Arc flash near miss: a permit that nobody verified

Energy and target: 400 V live conductors; the electrician's hand and forearm in the working distance.

Barriers that should have been in place

1. Design/engineering - shrouds, terminal covers, IP-rated panel interiors. Present? Check; the flash occurred at exposed incoming terminals, so partially failed or defeated by opening the panel.
2. Isolation and lockout - the primary barrier. Failed: no personal padlock applied, and no padlocks were available at the point of use, so the barrier existed only on paper.
3. Prove dead / test before touch - including proving the tester on a known source before and after use. Failed: the indicator's battery was flat and it gave a false 'dead' reading; a borrowed indicator was then used without a proving routine.
4. Permit to work as a verification system - the permit asserted 'isolated and locked off' but nobody verified it at issue or at the panel. Failed: the permit had become a signature, not a control.
5. Competence and supervision - the electrician continued after a failed test result, under production pressure. Partly failed.
6. PPE - arc-rated clothing and face protection. Failed: cotton overalls, no face shield, no risk assessment driving the PPE selection.
7. Reporting culture - the near miss went unreported for three days and no accident book entry exists. Failed: no feedback loop, so the site's permit weaknesses stayed invisible.

Why the procedural barriers decayed Analyse this in human-factors terms rather than as individual carelessness: time pressure ('just get it back on'), normalisation of deviance (permits routinely issued without lockout, so nobody treats it as abnormal), unclear role boundaries between site and contractor, barriers unavailable at the point of use (no padlocks in the switch room), and no audit to detect any of it.

The barrier lens shows the event was not one mistake but six simultaneously degraded controls - which is why 'retrain the electrician' would not prevent a recurrence.

Order

1. The injured electrician first, alone, and before anyone has briefed him on what to say. Before fact-finding, confirm his welfare and treatment, and confirm whether his employer has also started an investigation - coordinate to avoid two conflicting accounts being generated.
2. The area supervisor who said 'just get it back on'.
3. The person who issued the permit, and the authorised person for the panel.
4. The contractor's supervisor, and a sample of other electricians who work on the site, to establish whether the lockout gap is normal practice or a one-off.
5. Site stores, to confirm the padlock stock position.

Handling the contractor relationship The electrician is not your employee and may fear losing the contract or his job, which is a powerful incentive to minimise. Be explicit that you are investigating the system, that the report will identify permit and equipment failures, and that you will share the findings with his employer. Offer a neutral venue, the right to be accompanied, and a written record. Do not promise immunity you cannot give; do say what will happen to the information.

Handling self-incrimination His account may reveal a breach by him or by the site. Explain the purpose and any disciplinary interface honestly and at the start - discovering later that an 'informal chat' feeds a disciplinary process destroys trust and future reporting. Ask for a factual walk-through, not a justification.

Question technique Avoid 'why didn't you lock off?' - it invites defence and closes the account. Instead: 'walk me through the job from the permit being issued to the flash'; 'what was available in the switch room?'; 'what did you understand the permit to mean?'; 'what did you do when the tester read zero and then you found the battery flat?'; 'what did you think would happen if the line stayed down?' Ask the supervisor the same event from their side to test the account of pressure.

Record contemporaneously, date and sign, and give the interviewee the opportunity to correct the record - accuracy and fairness both improve.

Actions

• Immediate: withdraw the flat indicator from service and introduce a proving unit at the point of use for every tester; stock personal padlocks and hasps in each switch room and make 'no lock, no work' enforceable; add arc-rated PPE to the panel-working risk assessment.
• Systemic: redesign permit issue so isolation is physically verified and signed at the panel by the issuer and the recipient, not asserted in an office; define who may issue and receive permits and audit it; add a stop-work expectation that protects the person who pauses a job, and make it clear that production pressure cannot be transmitted through a supervisor.
• Contractor interface: joint induction covering site isolation rules, and a shared reporting route so a contractor near miss reaches the site's system.
• Reporting: fix the reason a burn injury produced no accident book entry - that silence is the most damaging finding.

Verification, not documentation Do not count training records or permit numbers. Instead:

• Sample the last 30 issued permits and check whether isolation verification signatures are present and match the log - the gap between paper and practice is the measure you want.
• Observe five isolations unannounced, at the panel, and score whether proving, locking and PPE actually happen.
• Ask a supervisor to isolate a panel as a practical test and observe.
• Audit padlock stock and issue records at 30 and 90 days.
• Use a leading indicator: electrical near-miss reports per month, and whether contractors report at all.
• Set an explicit success criterion (for example, 100% of sampled permits with verified isolation at 90 days) and say what you will do if it is not met - because a permit system that fails this test is not a control, only a filing system.