LOTO (Lockout/Tagout)

What Is LOTO?

LOTO (Lockout/Tagout) is a critical safety procedure that involves isolating and locking out hazardous energy sources before workers perform maintenance, repair, or service on machinery or equipment. The procedure prevents the unexpected startup or release of stored energy (electrical, hydraulic, pneumatic, thermal, chemical, or mechanical) that could cause serious injury or death.

Why LOTO Exists: Machinery-related incidents are among the most severe workplace injuries. A worker performing maintenance on a conveyor system that suddenly starts can be crushed, trapped, or cut. A hydraulic press that unexpectedly activates can crush a hand. An electrical system that is energized during maintenance can cause electrocution. These incidents often result in amputation, permanent disability, or fatality. LOTO prevents these injuries by ensuring energy sources are isolated, locked, and verified to be de-energized before work begins.

LOTO incidents represent a disproportionate share of severe workplace injuries: approximately 10% of workplace fatalities involve machinery and energy isolation failures, despite machinery work representing a much smaller portion of overall employment. This high severity-to-frequency ratio is why OSHA considers LOTO a critical regulatory requirement.

Energy Sources Covered by LOTO:

• Electrical: Main breakers, disconnect switches, control circuit switches
• Hydraulic/Pneumatic: Pressure relief valves, isolation ball valves
• Thermal: Steam isolation valves, thermal energy vents
• Mechanical: Springs, flywheels, rotating shafts
• Chemical: Chemical reactors, pressurized containers
• Gravitational: Suspended loads, counterweights

Regulatory Standard / Framework:

• OSHA 29 CFR 1910.147: The Control of Hazardous Energy (Lockout/Tagout) standard
• ANSI Z535: Standard for Safety Signs and Labels (tagout label standards)
• ANSI Z1535: Standard for the Lockout and Tagout of Energy Sources
• EU Machinery Directive 2006/42/EC: Requires machinery to be designed to enable de-energization and energy isolation
• ISO 12100: Safety of Machinery-General Principles for Design

Applicable Industries: LOTO is required in construction, manufacturing, maintenance operations, dredging vessels, oil and gas, chemical processing, utilities, and any facility with machinery or equipment with hazardous energy. Even construction sites with temporary equipment (generators, compressors, power tools) must implement LOTO if the equipment poses hazard potential.

How LOTO Works

LOTO follows a structured, step-by-step process designed to ensure energy is isolated, verified, and remains isolated until work is complete.

1. Preparation & Planning: Before maintenance begins, the supervisor and authorized employee identify all energy sources affecting the equipment. Document the location of electrical breakers, hydraulic isolation valves, air supply disconnects, gas supply valves, and any other energy sources. Create a LOTO energy isolation map for the equipment showing each isolation point and its location.
2. Notification: Notify all workers in the area that LOTO is about to be applied. No other workers should operate or attempt to start the equipment. If multiple workers are performing maintenance on the same equipment, each applies their own personal padlock (grouped lockout), so equipment cannot be re-energized until all locks are removed.
3. Shut Down Equipment: Follow the normal operating procedure to shut down the equipment. Don't force it off or bypass normal operating sequences.
4. Isolate Energy Sources: At each isolation point (electrical breaker, valve, etc.), perform the following:

• Activate the isolation device (flip the breaker switch to OFF, turn the valve to isolate, etc.)
• Apply a padlock directly on the isolation device (a lockout hasp if the device doesn't have built-in padlock provision)
• Attach a tagout label to the padlock and/or isolation device with your name, date, and reason for LOTO

5. Dissipate Stored Energy: Some equipment stores residual energy after power is cut (compressed springs, charged capacitors, pressurized systems). Manually dissipate this energy:

• Open pressure relief valves to vent pressure
• Ground charged capacitors
• Allow rotating equipment to come to a complete stop
• Allow thermal energy to dissipate

6. Verification / "Assumption of Zero Energy": This is the critical step. The authorized employee attempts to start the equipment using normal operating controls to confirm it remains de-energized. Example: For an electrical motor, flip the start button-the motor should not start. For hydraulic equipment, attempt to operate the control lever-the cylinder should not move. This verification confirms that isolation was successful and no unexpected energy remains.
7. Perform Maintenance: With energy isolated and verified, the maintenance worker performs repairs or service.
8. Restore Energy: When maintenance is complete, the authorized employee:

• Removes personal locks and tags
• Verifies the equipment is in safe condition for restart (all tools removed, guards reinstalled, etc.)
• Notifies all workers that LOTO is being removed
• Removes locks and tags from isolation points
• Re-energizes the equipment following normal startup procedures

9. Record & Audit: Document the LOTO event-who applied locks, what equipment, when, which energy sources, and when locks were removed. Maintain records for audit purposes and to identify trends (e.g., "Motor on Conveyor Line 3 requires maintenance every 3 months; this suggests a control problem").

Real-World Example: Dredging Vessel

A trailing suction hopper dredger (TSHD) requires maintenance on the discharge pump. The pump is powered by diesel engine and hydraulic system. LOTO procedure:

1. Shut down: Stop the pump via normal controls; engine idles at low RPM
2. Isolate:

• Electrical: Flip the main engine disconnect switch to OFF; apply padlock
• Hydraulic: Close the isolation ball valve on the pump inlet; apply padlock
• Diesel fuel: Close the fuel isolation valve; apply padlock

3. Dissipate: Crack open the hydraulic pressure relief valve to vent residual system pressure (approximately 50 bar); allow discharge
4. Verify: Attempt to restart the engine via the engine start button-it should not start. Attempt to activate the pump via the hydraulic control-it should not move
5. Maintain: Replace pump seals
6. Restore: Remove locks/tags; verify pump operates normally at idle; notify crew pump is back in service

Why LOTO Matters: Operational impact

For HSSE Teams

LOTO is one of the highest-impact, lowest-cost safety controls. Enforcing LOTO discipline directly prevents the most severe injuries (amputations, electrocution, crushing injuries). HSSE teams must ensure every maintenance worker understands LOTO procedure, can identify all energy sources on equipment they maintain, and is trained and authorized to apply LOTO. Regular audits of LOTO compliance (unannounced inspections of maintenance areas to verify locks are in place) are essential. Additionally, HSSE must investigate any near-miss where equipment unexpectedly activated or any bypass of LOTO procedure, as these indicate control failure.

For IT & CIOs

LOTO compliance requires documented equipment energy isolation maps and maintenance work orders that flag LOTO requirements before work begins. Modern maintenance management systems (SAP, Oracle, Maximo) should include LOTO checklist workflows: before a maintenance work order can be assigned, the system prompts the maintenance planner to confirm LOTO requirements and attach the energy isolation map. Digital records of LOTO application (who locked, when, which equipment, which isolation points) should be captured and audited. Some advanced organizations use IoT (Internet of Things) devices that detect when locks are applied to electrical breakers or valves, feeding real-time lock status into the maintenance system.

Industry context

According to OSHA data analysis, lockout/tagout violations account for approximately 5,600 serious injuries and approximately 100 fatalities annually across US private industry. OSHA estimates that approximately 35% of severe machinery-related injuries could be prevented by proper LOTO implementation. CDC data indicates that workers with proper LOTO training and verified compliance show injury rates 90% lower than workers in facilities with poor LOTO culture. A single severe machinery injury (amputation, permanent disability) costs organizations $30,000-$150,000+ in workers' compensation, medical costs, and productivity loss-far exceeding the minimal cost of LOTO equipment and training.

Implementing & Monitoring LOTO: From Manual to Digital

Most organizations begin with basic LOTO: supervisors verbally instruct maintenance workers to "cut the power and verify it's off" before working on equipment. This informal approach fails because procedures are inconsistent, energy sources may be missed, and verification may be inadequate (a worker might skip verification if under time pressure or if equipment has failed to start before).

Formalization requires creating LOTO energy isolation maps for each piece of equipment: documenting which isolation points (breakers, valves, etc.) must be locked, their physical locations, and any special energy dissipation requirements. These maps should be posted at or near the equipment, and referenced in every maintenance work order.

Digital advancement comes through integration with maintenance management systems. A maintenance work order for "Motor Bearing Replacement on Conveyor Line 3" automatically includes: (1) the LOTO energy isolation map for that motor, (2) step-by-step procedure, (3) photo of correct lock placement, and (4) digital checklist to be completed before work begins (✓ Electrical isolated and locked; ✓ Hydraulic system depressurized; ✓ Equipment start button tested-no motion). The mechanic cannot mark the job as started until the LOTO checklist is completed.

For organizations with multiple sites, centralized LOTO documentation (cloud-based energy isolation maps, training records, incident tracking) ensures consistency and enables identification of patterns (e.g., "Motor brand X has unclear isolation points-risk of misidentification; all Motor brand X units require additional label markups").

Best Practices for LOTO

• Authorized Employee Certification & Recertification: Designate specific individuals as "authorized employees" trained to apply LOTO. Require annual certification/recertification with practical demonstration: the trainee must correctly identify all energy sources on assigned equipment, apply locks correctly, dissipate residual energy, and perform proper verification. Documentation should be maintained showing each authorized employee's training date and expiration. Uncertified workers should never apply LOTO without direct supervision.
• Energy Isolation Mapping & Equipment Labeling: Create visual energy isolation maps for every piece of equipment that requires LOTO. Maps should show photographs or diagrams of each isolation point with clear identification: "Main Electrical Breaker - Panel 2, Position A3" with a photo showing exactly where to lock. Laminated maps should be posted at the equipment. Additionally, physically mark isolation devices with colored tags or labels identifying the device type and energy source (e.g., "ELECTRICAL ISOLATE" in red, "HYDRAULIC ISOLATE" in blue). This prevents misidentification.
• Unannounced LOTO Audits & Enforcement: Conduct unannounced audits of maintenance areas to verify LOTO is applied correctly. Example audit checklist: (1) Are locks applied to all isolation points shown on the equipment's energy isolation map? (2) Are tags filled out with employee name, date, and purpose? (3) Is the equipment verification step (attempting to start) documented? (4) Are personal locks being used (one per authorized employee)? Non-compliance should trigger immediate work stoppage, investigation, and retraining. Severe bypasses (e.g., removing someone else's lock without authorization) should result in disciplinary action up to termination.