---
Walk onto most industrial sites and you'll find both documents in circulation. JSAs (or JHAs) live in binders and pre-job briefings. Permits to work hang at the job site for hot work, confined space entry, line breaking, work at height, and electrical isolation.
What's often missing is the connection between them. The JSA was written by one person, the permit issued by another, and neither document references the other. That gap is where incidents happen: the permit authorizes work whose hazards nobody analyzed, or the JSA identifies a control that never made it onto the permit conditions.
To fix that, it helps to be precise about what each document actually does.
## Two documents, two different questions
**The JSA answers: what are the hazards of this task, and how do we control them?**
It's analytical. The task is broken into steps, each step is examined for hazards, and controls are assigned using the hierarchy of controls. A JSA can be written days or weeks before the work, reviewed annually, and reused every time the task is performed. It describes the task in general.
**The permit to work answers: is this specific job, by these people, at this time and place, safe to start right now?**
It's transactional. A permit is issued for one job, on one day, under today's conditions. It confirms that isolations are in place, the atmosphere has been tested, adjacent work doesn't conflict, the fire watch is posted, and a named authorizer has accepted responsibility for releasing the work. When the job ends, the permit is closed. It can't be reused.
The shorthand: **the JSA is the analysis, the permit is the authorization.** One is knowledge, the other is a decision.
## Where they're required
Neither document is universally mandated by name in US regulation, but both have hard regulatory anchors:
- **Confined spaces:** 29 CFR 1910.146 requires a written entry permit for permit-required confined spaces, and the permit must document the hazards of the space and the control measures. You cannot complete that permit honestly without hazard analysis behind it.
- **Hot work:** 29 CFR 1910.252 requires designated responsibility and precautions before cutting and welding. Most sites implement this as a hot work permit, and insurers expect it.
- **Hazard analysis generally:** the General Duty Clause, 29 CFR 1910.132(d) (written PPE hazard assessment), and 29 CFR 1926.21(b)(2) (hazard instruction in construction) are the obligations a signed JSA evidences.
- **Energy control:** 29 CFR 1910.147 requires documented lockout/tagout procedures, which in practice interlock with both documents: the JSA identifies stored energy, and the permit confirms the isolation is applied and verified.
So the regulatory logic already chains them together. The permit certifies that controls are in place. The JSA is where those controls came from.
## How the handoff should work
A clean JSA-to-permit flow looks like this:
**1. The JSA defines whether a permit is needed.** During the analysis, hazards surface that put the task into permit territory: ignition sources near flammables, entry into a vessel, breaking containment, working above two meters, live electrical exposure. A good JSA template captures this explicitly with a "permits required" field. If your JSA doesn't ask the question, permit-required work slips through as routine work.
**2. The JSA's controls become the permit's conditions.** The permit shouldn't invent its own safety requirements from scratch. Gas testing frequency, isolation points, fire watch duration, rescue arrangements, PPE: these come out of the hazard analysis. The permit issuer's job is to verify they're in place today, not to re-derive them at the counter.
**3. The permit verifies today's reality against the JSA's assumptions.** The JSA assumes a state of the world: the line is depressurized, the space is ventilated, no simultaneous work overhead. The permit is the check that the assumption holds right now. This is exactly why permits expire and JSAs don't. Conditions change by the shift; hazards of a task change by the year.
**4. The crew signs both, at the job.** The JSA sign-on evidences hazard instruction. The permit sign-on evidences authorization. At the pre-job briefing, they're reviewed together: this is the task, these are the hazards, these are the conditions under which you're released to work.
**5. Close-out feeds back.** When the permit closes, anything that didn't match the plan (an unexpected hazard, a control that didn't work, a near miss) should trigger a JSA review. The permit system is your live sensor for whether the analysis is still true.
## The failure modes to look for
Audit your own site against these. Each one indicates the two systems have disconnected:
**The permit with no analysis behind it.** The issuer fills in the hazards section from memory at the point of issue. If the same hot work permit shows the same three hazards for every job, the analysis isn't happening.
**The JSA that never triggers a permit.** The task analysis identifies confined space entry, but the crew has "always done it without a permit" and the JSA doesn't force the question.
**Copy-paste controls.** The permit conditions don't match the JSA controls because someone transcribed them by hand, from an old version, or not at all.
**Stale JSAs authorizing live work.** The permit references a JSA dated three years ago, before the equipment was modified. The authorization is only as good as the analysis underneath it, and nobody owns the review date.
**The binder problem.** The JSA is in the safety office, the permit is at the job, and the worker sees whichever one someone remembered to bring. Two documents that protect the same task should be in the same hands at the same moment.
Notice that none of these are knowledge failures. Every one is a document-control failure: versioning, cross-referencing, expiry, and hand-transcription. This is why the JSA-to-permit link is the part of a safety system that benefits most from going digital: when the JSA is attached to the permit, controls flow across automatically, review dates block issuance when the analysis is stale, and sign-ons are captured once at the job.
## Start with the analysis
If your permit system feels like rubber-stamping, the fix usually starts upstream: the hazard analysis feeding it is thin, stale, or missing. Get the JSAs right first.
Our free one-page JSA/JHA template follows the OSHA 3071 method and includes the "permits required" field that makes the handoff explicit, plus the written PPE hazard assessment certification per 29 CFR 1910.132(d)(2) and a one-page completion guide.
[Download the free JSA/JHA template →](https://zentri.cc/resources/tools-and-templates/job-safety-analysis-template)
And when you're ready to connect the chain end to end, with JSAs attached to permits, controls that carry across automatically, and lockout/tagout verified inside the same workflow, that's exactly what Zentri is built for.
