Lockout/Tagout: The Steps Crews Skip

Most lockout failures are not ignorance of the rule. They are a familiar shortcut on a machine someone has serviced a hundred times.

Lockout/tagout under 29 CFR 1910.147 is one of the most cited standards in general industry year after year. That statistic is misleading if you read it as workers not knowing the rule. Almost everyone knows the rule. What actually happens is a shortcut on a machine someone has serviced a hundred times without incident.

The sequence exists in that order for a reason

The energy control procedure is not a checklist to be reordered by convenience:

1. Prepare for shutdown. Know every energy source on the machine before you touch it — electrical, pneumatic, hydraulic, thermal, chemical, gravity.
2. Notify affected employees. Anyone who operates or works near the equipment needs to know it is going down.
3. Shut the equipment down using its normal stopping procedure.
4. Isolate every energy source. Disconnects, valves, blocks.
5. Apply lockout devices. Each authorized employee applies their own lock, keyed uniquely to them.
6. Release or restrain stored energy. Bleed pressure, block or lower suspended parts, discharge capacitors, allow thermal energy to dissipate.
7. Verify isolation. Attempt a normal start, then return the controls to off. Test the circuit dead.

Step 6 is where people get hurt. The disconnect is open, the lock is on, and a hydraulically supported ram drifts down under gravity anyway. Electrical isolation is not the same as zero energy.

Verification is not optional

Verifying isolation is the single step most often compressed out of the process under schedule pressure. It is also the last barrier between a procedure error and a person inside the machine. Try to start it. Test the circuit with a meter you have proven on a known live source first.

Machine-specific procedures

A generic plant-wide lockout policy does not satisfy the standard. Each piece of equipment needs a documented procedure covering its specific energy sources, isolation points, and verification method. When a machine gets modified — a new pneumatic feed, a relocated disconnect — the procedure needs updating with it.

Group lockout and shift change

Two situations account for a disproportionate share of serious incidents:

• Group lockout. When a crew services equipment together, each authorized employee applies a personal lock to a group lockbox or hasp. Nobody is protected by someone else's lock. If your crew shares one lock, you have a policy problem, not a paperwork problem.
• Shift change. Continuity of protection has to be maintained as one shift hands off to the next. The outgoing employee's lock does not come off until the incoming employee's lock goes on.

Know who is who

The standard distinguishes three groups, and the training differs for each:

• Authorized employees perform the servicing and apply the locks. They need full procedural training.
• Affected employees operate the equipment. They need to recognize when lockout is in effect and know not to touch it.
• Other employees work in the area. They need to know what a lock means and to leave it alone.

The annual inspection people forget

The standard requires a periodic inspection of energy control procedures at least annually, performed by an authorized employee not using the procedure being inspected. It must verify that the procedure is still accurate and that employees know their responsibilities, and it has to be documented.

This is the requirement most often discovered missing during an inspection, because it is easy to have solid day-to-day practice and no record proving it.

The honest test

Walk your floor and pick a machine at random. Ask the person who services it to show you the written procedure, name every energy source, and describe how they verify zero energy. If any part of that is uncertain, you have found the gap before an incident did.