Lockout tagout procedure template excel: build one that actually passes OSHA inspection

Last updated 2026-07-09

What does OSHA actually require in a lockout tagout procedure?

OSHA's Control of Hazardous Energy standard, 29 CFR 1910.147, requires a documented energy control procedure for each machine where a worker could be exposed to unexpected energization, startup, or release of stored energy ^[1]. The standard says the procedure must include "the steps for shutting down, isolating, blocking and securing machines or equipment to control hazardous energy." That's the actual text, not a paraphrase ^[1].

So what has to be inside a compliant procedure? Appendix A to 1910.147 gives a model format, and it names eight content areas ^[8]:

1. A statement of the intended use of the procedure 2. The steps for shutting down, isolating, blocking, and securing the machine 3. The steps for placing, removing, and transferring lockout or tagout devices 4. The requirements for testing to verify that energy sources are effectively isolated 5. Specific procedural steps for each type and magnitude of energy 6. The hardware required (lock type, tag type, hasps, blocks, and so on) 7. The name of the equipment or machine 8. The authorized employees who may perform the procedure

There is one narrow exception. If a machine has a single energy source that can be completely de-energized and locked out with a single device, and it holds no stored or residual energy, you may use a more general procedure instead of a machine-specific one ^[1]. Most industrial equipment has multiple energy sources. So most machines need their own written procedure.

Getting this wrong is expensive. OSHA's maximum penalty for a serious violation is $16,550, and a willful or repeated violation can reach $165,514 ^[2]. Lockout tagout lands in OSHA's top ten cited standards nearly every year, usually inside the top five for general industry ^[3].

What fields go in a lockout tagout Excel or Word template?

A working LOTO template, whether it lives in Excel, Word, or a PDF form, has two parts: a header with machine-level information and a body with the step-by-step sequence. Get both parts right and you cover the eight content areas OSHA lists in Appendix A ^[8].

Header section (machine-level fields)

Field	Why it matters
Equipment name and ID number	Ties the procedure to a specific asset; matches your equipment list
Location (building, department, machine bay)	Workers have to be able to find the machine
Manufacturer and model	Useful for service manuals; an inspector may ask
Energy sources with magnitude	List each: electrical (volts/amps), pneumatic (psi), hydraulic (psi), thermal, chemical, gravitational, mechanical spring
Isolation points	Describe each: "Main disconnect switch, upper-right panel, red handle"
Lockout hardware required	Lock type, hasp size, blind flange, lockout block, tag type
Number of workers required	Some machines take more than one person to isolate safely
Authorized employees	Names or job titles cleared to perform the LOTO
Procedure author and approval date	Establishes accountability
Last annual review date	1910.147(c)(6) requires periodic review; most compliance officers look for annual reviews

Body section (step-by-step sequence)

This is where most templates fall apart. Steps have to be numbered and written in plain language a front-line worker can follow under pressure. Each step names the specific isolation point, the specific hardware, and any verification action. "Turn off the machine" is not a compliant step. "Turn the main disconnect switch (red handle, upper-right panel, breaker box #3) to the OFF position" is.

The sequence for a typical machine runs like this: notify affected employees, shut down normally, identify all energy sources, isolate each one, apply lockout devices to each isolation point, release or restrain stored energy (bleed pneumatics, discharge capacitors, block gravity-loaded parts), then verify isolation by trying to start the machine and testing with a meter or gauge. That last step, verification, is the one workers skip most and the one inspectors check first.

The same fields carry over to a Word template. Word handles complex machines better when steps need paragraph-style instructions or diagrams. Excel wins when you have many machines and want a consistent row-and-column structure you can sort and filter by department or energy type. Plenty of shops run Excel as the master log and use Word or PDF for the individual procedures posted at each machine.

Why is Excel a good format for managing LOTO procedures across multiple machines?

Excel earns its keep at the fleet level, not the individual-procedure level. The distinction matters.

Say you have 40 machines. You need 40 separate procedures. Store all 40 as loose Word files and you have no fast way to answer a question like "which machines have 480V electrical sources?" or "which procedures are past 12 months since review?" An Excel master log answers both in seconds.

Build the log with one row per machine and columns that mirror the header fields in the table above. Then use Excel's filter to pull every machine due for review, every machine with hydraulic energy, or every machine assigned to one authorized employee. That visibility is the line between a paper LOTO program that dies in a binder and one that stays maintained.

For the steps themselves, Excel cells cramp fast. Most people write the detailed steps in a linked Word document or PDF and store the file path in the Excel row. The master log stays clean and the full procedure is one click away.

One warning. If your Excel file lives on one computer, it's a single point of failure. Put it on a shared drive or cloud folder with version history so nobody silently overwrites it. And print each machine-specific procedure, laminate it, and post it at the machine. That's still the best format for the people doing the work.

What energy types does the template need to account for?

This is where small business LOTO programs fail inspections. People write a procedure for the obvious electrical disconnect and stop. OSHA's standard covers every form of hazardous energy, and inspectors know exactly which ones get missed ^[1].

The energy types your template needs a field for:

• Electrical: Voltage, amperage, AC or DC. Note every circuit, not only the main disconnect. Some machines run control circuits on a separate breaker.
• Pneumatic: Air pressure in psi. Residual pressure sits in lines and cylinders after you close the supply valve. Your procedure needs a bleed step.
• Hydraulic: Fluid pressure in psi. Hydraulic systems store enormous energy, and a line can stay pressurized long after the pump shuts off.
• Thermal: Steam lines, heated platens, ovens. Note the cool-down time before the machine is safe to touch.
• Chemical: Pressurized process lines carrying chemicals. These need a separate lockout or blind flanging step.
• Gravitational: Anything that could fall. Suspended dies, press rams, elevated conveyors. The procedure has to specify blocking or pinning.
• Mechanical (spring energy): Springs under compression or tension that release when a component comes off.

For each energy type, the template should capture the location of the isolation point, the method of isolation, the method for releasing stored energy, and the verification method. "Electrical, Pneumatic" jammed into one cell is not enough. A compliance officer will ask for the magnitude and isolation point of each one.

Contact with objects and equipment, the injury category most directly tied to inadequate LOTO, accounted for 738 worker deaths in 2022, according to the Bureau of Labor Statistics Census of Fatal Occupational Injuries ^[4]. That's the reason documenting every energy source is worth the hour it takes.

How do you write the step-by-step procedure section of the template?

The step-by-step section is the heart of the procedure and the slowest part to get right. Here's an approach that holds up.

Walk the machine with someone who runs it every day. That operator knows where the energy sources hide, including the ones nobody labeled. Walk the full de-energization sequence before you write a word. Then write the steps in the order a worker actually does them, not the order that looks tidy on a diagram.

Each step gets its own row (in Excel) or its own numbered line (in Word). Lead with an action verb and a specific object: "Turn," "Close," "Apply," "Bleed," "Block," "Verify." Put the physical location of the component inside the step. Don't send the worker to a separate diagram for routine steps. That's where shortcuts start.

Name the hardware in the step. Instead of "Apply lockout device to disconnect," write "Apply a red Masterlock S31 padlock to the main disconnect hasp on breaker panel #2, upper right." If verification needs a meter, write "Verify zero voltage at terminal block TB-1 using a non-contact voltage tester before opening the panel cover."

The re-energization steps matter just as much and go missing just as often. The return-to-service sequence is roughly the reverse: remove blocks and restraints, confirm all tools and workers are clear, remove lockout devices in reverse order, notify affected employees, restore energy, verify normal operation. Every one of those steps has to be spelled out.

A machine-specific procedure for something moderately complex, say a conveyor with electrical and pneumatic sources, usually runs 15 to 25 numbered steps. If yours fits in five lines, you missed something.

What does an annual LOTO procedure review require?

29 CFR 1910.147(c)(6) requires a periodic review of each energy control procedure at least once a year ^[1]. The review does two jobs: confirm the procedure still matches the machine's energy sources and isolation points, and certify in writing that the review happened.

The certification has to name the machine, the review date, the employees included, and the person who conducted it. The standard also says the review should be done by an authorized employee other than the one who uses the procedure. In small shops where one person fills both roles, inspectors have accepted a supervisor sign-off as a reasonable substitute. Still, the text is clear that the reviewer shouldn't be the same authorized employee who routinely runs the procedure, so get a second set of eyes when you can ^[1].

In Excel, track this with a "Date of Last Review" column and a "Reviewer Name" column. Sort by review date once a month and every procedure coming due jumps out. A procedure untouched for more than 12 months is a citation waiting to happen.

The review is also your chance to update the procedure when the machine has changed, when hardware swapped out, or when workers found a safer sequence on the floor. An outdated procedure that doesn't match the actual machine is worse than none, because workers either ignore it or follow the wrong steps.

To build the written program that sits behind these individual procedures, SafetyFolio's safety program generator can produce the overarching energy control program document in about 15 minutes. That's the program-level document the machine procedures plug into.

Who has to be trained, and what does training need to cover?

1910.147(c)(7) splits employees into three groups, each with its own training requirement ^[1].

Authorized employees are the people who actually perform lockout or tagout. They need training on recognizing hazardous energy sources, the type and magnitude of energy in the workplace, and the methods to isolate and control it. Train them on the specific procedures for the machines they touch.

Affected employees operate or use machines being locked out, or work in areas where LOTO happens. They need to understand the purpose of the energy control program and one hard rule: never restart or re-energize equipment that's locked or tagged out.

Other employees who work in areas where LOTO is used need enough instruction to know to leave a locked or tagged machine alone.

OSHA requires retraining when an inspection reveals deficiencies, when there's reason to think an employee doesn't understand the procedure, or when job assignments, machines, or processes change in a way that creates new hazards ^[1].

Training records should show the employee's name, the date, the subject, and the trainer. Keep them for as long as the employee is with you, and preferably longer. Inspectors routinely ask for training records during a LOTO inspection, and "we trained them but didn't write it down" gets treated the same as no training at all.

If your team needs broader context first, the OSHA 30 training course covers energy control as one of its modules, which helps supervisors build a foundation before you roll out machine-specific procedures.

What is the difference between lockout and tagout, and does that change the template?

Lockout physically stops a machine from being re-energized by putting a lock on the energy-isolating device. Tagout uses a tag to warn that the equipment must not run, without physically blocking re-energization.

OSHA has a clear preference. Lockout must be used whenever the energy-isolating device can be locked ^[1]. Tagout is allowed only when the device can't be locked, and even then the employer has to show tagout gives equivalent protection, which usually means extra measures like removing a circuit breaker, blocking a valve, or pulling a control component.

For your template, add a field that records whether the procedure uses lockout, tagout, or both. If tagout covers any energy source, document why lockout isn't feasible for that isolation point and what extra protective steps make up the difference.

Tagout-only programs are rare in well-run shops. Locks are cheap and the liability gap is wide. A lock runs $5 to $15 and a hasp another $5 to $20. If a machine can be locked, lock it.

For the fuller background on the distinction and the whole standard, the lockout tagout overview article covers the regulatory history and the most common citation patterns.

Can you use a generic LOTO template, or does every machine need a custom procedure?

This question never stops coming up, and the honest answer is that it depends on the machine. OSHA's standard gives you one narrow path to a general procedure.

1910.147(c)(4)(i) allows a single general procedure when the employer can show it protects employees and the equipment has only one source of hazardous energy that is obvious, can be fully de-energized by a single lockout device, and holds no stored or residual energy ^[1]. That describes very few industrial machines.

For everything else, you need a machine-specific procedure. A "general LOTO procedure" stretched across every machine in a facility draws a citation in most inspections, because the inspector picks a machine, walks it, and finds the general procedure doesn't match the actual isolation points.

Here's the right use of a template: one consistent format across all your machine-specific procedures. A standard set of fields and a standard step structure that you fill in differently for each machine. The template is the container. The machine-specific content is what goes inside.

A generic Excel or Word template off the internet is a starting point, never a finished procedure. You still have to walk each machine, document its real energy sources and isolation points, and have the procedure reviewed by someone who knows the equipment. No shortcut exists for that field work.

What common mistakes make LOTO procedures fail an OSHA inspection?

Look at the recurring findings in 1910.147 inspections and the same short list of problems shows up again and again.

Missing procedures for specific machines. The employer has a general program but no written procedures for individual pieces of equipment. This is the most-cited specific deficiency under 1910.147.

Procedures that don't match the machine. The equipment got modified, a new energy source was added, or an isolation point moved, and nobody updated the paperwork. The inspector walks the machine with the procedure in hand and finds the gaps.

No verification step. Plenty of procedures list isolation steps but skip verification: testing the machine to confirm it can't start before work begins. OSHA requires it. Many procedures leave it out ^[1].

Stored energy ignored. The procedure kills the main electrical circuit but never touches pneumatic pressure in the lines, spring tension in a component, or gravity load on a suspended part.

Outdated or undated procedures. No last-review date, or a review date more than 12 months old.

Vague steps. "Lock out the machine" or "turn off power" with no mention of which switch, which breaker, which valve, or what hardware.

No employee-specific records. The program exists, but the employer can't show which specific employees were trained on which procedures.

OSHA's top-10 list for fiscal year 2023 put 1910.147 fifth, with 2,554 violations cited ^[3]. That number has barely budged in a decade, which tells you the problem is execution, not awareness.

Where can you get a real lockout tagout procedure template to start from?

A few sources are worth knowing, and a few deserve caution.

OSHA's own Appendix A to 1910.147 is the best starting point. It's a model procedure OSHA wrote, so building your format on it gives you a defensible basis ^[8]. You'll find it in the full text of the standard at OSHA.gov.

OSHA's small business resources include fact sheets and template guidance worth reviewing before you build your own ^[5].

Washington State's DOSH (Department of Labor and Industries) runs one of the largest state OSHA plans in the country and publishes a well-built, publicly available sample LOTO procedure form ^[6]. State plan resources are often more readable than federal publications because those agencies field shop-floor questions directly from employers.

Manufacturer procedures are underused. Many equipment makers publish lockout procedures for their specific machines, sometimes in the operator's manual and sometimes online. They aren't always written to OSHA's exact format, but they beat a blank template for that machine because the energy sources and isolation points are already identified.

Templates downloaded from random websites are fine as structural starting points. Treat them like a blank form: the fields tell you what information to collect, not what to write in them. If you want a template already structured to 1910.147 that also generates the written energy control program to go with it, SafetyFolio builds that in about 15 minutes through its safety program generator.

Whatever source you pick, the field work is what counts. Walk each machine and document its actual energy sources and isolation points. A perfect template full of wrong information is worse than no template.

How does LOTO connect to your broader written safety program?

The machine procedures are the operational layer. OSHA's standard also requires an overarching written energy control program at the policy level ^[1]. That program document lays out the whole approach: who owns the program, how procedures get developed and reviewed, what training is required, how the annual audit runs, and the rules for contractor LOTO coordination.

Think of it as two layers. The policy document lives in your written safety program binder or digital folder and covers the program as a whole. The machine-specific procedures, tracked in your Excel master log, are the execution layer workers use at the point of work.

Both layers have to exist. During an inspection, the compliance officer usually asks for the written program first, then asks for the specific procedure for a machine they watched someone servicing. Missing either layer is a citation.

Energy control connects to other standards too. Electrical safety at 1910.333 cross-references LOTO for work on energized equipment ^[10]. Machine guarding under 1910.212 often surfaces in the same inspection. Hazard communication at 1910.1200 usually gets reviewed alongside LOTO because both turn on identifying and communicating specific task-level hazards.

Keeping incident reports well-documented matters here as well. If a LOTO near-miss or injury happens and you can produce a complete, current procedure plus training records, your exposure in any enforcement action drops sharply. A solid incident report process is the other side of the same coin.

Frequently asked questions

Does every machine need its own lockout tagout procedure, or can I use one for the whole shop?

Every machine needs its own procedure unless it has a single, obvious energy source, a single lockout device that fully controls it, and zero stored or residual energy. That exception fits very few real machines. For everything else, 29 CFR 1910.147(c)(4) requires a machine-specific written procedure. A general shop-wide procedure will draw a citation from most OSHA compliance officers.

What file format should I use for LOTO procedures, Excel or Word?

Use both for different jobs. Excel works best as a master log tracking all your machines, their energy types, hardware, and review dates. Word or PDF works better for the individual procedures workers post at the equipment, because you need room for numbered steps, diagrams, and notes. Most well-run programs link the two: each Excel row points to the machine's detailed Word or PDF procedure.

How often does OSHA require lockout tagout procedures to be reviewed?

29 CFR 1910.147(c)(6) requires at least annual review of each energy control procedure. The review must be certified in writing with the machine name, review date, employees included, and the reviewer's name. Compliance officers check review dates, and a procedure with a review date more than 12 months old is treated as out of compliance.

What are the most common OSHA citations for lockout tagout?

The recurring deficiencies are no written procedure for specific machines, procedures that don't match the actual machine, missing verification steps, stored energy sources left unaddressed, and undated or overdue procedures. 1910.147 was the fifth most-cited OSHA standard in fiscal year 2023, with 2,554 violations cited. These aren't exotic violations. They're documentation and execution failures.

Can employees use the same lock for multiple machines?

Yes, with conditions. Each authorized employee should have a uniquely keyed lock only they can remove. One employee can use the same lock on multiple machines in sequence, or a hasp lets several employees each apply their own lock to one isolation point. The core rule is that nobody should be able to remove another employee's lock, which is why lock-boxes and group lockout require specific documentation in your written program.

What is the OSHA penalty for a lockout tagout violation?

OSHA's maximum penalty for a serious violation is $16,550 per violation, and a willful or repeated violation can reach $165,514. OSHA can cite each machine without a compliant procedure as a separate violation, so a facility with 20 undocumented machines faces large total exposure. Penalties adjust for employer size, good faith, and history.

Does a LOTO procedure template need to include re-energization steps?

Yes. The re-energization sequence carries the same weight as de-energization, and many templates leave it out. Before restoring energy, workers must confirm all tools are removed, all workers are clear, all lockout devices are removed in the correct order, and affected employees are notified. OSHA's model procedure in Appendix A to 1910.147 includes restoration steps as a required section.

What training do employees need before performing lockout tagout?

Authorized employees who perform LOTO must be trained on recognizing hazardous energy sources, the magnitude of energy in their workplace, and the methods to isolate and control it. Affected employees who work near locked-out equipment need training on why they must not restart it. 29 CFR 1910.147(c)(7) requires retraining whenever an inspection reveals deficiencies or when job assignments or equipment change.

Do I need separate LOTO procedures for contractors working in my facility?

Yes. 29 CFR 1910.147(f)(2) requires host employers to inform outside contractors about the facility's energy control program and any machine-specific hazards. The host and contractor also have to coordinate their programs so they don't interfere with each other. If host and contractor employees work on the same machine, their lockout procedures and hardware have to be compatible.

Can I download a free lockout tagout procedure template?

OSHA's Appendix A to 1910.147 is a free, authoritative model procedure template. Washington State's Department of Labor and Industries also publishes a practical sample form. Any downloaded template is a starting point only. You have to walk each machine, document its actual energy sources and isolation points, and review the completed procedure before it's compliant. The format is free. The field work is not.

What is the difference between a lockout tagout procedure and a lockout tagout program?

The written energy control program is the policy-level document describing your overall approach: who owns the program, how procedures are written and reviewed, training requirements, and contractor coordination rules. Machine-specific procedures are the operational documents workers use at the equipment. OSHA requires both. The program without the procedures is incomplete, and the procedures without the program are too.

How do I document stored energy release in a LOTO procedure template?

Add a dedicated section after the isolation steps called something like "Release of Stored Energy" or "Secondary Energy Control." For each stored energy type, list the specific method: bleed pneumatic lines at valve X, discharge capacitor bank at terminal Y, insert die block under ram at point Z, allow a 30-minute thermal cool-down. Then add a verification step confirming the stored energy is gone before work begins.

Sources

1. OSHA, 29 CFR 1910.147 Control of Hazardous Energy (Lockout/Tagout): Requires written energy control procedures, specifies content requirements, defines authorized and affected employee training, and mandates annual procedure review with written certification.
2. OSHA, Penalties: Maximum penalty for a serious OSHA violation is $16,550; maximum for a willful or repeated violation is $165,514.
3. OSHA, Top 10 Most Frequently Cited Standards FY2023: 29 CFR 1910.147 was the fifth most-cited OSHA standard in fiscal year 2023 with 2,554 violations cited.
4. Bureau of Labor Statistics, Injuries, Illnesses, and Fatalities (Census of Fatal Occupational Injuries): Contact with objects and equipment, the injury category most directly linked to inadequate LOTO, accounted for 738 worker deaths in 2022.
5. OSHA, Small Business Safety and Health Resources: OSHA provides template guidance and fact sheets for small business energy control programs.
6. Washington State Department of Labor and Industries, Safety and Health: Washington State DOSH publishes a publicly available sample lockout tagout procedure form.
7. OSHA, 29 CFR 1910.147 Appendix A, Typical Minimal Lockout Procedures: OSHA's model LOTO procedure identifies eight content areas required in a compliant energy control procedure.
8. OSHA, 29 CFR 1910.333 Selection and use of work practices (electrical safety): Electrical safety standard cross-references LOTO requirements for work on energized electrical equipment.