Lockout/Tagout: Hazard Analysis & Controls for Hazardous Energy
Published:
The failure to control hazardous energy during maintenance, servicing, and setup of machines and equipment kills approximately 120 workers and seriously injures tens of thousands more each year in the United States. These incidents occur when stored or residual energy is unexpectedly released or when machines are started while workers are performing tasks inside, under, or near equipment. The energy sources involved include electrical, mechanical, hydraulic, pneumatic, chemical, thermal, and gravitational — any of which can cause death or catastrophic injury in an instant. OSHA's Control of Hazardous Energy standard (29 CFR 1910.147), commonly known as lockout/tagout or LOTO, exists specifically to prevent these incidents, and it has been among the top five most frequently cited OSHA standards for the past two decades.
A lockout/tagout program requires employers to establish energy control procedures, train authorized and affected employees, conduct periodic inspections, and apply lockout and tagout devices to energy-isolating devices before any employee performs servicing or maintenance where the unexpected energization or release of stored energy could cause injury. The standard requires machine-specific written procedures for each piece of equipment (with limited exceptions for single-energy-source machines with a single lockout point), group lockout procedures when multiple employees are servicing the same equipment, and procedures for shift and personnel changes during extended maintenance activities.
The consequences of LOTO failures are severe and fast. Workers have been electrocuted when power was restored to panels they were wiring. Mechanics have been crushed by press rams that cycled unexpectedly. Employees have been scalded by pressurized steam released from valves thought to be isolated. Conveyor systems have started while workers were inside hoppers or beneath belt lines. In every case, a properly executed lockout/tagout procedure would have prevented the incident. A Job Safety Analysis that identifies all energy sources and isolation points for each maintenance task is the first line of defense — it forces the planning that prevents the assumption that "someone already shut it off."
Disclaimer
This content is provided for general informational and educational purposes only. It is not a substitute for a site-specific Job Safety Analysis conducted by a qualified safety professional familiar with your workplace conditions, equipment, and personnel. OSHA citations, BLS statistics, and hazard controls referenced here may not reflect the most current standards or apply to your specific situation. Always consult current OSHA regulations, manufacturer guidelines, and a competent person before beginning work. Health & Safety Systems LLC assumes no liability for actions taken based on this content.
Incident Statistics
~120
Fatalities (2024)
~50,000
Nonfatal Injuries (2024)
#4 Most Cited
OSHA FY2024 ranking
OSHA estimates that proper lockout/tagout procedures prevent 120 fatalities and 50,000 injuries annually. The standard ranked #4 on OSHA's most cited list in fiscal year 2024 with 2,554 violations.
Source: Bureau of Labor Statistics, Census of Fatal Occupational Injuries (CFOI) and Survey of Occupational Injuries and Illnesses (SOII), 2024
Document Lockout/Tagout: Hazard Analysis & Controls for Hazardous Energy Controls in Your JSA
Use JSABuilder to identify hazards, assign controls, and share safety plans with your team.
Start Free TrialHierarchy of Controls
The hierarchy of controls ranks protective measures from most to least effective. Apply controls from the top of the hierarchy first.
Elimination
Design equipment and processes to eliminate the need for workers to enter hazardous energy zones during maintenance.
- Specify equipment with built-in cleanout ports, external adjustment points, and self-clearing mechanisms that eliminate the need to open guards or enter pinch zones
- Design processes with zero-energy-state maintenance capabilities where equipment can be fully serviced from outside the danger zone
- Use disposable or modular components that can be replaced without interacting with energized systems
Substitution
Replace high-energy or complex-energy equipment with simpler, lower-energy alternatives.
- Replace pneumatic and hydraulic systems with electric servo systems that have definitive zero-energy states and no stored energy in accumulators or cylinders
- Substitute gravity-discharge systems for pressurized conveyance where process allows
- Use modular plug-in equipment with cord-and-plug disconnect as the energy isolation method where applicable under the 1910.147 exception
Engineering Controls
Install hardware-based energy isolation devices, interlocks, and verification systems.
- Lockable disconnect switches, breakers, and valves at every energy isolation point — designed to accept a padlock in the off/closed position
- Trapped-key interlock systems that physically prevent equipment operation when a maintenance key is removed
- Bleed valves and vent ports on hydraulic, pneumatic, and steam systems to allow safe dissipation of stored energy
- Blanking and blinding flanges for positive isolation of piping systems carrying hazardous chemicals or pressurized fluids
- Mechanical blocking devices (blocks, pins, struts) to prevent movement of components under gravitational or spring-loaded energy
- Group lockout hasps and lockboxes that accommodate multiple personal locks for multi-employee servicing operations
Administrative Controls
Written procedures, training, and inspection programs that ensure consistent and correct LOTO application.
- Machine-specific written energy control procedures identifying all energy sources, isolation points, stored energy, and verification methods for each piece of equipment
- Authorized employee training: initial and refresher training on the purpose, recognition, and application of energy control procedures and devices
- Affected employee training: awareness training for operators and others who work in areas where LOTO is used but do not perform the lockout themselves
- Annual periodic inspections of each energy control procedure, conducted by an authorized employee other than the one using the procedure, to verify continued effectiveness
- Shift change and group lockout coordination procedures with orderly transfer of lockout devices between outgoing and incoming personnel
- Contractor coordination procedures ensuring that both host employer and contractor employees understand and follow LOTO requirements
- Pre-task verification: try-start procedure to confirm zero energy state before beginning work
PPE
Personal protective equipment for residual hazards that may remain even with proper LOTO in place.
- Voltage-rated insulating gloves and leather protectors for electrical work, even after lockout, as a defense-in-depth measure
- Arc-flash rated clothing when working near electrical equipment that has been locked out but could be subject to induced or residual voltage
- Face shield and safety glasses for stored energy release during bleed-down of hydraulic and pneumatic systems
- Chemical-resistant gloves and splash protection when opening piping systems that may contain residual process chemicals
Applicable OSHA Standards
Federal OSHA standards that address this hazard type, with enforcement data where available.
29 CFR 1910.147 — The Control of Hazardous Energy (Lockout/Tagout)
2,554 citations (FY 2024)
The primary LOTO standard for general industry. Requires employers to establish an energy control program with written machine-specific procedures, employee training (authorized, affected, and other), periodic inspections, and application of lockout/tagout devices to energy-isolating devices. Covers servicing and maintenance of machines and equipment where unexpected energization or release of stored energy could cause injury. Does not cover construction, agriculture, maritime, or oil and gas well drilling and servicing (which have separate requirements), nor does it apply to work on cord-and-plug connected equipment where the plug is under the exclusive control of the employee.
29 CFR 1910.333 — Selection and Use of Work Practices (Electrical)
432 citations (FY 2024)
Requires that live parts to which an employee may be exposed be de-energized before work begins, unless de-energizing introduces additional hazards or is infeasible. References 1910.147 for LOTO requirements on electrical equipment. Establishes the requirements for energized electrical work permits when live work is justified. Frequently cited alongside 1910.147 in electrical fatality investigations.
29 CFR 1910.212 — General Requirements for All Machines
1,644 citations (FY 2024)
Machine guarding and LOTO are companion requirements. When guards must be removed for maintenance, LOTO procedures must be applied. OSHA frequently cites both 1910.212 and 1910.147 in the same inspection when an employee was injured during maintenance on an unguarded machine that was not locked out.
29 CFR 1926.417 — Lockout and Tagging of Circuits (Construction)
67 citations (FY 2024)
The construction-specific LOTO standard for electrical circuits. Requires that controls be deactivated and circuits locked out or tagged before work begins. Less comprehensive than 1910.147 — it addresses electrical energy only and does not cover the full range of hazardous energy types (mechanical, hydraulic, pneumatic, thermal, chemical) encountered in construction maintenance activities.
Industries Most Affected
Manufacturing
The most heavily affected sector. Production lines, CNC machinery, conveyors, presses, packaging equipment, and robotic cells all require LOTO procedures. OSHA cites more LOTO violations in manufacturing than any other industry, and a large share of amputation and fatality investigations involve LOTO failures.
Utilities
Electrical generation, transmission, and distribution present extreme LOTO hazards. Line workers and plant electricians work on high-voltage systems where a failure to isolate and verify zero energy can result in electrocution or arc flash with fatal burns. Multi-source feeds and parallel generation add complexity to isolation procedures.
Oil and Gas
Refineries, petrochemical plants, and upstream production facilities have high-pressure piping, rotating equipment, and chemical process systems. Turnaround maintenance events involve hundreds of LOTO points and multi-craft coordination over extended periods. Process energy sources include thermal, chemical, and pressure energy in addition to electrical and mechanical.
Food Processing
Mixers, grinders, slicers, conveyors, and packaging lines require frequent cleaning and sanitation, which creates repeated LOTO exposure. Time pressure during production changeovers and washdowns has contributed to LOTO shortcuts. OSHA's amputation NEP has identified food processing as a high-priority target industry.
Construction
While 29 CFR 1910.147 technically applies to general industry, construction workers face hazardous energy from electrical panels, mechanical equipment, pressurized systems, and heavy machinery during installation, renovation, and commissioning. The construction electrical LOTO standard (1926.417) covers only electrical circuits, leaving gaps for other energy types.
Required Personal Protective Equipment
Frequently Asked Questions
What is lockout/tagout and why is it required?
Lockout/tagout is a set of safety procedures that ensure machines and equipment are properly shut down, isolated from all energy sources, and verified to be in a zero-energy state before employees perform servicing or maintenance. It is required under 29 CFR 1910.147 because unexpected machine startup or the release of stored energy during maintenance is a leading cause of workplace fatalities and amputations. OSHA estimates that LOTO compliance prevents approximately 120 deaths and 50,000 injuries per year.
What types of energy must be controlled under LOTO?
All forms of hazardous energy must be identified and controlled. This includes electrical energy (from power supply circuits, capacitors, batteries), mechanical energy (from flywheels, springs, rotating shafts, elevated components), hydraulic energy (from pressurized fluid in cylinders, accumulators, and lines), pneumatic energy (from compressed air or gas systems), chemical energy (from reactive chemicals or pressurized process streams in piping), thermal energy (from steam systems, heated surfaces, and cryogenic systems), and gravitational energy (from elevated machine components, suspended loads, or material in hoppers).
Does every machine need its own written LOTO procedure?
OSHA requires machine-specific written procedures for each machine or piece of equipment unless the machine has a single energy source that can be readily identified and isolated, has a single lockout point, is completely de-energized and deactivated during servicing, has no stored or residual energy, and a single lockout device will achieve a locked-out condition. If all of these conditions are met, employers may use a generic procedure. In practice, most industrial equipment has multiple energy sources or isolation points and requires a documented machine-specific procedure.
What is the difference between authorized and affected employees?
Authorized employees are those who actually apply lockout or tagout devices and perform the servicing or maintenance. They must receive detailed training on the recognition of applicable hazardous energy sources, the type and magnitude of energy in the workplace, and the methods and means necessary for energy isolation and control. Affected employees are those whose job requires them to operate or use equipment on which servicing is being performed under lockout, or who work in areas where LOTO is being used. Affected employees receive awareness-level training so they understand the purpose and use of energy control procedures and know not to attempt to restart or re-energize equipment that is locked out.
How often must LOTO procedures be inspected?
OSHA requires a periodic inspection of each energy control procedure at least annually. The inspection must be performed by an authorized employee other than the one using the procedure being inspected. For lockout procedures, the inspector must review each authorized employee's responsibilities under the procedure. For tagout procedures, the inspector must additionally review with each authorized and affected employee the limitations of tags. The inspection must be documented, including the machine or equipment being inspected, the date, the employees included, and the identity of the inspector.
What are the steps for a proper lockout/tagout procedure?
The standard LOTO sequence involves six steps. First, notify all affected employees that LOTO will be applied. Second, shut down the machine using the normal stopping procedure. Third, isolate all energy sources using energy-isolating devices such as breakers, disconnect switches, and valves. Fourth, apply lockout and tagout devices to each energy-isolating device. Fifth, dissipate or restrain all stored or residual energy — bleed hydraulic and pneumatic lines, discharge capacitors, block elevated components, and relieve spring tension. Sixth, verify zero energy state by attempting to start the machine and testing with appropriate instruments such as voltage testers. Only after verification is complete may servicing begin.