Lockout/Tagout Program: The Control of Hazardous Energy
This section has been reviewed and updated as needed: May 2014
- Remove or bypass machine guards, open enclosures or other safety devices;
- Place any part of their bodies in or near a machine’s moving parts; or
- Place any part of their bodies in a danger zone associated with machine operation.
- the tags are properly applied;
- the tags remain affixed throughout the duration of the servicing or maintenance job; and
- no employee violates the tag by re-energizing the machine or equipment, either intentionally or inadvertently, before the tag is removed.
Tags must be labeled to identify the specific employees who are authorized to apply and remove them. The label must contain the name, date and contact information for the person performing the lockout/tagout.
Tagout alone is only permitted when an energy-isolating device is not capable of being locked. A supervisor must provide written approval of the use of tagout alone instead of the preferred lockout/tagout method. Lockout capability must be provided, if feasible, for equipment or machines purchased after January 2, 1990, and for older equipment which undergoes extensive replacement, repair, renovation, or modification.
To ensure that a tagout system provides full employee protection, at least one added safety measure must be used in addition to tagging the energy isolation device. This additional measure is designed to protect an employee from injury or death through the inadvertent activation of an energy-isolating device associated with human error, inadvertent contact, the loss or detachment of a tag, or from any other limitation of tags. Any additional control measure must be integrated into equipment specific procedures through sound hazard-specific analyses on a case-by-case basis. Such additional safety measures might include the:
- Closure of a second in-line valve (e.g., double block and bleed);
- Removal of a valve handle to minimize the possibility that machines or equipment might be inadvertently energized or started;
- Removal of an additional isolating circuit element (e.g., fuse);
- Opening of an extra disconnecting device (e.g., disconnecting switch; circuit breaker);
- Opening and then racking out a circuit breaker;
- Grounding of an electrical circuit, if the grounding practice would protect the employee if the tagged isolating device were operated; or
- Locking, blocking, or barricading a controlling switch.
Document supervisor approval and any additional safety measure on the Tagout System Justification form found in Appendix A.
The energy control procedures must clearly and specifically outline the scope, purpose, authorization, rules, and techniques that will be used to control hazardous energy sources, as well as the means that will be used to enforce compliance. At a minimum, these procedures must also include the following elements:
- A specific statement of the intended use of the procedures;
- The specific procedural steps for shutting down, isolating, blocking and securing machines or equipment to control hazardous energy;
- The specific procedural steps for the placement, removal and transfer of lockout or tagout devices and the responsibility for them; and
- The specific requirements for testing a machine to determine and verify the effectiveness of LOTO devices and other control measures.
A separate procedure is not required for each machine or piece of equipment. Similar machines and/or equipment with the same or similar types of controls, and which can be rendered safe using the same sequential procedural steps, can be covered by a single procedure. The procedure must satisfactorily address the hazards and specify the measures for controlling the hazards. For example, a single energy control procedure may be used for a group of woodworking machines, as long as the procedure includes each machine within its scope and has sufficient specificity to allow employees to effectively isolate the hazardous energy sources and safely return each of the machines to service. To assist with the development of equipment specific procedures, fill out the Equipment Specific LOTO Procedure Development Form found in Appendix B. The completed development form can be used to create a pictorial procedure that can be placed near equipment in motor control centers (see air handler example in Appendix B).
- One authorized individual with knowledge of the equipment performs lockout/tagout on the equipment for the whole crew. It shall be the responsibility of that individual to carry out all steps of the lockout/tagout procedure and inform the crew when completed. This individual will attach his lockout/tagout device to a multi-lock accepting device.
- Then, each affected employee shall affix a personal lockout/tagout device to the multi-lock accepting device when they begin work, and shall remove those devices when they stop working on the machine or equipment being serviced or maintained. Each employee must verify that all required equipment has been locked out. Each employee must apply his own personal LOTO device.
- When all service or maintenance has been completed, the primary authorized individual shall remove his lockout/tagout device and the multi-lock accepting device after all other affected employees remove their locks. Only the employee who attached the LOTO device may remove the device unless the conditions outlined in the “Lockout/Tagout Removal When Individual is not available” section are met.
- If multiple pieces of equipment are being locked out, multiple lockout/tagout devices may be used to lockout the machine or equipment with the keys being placed in a lockout box or cabinet that allows the use of multiple locks to secure it. Each individual will then use his own lockout/tagout device to secure the box or cabinet. As each person no longer needs to maintain his lockout protection, that person will remove his lockout/tagout device from the box or cabinet.
A combination of visual inspections and physical tests are required for proper verification of isolation. Visual inspections verify that the correct devices have been locked out in the correct position. Use physical tests such as a deliberate attempt to start a machine for further verification and/or the use of a test instrument. After ensuring that no personnel are exposed, operate the push button or other normal operating controls to make certain the equipment will not operate.
The key to effective verification of isolation using physical tests lies in the ability to gain local control of the equipment. If local control cannot be obtained, additional steps must be taken. The paragraphs below provide various scenarios with the steps required to achieve effective verification of isolation.
The ability to place a piece of equipment in “hand” allows an authorized employee to gain local control of the equipment. For automated or remotely controlled equipment, placing the equipment in “hand” interrupts the control circuit and prevents the equipment from reenergizing due to programming. To verify isolation with this combination, switch the HOA to “off” and the on/off disconnect to “off”. Lockout and tagout the disconnect and attempt to restart the equipment by switching the on/off switch to “hand”. Verification is successful if the equipment does not start.
- After placing the disconnecting device in the open position, if possible, visually verify that all switch blades are fully open or that circuit breakers are in the fully disconnected position. Arc flash rating clothing must be worn when opening the electrical panel door or cover to perform this step.
- Obtain a test instrument that is adequately rated for the work environment (CAT III or CAT IV). The use of low voltage proximity or non-contact voltage detectors to verify the absence of voltage must be supplemented with a direct contact meter. Proximity or non-contact voltage detectors may provide false readings due to interferences that block the electric field. Interferences can occur if a cable is shielded or has a ground or neutral conductor inside or if the user is wearing voltage-rated gloves or standing on a fiberglass ladder.
- While wearing the required ppe, use the voltage tester to test a similar known source to verify that the tester is operating properly.
- Use the voltage tester to confirm that the equipment has zero voltage. A measurement must be made from each conductor to ground and between each conductor to each other conductor (phase-to-ground and phase-to-phase).
- Again, use the voltage tester to test a similar known source to verify that the tester is operating properly.
- Each LOTO device must be removed by the employee who applied the device.
- Inspect machine/equipment system components to ensure that:
- non-essential tools and materials have been removed; and
- machine or equipment components are operationally intact.
- Check the work area to ensure all employees have been safely positioned or removed.
- Inform affected employees that the lockout or tagout devices have been removed and that the machine or equipment will be reenergized.
- Safely start-up (re-energize) the equipment in accordance with established procedures.
- Clear machine or equipment of tools and materials;
- Remove employees from the hazardous areas around the machine or equipment;
- Remove the lockout or tagout devices;
- Energize the machine and employ effective employee protection while testing or positioning machinery; and
- If additional servicing or maintenance is required, turn off all systems, isolate the machine from the energy source, and reapply lockout or tagout devices as specified in this procedure.
- Verification by a supervisor that the authorized individual who applied the device is not at the facility.
- The supervisor will make all reasonable efforts to contact the individual to inform him that his energy control device is to be removed.
- The supervisor will assure that the affected individual has the knowledge of his energy control device being removed before he resumes work at the facility.
- The supervisor shall document the LOTO removal (see form in Appendix C).
The steps above are necessary to ensure that the employee who is protected by the device is not exposed to energy hazards either at the time of its removal or after its removal.
If the outside employer has no documented energy control procedures, or if their procedure allows tagout in lieu of lockout/tagout, they shall ensure that their personnel understand and comply with the procedures established in this program.
At a minimum, these inspections must include a demonstration of the procedures and must be performed while the authorized employees perform servicing and/or maintenance activities on machines or equipment. The inspections may be accomplished through random audits, safety tours, or planned visual observations. The inspector, who must be an authorized employee other than the ones utilizing the energy control procedure being inspected, must observe the implementation of the energy control procedure for the servicing and/or maintenance activities being evaluated and talk with employees implementing the procedure to determine that all the requirements of the LOTO standard are understood and being followed by employees.
Additionally, employers must certify that the prescribed periodic inspections have been performed. The certification must specify:
- the machine or equipment on which the energy control procedure was used;
- the date of the inspection;
- the names of the employees included in the inspection; and
- the names of the persons who performed the inspection.
Use the form in Appendix E to document certification.
- The purpose and function of the energy control program;
- The elements of energy control procedures relevant to employee duties; and
- The pertinent requirements and prohibitions of the LOTO standard.
The training must be specific to the needs of authorized, affected, and other employees who work in the area where LOTO is used. The degree of knowledge required for these three employee groups diminishes from authorized employee to affected employee to other employees. If tagout devices are used, all employees in all three categories must receive training regarding the inherent limitations of tags.
The employer must provide initial training for new hires before they begin any servicing and maintenance activities. Retraining must be provided annually and if a periodic inspection reveals, or an employer has reason to believe, that there are deviations from the application of the energy control procedure or inadequacies in an employee’s knowledge of the energy control procedure. The scope and content of all the retraining must be based upon the severity of the problems encountered and must be directed toward the elimination of those problems. Additionally, retraining must be provided for all authorized and affected employees whenever there is a change in job assignment, energy control procedures or hazards.
**Training documents/rosters must be sent to the UNC-CH Department of Environment, Health, and Safety (CB# 1650) so that the individuals who have completed the LOTO Training will receive proper credit.
- Affected Employee
- An employee whose job requires him/her to operate or use a machine or equipment on which servicing or maintenance is being performed under Lockout/Tagout or Tagout, or whose job requires him/her to work in an area in which such servicing or maintenance is being performed. Affected or authorized employees may disable, shut down, or turn off machines or equipment. An affected employee becomes an authorized employee when that employee’s duties include performing servicing or maintenance covered under the standard.
- Authorized Employee
- A person who locks out or tags out machines or equipment in order to perform servicing or maintenance on that machine or equipment. Also, any employee who implements a lockout and/or tagout system procedural element on machines or equipment (for servicing and/or maintenance purposes) is considered an authorized employee. This includes employees who:
- perform energy source isolation
- implement lockout and/or tagout on machines or equipment
- dissipate potential (stored) energy
- verify energy isolation
- implement actions to release LOTO
- test or position machines or equipment
- Capable of Being Locked Out
- An energy-isolating device is capable of being locked out if it has a hasp or other means of attachment to which, or through which, a lock can be affixed, or it has a locking mechanism built into it. Other energy-isolating devices are capable of being locked out, if lockout can be achieved without the need to dismantle, rebuild, or replace the energy-isolating device or permanently alter its energy control capability.
- Connected to an energy source or containing residual or stored energy. Conductors and parts of electric equipment that have been de-energized, but have not been locked and tagged out, must be treated as energized parts.
- Energy-Isolating Device
- A mechanical device that physically prevents the transmission or release of energy, including but not limited to the following: A manually operated electrical circuit breaker; a disconnect switch; a manually operated switch by which the conductors of a circuit can be disconnected from all ungrounded supply conductors, and, in addition, no pole can be operated independently; a line valve; a block; and any similar device used to block or isolate energy. Push buttons, selector switches and other control circuit type devices are not energy-isolating devices. Programmable logic controllers (PLCs) are not considered energy-isolating devices for purposes of the LOTO standard. Safety functions, such as stopping or preventing hazardous energy (motion), can fail due to component failure, program errors, magnetic field interference, electrical surges, improper use or maintenance, etc.
- Energy Source
- Any source of electrical, mechanical, hydraulic, pneumatic, chemical, thermal, or other energy.
- Group Lockout/Tagout
- Group LOTO allows authorized individual employees to be protected from hazardous energy when they are part of a group performing covered servicing or maintenance. Group LOTO is the means by which each authorized employee performing the servicing and/or maintenance exercises his or her control over the associated hazardous energy by attaching his or her personal LOTO device onto a group LOTO mechanism. It consists of personal LOTO devices, group LOTO devices/mechanisms, and equipment LOTO devices.
- Hazardous Energy
- Any energy, including mechanical, pneumatic, hydraulic, electrical, chemical, nuclear, and thermal energies, that could cause injury to employees.
- The placement of a lockout device on an energy-isolating device, in accordance with an established procedure, ensuring that the energy-isolating device and the equipment being controlled cannot be operated until the lockout device is removed.
- Lockout Box
- A box used to hold keys to multiple Lockout/Tagout devices. Following steps in this procedure, it can be used for convenience when several employees are isolating multiple pieces of equipment.
- Lockout Device
- A device that utilizes a positive means such as a lock to hold an energy-isolating device in the safe position and prevent the energizing of a machine or equipment. Included are blank flanges and bolted slip blinds.
- Lockout/Tagout Device
- A device that consist of both a Lockout Device and a Tagout Device.
- Servicing and/or Maintenance
- Workplace activities such as constructing, installing, setting up, adjusting, inspecting, modifying, and maintaining and/or servicing machines or equipment. These activities include lubrication, cleaning or unjamming of machines or equipment and making adjustments or tool changes, where the employee may be exposed to the unexpected energization or startup of the equipment or release of hazardous energy.
- Setting Up
- Any work performed to prepare a machine or equipment to perform its normal production operation.
- The placement of a tagout device on an energy-isolating device, in accordance with an established procedure, to indicate that the energy-isolating device and the equipment being controlled may not be operated until the tagout device is removed.
- Tagout Device
- A prominent warning device, such as a tag and a means of attachment, which can be securely fastened to an energy-isolating device in accordance with an established procedure, to indicate that the energy-isolating device and the equipment being controlled may not be operated until the tagout device is removed.
- Appendix A: Tagout Justification Form
- Appendix B: Equipment Specific LOTO Procedure Development Form
- Appendix C: Absentee Lockout Tagout Removal Form
- Appendix D: Contractor Notification Form
- Appendix E: Periodic Inspection Form