What this is
What is a utility isolation record?
What is a utility isolation record?
It is the permit-style record sitting between a maintenance task and the services it interrupts. It names the utility cut, the areas and equipment that lose it, who was told and when, the isolation points and locks, and the conditions under which supply returns. The value is in the timestamped trail, not the tick.
How does it differ from a lock-out/tag-out permit?
Lock-out/tag-out protects the person working on the machine; this record protects everyone else. They overlap at the isolation point, often sharing a padlock, but LOTO stops once the energy source is proven dead. This record continues through notification, hygiene impact, restoration and flushing. Sites running only LOTO isolate safely and still lose a batch.
What counts as a utility here?
Anything distributed site-wide that others consume without owning: steam, compressed air, potable and process water, chilled water, electrical supply, gas and drainage. The test is the number of downstream users who cannot see the valve. A feed to one machine is machine maintenance; a header serving three departments is a utility isolation.
Scope
When is an utility isolation record required?
This record covers the interruption of a shared service and its consequences downstream. It is not the maintenance job and not the equipment log. Used wrongly, it produces a register that cannot answer the only question asked afterwards: who knew, and when.
Use this template when
- Steam, air, water, chilled water, gas, electrical or drainage supply is cut where downstream users cannot see the isolation point
- A statutory examination or written scheme inspection requires plant off line
- An emergency repair has forced an isolation and the notification trail needs recording while still accurate
- A modification or tie-in interrupts a header serving more than the department doing the work
- A contractor needs a service dropped and the site, not the contractor, owns the consequences
Do not use it for
- Boiler Operation Record, which logs operating parameters, water treatment and blowdown through a shift, not an interruption of supply
- Refrigeration Plant Log, which tracks pressures, oil and run hours as routine condition data, not a planned outage
- Water Treatment Record, which holds dosing and test results and receives flushing results, not the isolation itself
- Legionella Control Record, which owns the control scheme and temperature regime a long water isolation feeds into
- Pressure System Written Scheme, which defines what is examined and when, where this record captures only the enabling isolation
Compliance mapping
Which ISO 45001 cl.8.1 requirements does this satisfy?
The map below pins each requirement to the section that satisfies it. Sections named are live sections in the template, not generic headings.
| Clause | Requirement | Where it lands |
|---|---|---|
| ISO 45001 cl.8.1 | Plan, implement and control the processes needed to meet OH&S requirements, including operational changes | Header |
| ISO 45001 cl.8.1.2 | Apply the hierarchy of controls when eliminating hazards and reducing OH&S risk | Isolation and restoration |
| ISO 45001 cl.7.4 | Determine internal and external communications relevant to the OH&S system, including with contractors | Notification |
| PUWER 1998 reg.19 | Work equipment must have suitable means of isolation from all energy sources, and reconnection must expose nobody to risk | Isolation and restoration |
| ISO 22000:2018 cl.8.2 | Maintain prerequisite programmes covering utilities, water supply and services affecting product safety | Impact |
| NFPA 25 ch.15 | Water-based fire systems taken out of service require a formal impairment procedure, tag and notifications | Impact |
| ISO 45001 cl.9.1.1 | Retain documented information as evidence of results | Result |
What it does not cover
- An unrecorded verbal notification, which cannot establish notice period afterwards; a blank Notice Given Hours reads as no notice at all.
- A sprinkler isolation logged as a water isolation, which leaves a fire system impaired with no tag, no insurer notification and no Impairment Record ID.
- A restoration with no flushing decision, which cannot show stagnant water was cleared before reaching a point of use.
- Retrospective site manager approval used as routine, which turns an approval control into a rubber stamp meant only for genuine emergencies.
- A closed record with Time Restored empty, which says the utility is back without saying when, leaving the exposure window unbounded.
Global
Utility Isolation Record requirements by country
No single instrument governs utility isolation. It sits where work equipment law, fire protection standards and hygiene rules meet, and which bites hardest depends on the site.
Provision and Use of Work Equipment Regulations 1998, reg.19; Pressure Systems Safety Regulations 2000
Isolation is a duty attached to the equipment, and pressure plant carries a separate statutory examination regime under a written scheme
Statutory examination under Reason is not administrative colour — it ties the record to a written scheme, and an isolation preventing an examination falling due is itself a compliance event.
29 CFR 1910.147 (control of hazardous energy); NFPA 25 ch.15
Energy control is prescriptive and heavily enforced, and fire impairment is a codified procedure with named responsibilities
Locks Applied and Isolation Points Identified map onto the LOTO programme, while Fire System Affected set to Yes obliges the impairment tag and notifications rather than suggesting them.
Directive 2009/104/EC on the use of work equipment; Regulation (EC) No 852/2004 on the hygiene of foodstuffs
Work equipment isolation is a minimum requirement transposed by each member state, and food premises must keep adequate potable water and hygiene facilities
Hygiene Or Handwashing Affected and Alternative Provision Arranged are not courtesies in a food plant — losing handwash supply with no alternative is a hygiene control failure.
How to complete it
How to complete an utility isolation record, step by step
Filling the record in is trivial. Four judgement calls decide whether it defends the site, and all four are made before the valve moves.
The instinct is to list the department doing the work. The correct answer is every area consuming the service downstream of the isolation point, which means walking the header rather than trusting a drawing. An isolation logged as Production line that in fact dropped air to the warehouse produces a notification list wrong before it was sent.
This field is usually answered from the utility type rather than the layout. Water and electrical isolations often clip a sprinkler main, pump feed or detection panel without that being obvious at the valve. If the answer is Yes, the record is not a maintenance document until an Impairment Record ID exists.
It should run from when production could act on the information, not from when the email was sent. Notice issued at the end of a shift to a team starting in twelve hours is not twelve hours of notice. Measured honestly, planned isolations cluster around two to four hours of usable notice.
Pressure on a gauge is not function. Verification means the downstream consumer confirms the service does what it did before: steam at temperature at the user point, air at pressure at the end of the ring, chilled water pulling the store back into band.
What auditors find
Most common utility isolation record findings
These recur when isolation records are audited against what happened on the day.
| Finding | Clause | What fixes it |
|---|---|---|
| Notice Given Hours entered as the same round number on every record | ISO 45001 cl.7.4 | Populate it from the timestamp on the notification; identical values across a register signal a field being filled rather than measured. |
| Fire System Affected answered No where the utility was water and the area Whole site | NFPA 25 ch.15 | Check the isolation point against the fire main layout before answering, and treat an Impairment Record ID as mandatory whenever the answer is Yes. |
| Contractors On Site Notified marked Not applicable on days the contractor register shows attendees | ISO 45001 cl.8.1.4 | Reconcile against the signing-in record for the isolation window; Not applicable must mean nobody was on site, not that nobody checked. |
| Time Restored blank on records with Status set to Closed | ISO 45001 cl.9.1.1 | Make Closed unreachable until Time Restored, Function Verified After Restoration and Production Notified Of Restoration all carry values. |
| System Purged Or Flushed Before Use marked Not required on long potable water isolations | ISO 22000:2018 cl.8.2 | Set a duration threshold above which flushing is mandatory, and route the flush result into the water treatment record. |
| Site Manager Approved recorded as Retrospectively on isolations whose Reason was Planned maintenance | ISO 45001 cl.8.1 | Retrospective approval should only accompany Emergency; where it appears against planned work, the planning process needs fixing, not the approval. |
Case in point
Case in point: the two-hour steam drop that cost a shift
A chilled ready-meal site isolated the low pressure steam header to replace three failed traps found in a survey. The work was planned, locks applied, the site engineer approved it, and Areas Affected was recorded as Process area because that is where the traps were.
The header also fed tray sealer pre-heat on two lines nobody listed, and the calorifier serving high-care handwash. Production ran forty minutes on cooling seals before the reject rate showed it, and high care went to cold handwash with no alternative provision. Steam returned inside the estimate and the record closed as compliant. The finding was not an unsafe isolation — Areas Affected had been answered from the job card rather than the pipework, and every notification inherited that error.
The template
The template, field by field
The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.
5 sections
- Reference
- MNT-078
- Archetype
- Record
- Record ID
- UIS-2026-000
- Scoring
- Notifications complete
- Direction
- High is good
- Singleton
- Yes
- Basis
- ISO 45001 cl.8.1
- Links
- Links Energy control, Shutdowns
- Tags
- Utilities, Isolation
- Sections
- 5
- Fields
- 47
- Follow up fields
- 3
- Repeating sections
- 0
- Links out
- 3
Header
10 fieldsRecord ID*
Auto sequence. Format UIS-2026-000.
The record's own ID. Other templates point at this value.
Status*
Drives who this goes to next.
- Planned2 pts
- In progress2 pts
- Complete3 pts
- Deferred0 pts
- Open0 pts
- Closed3 pts
- Overdue0 pts
Date and Time*
Completed By*
Site*
Site ID*
Format SITE-000.
Links to FDN-001 Site ID
Isolating Without Telling Production Loses Product
Cutting steam, air or chilled water is safe for the person doing it and catastrophic for the line that did not know. Tell everybody first.
Utility Isolated*
Reason*
Planned Or Emergency*
- Planned3 pts
- Emergency1 pt
Impact
9 fieldsAreas Affected*
Equipment Affected
Product Exposure Level*
- None3 pts
- Some1 pt
- Significant0 pts
Refrigeration Affected*
- No3 pts
- Partly1 pt
- Yes0 pts
Fire System Affected*
Isolating water to a sprinkler system needs an impairment procedure, not just a notification.
- No3 pts
- Yes0 pts
Impairment Record ID
Links to SAF-100 Check ID
Hygiene Or Handwashing Affected*
- No3 pts
- Partly1 pt
- Yes0 pts
Welfare Facilities Affected
- No3 pts
- Yes1 pt
Alternative Provision Arranged
- Yes3 pts
- Not needed3 pts
- No0 pts
Notification
6 fieldsProduction Notified*
- Yes3 pts
- Late1 pt
- No0 pts
Notice Given Hours*
Quality Notified*
- Yes3 pts
- Not needed3 pts
- No0 pts
Site Manager Approved*
- Yes3 pts
- Retrospectively1 pt
- No0 pts
Contractors On Site Notified*
- Yes3 pts
- Not applicable3 pts
- No0 pts
Signage Placed At Affected Points*
- Yes3 pts
- Partly1 pt
- No0 pts
Isolation and restoration
9 fieldsIsolation Points Identified*
- Yes3 pts
- Partly1 pt
- No0 pts
Locks Applied*
- Yes3 pts
- Partly1 pt
- No0 pts
Time Isolated*
Time Restored
Duration Within Estimate*
- Yes3 pts
- Slight overrun1 pt
- Significant overrun0 pts
System Purged Or Flushed Before Use*
Water systems returned to service without flushing carry whatever settled while they were still.
- Yes3 pts
- Not required3 pts
- No0 pts
Function Verified After Restoration*
- Yes3 pts
- Partly1 pt
- No0 pts
Production Notified Of Restoration*
- Yes3 pts
- No0 pts
Any Product Loss*
- None3 pts
- Some1 pt
- Significant0 pts
Result
13 fieldsItems Assessed*
Excludes anything marked N/A.
Items Failed*
Score Percent*
Calculated on submission. High is good. N/A items leave the denominator.
Result Band*
- Pass3 pts
- Caution1 pt
- Fail0 pts
Completeness Percent*
How much of the template was actually answered. A high score on a half completed form is not a high score.
Action Required*
Raise the action record, then enter its reference here.
- No2 pts
- Yes0 pts
Priority
- High0 pts
- Medium1 pt
- Low3 pts
CAPA ID
Format CAPA-2026-00000.
Links to FDN-014 CAPA ID
Action Owner
Site Engineer*
Signature*
Production Manager*
Second Signature*
MNT-078 · record IDs look like UIS-2026-000 · Links Energy control, Shutdowns
Open in KnowellaRun it with agents
From a document you fill in to a programme that runs itself
The form is the easy part. What slips is the chain around it — telling the right people early enough, escalating a fire impairment out of maintenance, and closing the loop on restoration.
Holds the isolation register against the asset hierarchy, links each record to the shutdown or work order behind it, and keeps Time Isolated and Time Restored as queryable outage history.
Owns the energy control and fire side: routes any record with Fire System Affected set to Yes into the impairment procedure, and reconciles Locks Applied against the lock-out register.
Picks up Product Exposure Level, Hygiene Or Handwashing Affected and Any Product Loss, holds affected batches against the outage window, and carries flushing evidence into release.
Watches the register for what one record cannot show — rising emergency share, shrinking notice periods, closed records with no restoration verification — and holds every write for approval.
This template lives in KnowMaintain — asset maintenance. Work orders, planned maintenance, calibration, reliability and shutdowns.
Meet KnowMaintain→Glossary
Utility Isolation Record definitions and key terms
- Isolation point
- The valve, breaker or blank at which supply is physically broken, identified by tag rather than description. Named points make Locks Applied auditable.
- Impairment
- The period a fire protection system is wholly or partly out of service, carrying tagging, notification and usually insurer obligations of its own.
- Dead leg
- Pipework with no or intermittent flow where water stagnates and warms. Isolations create temporary dead legs, which is why flushing is a control, not a courtesy.
- Written scheme of examination
- The document specifying which parts of a pressure system are examined, by what method and at what interval. Statutory examination as a Reason usually serves it.
- Alternative provision
- The substitute made when welfare or hygiene facilities are lost — temporary handwash, portable welfare, bottled potable supply. Its absence turns an outage into a duty failure.
FAQ
Frequently asked questions about utility isolation record
Should an emergency isolation still use this record?+
Yes, completed immediately afterwards rather than beforehand. Planned Or Emergency and the Retrospectively approval option exist so an emergency need not be dressed up as planned work. Raise it while notification times are still known.
Who should sign the record?+
Two people, deliberately. The site engineer owns the isolation and restoration; the production manager owns the consequence for the lines. The second signature stops isolations being agreed entirely within engineering, where most product loss comes from.
How does this relate to a lock-out/tag-out permit?+
They coexist. LOTO governs the safety of whoever works on the isolated plant; this record governs everyone downstream. Locks Applied and Isolation Points Identified are the seam, and one padlock often serves both.
What if the isolation lasts across shifts?+
It stays open with Status set to In progress and the handover happens on the record, not verbally. Notice Given Hours refers to the original notification, so the incoming shift must be told separately — an inherited outage is unannounced for them.
Why is Product Exposure Level scored separately from Any Product Loss?+
One is a forecast made before isolating, the other an outcome recorded afterwards. Comparing them across the register is the quickest test of whether the site's pre-isolation risk judgement is any good.
Can the template be changed?+
Yes. Every field, option, score and conditional rule is editable, and the links to the energy control and shutdown templates come with it. Most sites run it as it stands for a quarter, then tighten notification thresholds once they see their own Notice Given Hours.
Keep going
Related templates and programmes
Industries this is written for
Programmes this belongs to
Used together in Pressure Systems and Refrigeration
Refrigeration Contractor Verification
Verifies refrigeration contractor certification, ammonia competence, emergency capability and out of hours response
Environmental Aspects Register
Lists how your activities interact with the environment and how significant each interaction is
Refrigeration Unit Service Record
Records service and performance testing of a transport refrigeration unit, including temperature pull down and refrigerant
Boiler Operation Record
Records boiler operating parameters, water treatment results and blowdown through a shift
Refrigeration Plant Log
Records suction and discharge pressures, temperatures, oil levels and run hours across the refrigeration plant
Water Treatment Record
Records dosing, testing and results for boiler, cooling and process water systems
More in Utilities
Boiler Operation Record
Records boiler operating parameters, water treatment results and blowdown through a shift
Refrigeration Plant Log
Records suction and discharge pressures, temperatures, oil levels and run hours across the refrigeration plant
Water Treatment Record
Records dosing, testing and results for boiler, cooling and process water systems
Legionella Control Record
Records temperature checks, flushing, sampling and cleaning across water systems that can generate aerosols
Steam Trap Survey
Surveys steam traps for failed open and failed closed condition, with the energy cost of each failure
Emergency Generator Test Record
Records the periodic run and load test of standby generation, with fuel, coolant and transfer performance
Written and reviewed by
Siddarth Singh
Founder & Chief Executive Officer, Knowella
Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.
- Certified Safety Professional (CSP), Board of Certified Safety Professionals
- MBA, University of Chicago Booth School of Business
- MS and BS, The Ohio State University, Industrial and Systems Engineering
- Six Sigma Black Belt
Sources and last review. Reviewed 16 August 2026 against:
- ISO 45001:2018 — Occupational health and safety management systems, cl.7.4, cl.8.1, cl.9.1.1
- Provision and Use of Work Equipment Regulations 1998, reg.19 — Isolation from sources of energy
- 29 CFR 1910.147 — The control of hazardous energy (lockout/tagout)
- NFPA 25 — Water-Based Fire Protection Systems, ch.15 Impairments
- ISO 22000:2018 — Food safety management systems, cl.8.2 Prerequisite programmes
This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.