A lockout/tagout (LOTO) procedure exists to answer one question in a way an auditor, a foreman, and the person doing the work can all agree on: how do we make this equipment safe to service, and how do we prove it was done? Under 29 CFR 1926.417, the expectation isn’t just that energy gets controlled — it’s that the control is documented, specific to the equipment, and repeatable by anyone authorized to perform it. This guide walks through what a compliant, machine-specific LOTO procedure actually contains.
Procedure identity and scope
Every procedure should name the specific equipment or machine it applies to, not a general category. “Hydraulic press, Line 3, Asset #HP-0412” is auditable; “presses” is not. Define the scope of the servicing or maintenance activity the procedure covers, since a routine die change and a full teardown may isolate different energy sources.
Personnel and roles
Identify who is authorized to perform the lockout, who the affected employees are, and who holds responsibility for verifying the equipment before work begins. Authorized employees apply and remove their own locks; affected employees need to know the equipment is being serviced and must not attempt to start it.
Energy sources and isolating devices
List every energy source connected to the equipment — electrical, hydraulic, pneumatic, mechanical, thermal, and any stored energy such as springs or elevated components. For each source, name the specific isolating device (the disconnect, valve, or blocking device) and its location. Vague references are the most common gap in a rejected procedure.
Shutdown and isolation sequence
Spell out the ordered steps to shut down the equipment normally, then isolate each energy source. Sequence matters: shutting down in the wrong order can create a hazard rather than remove one. Each isolating device is then locked and tagged by the authorized employee.
Controlling stored energy
Isolation alone doesn’t make equipment safe if energy remains stored in the system. The procedure must describe how residual or stored energy is relieved, disconnected, restrained, or otherwise rendered safe — bleeding hydraulic pressure, blocking suspended parts, or grounding capacitors, for example.
Verifying zero energy
Before any work starts, the authorized employee verifies isolation was effective — typically by attempting to operate the equipment (after confirming the area is clear) and confirming it will not start, and by testing with instruments where appropriate. This zero-energy verification step is what turns a locked disconnect into a genuinely safe condition.
Restoring equipment to service
Document the steps to return the equipment to operation: inspecting the work area, confirming all tools and personnel are clear, removing locks and tags by the employees who applied them, and notifying affected employees before re-energizing.
Periodic inspection
A procedure that’s written once and never reviewed drifts out of compliance as equipment changes. Build in a periodic inspection — who reviews the procedure, how often, and how deviations get corrected — so the document keeps matching the machine in front of you.
From framework to finished procedure
Getting each of these sections consistent across dozens of machines is where most teams lose time. Our LOTO Procedure Builder structures the energy sources, isolation sequence, and verification steps into a repeatable, machine-specific document. It’s a documentation framework only — it does not certify compliance, authorize work, or replace competent-person judgment.
Leave a Reply