Lockout/tagout failures kill. Every year, OSHA estimates that proper LOTO compliance would prevent approximately 120 fatalities and 50,000 injuries among U.S. workers who service or maintain machinery. The average OSHA penalty for a serious LOTO violation in 2026 is $16,131 per citation — and willful violations can reach $161,323 per instance.
For manufacturing EHS directors, 29 CFR 1910.147 — OSHA's Control of Hazardous Energy standard — is non-negotiable. This guide covers the standard's requirements, the 6-step LOTO procedure, the citations OSHA writes most often, and why paper-based programs fail inspection.
1. What is Lockout/Tagout?
Lockout/tagout (LOTO) is a safety procedure that protects workers from the unexpected energization, startup, or release of hazardous energy during service and maintenance activities. The word "hazardous energy" covers more than most people assume:
- ⚡ Electrical (most common)
- 💨 Pneumatic (compressed air/gas)
- 🔧 Hydraulic pressure
- 🌡️ Thermal (steam, heat)
- ⬇️ Gravitational (suspended loads, stored potential)
- ⚗️ Chemical (pressurized vessels, reactive materials)
Who Does OSHA 1910.147 Apply To?
The standard applies to general industry employers where employees service or maintain machinery or equipment — and where unexpected energization or startup could harm workers. This covers virtually every manufacturing environment.
OSHA distinguishes between authorized employees (those who perform lockout/tagout), affected employees (those who operate equipment that is locked out), and other employees (anyone else in the area). Each group has specific training requirements under the standard.
Lockout vs. Tagout: What's the Difference?
Lockout uses a physical device — a padlock — to secure an energy-isolating device in a safe position. It prevents machines from being re-energized. Tagout uses a warning tag when a lockout device cannot be applied. OSHA strongly prefers lockout; tagout alone is permissible only when the energy-isolating device is not capable of being locked. In practice, tag-only programs require additional procedural controls to provide equivalent protection.
2. The 6 Steps to LOTO Compliance
OSHA 1910.147(d) specifies the sequence for applying energy control. These six steps must be followed in order, every time, for every piece of equipment being serviced. There are no shortcuts.
Identify All Energy Sources
Before any work begins, the authorized employee must identify the type and magnitude of every energy source. Consult the equipment-specific LOTO procedure. Never assume — multi-energy equipment kills when a secondary source is overlooked.
Notify Affected Employees
Tell all affected employees that the equipment is being taken out of service for maintenance. This is a documentation step as much as a communication step — OSHA auditors will ask how notifications are tracked.
Shut Down the Equipment
Use the normal stopping procedure. If the machine was running, bring it to a complete stop before proceeding. Do not isolate energy while the machine is operating.
Isolate All Energy Sources
Move every energy-isolating device to its safe (off) position: open disconnect switches, close valves, block gravity hazards. If the machine has 4 energy sources, all 4 must be isolated — this is the step most programs skip under time pressure.
Apply Lockout or Tagout Devices
Each authorized employee applies their personal padlock (or tagout device) to every energy-isolating point. In group LOTO situations, each worker locks the hasp — no shared locks. The equipment cannot be re-energized while any worker's lock is in place.
Release Stored Energy & Verify Zero-Energy State
Bleed hydraulic pressure, discharge capacitors, block suspended loads, release spring tension. Then attempt to start the equipment using normal operating controls to confirm zero-energy state. Document the verification. This step is OSHA's hardest requirement to prove in an audit.
Equipment-Specific Written Procedures
OSHA requires a written energy control procedure for each piece of equipment unless the employer can demonstrate that all six conditions in 1910.147(c)(4)(i) are met (single energy source, complete de-energization possible, lockable isolation, single-lock control, etc.). In practice, most manufacturing equipment requires documented, equipment-specific procedures.
The written procedure must include: steps to shut down, isolate, block, and secure the machine; steps to place, remove, and transfer lockout/tagout devices; and requirements to test the machine to verify the effectiveness of lockout/tagout devices. It must be available at the point of use.
Annual Inspections
Section 1910.147(c)(6) requires an annual periodic inspection of the energy control procedure — not just a review, but a documented inspection performed by an authorized employee other than the one using the procedure. The inspection must verify the procedure is adequate and that workers understand their responsibilities. The record must include: the machine/equipment, date of inspection, employees involved, and name of the inspector.
This is the most commonly under-documented LOTO requirement. Paper programs almost universally fail here.
3. Common LOTO Violations & How to Avoid Them
OSHA's Control of Hazardous Energy standard (29 CFR 1910.147) is consistently among the top 10 most-cited violations in general industry. Here are the five citations that appear most often — and the systematic fix for each.
No Written Energy Control Procedures
The most common LOTO citation. Employers either have no documented procedures, or procedures exist but don't cover all machines, or procedures are generic rather than equipment-specific. 1910.147(c)(4)(ii) requires a documented procedure for each piece of equipment.
Inadequate Employee Training
1910.147(c)(7) requires training for authorized employees (who perform LOTO), affected employees (who operate equipment), and other employees (who work in areas where LOTO is used). Initial training must be documented, and retraining is required whenever procedures change, inspections reveal deficiencies, or there's reason to believe the employee doesn't understand the program.
Missing or Inadequate Annual Inspections
1910.147(c)(6) requires annual certification of each energy control procedure — including the machine inspected, the date, the employees involved, and the person performing the inspection. Many facilities either skip annual inspections entirely or perform them without adequate documentation.
Failure to Release Stored/Residual Energy
Isolating an energy source doesn't eliminate hazardous energy — stored energy remains. Workers are injured or killed by residual hydraulic pressure, spring tension, capacitor charge, and suspended gravity loads that weren't properly released before work began.
Improper Hardware (Locks, Tags, Hasps)
1910.147(c)(5) specifies requirements for LOTO devices: they must be identifiable (uniquely attributed to each employee), durable, standardized, and substantial. Sharing locks across workers, using inadequate devices, or applying locks to energy sources that bypass the isolating point are all citable violations.
4. Digital LOTO Tracking vs. Paper Logs
Paper-based LOTO programs can technically satisfy OSHA's requirements — but in practice, they fail in the three places auditors look hardest: procedure currency, training records, and annual inspection documentation. Here's how paper compares to a digital system like Prelion's LOTO Tracker.
| Capability | Paper / Manual | Prelion LOTO Tracker |
|---|---|---|
| Equipment-specific procedures | Binders; easy to lose, misfile, or use stale versions | Digital, version-controlled; current version at point of use |
| LOTO execution logs | Handwritten forms; hard to read, incomplete, easily lost | Timestamped digital records with worker ID and equipment |
| Training records | Paper sign-off sheets; no automatic alert when retraining is due | Tracked per employee; automated alerts for expiring certifications |
| Annual procedure inspections | Often missed; no systematic trigger or reminder | Scheduled automatically; inspection record generated and stored |
| OSHA audit readiness | Hours to compile records; gaps under pressure | All records exportable in minutes; full audit trail |
| Multi-site visibility | Siloed per facility; EHS director has no cross-site view | Dashboard shows compliance status across all sites in real time |
| Procedure updates | Physical reprint and redistribution; version drift guaranteed | Update once; all users see the current version immediately |
| Group LOTO management | Paper sign-in/out; no real-time status of who has locks applied | Live lock status; no one can re-energize while a lock is active |
| OSHA 1910.147 alignment | Possible if consistently maintained — rarely is in practice | Built to 1910.147 requirements from the ground up |
The Real Cost of Paper LOTO Programs
The average OSHA LOTO citation is $16,131. But the bigger cost is operational: a single recordable LOTO injury triggers a full program audit, a spike in workers' comp premiums, and — if there's a fatality — OSHA's On-site Consultation or criminal referral process. Paper programs routinely fail because they don't scale: when a facility adds machines, new employees, or shifts, the binder system breaks down. Digital LOTO systems maintain compliance as your operation grows.
For EHS directors managing multiple sites, the ROI calculation is straightforward: one avoided citation covers years of software cost. One avoided fatality is not measurable.
See How Prelion Automates LOTO Compliance
Prelion's LOTO Tracker was built by a 30-year industrial safety practitioner to satisfy every requirement in 29 CFR 1910.147 — procedures, training records, annual inspections, and group lockout — without the paperwork. Most facilities are audit-ready within one week of onboarding.