Field Reference/04 · Safety Systems/Isolation & Permit-to-Work
Module 04
Module 04 · Safety Systems
Isolation & Permit-to-Work
Covers the isolation requirements that must be satisfied before any entry, inspection, or maintenance on a fired heater, and the operator's role within the permit-to-work (PTW) system. Safe isolation is the primary defence against energy release during maintenance.
🔴
Isolation failures kill. A single missed energy source can be fatal.
Fatalities in refinery maintenance are frequently caused by incomplete isolation — particularly on fuel gas systems and process fluid circuits under pressure or temperature. No maintenance work may begin until all energy sources are identified, isolated, verified, and the PTW is in place.
Isolation Philosophy
Isolation for maintenance means physically preventing all hazardous energy sources from reaching the work area, and verifying that isolation is effective before work begins. The goal is not merely to close a valve — it is to create and confirm a safe working boundary.
For fired heaters, isolation philosophy is driven by three principles:
Defence in depth: Multiple independent isolation points for each energy source. No single point of failure should expose personnel to hazardous energy.
Positive isolation: Where possible, use physical disconnection (spade / spectacle blind) rather than reliance on valve seating integrity.
Independent verification: The person installing isolation must not be the only person confirming it is effective. Physical checks are required — pressure tests, gas tests, visual confirmation.
Energy Sources to be Isolated
Fired heaters have multiple simultaneous hazardous energy sources. All must be addressed in the isolation plan before any maintenance work proceeds.
🔥
Primary Hazard
Fuel Gas / Fuel Oil
Flammable hydrocarbons under pressure. Requires double-block-and-bleed (DBB) as minimum. Positive isolation (spade) required for confined space entry or hot work on fuel system components.
⚗️
Pressure & Temperature
Process Fluid (Coil)
Heated hydrocarbons at operating pressure. Must be depressured and cooled before internal access. Residual heat in refractory can persist for 24–48 hours after shutdown.
♨️
Thermal / Pressure
Steam Systems
Atomising steam, sootblower steam, steam purge connections. High-pressure steam causes severe burns. All steam connections to be blocked and blinded where work is in the vicinity.
⚡
Electrical
Electrical Supplies
Ignitors (high voltage), forced draft fans (MV/LV), instrument loops, FGD equipment. Electrical isolation per site LOTO (lockout/tagout) procedure. All circuits to be tagged out and tested dead.
💨
Pneumatic
Instrument Air
Control valves and actuated dampers may stroke unexpectedly if instrument air is live. Air to all actuated devices in the work area to be isolated and vented. Confirm fail-safe position of valves.
Double Block-and-Bleed on Fuel Gas
Single valve isolation is not acceptable for fuel gas systems where personnel will work in the vicinity or within the firebox. A single valve may pass (leak across its seat) due to wear, deposits, or mechanical damage — placing personnel at risk from invisible hydrocarbon accumulation.
🔴
Single valve isolation on fuel gas is not a safe isolation
Industry incidents have resulted in fatalities where a single closed valve was the only barrier to fuel gas, and the valve passed. Always install double-block-and-bleed as the minimum for fuel gas isolation before any work on the fuel system or burners.
The double-block-and-bleed arrangement uses two block valves with a bleed valve between them:
FUEL GAS SUPPLY
■
Block 1 CLOSED
↕
Bleed OPEN→vent
■
Block 2 CLOSED
BURNER SIDE
How it works:
Block 1 (upstream): Primary isolation — closed against the supply pressure.
Bleed valve: Open to a safe vent. Proves Block 1 is holding: if pressure builds in the cavity, Block 1 is passing and work must not proceed.
Block 2 (downstream): Secondary isolation — prevents backflow from any adjacent pressurised source.
ℹ
Positive isolation (spading)
For confined space entry into the firebox or major fuel system maintenance, positive isolation by spectacle blind or spade is required in addition to DBB valves. A blind physically prevents gas passage regardless of valve condition. Spade installation requires a separate PTW and must be documented on the isolation register.
Permit-to-Work — Operator's Role
This page does not cover how to write a PTW. That is the responsibility of the issuing authority (typically a designated senior engineer or safety officer). The operator's role within the PTW system is specific and important.
Operator Responsibilities in the PTW Process
Stage
Operator Action
Notes
Before work starts
Execute isolation per isolation certificate / list
Install all isolations — do not delegate this to the maintenance team
Do not sign if any isolation is uncertain or incomplete
During work
Do not reinstate any isolated system without PTW authority
Reinstatement requires PTW clearance at all stages
During work
Respond to any changed conditions (process upset, gas detection)
Suspend work and evacuate if hazard is detected in the area
Work complete
Confirm from maintenance that all personnel are clear
Check that all tools, materials, and personnel are accounted for
Work complete
Remove isolations in correct sequence per isolation certificate
Removal sequence is as important as installation sequence
Work complete
Sign off PTW closure
PTW is not complete until both parties have signed
⚠
Warning — verbal reinstatement is not acceptable
Isolation must not be removed on verbal instruction from another party. Reinstatement requires the PTW issuing authority's written clearance and must follow the documented sequence. Premature reinstatement of fuel gas has caused fatal firebox explosions.
Depressuring and Purging Before Maintenance
Before maintenance work begins on any pressurised component of the fuel or process system, the affected section must be depressured and purged clear of hydrocarbons.
Fuel Gas System Depressure & Purge Sequence
Type: Pre-MaintenanceSteps: 7
01
Shut down firing — confirm all burners extinguished
Heater must be shut down per the planned shutdown procedure before fuel system isolation begins. Confirm BMS status shows all flames off.
02
Install double-block-and-bleed on fuel gas header
Close Block 1 (upstream) and Block 2 (downstream). Open bleed valve to confirmed safe vent. Monitor bleed for pressure — any pressure build-up indicates Block 1 is passing. Do not proceed if bleed is pressurising.
03
Vent and depressurise the isolated section
Open vent valve on the isolated section to bring it to atmospheric pressure. Vent to flare or safe vent system — not to atmosphere in a congested area. Confirm pressure gauge reads zero.
04
Purge with nitrogen or steam
Introduce inert purge gas (nitrogen) or steam through the isolated section. Purge volume per site procedure — minimum three volumes recommended. This displaces residual hydrocarbon vapour from the pipework and manifold.
05
Gas test — confirm LEL and O₂ levels safe for work type
Authorised gas tester to confirm: hydrocarbon LEL <10% LEL for hot work, <5% LEL for confined space entry . O₂ level 19.5–23.5% for confined space. Record test results on the PTW.
06
Install positive isolation (spade) if required by PTW
If the PTW requires positive isolation, install spectacle blind or spade at designated points. Record spade locations on the isolation register. Only remove spades under a separate PTW for reinstatement.
07
Sign isolation certificate and issue PTW
Operator confirms isolation complete and gas test results acceptable. PTW issuing authority signs permit. Work may not begin until PTW is issued.
Isolation Verification
Verification confirms that installed isolations are actually effective — not just that valves are in the correct position. Physical verification is required before any work begins.
P
Physical check: Walk the line and confirm each valve is fully closed and in the correct position. Check valve stem position and disc indicator where fitted.
T
Bleed cavity pressure test: Monitor bleed valve outlet for pressure accumulation over a defined hold period (typically 5–10 minutes ). Rising pressure indicates the upstream block valve is passing.
P
Spade confirmation: For positive isolations, physically confirm the spade is in the correct orientation (inserted, not in the bypass position) and the flange bolts are made up.
T
Gas test at work location: Authorised gas tester confirms LEL within limits at the actual point of work, not just at the isolation boundary.
D
Isolation register complete: All isolations listed with tag number, type, location, and confirming signature. No blanks permitted before the PTW is issued.
P
Electrical isolation test-dead: Maintenance electrician confirms all electrical supplies are dead using approved test instruments before any work on electrical equipment.
P = Physical check · T = Pressure / atmosphere test · D = Document verification
Re-commissioning After Isolation
Reinstatement of isolation must be planned and sequenced as carefully as installation. Incorrect sequence can pressurise pipework before all connections are confirmed made-up, or introduce fuel gas before purging is complete.
Isolation Removal — Fuel Gas System
Type: Post-Maintenance ReinstatementSteps: 6
01
Confirm all personnel and tools are clear of the work area
The maintenance team leader must formally confirm all personnel are accounted for and clear of all isolated equipment. No personnel inside any confined space. Check the firebox specifically if internal work was performed.
02
Obtain PTW reinstatement authority — signed by issuing authority
Reinstatement must be authorised in writing on the PTW. The operator may not remove isolation based on verbal instruction alone.
03
Remove positive isolations (spades/blinds) first
Remove spades and confirm spectacle blinds are rotated to the open position. Update isolation register. Confirm all flange joints are properly made-up and bolted.
04
Purge the isolated section with nitrogen before introducing fuel gas
Displace any air that entered the pipework during maintenance with inert nitrogen before introducing hydrocarbon fuel gas. Fuel gas introduced into an air-filled pipe creates an explosive mixture.
05
Slowly crack open Block 2 (downstream block valve)
Introduce fuel gas slowly through Block 2 to pressurise the section gently. Check for leaks at all disturbed joints before opening fully. Use gas detector around all flange faces.
06
Open Block 1 — restore normal fuel supply
Confirm no leaks before opening Block 1. Close the bleed valve. The system is now live. Follow the heater startup procedure before introducing fuel to burners. Log reinstatement in the shift log.