An elevator system 2 is provided which comprises: a hoistway 6 accessible by at least one hoistway door 10a, 10b, 10c; at least one elevator car 4 located in the hoistway 6; a hoistway door switch 12a, 12b, 12c associated with the at least one hoistway door 10a, 10b, 10c; at least one inspection switch 16; at least one emergency stop switch 18; and an elevator controller 24. The elevator controller 24 is configured to monitor the hoistway door switch 12a, 12b, 12c, the inspection switch 16 and the emergency stop switch 18 and to prevent inspection mode operation of the elevator car 4 until at least one change of state is detected of each of the hoistway door switch 12a, 12b, 12c, the inspection switch 16 and the emergency stop switch 18.