What this is
What is a steam system safety check?
What is a steam system safety check?
It is a checklist run against a specific boiler that verifies water level and controls, safety devices, water treatment and the physical condition of the boiler house. It sits under ISO 45001 cl.8.1 as one of the operational controls for a pressure system, and it is the record a regulator or insurer asks for first after any steam-related incident.
What does the check actually prove, as opposed to a boiler attendant log?
The safety check proves that the fixed protective devices — level controls, relief valve, flame failure device, gas shut-off — still function when tested. The attendant log proves the boiler was watched and its running readings were within range shift by shift. One tests the safeguards; the other tests attendance.
Why is the check tied to a scheme interval rather than a fixed date?
The written scheme of examination sets the interval for each class of device based on its risk and duty cycle, so a safety valve on a high-duty boiler may be tested more often than one on a standby unit. Running the check on a fixed calendar date instead of the scheme interval is a common way for statutory testing to quietly fall behind.
Scope
When is a steam system safety check required?
This checklist is one step in the Pressure Systems and Refrigeration programme. Using it for work that belongs to a neighbouring template — the written scheme, the attendant log, or a cylinder check — produces records that are hard to report on later and that dilute the two failure modes this check is built to catch.
Use this template when
- A specific boiler is due its periodic safety check at the interval set by the written scheme
- The boiler house is being set up in the register and a check schedule needs to start
- A previous check raised a finding and this run confirms whether it has been closed
- A relief device, level control or flame failure device has just been serviced and needs re-verification before the boiler returns to service
- A linked record needs this one to exist: links Vessel inspection, Energy log
Do not use it for
- Pressure System Written Scheme, which sets out which parts of a pressure system are examined, how, and at what interval.
- Boiler Attendant Log, which records the periodic checks a boiler attendant makes through a shift, with readings and any action taken.
- Compressed Gas Cylinder Check, which checks cylinder storage, securing, segregation, valve protection and test dates.
- Ammonia System Safety Review, which covers ammonia-specific plant rather than steam-raising plant.
- Anything outside KnowSafe, which belongs in the workspace that owns that process
Compliance mapping
Which ISO 45001 cl.8.1 requirements does this satisfy?
ISO 45001 cl.8.1 requires operational controls that eliminate or reduce OH&S risk from plant and equipment, and for a steam-raising boiler those controls are physical: level protection, pressure relief, flame supervision and water chemistry. The clause map below ties each control to the section that actually verifies it.
| Clause | Requirement | Where it lands |
|---|---|---|
| ISO 45001 cl.8.1 | Identify the asset and the attendant accountable for it before recording any result | Header |
| ISO 45001 cl.8.1 | Verify low-water protection independently of the gauge glass reading alone | Water level and controls |
| ISO 45001 cl.8.1 | Confirm pressure relief and combustion safety devices lift or trip on demand | Safety devices |
| ISO 45001 cl.8.1 | Control feedwater chemistry to prevent scale and corrosion that mask instrument readings | Water treatment |
| ISO 45001 cl.8.1 | Maintain the boiler house environment so combustion air, ventilation and egress are not compromised | Boiler house |
| ISO 45001 cl.8.1 | Record any deficiency against a severity and close it out or escalate it | Findings |
| ISO 45001 cl.8.1 | Roll individual results into a pass/fail band with a second, independent signature | Result |
What it does not cover
- Water Level Visible And Correct marked Yes without Gauge Glass Blown Down being tested the same round, which lets a blocked connection show a false safe level.
- Safety Valve Free And Tested left at 'Not due' for more cycles than the written scheme allows between tests, which converts a statutory test into an assumption.
- Discharge Route Clear And Safe marked Marginal with no finding raised, which leaves a relief device connected to a route that may not carry a discharge safely.
- Attendant Competent And Present marked Partly with Status set to Complete, which closes a check that a competent attendant did not actually perform.
- A Fail result recorded in Findings with Action Required left at No, which contradicts the severity just entered and drops a real deficiency without a route to closure.
Global
Steam System Safety Check requirements by country
Steam boilers are one of the few plant categories almost every jurisdiction regulates directly, because the consequence of a low-water or over-pressure event is catastrophic rather than gradual. The three regimes below shape how this check is scoped and what a regulator expects to see behind it.
Pressure Systems Safety Regulations 2000 (PSSR), reg. 9
PSSR requires a written scheme of examination for relevant pressure systems and a competent person to examine them at the set interval; this checklist is the operational check that sits between those formal examinations.
A pass rate on this checklist does not substitute for the written scheme examination — it demonstrates the boiler was safe to run in the gap between statutory examinations, which is exactly what an HSE inspector asks about after an incident.
Pressure Equipment Directive 2014/68/EU
PED governs the design and conformity of the pressure equipment itself (the boiler, its fittings and its relief devices), not the in-service inspection regime, which member states set separately.
Where a boiler carries a PED conformity marking, this check verifies the protective devices specified at design stage are still functioning — it does not replace the periodic in-service inspection a member state's own regulations require.
ASME Boiler and Pressure Vessel Code, Section VI (Recommended Rules for Care and Operation of Heating Boilers)
ASME Section VI sets the recognised operating and maintenance practice most US state boiler laws reference, including low-water fuel cut-off testing and blowdown practice.
State boiler inspection acts typically require evidence that low-water cut-offs and safety valves are tested to this practice; this checklist's Water level and controls and Safety devices sections are the record that evidence exists.
How to complete it
How to complete a steam system safety check, step by step
Filling in every field is mechanical. The judgement calls below are what decide whether a completed check would actually hold up if a boiler house incident were investigated afterwards.
Every statutory device test on this form offers 'Not due' at full score. That is only defensible if the interval comes from the written scheme, not from habit. An attendant who has never seen the safety valve lift should treat that as a gap to raise, not a box to leave unticked indefinitely.
Marginal options exist on discharge route, combustion air and ventilation so the check does not force a false binary. But Marginal without a corresponding Finding entry means the observation is recorded and then lost — the judgement call is deciding which Marginal results are cosmetic and which are one shift away from a Fail.
The form asks for both an attendant signature and a separate engineering signature. Using the same person for both, or having engineering sign without reviewing the Findings section, defeats the independent check the two-signature structure is there to provide.
A high Score Percent on a check that skipped half its fields is not a genuine pass — it is an unanswered question dressed as a good result. Completeness Percent should be reviewed alongside Score Percent before the Result Band is treated as final.
What auditors find
Most common steam system safety check findings
The deficiencies that recur across steam system checks cluster around the same handful of devices, almost always because a test was assumed rather than performed.
| Finding | Clause | What fixes it |
|---|---|---|
| Low water alarm tested at the same time each shift, never at a genuinely low level | Water level and controls | Rotate the test point so the alarm is proven to trip at its set level, not just that the test button works. |
| Safety valve recorded as tested with no lift observed, just a visual inspection | Safety devices | Require a documented lift test at the scheme's interval, not a substitute visual check. |
| Blowdown skipped when the shift is short-staffed, then marked 'Not due' rather than 'No' | Water treatment | Reserve 'Not due' for scheme-scheduled skips only, and treat a staffing-driven skip as a genuine miss. |
| Combustion air vents partially obstructed by stored materials that migrate back after each clearance | Boiler house | Add a standing clearance zone to the site layout rather than re-clearing it each check. |
| Discharge route for the safety valve terminates over a walkway with no warning signage | Safety devices | Reroute the discharge or sign the walkway before the next check is due, and log the change against the finding. |
| Attendant Competent And Present marked Yes for an attendant whose certification lapsed the same month | Boiler house | Cross-check attendant certification status before the check is signed off, not after. |
Case in point
Case in point: a low-water event that three consecutive checks had already flagged
A boiler tripped on low water mid-shift after the feed pump seal failed silently. The investigation pulled the last three Steam System Safety Checks: all three had Feed Pumps Working marked 'One working' — a Marginal-equivalent result — with no Finding raised and no Action Required set to Yes, because the boiler kept running on the second pump each time.
Nothing on the form was falsified. The checklist simply let three consecutive partial failures of the same component pass individually, because each one in isolation scored above the fail threshold. The fix adopted afterwards was a standing rule: two consecutive non-'Both working' results on the same asset auto-raises a finding, regardless of the score.
The template
The template, field by field
The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.
7 sections
- Reference
- SAF-164
- Archetype
- Checklist
- Record ID
- CHK-2026-000
- Scoring
- Pass rate
- Direction
- High is good
- Singleton
- Yes
- Basis
- ISO 45001 cl.8.1
- Links
- Links Vessel inspection, Energy log
- Tags
- Pressure, Steam
- Sections
- 7
- Fields
- 57
- Follow up fields
- 9
- Repeating sections
- 1
- Links out
- 4
Header
12 fieldsCheck ID*
Auto sequence. Format CHK-2026-00000.
The record's own ID. Other templates point at this value.
Status*
Drives who this goes to next.
- Planned2 pts
- In progress2 pts
- Complete3 pts
- Deferred0 pts
- Open0 pts
- Closed3 pts
- Overdue0 pts
Date and Time*
Completed By*
Site*
Site ID*
Format SITE-000.
Links to FDN-001 Site ID
Area
The area within the site.
Exact Location
Drop a pin for anything hard to find.
Low Water Destroys Boilers
Two failures account for most boiler house catastrophes: low water level with the burner firing, and a relief device that cannot lift. Everything else is secondary.
Boiler Reference*
Check Frequency*
Attendant*
Water level and controls
6 fieldsWater Level Visible And Correct*
- Yes3 pts
- Marginal1 pt
- No0 pts
Gauge Glass Blown Down*
A gauge glass can show a false level when the connection is blocked. Blowing down proves it.
- Yes3 pts
- No0 pts
Level Controls Tested*
- Yes3 pts
- No0 pts
Low Water Alarm Tested*
- Yes3 pts
- Not due3 pts
- No0 pts
Low Water Cut Out Tested*
- Yes3 pts
- Not due3 pts
- No0 pts
Feed Pumps Working*
- Both working3 pts
- One working1 pt
- Faulty0 pts
Safety devices
6 fieldsSafety Valve Free And Tested*
- Yes3 pts
- Not due3 pts
- Overdue0 pts
Discharge Route Clear And Safe*
- Yes3 pts
- Marginal1 pt
- No0 pts
Pressure Gauge Reading Correctly*
- Yes3 pts
- Suspect1 pt
- No0 pts
High Pressure Cut Out Tested*
- Yes3 pts
- Not due3 pts
- No0 pts
Flame Failure Device Tested*
- Yes3 pts
- Not due3 pts
- No0 pts
Gas Safety Shut Off Tested
- Yes, working3 pts
- Not tested1 pt
- Failed0 pts
Water treatment
6 fieldsBlowdown Carried Out*
- Yes3 pts
- Not due3 pts
- No0 pts
Total Dissolved Solids In Range*
- Yes3 pts
- Marginal1 pt
- No0 pts
Alkalinity In Range
- Yes3 pts
- Marginal1 pt
- No0 pts
Chemical Dosing Working*
- Yes3 pts
- Intermittent1 pt
- No0 pts
Softener Functioning*
- Yes3 pts
- Marginal1 pt
- No0 pts
Treatment Record ID
Links to MNT-073 Record ID
Boiler house
6 fieldsVentilation Clear*
- Yes3 pts
- Partly1 pt
- Blocked0 pts
Combustion Air Adequate*
- Yes3 pts
- Marginal1 pt
- No0 pts
No Storage In Boiler House*
- Confirmed3 pts
- Some1 pt
- Significant0 pts
Carbon Monoxide Detection Working
- Yes3 pts
- Not fitted1 pt
- Faulty0 pts
Emergency Shut Off Accessible*
- Yes3 pts
- Obstructed1 pt
- No0 pts
Attendant Competent And Present*
- Yes3 pts
- Partly1 pt
- No0 pts
Findings
Repeats7 fieldsResult*
- Pass3 pts
- Pass with conditions2 pts
- Fail0 pts
Severity
- Minor3 pts
- Moderate1 pt
- Serious0 pts
Element Tag
Groups deficiencies by hazard type across every template.
Deficiency Detail
Photo Evidence
Fixed On The Spot
Finding ID
Raise a finding record where this needs tracking to closure.
Links to FDN-015 Finding ID
Result
14 fieldsItems Assessed*
Excludes anything marked N/A.
Items Failed*
Score Percent*
Calculated on submission. High is good. N/A items leave the denominator.
Result Band*
- Pass3 pts
- Caution1 pt
- Fail0 pts
Completeness Percent*
How much of the template was actually answered. A high score on a half completed form is not a high score.
Action Required*
Raise the action record, then enter its reference here.
- No2 pts
- Yes0 pts
Priority
- High0 pts
- Medium1 pt
- Low3 pts
CAPA ID
Format CAPA-2026-00000.
Links to FDN-014 CAPA ID
Action Owner
Next Due*
Boiler Attendant*
Signature*
Engineering*
Second Signature*
SAF-164 · record IDs look like CHK-2026-000 · Links Vessel inspection, Energy log
Open in KnowellaRun it with agents
From a document you fill in to a programme that runs itself
The form is the easy part. Keeping the check tied to the actual scheme interval, catching a Marginal result before it becomes a Fail, and holding the second signature to a real independent review is the work that actually slips.
Holds the steam system safety check against the written scheme's intervals, flags devices left on 'Not due' too long, and keeps the finding-to-closure chain intact.
Links the check's findings to the boiler's maintenance history, so a recurring feed pump or valve issue is visible before it becomes a repeat finding.
Confirms the attendant's certification is current at the moment the check is signed, rather than leaving that cross-check to memory.

Rolls check completion and open findings into one view across every boiler on site, and holds every write for your approval before it touches a record.
This template lives in KnowSafe — safety and compliance. Incidents, hazards, permits, inspections and the critical controls behind them.
Meet KnowSafe→Glossary
Steam System Safety Check definitions and key terms
- Gauge glass
- The sight glass on a boiler shell that shows water level directly; blowing it down clears any blockage that could make the reading unreliable.
- Blowdown
- Deliberately discharging a controlled amount of boiler water to remove suspended solids and sludge, and to prove level instruments respond correctly.
- Total dissolved solids (TDS)
- A measure of dissolved mineral content in boiler water; too high a concentration causes foaming and carryover into the steam system.
- Relief device
- A safety valve or bursting disc set to open automatically before pressure exceeds the safe working limit of the vessel.
- Flame failure device
- A safety control that shuts the fuel supply if the burner flame is lost, preventing unburnt fuel from accumulating in the combustion chamber.
FAQ
Frequently asked questions about steam system safety check
What is the steam system safety check template based on?+
It is built against ISO 45001 cl.8.1, the operational controls clause of the occupational health and safety management standard, applied here to a boiler's protective devices and water treatment regime.
What sections does the steam system safety check contain?+
There are seven sections: Header, Water level and controls, Safety devices, Water treatment, Boiler house, Findings and Result. Together they hold 57 fields, 41 of which are required.
Does this check replace the written scheme of examination?+
No. The written scheme sets the statutory examination regime for the pressure system as a whole; this checklist is the operational verification that runs between those formal examinations.
Which programme does the steam system safety check belong to?+
It is part of Pressure Systems and Refrigeration, which aims for statutory examinations kept in date and an ammonia position that stands up to a regulator visit.
How is a steam system safety check scored?+
Scoring is pass rate, with high as good. The score is only meaningful alongside Completeness Percent, since a partially answered form can still return a high pass rate.
Can the steam system safety check template be changed?+
Yes. Every field, option, score and conditional rule is editable, and the links to other templates come with it. Most teams install it as-is, run it for a cycle, then adjust the interval-based options against their own written scheme.
Keep going
Related templates and programmes
Industries this is written for
Programmes this belongs to
Used together in Pressure Systems and Refrigeration
Refrigeration Contractor Verification
Verifies refrigeration contractor certification, ammonia competence, emergency capability and out of hours response
Environmental Aspects Register
Lists how your activities interact with the environment and how significant each interaction is
Refrigeration Unit Service Record
Records service and performance testing of a transport refrigeration unit, including temperature pull down and refrigerant
Boiler Operation Record
Records boiler operating parameters, water treatment results and blowdown through a shift
Refrigeration Plant Log
Records suction and discharge pressures, temperatures, oil levels and run hours across the refrigeration plant
Water Treatment Record
Records dosing, testing and results for boiler, cooling and process water systems
More in Pressure Systems
Pressure System Written Scheme
Sets out which parts of a pressure system are examined, how, and at what interval
Boiler Attendant Log
Records the periodic checks a boiler attendant makes through a shift, with readings and any action taken
Compressed Gas Cylinder Check
Checks cylinder storage, securing, segregation, valve protection and test dates
Ammonia System Safety Review
Reviews the refrigeration system against its safety requirements, covering detection, ventilation, relief, isolation, machinery room condition and emergency arrangements

Written and reviewed by
Siddarth Singh
Founder & Chief Executive Officer, Knowella
Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.
- Certified Safety Professional (CSP), Board of Certified Safety Professionals
- MBA, University of Chicago Booth School of Business
- MS and BS, The Ohio State University, Industrial and Systems Engineering
- Six Sigma Black Belt
Sources and last review. Reviewed 16 August 2026 against:
- ISO 45001 cl.8.1 — Operational planning and control
- Pressure Systems Safety Regulations 2000 (PSSR), reg. 9 — Written scheme of examination
- Pressure Equipment Directive 2014/68/EU
- ASME Boiler and Pressure Vessel Code, Section VI — Recommended Rules for Care and Operation of Heating Boilers
This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.