Lockout tagout written program template for small machine shops

Last updated 2026-07-09

What does OSHA actually require for a lockout tagout written program?

Four things: a written program, machine-specific procedures, trained employees, and an annual inspection of each procedure. That's not my paraphrase. 29 CFR 1910.147(c)(1) says, "The employer shall establish a program consisting of energy control procedures, employee training and periodic inspections to ensure that before any employee performs any servicing or maintenance on a machine or equipment where the unexpected energizing, startup, or release of stored energy could occur and cause injury, the machine or equipment shall be isolated from the energy source and rendered inoperative." ^[1]

The standard breaks into four hard requirements:

1. A written energy control program (the policy document). 2. Energy control procedures for each machine or piece of equipment (unless a documented exception applies). 3. Employee training covering authorized employees (those who actually lock out) and affected employees (those who work nearby). 4. Periodic inspections, at least annually, of the energy control procedures.

Small shops read "written program" and think one short document covers everything. It doesn't. The policy document sets the rules. The machine-specific procedures do the real work. A three-person shop with five machines still needs five documented procedures unless OSHA's group-procedure exception applies, and that exception requires all the machines to share the same type and magnitude of energy, the same shutdown sequence, and so on. ^[1]

For how lockout tagout fits your overall compliance picture, that linked overview covers the standard from the ground up.

What should a small machine shop's written lockout tagout program include?

Two layers: the policy layer and the procedure layer. Most templates combine them in one binder or PDF, which is fine as long as both layers are actually there.

Policy layer (the program document)

This part does not need to be long. A solid one runs four to six pages. It should cover:

• Scope: which operations and employees the program covers.
• Definitions: "authorized employee," "affected employee," "lockout," "tagout," "energy isolating device," and "energized" as OSHA defines them.
• Hardware requirements: the type of locks, tags, hasps, and lockout stations you provide (locks must be individually keyed, not shared; tags must warn against re-energizing). ^[1]
• Sequence for locking out: notify affected employees, shut down the machine, isolate the energy source, apply the lockout device, release stored energy, verify isolation.
• Special situations: group lockout when more than one employee works on the same machine, contractor coordination, shift changes.
• Tagout-only policy: if your shop uses tagout instead of lockout on any machine, the program must explain why lockout isn't feasible and how tagout gives equivalent protection. OSHA treats lockout as the default; tagout-only programs draw more scrutiny. ^[1]
• Annual inspection requirement and who conducts it.
• Retraining triggers (new equipment, new hazards, deviations found during the annual audit).

Procedure layer (machine-specific energy control procedures)

For each machine, you need a written procedure a worker can follow step by step. Appendix B to 1910.147 gives a format worth following, because OSHA compliance officers already know it. ^[1] Each procedure should include:

• Machine name and location.
• All energy sources (electrical, pneumatic, hydraulic, gravitational, spring, thermal, chemical).
• Location and type of each energy-isolating device (disconnect switch, valve, etc.).
• Lockout/tagout hardware used.
• Step-by-step shutdown sequence.
• Steps to release or restrain stored energy.
• Verification step.
• Steps to restore energy after work is done.

A CNC lathe usually has at least three energy sources: the main electrical disconnect, the control circuit, and sometimes hydraulic chuck pressure. Each one goes on the procedure form.

Writing procedures from scratch is real work. It's also a one-time investment. Once the procedures exist, the annual inspection is mostly a check that nothing has changed. Tools like the SafetyFolio program generator walk you through each required element and build a machine-shop LOTO program in about 15 minutes, which cuts most of that first-time build time.

How does the OSHA lockout tagout standard define 'small' or 'minor' servicing exceptions?

This is where a lot of small shops trip. 29 CFR 1910.147(a)(2)(ii) carves out "minor tool changes and adjustments, and other minor servicing activities" that happen during normal production, but only when the work is routine, repetitive, integral to production, and an alternative measure like a machine guard gives effective protection. ^[1]

The exception is narrower than it sounds. Clearing a jam on a press while the press stays energized is the classic gray area. OSHA's letters of interpretation are blunt about it: if the employee could be exposed to unexpected energization, the exception doesn't apply. ^[2] When in doubt, write your program to require lockout. A compliance officer who reads a policy saying "employees may clear jams without lockout" will dig into whether your guards really provide equivalent protection.

The cord-and-plug exception is cleaner. If a machine runs off a cord-and-plug connection and the person servicing it has exclusive control of the plug (in their pocket or within their line of sight), lockout isn't required. ^[1] Bench grinders and drill presses usually qualify. CNC machines, lathes, mills, and anything with hydraulic or pneumatic stored energy do not, because pulling the plug does nothing to release stored energy.

What are the most common OSHA lockout tagout violations cited in machine shops?

1910.147 has landed in OSHA's top five most-cited standards every year for over a decade. In fiscal year 2023 it ranked fifth with 2,554 violations. ^[3] As of the 2023 penalty adjustment, a serious violation ran up to $15,625 per instance and a willful violation up to $156,259. ^[4]

The ones that show up most in machine shops:

• No written program at all. Common in shops that have run for twenty years without a citation.
• Machine-specific procedures missing or generic. One "turn off the machine and put a lock on it" procedure doesn't satisfy 1910.147(c)(4). ^[1]
• Annual inspection not documented. The inspection has to be certified in writing with the date, the machine, the employee names, and the name of the person who ran it.
• Locks shared or master-keyed. Each authorized employee gets their own lock and their own key. One lock per person isn't just good practice. It's required. ^[1]
• Tags used without locks where lockout is feasible. Tagout-only setups on machines that could take a lock draw citations almost automatically.
• Affected employees not trained. Missing training records for employees who run machines near maintenance work.

If an incident triggers an OSHA inspection, energy control is one of the first things they audit.

What does a lockout tagout written program template actually look like?

Below is the skeleton of a compliant program for a small machine shop. This is not boilerplate you can sign and file. It's a structural guide. Fill the bracketed items with your actual information.

---

[Company Name] Energy Control Program Effective Date: [Date] | Last Reviewed: [Date]

1. Purpose and Scope This program covers all servicing and maintenance of machines and equipment where unexpected energizing, startup, or release of stored energy could cause injury. It applies to all [Company Name] employees at [facility address].

2. Definitions (Use OSHA's definitions from 29 CFR 1910.147(b) verbatim here.)

3. Responsibilities

• Program administrator: [Name or title] maintains procedures, coordinates annual inspections, and keeps hardware stocked.
• Authorized employees: [Names or job titles] are authorized to perform lockout/tagout.
• Affected employees: [Names or job titles] operate or work near machines during servicing.

4. Energy Control Hardware The company provides: individually-keyed padlocks (one per authorized employee), lockout hasps for multi-employee lockout, lockout tags stating "Do Not Operate," and a lockout station at [location].

5. General Lockout/Tagout Sequence 1. Notify all affected employees. 2. Identify all energy sources and their isolating devices. 3. Shut down the machine using normal stopping procedures. 4. Isolate all energy sources. 5. Apply lockout/tagout device(s) to energy-isolating devices. 6. Release or restrain all stored or residual energy. 7. Verify isolation before starting work. 8. After work, restore energy in reverse order, clear employees, remove LOTO devices, notify affected employees, re-energize.

6. Special Procedures

• Group lockout: when two or more authorized employees work on the same machine, each applies their own lock to a hasp. [Describe your group procedure.]
• Contractor coordination: outside contractors must follow their own lockout program OR our program; coordination happens before work begins. [Name who coordinates.]
• Shift changes: [Describe how locks transfer between shifts.]

7. Annual Inspection A periodic inspection of each energy control procedure runs at least annually, conducted by [Name/title], who is an authorized employee. The inspection is certified in writing using [Form Name/Number].

8. Training Authorized employees get initial training before performing lockout/tagout and retraining whenever a procedure changes or a deficiency turns up. Affected employees get training on the purpose of lockout/tagout and when not to restart a machine. Records are kept in [location].

[Machine-Specific Procedures: attach one per machine using OSHA Appendix B format]

---

That's the skeleton. The machine-specific procedures are attachments, not embedded in this document. Keep them in a binder at the machine or on a hook at the lockout station.

Do tagout-only programs ever work for machine shops, and when does OSHA accept them?

Rarely, and only under narrow conditions. 29 CFR 1910.147(c)(3) permits tagout when the energy-isolating device is not capable of being locked out, meaning it physically cannot accept a lock. ^[1] That's a real engineering limitation, not a preference and not a cost decision.

If you go tagout-only, your written program has to say in writing that lockout isn't feasible for those specific machines, name the machines, describe the extra means of protection (removing and isolating a circuit element, blocking a controlling switch, opening a second disconnect, using a specially designed tag), and retrain employees that a tag is a warning only, never a physical barrier.

On a modern machine shop floor, almost every machine has an isolating device that accepts a lock. Older manual valves and some legacy knife switches sometimes don't. If that's your situation, document it machine by machine. A blanket tagout-only policy across the whole shop is close to impossible to defend to an inspector.

How do annual lockout tagout procedure inspections work, and who can conduct them?

The annual inspection lives in 29 CFR 1910.147(c)(6). An authorized employee, someone trained and permitted to perform lockout/tagout, has to conduct it. ^[1] The inspection does two jobs: confirm the written procedure still matches the machine, and confirm employees understand and follow it.

In a small shop, that usually means the owner or shop foreman walks the lockout procedure on each machine with the people who use it. You're hunting for changes. Did the machine get a new electrical circuit, a new hydraulic line, a new pneumatic connection? Did the isolating device get swapped out? If anything changed, update the procedure before you sign off.

The certification, which OSHA requires in writing, needs:

• The machine or equipment identity.
• The date of the inspection.
• The names of the employees included.
• The name of the person who performed it.

A simple form does the job. Plenty of shops use a one-page log sheet pinned inside the binder that holds the machine procedures. There's no OSHA-mandated form number. The content is what matters.

Here's what a lot of shops miss. The inspection is supposed to be a real walkthrough, not a signature on a form. Compliance officers sometimes ask employees whether they've done a recent LOTO review. If the employee has no memory of it, the certification loses credibility fast.

What training do authorized and affected employees need under 1910.147?

Training requirements sit in 29 CFR 1910.147(c)(7). The rule splits employees into three groups, each with different training content. ^[1]

Authorized employees (those who lock out) must be trained on:

• The hazardous energy sources present and their type and magnitude.
• The methods and means to isolate and control those energy sources.
• The specific procedures for the machines they service.

Affected employees (those who operate or work near machines being serviced) must be trained on:

• The purpose and use of the energy control procedure.
• The rule against restarting or re-energizing a locked-out machine.

Other employees who work where LOTO is used must know one thing: if they see a lock on a machine, don't try to operate it.

Retraining is required when the employer has reason to believe an employee doesn't understand the procedures, when there's a change in job assignment or machines, or when the procedures change. Annual training isn't explicitly required for authorized employees who are already proficient. Most shops run a quick annual refresher anyway, usually rolled into the annual inspection walkthrough.

Documentation has to be kept. OSHA doesn't dictate a record format, but the standard requires training to be certified in writing with the employee's name and date. ^[1] A sign-in sheet listing the topics covered is enough.

For the wider training picture, the OSHA training guide covers how to document and structure your program.

How do you handle lockout tagout when contractors or outside vendors work on your equipment?

This is a hole in a lot of small shop programs. 29 CFR 1910.147(f)(2) speaks to outside personnel directly: when outside contractors perform work covered by the section, the on-site employer and the outside employer must inform each other of their respective lockout or tagout procedures, and each must make sure its own employees follow the other's program. ^[1]

In practice, before a vendor's technician touches your CNC machine, you need a conversation and a record of it. You either ask them to follow your procedures (and confirm they understand them) or agree to follow theirs (and make sure your people know to stay off the machine). The safest move for a small shop is to have the outside technician follow your written program, since you know your machines and your energy sources better than they do.

A one-page contractor coordination checklist in your program document handles this. It should ask: Does the contractor have their own written LOTO program? Have we exchanged procedures? Who is the on-site contact for each employer? That checklist becomes your proof if OSHA asks.

How much does it cost to set up a lockout tagout program for a small machine shop?

Hardware is cheap. Documentation and training are the real cost, and they cost time more than money.

Item	Typical Cost
Padlocks (individually keyed, per employee)	$8-$20 each
Lockout hasp (for group lockout)	$10-$25 each
Lockout tags (pack of 25)	$15-$30
Lockout station/board	$50-$200
Cable lockouts, valve lockouts (as needed)	$15-$60 each
Lockout tagout training (per employee, online)	$20-$60 per person

For a five-person shop with six machines, total hardware runs roughly $200-$500. Training might cost $150-$300 for initial authorized employee training through an outside provider or online course. The written program and machine procedures carry the big time cost. Expect four to eight hours to write decent procedures from scratch the first time you do it yourself.

The penalty math makes the case on its own. A single serious 1910.147 citation runs up to $15,625. ^[4] A willful or repeat violation can hit $156,259. Most cited shops get multiple violations at once, so the real exposure is a multiple of those numbers.

An OSHA 30 course for your shop foreman gives a solid grounding in the wider compliance framework that makes writing programs like this easier.

What OSHA resources and free templates exist for lockout tagout programs?

OSHA publishes free materials that are genuinely useful, mostly because they're built around the standard's actual language.

• OSHA's 1910.147 standard text at osha.gov includes Appendix A (explanatory information) and Appendix B (a sample energy control procedure format). Appendix B is the closest thing OSHA offers to an official template. ^[1]
• OSHA's Control of Hazardous Energy (Lockout/Tagout) eTool walks the standard section by section with examples. Free and current. ^[5]
• OSHA Publication 3120 is a small-format guide to the lockout/tagout standard written for small employers. ^[6]

State-plan states sometimes add their own resources. California's Cal/OSHA, Michigan's MIOSHA, and Washington's WISHA each run their own version of the lockout standard, which must be at least as effective as the federal rule. ^[7] If you're in a state-plan state, check with your state agency, because the forms and procedures can differ.

To skip the blank-page problem, the SafetyFolio program generator at safetyfolio.com builds a machine-shop LOTO program with every required element in one sitting, which you then customize with your actual machine procedures.

For the underlying OSHA framework, the hazard communication guide covers a parallel written-program requirement most machine shops need to handle at the same time.

How does lockout tagout enforcement actually work, and what triggers an OSHA inspection?

Most small shop inspections start one of four ways: a worker complaint, a referral from another agency, a programmed inspection (OSHA targets high-hazard industries including fabricated metal manufacturing, SIC 34, under its Site-Specific Targeting program), or a fatality or serious injury. ^[8]

Machine shops fall under OSHA's general industry standards (29 CFR 1910), not construction. The primary citation for lockout violations is 1910.147. An inspector who finds one LOTO problem usually goes looking for the rest. Missing written program, missing machine procedures, missing annual inspection certification, and missing training records can each land as a separate citation.

OSHA classifies violations as other-than-serious, serious, willful, or repeat. A missing written program might be serious. A missing procedure on a machine where an employee was already hurt could be willful, if OSHA decides the employer knew the rule and ignored it. Repeat violations, issued when the same standard is cited again within five years of a final citation, carry the same penalty ceiling as willful. ^[4]

The practical defense is documentation. An employer with a written program, machine procedures, annual inspection certifications, and training records is in far better shape than one with none of it, even when something is imperfect. Compliance officers have discretion in how they classify and group violations, and a good-faith effort shows.

Frequently asked questions

Does a machine shop with fewer than ten employees still need a written lockout tagout program?

Yes. 29 CFR 1910.147 applies to all general industry employers regardless of size. There's no small-employer exemption for the lockout/tagout standard. A one-person shop where the owner services their own machines still needs a written energy control program and machine-specific procedures. The only size-based break in OSHA's general industry rules is the partial exemption from injury and illness recordkeeping for employers with ten or fewer employees, which is a separate regulation entirely.

Can I use one generic procedure for all my machines instead of a separate one for each?

OSHA allows a single procedure to cover multiple machines only when those machines have the same type and magnitude of energy, use the same sequence of steps, and carry no unique hazards. In a typical machine shop, a CNC mill, a drill press, and a bandsaw rarely meet that test. If your machines differ in energy source type, voltage, stored energy, or shutdown sequence, you need separate procedures. Generic procedures are a top citation item.

How often does an authorized employee need to be retrained on lockout tagout?

29 CFR 1910.147(c)(7)(iii) requires retraining when there's reason to believe the employee doesn't understand the procedure, when equipment or procedures change, or when a new job assignment calls for different lockout steps. Annual retraining isn't explicitly required by the standard, but many employers do it as part of their annual inspection walkthrough. If OSHA finds a deviation during an inspection, they'll ask for the most recent training date.

What happens if an employee removes someone else's lock from a machine?

Removing another employee's lockout device without authorization is one of the most dangerous acts in a machine shop and a direct violation of 29 CFR 1910.147(e)(3). The standard allows lock removal by someone other than the authorized employee only through a specific, documented process: the employer verifies the employee is off-site, tries to contact them, and documents the whole thing. Your written program should spell this out and treat unauthorized lock removal as a serious disciplinary matter.

Do I need lockout tagout if my machines are only plugged into standard wall outlets?

Cord-and-plug machines have a specific exception under 29 CFR 1910.147(a)(2)(iii): if the machine is plugged in and the person doing the work has exclusive control of the plug (unplugged and in their possession or within arm's reach), full lockout/tagout isn't required. But this only works for machines with no other energy sources. A machine with a pneumatic line, hydraulic pressure, or spring tension still needs those sources controlled even after you pull the electrical cord.

What does 'release of stored energy' mean in a machine shop context, and how do you address it in procedures?

Stored energy is any energy left in a machine after it shuts off: hydraulic pressure in a cylinder, spring tension in a clamping mechanism, gravitational potential in a suspended part, a charged capacitor in a control system, or compressed air in a line. Your energy control procedure must list each stored energy source and the method to release or restrain it before work starts, such as bleeding a hydraulic line, blocking a ram in place, or waiting for a capacitor discharge cycle.

How do you handle lockout tagout during a shift change when one crew locks out a machine and another crew finishes the work?

Your written program must address shift transfers. The common approach is a continuity lockout: the incoming authorized employee applies their lock to the hasp before the outgoing employee removes theirs, so the machine is never without a lock during the handoff. Some shops use a shift transfer lock held by the supervisor. Whatever method you pick, document it. Compliance officers ask about shift change procedures specifically because it's a common gap.

What is the difference between an energy-isolating device and an energy-control device, and why does it matter?

An energy-isolating device physically prevents the transmission or release of energy: a disconnect switch, a manually operated valve, a block. An energy-control device is something like a pushbutton or selector switch that controls energy flow but can be overridden. Under 29 CFR 1910.147, lockout devices must be applied to energy-isolating devices, not control devices. Putting a lock on a start button doesn't satisfy the standard if the machine can still be energized another way.

Can my machine shop use a group lockout when multiple employees work on the same machine at the same time?

Yes, and 29 CFR 1910.147(f)(3) addresses group lockout directly. Each authorized employee must keep personal control over the lockout, which usually means a hasp at the energy-isolating device holding each employee's individual lock. Your written program must describe the group lockout procedure, name a primary authorized employee to coordinate it, and explain how each employee keeps personal protection throughout the job.

How does OSHA's annual inspection of lockout tagout procedures differ from an OSHA compliance inspection?

They're completely different. The annual inspection is an internal audit your own authorized employee conducts to confirm each energy control procedure is accurate and employees understand it. It's required by 29 CFR 1910.147(c)(6) and must be certified in writing. An OSHA compliance inspection is an external audit by an OSHA officer that can end in citations and fines. The documentation from your annual inspections is evidence you show during an OSHA compliance inspection.

What penalty can a small machine shop expect if OSHA cites it for a lockout tagout violation?

As of the 2023 penalty adjustment, OSHA's maximum penalty for a serious violation is $15,625 per instance, and willful or repeat violations can reach $156,259. Multiple machines with missing procedures, missing annual inspections, and missing training records can each be cited separately. A small shop that has never had a written program could realistically face five to ten separate citation items from a single inspection.

Does OSHA require a specific format for machine-specific energy control procedure forms?

No specific form is required, but OSHA's Appendix B to 29 CFR 1910.147 gives a sample format that covers all the required content: machine identity, energy sources, location and type of isolating devices, lockout hardware, and the step-by-step procedure. Following Appendix B's structure is a practical choice because compliance officers already know it and it organizes every required item in one place.

Is tagout ever acceptable in a machine shop, or should I always use lockout?

Lockout is always the default. Tagout is only acceptable when the energy-isolating device physically cannot accept a lockout device, which is a genuine engineering limitation you document machine by machine. If a machine can be locked out, it must be. A shop-wide tagout-only policy is almost never defensible under 29 CFR 1910.147(c)(3). If you have specific older machines where lockout truly isn't feasible, document that finding in writing for each one and describe the extra protective measures in your procedures.

How do I know if my state has its own lockout tagout standard that's stricter than federal OSHA?

Twenty-two states and two territories run their own OSHA-approved plans covering private-sector employers. These state plans must be at least as effective as federal OSHA, and some go further. California (Cal/OSHA), Michigan (MIOSHA), and Washington (WISHA) each run active enforcement programs. Check OSHA's state plan page at osha.gov to see if your state is listed, then look up your state agency's specific lockout/tagout requirements and any state forms.

Sources

1. OSHA, 29 CFR 1910.147 Control of Hazardous Energy (Lockout/Tagout): Requirements for written energy control program, machine-specific procedures, authorized and affected employee training, annual inspection certification, group lockout, contractor coordination, cord-and-plug exception, and tagout-only conditions
2. OSHA, Letters of Interpretation for 1910.147: OSHA's interpretations of the minor servicing exception and when lockout is required for jam clearing and similar tasks
3. OSHA, Top 10 Most Frequently Cited Standards, Fiscal Year 2023: 1910.147 was cited 2,554 times in fiscal year 2023, making it the fifth most-cited standard
4. OSHA, Penalties page: Maximum penalty for a serious violation is $15,625 per instance; willful or repeat violations can reach $156,259 (figures as of 2023 annual adjustment)
5. OSHA, Control of Hazardous Energy (Lockout/Tagout) eTool: OSHA's interactive eTool walking through the lockout/tagout standard section by section with examples
6. OSHA Publication 3120, Control of Hazardous Energy Lockout/Tagout: OSHA's small-employer guide to the lockout/tagout standard
7. OSHA, State Plans page: Twenty-two states and two territories operate their own OSHA-approved state plans that must be at least as effective as federal OSHA
8. OSHA, Enforcement page: OSHA inspection triggers include worker complaints, referrals, programmed targeting of high-hazard industries, and fatality/serious injury reports
9. Bureau of Labor Statistics, Injuries, Illnesses, and Fatalities: BLS injury and fatality data for machine-related incidents relevant to lockout/tagout hazard context