Lockout/Tagout (Control of Hazardous Energy)

OSHA, Your Rights, and the Employer's Duty

The Occupational Safety and Health Act of 1970 created OSHA to assure safe and healthful working conditions. Under the General Duty Clause (§5(a)(1)), every employer must furnish a workplace free from recognized hazards likely to cause death or serious harm, and under §5(b) employees must comply with the safety and health standards that apply to their own conduct. The General Duty Clause fills the gaps where no specific standard exists — for example, an employer who knows that an unguarded floor opening is likely to cause a fall has a duty to address it even without a citation-by-number.

You have the right to: training in a language and vocabulary you understand, information about the hazards you work with (container labels and Safety Data Sheets), access to your own exposure monitoring and medical records, and the ability to file a complaint or request an OSHA inspection. Critically, you can exercise these rights without retaliation — an employer may not fire, demote, or otherwise punish you for raising a safety concern. If you believe you were retaliated against, you can file a whistleblower complaint with OSHA, generally within 30 days.

Employers must record serious work-related injuries and illnesses on the OSHA 300 log (29 CFR 1904) and post the annual summary where workers can see it. They must also report any work-related fatality to OSHA within 8 hours, and any inpatient hospitalization, amputation, or loss of an eye within 24 hours. This program documents your training and completion as part of that broader safety and recordkeeping system.

Hazardous Energy & Why LOTO Exists

Servicing or maintaining machines exposes workers to the unexpected start-up of equipment or the release of stored energy. Hazardous energy comes in many forms: electrical (live circuits, capacitors), mechanical (springs, rotating flywheels, suspended loads), hydraulic and pneumatic (pressurized fluid and air), chemical (reactive process lines), thermal (steam, hot surfaces), and gravitational (a raised ram or elevated platform that can fall). Any of these can move, energize, or discharge without warning the moment a guard is removed or a part is freed.

Lockout/Tagout (LOTO) is the practice of controlling that energy so a machine cannot start, cycle, or release energy while someone is working on it. Consider a worker clearing a jam in a conveyor: if a coworker hits start, the unguarded drive can pull in a hand in an instant. Or a press held up only by hydraulic pressure — bleed the line without first blocking the ram, and gravity drops it. LOTO breaks that chain of events before the work begins.

When energy is not controlled, the results are crushing injuries, amputations, electrocution, and burns. These incidents are almost always preventable. The rest of this course builds the discipline that turns "I thought it was off" into a verified, locked, and proven safe state every single time.

The Energy Control Program & Roles

An employer must maintain a written energy control program built on three pillars: documented energy-control procedures for each machine, training so employees understand those procedures, and periodic inspections to confirm the procedures are still followed correctly. The written procedure spells out the specific steps, the energy sources, and the means of isolation for that piece of equipment — it is not left to memory or improvisation.

Roles matter. An AUTHORIZED employee is the person who performs the lockout and the actual servicing; they apply the locks and verify the zero-energy state. An AFFECTED employee operates the machine in normal production or works in the area; they must recognize when equipment is locked out and must never attempt to start it or remove someone else's lock. For example, a maintenance technician (authorized) locks out a packaging line, while the line operators (affected) are told it is down and stay clear of the controls.

The governing rule is simple and absolute: only the authorized employee who applied a lock removes it. A lock is a personal guarantee that its owner is clear of the hazard. Cutting off or bypassing another person's lock is permitted only under a strictly controlled, documented exception procedure with verification the worker is not present — never as a shortcut to keep production moving.

The Six Steps of Lockout

Lockout follows a fixed six-step sequence, performed in order: (1) Prepare — identify every energy source feeding the machine, including secondary and stored sources; (2) Shut down the machine using its normal stopping procedure; (3) Isolate energy at each source using disconnect switches, valves, and line breaks; (4) Apply your lock and tag to each isolation point so it cannot be re-energized; (5) Release or restrain stored and residual energy — bleed hydraulic and pneumatic lines, block or lower suspended parts, discharge capacitors, let hot surfaces cool; (6) Verify zero energy by attempting to start the machine with normal controls, confirming nothing moves, then returning the controls to the off position.

Skipping or reordering steps is where people get hurt. Isolating power but forgetting an accumulator still under pressure leaves a charged system; locking out the main disconnect but ignoring a gravity-loaded part leaves a falling hazard. A common example: a robotic cell drops to standby when stopped, but a pneumatic clamp stays pressurized — step 5 means bleeding that air before reaching in.

Step 6, the "try" step, is the moment the abstract becomes proven. Pressing start and seeing the machine stay dead is the worker's direct evidence that isolation worked. Only after a verified zero-energy state may servicing begin — never before, and never on the assumption that the disconnect "should" have done its job.

Personal Protective Equipment (PPE) Fundamentals

Under 29 CFR 1910.132, employers must assess the workplace to determine what PPE is needed, provide it (in most cases at no cost to the worker), and train each worker on what PPE is necessary, when and how to wear it, its limitations, and proper care, maintenance, useful life, and disposal. The hazard assessment must be documented through a written certification identifying the workplace evaluated and the person who performed it.

Categories track the body part or exposure they address: eye and face protection (1910.133), head protection (1910.135), hearing protection, respiratory protection (1910.134), hand protection with the glove material matched to the chemical or mechanical hazard (1910.138), foot protection (1910.136), and full-body protection. The wrong choice creates a false sense of safety — a nitrile glove may resist one chemical while dissolving in another, and a respirator that does not seal to the face offers little protection.

PPE only works when it fits and is worn correctly for the specific hazard. Inspect PPE before each use and remove damaged equipment from service rather than risking a failure mid-task. NOTE: hands-on fit and skills components (for example, respirator fit testing under 1910.134) are completed in person with your employer; this module covers the knowledge foundation, not the physical fit test.

Group Lockout & Restoring Power

When a crew services equipment together, group lockout ensures every worker is independently protected. The primary isolation locks are applied, and the keys are placed in a group lockbox; each crew member then applies a personal lock to that box. Power cannot be restored until every individual removes their own lock — so no single person, and no supervisor, can re-energize the machine while a coworker is still inside it. Each worker's lock is their own guarantee, exactly as in single-person lockout.

Restoring energy is its own deliberate procedure, not an afterthought. Before removing locks, the authorized employee verifies the area is clear of personnel, all tools and parts have been removed, machine guards are reinstalled, and affected employees are notified that the equipment is about to be re-energized. Only when everyone is accounted for and the equipment is in a safe condition to operate are the locks removed and power restored, followed by a normal start.

Shift changes are a known failure point because protection can be dropped in the handoff. The procedure must transfer lockout responsibility continuously — for example, the oncoming authorized employee applies their lock before the offgoing employee removes theirs, so the equipment is never left locked out by someone who has gone home, and never left unprotected during the exchange.

Final Assessment

This comprehensive assessment confirms you can apply the control-of-hazardous-energy concepts from every prior module: recognizing energy types, following the written energy-control program, executing the six-step lockout sequence, and managing group lockout and restoration safely.

Each question is answerable from the course content. Read carefully and choose the response that reflects correct LOTO practice rather than the fastest production shortcut. A passing score plus hands-on verification with your trainer-of-record is required for completion.

Treat this as a final rehearsal of the discipline you will carry to the floor: isolate, release stored energy, verify zero, and never trust an uncontrolled machine.

Answer key