| Quick Answer: A lockout/tagout procedure passes an OSHA audit when it is machine-specific, identifies every energy source present, sequences the isolation and verification steps exactly, and matches what workers actually do at the equipment. OSHA 29 CFR 1910.147(c)(4) requires documented procedures per machine, not a generic policy. Bowtie Engineering writes machine-specific LOTO procedures — floor inventory through laminated, point-of-use documents. Call 866-730-6620 for help building yours. |
Most LOTO citations are not about missing locks — they are about missing paper. A facility can own a wall of lockout devices and still fail an audit because its “procedure” is one generic policy covering three hundred machines, or because the documented steps describe a press that was rebuilt in 2019. This article walks through how to write a lockout/tagout procedure that passes an OSHA audit: what the standard demands, what auditors actually check, and the structure that survives both.
What Does 1910.147 Require a Procedure to Contain?
OSHA 29 CFR 1910.147(c)(4) requires documented energy control procedures that clearly and specifically outline:
- The intended use of the procedure — which equipment, which servicing activities
- Specific steps for shutting down, isolating, blocking, and securing the equipment
- Specific steps for placing, removing, and transferring locks and tags, and who is responsible
- Specific requirements for testing the equipment to verify the effectiveness of isolation — the zero-energy verification
- The sequence for releasing from lockout and safely restarting
The word doing the work in the regulation is “specific.” A procedure that says “isolate all energy sources” without naming them, locating them, and sequencing them is a policy statement, not a procedure.
Why Must Procedures Be Machine-Specific?
Because energy is machine-specific. A packaging line holds electrical, pneumatic, and stored mechanical energy; a hydraulic press adds accumulated pressure and gravity; a steam-jacketed kettle adds thermal. The limited exception in 1910.147(c)(4)(i) that permits skipping documentation applies only when all eight of its conditions are met — including a single energy source, readily identified and isolated — and most industrial equipment fails that test immediately. This is the gap Bowtie Engineering built its LOTO program development service around: walking the floor, inventorying every serviceable asset, and writing a documented procedure per machine covering every energy source present.
What Does an Audit-Ready Procedure Actually Look Like?
The format that passes audits — and, more importantly, that workers actually follow — includes for each machine:
- Equipment identification: name, location, and asset tag
- Every energy source: electrical, hydraulic, pneumatic, thermal, chemical, gravity, and stored energy
- Each isolation point: location, device type, and the order of operations
- Stored-energy dissipation steps — bleed, block, discharge — with verification
- The zero-energy verification method: how, where, and with what
- PPE required for the isolation task itself
- Photographs of each isolation point, so the procedure is unambiguous
- The restoration sequence returning the machine to service
Photographs deserve emphasis: they eliminate the interpretation gap between the writer and the 2 a.m. shift, and auditors read them as evidence the procedure was written at the machine.
What Do OSHA Auditors Actually Check?
Auditors triangulate three sources: the paper, the floor, and the people. They pull procedures and check them against the standard’s required elements. They walk to the equipment and verify the documented isolation points exist as described. And they interview authorized employees — asking them to explain, or perform, the lockout for a machine they service. Any daylight between the three is a finding: a perfect document nobody follows fails; a diligent crew following undocumented steps fails; and both patterns appear in real citations constantly. The procedure that passes is the one that describes reality precisely.
How Do Procedures Stay Current After the Audit?
Equipment changes; procedures must follow. 1910.147 requires review and revision whenever inspections reveal problems or equipment changes, and the annual program inspection exists partly to force that reconciliation. The failure mode is logistical: procedures updated in a master binder but never at the machine, or vice versa. Bowtie Engineering closes that loop by delivering procedures as laminated point-of-use documents and loading them into its BowVue™ platform with version control — so when a machine is modified, the procedure updates once and is current everywhere, with change history a facility can prove on any date.
What Are the Most Common Procedure-Writing Mistakes?
- One generic procedure covering many machines — the most-cited failure
- Missing energy sources, especially stored, gravity, and thermal energy
- No specified zero-energy verification method — “verify de-energized” is not a method
- Procedures written from drawings without walking the floor
- No restoration sequence, leaving restart improvised
- Documents that never made it to the point of use
How Do You Handle Group Lockout and Shift Change in Procedures?
Two situations break more otherwise-sound LOTO programs than any other: multiple workers on one machine, and work that outlives a shift. The standard’s answer to the first is individual protection inside a group structure — a group lockbox or hasp arrangement where a primary authorized employee controls the equipment isolation, and every worker attaches a personal lock so no one’s safety depends on anyone else’s device. The written program must specify the mechanics exactly: who is primary, how the group device works, and how workers join and leave the group mid-task. Shift change demands equally explicit choreography — an orderly transfer of lockout protection between outgoing and incoming employees that never leaves the equipment unprotected in between.
- Group lockout mechanics: primary authorized employee, group device, personal locks
- Every worker’s protection independent — one person, one lock, one key
- Joining and leaving a group task documented, not improvised
- Shift-change transfer sequence with continuous protection throughout
- Contractor participation defined — whose locks, whose procedures, whose oversight
- Lock removal in an employee’s absence handled only by the documented exception process
Auditors probe these scenarios first because improvisation concentrates there — and procedures that specify them precisely signal a program written by people who understand how the work actually happens. If your current documents are silent on group lockout or shift change, that silence is a finding waiting for a date.
Frequently Asked Questions
Does every machine really need its own written procedure?
Yes, unless it meets all eight conditions of the 1910.147(c)(4)(i) exception — including a single, readily identified and isolated energy source. Most industrial equipment does not qualify.
Who should write LOTO procedures?
Someone qualified to identify every energy source and its controls, working at the machine — in-house engineering, or a specialist provider. Whoever writes them, authorized employees should validate them by walkthrough.
What is zero-energy verification?
The documented test proving isolation worked — attempting a start, testing for absence of voltage, checking gauges — performed after locks are applied and before work begins. Every procedure must specify the method.
How long does it take to build procedures for a whole plant?
A typical machine-specific procedure set — floor inventory through delivered, laminated documents — runs a few weeks from kickoff, depending on asset count and site access.
Can Bowtie Engineering audit our existing procedures instead of rewriting?
Yes. Bowtie Engineering performs procedure-by-procedure field verification against the standard and your equipment, delivering a gap report — and rewrites only what fails.
Need help now? Call Bowtie Engineering at 866-730-6620 or request a free quote online.
Key Takeaways
- OSHA requires machine-specific procedures with named energy sources and exact sequences
- The generic all-machines policy is the single most common LOTO citation
- Audit-ready procedures include isolation points, verification methods, photos, and restoration steps
- Auditors compare the paper, the floor, and the people — all three must match
- Point-of-use delivery and version control keep procedures current after equipment changes
- Get audit-ready procedures written for your floor — contact Bowtie Engineering