Procedures
Preparation and Energy Source Identification
Preparation for lockout–tagout begins with a systematic assessment of the machine or equipment to be serviced, focusing on the identification and characterization of all hazardous energy sources to prevent unexpected release during maintenance. Under OSHA's standard 29 CFR 1910.147, authorized employees must acquire knowledge of the type and magnitude of energy involved, the associated hazards, and the methods required for effective control prior to initiating shutdown.[18] This preparation ensures that no energy source is overlooked, as incomplete identification can lead to residual hazards such as stored energy in capacitors or compressed springs.[18]
Hazardous energy sources addressed in preparation include electrical, mechanical (e.g., kinetic or potential from moving parts), hydraulic, pneumatic, chemical, thermal, gravitational (e.g., from elevated components), and others capable of causing harm through sudden release or startup.[18] [1] Identification involves inspecting the equipment's design, operational manuals, and physical components—such as power supplies, valves, and reservoirs—to locate isolation points and evaluate energy quantities, often requiring multidisciplinary input for complex machinery.[18]
Employers must develop and document energy control procedures outlining the scope of affected equipment, necessary employee training and skills, shutdown sequences, and isolation techniques specific to identified sources.[18] For equipment with single, easily identifiable energy sources and no stored energy, simplified procedures may apply without full documentation, but verification remains mandatory to confirm de-energization feasibility.[18] This phase also entails notifying affected and other employees of the impending lockout–tagout, coordinating shift changes if applicable, and planning for group lockouts in multi-employee scenarios to maintain procedural integrity.[18]
Shutdown, Isolation, and Application of Devices
Shutdown begins after preparation, where the authorized employee operates the machine or equipment using its established normal stopping procedures, such as activating stop buttons, switches, or levers to halt operations.[25] This step ensures the equipment ceases active function before isolation, minimizing unexpected energization risks during servicing. Affected employees in the area must be notified of the impending shutdown to prevent interference or accidental activation.[25]
Isolation follows shutdown, requiring the physical operation of energy-isolating devices—such as circuit breakers, valves, or disconnect switches—to separate the equipment from all hazardous energy sources, including electrical, mechanical, hydraulic, pneumatic, chemical, thermal, and gravitational forms.[25] These devices must be located and manipulated to block or release stored energy effectively, ensuring no pathway remains for energy to reach the equipment. For complex systems, multiple isolating points may need sequential operation to achieve complete de-energization.[26]
Application of lockout or tagout devices occurs immediately after isolation, with each authorized employee affixing their personal device directly to the energy-isolating mechanism in a position that prevents inadvertent re-energization.[25] Lockout devices, typically padlocks or hasps, provide a physical barrier holding the isolator in the "off" or "safe" state, offering superior protection over tagout systems, which use tags to warn against operation but lack mechanical restraint.[27] Devices must be durable, standardized in color or shape for quick identification, and capable of withstanding at least 50 pounds of force without dislodging; only one key per lock is permitted, held by the authorized user.[18] In group settings, a primary lockout device or lockbox coordinates multiple individual locks.[18] Tagout is permissible only when lockout is infeasible, provided equivalent safety is demonstrated through additional measures like equipment removal or testing.[18]
Verification of De-Energization
Verification of de-energization constitutes the critical step in lockout-tagout procedures where authorized employees confirm that equipment isolation from hazardous energy sources is effective and that any stored energy has been released, rendering the machine or system incapable of unexpected startup or energy release prior to maintenance or servicing.[18] Under OSHA standard 29 CFR 1910.147(c)(2)(iii), this verification must occur before work commences on locked-out or tagged-out equipment, ensuring the authorized employee has verified isolation and de-energization.[18] Failure to perform this step adequately contributes to incidents where residual energy causes injuries, as evidenced by OSHA data indicating that improper verification remains a leading violation in lockout-tagout citations.[28]
The verification process typically involves multiple methods tailored to the types of energy present, such as electrical, mechanical, hydraulic, pneumatic, chemical, thermal, or gravitational potential.[18] A primary technique is the "test-out" or "try-out" method, where the employee attempts to activate the equipment's normal operating controls—if the machine fails to respond, controls are returned to the off position, confirming isolation.[28] For electrical hazards, calibrated testing devices like voltmeters or multimeters must be used to measure for absence of voltage, adhering to standards such as NFPA 70E which emphasize live-dead-live testing sequences to avoid false negatives from instrument failure.[18] Mechanical or stored energy verification may include visual checks of gauges for zero pressure, bleeding of lines, or blocking against potential movement, while thermal energy requires confirmation that temperatures have equalized to safe levels.[4]
Employer energy control programs must specify these procedures in writing, accounting for equipment-specific complexities, such as capacitors retaining charge or hydraulic accumulators under residual pressure.[18] In group lockout scenarios, each authorized employee performing the work is responsible for independent verification after applying their personal lockout device to a group mechanism, preventing reliance on collective assumptions.[29] Periodic audits and retraining ensure compliance, with OSHA requiring annual inspections to evaluate procedure effectiveness, including verification steps.[30] These measures address real-world causal risks, such as undetected parallel circuits or automated restarts, which empirical incident reports attribute to skipped or superficial verifications.[31]
Group Lockout Processes
Group lockout/tagout procedures apply under OSHA's control of hazardous energy standard (29 CFR 1910.147) whenever servicing or maintenance requiring energy isolation involves more than one authorized employee, or when affected employees work in the vicinity.[18] These procedures ensure equivalent protection to individual lockout/tagout by coordinating multiple workers while preventing unintended re-energization.[32]
Employers must designate a primary authorized employee to oversee the group procedure, who assumes responsibility for implementing and verifying the hazardous energy control measures, including shutdown, isolation, and de-energization verification.[33] This individual coordinates the process, notifies affected employees, and confirms that all participants have applied their devices before work commences. Each authorized employee then attaches their personal lockout or tagout device to a group lockout device (such as a multi-lock hasp), group lockbox, or comparable mechanism on the energy-isolating device, ensuring personal accountability.[18] [34]
Upon completion of tasks, workers remove only their own devices after verifying their work area is clear. The primary employee then performs a final inspection to ensure all employees and tools are removed, the area is safe, and no residual hazards remain before authorizing removal of the group control and re-energization, followed by notification to affected parties.[33] Group procedures, as part of the overall energy control program, require annual inspections by an authorized employee to assess compliance and effectiveness.[18]
Common mechanisms include hasps fitted to energy-isolating points to accommodate multiple padlocks or centralized lockboxes where keys from primary locks are secured, preventing any single worker from bypassing the group control.[35] These methods address scenarios like shift changes or contractor involvement, where continuity of control is maintained through documented handoffs.[32]
Removal and Restoration
The removal and restoration phase of lockout-tagout procedures ensures that hazardous energy is safely reintroduced only after servicing is complete and all personnel are clear of risks. Under OSHA's Control of Hazardous Energy standard (29 CFR 1910.147(e)), authorized employees must first inspect the machine or equipment and surrounding work area to confirm that all nonessential items—such as tools, rags, or temporary guards—have been removed and that components are operationally intact before any devices are removed or energy restored.[18] This step prevents inadvertent startups or malfunctions that could arise from residual debris or misalignment.[36]
The work area must then be checked to verify that all employees, including affected and authorized personnel, are safely positioned outside hazardous zones or have been removed entirely.[18] Following this, each lockout or tagout device is removed from the energy-isolating device by the specific authorized employee who applied it, promoting accountability and ensuring the remover understands the isolation context.[18] An exception permits removal by another employee under the employer's direction if the original applicator is unavailable, but only if the employer's energy control program includes documented procedures and training demonstrating equivalent safety; these must encompass verifying the employee's absence from the facility, making reasonable contact efforts to inform them of the removal, and ensuring they receive this information before resuming related work at the site.[18]
Affected employees—those who operate or work near the equipment—must be notified by the employer or an authorized employee of the lockout or tagout device removal before the machine or equipment is reenergized, as required under both application and release notifications in the standard (29 CFR 1910.147(c)(9)).[18] Restoration then proceeds by reenergizing all isolated energy sources, placing controls in a neutral or off position where applicable, and conducting a controlled startup to confirm normal operation.[25] This sequence minimizes exposure to unexpected energization, with OSHA emphasizing that deviations without equivalent safeguards violate the standard's protective intent.[18]