14.2 Lockout/Tagout & Permit-Required Confined-Space Entry

Key Takeaways

  • Identify and control every energy source and verify isolation.
  • Treat wastewater tanks and wet wells as potential engulfment and atmospheric hazards.
  • Maintain distinct entry roles, communication, and rescue capability.
  • Evacuate on alarms or changing conditions and reissue/reassess the permit.
Last updated: September 2026

14.2 Lockout/Tagout & Permit-Required Confined-Space Entry

2025 WPI alignment: This section teaches establishing and updating lockout/tagout and confined-space procedures in Security, Safety, and Administrative Procedures, the 15-question area containing 9 recall, 6 application, and 1 calculation item.

Why this responsibility matters

Wastewater equipment can contain electrical, hydraulic, pneumatic, chemical, thermal, gravity, pressure, and engulfment energy, while tanks, wet wells, pits, and vaults may be permit spaces. Isolation and entry controls must address every hazard.

Core program elements

ElementClass III responsibility
Energy controlIdentify, shut down, isolate, lock/tag, dissipate or block stored energy, and verify a zero-energy state before servicing.
Group LOTOA documented system protects each authorized employee during multi-person or multi-shift work.
Confined spaceLimited entry/exit and noncontinuous occupancy define a confined space; a serious atmospheric, engulfment, configuration, or other hazard makes it permit-required.
Atmospheric testingUse a calibrated direct-reading instrument in the specified order and locations, with continuous or periodic monitoring as the permit requires.
Isolation from flowBlanking, line removal, double block and bleed where allowed, or another effective method protects against wastewater/chemical engulfment.
Entry team and rescueEntrant, attendant, entry supervisor, communication, retrieval, and a capable rescue service have distinct responsibilities.

Work sequence

  1. Survey equipment/space and identify every energy, line, atmosphere, mechanical, biological, traffic, fall, heat, and access hazard.
  2. Shut down normally, isolate each source, apply personal/group locks and tags, block gravity, drain/vent pressure, and control flowing material.
  3. Verify isolation by test instrument and attempted start under the procedure, then return controls to safe status.
  4. For entry, complete permit conditions, calibrate/test atmosphere remotely, ventilate as required, establish attendant/communication, and confirm rescue capability.
  5. Monitor the space and outside process continuously as required; evacuate immediately on alarm, changed condition, or attendant order.
  6. Account for people/tools, close entry, inspect equipment, remove locks only by authorized rules, restore guards/lines, and communicate restart.

Warning signs and response

FindingMeaningDefensible response
Pressure returns after drainIsolation leaks or another connection feeds the systemStop and locate/control the source before opening.
Gas reading differs by depthStratified atmosphere existsTest all relevant elevations and ventilate/reevaluate.
Attendant asked to operate equipmentThe attendant cannot maintain exclusive monitoring dutiesAssign separate staff or stop entry.
Contractor lock missing at turnoverGroup/shift transfer failedDo not restore energy; resolve through the formal removal/transfer procedure.

Calculation, decision, or documentation connection

Atmospheric readings are compared with the permit’s acceptable conditions and instrument range; do not average a dangerous local reading into a safe overall number. Ventilation and purge questions may provide volume and airflow, but real entry depends on monitoring rather than elapsed time alone. Energy-control verification is a physical test, not a calculation or an HMI indication.

Worked supervisory scenario

A wet-well entry has acceptable air at the top, but a lowered monitor alarms near the bottom. The crew does not average the readings or send an entrant to investigate. It keeps the space closed, verifies instrument function, ventilates and isolates as planned, retests throughout the vertical profile, and proceeds only when the permit conditions and rescue provisions are satisfied.

Common exam traps

  • A tag without effective energy isolation is not a substitute for lockout when lockout applies.
  • Turning a selector switch off does not isolate upstream electrical power or stored pressure.
  • An attendant must not enter for rescue unless relieved and part of a qualified rescue response.
  • Pre-entry testing does not eliminate the need for required ongoing monitoring.

Field-to-exam checklist

  • Identify and control every energy source and verify isolation.
  • Treat wastewater tanks and wet wells as potential engulfment and atmospheric hazards.
  • Maintain distinct entry roles, communication, and rescue capability.
  • Evacuate on alarms or changing conditions and reissue/reassess the permit.

Simultaneous operations

Entry and maintenance often occur while nearby pumps, chemical feeds, vehicles, or contractors continue work. The entry supervisor must evaluate how those activities can introduce flow, exhaust, electrical energy, falling objects, or communication interference. Coordinate permits and boundaries before work begins and stop when another activity changes the hazard. Isolation that was adequate for an idle plant may be inadequate when an upstream unit returns to service.

Atmospheric acceptance values and testing order

Test in a fixed order: oxygen, then combustible gas, then toxics. The order is not arbitrary — most catalytic combustible-gas sensors require oxygen to respond correctly, so an oxygen-deficient atmosphere can produce a falsely reassuring combustible reading. Testing oxygen first establishes whether the other readings can be believed.

The widely applied acceptable entry conditions are:

ParameterAcceptable condition
Oxygen19.5 % to 23.5 % by volume
Combustible gasBelow 10 % of the lower explosive limit
Toxic gasesBelow the applicable permissible exposure limit

In wastewater the usual toxic contaminants are hydrogen sulfide and carbon monoxide, and the usual combustible is methane.

Allow for sample transport time. A pump-driven monitor drawing through 25 feet of tubing needs time — commonly a few seconds per foot — before the reading represents the atmosphere at the probe. Reading too early is a false negative produced by impatience.

Wet wells, digesters, and covered channels stratify. Hydrogen sulfide is heavier than air and collects low; methane is lighter and collects at the top. A single reading taken at the opening therefore proves nothing about conditions at the bottom, and averaging a safe top reading with a hazardous bottom reading is one of the most dangerous errors an entry team can make. Test at the top, middle, and bottom of the space before entry and monitor continuously during it.

Verification of isolation is a physical act. After locks and tags are applied and stored energy is dissipated or blocked, attempt to start the equipment from the normal control point, then return the control to the safe position. For electrical work, a qualified person confirms the absence of voltage with a tested instrument. A grey icon on a screen verifies nothing.

Retrieval systems are required for most vertical entries deeper than about five feet unless the retrieval equipment would itself increase the overall hazard.

Test Your Knowledge

A wet-well monitor is safe at the opening but alarms near the bottom. What is the correct response?

A
B
C
D
Test Your Knowledge

What proves that equipment is isolated after locks and tags are applied?

A
B
C
D