What this is
What is an energy isolation permit?
What is an energy isolation permit?
Authorisation controlling the isolation of energy sources for servicing or maintenance, recording every source identified, the isolation applied and verified, how stored and residual energy was relieved, and who is working under the isolation.
Why is group lockout treated separately?
Because a single lock applied by a lead person protects the group only if the arrangement guarantees each individual's personal protection. Under 1910.147(f)(3), group lockout must afford each authorised employee a level of protection equivalent to a personal lockout device, which usually means a group lock box with each person's own lock on it.
Scope
When is an energy isolation permit required?
This authorises isolation for a specific job. Machine procedures and training sit separately.
Use this template when
- Servicing or maintenance where unexpected energisation or release of stored energy could cause injury
- Work requiring guard removal or bypass of a safety device
- Group work where several people or trades work under one isolation
- Work spanning shifts, where protection has to persist across handover
- Contractor work performed under site isolation arrangements
Do not use it for
- Machine-specific energy control procedures, which state how each machine is isolated
- Line breaking, which verifies the condition at the point of opening
- The electrical work permit, where work will be performed energized
- Energy control training records under 1910.147(c)(7)
- The periodic inspection under 1910.147(c)(6), which certifies the procedures are followed
Compliance mapping
Which OSHA 1910.147 requirements does this satisfy?
Energy control is prescriptively regulated with specific requirements for verification, stored energy and group work.
| Clause | Requirement | Where it lands |
|---|---|---|
| 1910.147(c)(4) | Machine-specific procedures where more than one energy source exists or generic control is inadequate | Gate 1 Energy sources |
| 1910.147(d)(2) | Orderly shutdown to avoid additional hazard from the shutdown itself | Gate 1 Energy sources |
| 1910.147(d)(4) | Lockout devices applied by authorised employees, holding the isolating device in the safe position | Gate 2 Lock and verify |
| 1910.147(d)(5) | Stored or residual energy relieved, disconnected, restrained or otherwise rendered safe | Gate 2 Lock and verify |
| 1910.147(d)(6) | Verification that isolation and de-energisation have been accomplished before work begins | Gate 2 Lock and verify |
| 1910.147(f)(3) | Group lockout affording each authorised employee protection equivalent to a personal lockout device | Gate 3 Group control |
| 1910.147(f)(4) | Shift or personnel changes with continuity of lockout protection | Workers under this isolation |
| 1910.147(e) | Release sequence: equipment check, personnel clear, devices removed by those who applied them | Closure |
What it does not cover
- Machine-specific energy control procedures, stating how each machine is isolated.
- Line breaking, verifying the condition at the point of opening.
- The electrical work permit, where work will be performed energized.
- Energy control training records under 1910.147(c)(7).
- The periodic inspection, certifying that procedures are followed.
How to complete it
How to complete an energy isolation permit, step by step
Find every source, verify rather than assume, and make group protection individual.
Electrical supplies including secondary feeds and control circuits, hydraulic and pneumatic pressure, mechanical motion, thermal, chemical, gravitational, and energy stored in springs, capacitors, accumulators and raised loads. The machine-specific procedure should list them, and where it does not, that is a finding rather than a reason to proceed from memory.
Press start, operate the control, test for absence of voltage where electrical, confirm gauges read zero, and check that gravitational and spring energy is restrained. Then return controls to off. This is a required step and it is what finds the wrong isolator and the supply nobody documented.
A group lock box with each person's personal lock on it means no one source can be re-energised while any individual's lock remains. A single lead lock, without an equivalent mechanism, protects the lead person and gives everybody else a procedure. The requirement is protection equivalent to a personal lockout device for each authorised employee.
Handover is where group arrangements fail: the outgoing lead removes their lock, the incoming lead applies theirs, and there is a moment between. The procedure needs to specify how protection persists without interruption, and it needs to work at three in the morning with a different set of people.
What auditors find
Most common energy isolation permit findings
Isolation findings concentrate on verification and on group arrangements.
| Finding | Clause | What fixes it |
|---|---|---|
| Isolation applied but not verified before work began. | 1910.147(d)(6) | Attempt to operate; verification is the step that finds the wrong isolator. |
| Stored and residual energy not relieved or restrained. | 1910.147(d)(5) | Springs, accumulators, capacitors and raised loads all retain energy after isolation. |
| Group lockout by a single lead lock with no individual protection. | 1910.147(f)(3) | Each person requires protection equivalent to a personal lockout device. |
| Secondary supplies or control circuits not identified. | 1910.147(c)(4) | Machine-specific procedures should list every source; memory is not a source list. |
| No continuity of protection across shift change. | 1910.147(f)(4) | Handover is where group arrangements break; specify how protection persists. |
| Controls not returned to the off position after verification. | 1910.147(d)(6) | Otherwise the equipment starts when isolation is removed. |
| Lockout device removed by someone other than the person who applied it. | 1910.147(e)(3) | Removal by the applier, with a specific documented exception procedure only. |
| Contractors working under site isolation without information exchange. | 1910.147(f)(2) | Exchange in both directions before work begins. |
| Tagout used where lockout is achievable. | 1910.147(c)(3) | Tagout requires full employee protection and additional measures; lockout is preferred. |
| Periodic inspection reviewing paperwork rather than observing an isolation. | 1910.147(c)(6) | Watch it performed; that is what the inspection is for. |
Case in point
Case in point: the second supply
A conveyor drive was isolated at its local isolator, locked and tagged, and work began on the gearbox. The machine had a secondary supply feeding a small auxiliary drive on the same shaft assembly, installed during a modification some years earlier and fed from a different panel.
The machine-specific procedure listed one energy source, because it had been written before the modification and never revised. The technician followed it correctly.
Verification would have found this. Attempting to operate the equipment after isolation would have shown that part of the assembly still moved, which is precisely what that step exists to reveal. It was not performed, because the isolator was locked and everything looked right.
The template
The template, field by field
The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.
9 sections
- Reference
- SAF-050
- Archetype
- Permit
- Record ID
- PTW-2026-000
- Scoring
- Go or no go
- Direction
- n/a
- Singleton
- No
- Basis
- OSHA 1910.147, CSA Z460
- Links
- Links Asset, Energy Control Procedure
- Tags
- Permit, LOTO, Energy
- Sections
- 9
- Fields
- 76
- Follow up fields
- 15
- Repeating sections
- 1
- Links out
- 11
Permit
9 fieldsPermit ID*
Auto sequence. Format PTW-2026-00000.
The record's own ID. Other templates point at this value.
Status*
Drives who this goes to next.
- Planned2 pts
- In progress2 pts
- Complete3 pts
- Deferred0 pts
- Open0 pts
- Closed3 pts
- Overdue0 pts
Valid From*
Valid To*
One shift maximum. A new permit is raised for the next shift.
Before You Start
Verification is the step people skip. Try to start the machine. If it starts, the isolation failed and you have just learned that safely.
Site*
Site ID*
Format SITE-000.
Links to FDN-001 Site ID
Area*
The area within the site.
Exact Location
Drop a pin for anything hard to find.
The work
12 fieldsWork Description*
Work Order ID
Links to MNT-002 Work Order ID
Number Of Workers*
Asset
Asset ID
Format AST-0000.
Links to FDN-002 Asset ID
Risk Assessment
Risk ID
Format RSK-2026-00000.
Links to FDN-012 Risk ID
Contractor Involved*
Contractor
Vendor ID
Format VEN-0000.
Links to FDN-005 Vendor ID
Induction Verified
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Method Statement Received
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Gate 1 Energy sources
10 fieldsEnergy Control Procedure
Document ID
Format DOC-0000.
Links to FDN-008 Document ID
Machine Specific Procedure Exists*
Generic procedures do not satisfy the regulation and inspectors check for this.
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
All Energy Sources Identified*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Electrical Isolated*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Pneumatic Isolated*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Hydraulic Isolated*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Steam Or Thermal Isolated*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Ammonia Or Refrigerant Isolated*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Gravity Or Stored Energy Blocked*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Gate 2 Lock and verify
6 fieldsLocks Applied At Every Isolation Point*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Tags Applied And Legible*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Stored Energy Released Or Restrained*
- Yes3 pts
- Not applicable3 pts
- No0 pts
Try Test Performed*
Attempt a normal start. It must not run.
- Yes3 pts
- No0 pts
Zero Energy Verified By Measurement*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Verification Record ID
Links to MNT-057 Verification ID
Gate 3 Group control
4 fieldsGroup Lockout Required*
More than one person working under one isolation.
Lockout Coordinator
Group Lockout Record ID
Links to MNT-058 Record ID
Lock Box In Use
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Workers under this isolation
Repeats5 fieldsWorker*
Person ID*
Format PER-0000.
Links to FDN-003 Person ID
Personal Lock Applied*
- Yes3 pts
- No0 pts
Lock Number
Lock Removed
Food safety controls
7 fieldsWork In Or Above A Food Area*
Meat and dairy areas need protection before, during and after the work.
Product Removed Or Covered
- Yes3 pts
- Partly1 pt
- No0 pts
Area Screened Off
- Yes3 pts
- Partly1 pt
- No0 pts
Tool And Part Accountability Agreed
Every tool and fastener taken in must be accounted for before release.
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Food Grade Materials Only
- Yes3 pts
- No0 pts
Post Work Sanitation Required
Sanitation Record ID
Links to QUA-030 Inspection ID
Authorisation
11 fieldsNo Gate, No Start
Every gate above must pass before work begins. There is no partial permit. If anything is unresolved, the permit is not issued.
All Gates Passed*
- Yes2 pts
- No, entry refused0 pts
Reason Not Issued
Issued By*
Issuer Authorised For This Permit*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Issuer Signature*
Issue Time*
Accepted By*
Acceptor Signature*
Toolbox Talk Held With Crew*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Talk Record ID
Links to TRN-009 Talk ID
Closure
12 fieldsWork Complete*
- Yes3 pts
- No0 pts
Work Suspended
All Persons Accounted For*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Tools And Equipment Removed*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Area Left Safe*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Guards And Controls Restored*
- Yes3 pts
- No0 pts
Every Personal Lock Removed By Its Owner*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Machine Restarted And Confirmed Normal*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Permit Cancelled Time*
Cancelled By*
Closure Signature*
Area Owner Signature*
SAF-050 · record IDs look like PTW-2026-000 · Links Asset, Energy Control Procedure
Open in KnowellaRun it with agents
From a document you fill in to a programme that runs itself
The permit controls isolation for a job. What fails is verification nobody performed and a group lock protecting one person.
Requires verification as a gate before work begins, and holds group lock box arrangements so each worker's protection is individual.
Keeps machine-specific source lists current through modification, which is where secondary supplies enter unrecorded.
Records authorised, affected and other employee training, and fires retraining on procedure and machine changes.
Tracks isolations spanning shifts and flags handover points where continuity of protection is at risk.
This template lives in KnowSafe — safety and compliance. Incidents, hazards, permits, inspections and the critical controls behind them.
Meet KnowSafe→Glossary
Energy Isolation Permit definitions and key terms
- Energy isolating device
- A mechanical device that physically prevents transmission or release of energy, such as a breaker, valve or disconnect.
- Verification
- Confirming that isolation and de-energisation have been accomplished, typically by attempting to operate the equipment.
- Stored energy
- Energy remaining after isolation, in springs, capacitors, accumulators, raised loads, pressure or heat.
- Group lockout
- An arrangement for multiple workers, requiring each to have protection equivalent to a personal lockout device.
- Group lock box
- A box holding the keys to the isolation locks, secured by each worker's personal lock.
- Authorised employee
- A person who locks out or tags out equipment to perform servicing or maintenance.
- Continuity of protection
- Maintaining lockout across shift and personnel changes without any interval of unprotected exposure.
- Machine-specific procedure
- Documented energy control steps for a particular machine, required where multiple sources exist.
FAQ
Frequently asked questions about energy isolation permit
Why is verification so important?+
Because it is the only step that tests the actual state rather than the documented one. Every other control depends on the source list being complete, and source lists go out of date whenever a machine is modified. Attempting to operate the equipment finds the wrong isolator, the second supply nobody documented, the valve that has not seated and the capacitor still holding charge.
What does group lockout require?+
That each authorised employee has protection equivalent to a personal lockout device. In practice that means a group lock box: the isolation keys go inside, and every person working applies their own lock to the box. A single lead lock, without such a mechanism, protects the lead person and gives everyone else a procedure to rely on.
What about shift changes?+
Continuity of protection is required, and handover is where group arrangements typically fail. The outgoing lead removes their lock and the incoming lead applies theirs, leaving a moment where protection depends on nobody starting anything. The procedure has to specify how protection persists without interruption, and it has to work with a different set of people at night.
What is most often missed in the source list?+
Stored energy and secondary supplies. Springs, accumulators, capacitors, raised loads, thermal energy and residual pressure all persist after the main isolation. Secondary supplies and control circuits added during modifications are frequently absent from procedures written before the modification, and the person isolating cannot isolate a source the procedure does not mention.
Is tagout acceptable instead of lockout?+
Only where an energy isolating device is not capable of being locked out, or where the tagout programme provides full employee protection with additional measures. Lockout is the default because a tag is a warning device with no physical restraint, and where tagout is used the training must cover that limitation explicitly.
Keep going
Related templates and programmes
Industries this is written for
Programmes this belongs to
Used together in Permit to Work
Contractor Permit Compliance Check
Checks that a contractor working under permit is doing what the permit says, at the work point
Hot Work Permit
Controls welding, cutting, grinding and any work that makes sparks or heat
Confined Space Entry Permit
Controls entry into tanks, pits, silos and other confined spaces
Working at Height Permit
Controls work above the height set by local rules where fall protection is needed
Excavation Permit
Controls digging and trenching, including checks for buried services
Electrical Work Permit
Controls work on or near live electrical equipment where it cannot be de-energised
More in Permits
Hot Work Permit
Controls welding, cutting, grinding and any work that makes sparks or heat
Confined Space Entry Permit
Controls entry into tanks, pits, silos and other confined spaces
Working at Height Permit
Controls work above the height set by local rules where fall protection is needed
Excavation Permit
Controls digging and trenching, including checks for buried services
Electrical Work Permit
Controls work on or near live electrical equipment where it cannot be de-energised
Line Breaking Permit
Controls opening pipework that has held hazardous liquid, gas or steam
Written and reviewed by
Siddarth Singh
Founder & Chief Executive Officer, Knowella
Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.
- Certified Safety Professional (CSP), Board of Certified Safety Professionals
- MBA, University of Chicago Booth School of Business
- MS and BS, The Ohio State University, Industrial and Systems Engineering
- Six Sigma Black Belt
Sources and last review. Reviewed 16 August 2026 against:
- 29 CFR 1910.147, control of hazardous energy, OSHA
- 29 CFR 1910.147(f)(3) and (f)(4), group lockout and shift changes, OSHA
- CSA Z460, control of hazardous energy (Canada)
- 29 CFR 1910.147(c)(6), periodic inspection, OSHA
- ISO 14118, prevention of unexpected start-up
This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.