Blog Series: Isolation of Hazardous Energy (Lockout/Tagout)

Part3: The Annual Review—Periodic Inspection and Certification of Hazardous Energy Control

Lockout/tagout programs can look solid on paper and still fail in the field. That’s why many regulations and standards require a periodic inspection—commonly an annual review—of energy control procedures. The purpose is simple: confirm that written procedures are accurate, that employees follow them, and that any gaps are corrected before someone gets hurt.

What the annual review (periodic inspection) should cover

• Procedure accuracy: isolation points match the equipment as-installed (including modifications, retrofits, and new energy sources).
• Employee knowledge: authorized employees can explain and demonstrate the steps; affected employees understand what LOTO means for their work area.
• Device adequacy: correct lockout devices are available, used correctly, and in good condition.
• Verification method: the “try/test” step is performed and documented as required by your process.
• Group LOTO and shift change: continuity controls work in practice, not just in policy.
• Contractor coordination: responsibilities and boundaries are clear when outside workers are involved.

Who performs the inspection—and how to run it

Periodic inspections are most effective when they include real-world observation. A competent inspector (someone who understands the equipment and the energy control process) typically:

• Reviews the written procedure for the specific machine or system.
• Observes an authorized employee applying the procedure (or walks through the steps in the field when live work isn’t feasible).
• Interviews the employees involved to confirm understanding—especially around stored energy and verification.
• Documents findings and assigns corrective actions with owners and due dates.

Many organizations inspect each procedure at least annually and also prioritize higher-risk equipment or procedures that have changed.

The “certification” record: what must be documented

The annual review isn’t complete without documentation. Your certification record should clearly show that an inspection occurred and what was inspected. While requirements differ by jurisdiction, strong records commonly include:

• Machine/equipment identification (asset number, location, description).
• Date of inspection.
• Names of employees involved (the inspector and the authorized employee(s) observed/interviewed).
• Procedure identifier/revision (so you know which version was reviewed).
• Findings and corrective actions (what was wrong, what was changed, and by when).
• Sign-off confirming the inspection was performed and communicated to affected personnel as required by your process.

Common annual-review findings (and how to fix them)

• Procedures drift from reality: equipment was modified, but the isolation diagram/steps weren’t updated. Fix: update the procedure immediately and trigger retraining for impacted employees.
• Verification is inconsistent: employees isolate but don’t “try/test.” Fix: clarify expectations and add a verification checkpoint to the work order or permit process.
• Stored energy steps are vague: “release pressure” without bleed points or targets. Fix: add specific actions (valves/gauges/locks) and acceptance criteria (e.g., gauge at zero).
• Group LOTO gaps: lock box use is unclear during shift change. Fix: document a handoff method and audit it during real shift transitions.
• Device shortages: people improvise because the right device isn’t available. Fix: stock standard device kits by area and replace damaged equipment promptly.

Takeaway

The annual review isn’t just a compliance checkbox—it’s your early-warning system. When you consistently inspect procedures, document what you found, and correct issues quickly, you reduce the chance that the next maintenance job becomes a life-changing event. If you haven’t scheduled your periodic inspections yet, set dates now, prioritize higher-risk equipment first, and make sure your certification records are easy to find and complete.

Cal/OSHA reference: Title 8, CCR §3314 requires a periodic inspection of energy control procedures at least annually, along with documentation (“certification”) identifying the procedure inspected, the inspection date, the employees included, and the person performing the inspection.

Blog Series: Isolation of Hazardous Energy (Lockout/Tagout)

Part 2: A Practical Step-by-Step Lockout/Tagout Process (From Shutdown to Verification)

A good LOTO process is consistent, visible, and verifiable. The exact steps and devices depend on the equipment, but the flow below captures the essentials you want every authorized employee to execute the same way—every time.

Step 1: Prepare and plan the shutdown

• Define the work: What servicing/maintenance will occur? What parts of the machine will be accessed?
• Identify all energy sources: electrical, hydraulic, pneumatic, mechanical, thermal, chemical, gravity, and stored energy.
• Locate isolation points: disconnects, breakers, valves, blank flanges, blocks, pins, chains, bleed points, etc.
• Check for special conditions: multiple feeds, backup generators/UPS, stored pressure, elevated components, remote controls, automation sequences.
• Notify affected employees: communicate equipment status, expected downtime, and boundaries.

Step 2: Shut down the equipment using normal controls

Use the normal stopping sequence (stop button, HMI stop command, normal valve closure sequence, etc.) before isolating energy. This reduces unexpected movement and helps the equipment reach a stable condition.

Step 3: Isolate the energy sources (not just the controls)

“Off” is not the same as “isolated.” Isolation means physically preventing energy from reaching the equipment.

• Electrical: open disconnects/breakers, rack out where applicable, or otherwise isolate per procedure.
• Fluid power: close valves, apply blinds/blocks, isolate pumps/compressors, and use required line breaks only when authorized.
• Mechanical/gravity: block, pin, chain, or otherwise secure moving parts and raised loads.

Step 4: Apply lockout/tagout devices

• Use a personal lock for each authorized worker, unless your process uses a group lock box with equivalent protection.
• Tag for identification and warning (who applied it, date/time, contact information, reason), but remember: a tag is not a physical restraint.
• For group LOTO: use a lock box or multi-hasp arrangement so each person controls their own exposure.
• For shift changes: use a documented continuity process so protection is never reduced during handoff.

Step 5: Release, restrain, or otherwise control stored energy

This is where many lockouts fail. Even with isolation points secured, the machine may still have energy in the system.

• Bleed down air lines and verify pressure is at zero.
• Discharge capacitors and confirm with appropriate test methods.
• Block or pin components that could fall or move due to gravity.
• Relieve hydraulic pressure and secure actuators against drift.
• Allow hot surfaces to cool (or protect against burns) if cooling is part of the safe state.

Step 6: Verify isolation (try/test)

Verification is the proof step. Use the method that matches the energy type and equipment design:

• Try: attempt to start the machine using normal controls to confirm it will not operate (then return controls to the safe/off position).
• Test: use appropriate instruments (for example, testing for absence of voltage) when required by the hazard.
• Observe: check gauges/indicators and physically confirm valves are in the required position.

Rule of thumb: If you can’t explain how you know the equipment is at “zero energy,” you’re not done yet.

Step 7: Perform the work—maintain control

• Maintain boundaries: keep guards, covers, and access points controlled as planned.
• Manage scope changes: if the job expands to new parts of the system, pause and update the isolation plan/procedure.
• Temporary energization/testing: if equipment must be energized for testing, follow a controlled “remove locks, test, reapply locks” sequence with clear communication and everyone in a safe position.

Step 8: Return to service (remove devices in a controlled way)

• Inspect the area: confirm tools are removed, guards are reinstalled, and components are intact.
• Account for people: confirm everyone is clear before re-energizing.
• Remove lockout/tagout devices: typically by the person who applied them, per your program rules.
• Notify affected employees: communicate that equipment is going back into service.

Takeaway

Consistency is the point: plan it, isolate it, lock it, control stored energy, and verify it—every time. In the final post, we’ll cover the required annual review/periodic inspection and the documentation (“certification”) that proves your program is working and your procedures are accurate.

Cal/OSHA reference: Title 8, CCR §3314 includes requirements for energy control procedures and their use (including shutdown, isolation, lockout/tagout application, stored energy control, and verification) before servicing or maintenance is performed.

Blog Series: Isolation of Hazardous Energy (Lockout/Tagout)

Part 1: Hazardous Energy Isolation —What It Is and Why It Matters

Hazardous energy isolation—often referred to as Lockout/Tagout (LOTO)—is the process of preventing the unexpected start-up of equipment or the release of stored energy while people are performing servicing or maintenance. Done well, it protects employees, contractors, and visitors from some of the most severe workplace injuries: amputations, crushing injuries, electrocution, burns, and fatalities.

What counts as “hazardous energy”?

Hazardous energy is more than electricity. Any source that can move machinery, release pressure, create heat, or energize a system can injure someone when it’s uncontrolled. Common types include:

• Electrical: live circuits, control panels, capacitors, battery systems.
• Mechanical: rotating shafts, belts, blades, flywheels, springs.
• Hydraulic: pressurized fluid in lines, cylinders, accumulators.
• Pneumatic: compressed air in piping, receivers, actuators.
• Thermal: steam, hot surfaces, heated fluids, cryogenic systems.
• Chemical: reactive/flammable/toxic chemicals under pressure or with potential for release.
• Gravity: raised loads, counterweights, elevated machine parts.
• Stored/residual energy: pressure trapped behind valves, tensioned springs, inertia, residual heat.

Where injuries happen: the predictable failure points

Most hazardous-energy incidents don’t come from “mystery” hazards—they come from steps that were skipped, assumed, or improvised under time pressure. Watch for these common scenarios:

• Only the power switch was turned off (control circuit) but the energy source wasn’t isolated.
• Stored energy wasn’t relieved (pressure, gravity, spring tension, residual heat).
• Multiple energy sources existed but only one was controlled.
• Someone else restarted equipment because the system wasn’t clearly locked out/communicated.
• Interlocks/guards were bypassed to “test” or “jog” equipment.
• Contractor work proceeded without alignment on the site’s isolation process.

The building blocks of an effective energy control program

While regulations and standards vary by jurisdiction and industry, strong programs usually share the same foundation:

• Clear roles: who applies locks, who is affected by the work, and who verifies the system is safe.
• Equipment-specific procedures: written steps that match the actual machine, not a generic template.
• Proper lockout/tagout devices: locks, tags, hasps, group lock boxes, valve covers, breaker lockouts, etc.
• Training and competency: initial training plus refreshers when tasks, equipment, or risks change.
• Verification: a consistent method to confirm isolation and a true “zero energy state.”
• Periodic inspection (annual review): a required check that procedures are accurate and being followed, with documentation/certification.

Takeaway

Hazardous energy isolation is less about paperwork and more about controlling real, powerful forces in a repeatable way. In the next post, we’ll walk through a practical, step-by-step lockout/tagout flow you can use to plan and execute servicing work safely—especially when multiple people or shifts are involved.

Cal/OSHA reference: California Title 8, CCR §3314 (The Control of Hazardous Energy) establishes the requirements for controlling hazardous energy during cleaning, repairing, servicing, setting-up, and adjusting operations.