Step-by-Step Guide to Developing a Lockout Tagout (LOTO) Procedure

A Lockout Tagout (LOTO) procedure is a written safety process used to control hazardous energy before maintenance, repair, cleaning, adjustment, or inspection work begins. Its purpose is simple: prevent a machine, panel, system, or piece of equipment from starting unexpectedly or releasing stored energy while someone is working on it.

For many workplaces, LOTO is not just a good practice. It is part of a broader safety program that helps protect employees from electrical, mechanical, hydraulic, pneumatic, thermal, chemical, gravitational, and other forms of hazardous energy. A strong procedure gives workers a clear sequence to follow instead of relying on memory or informal habits.

Developing a LOTO procedure requires more than placing a lock on a switch. The process should identify every energy source, define who is authorized to apply locks and tags, explain how equipment must be shut down, and describe how energy isolation must be verified before work starts.

In practice, weak LOTO procedures often fail because they are too generic. A single one-page instruction may not be enough for complex equipment with multiple power sources, stored pressure, elevated parts, capacitors, valves, or automated restart systems. Each procedure should match the real equipment and the real work being performed.

This guide explains how to develop a clear, practical, and safer Lockout Tagout procedure step by step, using plain English and a structure that can be adapted to many workplace environments. It is written for beginners, supervisors, safety coordinators, maintenance teams, and anyone who needs to understand how a proper LOTO process is built.

What a Lockout Tagout Procedure Should Accomplish

A Lockout Tagout procedure should explain how hazardous energy will be controlled before servicing or maintenance begins. The goal is not only to shut equipment off, but to isolate it from its energy sources, prevent unexpected reactivation, release or restrain stored energy, and confirm that the equipment is in a safe state before work starts.

A good procedure should be specific enough that an authorized worker can follow it without guessing. It should identify the equipment, describe the energy sources, list the isolation points, show the correct sequence, explain verification, and define how the equipment can safely return to service.

One common mistake is treating normal machine shutdown as the same thing as lockout. Pressing a stop button, turning off a control screen, or using an emergency stop may stop motion, but it may not isolate the equipment from hazardous energy. A proper LOTO procedure focuses on energy isolation, not just equipment operation.

Procedure Element	Purpose	Common Risk If Missing
Equipment identification	Confirms exactly which machine or system the procedure applies to.	Workers may lock out the wrong equipment or miss connected systems.
Energy source list	Shows all hazardous energy that must be controlled.	Stored or secondary energy may remain active.
Isolation steps	Explains how each energy source is physically isolated.	Workers may rely only on controls instead of energy-isolating devices.
Verification method	Confirms that isolation was effective before work begins.	Work may begin while energy is still present.
Return-to-service steps	Controls how locks are removed and equipment is restarted.	Equipment may restart while people, tools, or guards are still in danger zones.

Step 1: Define the Scope of the LOTO Procedure

The first step is to decide exactly what the procedure covers. A LOTO procedure may apply to one machine, one production line, one electrical panel, one pump system, one conveyor, or one group of connected equipment. The scope should be narrow enough to be practical and clear.

Start by naming the equipment, location, asset number, department, and normal function. Then describe the types of work that require lockout, such as maintenance, jam clearing, blade replacement, electrical inspection, belt adjustment, cleaning inside a guarded area, or repair of moving parts.

In many cases, confusion happens when workers assume that a short task does not need LOTO. The procedure should clarify when lockout is required and when a different approved control method may apply. This decision should never be left to guesswork during a rushed repair.

• Identify the exact equipment name, location, and asset number.
• List the tasks that require hazardous energy control.
• Confirm whether the equipment is standalone or connected to other systems.
• Check whether stored energy may remain after shutdown.
• Review the equipment manual and workplace safety requirements.
• Make sure the procedure is specific, not a generic template copied from another machine.

Step 2: Identify Every Hazardous Energy Source

A useful LOTO procedure must identify all sources of hazardous energy. Electrical energy is common, but it is not the only concern. Many machines also contain pneumatic pressure, hydraulic pressure, gravity hazards, springs, thermal energy, chemical feed lines, mechanical motion, or stored energy in rotating parts.

Walk around the equipment with someone who understands how it operates and how it is maintained. Look at disconnects, valves, breakers, plugs, control panels, pressure lines, accumulators, elevated components, moving assemblies, and auxiliary systems. Review drawings, manuals, maintenance history, and any previous incidents or near misses.

A practical observation is that secondary energy sources are often missed. For example, a machine may have a main electrical disconnect but also a separate control circuit, air supply, hydraulic accumulator, or gravity-loaded component. The procedure should not assume that one disconnect controls everything unless this has been verified by a qualified person.

Energy Type	Where It May Be Found	What the Procedure Should Address
Electrical	Panels, motors, disconnects, control circuits, plugs, capacitors.	Isolation point, lockable device, testing or verification method.
Pneumatic	Air lines, cylinders, valves, compressors, stored air tanks.	Shutoff valve, bleed-off method, pressure verification.
Hydraulic	Presses, lifts, cylinders, pumps, accumulators.	Valve isolation, pressure release, blocking of moving parts.
Mechanical	Belts, gears, flywheels, shafts, springs, rotating parts.	Stopping movement, blocking motion, preventing stored motion release.
Gravity	Elevated machine parts, doors, arms, lifts, suspended loads.	Blocking, lowering, securing, or supporting components.
Thermal or chemical	Steam lines, heated surfaces, process fluids, chemical feed lines.	Cooling, draining, isolation, depressurization, exposure controls.

Step 3: Assign Roles and Responsibilities

A LOTO procedure should clearly define who is allowed to apply locks and tags, who may be affected by the work, who supervises the process, and who is responsible for reviewing the procedure. Clear roles help prevent confusion during maintenance, shift changes, contractor work, and group lockout situations.

Authorized employees are typically the trained people who apply locks, tags, and energy control steps. Affected employees are people who operate or work near the equipment but do not perform the lockout themselves. Supervisors help confirm that the procedure is followed, workers are trained, and communication is clear.

Contractors should also be addressed. If outside workers service equipment, the host employer and contractor should coordinate procedures, communication, and responsibilities before work begins. A written procedure should avoid vague wording such as “maintenance will handle it” without naming the role responsible for each action.

• Define who is authorized to perform LOTO.
• Explain how affected employees will be notified before shutdown.
• Identify who confirms that the procedure is current and accurate.
• Describe how contractors must coordinate with the workplace.
• Explain what happens during shift changes or personnel changes.
• Confirm that each authorized worker uses their own lock when required by the program.

Step 4: Write the Lockout Tagout Procedure Step by Step

The written procedure should follow a logical sequence. It should begin before shutdown, continue through isolation and verification, and end with safe return to service. Each step should explain what to do, why it matters, and what mistake to avoid.

The exact procedure depends on the equipment and local requirements, but the structure below gives a practical starting point for developing a complete equipment-specific LOTO procedure.

1. Prepare for shutdown.

   Review the procedure, identify the equipment, understand the energy sources, gather the correct locks, tags, hasps, blocks, and testing tools, and confirm that only trained and authorized people will perform the lockout. Avoid starting the job without knowing every energy source involved.

2. Notify affected employees.

   Tell operators, nearby workers, supervisors, and other affected people that the equipment will be shut down and locked out. This prevents confusion and helps avoid someone trying to restart equipment during maintenance.

3. Shut down the equipment using normal controls.

   Follow the normal stopping process recommended for the machine or system. This may include pressing stop, closing a process, parking moving parts, or completing a controlled shutdown. Do not treat this as the final safety step.

4. Isolate all energy sources.

   Use the correct energy-isolating devices, such as disconnect switches, breakers, valves, blinds, blocks, or mechanical restraints. Control buttons and software screens are not usually enough because they may not physically isolate hazardous energy.

5. Apply locks and tags.

   Place locks and tags on each required isolation point according to the workplace program. Tags should communicate that the equipment must not be operated, while locks physically help prevent reactivation. Avoid sharing keys or using another person’s lock.

6. Release or restrain stored energy.

   Bleed pressure, discharge capacitors when appropriate, lower suspended parts, block moving components, drain lines, cool hot surfaces, or restrain springs as required. Stored energy is one of the most commonly missed hazards in poor procedures.

7. Verify zero-energy state.

   Confirm that the equipment cannot start or release hazardous energy before work begins. Verification may include testing controls, checking pressure gauges, using proper electrical test methods, or confirming that mechanical movement is blocked. Only qualified people should perform verification that requires technical testing.

8. Perform the work under controlled conditions.

   Keep locks and tags in place during servicing or maintenance. If the scope changes, stop and reassess the procedure instead of continuing with assumptions. Keep tools, parts, and people organized around the work area.

9. Return equipment to service safely.

   Inspect the area, remove tools, reinstall guards, confirm that people are clear, notify affected employees, and remove locks and tags according to the approved process. Equipment should not restart until the area is safe and the correct people have completed their required steps.

Step 5: Add Verification and Testing Requirements

Verification is one of the most important parts of a Lockout Tagout procedure. A lock and tag show that isolation has been applied, but verification confirms whether the equipment is actually in a safe state. Without verification, workers may trust a device that is mislabeled, damaged, incomplete, or connected to a secondary energy source.

The verification method should be written into the procedure. For electrical systems, this may require qualified electrical testing using appropriate instruments and safe work practices. For pneumatic or hydraulic systems, it may include checking pressure gauges, bleeding lines, and confirming that stored pressure does not rebuild. For mechanical hazards, it may include blocking or attempting movement only in a controlled and approved way.

A common error is writing “verify isolation” without explaining how. That phrase may be too vague for real work. The procedure should tell the authorized worker what to check, where to check it, and what result confirms that the equipment is safe to service.

Verification Question	Why It Matters	What to Document
Can the equipment start?	Confirms that normal startup controls cannot energize the machine.	Control test completed after isolation, where appropriate.
Is pressure fully released?	Prevents sudden movement, spraying, or component release.	Gauge reading, bleed point, or depressurization method.
Are elevated parts secured?	Prevents gravity-related movement during servicing.	Blocking method or support device used.
Are all energy points locked?	Prevents missed energy sources from remaining active.	Isolation point checklist completed.
Are nearby connected systems controlled?	Prevents energy transfer from adjacent equipment.	Connected system review or boundary check.

Step 6: Include Group Lockout, Shift Change, and Contractor Rules

Some LOTO work involves more than one person. Group lockout is common during larger maintenance tasks, production line shutdowns, electrical projects, or work involving multiple trades. The procedure should explain how each authorized person is protected and how responsibility is transferred if the work continues across shifts.

For group work, many workplaces use a lockbox, group hasp, or other controlled method approved by their safety program. The key point is that each authorized worker should have protection that cannot be removed casually by someone else. The procedure should explain who coordinates the lockout and how every worker confirms their own protection.

Shift change is another high-risk moment. If one crew leaves and another arrives, locks and information must not be transferred informally. The procedure should describe how incoming workers review the status, apply their own protection, and confirm that hazardous energy remains controlled before continuing the job.

• Define who coordinates group LOTO.
• Require each authorized worker to understand the energy isolation points.
• Explain how individual protection is maintained during group work.
• Document the status of work before shift change.
• Require incoming workers to verify the lockout before starting work.
• Coordinate contractor lockout methods before the job begins.

Common Mistakes When Developing a LOTO Procedure

Many LOTO problems begin during procedure development, not during the actual maintenance task. If the written procedure is vague, outdated, or copied from another machine, workers may have to make decisions in the field without enough information.

One common mistake is failing to include stored energy. A machine may appear off while a cylinder, spring, elevated part, capacitor, or pressurized line still contains energy. Another mistake is using tags without proper lockout when lockout is possible and required by the workplace program or applicable rules.

Another frequent issue is poor equipment labeling. If isolation points are not labeled clearly, a worker may not know which valve, breaker, or disconnect controls the equipment. The written procedure should match physical labels in the workplace as closely as possible.

Common Mistake	Possible Consequence	Better Practice
Using a generic procedure for different machines.	Important isolation points may be missed.	Create equipment-specific procedures for each machine or system.
Listing only electrical energy.	Pressure, gravity, heat, or motion hazards may remain.	Perform a full hazardous energy survey.
Writing “verify isolation” without details.	Workers may not know how to confirm safety.	Describe the exact verification method for each energy source.
Ignoring shift changes.	Protection may be removed or transferred incorrectly.	Add a written shift-transfer process.
Not reviewing the procedure after equipment changes.	The procedure may no longer match the machine.	Review LOTO procedures after modifications, incidents, or process changes.

How to Review, Train, and Keep the Procedure Updated

A Lockout Tagout procedure should not be written once and forgotten. Equipment changes, production changes, new accessories, repairs, relocation, control upgrades, and process modifications can all make an old procedure inaccurate. Regular review helps confirm that the written steps still match the real equipment.

Training is also essential. Authorized employees need to understand how to apply the procedure, control hazardous energy, verify isolation, and follow return-to-service steps. Affected employees need to understand what LOTO means, why equipment is unavailable, and why they must not try to operate locked or tagged equipment.

Periodic inspection should be part of the program. This review should check whether workers follow the written procedure, whether the procedure is accurate, and whether any corrective action is needed. In many workplaces, inspection results are documented so gaps can be corrected instead of repeated.

• Review procedures after equipment modifications.
• Retrain authorized employees when procedures change.
• Confirm that affected employees understand warning tags and restrictions.
• Inspect whether the written procedure matches actual field practice.
• Correct unclear labels, missing isolation points, or outdated instructions.
• Keep completed reviews and training records according to the workplace program.

When to Involve a Qualified Safety Professional

A qualified safety professional should be involved when equipment is complex, energy sources are difficult to identify, electrical testing is required, stored energy is significant, or the workplace does not have a mature hazardous energy control program. Professional input is especially important for new equipment, modified production lines, automated systems, and high-risk maintenance work.

You should also seek professional support if workers disagree about the correct isolation point, if a procedure has never been validated, if a near miss occurred, or if contractors will work on unfamiliar equipment. These are warning signs that the procedure may not be strong enough for real conditions.

For workplaces subject to specific regulations, the procedure should be checked against applicable legal requirements, official guidance, equipment manuals, and internal safety policies. Regulations and terminology can vary by country, state, province, industry, and type of work, so relying only on a generic online template is not enough.

Conclusion

A strong Lockout Tagout (LOTO) procedure starts with a careful understanding of the equipment, the work being performed, and every hazardous energy source that must be controlled. The best procedures are specific, practical, easy to follow, and detailed enough to remove guesswork before maintenance begins.

The safest approach is to build the procedure step by step: define the scope, identify energy sources, assign responsibilities, write the shutdown and isolation sequence, include stored energy controls, verify isolation, and explain how equipment returns to service. Training, periodic review, and clear communication help keep the procedure useful after it is written.

If the equipment is complex, the hazards are unclear, or the work involves electrical, hydraulic, pneumatic, chemical, thermal, or high-risk stored energy, involve a qualified safety professional before approving the procedure. A written LOTO procedure is only effective when it matches the real equipment, the real hazards, and the people who will use it.

FAQ

1. What is the main purpose of a Lockout Tagout procedure?

The main purpose of a Lockout Tagout procedure is to control hazardous energy before servicing or maintenance work begins. It helps prevent equipment from starting unexpectedly, moving suddenly, releasing stored pressure, energizing electrical parts, or exposing workers to dangerous conditions. A good procedure explains how to shut down equipment, isolate all energy sources, apply locks and tags, release stored energy, verify isolation, and return the equipment to service safely. It should be specific to the equipment instead of being a vague general instruction.

2. Who should develop a LOTO procedure?

A LOTO procedure should be developed by people who understand the equipment, the maintenance tasks, and the hazardous energy involved. This often includes safety professionals, maintenance supervisors, authorized employees, engineers, electricians, equipment specialists, or other qualified personnel. Operators may also provide useful practical information because they understand how the equipment behaves during normal use. The final procedure should be reviewed by someone competent in workplace safety requirements and approved according to the employer’s safety program.

3. Is turning off a machine the same as locking it out?

No. Turning off a machine is not the same as locking it out. A stop button, control screen, selector switch, or emergency stop may stop operation, but it may not physically isolate the machine from hazardous energy. Lockout Tagout focuses on isolating energy sources, securing isolation points with locks and tags, controlling stored energy, and verifying that the equipment cannot restart or release energy. Normal shutdown is usually only one step in the full LOTO process.

4. What types of energy should be included in a LOTO procedure?

A LOTO procedure should include every form of hazardous energy connected to the equipment. This may include electrical, mechanical, hydraulic, pneumatic, chemical, thermal, gravitational, and stored energy. Some equipment may also involve steam, compressed air, springs, elevated parts, flywheels, capacitors, or process fluids. The procedure should not assume that the main power disconnect controls everything. A careful energy survey is needed to identify primary, secondary, and stored energy sources before the procedure is approved.

5. What should be included in a written LOTO procedure?

A written LOTO procedure should include the equipment name, location, purpose, energy sources, isolation points, required locks and tags, shutdown steps, energy release steps, verification methods, group lockout rules, shift-change instructions, and return-to-service steps. It should also explain who is authorized to perform the procedure and how affected employees are notified. The procedure should be clear enough that trained workers can follow it consistently without guessing or relying on memory.

6. Why is verification important in Lockout Tagout?

Verification confirms that hazardous energy has actually been controlled. Applying a lock and tag is important, but it does not automatically prove that the equipment is safe to work on. Verification may include testing controls, checking pressure gauges, confirming that moving parts are blocked, or using approved electrical testing methods. The correct method depends on the equipment and energy source. Without verification, workers may begin maintenance while hidden, stored, or secondary energy remains present.

7. Can one LOTO procedure be used for multiple machines?

One procedure should not be used for multiple machines unless the equipment, energy sources, isolation points, and control steps are truly the same and the workplace program allows it. In many cases, similar machines still have different valves, breakers, accessories, stored energy hazards, or restart conditions. A generic procedure may miss important details. Equipment-specific procedures are usually safer because they match the real machine and reduce confusion during maintenance or repair.

8. What is the difference between authorized and affected employees?

Authorized employees are the trained workers who perform Lockout Tagout steps, such as shutting down equipment, isolating energy sources, applying locks and tags, releasing stored energy, and verifying isolation. Affected employees are people who operate or work near the equipment but do not perform the lockout themselves. Affected employees still need to understand what the locks and tags mean, why the equipment cannot be used, and why they must not attempt to restart it.

9. How often should LOTO procedures be reviewed?

LOTO procedures should be reviewed whenever equipment, energy sources, maintenance tasks, or workplace conditions change. They should also be inspected periodically according to the employer’s safety program and applicable requirements. A review should confirm that the written procedure matches the actual equipment, that workers understand the steps, and that no isolation points or stored energy hazards have been missed. If a near miss, incident, or confusion occurs, the procedure should be reviewed before similar work continues.

10. What is group lockout?

Group lockout is used when more than one authorized worker is involved in servicing or maintenance. The purpose is to make sure each person has individual protection while hazardous energy is controlled. Depending on the workplace program, this may involve a lockbox, group hasp, primary authorized employee, or other approved method. The procedure should explain how each worker applies protection, how the lockout is coordinated, and how protection is maintained during breaks, shift changes, or contractor work.

11. What are the biggest warning signs of a weak LOTO procedure?

Warning signs include missing energy sources, unclear isolation points, no verification method, no stored energy steps, outdated equipment names, poor labeling, no group lockout instructions, and procedures copied from other machines. Another warning sign is when workers say they “just know what to do” but the written procedure does not explain the process. A weak procedure creates room for assumptions, especially during urgent repairs, shift changes, or work involving unfamiliar equipment.

12. When should a company get professional help with LOTO?

Professional help should be considered when equipment is complex, the energy sources are unclear, the work involves electrical testing, or workers are unsure how to verify isolation. It is also wise to involve a qualified safety professional after equipment modifications, near misses, incidents, or major process changes. Contractors, automated systems, hydraulic equipment, high-pressure systems, and equipment with stored energy often require careful review. A professional can help ensure the procedure matches applicable requirements and real workplace conditions.

Official References

• OSHA — 29 CFR 1910.147, The Control of Hazardous Energy
• OSHA — Control of Hazardous Energy Lockout/Tagout Overview
• NIOSH — Hazardous Energy Control
• CCOHS — Lockout/Tagout Guidance