How to write a safety program that meets both state and federal OSHA

Last updated 2026-07-11

What is a written safety program and does OSHA actually require one?

There is no single OSHA rule that says "every employer must keep one document called a safety program." What OSHA has instead is a long list of standards, each demanding a written program, written procedures, or written documentation for a specific hazard. Stack all of those together and you effectively have a safety program. Missing that distinction is how small businesses end up with a fat binder that looks finished but is missing half the pieces.

The broadest written-program rule most employers hit is the Hazard Communication standard, 29 CFR 1910.1200, which requires a written hazard communication program if employees may be exposed to hazardous chemicals ^[1]. Lockout/tagout, 29 CFR 1910.147, requires documented energy control procedures for each piece of equipment. The Respiratory Protection standard, 29 CFR 1910.134, requires a written program before you hand out a single respirator. Each of these is its own written program, and most general-industry employers are running several at once.

So the practical answer is yes, you need a written safety program. The legal answer is that you need whichever written programs the applicable CFR standards require for the hazards actually present in your workplace. For most small businesses with five or more employees, that list starts with hazard communication, an emergency action plan, and first aid procedures, then grows based on real exposures.

Get the background on what OSHA is and how it works before you start writing. That context is worth having first.

How is federal OSHA different from state OSHA, and why does it change what you write?

Federal OSHA covers private-sector workers in 23 states and territories. The other 27 states (plus Puerto Rico and the Virgin Islands) run their own OSHA-approved state plans under Section 18 of the OSH Act ^[2]. State plans have to be "at least as effective" as federal OSHA, which in practice means they can pile requirements on top of the federal baseline but can never strip a federal protection away.

That splits into two concrete effects on your written program. First, some state plans carry standards that simply do not exist federally. California's Cal/OSHA requires an Injury and Illness Prevention Program (IIPP) for every employer under Title 8, Section 3203, with no direct federal equivalent ^[3]. Washington State (L&I) and Oregon OSHA have similar catch-all written program rules. Write only to the federal standard in one of these states and you are out of compliance the day you open.

Second, state plans sometimes set tighter numeric thresholds, shorter deadlines for corrective action, or extra training documentation. Michigan OSHA's recordkeeping rules keep records accessible to employees on request, mirroring the federal rule, but Michigan also adds reporting requirements for certain construction hazards that reach past 29 CFR 1926.

Start with the federal CFR standard because it is the floor. Then pull your state plan's requirements (find them through OSHA.gov's state plan directory) and mark anything that goes further. Your written program has to satisfy both layers or it satisfies neither.

State Plan Status	Number of Jurisdictions	Covers Public Sector?	Can Exceed Federal Rules?
State plan states	27 states + 2 territories	Yes, most do	Yes
Federal OSHA states	23 states + territories	No (federal covers only private)	N/A
State plans covering only public sector	5 states	Yes	Yes

Which federal OSHA standards require a written program?

Not every OSHA standard triggers a written program. Here are the big ones that hit most general-industry workplaces, with their CFR citations. Construction employers swap 1910 for the 1926 equivalents, but the logic holds.

Hazard Communication (29 CFR 1910.1200): A written program describing how your workplace handles chemical labeling, safety data sheets, and employee training. Use any hazardous chemical and it applies. Learn more about what belongs in a compliant HazCom program.

Emergency Action Plan (29 CFR 1910.38): Required if you have 11 or more employees, or if any OSHA standard triggers it. It has to be written and cover evacuation procedures, alarm systems, and employee accountability ^[4].

Lockout/Tagout (29 CFR 1910.147): Documented energy control procedures for every piece of equipment that could unexpectedly energize during maintenance. The procedures have to name the actual equipment, not read as generic boilerplate. See our breakdown on lockout tagout ^[12].

Respiratory Protection (29 CFR 1910.134): A written program run by a trained program administrator before anyone uses a respirator (including voluntary-use ones, in most cases).

Personal Protective Equipment Hazard Assessment (29 CFR 1910.132): A written certification of a hazard assessment before you assign PPE.

Bloodborne Pathogens (29 CFR 1910.1030): Applies to any employer with occupational exposure risk. Requires a written Exposure Control Plan, updated annually.

Fire Prevention Plan (29 CFR 1910.39): Required if a fire-related OSHA standard applies to your workplace or if you have 11 or more employees.

Beyond these sit standards for process safety management (29 CFR 1910.119), confined space entry (29 CFR 1910.146), powered industrial trucks (29 CFR 1910.178), and more. Your hazard profile decides which written programs you actually need. A generic template checklist does not.

What are the required elements every written safety program must include?

The specifics shift by standard, but a defensible written safety program for a general-industry employer usually needs all of the following. This is not a made-up best-practices wish list. Each item traces back to a specific CFR requirement.

1. Scope and purpose. Define which operations, locations, and employee classifications the program covers. Inspectors look for this first. A program that says "all employees" but then runs procedures that only make sense for one department raises immediate questions.

2. Employer responsibilities. Name who owns the program, who enforces it, and what authority that person has. California's IIPP model, used across several state plans, makes this explicit ^[3].

3. Hazard identification and assessment. Document how you find hazards: walk-through inspections, employee reports, incident analysis. State the frequency. OSHA's voluntary Safety and Health Program Management Guidelines recommend regular site surveys, and several state plans make them mandatory ^[5].

4. Hazard controls. For each hazard, document the controls in place following the hierarchy: elimination, engineering controls, administrative controls, PPE. That hierarchy runs throughout 29 CFR 1910 and shows up in the general duty clause analysis OSHA uses for citations.

5. Training requirements. State who gets trained, on what, how often, and how you document it. The OSHA training documentation requirement shows up in nearly every standard that has a training component.

6. Incident investigation and reporting procedures. Explain how employees report injuries, near misses, and unsafe conditions, and how the company investigates them. This ties straight to your incident report obligations under 29 CFR 1904.

7. Recordkeeping. State where records live, how long they stay, and who can access them. Most OSHA standards want records kept 3 to 5 years, though exposure records under 29 CFR 1910.1020 run 30 years.

8. Program review and update schedule. The program is a living document. Note when it was last reviewed and when the next review lands. Annual review is the common bar in state plans that carry written program requirements.

How do you identify which hazards apply to your specific workplace?

This is where most owners stall. A generic template covers general hazards. Your actual citations come from the specific hazards in your building, on your equipment, in your tasks.

Start with a physical walk-through of every task employees perform, more than a tour of the space. Watch someone do the job start to finish, including setup and cleanup. Note every energy source, chemical contact, fall exposure, lifting task, and equipment interaction. This is not a paperwork chore. It is how you find out what your written programs actually have to address.

The Bureau of Labor Statistics publishes industry-level injury and illness data by NAICS code every year ^[6]. Pull your industry's top causes of injury. If the leading cause is struck-by incidents from forklifts, your powered industrial truck program needs serious attention. If it is chemical burns, HazCom and PPE move to the front. Prioritizing by BLS data is both defensible and practical.

For chemical hazards, start with your safety data sheets. Every chemical your employees touch should have one on file. SDS Section 2 gives you the hazard classifications. SDS Section 8 gives you the exposure limits. Chemicals on site with no SDSs is itself an immediate 29 CFR 1910.1200(g) violation.

OSHA's free On-Site Consultation Program, separate from enforcement and confidential, sends consultants to small businesses to help find hazards at no cost ^[7]. In 2023 the program served more than 28,000 small businesses nationwide. In a state-plan state, the consultation runs through the state agency but follows the same confidential, penalty-free model.

How do you find your state plan's specific requirements?

OSHA keeps a directory of every approved state plan at osha.gov ^[2]. Each plan has its own website and its own administrative code. The directory page lists every active state plan with a direct link to the state agency, so this is a five-minute lookup, not a research project.

On your state plan's site, find the "standards" or "regulations" section. You are hunting for any requirement with no direct federal parallel. The extras you will run into most:

California (Cal/OSHA): The IIPP under Title 8, CCR Section 3203 applies to every employer. It requires a written program with a named responsible person, a system for identifying and evaluating hazards, a system for correcting hazards, a system for communicating with employees, and documented training. Cal/OSHA also carries heat illness prevention standards (Title 8, Section 3395) and indoor heat rules that go past federal OSHA ^[3].

Washington (L&I): WAC 296-800 holds the Safety and Health Core Rules, including a written accident prevention program requirement for all employers. Washington adds construction-specific accident prevention requirements beyond federal 29 CFR 1926.

Michigan (MIOSHA): Part 1 of the Michigan Occupational Safety and Health Act rules carries a general duty to keep a workplace free of recognized hazards, with written program requirements for general industry and construction that mirror and sometimes exceed federal rules.

Oregon OSHA: OAR 437-001-0765 requires a written accident prevention program for employers with 10 or more employees, more prescriptive than the federal model.

Operate across state lines and your master template needs to meet the strictest state you touch, plus a state-specific addendum for each location.

What is the step-by-step process for writing the actual program document?

Here is the process I would run if I were writing a program from scratch for a small manufacturer or contractor. It takes real work. It is not mysterious.

Step 1: Confirm your applicable standards. List every OSHA standard that touches your operations. Walk the 29 CFR 1910 table of contents (or 1926 for construction) and mark every standard tied to a hazard you have. Pull your state plan's equivalent list. That combined list is your program's backbone.

Step 2: Pull the written program requirements from each standard. For each applicable standard, find the paragraph that spells out what the written program or procedure has to contain. Copy those requirements into a working document. You are not writing yet. You are collecting what must be included.

Step 3: Conduct your hazard assessment. Walk the facility. Document what you find. Use your applicable standards list as a prompt: Do we have confined spaces? Equipment that needs lockout? Chemicals that need a written HazCom program? The answers shape your program structure.

Step 4: Write the procedures. Now write the program, section by section. Each section states the hazard, the controls in place, the specific procedures employees follow, who is responsible, and how compliance gets verified. Be specific. "Employees must wear PPE" is not a compliant procedure. "Employees operating the belt sander must wear ANSI Z87.1-rated safety glasses and hearing protection rated NRR 25 or higher before starting the machine" is a procedure.

Step 5: Get employee input. Skip this and your program stays on paper. Employees know hazards management never sees. Some state plans (California's IIPP, for one) explicitly require a system for employee communication about hazards ^[3].

Step 6: Have a competent person review it. If you have a safety officer, they review it. If you do not, the OSHA On-Site Consultation Program can ^[7]. The test: does this match what actually happens in the workplace, and does it meet every applicable standard's requirements?

Step 7: Train employees on the program. The written program is not the finish line. Every employee covered by the program needs training on the elements that apply to their work. Document it.

Step 8: Review annually and after any incident. Set a calendar reminder. After an injury or near miss, review the relevant section to see whether the procedure failed or got ignored, then update.

To compress steps 1 through 4, SafetyFolio's safety program generator walks you through your hazard profile and outputs a draft written program with CFR citations already embedded, usually in under 15 minutes. Steps 5 through 8 are still on you. Nobody can do those remotely.

What are the most common mistakes that get small businesses cited?

OSHA publishes its top 10 most frequently cited standards every fiscal year ^[8]. The FY2023 list ran heavy on standards that require written programs: Hazard Communication (1910.1200), Respiratory Protection (1910.134), Lockout/Tagout (1910.147), and Powered Industrial Trucks (1910.178). The written program violations tend to fall into one of four buckets.

The program exists but employees have never seen it. Inspectors ask employees if they know the safety procedures and where the written program lives. If workers can't answer, the employer gets cited even when the document itself is technically complete. Having the program is not enough. Training records that show employees were trained on it are what save you.

The program is generic and does not match the actual workplace. A downloaded template talking about "chemical storage areas" at a facility that stores no chemicals is a flare. Inspectors can spot a program that was never adapted to the real operation. Equipment-specific procedures (lockout/tagout most of all) have to name the actual equipment.

The program has never been updated. A program dated 2017 with no reviews since tells an inspector nobody is following it, even if it was accurate in 2017. Annual review documentation is cheap insurance.

The program covers federal standards but ignores state-plan extras. This usually bites when a company moves into a state-plan state, or when a new person takes over compliance without knowing the state-level rules. Cal/OSHA citations, for example, are separate from federal OSHA citations and carry their own penalty schedule.

The average OSHA penalty for a serious violation was $15,625 per violation in 2023, following an inflation adjustment ^[9]. Willful or repeated violations can hit $156,259 per violation. A single-day inspection of a poorly documented program can spin off multiple violations, each assessed on its own.

How do training requirements fit into the written safety program?

Every major OSHA standard that requires a written program also requires training, and the training has to be documented. The written program should spell out exactly what training is required, how often, and in what format.

Take 29 CFR 1910.1200(h): employees have to be trained on hazardous chemicals in their work area at the time of initial assignment and whenever a new hazard shows up. The written HazCom program has to describe how that training is run and documented ^[1].

For powered industrial trucks (forklifts), 29 CFR 1910.178(l) requires operator evaluation before initial use and at least every three years after. The evaluation has to be documented in writing. A proper forklift certification record is part of your written program's training documentation.

Some employers find that an OSHA 30 course for supervisors or safety leads helps them grasp the full scope of written program requirements before they start writing. That 30-hour course, available in person or as an OSHA 30 hour online course, covers most major general industry or construction standards in enough depth that the person taking it can competently review a written program for gaps.

One documentation habit that pays off during an inspection: keep all training records in one indexed location, physical or digital, organized by employee and by standard. When an inspector asks for proof your employees got lockout/tagout training, you want to hand them a folder in 60 seconds, not dig through email for 20 minutes.

How do you keep the program current after you write it?

A written safety program that never gets updated reads, to OSHA, as proof the program isn't actually followed. The update obligation comes from the standards themselves. Most require review and updates when conditions change, when new hazards appear, or at set intervals.

Here is a maintenance schedule that holds up under inspection:

Annual review: Pick a date, put it on the calendar, document it. Go through every section of every written program and ask: does this still match how the work is done? Any new chemicals, machines, or processes? Has anyone been hurt in a way the procedure didn't anticipate?

After any incident: Review the section relevant to the incident type within 30 days. Document the review. If the procedure was inadequate, update it. If the employee deviated from the procedure, document that finding too. It affects how OSHA weighs employer culpability.

When regulations change: OSHA publishes rulemaking in the Federal Register. You do not need to read it daily, but subscribing to OSHA's QuickTakes newsletter (free from OSHA.gov) gets you a summary of regulatory activity twice a month ^[10]. State plan changes come through the state agency's own notifications.

When operations change: New equipment, new chemicals, new processes, new employee classifications, and new worksites can all trigger written program updates. Build a trigger into your change management: before any new equipment is bought or any new chemical comes on site, someone checks whether the existing programs cover it.

Version control matters too. Each version gets a date and, ideally, the name of the person who reviewed it. If OSHA asks whether your program has been updated in the last year, a version history right on the document is the fastest answer you can give.

What records do you need to keep and for how long?

Recordkeeping requirements scatter across individual OSHA standards, but these are the major ones that touch a written safety program.

29 CFR 1904 governs injury and illness recordkeeping for employers with more than 10 employees in most industries. The OSHA 300 Log, 300A Summary, and 301 Incident Reports have to be retained for 5 years from the end of the calendar year they cover ^[11].

Training records vary by standard. Hazard communication training records carry no explicit retention period in 1910.1200, but OSHA has said in letters of interpretation that records should be kept long enough to verify compliance for the duration of employment. Many compliance attorneys keep them at least 3 years after an employee leaves.

Bloodborne pathogen training records have to be kept 3 years per 29 CFR 1910.1030(h)(2)(ii).

Medical records and employee exposure records under 29 CFR 1910.1020 have to be retained for the duration of employment plus 30 years. That is the longest retention most employers face, and the one most easily underestimated.

Lockout/tagout energy control procedure documents stay on file as long as the procedure is in use ^[12]. When a machine is decommissioned, keep the procedure at least 5 years as a precaution.

OSHA can access all of these on request. Employees and their designated representatives can access their own exposure and medical records. Build your system so you can produce any record within one business day. During an inspection, not being able to find a record gets treated almost like not having it.

What does a compliant written safety program actually look like in practice?

A compliant program is not automatically a thick binder. Some of the best small-business programs I have seen run 20 to 40 pages across five or six applicable standards, written in plain language the actual workers can read and follow. A 200-page program nobody has opened is worth less than a 25-page program supervisors reach for weekly.

Here is the document structure a small general-industry employer usually lands on:

Section 1: Program Overview. Who the program covers, who owns it, the review schedule, and how employees report hazards or ask safety questions.

Section 2: Hazard Communication Program (29 CFR 1910.1200). List of hazardous chemicals, SDS location, labeling procedures, and a training documentation summary.

Section 3: Emergency Action Plan (29 CFR 1910.38). Evacuation routes, alarm system description, assembly points, accountability procedure, and emergency contacts.

Section 4: Lockout/Tagout Program (29 CFR 1910.147). General program requirements plus individual equipment-specific energy control procedures as attachments.

Section 5: PPE Program (29 CFR 1910.132-138). Written certification of hazard assessment, PPE selected for each task, and training requirements.

Section 6: (Add whatever additional standards apply to your specific operation.)

Appendix A: Training records template. Appendix B: Inspection checklist. Appendix C: Incident investigation form.

The program should carry the specific CFR citation for each requirement. That is not decoration. It makes annual updates faster because you can go straight to the standard and check whether the requirement changed. It also signals to an inspector that the program was written on purpose, not spat out of a random template.

Starting from scratch and want a structured way to build the first draft? SafetyFolio is built for exactly this. Answer questions about your industry and hazards, and the generator produces a draft with the correct CFR citations for your situation. From there you handle the customization, employee input, and training steps no software can do for you.

Frequently asked questions

Does OSHA require every employer to have a written safety program?

OSHA has no single universal written safety program standard. It has dozens of individual standards, each requiring written programs or procedures for specific hazards. If your workplace has hazardous chemicals, equipment that could unexpectedly energize, or employees who need respirators, then yes, you are legally required to keep written programs for those hazards. Most employers with five or more employees carry at least two or three written program requirements.

What is the difference between a safety program and a safety plan?

In practice, the terms get used interchangeably. OSHA's standards use several phrases: written program, written plan, written procedure, written policy. They all describe documented safety requirements. What matters is not the name on the cover but whether the document contains every element the applicable CFR standard requires. Call it whatever you want, as long as it is complete, current, and employees know it exists.

Do small businesses with fewer than 10 employees have to write a safety program?

Size exemptions in OSHA apply only to specific requirements. The injury and illness recordkeeping rule (29 CFR 1904) partially exempts employers with 10 or fewer employees in low-hazard industries. But written program requirements in individual standards, like Hazard Communication (29 CFR 1910.1200) or Lockout/Tagout (29 CFR 1910.147), carry no small-employer exemption. If the hazard is present, the written program is required regardless of company size.

How often does an OSHA-compliant safety program need to be reviewed?

Most OSHA standards that require written programs also require review when conditions change, when incidents occur, or at set intervals. Several state plans (California, Washington, Oregon) explicitly require annual review of the written safety program. Even where federal OSHA sets no specific interval, annual review is the accepted practice. Document every review with a date and the name of the person who conducted it.

What states have additional safety program requirements beyond federal OSHA?

Twenty-seven states and two territories run OSHA-approved state plans. The states with the biggest additional written program requirements include California (IIPP required for all employers under Title 8 CCR 3203), Washington (written accident prevention program under WAC 296-800), Oregon (written program for employers with 10 or more employees under OAR 437-001-0765), and Michigan (Part 1 general industry rules). Check your specific state plan's website for current requirements.

Can I use a template or downloaded safety program from the internet?

A template is a starting point, not a finished product. The trouble with generic templates is that OSHA's equipment-specific requirements (lockout/tagout especially) demand procedures written for your actual equipment, not a placeholder. A template that references hazards you don't have, or misses hazards you do have, is worse than nothing because it gives a false sense of completion. Use a template to understand the structure, then rewrite every section to match your workplace.

What happens if OSHA finds my written safety program is missing required elements?

Missing required elements usually results in a serious citation. In 2023, the average OSHA serious violation penalty was $15,625 per violation. Each missing element in each required program can be cited separately. A facility missing key elements across three written programs could face $45,000 or more in penalties from a single inspection. Willful violations, where the employer knew the requirement existed and chose not to comply, can reach $156,259 per violation.

Does my safety program need to be written in languages other than English?

OSHA requires training in a language and vocabulary employees can understand. If your workforce includes employees who are not English-proficient, your written program and training materials have to be accessible in their language. This is not a suggestion. OSHA has cited employers specifically for providing safety training only in English when non-English-speaking employees were present. The Hazard Communication standard (29 CFR 1910.1200) makes the comprehension requirement explicit.

How does the general duty clause affect my written safety program?

Section 5(a)(1) of the OSH Act, the general duty clause, requires employers to protect employees from recognized hazards even when no specific standard covers that hazard. OSHA uses it to cite employers for hazards that are well-known in an industry but not addressed by a specific CFR standard. Your written program should document controls for all recognized hazards in your workplace, not only the ones with specific CFR standards, because the general duty clause fills every gap.

What is an Injury and Illness Prevention Program (IIPP) and do I need one?

An IIPP (sometimes called an I2P2 or accident prevention program) is a catch-all written safety program required by several state plans. California's IIPP requirement under Title 8, CCR Section 3203 applies to every California employer, no exceptions. Washington and Oregon have equivalent requirements. Federal OSHA has no mandatory IIPP standard, though it proposed one in 2016 that was never finalized. If you are in a state-plan state, check whether your state requires one.

How do I document employee training for my written safety program?

Training documentation should capture the employee's name, the training date, the topic or standard covered, the trainer's name, and the employee's signature. Keep these records centrally, organized by employee and by standard. Some standards set retention periods: bloodborne pathogen training records must be kept 3 years (29 CFR 1910.1030). For standards without an explicit retention rule, keeping records for the duration of employment plus 3 years is a defensible practice.

What is OSHA's On-Site Consultation Program and is it confidential?

OSHA's On-Site Consultation Program provides free, confidential safety and health consultations to small and medium-sized businesses. Consultants find hazards, recommend fixes, and help employers understand compliance requirements. The consultation is separate from OSHA enforcement: findings stay confidential and do not trigger inspections or citations. In 2023 the program served more than 28,000 small businesses. Contact your state's consultation program through OSHA.gov to schedule a visit.

Do I need a separate safety program for each OSHA standard, or can I combine them?

You can combine them into one document, and that is usually the better move. A single integrated safety program with clearly labeled sections for each applicable standard is easier to train on, easier to update, and easier to present during an inspection than a stack of separate binders. The content requirements come from each individual standard, but the format is up to you. Just make sure every required element from every applicable standard shows up somewhere in the document.

How does a written safety program interact with OSHA recordkeeping requirements?

Your written program should reference your recordkeeping procedures and connect them to 29 CFR 1904. Specifically, the incident investigation section should spell out how injuries and illnesses land on the OSHA 300 Log, who makes the recording determination, and where records are kept. OSHA 300 Logs must be retained 5 years. The written program's incident reporting procedures feed the recordkeeping system directly, so a gap in one usually exposes a gap in the other.

Sources

1. OSHA, Hazard Communication Standard (29 CFR 1910.1200): Requires a written hazard communication program for employers where employees may be exposed to hazardous chemicals
2. OSHA, State Plans Directory: 27 states and territories operate OSHA-approved state plans; state plans must be at least as effective as federal OSHA
3. California Department of Industrial Relations, Cal/OSHA (Title 8 CCR Section 3203, Injury and Illness Prevention Program): California requires an Injury and Illness Prevention Program for every employer under Title 8 CCR Section 3203, with no direct federal equivalent
4. OSHA, Emergency Action Plan Standard (29 CFR 1910.38): A written emergency action plan is required for employers with 11 or more employees and must cover evacuation, alarm systems, and employee accountability
5. OSHA, Safety and Health Program Management Guidelines: OSHA's voluntary guidelines recommend regular workplace hazard surveys and documented hazard identification systems
6. Bureau of Labor Statistics, Injuries, Illnesses, and Fatalities (Survey of Occupational Injuries and Illnesses): BLS publishes annual industry-level injury and illness rates by NAICS code used to benchmark workplace hazard priorities
7. OSHA, On-Site Consultation Program: OSHA's free, confidential On-Site Consultation Program served over 28,000 small businesses in 2023
8. OSHA, Top 10 Most Frequently Cited Standards FY2023: Hazard Communication, Respiratory Protection, Lockout/Tagout, and Powered Industrial Trucks consistently appear in OSHA's annual top 10 cited standards
9. OSHA, Penalties: Average OSHA penalty for a serious violation was approximately $15,625 in 2023; willful or repeated violations can reach $156,259 per violation
10. OSHA, QuickTakes Newsletter: OSHA publishes a free twice-monthly newsletter summarizing regulatory changes and compliance resources
11. OSHA, Recordkeeping (29 CFR 1904): OSHA 300 Logs, 300A Summaries, and 301 Incident Reports must be retained 5 years from the end of the calendar year they cover
12. OSHA, Control of Hazardous Energy (Lockout/Tagout) Standard (29 CFR 1910.147): Lockout/tagout requires documented equipment-specific energy control procedures for each piece of equipment that could unexpectedly energize