Lockout tagout audit: how to do one that actually holds up

Last updated 2026-07-09

What is a lockout tagout audit and why does OSHA require one?

A lockout tagout (LOTO) audit is a documented review of your energy control procedures that confirms three things: the written procedures are accurate, your people know how to use them, and they actually follow them on the floor. OSHA mandates this in 29 CFR 1910.147(c)(6), which states that a "periodic inspection of the energy control procedure shall be performed at least annually." ^[1]

The audit is not optional and it is not the same as your annual employee training review. It is machine-level and procedure-level. You check each written procedure against what workers actually do when they de-energize that specific machine.

Why does this matter? OSHA estimates that lockout tagout protects roughly 3 million workers who service or maintain equipment, and that proper LOTO prevents about 120 fatalities and 50,000 injuries every year. ^[2] Those numbers come from OSHA's own hazard explanation pages, so treat them as agency estimates rather than peer-reviewed data. The injury data from BLS backs up the general scale: contact with machinery and caught-in/between incidents rank among the leading causes of workplace deaths every year. ^[3]

For small businesses, the audit catches two failures that show up again and again. Procedures written years ago that no longer match the machine as it sits today. And employees who were trained once, years back, and have quietly developed shortcut habits since. Both create the exact conditions that cause amputations and fatalities.

What does 29 CFR 1910.147 actually require in an annual audit?

The audit rules live in 29 CFR 1910.147(c)(6)(i) through (c)(6)(ii). Here is what the regulation requires, in plain terms.

Who conducts the audit: An authorized employee must perform it. An authorized employee is someone trained and designated to use energy-isolating devices. Your safety manager can observe and run the paperwork, but a worker who actually does the lockout has to be involved. ^[1]

What must be reviewed: The authorized employee conducting the audit has to review the energy control procedure with each employee who uses that procedure. One-on-one or small group, not a mass meeting. The review covers whether the procedure is being followed, whether it is still adequate, and whether it needs updating.

Documentation: The regulation requires a certification that includes the date of the inspection, the machine or equipment covered, the names of employees included, and the name of the person who performed the inspection. ^[1] There is no OSHA form for this. Any document that captures those four elements works.

Frequency: At least once per year. If you have seasonal equipment that runs for only three months, you still audit it within every 12-month window while it is in use.

Tagout-only programs get extra scrutiny: If your program uses tagout devices instead of lockout devices, 29 CFR 1910.147(c)(6)(ii)(B) requires an added review to confirm that this level of protection is still appropriate. Tagout-only is allowed only when the equipment cannot be locked out, and OSHA compliance officers look hard at those situations. ^[1]

Here is what the standard leaves open: how long the audit takes, the format of the procedure review, and whether you use a checklist. That flexibility is useful. It also means some employers do a cursory five-minute walk-through and call it done. OSHA compliance officers have rejected audits that lacked substance, so your documentation has to show real engagement with each procedure.

How common are LOTO violations and what do they cost?

OSHA cited the lockout/tagout standard 2,112 times in fiscal year 2024, ranking it 5th on the agency's top-10 most-cited list. ^[4] That is not a fluke year. LOTO has landed in the top 10 every year for well over a decade.

Penalties vary by how OSHA classifies the violation:

Violation type	Maximum penalty per violation (2024)
Serious	$16,131
Willful or Repeated	$161,323
Other-than-Serious	$16,131
Failure to Abate	$16,131 per day

Those are OSHA's statutory maximums, adjusted every year for inflation. ^[5] Actual penalties depend on employer size, good-faith efforts, and history. Small employers (under 25 employees) often get reductions of 60 to 80 percent. But a willful citation after a worker injury usually sees little or no reduction.

The citation is rarely the expensive part. The real money goes to workers' compensation, civil liability, and lost production after a serious incident. Nobody has clean aggregate data on total post-incident costs for LOTO failures specifically. The closest number OSHA offers is a rough $40,000 average for indirect costs of a single serious injury, separate from direct medical and compensation costs. ^[6] Treat that as a ballpark.

For a small manufacturer running 10 procedures with clean documentation, a proper annual audit costs three to four hours of an authorized employee's time plus the safety manager's review. That is the cheapest insurance you will ever buy against any of those numbers.

What are the most common LOTO audit failures inspectors find?

OSHA's citation data and letters of interpretation point at the same failures over and over. Knowing what inspectors look for lets you audit your own program before they do.

Missing or inadequate written procedures. The standard at 29 CFR 1910.147(c)(4) requires a written energy control procedure for each piece of equipment unless the equipment has no stored or residual energy and a single energy source that can be locked out. Most real-world equipment does not qualify for that exception, yet plenty of small businesses run on generic, gap-filled procedures. ^[1]

Procedures that don't match the actual machine. Machines get modified. Valves get added. Controls move. A procedure written for the original setup drifts out of accuracy. The audit is supposed to catch this. But if the person auditing never walks to the machine and checks it step by step, they miss it.

Employees who can't explain or demonstrate the procedure. During an inspection, a compliance officer may ask a worker on the floor to walk through the energy control process. If the employee cannot do it, or does it differently than the written procedure, that is a citation.

No documentation of the audit itself. The regulation requires a certification document. Some employers do the audit and skip the paperwork. That is an easy citation to write because the paper either exists or it does not.

Contractors not covered. When outside contractors do service or maintenance, 29 CFR 1910.147(f)(2) requires the host employer and contractor to inform each other of their LOTO procedures and check for conflicts. Many small businesses hand a contractor a badge and forget this rule entirely. ^[10]

Inadequate equipment. Locks must be individually keyed. Group lockout boxes belong on any machine with multiple workers on it. Hasps, tags, and chains have to be standardized. Inspectors check whether the hardware can actually achieve isolation.

How do you conduct a lockout tagout audit step by step?

Here is a process that covers the regulatory requirements and holds up under inspection. It is not fancy. It is complete.

Step 1: Inventory your equipment and procedures. Pull every written energy control procedure you have. List every piece of equipment that needs one. Cross-reference the two. If there is equipment without a procedure, stop and write the missing procedures before you audit anything. You cannot audit a procedure that does not exist.

Step 2: Assign an authorized employee to each audit. Pick someone who regularly performs lockout on that specific machine. This is not a job for the safety manager alone. The regulation requires an authorized employee's involvement. With 15 machines, you may need several different workers across a few days.

Step 3: Walk the procedure at the machine. The authorized employee and the auditor go to the machine together and walk through every step of the written procedure. Check each energy isolation point: main disconnects, pneumatic shutoffs, hydraulic bleeds, gravity (stored energy from elevated parts), capacitors, springs. Compare what the procedure says to what is actually bolted to the floor.

Step 4: Interview the employees who use the procedure. Ask them to explain the process in their own words. Ask what they would do if the lock did not fit a particular valve. Ask whether they have ever skipped a step, and why. These conversations surface real problems that paper reviews never touch.

Step 5: Test the procedure. Have the authorized employee run a full lockout sequence. Watch whether the machine is genuinely de-energized before work begins. Try to start it while it is locked out (everyone clear) to confirm the isolation is complete.

Step 6: Document the findings. Use any format you like, but capture the date, machine name or ID, procedure reference, names of all employees in the review, the name of the authorized employee who conducted the audit, and the findings. If anything needed correction, write down what was found and what was fixed.

Step 7: Update procedures immediately. If the audit found the procedure is wrong, fix it before that machine is serviced again. Do not let it slide. An audit that finds problems and does nothing about them is worse than no audit, because now you have a written record that you knew.

Step 8: File and schedule the next one. Keep the audit certification for at least three years. (There is no explicit retention period in 1910.147, but OSHA's general records practice and plain common sense support three years.) Set a calendar reminder for 11 months out so you never miss the annual deadline.

If you need to build or update your written LOTO program before the audit, the SafetyFolio program generator can produce a compliant written program in about 15 minutes, which gives you the documented baseline the audit is supposed to evaluate.

What should a LOTO audit checklist include?

There is no OSHA-required checklist format, which is a gift: you can build one that fits your shop. Below is a field-tested structure to adapt. Mark each item pass or fail and write a note on any failure.

Program-level checks (once per audit cycle):

• Written energy control program exists and is dated within the last review cycle
• Program covers scope, purpose, rules, and employee training requirements
• All energy sources (electrical, hydraulic, pneumatic, thermal, gravitational, chemical, mechanical) are addressed in policy
• Contractor coordination procedures are written and communicated
• Hardware inventory (locks, hasps, tags, lockout boxes) is current and standardized

Procedure-level checks (for each machine):

• Written procedure exists for this specific machine
• Procedure lists all energy isolation points with exact location descriptions
• Procedure steps match the actual machine configuration today
• Hazard identification (voltage levels, pressure ratings, spring tensions) is accurate
• Equipment ID on the procedure matches the actual machine tag

Employee-level checks (for each authorized employee on this procedure):

• Employee can identify all isolation points without looking at the procedure
• Employee can explain the steps in correct sequence
• Employee demonstrates proper lockout without prompting
• Employee knows what to do when multiple energy workers are on one machine
• Employee knows how to remove another worker's lock in an emergency

Hardware checks:

• Each authorized employee has their own individually keyed lock
• Locks, tags, and hasp hardware are standardized and identifiable
• Tags are durable, standardized, and say "Do Not Energize" or equivalent
• Group lockout boxes (if used) are in place and sized for the number of workers

A checklist this thorough is not required. It makes your audit defensible, and it makes next year's audit faster because you already have a baseline.

How does a LOTO audit differ from an OSHA inspection?

People confuse these two constantly, and the difference matters.

Your annual audit is internal. You plan it, run it, document it, and use the findings to fix your program. It is a proactive tool. The regulations require it. You control the timing, the scope, and what happens next.

An OSHA inspection is external. A compliance safety and health officer (CSHO) shows up (sometimes with advance notice, often without) and reviews your program, your documentation, and your actual field practices. They can interview employees without management present. They can ask for copies of your written procedures, training records, and audit certifications.

If your annual audits are done right and documented, an inspection gets a lot less stressful. Your certifications show the agency you took the standard seriously. If your audit found a problem and you fixed it, that documented correction demonstrates good faith.

If your audits are missing, thin, or clearly show you found problems and sat on them, those same documents become evidence against you. This is why some employers get tempted to skip documentation. Do not. The alternative to documented audits is not "no evidence either way." It is a citation for failing to conduct the required inspection, plus whatever else the CSHO finds.

For background on how OSHA inspections work in general, see our coverage of OSHA enforcement priorities and inspection procedures.

One practical note: OSHA compliance officers usually check three things first in a LOTO inspection. Does a written program exist. Are there annual audit certifications. Do employees on the floor actually know and follow the procedures. If all three are solid, the inspection moves quickly. If any one is missing, it expands.

How often do you need to audit each lockout tagout procedure?

The minimum is once per calendar year. ^[1] That applies to each procedure, not the program overall. With 20 pieces of equipment that require individual procedures, you need 20 procedure-level audits within every 12-month period.

Some situations call for more frequent audits even though the regulation does not force them:

• After any near-miss or injury on a piece of equipment
• After any modification to the equipment's energy systems
• After personnel changes where new authorized employees are assigned to a machine
• When a procedure has sat unused long enough that people may have forgotten it
• When you introduce new energy control hardware

OSHA's letters of interpretation confirm that the annual minimum does not stop you from auditing more often, and more frequent audits read as good-faith safety culture during an inspection. ^[7]

For seasonal operations, think about timing. If you run a machine from April through September, audit it in that window. An audit done in January for a machine that has not run since October and will not run again until May is technically compliant, but it does not catch the February modification or the new hire who started in March.

Do you need separate LOTO procedures for every piece of equipment?

This is one of the most common questions small manufacturers ask, and the answer has some nuance.

29 CFR 1910.147(c)(4)(i) allows one procedure to cover multiple machines only when those machines are the same type with the same energy characteristics, the same sequence of shutdown steps, and the same energy control methods. ^[1] Picture a bank of identical conveyors that all de-energize the same way. That can run on one general procedure.

The moment machines differ in energy source type, voltage level, number of isolation points, or shutdown sequence, they need separate procedures. OSHA's compliance directive CPL 02-00-147 makes clear that "same" means genuinely identical, not similar. ^[8]

For small shops, the safest approach is one procedure per unique machine. It is more paperwork. It also kills citation risk and prevents the worst case, where a worker follows a general procedure on a machine with a unique stored energy hazard the general procedure never mentions.

Want a fast test for whether a procedure is specific enough? Ask this of each one: could a new authorized employee follow this procedure to completion without asking a single question? If the answer is no, the procedure is probably too generic.

What records do you need to keep from a LOTO audit?

The regulation uses the word "certification" for the document you create. ^[1] At minimum, that certification must include:

1. The date of the inspection 2. The machine or equipment covered 3. The names of employees included in the review 4. The name of the person who performed the inspection

Beyond that minimum, good recordkeeping adds the findings from your checklist, any corrective actions taken, updated procedures with revision dates, and signatures from the employees who took part.

OSHA does not set a retention period for LOTO audit certifications inside 1910.147 itself. The agency's general practice is to look back three years during inspections, which matches the statute of limitations for willful violations. Three years of audit records is a reasonable floor. Some larger employers keep five.

Store these somewhere you can reach fast. When an inspection starts, you will be asked to produce them quickly. A binder in the maintenance manager's office works. A shared folder on your server works. Whatever you pick, make sure anyone running an audit knows where the finished document goes.

For general guidance on maintaining OSHA documentation and building a paper trail that protects you, the incident report process is a close cousin: both are about creating records at the time it happens that describe what occurred, who was involved, and what you did about it.

How do you bring in contractors without creating LOTO liability?

This is one of the most under-managed risks in small business LOTO compliance. When you hire a contractor to service your equipment, the LOTO obligation does not fully transfer to them. You share the responsibility.

29 CFR 1910.147(f)(2) requires that when both host employees and contractor employees perform service or maintenance, the host employer has to inform the contractor of the LOTO procedures that apply, and the contractor has to communicate their own procedures back. The host employer also has to make sure the contractor understands and follows the host's energy control program. ^[10]

In practice, that means:

• Before any contractor starts maintenance work, give them a copy of the relevant energy control procedure
• Confirm in writing that they read it and that their procedures do not conflict with yours
• If the contractor uses tagout-only and your procedure calls for lockout, settle that conflict before work begins
• Do not assume a contractor's OSHA 10 or OSHA 30 card (see OSHA 30) means they know your facility's specific energy isolation points

The common mistake is figuring the contractor is responsible for their own workers, so the host is off the hook. That is not how 1910.147 reads, and OSHA citations after contractor incidents have landed on host employers. Document the coordination meeting, get signatures, and keep it with your audit file.

What should you fix after a LOTO audit finds problems?

Finding problems is the whole point. An audit that finds nothing is either a very well-run program or an audit that is not looking hard enough. Here is how to handle the most common findings.

Inaccurate procedure: Stop using it for that machine until it is corrected. Update the document, revise the date, and re-review with the authorized employees who use it. Do not let the machine go back into service under a wrong procedure.

Employee unable to demonstrate the procedure: That employee cannot service that machine until they have been retrained and can demonstrate competence. Document the gap, the retraining, and the follow-up demonstration.

Missing hardware: Order it immediately. Use alternative controls (extra spotters, equipment shutdown with documented supervisor sign-off) as an interim measure only, never as a permanent fix.

Procedure covers equipment that has been modified: This is really a configuration management failure, more than a LOTO failure. Your corrective action has to include a process for telling the safety team whenever equipment gets modified, so procedures can be updated before the next service cycle.

Contractor coordination gap: Write a contractor LOTO coordination form and make it part of contractor onboarding. One page, signed by both parties before work begins.

Every corrective action gets documented with a completion date and the name of the person responsible. That turns your audit from a compliance checkbox into a real improvement tool, and it builds a record that shows OSHA you take findings seriously instead of papering over them.

If the audit reveals systemic gaps and your written energy control program itself needs a rebuild, the SafetyFolio safety program generator can give you a compliant written program structure in about 15 minutes, which you then customize with your specific machine procedures.

How does LOTO training connect to the audit requirement?

Training and auditing are related but separate obligations under 1910.147. Training comes first, under 29 CFR 1910.147(c)(7). The audit, under 29 CFR 1910.147(c)(6), confirms that the training worked and the procedures are still accurate. ^[1]

The audit is not a substitute for retraining, but it can trigger it. If the audit finds an employee cannot demonstrate the procedure correctly, that is evidence retraining is needed. Your audit documentation should reflect that, and the retraining should be recorded separately in your training records.

Retraining is required, not optional, when the audit reveals inadequacy in an employee's knowledge or use of the energy control procedures. The standard uses the word "retrain" specifically in 29 CFR 1910.147(c)(7)(iii)(B). ^[9]

For small businesses that combine training and auditing into the same session (common, and generally fine), document them separately. The audit certification needs the date, machine, employees, and auditor. The training record needs what was covered, who was trained, who delivered it, and when. Combining the paperwork into one form is acceptable as long as both sets of required elements show up.

See our related coverage on OSHA training requirements for the general framework of how OSHA thinks about initial training versus refresher training across different standards.

Frequently asked questions

Can a safety manager conduct the LOTO annual audit, or does it have to be an authorized employee?

The regulation (29 CFR 1910.147(c)(6)(i)) requires that an authorized employee conduct the inspection of each energy control procedure. A safety manager can facilitate and document the audit, but an authorized employee (someone trained and designated to perform lockout on that equipment) has to be directly involved in the review. If your safety manager is also designated as an authorized employee for specific machines, they can conduct those audits.

What happens if an OSHA inspector finds no annual audit certification on file?

Missing audit certifications are a citable violation of 29 CFR 1910.147(c)(6)(ii). It is typically classified as serious, with penalties up to $16,131 per instance in 2024. The absence of records also signals to the inspector that your overall LOTO program may be weak, which tends to expand the scope of their review into training records, written procedures, and field practices.

Do you need a LOTO audit for every machine in the facility, or just the high-hazard ones?

Every machine that has an energy control procedure requires an annual audit of that procedure. If you have correctly determined that certain low-complexity machines qualify for the general procedure exception in 29 CFR 1910.147(c)(4)(i), those machines are covered by auditing the general procedure. There is no OSHA provision that lets you skip audits for lower-hazard machines once a procedure exists.

How long does a LOTO audit take for a small manufacturing facility?

For a small shop with 10 to 15 procedures, plan on one to three hours per procedure for the first thorough audit (walk-through, employee interviews, documentation). Later annual audits on well-maintained procedures usually take 30 to 60 minutes each. The full cycle for a small facility is generally done in one to three days spread across a week, working around production schedules.

Can you conduct a LOTO audit while the equipment is running?

The employee interview and procedure review portions can happen without shutting the machine down. But verifying that the procedure accurately describes the isolation points, and testing that isolation actually de-energizes the machine, requires the machine to be de-energized. You cannot confirm a lockout works without performing it. The hands-on verification piece needs a scheduled maintenance window.

Does OSHA require a LOTO audit for office equipment or computers?

No. The lockout/tagout standard applies to equipment that could unexpectedly energize, start up, or release stored energy during servicing or maintenance. Standard office equipment like computers and copiers that are simply unplugged during service, with no potential for stored energy release, typically falls outside the scope of 29 CFR 1910.147. The standard has explicit exceptions for cord-and-plug connected equipment under 1910.147(a)(2)(ii).

What is the difference between lockout and tagout, and does it affect how you audit?

Lockout uses a physical locking device to keep a machine from being re-energized. Tagout uses a warning tag only, with no physical lock. Tagout-only programs are allowed only when the equipment cannot accept a lockout device. OSHA requires an extra audit step for tagout-only procedures: you have to review whether that level of protection is still appropriate. Tagout-only situations draw more scrutiny during inspections, so document the justification carefully.

Do LOTO audit requirements apply to construction work?

The LOTO standard at 29 CFR 1910.147 covers general industry. Construction is governed by 29 CFR 1926 Subpart K for electrical work, which has different (less prescriptive) energy control requirements. If your company does both general industry maintenance and construction work, confirm which standard applies to each scope. Most manufacturing maintenance and repair falls under the general industry standard regardless of whether the employer is labeled a contractor.

How do you handle LOTO audits for equipment that is rarely used?

The annual audit requirement is based on time, not how often the equipment runs. If a machine is used once a year, you still audit its energy control procedure at least annually. The most practical approach is to audit the procedure right before the equipment goes back into service after a long idle stretch. That way the audit is current and the employees are refreshed on the procedure at the same time.

Can employees refuse to participate in a LOTO audit?

Employees cannot reasonably refuse to participate in an OSHA-required compliance activity without consequence. The annual audit review is a regulatory requirement. In practice, framing the audit as a collaborative safety check (not an employee evaluation) reduces resistance a lot. The regulation says the authorized employee must review the procedure with employees who use it, so participation is part of the job for authorized employees.

What is a group lockout and does it need a separate audit?

Group lockout is when multiple authorized employees work on the same equipment at once, each adding their own lock to a hasp or group lockout box. The energy control procedure for that machine should describe the group lockout protocol. Your annual audit covers that procedure, including the group lockout steps. You do not need a completely separate audit, but your audit has to verify that each employee has their own individually keyed lock and understands the group process.

Does a LOTO audit need to be done by a third-party consultant?

No. OSHA requires the audit to be performed by an authorized employee, which is an internal designation. A third-party safety consultant can help develop your audit process, review your written program, or train your authorized employees to conduct audits, but OSHA does not require or prefer outside consultants for the annual certification. Doing it internally is both compliant and cheaper.

How should a new business owner build a LOTO program before the first audit?

Start by identifying every piece of equipment that requires servicing or maintenance where unexpected energization could injure a worker. Write an energy control procedure for each one. Train authorized employees on each procedure. Then conduct your first audit within the first year of operation and document it. The first audit often reveals that some procedures need adjustment, which is expected. The point is to build the documentation baseline you improve on each year.

Sources

1. OSHA, 29 CFR 1910.147 The control of hazardous energy (lockout/tagout): 29 CFR 1910.147(c)(6) requires a periodic inspection of the energy control procedure at least annually, conducted by an authorized employee, with a written certification listing date, machine, employee names, and inspector name.
2. OSHA, Lockout/Tagout (Control of Hazardous Energy) overview page: OSHA estimates proper LOTO prevents approximately 120 fatalities and 50,000 injuries per year and protects roughly 3 million workers.
3. Bureau of Labor Statistics, Census of Fatal Occupational Injuries summary: Contact with objects and equipment consistently ranks among the top causes of occupational fatalities in BLS annual data.
4. OSHA, Top 10 Most Frequently Cited Standards FY2024: OSHA cited lockout/tagout (29 CFR 1910.147) 2,112 times in FY2024, ranking it 5th on the top-10 most-cited list.
5. OSHA, Penalties page: Maximum OSHA penalty for a serious violation is $16,131 and for a willful or repeated violation is $161,323 as of 2024, adjusted annually for inflation.
6. OSHA, Injury and Illness Prevention Programs white paper: OSHA cites $40,000 as a rough estimate for indirect costs of a single serious occupational injury, separate from direct medical and compensation costs.
7. OSHA, Letter of Interpretation: Lockout/Tagout annual inspection requirements: OSHA letters of interpretation confirm that the annual minimum frequency for LOTO audits does not prohibit more frequent inspections and that more frequent audits are consistent with a good-faith safety program.
8. OSHA, Compliance Directive CPL 02-00-147, The Control of Hazardous Energy: OSHA's compliance directive CPL 02-00-147 clarifies that the general procedure exception applies only when machines are genuinely identical in energy characteristics and shutdown sequence, not merely similar.
9. OSHA, 29 CFR 1910.147(c)(7) Training requirements: 29 CFR 1910.147(c)(7)(iii)(B) requires retraining when an audit reveals inadequacy in an employee's knowledge or use of the energy control procedures.
10. OSHA, 29 CFR 1910.147(f)(2) Contractor coordination requirements: 29 CFR 1910.147(f)(2) requires host employers to inform contractors of LOTO procedures and ensure contractors understand and follow the host's energy control program when both work on the same equipment.