Lockout, Hazardous Energy, and Machine Guarding
Key Takeaways
- OSHA 1910.147 (the Lockout/Tagout standard) controls servicing and maintenance, while machine guarding under 1910.212 protects during normal operation.
- Hazardous energy includes electrical, mechanical, hydraulic, pneumatic, chemical, thermal, gravity, and stored or residual energy.
- Locks are generally preferred over tags; a tag-only system must provide protection equivalent to a lock plus added means.
- Periodic inspection of energy-control procedures is required at least annually by an authorized employee not using that procedure.
Control hazardous energy before exposure
Lockout/tagout (LOTO), governed by OSHA 29 CFR 1910.147 (the Control of Hazardous Energy standard), addresses energy that can injure people during servicing, maintenance, cleaning, jam clearing, adjustment, setup, or troubleshooting. Energy is not limited to electricity. It includes mechanical motion, gravity, pressure, springs, hydraulic or pneumatic force, chemical reaction, steam, heat, vacuum, and stored residual energy. The standard's central goal is preventing unexpected energization or startup.
Machine guarding (1910.212 and the subpart O standards) and LOTO are related but distinct. Guarding protects people from points of operation, nip points, rotating parts, and flying chips during normal operation. Lockout controls energy when people must place a body part where the guard is removed, bypassed, or insufficient. A guard is never a substitute for lockout when servicing exposes the worker to unexpected movement.
The required LOTO procedure follows six core steps. Memorize this sequence for the exam:
- Prepare for shutdown - identify all energy sources and magnitudes.
- Shut down the equipment by the normal stopping procedure.
- Isolate the equipment from each energy source (open disconnects, close valves).
- Apply lockout/tagout devices; each authorized employee uses their own lock.
- Release or restrain stored energy - bleed pressure, block raised parts, ground capacitors, dissipate springs.
- Verify isolation by testing controls and confirming zero energy before contact.
| Program element | Why it matters |
|---|---|
| Equipment-specific written procedure | Catches hidden or secondary energy sources |
| Authorized vs. affected employee roles | Defines who applies locks and who is merely notified |
| One-lock-per-worker / group lockbox | Each exposed person controls their own protection |
| Stored-energy control | Addresses gravity, pressure, capacitors, heat, residual motion |
| Verification before exposure | Confirms zero energy, not assumption |
| Annual periodic inspection | Required by 1910.147; finds drift and gaps |
Stored energy is a frequent trap. A closed valve can leave trapped downstream pressure; a raised die can fall by gravity; a capacitor can hold lethal charge after disconnect; a compressed spring can release. Lockout is incomplete if devices are applied but stored energy is not bled, blocked, restrained, or grounded. Worked example: a hydraulic press ram held up by oil pressure must be physically blocked or fully lowered before service, because losing pressure would otherwise drop the ram.
Group lockout needs coordination. When multiple crafts, shifts, or contractors are involved, each exposed person must be protected, typically through a group lockbox where every worker applies a personal lock to the box holding the keys. Shift changes and contractor interfaces are vulnerable because assumptions get lost; the standard requires orderly transfer of device control. Note that locks are generally preferred over tags, and a tags-only system must provide protection equivalent to a lock plus an additional safeguard such as removing a circuit element.
Troubleshooting can require power for testing, which does not make LOTO irrelevant. The task should be planned, limited to minimum necessary exposure, performed by qualified people, and returned to a locked-out state before mechanical work continues.
Machine guarding and the minor-servicing exception
Guarding questions ask whether access to hazardous motion is prevented during operation. Effective guards meet four basic requirements: they prevent contact, are secure and not easily bypassed, protect against falling objects, and create no new hazard such as a pinch point. Common guarding methods include fixed guards, interlocked guards that stop the machine when opened, adjustable and self-adjusting guards, and devices such as two-hand controls, presence-sensing light curtains, pullbacks, and restraints. A light curtain that merely warns but does not stop motion is not adequate protection.
| Guarding method | Best application |
|---|---|
| Fixed barrier guard | Permanent enclosure of a fixed danger zone |
| Interlocked guard | Access needed regularly; machine stops when opened |
| Two-hand control | Keeps both hands off the point of operation during the cycle |
| Presence-sensing device | Stops motion when a body part enters the field |
A frequently tested nuance is the minor servicing exception to 1910.147. Routine, repetitive, integral tasks done during normal production - such as minor lubrication, clearing a small jam, or routine adjustment - may be exempt from full lockout only if effective alternative protective measures (such as an interlocked guard, hold-to-run control, or other equivalent safeguard) provide protection. The moment a guard must be removed or bypassed and the worker is exposed to unexpected energization, full lockout applies. If a scenario offers "the task is quick so the operator just reached past the guard," that is the wrong answer.
Two more details surface on the exam. First, cord-and-plug equipment under exclusive control of the person performing the work may be controlled by unplugging it and keeping the plug in sight or under control, rather than by a formal lock. Second, removal of a coworker's lock is tightly restricted: the employer may remove a lock only by a documented procedure that verifies the owner is not on site, makes a reasonable effort to contact them, and informs them before they return to work. Cutting a lock off casually because a worker went home is a serious violation that defeats the entire purpose of personal control of energy.
Use the exam shortcut:
- Normal operation with reachable moving parts points to guarding.
- Servicing or jam clearing with energy exposure points to lockout.
- Stored pressure, gravity, heat, or charge means isolation alone is not enough.
- The minor-servicing exception needs equivalent alternative protection, not a shortcut.
- Group work and shift changes require lockboxes and orderly transfer.
- Verification happens before exposure, never after.
A mechanic must clear a jam inside a guarded conveyor, and the guard must be opened to reach the jam. What is the best safety focus?
Which condition is an example of stored energy that must be controlled during lockout?
How often must the energy-control procedures required by OSHA 1910.147 be inspected, and by whom?