Knowella

Steam System Safety Check

Steam system safety checks slide into a tick-box exercise once a boiler has run trouble-free for a few years: the attendant marks every line 'Yes' from memory instead of physically blowing down the gauge glass or lifting the safety valve. The two failures that actually destroy a boiler house — low water with the burner still firing, and a relief device that cannot lift — go undetected until the pressure test after an incident forces the question.

KnowSafeChecklistSAF-16457 fields across 7 sectionsFull researchSee the form

Reviewed by Siddarth SinghCSPLast reviewed 16 August 2026

Basis
ISO 45001 cl.8.1
Workspace
KnowSafe
Form type
Checklist
Completed by
The boiler attendant, at the interval set by the written scheme
Two failures that matter
Low water with the burner firing, and a relief device that cannot lift

The short version

  • The check exists to catch two specific failure modes — low water with the burner firing, and a relief device that will not lift — everything else on the form supports or contextualises those two findings.
  • Options like 'Not due' score the same as 'Yes', which means a device that has never actually been tested can pass the check indefinitely if the interval is set too wide.
  • The template holds 57 fields across seven sections, with Findings repeating for every deficiency raised in the same check.
  • Scoring is pass rate with high as good, but a high score on a partially completed form is not a genuine pass — Completeness Percent exists precisely to catch that.

What this is

What is a steam system safety check?

What is a steam system safety check?

It is a checklist run against a specific boiler that verifies water level and controls, safety devices, water treatment and the physical condition of the boiler house. It sits under ISO 45001 cl.8.1 as one of the operational controls for a pressure system, and it is the record a regulator or insurer asks for first after any steam-related incident.

What does the check actually prove, as opposed to a boiler attendant log?

The safety check proves that the fixed protective devices — level controls, relief valve, flame failure device, gas shut-off — still function when tested. The attendant log proves the boiler was watched and its running readings were within range shift by shift. One tests the safeguards; the other tests attendance.

Why is the check tied to a scheme interval rather than a fixed date?

The written scheme of examination sets the interval for each class of device based on its risk and duty cycle, so a safety valve on a high-duty boiler may be tested more often than one on a standby unit. Running the check on a fixed calendar date instead of the scheme interval is a common way for statutory testing to quietly fall behind.

Scope

When is a steam system safety check required?

This checklist is one step in the Pressure Systems and Refrigeration programme. Using it for work that belongs to a neighbouring template — the written scheme, the attendant log, or a cylinder check — produces records that are hard to report on later and that dilute the two failure modes this check is built to catch.

Use this template when

  • A specific boiler is due its periodic safety check at the interval set by the written scheme
  • The boiler house is being set up in the register and a check schedule needs to start
  • A previous check raised a finding and this run confirms whether it has been closed
  • A relief device, level control or flame failure device has just been serviced and needs re-verification before the boiler returns to service
  • A linked record needs this one to exist: links Vessel inspection, Energy log

Do not use it for

  • Pressure System Written Scheme, which sets out which parts of a pressure system are examined, how, and at what interval.
  • Boiler Attendant Log, which records the periodic checks a boiler attendant makes through a shift, with readings and any action taken.
  • Compressed Gas Cylinder Check, which checks cylinder storage, securing, segregation, valve protection and test dates.
  • Ammonia System Safety Review, which covers ammonia-specific plant rather than steam-raising plant.
  • Anything outside KnowSafe, which belongs in the workspace that owns that process

Compliance mapping

Which ISO 45001 cl.8.1 requirements does this satisfy?

ISO 45001 cl.8.1 requires operational controls that eliminate or reduce OH&S risk from plant and equipment, and for a steam-raising boiler those controls are physical: level protection, pressure relief, flame supervision and water chemistry. The clause map below ties each control to the section that actually verifies it.

ClauseRequirementWhere it lands
ISO 45001 cl.8.1Identify the asset and the attendant accountable for it before recording any resultHeader
ISO 45001 cl.8.1Verify low-water protection independently of the gauge glass reading aloneWater level and controls
ISO 45001 cl.8.1Confirm pressure relief and combustion safety devices lift or trip on demandSafety devices
ISO 45001 cl.8.1Control feedwater chemistry to prevent scale and corrosion that mask instrument readingsWater treatment
ISO 45001 cl.8.1Maintain the boiler house environment so combustion air, ventilation and egress are not compromisedBoiler house
ISO 45001 cl.8.1Record any deficiency against a severity and close it out or escalate itFindings
ISO 45001 cl.8.1Roll individual results into a pass/fail band with a second, independent signatureResult

What it does not cover

  • Water Level Visible And Correct marked Yes without Gauge Glass Blown Down being tested the same round, which lets a blocked connection show a false safe level.
  • Safety Valve Free And Tested left at 'Not due' for more cycles than the written scheme allows between tests, which converts a statutory test into an assumption.
  • Discharge Route Clear And Safe marked Marginal with no finding raised, which leaves a relief device connected to a route that may not carry a discharge safely.
  • Attendant Competent And Present marked Partly with Status set to Complete, which closes a check that a competent attendant did not actually perform.
  • A Fail result recorded in Findings with Action Required left at No, which contradicts the severity just entered and drops a real deficiency without a route to closure.

Global

Steam System Safety Check requirements by country

Steam boilers are one of the few plant categories almost every jurisdiction regulates directly, because the consequence of a low-water or over-pressure event is catastrophic rather than gradual. The three regimes below shape how this check is scoped and what a regulator expects to see behind it.

United Kingdom

Pressure Systems Safety Regulations 2000 (PSSR), reg. 9

PSSR requires a written scheme of examination for relevant pressure systems and a competent person to examine them at the set interval; this checklist is the operational check that sits between those formal examinations.

A pass rate on this checklist does not substitute for the written scheme examination — it demonstrates the boiler was safe to run in the gap between statutory examinations, which is exactly what an HSE inspector asks about after an incident.

European Union

Pressure Equipment Directive 2014/68/EU

PED governs the design and conformity of the pressure equipment itself (the boiler, its fittings and its relief devices), not the in-service inspection regime, which member states set separately.

Where a boiler carries a PED conformity marking, this check verifies the protective devices specified at design stage are still functioning — it does not replace the periodic in-service inspection a member state's own regulations require.

United States

ASME Boiler and Pressure Vessel Code, Section VI (Recommended Rules for Care and Operation of Heating Boilers)

ASME Section VI sets the recognised operating and maintenance practice most US state boiler laws reference, including low-water fuel cut-off testing and blowdown practice.

State boiler inspection acts typically require evidence that low-water cut-offs and safety valves are tested to this practice; this checklist's Water level and controls and Safety devices sections are the record that evidence exists.

How to complete it

How to complete a steam system safety check, step by step

Filling in every field is mechanical. The judgement calls below are what decide whether a completed check would actually hold up if a boiler house incident were investigated afterwards.

Whether 'Not due' is genuinely not due

Every statutory device test on this form offers 'Not due' at full score. That is only defensible if the interval comes from the written scheme, not from habit. An attendant who has never seen the safety valve lift should treat that as a gap to raise, not a box to leave unticked indefinitely.

Whether a Marginal result needs a finding

Marginal options exist on discharge route, combustion air and ventilation so the check does not force a false binary. But Marginal without a corresponding Finding entry means the observation is recorded and then lost — the judgement call is deciding which Marginal results are cosmetic and which are one shift away from a Fail.

Who counts as the second signature

The form asks for both an attendant signature and a separate engineering signature. Using the same person for both, or having engineering sign without reviewing the Findings section, defeats the independent check the two-signature structure is there to provide.

How Completeness Percent is read against Score Percent

A high Score Percent on a check that skipped half its fields is not a genuine pass — it is an unanswered question dressed as a good result. Completeness Percent should be reviewed alongside Score Percent before the Result Band is treated as final.

What auditors find

Most common steam system safety check findings

The deficiencies that recur across steam system checks cluster around the same handful of devices, almost always because a test was assumed rather than performed.

FindingClauseWhat fixes it
Low water alarm tested at the same time each shift, never at a genuinely low levelWater level and controlsRotate the test point so the alarm is proven to trip at its set level, not just that the test button works.
Safety valve recorded as tested with no lift observed, just a visual inspectionSafety devicesRequire a documented lift test at the scheme's interval, not a substitute visual check.
Blowdown skipped when the shift is short-staffed, then marked 'Not due' rather than 'No'Water treatmentReserve 'Not due' for scheme-scheduled skips only, and treat a staffing-driven skip as a genuine miss.
Combustion air vents partially obstructed by stored materials that migrate back after each clearanceBoiler houseAdd a standing clearance zone to the site layout rather than re-clearing it each check.
Discharge route for the safety valve terminates over a walkway with no warning signageSafety devicesReroute the discharge or sign the walkway before the next check is due, and log the change against the finding.
Attendant Competent And Present marked Yes for an attendant whose certification lapsed the same monthBoiler houseCross-check attendant certification status before the check is signed off, not after.

Case in point

Case in point: a low-water event that three consecutive checks had already flagged

A boiler tripped on low water mid-shift after the feed pump seal failed silently. The investigation pulled the last three Steam System Safety Checks: all three had Feed Pumps Working marked 'One working' — a Marginal-equivalent result — with no Finding raised and no Action Required set to Yes, because the boiler kept running on the second pump each time.

Nothing on the form was falsified. The checklist simply let three consecutive partial failures of the same component pass individually, because each one in isolation scored above the fail threshold. The fix adopted afterwards was a standing rule: two consecutive non-'Both working' results on the same asset auto-raises a finding, regardless of the score.

The template

The template, field by field

The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.

57fields
7 sections
Reference
SAF-164
Archetype
Checklist
Record ID
CHK-2026-000
Scoring
Pass rate
Direction
High is good
Singleton
Yes
Basis
ISO 45001 cl.8.1
Links
Links Vessel inspection, Energy log
Tags
Pressure, Steam
Sections
7
Fields
57
Follow up fields
9
Repeating sections
1
Links out
4
Field typesOwn ID, generated on saveCase thread and parentPick list from a registryLinked to another templateFollow up, dashed outlineScored

Header

12 fields
Text

Check ID*

Generated on save

Auto sequence. Format CHK-2026-00000.

The record's own ID. Other templates point at this value.

Single Choice

Status*

Scored

Drives who this goes to next.

  • Planned2 pts
  • In progress2 pts
  • Complete3 pts
  • Deferred0 pts
  • Open0 pts
  • Closed3 pts
  • Overdue0 pts
Date & Time

Date and Time*

Users

Completed By*

Pick List

Site*

From FDN-001 Site NameFilter: Status is Active
Text

Site ID*

Linked

Format SITE-000.

Links to FDN-001 Site ID

Single Choice

Area

Optional

The area within the site.

Cutting roomBoning hallPackingChill storeFreezerPasteurisingFillingCulture roomDespatchYardWorkshopPlant roomOffices
Location

Exact Location

Optional

Drop a pin for anything hard to find.

Info

Low Water Destroys Boilers

Two failures account for most boiler house catastrophes: low water level with the burner firing, and a relief device that cannot lift. Everything else is secondary.

Text

Boiler Reference*

Single Choice

Check Frequency*

Each shiftDailyWeeklyMonthly
Users

Attendant*

Water level and controls

6 fields
Single Choice

Water Level Visible And Correct*

Scored
  • Yes3 pts
  • Marginal1 pt
  • No0 pts
Single Choice

Gauge Glass Blown Down*

Scored

A gauge glass can show a false level when the connection is blocked. Blowing down proves it.

  • Yes3 pts
  • No0 pts
Single Choice

Level Controls Tested*

Scored
  • Yes3 pts
  • No0 pts
Single Choice

Low Water Alarm Tested*

Scored
  • Yes3 pts
  • Not due3 pts
  • No0 pts
Single Choice

Low Water Cut Out Tested*

Scored
  • Yes3 pts
  • Not due3 pts
  • No0 pts
Single Choice

Feed Pumps Working*

Scored
  • Both working3 pts
  • One working1 pt
  • Faulty0 pts

Safety devices

6 fields
Single Choice

Safety Valve Free And Tested*

Scored
  • Yes3 pts
  • Not due3 pts
  • Overdue0 pts
Single Choice

Discharge Route Clear And Safe*

Scored
  • Yes3 pts
  • Marginal1 pt
  • No0 pts
Single Choice

Pressure Gauge Reading Correctly*

Scored
  • Yes3 pts
  • Suspect1 pt
  • No0 pts
Single Choice

High Pressure Cut Out Tested*

Scored
  • Yes3 pts
  • Not due3 pts
  • No0 pts
Single Choice

Flame Failure Device Tested*

Scored
  • Yes3 pts
  • Not due3 pts
  • No0 pts
Single Choice

Gas Safety Shut Off Tested

OptionalScored
  • Yes, working3 pts
  • Not tested1 pt
  • Failed0 pts

Water treatment

6 fields
Single Choice

Blowdown Carried Out*

Scored
  • Yes3 pts
  • Not due3 pts
  • No0 pts
Single Choice

Total Dissolved Solids In Range*

Scored
  • Yes3 pts
  • Marginal1 pt
  • No0 pts
Single Choice

Alkalinity In Range

OptionalScored
  • Yes3 pts
  • Marginal1 pt
  • No0 pts
Single Choice

Chemical Dosing Working*

Scored
  • Yes3 pts
  • Intermittent1 pt
  • No0 pts
Single Choice

Softener Functioning*

Scored
  • Yes3 pts
  • Marginal1 pt
  • No0 pts
Text

Treatment Record ID

OptionalLinked

Links to MNT-073 Record ID

Boiler house

6 fields
Single Choice

Ventilation Clear*

Scored
  • Yes3 pts
  • Partly1 pt
  • Blocked0 pts
Single Choice

Combustion Air Adequate*

Scored
  • Yes3 pts
  • Marginal1 pt
  • No0 pts
Single Choice

No Storage In Boiler House*

Scored
  • Confirmed3 pts
  • Some1 pt
  • Significant0 pts
Single Choice

Carbon Monoxide Detection Working

OptionalScored
  • Yes3 pts
  • Not fitted1 pt
  • Faulty0 pts
Single Choice

Emergency Shut Off Accessible*

Scored
  • Yes3 pts
  • Obstructed1 pt
  • No0 pts
Single Choice

Attendant Competent And Present*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts

Findings

Repeats7 fields
Single Choice

Result*

Scored
  • Pass3 pts
  • Pass with conditions2 pts
  • Fail0 pts
Single Choice

Severity

OptionalScoredShows if Result equals Fail
  • Minor3 pts
  • Moderate1 pt
  • Serious0 pts
Single Choice

Element Tag

OptionalShows if Result equals Fail

Groups deficiencies by hazard type across every template.

Hazard identificationPPEHousekeepingEnergy isolationMachine guardingErgonomicsChemicalElectricalWorking at heightConfined spaceMobile equipment
Text

Deficiency Detail

OptionalShows if Result equals Fail
File Upload

Photo Evidence

OptionalShows if Result equals Fail
Single Choice

Fixed On The Spot

OptionalShows if Result equals Fail
YesNo
Text

Finding ID

OptionalLinkedShows if Fixed On The Spot equals No

Raise a finding record where this needs tracking to closure.

Links to FDN-015 Finding ID

Result

14 fields
Numeric Answer

Items Assessed*

Excludes anything marked N/A.

Numeric Answer

Items Failed*

Numeric Answer

Score Percent*

Scored

Calculated on submission. High is good. N/A items leave the denominator.

Single Choice

Result Band*

Scored
  • Pass3 pts
  • Caution1 pt
  • Fail0 pts
Numeric Answer

Completeness Percent*

How much of the template was actually answered. A high score on a half completed form is not a high score.

Single Choice

Action Required*

Scored

Raise the action record, then enter its reference here.

  • No2 pts
  • Yes0 pts
Single Choice

Priority

OptionalScoredShows if Action Required equals Yes
  • High0 pts
  • Medium1 pt
  • Low3 pts
Text

CAPA ID

OptionalLinkedShows if Action Required equals Yes

Format CAPA-2026-00000.

Links to FDN-014 CAPA ID

Users

Action Owner

OptionalShows if Action Required equals Yes
Date & Time

Next Due*

Users

Boiler Attendant*

Signature

Signature*

Users

Engineering*

Signature

Second Signature*

SAF-164 · record IDs look like CHK-2026-000 · Links Vessel inspection, Energy log

Open in Knowella

Run it with agents

From a document you fill in to a programme that runs itself

The form is the easy part. Keeping the check tied to the actual scheme interval, catching a Marginal result before it becomes a Fail, and holding the second signature to a real independent review is the work that actually slips.

KnowSafe

Holds the steam system safety check against the written scheme's intervals, flags devices left on 'Not due' too long, and keeps the finding-to-closure chain intact.

KnowMaintain

Links the check's findings to the boiler's maintenance history, so a recurring feed pump or valve issue is visible before it becomes a repeat finding.

KnowTrain

Confirms the attendant's certification is current at the moment the check is signed, rather than leaving that cross-check to memory.

Ella
Ella

Rolls check completion and open findings into one view across every boiler on site, and holds every write for your approval before it touches a record.

This template lives in KnowSafe — safety and compliance. Incidents, hazards, permits, inspections and the critical controls behind them.

Meet KnowSafe→

Glossary

Steam System Safety Check definitions and key terms

Gauge glass
The sight glass on a boiler shell that shows water level directly; blowing it down clears any blockage that could make the reading unreliable.
Blowdown
Deliberately discharging a controlled amount of boiler water to remove suspended solids and sludge, and to prove level instruments respond correctly.
Total dissolved solids (TDS)
A measure of dissolved mineral content in boiler water; too high a concentration causes foaming and carryover into the steam system.
Relief device
A safety valve or bursting disc set to open automatically before pressure exceeds the safe working limit of the vessel.
Flame failure device
A safety control that shuts the fuel supply if the burner flame is lost, preventing unburnt fuel from accumulating in the combustion chamber.

FAQ

Frequently asked questions about steam system safety check

What is the steam system safety check template based on?+

It is built against ISO 45001 cl.8.1, the operational controls clause of the occupational health and safety management standard, applied here to a boiler's protective devices and water treatment regime.

What sections does the steam system safety check contain?+

There are seven sections: Header, Water level and controls, Safety devices, Water treatment, Boiler house, Findings and Result. Together they hold 57 fields, 41 of which are required.

Does this check replace the written scheme of examination?+

No. The written scheme sets the statutory examination regime for the pressure system as a whole; this checklist is the operational verification that runs between those formal examinations.

Which programme does the steam system safety check belong to?+

It is part of Pressure Systems and Refrigeration, which aims for statutory examinations kept in date and an ammonia position that stands up to a regulator visit.

How is a steam system safety check scored?+

Scoring is pass rate, with high as good. The score is only meaningful alongside Completeness Percent, since a partially answered form can still return a high pass rate.

Can the steam system safety check template be changed?+

Yes. Every field, option, score and conditional rule is editable, and the links to other templates come with it. Most teams install it as-is, run it for a cycle, then adjust the interval-based options against their own written scheme.

Keep going

Related templates and programmes

Siddarth Singh

Written and reviewed by

Siddarth Singh

Founder & Chief Executive Officer, Knowella

Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.

  • Certified Safety Professional (CSP), Board of Certified Safety Professionals
  • MBA, University of Chicago Booth School of Business
  • MS and BS, The Ohio State University, Industrial and Systems Engineering
  • Six Sigma Black Belt
Verify with BCSP →

Sources and last review. Reviewed 16 August 2026 against:

  • ISO 45001 cl.8.1 — Operational planning and control
  • Pressure Systems Safety Regulations 2000 (PSSR), reg. 9 — Written scheme of examination
  • Pressure Equipment Directive 2014/68/EU
  • ASME Boiler and Pressure Vessel Code, Section VI — Recommended Rules for Care and Operation of Heating Boilers

This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.

Start in Minutes, Not Weeks

Launch a Ready-Made Template and Customize It Your Way

Every template is fully editable. Adjust fields, workflows, and branding to match your processes, then deploy to your team instantly.