit the job. You participate again only when the required safeguards are restored and work is released under site procedure and supervision.
Key takeaways
Stop or pause when the scope, conditions, or safeguards no longer match the plan—or when you are uncertain enough that proceeding could cause harm. Hold points anticipate critical steps; triggers reveal unexpected reasons to interrupt work. For an alarm or suspected release, prioritize withdrawal and the site emergency response. Communicate observations clearly, do not investigate or repair beyond your authorization, and do not restart on your own.
This completes the module on plant context and safe work. Next, you will begin reading plant drawings and instrument tags, which will help you identify the exact equipment and connections referenced by future work instructions.