Knowella

Lockout/Tagout Procedure Template

KnowMaintainPlanMNT-05550 fields across 4 sectionsFull researchSee the form

Reviewed by Siddarth SinghCSPLast reviewed 16 August 2026

Basis
OSHA 1910.147(c)(4), CSA Z460
Workspace
KnowMaintain
Form type
Plan
Written for
One machine at a time, never the facility
Review trigger
Machine modification, and the yearly review

The short version

  • OSHA requires a written, machine specific energy control procedure for every machine that is serviced, unless all eight conditions of the documentation exception in 1910.147(c)(4)(i) are met at once.
  • A general corporate lockout/tagout policy does not satisfy 1910.147(c)(4). Missing machine specific procedures are the most frequently cited paragraph in the standard.
  • Control of hazardous energy ranked fourth on OSHA's list of most frequently cited standards for fiscal year 2025, and OSHA estimates compliance prevents roughly 120 fatalities and 50,000 injuries each year.
  • The six step application sequence in 1910.147(d) must be performed in order: prepare for shutdown, shut down, isolate, apply devices, relieve stored energy, then verify isolation.
  • Emergency stops, interlocks, push buttons and other control circuit devices are excluded from OSHA's definition of an energy isolating device and cannot be used to isolate energy during servicing.
  • Outside the United States the UK under PUWER regulation 19 and Australia under the model WHS regulations state the duty as an outcome rather than a prescribed method, so a procedure written to the OSHA standard generally exceeds their documentation requirements.

What this is

What is lockout/tagout?

A machine specific energy control procedure is the written document that records how one piece of equipment is shut down, isolated from every energy source, locked, verified de-energized and returned to service. OSHA requires one per machine under 29 CFR 1910.147(c)(4). A facility-wide lockout/tagout policy is a programme, not a procedure, and does not satisfy the requirement.

What is lockout/tagout?

Lockout/tagout is a safety procedure that isolates a machine from every source of hazardous energy and physically locks it in the off position before anyone services or maintains it. It prevents the machine from starting up, energizing or releasing stored energy while a worker is exposed. In the United States it is regulated under 29 CFR 1910.147.

What is an energy control procedure?

An energy control procedure is the written, machine specific document that sets out exactly how one piece of equipment is shut down, isolated, locked, verified de-energized and returned to service. OSHA requires one for each machine under 1910.147(c)(4).

Scope

When is a lockout/tagout procedure (machine specific) required?

Scope errors run both ways. Some facilities write procedures for equipment the standard never covered, burning effort that should have gone to the machines that could actually kill someone. Others assume an exemption applies and leave a real gap. Both show up in audits, and the second one shows up in incident reports.

Use this template when

  • Employees service or maintain machines where unexpected energization, start-up, or release of stored energy could cause injury (a)(1)(i)
  • Servicing happens during normal production and a worker must remove or bypass a guard or safety device (a)(2)(ii)(A)
  • A worker must place any part of the body into the point of operation or an associated danger zone (a)(2)(ii)(B)
  • The work is cleaning, unjamming, lubrication, setup, adjustment, inspection, or modification, all of which the standard defines as servicing (b)
  • Another OSHA standard directs you to apply lockout, in which case this section's procedural and training requirements supplement it (a)(3)(ii)

Do not use it for

  • Construction, agriculture, shipyard, marine terminal, and longshoring work, which fall outside the scope (a)(1)(ii)
  • Oil and gas well drilling and servicing, and electric utility generation, transmission, and distribution installations (a)(1)(ii)(C), (E)
  • Cord-and-plug equipment where unplugging controls the hazard and the plug stays under the exclusive control of the person doing the work (a)(2)(iii)(A)
  • Minor tool changes and adjustments that are routine, repetitive, and integral to production, provided alternative measures give effective protection
  • Electrical work on utilization installations covered by Subpart S, which needs an energized work permit under NFPA 70E rather than this document

Compliance mapping

Which OSHA 1910.147(c)(4) requirements does this satisfy?

ClauseRequirementWhere it lands
(c)(4)(ii)(A)Specific statement of the procedure's intended useCoverage
(c)(4)(ii)(B)Steps for shutting down, isolating, blocking and securingProcedure steps
(c)(4)(ii)(C)Placement, removal and transfer of devices, and who is responsibleProcedure steps
(c)(4)(ii)(D)Requirements for testing to verify effectiveness of energy controlEnergy sources
(d)(1)Authorized employee must know the type and magnitude of energy presentEnergy sources
(d)(3)All energy isolating devices located and operated to isolate the machineEnergy sources
(d)(5)Stored and residual energy relieved, disconnected or restrainedEnergy sources
(d)(6)Isolation verified before work beginsProcedure steps
(e)Release from lockout, area clearance and restart checksProcedure steps
CSA Z460 cl.7.3.2.3Energy control procedure per machine, Canadian equivalentHeader

What it does not cover

  • Annual periodic inspection under (c)(6), which needs its own certification naming machine, date, employees and inspector. See MNT-056.
  • Training and communication under (c)(7), certified by name and date. See TRN-036.
  • Group lockout under (f)(3), which needs a lockbox roster and a named primary authorized employee. See MNT-058.
  • Lock removal when the applier is unavailable, which needs the documented exception under (e)(3). See MNT-059.
  • Energized electrical work, which requires an NFPA 70E permit rather than this procedure.

Global

Lockout/Tagout Procedure (Machine Specific) requirements by country

United States

29 CFR 1910.147
ANSI/ASSP Z244.1-2024 (voluntary)

Prescriptive. Specifies procedure contents, application sequence, device standards, annual inspection and certification fields.

The procedure is the compliance artifact. Penalties reach $16,550 per serious violation and $165,514 for willful or repeat.

Canada

CSA Z460:20
Provincial OHS regulations

Standard referenced, provincially enforced. Lockout is primary; other methods permitted on risk assessment.

Same sequence, different vocabulary: authorized person and affected person. Check BC OHSR Part 10, Alberta OHS Code Part 15 or Ontario Reg. 851.

United Kingdom

PUWER 1998 reg 19; Electricity at Work Regs 1989

Goal setting. Employers must provide suitable means to isolate equipment from all its sources of energy.

No mandated annual inspection or certification format. Weight falls on competence, proportionate to the risk of the task.

Australia and NZ

Model WHS Regs 2011 reg 208; AS/NZS 4024.1603:2019

Duty based. A PCBU must minimise risk so far as reasonably practicable; plant must have provision for a lockable isolating device.

Technical detail sits in the Australian Standards. Codes of practice are admissible in proceedings. Victoria runs its own OHS Act.

India

OSH Code, 2020; Central Rules 2026

In transition. The Code came into force 21 November 2025 and repealed the Factories Act, 1948.

Two tier: central rules plus state rules, with states still notifying through 2026. Confirm what your state has notified.

European Union

Machinery Regulation (EU) 2023/1230; EN ISO 14118

Design side. The duty to make equipment isolable falls largely on the manufacturer.

Your procedure inherits the isolation points the designer provided. Older machines leave the gap with the employer.

How to complete it

How to complete a lockout/tagout procedure (machine specific), step by step

The template has four sections. The first identifies the equipment, the second inventories energy, the third carries the mandated sequence and the fourth records coverage and sign-off. The middle steps are numbered because the regulation makes them a sequence: 1910.147(d) states the elements shall be done in the order given, and performing them out of order is itself a deviation.

1. Equipment identification

Use the name operators actually say out loud, plus the asset or tag number from your CMMS, the physical location, and the revision number and date. Two failures recur. The procedure names the equipment by a model number nobody on the floor uses, so the wrong document gets pulled at three in the morning. Or the asset identifier does not reconcile to the maintenance system, so nobody can prove coverage is complete. If your procedure library and your asset register do not share a key, you cannot answer the first question an auditor will ask.

2. Statement of intended use

(c)(4)(ii)(A) requires a specific statement of what the procedure is for. Name the tasks it covers, belt replacement, die change, blade sharpening, jam clearing, and name the tasks it does not. Where a task is excluded because it qualifies as minor servicing, say which alternative protective measures apply. This is the paragraph that separates a procedure from a poster.

3. Energy source inventory

List every energy source, not just the electrical supply. The standard's definition covers electrical, mechanical, hydraulic, pneumatic, chemical, thermal, and any other energy, and stored energy is where incidents concentrate. Record type and magnitude for each: 480 V three phase, 90 psi pneumatic, a 12-foot gravitational drop on a raised platen, residual steam at 150 psi. Magnitude isn't decorative detail. (d)(1) requires the authorized employee to know the type and magnitude of the energy before shutdown starts, and a procedure that says only "electrical" can't support that.

4. Energy isolating devices

For each energy source, identify the isolating device, its physical location, its type, and its isolated position. The standard's definition of an energy isolating device is a mechanical device that physically prevents transmission or release of energy: a circuit breaker, a disconnect switch, a line valve, a block. It then states plainly that push buttons, selector switches, and other control circuit devices are not energy isolating devices.

  1. 01

    Prepare for shutdown(d)(1)

    Record what the authorized employee must know before touching anything: the energy types present, their magnitudes, the hazards each presents, and the means of control. Note affected employees who must be told before controls go on, per (c)(9).

  2. 02

    Shut down the equipment(d)(2)

    Specify the normal shutdown method for this machine. The standard calls for an orderly shutdown that avoids creating a new or increased hazard. Abruptly dropping power to a loaded conveyor or a heated vessel can be more dangerous than a controlled stop.

  3. 03

    Isolate every energy source(d)(3)

    One line per isolating device, in the order they are operated, with the device identifier and location. Where the walk route matters, say so. A crew that isolates the main disconnect and misses the compressed air header has not isolated the machine.

  4. 04

    Apply locks and tags(d)(4)

    Each authorized employee affixes their own device. Devices must be singularly identified, used for nothing else, standardized within the facility by colour, shape or size, and must indicate who applied them (c)(5)(ii). Where a tag cannot attach to the device directly, it goes as close as safely possible and in a position obvious to anyone about to operate it.

  5. 05

    Relieve stored energy(d)(5)

    Name each stored energy source and the specific action that renders it safe: bleed the accumulator, block the ram, discharge the capacitor bank, chock the roll, allow the surface to cool below a stated temperature. Where energy can reaccumulate, (d)(5)(ii) requires verification of isolation to continue for the duration of the work.

    Most frequently omitted section in procedures we review.

  6. 06

    Verify isolation(d)(6)

    State the verification method for each source and who performs it. For electrical, that means testing with a meter proven live-dead-live, not observing an indicator lamp. For pneumatic and hydraulic, a gauge reading at zero. For mechanical, an attempted start with controls returned to the off position afterward. Verify de-energized written without a method is the wording inspectors flag most often in this section.

What auditors find

Most common lockout/tagout procedure (machine specific) findings

FindingClauseWhat fixes it
A general LOTO policy exists but no machine specific procedures. The most cited paragraph in the standard.(c)(4)One procedure per asset, reconciled against the asset register, with the eight point justification recorded wherever the documentation exception is claimed.
Training delivered but not certified, or certification missing names and dates.(c)(7)(iv)A roster keyed to each authorized and affected employee with training dates, refreshed on the (c)(7)(iii) triggers.
Annual periodic inspection not performed, or performed but not certified.(c)(6)A certification naming machine, date, employees included and inspector. All four, since a partial record is still a finding.
Periodic inspection performed by the same employee who uses the procedure.(c)(6)(i)(A)Assign a different authorized employee. On small crews, cross assign between lines or shifts.
Stored energy step absent, or present but generic.(d)(5)Each stored source named with its specific relief action, and a stated control where energy can reaccumulate.
Verification written as an instruction to verify, with no method stated.(d)(6)A named test per energy source with the instrument or observable result, and who performs it.
Energy magnitude not recorded, sources listed by type only.(d)(1)Voltage, pressure, temperature or load recorded for every source in the inventory.
Group lockbox used in practice with no documented group procedure.(f)(3)Primary responsibility assigned by name, exposure status method defined, cross craft coordination described.
Contractor performs servicing with no exchange of energy control procedures.(f)(2)A documented two way exchange at mobilisation, retained with the contractor qualification file.
Procedure exists in an office binder but not at the point of use, or was not revised after a machine modification.(c)(4)(i)Procedure available at the equipment, revision triggered by management of change and retraining triggered alongside.

Case in point

What happens when lockout/tagout procedures are missing

In May 2025, OSHA opened an inspection at a vegetable processing facility in Swedesboro, New Jersey, after being notified that a worker had been killed. Inspectors concluded the employer had failed to implement lockout/tagout procedures to protect workers during sanitation activities. Sixteen violations followed, with proposed penalties of $1,125,484. The staffing agency that supplied workers to the site was cited separately, for three serious violations totalling $33,100, on substantially the same grounds.

Two things in that outcome are worth sitting with, because both are common and neither is obvious until it has cost someone.

Sanitation is servicing

Cleaning appears explicitly in the standard's definition of servicing and maintenance, right beside lubrication and unjamming. Plenty of plants write careful procedures for the maintenance department and quietly treat the sanitation shift as a different kind of work. The regulation does not recognise that distinction. And sanitation crews are frequently the people least protected by the surrounding systems: they work nights, often through an agency, often with the highest turnover in the building, often with a language mix that makes generic training close to useless. That is precisely the population the training and certification requirements exist for.

The staffing agency was cited too

Under (f)(2), the host employer and the outside employer each have to inform the other of their energy control procedures, and the host has to ensure its own people understand and comply with the outside employer's restrictions. "Their workers, their training" is not a defence. If contractors or agency staff touch your equipment, the exchange has to happen and it has to be documented. Most organizations handle this at the mobilization meeting and then never write it down, which leaves nothing to produce two years later.

Outlook

What is changing

1910.147 was issued in 1989 and its core text has changed little since. Two developments are worth tracking if you are writing procedures for automated equipment.

OSHA rulemaking on control circuits and robotics

OSHA has signalled a proposed rule to modernize the standard, addressing the use of control circuit type devices for energy isolation and hazardous energy control around robotics. The agency's stated rationale is that technology has advanced far enough since 1989 that such devices may be at least as safe as mechanical isolation in some circumstances. A notice of proposed rulemaking with a public comment period is the next step. Until a final rule issues, the current prohibition stands, and procedures should continue to specify mechanical isolating devices.

ANSI/ASSP Z244.1-2024 and alternative methods

The 2024 edition of the consensus standard elevates alternative methods to a co-equal choice with lockout, selected on the basis of a documented risk assessment. Lockout remains mandatory where no risk assessment has been completed or where tasks and hazards are not fully understood. The practical trap for US employers is that Z244.1 is voluntary while 1910.147 is enforceable: a Z244.1-compliant alternative method can still draw a citation. Treat the consensus standard as design guidance, and the regulation as the compliance floor.

The template

The template, field by field

The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.

50fields
4 sections
Reference
MNT-055
Archetype
Plan
Record ID
ECP-2026-000
Scoring
Not scored
Direction
n/a
Singleton
No
Basis
OSHA 1910.147(c)(4), CSA Z460
Links
Links Asset; used by Isolation Permit
Tags
LOTO, Energy, Plan
Sections
4
Fields
50
Follow up fields
4
Repeating sections
1
Links out
4
Field typesOwn ID, generated on saveCase thread and parentPick list from a registryLinked to another templateFollow up, dashed outlineScored

Header

17 fields
Text

Procedure ID*

Generated on save

Auto sequence. Format ECP-2026-000.

The record's own ID. Other templates point at this value.

Single Choice

Status*

Scored

Drives who this goes to next.

  • Planned2 pts
  • In progress2 pts
  • Complete3 pts
  • Deferred0 pts
  • Open0 pts
  • Closed3 pts
  • Overdue0 pts
Date & Time

Date and Time*

Users

Raised By*

Pick List

Site*

From FDN-001 Site NameFilter: Status is Active
Text

Site ID*

Linked

Format SITE-000.

Links to FDN-001 Site ID

Single Choice

Area

Optional

The area within the site.

Cutting roomBoning hallPackingChill storeFreezerPasteurisingFillingCulture roomDespatchYardWorkshopPlant roomOffices
Location

Exact Location

Optional

Drop a pin for anything hard to find.

Pick List

Asset*

From FDN-002 Asset NameFilter: Site matches, Status is Active
Text

Asset ID*

Linked

Format AST-0000.

Links to FDN-002 Asset ID

Info

Generic Does Not Count

The regulation requires a procedure specific to this machine. A one page general LOTO policy is the single most common citation in this area.

Text

Procedure Version*

Date & Time

Issue Date*

Date & Time

Next Review Due*

Users

Written By*

Users

Approved By*

Single Choice

Verified On The Machine*

Scored

Walk the procedure at the machine before approving it. Desk written procedures miss isolation points.

  • Yes3 pts
  • No0 pts

Energy sources

Repeats11 fields
Single Choice

Energy Type*

Electrical, pneumatic, hydraulic, steam, thermal, chemical, gravity, spring or refrigerant.

ElectricityNatural gasFuel oilSteamCompressed air
Text

Magnitude

Optional
Text

Isolation Point Reference*

Text

Isolation Point Location*

Described so somebody unfamiliar with the machine can find it.

Single Choice

Isolation Device Type*

Circuit breakerIsolator switchPlugValveBlank or spadeBlocking device
Single Choice

Lockable*

Scored
  • Yes3 pts
  • With adapter2 pts
  • No0 pts
Single Choice

Isolation Point Labelled*

Scored
  • Yes3 pts
  • No0 pts
File Upload

Photograph

Optional
Single Choice

Stored Energy Present*

Scored
  • No3 pts
  • Yes1 pt
Text

Release Or Restraint Method

OptionalShows if Stored Energy Present equals Yes
Single Choice

Verification Method*

Scored

How you prove this source is actually dead. Test instrument, try start, gauge reading or visual.

  • Site visit4 pts
  • Record review3 pts
  • Photograph2 pts
  • Statement only0 pts

Procedure steps

6 fields
Single Choice

Shutdown Sequence Documented*

Scored
  • Yes3 pts
  • No0 pts
Single Choice

Isolation Sequence Documented*

Scored
  • Yes3 pts
  • No0 pts
Single Choice

Verification Step Included*

Scored
  • Yes3 pts
  • No0 pts
Single Choice

Restoration Sequence Documented*

Scored
  • Yes3 pts
  • No0 pts
Single Choice

Restart Checks Documented*

Scored
  • Yes3 pts
  • No0 pts
Single Choice

Area Clearance Step Included*

Scored
  • Yes3 pts
  • No0 pts

Coverage

16 fields
Single Choice

Covers Cleaning Tasks*

Scored

Sanitation is where most isolation failures happen, and sanitation crews are often the least trained.

  • Yes3 pts
  • No0 pts
Single Choice

Covers Jam Clearing*

Scored
  • Yes3 pts
  • No0 pts
Single Choice

Covers Setting And Changeover*

Scored
  • Yes3 pts
  • No0 pts
Single Choice

Available At The Machine*

Scored
  • Yes3 pts
  • No0 pts
Single Choice

Authorised Persons Listed*

Scored
  • Yes3 pts
  • No0 pts
Single Choice

Training Delivered*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts
Pick List

Procedure Document

OptionalFrom FDN-008 Document TitleFilter: Status is Current
Text

Document ID

OptionalLinked

Format DOC-0000.

Links to FDN-008 Document ID

Single Choice

Action Required*

Scored

Raise the action record, then enter its reference here.

  • No2 pts
  • Yes0 pts
Single Choice

Priority

OptionalScoredShows if Action Required equals Yes
  • High0 pts
  • Medium1 pt
  • Low3 pts
Text

CAPA ID

OptionalLinkedShows if Action Required equals Yes

Format CAPA-2026-00000.

Links to FDN-014 CAPA ID

Users

Action Owner

OptionalShows if Action Required equals Yes
Users

Engineering*

Signature

Signature*

Users

Safety Lead*

Signature

Second Signature*

MNT-055 · record IDs look like ECP-2026-000 · Links Asset; used by Isolation Permit

Open in Knowella

Run it with agents

From a document you fill in to a programme that runs itself

Nine of the ten findings above are not failures of safety knowledge. They are failures of follow-through: a procedure that never got revised, an inspection that slipped past its window, a training record with a gap. That is coordination work, and it is what the agents take off your team.

KnowSafe

Holds the procedure library keyed to your asset register, flags assets with no current procedure, and schedules the annual periodic inspection with the four required certification fields captured on completion.

KnowMaintain

Watches work orders and asset changes. When equipment is modified, it opens a procedure revision task and links it to the change, closing the gap that produces stale procedures.

KnowTrain

Maintains the authorized and affected employee roster with training certification by name and date, and triggers retraining when a procedure revision or job change occurs.

Ella
Ella

Coordinates the three, aggregates coverage and completion into one view, and holds every write for your approval before it touches a record.

This template lives in KnowMaintain — asset maintenance. Work orders, planned maintenance, calibration, reliability and shutdowns.

Meet KnowMaintain→

Glossary

Lockout/Tagout Procedure (Machine Specific) definitions and key terms

Authorized employee
A person who locks or tags out equipment in order to service or maintain it. An affected employee becomes authorized when their duties include that servicing.
Affected employee
Someone whose job requires them to operate the equipment being serviced or work in the area. They do not apply locks but must be notified before and after.
Energy isolating device
A mechanical device that physically prevents transmission or release of energy: a breaker, disconnect switch, line valve or block. Push buttons and selector switches are excluded.
Energy source
Any source of electrical, mechanical, hydraulic, pneumatic, chemical, thermal or other energy, including stored and residual energy.
Capable of being locked out
An isolating device with a hasp or built in locking mechanism, or one lockable without dismantling or permanently altering it.
Lockout device
A device using a positive means such as a keyed or combination lock to hold an isolating device in a safe position.
Tagout device
A prominent warning device fastened to an isolating device. It warns; it does not physically restrain.
Servicing and maintenance
Constructing, installing, setting up, adjusting, inspecting, modifying and maintaining equipment, including lubrication, cleaning and unjamming. Sanitation falls inside this.

FAQ

Frequently asked questions about lockout/tagout procedure (machine specific)

Do we need a written procedure for every machine?+

Nearly always. The exception in (c)(4)(i) requires all eight conditions at once, and the first, no potential for stored, residual or reaccumulating energy, rules out most powered equipment. Where you rely on it, document the justification rather than leaving the record empty.

Who can perform the annual periodic inspection?+

An authorized employee other than the one using the procedure being inspected. The inspection includes a review with each authorized employee of their responsibilities under that procedure.

How often must lockout/tagout training be repeated?+

There is no fixed calendar interval. Retraining is triggered by a change in job assignment, a change in machines or processes presenting a new hazard, a change in the procedures, or an inspection revealing gaps in knowledge.

Does an emergency stop count as energy isolation?+

No. E-stops, interlocks and safety rated control functions are control circuit devices, excluded from the definition of an energy isolating device in 1910.147(b). They protect during production, not during servicing.

What are the six steps of lockout/tagout?+

Prepare for shutdown by identifying energy types and magnitudes; shut down in an orderly way; isolate every source at its isolating device; apply lockout or tagout devices; relieve all stored and residual energy; verify isolation before work begins. The order is mandated by 1910.147(d).

Who is allowed to remove a lock or tag?+

The person who applied it. The only exception, under (e)(3), applies when that employee is unavailable and requires a documented removal procedure including verification they have left site, reasonable efforts to contact them, and ensuring they know before returning to work.

Does lockout/tagout apply to sanitation work?+

Yes. Cleaning is named directly in the definition of servicing and maintenance in 1910.147(b), alongside lubrication and unjamming. Performing sanitation on a different shift or through an agency does not change the obligation.

Is lockout/tagout required by law?+

Yes, in every major industrial jurisdiction. Mandatory in the US under 29 CFR 1910.147, enforced provincially in Canada with CSA Z460:20 as reference, required in the UK under PUWER regulation 19 and in Australia under the model WHS regulations.

Keep going

Related templates and programmes

Siddarth Singh

Written and reviewed by

Siddarth Singh

Founder & Chief Executive Officer, Knowella

Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.

  • Certified Safety Professional (CSP), Board of Certified Safety Professionals
  • MBA, University of Chicago Booth School of Business
  • MS and BS, The Ohio State University, Industrial and Systems Engineering
  • Six Sigma Black Belt
Verify with BCSP →

Sources and last review. Reviewed 16 August 2026 against:

This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.

Start in Minutes, Not Weeks

Launch a Ready-Made Template and Customize It Your Way

Every template is fully editable. Adjust fields, workflows, and branding to match your processes, then deploy to your team instantly.