Building a Verifiable Lockout Tagout Procedure
A practical lockout tagout guide covering hazardous-energy identification, isolation, stored-energy control, verification, group work, temporary testing, restoration, inspections and audits.
Lockout/tagout controls hazardous energy during servicing and maintenance. The method is broader than switching off a machine. Workers must identify energy sources, isolate them, control stored energy, verify isolation and manage restoration.
In the United States, OSHA 29 CFR 1910.147 establishes minimum performance requirements for controlling hazardous energy in general industry. Site procedures must also reflect other applicable rules, equipment and local law.
Know When Energy Control Applies
Normal production and servicing are not the same activity. Adjustment, cleaning, jam removal, setup and maintenance can expose workers to unexpected startup or released energy.
Do not treat every short intervention as routine. OSHA's minor-servicing exception is limited and requires effective alternative protection. A risk assessment and the applicable standard should guide the decision.
Identify Every Energy Source
Electrical supply is only one source. Machines may contain pneumatic, hydraulic, mechanical, thermal, chemical, gravitational or stored spring energy. Capacitors and rotating parts can retain energy after disconnection.
Use current drawings, field inspection and worker knowledge. Follow every incoming supply and internal storage point. Shared utilities and backfeeds can create hazards absent from the main disconnect label.
Record the magnitude, location and isolation method for each source. The written procedure should identify the exact device, not merely say to disconnect power.
Shutdown Is Not Isolation
A normal stop command places control logic in a stopped state. It may leave power available to drives, heaters, valves and control circuits. A network stop also depends on communication and software.
An energy-isolating device physically prevents transmission or release of energy. Examples include disconnects, line valves and blocks. Pushbuttons, selector switches and software commands are generally control devices.
Related switching components can be reviewed in the Industrial Relays collection. Product availability does not make a normal relay suitable as an energy-isolating device.
Prepare and Notify
Before shutdown, identify affected employees and explain the timing and impact. Review the machine-specific procedure. Confirm that authorized workers have suitable locks, tags and hardware.
Plan the shutdown so process material and moving equipment enter a controlled condition. Sudden loss of energy can itself create hazards. Coordinate with upstream and downstream operations.
Shut Down and Isolate
Use the normal stopping sequence first when practical. Then operate every required energy-isolating device. Apply individually assigned locks and identification according to the employer's program.
Tags communicate information but do not provide the physical restraint of a lock. Where tagout is permitted, the employer must meet the applicable protection requirements.
Do not borrow another worker's lock or use a shared key casually. Personal control is central to knowing who remains exposed.
Control Stored and Residual Energy
Bleed pneumatic and hydraulic pressure. Discharge capacitors using approved methods. Block raised components and restrain springs. Allow hot parts to cool where temperature creates exposure.
Stored energy can reaccumulate. Pressure can return through leaking valves. Capacitors can regain charge. Gravity can load a support. Monitoring or repeated verification may be required during work.
A closed valve does not prove zero pressure. Use appropriate gauges, vents and mechanical restraints. Related measurement hardware is available in the Process Transmitters collection.
Verify Isolation Before Work
Verification is a deliberate test, not a visual glance. First confirm that people are clear. Then attempt a normal start or use an approved test method for each energy type.
Return controls to the off or neutral state after the test. Electrical verification should be performed by qualified workers with suitable instruments and procedures.
The verification method must match the hazard. A dark HMI proves little about a hydraulic accumulator or suspended load.
Manage Group Lockout
Group work needs clear accountability. Each authorized employee must receive protection equivalent to personal lockout. Shift changes require an orderly transfer that preserves continuous control.
Lock boxes can organize many isolation points, but the procedure must explain custody, verification and worker sign-on. A box does not replace accurate isolation.
Contractors and host employees must exchange information about their programs. Differences in locks, tags or responsibilities should be resolved before work begins.
Handle Testing and Positioning
Some tasks require temporary energization for testing or positioning. Remove tools, clear workers, remove devices under the approved sequence, energize only as needed, and then repeat full isolation.
Do not leave a machine partly restored between attempts. Every cycle needs controlled removal, testing and reapplication.
Restore Service Carefully
Inspect the work area and confirm the machine is operationally intact. Ensure employees are safely positioned. Remove each lock under program rules and notify affected employees before startup.
Removal of an absent worker's lock requires a specific documented procedure. It should never become a convenient shortcut.
Watch the first cycle for incorrect rotation, unexpected motion, leaks and bypassed protection. Restoration is part of the energy-control job.
Audit the Program
OSHA requires periodic inspection of energy-control procedures. Use inspections to correct inaccurate steps, missing sources and weak training. Review incidents, near misses and equipment changes.
Interview authorized employees during audits. Confirm that written steps match actual field devices. Check whether new tooling, utilities or software changes created additional energy paths.
Measure program quality through findings and corrections, not lock counts. A machine with many locks can still have an unidentified source or weak verification step.
OSHA's 29 CFR 1910.147 provides the regulatory text. Its hazardous-energy overview provides supporting material. A good program turns those requirements into machine-specific actions that workers can verify.