An Isolation Is a Verified Condition, Not a Line on a Permit

The paperwork records the control; it does not create it

Process isolation separates people and opened equipment from hazardous fluids, pressure or other energy. Offshore, it may protect intrusive maintenance, inspection, sampling or equipment removal. The isolation certificate and permit are essential parts of work control, but the protection exists in the physical arrangement: the correct points are secured, the hazardous inventory is released or contained as designed, and the arrangement remains effective for the full duration of the work.

This distinction matters because a permit can look complete while the plant condition is wrong. A tag may be attached to the wrong valve, trapped pressure may remain, a passing valve may allow pressure to rebuild, or a change elsewhere in the process may challenge the isolation. Signing a document cannot compensate for a configuration that has not been positively established and verified.

Select an isolation that matches the hazard and task

HSE's HSG253 provides extensive guidance for safe isolation in onshore and offshore oil and gas operations. It describes a methodology for selecting baseline isolation standards and addresses preventive and risk-reduction measures. The appropriate arrangement depends on factors such as the substance, pressure, equipment, duration, task and credible failure mechanisms. The installation's approved isolation standard and competent assessment must determine what is required.

Do not choose an isolation because it is the quickest arrangement or because a similar job used it previously. Confirm the exact scope, the sources of hazardous inventory or energy, possible cross-connections, common headers and routes by which pressure could return. Drawings and isolation plans must reflect the plant as it actually exists. Where the approved standard cannot be achieved, stop and use the authorised deviation, risk-assessment and escalation process; never reduce the standard informally.

Hypothetical example: pressure returns after draining

Consider a hypothetical offshore maintenance job on a hydrocarbon pump. The planned valves are closed and tagged, the pump casing is drained, and the initial pressure indication is zero. Before the first flange is disturbed, a final check shows that pressure is slowly rebuilding because one isolation valve is not providing an effective seal.

This is an illustrative scenario, not a documented incident. The zero reading was valid at one moment, but it did not prove that the isolation would remain effective. Work must not proceed on the strength of the earlier reading or the completed certificate. The team should stop, maintain control of the job, notify the responsible operations authority and follow the approved procedure to reassess and establish an acceptable isolation.

The example shows why proving an isolation is more than observing zero once. Verification must address both the initial condition and the potential for hazardous pressure or inventory to return. The correct test method, acceptance criteria and response are site-specific and must come from approved procedures.

Prove the condition before intrusive work begins

Verification should be independent enough to detect a mistake, not merely repeat an assumption. Confirm equipment identity, isolation points, valve or device position, locks and tags, and the status of drains, vents or other proving points specified by the procedure. Use approved methods to demonstrate that pressure and hazardous contents have been removed or controlled. Account for instruments that may be blocked, faulty, out of range or connected to a trapped pocket.

The people issuing and accepting the work should share the same understanding of the boundary. A field walkdown, marked plan and clear equipment identification can help expose mismatches between the document and the plant. Where the procedure requires independent checking, preserve that independence and record the result. If the condition cannot be proved, treat the isolation as unconfirmed and escalate rather than asking the work party to discover the error when containment is broken.

Maintain isolation integrity throughout the job

Isolation is a continuing condition. Monitor any proving points and bleed arrangements as required, protect locks and secured devices, and control work that could alter the boundary. Changes in production routing, simultaneous operations, testing or maintenance on connected systems can invalidate assumptions made when the isolation was designed.

HSE notes that failures during isolation and reinstatement are among the main causes of loss-of-containment incidents. That is why handovers must identify the equipment, boundary, status, outstanding work and any condition requiring reassessment. If pressure returns, a lock or tag is disturbed, the scope changes, or another barrier becomes unavailable, stop the affected work and follow the approved escalation process. Do not normalise a small bleed, unexplained pressure or undocumented change.

Reinstatement deserves the same discipline

The end of maintenance introduces a new risk: returning the plant to service in the wrong configuration. Before removing an isolation, confirm that the work is complete, the equipment is mechanically ready, people and temporary materials are clear, and the responsible authorities have accepted the handback. Account for every isolation device through the approved register and sequence.

Remove blinds, locks, tags and temporary connections only under authorised control. Restore valves, drains, vents, instrumentation and protective functions to their required operating state, then complete the specified checks before startup. An isolation should not be closed administratively while any physical element remains unresolved. Where several permits share a boundary, coordination is essential so one job cannot remove protection needed by another.

Three practical actions for today's shift

First, select one current process isolation and trace it from the equipment to every credible source of pressure or inventory using the approved plan and actual plant arrangement. Second, confirm how the isolation was proved, what acceptance criteria applied and how integrity will be monitored for the duration of the work. Third, review the reinstatement and handover plan before the job reaches completion, including ownership of each removal and restoration step.

Discussion question: Which current isolation would be most vulnerable to an unnoticed change elsewhere in the process, and how would the shift detect that change before containment is broken?

This article provides general process-safety learning. Isolation design, proving, monitoring and reinstatement must always follow the installation's approved procedures, risk controls and competent authorisation.