Hot Work: Hazards, Controls and Permits

Ask a maintenance team what hot work is and most will say welding and cutting. Ask whether the angle grinder currently running on a handrail in the plant room is hot work, and you will often get a pause, then a no. That pause is the most expensive misunderstanding in facilities fire safety. Hot work is a category defined by what the operation produces, not by how dramatic it looks, and the routine operations are the ones that slip through. This article covers the work itself: what falls inside the definition, the mechanisms by which it ignites things, the harm it does that is not fire, and how control principles map onto it.

The message up front: hot work is dangerous in an unusual way. Most hazards hurt you at the moment of exposure. Hot work can seed a fire that appears long after the work has stopped, in a place nobody was looking, through a mechanism nobody at the work face could see. That single property, delayed and displaced ignition, explains almost every control that people find bureaucratic.

1. What counts as hot work, defined more broadly than most people expect

Hot work is any operation that produces flame, sparks, hot slag or spatter, or enough localised heat to ignite something combustible. That functional definition is deliberately wide, and wider than the one most maintenance teams carry in their heads. Inside the boundary:

• Welding in all its forms: manual metal arc, MIG and MAG, TIG, flux-cored, spot and stud welding.
• Oxy-fuel and thermal cutting: oxy-acetylene and other fuel gas cutting, plasma, arc gouging, exothermic and abrasive disc cutting.
• Grinding, sanding and abrasive wheel work, including cutting-off wheels and power wire brushing.
• Brazing and soldering, including pipework soldering with a small hand torch.
• Torch-applied roofing, heat-applied waterproofing membranes and bitumen kettles.
• Hot air work: heat guns, hot air welding of membranes and sheet, paint stripping.
• Thawing frozen pipes with applied heat, and drying or curing with flame or radiant heat.
• Any operation the risk assessment finds capable of igniting the materials actually present, the catch-all that stops the list becoming a loophole.

The same correction applies to soldering a small joint, running a heat gun on a membrane detail and thawing a pipe in a ceiling void. None look like the welding photograph on the safety poster; all satisfy the definition. The question is not whether this looks like hot work but whether it produces ignition-capable energy where there is something to ignite.

2. The physics: how hot work actually starts fires

This is what makes the controls make sense. Hot work does not start fires by a single mechanism, and the controls people find fussy are each aimed at a different one. Only the first is intuitive.

Travel of sparks and hot particles. Cutting, grinding and welding throw incandescent particles much further horizontally than the person holding the tool assumes, because the operator is watching the work and not the trajectory. More importantly they fall, and they fall through things: floor openings, gratings, expansion gaps, cable and pipe penetrations, service risers, raised floor edges, ill-fitting covers. A particle dropping through a grating onto a bed of dust and packaging below has been delivered into an unsupervised space with a fuel bed. Clearance and coverage figures are set by the standard your authority has adopted, and you must read the edition that applies to you rather than any number circulating online.

Conduction through metal. This is the mechanism behind disproportionate loss, and it is invisible at the point of work. Weld or cut on a beam, pipe, bracket, duct or plate and heat travels along that member to wherever else it goes: through a wall, a floor slab, into a ceiling void or wall cavity. If a combustible is in contact on the far side, timber packing, insulation, a cable jacket, cardboard leaning on a pipe, heat arrives at it in a location where nobody is watching, nothing has been cleared and nobody has been posted. The operator sees nothing wrong, because there is nothing to see.

Radiant heat. Arc and flame processes radiate. Materials near the work need no contact with a spark to be heated toward ignition, and pre-heating a combustible lowers the energy needed to ignite it later. Radiation also damages things nobody classes as combustible: cable insulation, plastic pipework, seals, membranes, glazing.

Smouldering and delayed ignition. This is what separates hot work from almost every other maintenance hazard. Fine, fibrous and porous combustibles hold a small ignition and let it develop very slowly with little visible sign: insulation, lagging, pipe wrap, cavity fill, dust accumulations, textiles, timber against a hot member, nesting material in a void, debris in a riser. The work finishes, the tools are packed, the area is inspected and looks fine, because at that moment it is. Then the smouldering front finds enough oxygen or fuel to transition, and a flaming fire develops in an unoccupied area with nobody present and, very often, with detection still isolated. That is the entire reason post-work monitoring exists. It is a deliberate period of presence spanning the gap between the work stopping and the risk of delayed ignition falling to an acceptable level. Its length is set by the adopted standard and the risk assessment; the figures in circulation vary between editions and jurisdictions, and the only one that protects you is the one in the document your authority has adopted.

Ignition of flammable vapour or gas. Where a flammable atmosphere can form the hazard changes character: instead of igniting a solid that then burns, you ignite a volume that reacts at once. This is the realm of vessels, tanks, drums, pipework, drains, sumps, interceptors, pits and confined spaces, and it includes vapour from residues in something believed empty. Sludge in a tank bottom, product absorbed into a lining, a drain sharing a run with a solvent discharge, residue in a pipe drained but not cleaned.

Hidden and void spaces. Cutting across all of the above is what you cannot see. Older and refurbished buildings are full of concealed combustible material and combustible construction: timber within masonry, historic linings behind modern boards, combustible insulation in cavities and roof build-ups, dust and debris in risers, redundant cabling, accumulated material in ceiling voids. Hot work adjacent to a void is hot work into a space you have not inspected and cannot watch. In refurbishment and in old plant rooms this is the largest single uncertainty in the assessment, and the honest response is to open up and look.

3. The hazards that have nothing to do with fire

Hot work content concentrates on fire, because fire is where the catastrophic loss sits. But the harm to the person doing the work is mostly not fire.

Fume and gas. Welding fume is a mixture of metal oxides and gases whose composition depends on the parent metal, the consumable, the process and anything on the surface. Coatings decompose under heat, and the products of paints, primers, galvanising, plating and plastics can be considerably more harmful than fume from bare metal. Shielding gases displace air, so an inert supply in an enclosed or low-lying space creates an asphyxiation risk that gives no warning. In Great Britain, exposure to substances hazardous to health, including welding fume, falls under the Control of Substances Hazardous to Health Regulations 2002, as amended, which applies in Great Britain only. The framework elsewhere differs, and the numerical limits come from the regulator's own published list. Get competent occupational hygiene advice rather than a number.

Radiation to eyes and skin. Arc processes emit intense ultraviolet, visible and infrared radiation. The eye injury is familiar; less familiar is that the exposure is not limited to the operator. Bystanders, passing trades and occupants looking toward an unscreened arc are exposed, and skin exposure over a working life is a genuine issue. Screening the arc is one of the few hot work controls that protects third parties as much as the operator.

Heat, burns and hot metal. Slag, spatter, cut-offs and the workpiece stay hot long after they look cool, and a large share of hot work injuries are burns from handling material later or slag entering footwear and cuffs. Working in heat, in a Gulf plant room in summer for instance, compounds it: heat stress degrades judgement and makes protective clothing harder to tolerate.

Electrical hazards and cylinders. Arc welding equipment is an electrical hazard in its own right: cables dragged through wet plant rooms, damaged return leads, poor earthing, a return path finding its way through structure or services, holders left live on conductive surfaces. Fuel gas and oxygen cylinders bring handling and transport hazards, cylinders knocked over, valve damage, degraded or incorrect hoses, flashback, leaking connections, and cylinders left where a fire would involve them or where they obstruct escape. Hose and regulator condition is among the most consistently neglected checks on any site. The relevant United States hardware and piping standard is NFPA 51, "Standard for the Design and Installation of Oxygen-Fuel Gas Systems for Welding, Cutting and Allied Processes", a private consensus standard that is law only where an authority having jurisdiction adopts it, and a hardware standard rather than the hot work management document.

Oxygen enrichment and noise. A leaking oxygen supply, or the habit of using oxygen to blow down clothing or ventilate a space, raises the local oxygen concentration, and in an oxygen-enriched atmosphere materials that are ordinarily hard to ignite become easy to ignite and burn far more aggressively, clothing, hair, oils and greases included. The failure mode is a fire in something nobody classified as combustible. Separately, grinding, cutting and chipping are loud, often in reverberant plant rooms, and hot work noise exposure tends to be assessed nowhere because the activity is short and intermittent.

The confined space interaction. Hot work in a confined space is worse than the sum of its parts. The work consumes oxygen and contaminates the atmosphere with fume and gas, so the atmosphere degrades during the task rather than being a fixed condition to test at the start. Heat builds up, escape is slow, and the fire that would be an inconvenience outside is life-threatening inside. That is its own subject: see confined space hazards, risks and controls and the confined space permit guide. In Great Britain such work falls under the Confined Spaces Regulations 1997 with the Approved Code of Practice L101, "Safe work in confined spaces", 3rd edition, December 2014, which carries special evidential status in Great Britain; Northern Ireland has its own instrument with a different year. In the United States the general industry rule is 29 CFR 1910.146, whose scope excludes construction, with construction covered by 29 CFR 1926 Subpart AA, sections 1926.1201 to 1926.1213. Neither has force in the Gulf.

4. Structuring the controls: the hierarchy of controls applied to hot work

The organising idea for hot work controls is the hierarchy of controls, and hot work illustrates clearly why the order matters. The hierarchy is a principle rather than a standard in its own right. It is required by ISO 45001:2018, as amended by Amd 1:2024, clause 8.1.2, and by ANSI/ASSP Z10.0-2019 section 8.4, and it is described by NIOSH on a free public page. ISO and ANSI standards are voluntary and law nowhere by themselves, and NIOSH is a research body with no regulatory power. US OSHA does not codify the term in a regulation, although its rules express a preference for engineering and administrative controls over personal protective equipment. For the principle in full see the hierarchy of controls complete guide. Applied to hot work it produces a sequence of questions a good assessment forces and a bad one skips.

5. Elimination and relocation: the two levels that get skipped

The top two levels hold almost all of the available risk reduction and get almost none of the attention. The moment a job is described as "a welding job", elimination has been abandoned and everything downstream is dedicated to doing the dangerous thing safely rather than to not doing it.

Elimination. A permit system should force one question before anything else: does this require hot work? A surprising proportion of the time the honest answer is no. Mechanical cutting with a saw rather than a disc or torch. A bolted bracket rather than a welded one. A pressed or mechanical pipe joint rather than a soldered one. A cold-applied or self-adhesive membrane rather than a torch-applied one. Replacing a corroded section as a prefabricated unit rather than patching in place. These alternatives often cost more in materials and less in risk, programme and supervision, and the decision usually sits with someone optimising the first number who cannot see the second. Where the alternative is genuinely worse, on strength, durability or a cost the organisation cannot carry, say so in the assessment and move down the hierarchy with that reasoning recorded. What should not happen is arriving at a fire watch without anyone having asked the first question.

Relocation and the designated area. This is the most useful idea in hot work control that most sites do not have. A designated hot work area is a place, typically a workshop bay or fabrication area, set up and assessed so hot work can be done there routinely: non-combustible construction and surfaces, no combustible storage, no openings delivering sparks elsewhere, adequate ventilation and extraction, screening, appropriate fire protection, clear boundaries and clear rules about what may be brought in. Because the controls live in the place rather than being rebuilt around each job, work there is both safer and administratively lighter. The consequence is a simple triage: hot work either happens in a designated area, or in an area controlled specifically for that job with a permit and a fire watch. A site doing hot work with any frequency and no designated area is reconstructing the same controls from scratch, under time pressure, every time, and reconstruction is where things get left out.

Relocation also covers a quieter decision: taking the component out. Cutting a bracket off a pipe in a ceiling void above an occupied office is a different job from taking the assembly down and cutting it in the yard. The removal costs time, and it converts a high-consequence job into a low-consequence one, which is usually the best value in the whole assessment.

6. Engineering controls: separating the energy from the fuel

Where hot work must happen in place, the engineering task is to break the connection between the ignition source and anything that will accept ignition. As principles, because the numbers belong to the adopted standard:

• Remove what can be moved. Stored goods, packaging, waste, textiles, pallets, flammable liquids, cylinders, plastic components: clear them out rather than covering them up.
• Protect what cannot be moved. Fixed combustible construction, insulation, membranes and services need suitable non-combustible or fire-resisting protection, properly fitted and actually retained rather than propped.
• Close the paths. Seal or cover floor and wall openings, gratings, expansion gaps, service penetrations, riser openings, access panels and nearby ceiling voids, on the level of the work and below it. This is the control aimed at particle travel, and the one most often reduced to a token gesture.
• Deal with the far side. Where metal members run through construction, inspect the far side, clear contact combustibles, and where the geometry warrants it have someone observing there. This is the control aimed at conduction, and the one most often absent entirely.
• Ventilate and extract. General ventilation to keep the atmosphere acceptable, local exhaust at the source to capture fume before it reaches the breathing zone. In enclosed spaces this is a primary control, not a comfort measure.
• Screen the arc. Screens and curtains to protect bystanders, occupants and other trades from optical radiation, and to contain spatter.
• Detect where a flammable atmosphere is credible. Gas detection, used and interpreted by competent people. The instruments, calibration regime and action values are matters for a competent specialist, not a general article.

7. Administrative controls: the permit, the watch and the impairment

Administrative controls come after engineering because they depend on people doing what they should, every time, including at the end of a long shift. They remain indispensable, because part of the hazard is irreducibly about behaviour over time.

The permit. A hot work permit is an administrative control, and one control among several rather than the whole system. What a permit must establish, how it is issued, extended, suspended and closed, how the fire watch sits inside it, and the specific ways permits fail, are covered in the dedicated article: hot work permit requirements and checklist. For permit systems generally see the permit to work complete guide and the catalogue in types of permit to work. The point to hold here is that the permit controls nothing by itself; it records and verifies that the controls above it exist.

Competence and authorisation. Three distinct competences are involved and sites routinely collapse them into one. The person doing the work needs process competence. The person assessing the area and authorising the work needs fire safety and building knowledge, a different skill and usually the weakest link, particularly where authorisation has drifted to whoever was available. The person keeping the fire watch needs to know what they are watching for, where to look, what to do, and that they have authority to stop the work.

Fire watch and post-work monitoring, as principles. A fire watch during the work is a person whose only task is to watch the area, including the places the operator cannot see, with the means to raise an alarm and to intervene. Post-work monitoring is continued presence and re-inspection after the work stops, aimed squarely at the delayed-ignition mechanism above. Both have durations and scopes specified in the adopted standard and the site's assessment, which is why no figures appear here. The principle is what matters: the watch is not a formality attached to the end of a job, it is the only control that addresses a fire that has not started yet.

Detection and suppression impairment. Hot work often produces smoke, dust and heat enough to operate detection, so detectors get isolated to prevent unwanted alarms, and occasionally suppression is impaired too. Two things follow. An impairment must be a deliberate, recorded, time-bounded decision with compensatory measures, not a side effect of somebody phoning the control room. And restoration must be verified, because the dangerous window is exactly the one where the work has finished, the team has left, smouldering is developing and detection is still off because nobody closed the loop. In the United States, inspection, testing and maintenance of water-based fire protection systems, including impairment handling, is the subject of NFPA 25, "Standard for the Inspection, Testing, and Maintenance of Water-Based Fire Protection Systems", 2026 edition, and fire alarm and signalling systems are the subject of NFPA 72, "National Fire Alarm and Signaling Code", 2025 edition. Both are private consensus standards, law only where an authority having jurisdiction adopts them, and the adopted edition is frequently several cycles behind. Neither is the hot work document. For the systems themselves see fire alarm system types and components and fire sprinkler system types and components.

Coordination and housekeeping. Hot work affects people who are not doing it: other trades on adjacent levels, occupants, cleaners, security, the control room, anyone whose escape route or working area is affected. A large share of incidents involves two activities that were each acceptable alone. And housekeeping is the cheapest and most neglected control of all: in most hot work fires the fuel that actually burned was debris, packaging, offcuts, dust, waste, stored items that should not have been there. Clearing the area costs a broom and a little labour, and it removes the fuel leg of the fire triangle in a way no amount of covering and watching achieves. For how assessment fits around this see the risk assessment guide, and for the wider framework, what is HSE.

8. The facilities and maintenance realities

Hot work guidance is usually written for industrial fabrication. The facilities and maintenance context has its own recurring patterns, and they are where the control system gets tested.

• Contractor hot work the site does not know about. The most persistent pattern I encounter. A contractor arrives for a small job, brings a grinder or a small torch, and performs hot work with no site permit, because nobody asked and it did not look like hot work to them either. The control is at the gate and in the contract: induction that states the site's definition of hot work explicitly, and a procurement and supervision regime that makes the requirement unavoidable. A regime that only governs the site's own staff has a hole in it.
• Torch-applied roofing. A well-known high-loss activity, for reasons structural to the work: a continuous open flame at the interface between a membrane and a build-up that may contain combustible insulation and decking, where a smouldering ignition can develop inside the build-up out of sight, at the top of a building where the consequence is a roof-level fire spreading laterally. The conversation should start with cold-applied and self-adhesive alternatives, which is elimination applied properly; where torching is used it needs the full regime to the adopted standard.
• Occupied buildings. Detection impairment interacts with evacuation. Isolating detectors in an occupied area removes the warning that protects people who have no idea the work is happening. How impairment, compensatory measures, escape routes and occupants interact is a fire strategy question for someone competent in fire safety, not an afterthought for the permit issuer.
• Plant rooms and ceiling voids. The worst environments and the most common: dense services, combustible insulation and lagging, accumulated dust and debris, cabling, restricted access, poor lighting, no clear sight lines for a fire watch, and voids leading elsewhere in the building. A plant room ceiling void is close to the ideal environment for delayed smouldering ignition, and it is where routine maintenance hot work most often happens.
• Hot work is usually the last operation of a late job. This deserves saying plainly. Welding, cutting and torching tend to come at the end of an installation or repair, by which point the programme has slipped, access is booked to finish, the team wants to go home and the issuer is under pressure to sign. The discipline that slips first is the one at the end: the watch shortened, the monitoring abandoned, the detection restoration left until morning, the area not cleared. The structural fix is to plan hot work so it is not the last thing under the most pressure, and to make the closing controls somebody's explicit accountability rather than whatever is left when everyone is leaving.

9. How hot work control fails

The failure modes are consistent, and almost all of them are one of the mechanisms in section two being ignored:

• Grinding was not treated as hot work. No permit, no clearance, no watch, because it did not feel like hot work.
• The combustible nobody saw. It was in a void, a cavity, above a ceiling or behind a wall, and nobody opened anything up.
• Conduction ignored. The near side was assessed and cleared, and the far side of the beam or pipe was never looked at.
• The "empty" vessel. Residue produced vapour in something everyone was confident had been drained.
• Detection isolated and not restored. The system was off through exactly the window in which delayed ignition occurs.
• The fire watch not maintained after the work stopped. The watch ended when the tool did, which is when it starts to matter most.
• The area left before the monitoring period was complete. The most common contributory factor, and the easiest to avoid.
• Housekeeping left undone. The work was done over a bed of fuel that a broom would have removed and nobody removed.

10. Standards and legal duties, and why the numbers are not in this article

The hot work standard. The recognised hot work document is NFPA 51B, "Standard for Fire Prevention During Welding, Cutting, and Other Hot Work", 2024 edition, published by the National Fire Protection Association in the United States. It is a private consensus standard and not law by itself anywhere; it becomes enforceable only where an authority having jurisdiction adopts it, and authorities adopt named editions often several cycles behind the current one, with amendments and errata issued against those named editions. That is precisely why this article gives no distances and no durations: the figure that matters is the one in the edition your authority has adopted. Note also that NFPA 51B is the hot work management document, distinct from the oxygen-fuel gas hardware standard NFPA 51 and distinct again from the fire protection standards named earlier here. Conflating those numbers is one of the most common errors in fire safety copy.

United States federal law. Welding, cutting and brazing in general industry is 29 CFR 1910 Subpart Q, sections 1910.251 to 1910.255. 29 CFR 1910.252 is titled simply "General requirements", and there is no OSHA standard called "Hot Work Permit"; the permit concept appears within 1910.252(a) and, for covered process safety management processes, within 29 CFR 1910.119(k). The construction counterpart is 29 CFR 1926 Subpart J, sections 1926.350 to 1926.354. These are United States federal rules, and State Plan states may differ.

Great Britain. There is no single hot work regulation; the duties arrive through general law: the Health and Safety at Work etc. Act 1974, the Management of Health and Safety at Work Regulations 1999 whose risk assessment duty sits at Regulation 3, the Provision and Use of Work Equipment Regulations 1998 for the tools, the Control of Substances Hazardous to Health Regulations 2002, as amended for fume, the Dangerous Substances and Explosive Atmospheres Regulations 2002, as amended where flammable substances or explosive atmospheres are involved, and the Construction (Design and Management) Regulations 2015 for construction. Reporting falls under the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013. All are Great Britain instruments; Northern Ireland has separate ones, some with different years, and the 2013 reporting regulations do not apply there. Fire safety law is separate again. On permit systems the usual reference is UK HSE guidance HSG250, "Guidance on permit-to-work systems", 2005, written for the petroleum, chemical and allied industries and creating no duties of its own. No international standard specifies a permit-to-work system.

The Gulf. Neither US OSHA regulations nor UK HSE law has legal force in the United Arab Emirates; they are voluntary benchmarks. The binding duties sit in Federal Decree-Law No. 33 of 2021 on the Regulation of Employment Relationships, administered by MOHRE, with occupational safety and health duties in Article 13, applying to the private sector including free zones but excluding DIFC and ADGM. In Abu Dhabi the framework is ADOSH-SF, the Abu Dhabi Occupational Safety and Health System Framework, Version 4.0, administered by the Abu Dhabi Public Health Centre. On the fire side the UAE Fire and Life Safety Code of Practice is issued federally by the Ministry of Interior Directorate General of Civil Defence and enforced emirate by emirate by the local Civil Defence authority; the edition confirmable from an official source is September 2018, with later change arriving through annexures and circulars. It is NFPA-referencing. Saudi Arabia takes a different route with SBC 801, the Saudi Fire Protection Code, in 2018 and 2024 editions, based on the ICC and IFC model. There is no GCC-wide fire code, so the rulebook changes at each border and locally the Civil Defence position governs.

On the claim that hot work is a leading cause of industrial and commercial fire loss: the pattern is well recognised by fire investigators, insurers and fire protection bodies, and it is consistent with the mechanisms described here. I will not attach a percentage to it, because the figures in circulation are inconsistent and usually quoted without a source or a year.

Where software helps is narrow: a maintenance or facilities system can make sure a hot work permit exists and is linked to the work order, hold the impairment record with an owner and a restoration confirmation, and stop a job being closed while a monitoring or restoration step is outstanding. That is workflow enforcement of controls somebody competent designed. No system knows what is inside your ceiling void. See permit to work integration with a CMMS.

The idea to walk away with

Hot work is unusual because the harm it causes is frequently displaced in both time and space from the work itself. The fire starts later, somewhere else, in something nobody looked at, through conduction or smouldering that was invisible at the point of work. Every control that feels excessive, the clearance, the sealing of openings, the watch that continues after the tool stops, the restoration of detection, exists to close one of those gaps. Once the mechanisms are understood the controls stop being bureaucracy and start being obvious.

And the most valuable moves are the two at the top of the hierarchy that get the least attention. Ask whether hot work is needed at all, and ask whether the item can come to a designated area instead. Answer those two honestly and a large share of the risk disappears before a permit is written.

Final thoughts

Reduced to three things for a maintenance or facilities team: treat grinding as hot work without exception, because that single classification error accounts for a remarkable share of incidents; look at the far side and the space below, because conduction and falling particles put the fire where nobody is standing; and protect the end of the job, the watch, the monitoring period, the detection restoration and the final clear-up, because that is the part sacrificed when the programme is late and the part that addresses the fire that has not started yet.

The rest is competence and honesty: competent people assessing the actual conditions, working to the standards and fire safety law adopted where they operate, willing to open up a void to see what is in it, and willing to say a job needs doing a different way. For the permit instrument itself, what it must establish and how it fails, go on to hot work permit requirements and checklist. For the surrounding context, facilities maintenance management, and for keeping the protection systems hot work impairs in working order, fire and life safety system PM.

Primary sources worth reading directly: NFPA , US OSHA , UK HSE , ISO , NIOSH .

Related reading: Hot work permit requirements and checklist, Hierarchy of controls, Permit to work complete guide, Types of permit to work, Confined space hazards and controls, PPE complete guide, Risk assessment guide, What is HSE.