Lockout tagout safety: the complete guide for small business

Last updated 2026-07-09

What is lockout tagout and why does OSHA require it?

Lockout tagout is a set of safety procedures that prevent machines from being accidentally energized while a worker is servicing or maintaining them. The OSHA standard that governs it is 29 CFR 1910.147, officially titled "The Control of Hazardous Energy (Lockout/Tagout)." It went into effect in 1990 and applies to general industry. Construction work has a separate framework under 29 CFR 1926 Subpart K, and maritime operations fall under 29 CFR 1915 ^[1].

The core idea is simple. A machine has energy sources, some obvious (a power cord, a pneumatic line) and some not (a suspended 500-pound ram, a capacitor bank that holds charge for 90 seconds after the breaker trips). Before anyone puts a hand inside that machine, every one of those energy sources must be controlled. "Lockout" means physically locking an energy-isolating device in the safe position so it cannot be re-energized. "Tagout" means attaching a warning tag when a lock is not physically possible, though OSHA views tagout-only programs as less safe and holds them to a higher burden ^[2].

Here is why the numbers are worth knowing. The Bureau of Labor Statistics and OSHA estimate that failure to control hazardous energy accounts for roughly 10 percent of serious accidents in many industries, and the agency attributes approximately 50,000 injuries and 120 fatalities per year to inadequate energy control ^[3]. That is not a rounding error. Those are people whose fingers, hands, or lives were lost to a machine that cycled at the wrong moment.

For small businesses, there is an additional cost angle. OSHA's penalty structure after its 2016 inflation adjustment allows serious violations up to $16,550 per violation and willful or repeated violations up to $165,514 per violation as of 2024 ^[4]. A single inspection that finds five machines without proper LOTO procedures can easily generate a six-figure penalty.

What does 29 CFR 1910.147 actually require you to do?

The standard has four requirements every covered employer must meet: a written energy control program, machine-specific energy control procedures, training for affected and authorized employees, and periodic inspections of the program. Miss any one of the four and you have a gap an inspector will find.

Written energy control program. You need a written policy that covers the scope of the program, rules for using LOTO, and the means by which employees will be trained. The standard does not give you a specific template, but it does specify what the policy must address ^[1]. If you need a starting point, SafetyFolio's safety program generator can build a compliant written program in about 15 minutes rather than a full day of document work.

Machine-specific procedures. This is where most small businesses fall short. OSHA requires a written procedure for each piece of equipment unless the machine meets all six conditions for the "exception" under 1910.147(c)(4)(i): the equipment has no potential for stored or residual energy, it has a single energy source that is readily identified and isolated, lockout completely de-energizes the machine, the plug is under the exclusive control of the worker, work on the machine creates no hazard to other employees, and the employer has no previous incidents involving the machine ^[1]. Most industrial machines do not clear all six conditions. Write the procedure anyway.

Training. The standard sorts workers into three types. Authorized employees are the ones who actually perform the lockout. Affected employees work in areas where LOTO is used but do not perform it themselves. Other employees are anyone else who might encounter an energy control situation. Authorized employees need the most thorough training, including recognition of hazardous energy sources, methods and means of isolation, and the purpose and use of the energy control procedure ^[1]. Retraining is required whenever there is reason to believe the employee has lost the knowledge or skill.

Annual inspection. 29 CFR 1910.147(c)(6) requires an annual inspection of each energy control procedure. The inspection must be done by an authorized employee other than the one using the procedure, and it must be certified in writing with the machine name, date, employees involved, and the inspector's name ^[1]. This is one of the most commonly missed requirements I see in small shops.

What are the six steps of a lockout tagout procedure?

OSHA's standard lays out a sequence that authorized employees must follow every single time they service covered equipment. The exact wording in your written procedure can vary, but the sequence cannot. Here are the six steps, pulled directly from the framework at 1910.147(d) ^[1].

1. Notify affected employees. Let anyone who operates or works near the machine know it is being shut down and why.

2. Identify energy sources. Review the machine-specific procedure. Know every energy source: electrical, hydraulic, pneumatic, chemical, thermal, gravitational. A stamping press may have electrical power, a pneumatic clutch, and a flywheel with stored kinetic energy. All three count.

3. Shut down the equipment. Use the normal stopping procedure (off button, stop switch) to power down the machine.

4. Isolate the energy sources. Move each energy-isolating device (disconnect switch, circuit breaker, valve) to the off or closed position. Do not simply turn the machine off; physically isolate the energy at its source.

5. Apply locks and tags. Each authorized employee applies their own personal lock to every energy-isolating device. Only that employee holds the key. Tags are attached to the lock or, where a lockable device is not available, directly to the energy-isolating device.

6. Release or restrain stored energy, then verify. Bleed pneumatic lines, discharge capacitors, block suspended parts, release spring tension. Then try to start the machine using the normal activation control to verify it will not energize. This is sometimes called "try out" or "zero energy state verification." The standard says at 1910.147(d)(6): "Prior to starting work on machines or equipment that have been locked out or tagged out, the authorized employee shall verify that isolation and de-energization of the machine or equipment have been accomplished." ^[1]

When work is finished, the sequence reverses: remove tools and materials, restore machine guards, ensure no one is in the danger zone, remove locks and tags, notify affected employees, and re-energize.

One practical note. Group lockout situations, where multiple workers service the same machine, require each worker to apply their own lock to a hasp or a lockout box. Every authorized employee controls their own energy isolation. Nobody removes another worker's lock. Ever.

What lockout tagout hardware do you actually need to buy?

OSHA does not name brands, but it does set performance requirements. Lockout devices must be durable, standardized in color and shape, substantial enough to prevent removal without excessive force, and uniquely identified to indicate which employee applied them ^[1]. Tags must warn against hazardous conditions and be attached by a means that is at least equivalent to a nylon self-locking cable tie ^[2].

Here is the hardware a typical small manufacturing or maintenance shop needs.

Device	What it does	Approximate unit cost
Safety padlock (keyed differently)	Locks energy-isolating devices	$8 to $25 each
Circuit breaker lockout	Locks a breaker in the off position	$5 to $20
Electrical plug lockout	Covers a cord end so it cannot be inserted	$5 to $15
Ball valve lockout	Locks a valve handle	$8 to $30
Gate valve lockout	Same for gate-style valves	$10 to $40
Pneumatic lockout (lockout valve)	Isolates air lines	$15 to $50
Hasp	Lets multiple workers lock one point	$8 to $20
Lockout tag	Warning label attached to lock or device	$0.50 to $2 each
Lockout station (shadow board)	Stores hardware near the equipment	$50 to $200

Prices are approximate retail figures for basic safety-grade hardware. Industrial-grade or specialty equipment (say, high-voltage cable lockouts) costs more.

Standardization matters. OSHA expects your locks to be a consistent color used only for LOTO, never for general security. Many employers reserve red or yellow padlocks exclusively for energy control. A blue padlock that also locks the supply closet is a compliance problem and a safety problem.

For complex facilities, a lockout station at each machine speeds up the process and removes the excuse that hardware was not available. The station holds the written procedure, a hasp, extra locks, tags, and any device-specific hardware. Workers have no reason to skip steps.

Who needs lockout tagout training and what must it cover?

The training requirement at 29 CFR 1910.147(c)(7) is short on the page and long in the doing ^[1]. Three roles, three depths of training. Here is how they break down.

Authorized employees must understand the type and magnitude of hazardous energy at their equipment, the methods for isolating and controlling it, and how to verify zero energy state. This is not a 10-minute overview. A worker servicing a hydraulic press needs to know that hydraulic accumulators can hold pressure even after the main pump is off, and that the only way to verify zero pressure is to attach a gauge after isolating the supply.

Affected employees need to know the purpose and use of LOTO, and they must know what to do (nothing, and call a supervisor) if they find an unfamiliar lock on a machine they need to operate. A machinist who walks up to a tagged-out lathe and pulls the tag to see if it is really necessary has just defeated the entire system.

Other employees need basic awareness that LOTO is in use in the area and that they must not touch locked or tagged equipment.

Retraining is required when there is reason to believe an employee does not understand the procedure, when the procedure changes, or when an inspection reveals deficiencies. OSHA does not set a fixed retraining interval for LOTO the way it does for some other standards, but the annual inspection requirement effectively creates a yearly checkpoint.

Keep training records. The standard requires certification of training, including employee name, date, and the subject of the training. Digital records are fine; a spreadsheet with a scanned signature page works. What you cannot do is claim training happened with no documentation to support it.

For general awareness of energy control inside a broader safety education, workers finishing an OSHA 30 course will get exposure to LOTO concepts, though that does not substitute for the hands-on, equipment-specific training the standard actually requires.

What is the difference between lockout and tagout, and when can you use tagout alone?

Lockout is always preferred. A physical lock is harder to defeat than a warning tag, it does not depend on anyone reading or heeding a label, and it creates a physical barrier that stops re-energization.

Tagout alone is permitted under 29 CFR 1910.147(c)(3) only when the energy-isolating device is not capable of being locked out, and only if the employer can demonstrate that the tagout system provides full employee protection equivalent to lockout ^[1]. The standard says tagout "shall be used" in that situation, but it also states plainly: "When a tagout device is used on an energy-isolating device which is capable of being locked out, the tagout device shall be attached at the same location that the lockout device would have been attached." Put simply, if the equipment can accept a lock, you must use a lock.

The agency's stance on tagout-only programs is cautious. OSHA's compliance guidance makes clear that tags are warning devices only and that they can be inadvertently removed or ignored. When tagout is used without lockout, employers must add measures that provide equivalent protection: removing and isolating a circuit element, blocking a controlling switch, opening an extra disconnecting device, or removing a valve handle ^[2].

In practice, for any machine built or significantly modified after 1990, OSHA's general machinery standards already require that energy-isolating devices be lockable. A brand-new piece of equipment that cannot accept a lock is rare and probably defective. If you inherit old equipment that genuinely has no lockable disconnect, the cleanest fix is to retrofit a lockable disconnect switch, which usually costs $50 to $300 and makes your whole LOTO program simpler.

What are the most common lockout tagout violations OSHA cites?

29 CFR 1910.147 has landed on OSHA's top-ten most-cited standards list every year for at least the past decade ^[4]. The violations are predictable, and they cluster into a handful of categories.

The most common is the absence of machine-specific written procedures. Employers often have a general LOTO policy but nothing that walks a worker through the exact steps for a specific piece of equipment. OSHA's compliance officers look for the written procedure posted at or near the machine. If it is not there, expect a citation.

Second most common: no annual inspection certification. Employers do informal checks but never produce the written certification that names the procedure, the inspection date, the employees involved, and the certifying employee. The paperwork itself is the compliance evidence.

Third: thin training records. A shop owner tells the inspector "we trained everyone when they were hired," but there are no records specifying what was covered, when, or who attended.

Fourth: employees using a single lock on a shared hasp rather than each applying their own. This is a group lockout failure. If only one person controls the lockout, only one person controls re-energization. Anyone else working on that machine is trusting someone else's lock.

Fifth: failing to address all energy sources. A worker isolates electrical power but leaves a pneumatic line pressurized because "we never use it on this machine." That line is still an energy source.

For a wider look at how OSHA enforcement works and what inspectors examine, the OSHA basics overview covers the general framework, and our incident report guide explains what documentation you need if something does go wrong.

How do you write a machine-specific lockout tagout procedure?

Each machine-specific procedure must hold enough detail that an authorized employee who has never touched that particular machine can service it safely. OSHA's compliance guidance and Appendix A of 1910.147 give you a model of what to include ^[1][5].

At minimum, a procedure must identify: the machine and its location, the authorized employees permitted to use it, the type and magnitude of each energy source, the specific method for isolating each energy source, the location and type of each energy-isolating device, the steps for releasing or restraining stored energy, and the steps for verifying zero energy state.

A concrete example for a small hydraulic punch press might read like this.

• Machine: Hydraulic punch press, station 4
• Electrical source: 480V three-phase, disconnect panel B-3, breaker 12. Apply red padlock.
• Pneumatic source: 90 PSI supply line, ball valve at back of machine. Turn valve to closed (handle perpendicular to pipe), apply valve lockout clamp with red padlock. Bleed residual pressure by cycling the foot pedal three times after isolation.
• Hydraulic source: Internal accumulator, rated 2,000 PSI. After isolation and shutdown, cycle the ram control lever five times to release stored hydraulic pressure. Verify the accumulator pressure gauge reads zero before entering the die area.
• Gravitational source: Upper ram may descend under gravity if hydraulic pressure is lost. Insert ram safety block (stored in red bin on machine side) before working under the ram.
• Verification: Attempt to start the machine using the foot pedal. Ram must not move.

Notice the procedure is specific enough to be useful and honest about what can go wrong. A generic "turn off and lock out" instruction does not meet the standard.

Photographs help enormously. A photo of the disconnect panel with an arrow pointing to the right breaker, a photo of the valve with the lockout clamp applied, and a photo of the ram block in place make the procedure usable by someone in a noisy shop under time pressure. OSHA does not require photos, but auditors consistently note their value.

Does lockout tagout apply to cord-and-plug equipment?

This is a genuinely common question, and the answer turns on a narrow but real exception. Under 29 CFR 1910.147(a)(2)(iii)(A), cord-and-plug connected equipment is exempt from the full LOTO standard if the equipment is unplugged from its energy source and the plug stays under the exclusive control of the employee doing the work ^[1].

"Exclusive control" is the phrase that carries the weight. If the worker unplugs a bench grinder, holds the plug, and does the maintenance, that is compliant. If the worker unplugs the grinder, sets the plug on the bench, and someone else could theoretically re-insert it, that is not exclusive control.

Most employers handle cord-and-plug equipment with a lockout plug cover, a small device that encases the plug end and accepts a padlock, or by keeping the cord in their pocket. Either approach gives exclusive control.

For permanently wired equipment, even with a local on/off switch, the standard applies in full. A table saw wired into the wall with a 240V connection needs an energy-isolating device (typically the circuit breaker at the panel) locked out before blade changes or adjustments with the guard removed. The on/off switch is a control device, not an energy-isolating device, and OSHA's standard draws a hard line between the two ^[1].

For guidance on identifying chemical energy sources that tie into LOTO, hazard communication covers how those sources must be labeled and handled within a broader safety program.

What are the OSHA lockout tagout requirements for contractors and outside service workers?

This is an area where small businesses frequently get caught. When an outside contractor comes in to service a machine, 29 CFR 1910.147(f)(2) creates obligations that run both ways ^[1].

The host employer must inform the contractor about the host's energy control procedures. The contractor must inform the host employer about their own energy control procedures. Both employers must then make sure their procedures do not create hazards for each other's people.

In plain terms, you cannot hand a contractor a key and say "go fix the machine in bay 3." You need to tell them which energy sources that machine has, how your LOTO procedures work, and what the contractor's workers should do. The contractor needs to show you their own LOTO program and explain how they will apply it in your facility.

If the contractor uses a different color of padlock or a different lockout device, that is fine, as long as both parties understand the system and neither party's employees can accidentally re-energize equipment the other is working on.

For equipment that needs coordinated lockout between your workers and contractor workers, a multi-lock hasp is the standard answer. Each group applies its own locks. Nobody leaves until every lock is accounted for.

A quick note on workers who run both maintenance and production in a small shop, common in businesses with fewer than 20 employees. OSHA still requires the full LOTO protocol. The fact that a worker built the machine, operates it, and maintains it does not erase the standard's requirements. Familiarity is the condition that produces the most accidents.

How often do lockout tagout accidents happen, and what do they actually look like?

Hard data on LOTO-specific incidents is incomplete because OSHA does not break out energy-control failures as a standalone accident category in BLS data. Still, the agency's own preamble to 1910.147 estimated that compliance would prevent roughly 122 fatalities and 28,400 lost-workday injuries per year ^[3]. Nobody has refreshed that estimate with a rigorous follow-up study, so the commonly cited "50,000 injuries" figure is the agency's own published estimate covering a broader range that includes non-lost-workday injuries.

The pattern of incidents is consistent across industries. A maintenance worker starts to clear a jam in a conveyor. A production worker on the other side of the machine, not knowing maintenance is in progress, turns it back on. Or a worker services a press, clears the jam, and steps back without removing their lock, so a second worker waiting to use the machine forces the first worker's lock off (a violation in itself) and cycles the machine while the first worker's arm is still near the die.

Amputation is the most common severe outcome. OSHA's machine guarding standard at 29 CFR 1910.212 and the LOTO standard at 1910.147 work together; machines with poor guarding and no LOTO protocol are especially dangerous ^[6]. OSHA runs a National Emphasis Program on amputations specifically ^[7].

The people most at risk are not new hires. OSHA compliance data and workplace safety studies consistently show experienced workers overrepresented in LOTO accidents, because familiarity breeds shortcuts. Workers who have cleared a jam 200 times without locking out tend to reason that the 201st time is equally fine. That reasoning is correct 200 times and catastrophic once.

What do lockout tagout safety quiz answers actually test?

If you are prepping for an OSHA 10 or OSHA 30 assessment, a supervisor certification exam, or an internal competency check, LOTO quiz questions tend to cluster around six concepts. Knowing what the questions are really testing helps you study the right material.

Energy types. Questions often hand you a scenario and ask which types of hazardous energy are present. Stored energy (hydraulic accumulators, compressed springs, elevated components, capacitors) shows up the most because it is the least intuitive. Electrical and pneumatic energy are more obvious.

Roles. Authorized vs. affected vs. other employee definitions appear on almost every certification exam. Know that authorized employees apply locks, affected employees work in the area, and other employees are everyone else.

The tagout-only rule. When is tagout alone acceptable? (Only when the device cannot be locked out, with additional protective measures.) This is a frequent distractor question.

The sequence. Can you put the steps in order? Notify, identify, shut down, isolate, lock/tag, release stored energy, verify.

Cord-and-plug exception. Under what conditions is LOTO not required for plug-connected equipment? Exclusive control of the plug by the worker.

Group lockout. What is the rule when multiple workers service the same machine? Each applies their own lock.

On the annual inspection requirement, test questions often focus on who can perform the inspection (an authorized employee other than the one using the procedure) and what the written certification must contain (date, machine, employees involved, inspector).

If you are building a training curriculum and want to hit every tested competency, pairing it with an OSHA training framework that maps to 1910.147 will save you real prep time.

How do you build and maintain a compliant LOTO program as a small business?

Most small businesses do not have a safety director. The owner or ops manager writes the program, trains the staff, and audits the procedures, often while running production at the same time. That reality shapes what a workable LOTO program looks like.

Start with an energy source inventory. Walk every machine in the facility and list every energy source. Electrical, pneumatic, hydraulic, gravitational, thermal, chemical. Note the location of each energy-isolating device. This inventory becomes the foundation for every machine-specific procedure.

Next, write the procedures. Prioritize by risk: machines with multiple energy sources, machines where workers regularly clear jams or change tooling, machines that get serviced often. A shop with 12 machines might have 12 procedures. Budget one to two hours per machine for the first draft, including photography.

Buy the hardware. For a 10-machine shop, a reasonable starting kit includes 10 to 20 red padlocks (keyed differently, with a key register), 10 hasps, an assortment of circuit breaker lockouts and valve lockouts to match your equipment, 50 to 100 tags, and a lockout station at each major machine. Total hardware cost for a small shop typically runs $300 to $800.

Train your people. Do hands-on, equipment-specific training. Walk authorized employees through the procedure at the actual machine, have them perform the lockout while you watch, and have them sign a training record.

Audit annually. Each year, have an authorized employee who does not normally use a given procedure walk through it and certify in writing that the procedure is adequate. If the machine has changed, update the procedure before the next scheduled maintenance.

If writing the full written program from scratch feels like too much, SafetyFolio's program generator produces a customized, 1910.147-compliant written program based on your answers to a short questionnaire. It handles the policy language. You still have to write the machine-specific procedures, because no software can know your equipment's energy sources the way you do.

Keep the whole program in one place you can reach fast: the written policy, all machine-specific procedures, training records, and annual inspection certifications. During an OSHA inspection, producing all four categories within minutes shows a functioning program rather than a paper one.

Frequently asked questions

What does OSHA's lockout tagout standard cover?

29 CFR 1910.147 covers the control of hazardous energy during servicing and maintenance of machines and equipment in general industry. It applies to electrical, hydraulic, pneumatic, chemical, thermal, and mechanical (including gravitational and stored) energy. It does not cover normal production operations, minor tool changes, or cord-and-plug equipment where the worker has exclusive control of the plug.

What is the difference between an authorized employee and an affected employee?

An authorized employee is trained and permitted to apply lockout or tagout devices and perform the actual servicing. An affected employee operates or uses the equipment being serviced but does not perform the lockout. Affected employees must know the purpose of LOTO and must not restart or re-energize equipment that has been locked or tagged out. The training requirements differ significantly between the two roles.

Can a worker remove another worker's lock in an emergency?

Removing another employee's lock is allowed only under a specific emergency removal procedure documented in your written LOTO program. The procedure must require management authorization, verification that the employee who applied the lock is not in the danger zone, and immediate notification to the employee before they return to work. Forcing off another worker's lock without this procedure is a violation and a genuine safety hazard.

Does lockout tagout apply to oil changes and routine lubrication?

It depends on exposure to hazardous energy. If the lubrication or oil change requires removing a guard, reaching into a machine's danger zone, or any possibility of unexpected energization, LOTO applies. If it is truly external and the worker is never in a hazardous position relative to any moving part or energy source, OSHA's minor servicing exception at 1910.147(a)(2)(ii) may apply, but the conditions are narrow and the burden of proof is on the employer.

How many locks does one worker need?

One lock per energy-isolating device, plus spares. A machine with one breaker and one pneumatic valve needs two locks minimum. A machine with three breakers, two pneumatic valves, and a hydraulic supply line needs six. Each lock should be keyed differently and registered to the individual worker. Workers servicing multiple machines may need 10 or more personal locks.

What happens if there is no lockable energy-isolating device on old equipment?

You must use tagout with additional measures that provide equivalent protection: removing an isolating circuit element, blocking a controlling switch, opening an extra disconnecting device, or removing a valve handle. The practical best answer is to retrofit a lockable disconnect. For most electrical disconnects, this costs $50 to $300 and makes compliance straightforward. OSHA does not accept "the equipment is old" as a reason to skip energy control.

How long does lockout tagout training take?

OSHA sets no minimum time, but adequate training for an authorized employee on complex equipment realistically takes two to four hours, including classroom review and hands-on practice at the actual machine. Affected employee training is shorter, often 30 to 60 minutes. Keep signed training records that document the date, content covered, and employee name. Oral-only training with no records is a citation risk.

What are the OSHA penalties for lockout tagout violations?

As of 2024, OSHA's penalty ceiling is $16,550 per serious violation and $165,514 per willful or repeated violation, following mandatory annual inflation adjustments that began under the Federal Civil Penalties Inflation Adjustment Act. A single inspection at a facility with several machines lacking written procedures or annual inspection certifications can produce citations totaling well into five or six figures.

Does lockout tagout apply to construction work?

The general industry standard at 29 CFR 1910.147 does not directly apply to construction. Construction work is covered under 29 CFR 1926 Subpart K for electrical safety and related standards. However, the underlying principle, controlling hazardous energy before servicing equipment, is enforced under the general duty clause and other 1926 standards. If your business does both maintenance and construction work, confirm which standard applies to each activity.

What records does OSHA require for a lockout tagout program?

Three categories of records are required: written certification of employee training (name, date, subject), written certification of each annual procedure inspection (date, machine or equipment, employees involved, inspector name), and the written energy control procedures themselves. There is no specified retention period in 1910.147, but OSHA generally expects you to produce current records during an inspection, and retaining records for at least three years is a common best practice.

What is the cord-and-plug exception to lockout tagout?

Under 29 CFR 1910.147(a)(2)(iii)(A), the standard does not apply to cord-and-plug connected electrical equipment when the equipment is unplugged and the authorized employee has exclusive control of the plug throughout the servicing task. Exclusive control means the plug is in the worker's possession or locked with a plug cover, not simply set down nearby where someone else could re-insert it.

How do you handle lockout tagout when multiple workers service the same machine?

Group lockout requires each authorized employee to apply their own personal lock to a shared hasp or lockout box. The hasp secures all of the energy-isolating devices, and no one can re-energize the machine until every lock is removed. Each worker removes only their own lock when their portion of the work is complete. One person's lock cannot be removed by another unless the emergency removal procedure is followed.

Is there a simple lockout tagout checklist I can use?

A compliant daily-use checklist should include: notify affected employees, identify all energy sources per the written procedure, shut down using normal stopping procedure, isolate all energy-isolating devices, apply a personal lock and tag to each device, release or restrain stored energy, and verify zero energy state by attempting normal activation. For machines with multiple steps per energy source, the written procedure itself functions as the checklist.

What is an energy control procedure versus an energy control program?

The energy control program is the facility-wide written policy that establishes the overall LOTO system, rules, and training requirements. An energy control procedure is a machine-specific document listing every energy source on that machine and the exact steps to isolate, lock, and verify it. OSHA requires both. The program sets the rules; the procedure is the work instruction for a specific piece of equipment.

Sources

1. OSHA, 29 CFR 1910.147 The Control of Hazardous Energy (Lockout/Tagout): Full text of the LOTO standard including written program, procedure, training, and annual inspection requirements
2. OSHA, 1910.147 Compliance Directive CPL 02-00-147: OSHA compliance guidance on tagout-only programs, additional measures required when lockout is not feasible, and performance requirements for lockout devices
3. OSHA, Lockout/Tagout (Hazardous Energy Control) overview page: OSHA estimate that failure to control hazardous energy causes approximately 50,000 injuries and 120 fatalities per year
4. OSHA, Top 10 Most Cited Standards FY2023: 29 CFR 1910.147 appears on OSHA's top-ten most-cited standards list; penalty ceiling of $16,550 per serious violation and $165,514 per willful or repeated violation as of 2024
5. OSHA, 29 CFR 1910.147 Appendix A - Typical Minimal Lockout Procedure: OSHA model six-step energy control sequence referenced in machine-specific procedure guidance
6. OSHA, 29 CFR 1910.212 General Machine Guarding: Machine guarding standard that works in conjunction with 1910.147 for amputation prevention
7. OSHA, National Emphasis Program on Amputations (NEP) CPL 03-00-019: OSHA NEP targeting amputation hazards, which are closely associated with inadequate LOTO compliance
8. OSHA, Federal Civil Penalties Inflation Adjustment Act Improvements Act: Mandatory annual inflation adjustments to OSHA civil penalties beginning 2016; current penalty ceiling figures
9. OSHA, 29 CFR 1926 Subpart K - Electrical (Construction): Construction electrical safety standard that covers energy control in construction work, separate from 1910.147
10. Bureau of Labor Statistics, Census of Fatal Occupational Injuries summary: BLS data on fatal occupational injuries by event and source, underlying the energy-control fatality estimates
11. OSHA, LOTO eTool - Interactive training resource: OSHA eTool covering authorized vs. affected employee roles, hardware requirements, and group lockout procedures