A lockout procedure is a controlled safety process used to isolate machinery, equipment or systems from hazardous energy before maintenance, repair, inspection, cleaning or other work begins. Its purpose is to prevent unexpected start-up, movement, energisation or the release of stored energy while people are working on or near equipment.
Lockout is often associated with electrical equipment, but electrical energy is only one possible hazard. Machinery and building systems can contain mechanical, hydraulic, pneumatic, thermal, gravitational and pressure-related energy. Some hazards remain after equipment has been switched off, which means stopping a machine through its normal controls is not necessarily the same as achieving safe isolation.
In work at height environments, lockout may be required when maintaining powered access equipment, lifting machinery, conveyors, roof-mounted plant, façade access equipment or other systems whose unexpected operation could endanger a worker. Lockout controls hazardous energy rather than the risk of falling itself, so appropriate fall prevention or fall protection measures may still be required.
Lockout, Shutdown and Isolation
A normal shutdown places equipment into a stopped condition using its operating controls. Pressing a stop button, selecting an off position on a control panel or shutting down equipment through software may stop normal operation, but these actions do not necessarily prevent another person or an automated control system from restarting it.
Isolation goes further by separating the equipment from the source of hazardous energy. Depending on the installation, this can involve operating an electrical isolator, closing and securing a valve, disconnecting a supply, blocking mechanical movement or using another suitable energy-isolating device.
Lockout secures that isolation against unauthorised or accidental operation. A lock is normally fitted to an isolating device in a position that prevents it from being returned to its operating state. The person carrying out the work retains control of the key according to the organisation's procedure.
These distinctions are important because equipment may appear inactive while hazardous energy remains available. For example, a motor may be stopped while its electrical supply remains connected, or a hydraulic system may be isolated from its pump while pressure remains trapped within an accumulator or cylinder.
|
Condition |
What it normally achieves |
Main limitation |
|
Shutdown |
Stops normal equipment operation |
Equipment may still be energised |
|
Isolation |
Separates equipment from an energy source |
Isolation may be capable of being reversed |
|
Lockout |
Secures the energy-isolating device |
Stored energy must still be addressed |
|
Verification |
Confirms the intended safe state |
Must be performed using an appropriate method |
A complete lockout procedure therefore involves more than attaching a padlock. It establishes a controlled state in which identified hazardous energy cannot reasonably be introduced or released during the work.
Hazardous Energy and Isolation Points
Before lockout can be applied correctly, the hazardous energy associated with the equipment must be understood. Complex machinery can have several supplies and forms of stored energy, and isolating only the most obvious source can leave a significant residual hazard.
Relevant sources can include:
-
electrical supplies, including separate control or auxiliary circuits;
-
hydraulic and pneumatic pressure;
-
mechanical energy in rotating, tensioned or compressed components;
-
gravity acting on raised loads, platforms, doors or machine parts;
-
stored energy in springs, accumulators, capacitors or pressure vessels;
-
thermal energy, steam and pressurised liquids or gases.
The isolation points should be identified before work starts and should correspond to the actual energy sources rather than simply the controls used during normal operation. Equipment documentation, electrical diagrams, pipework drawings and manufacturers' instructions can be important when establishing these points.
Stored energy requires particular attention because disconnecting the primary supply does not automatically remove it. Pressure may need to be vented, capacitors allowed to discharge, suspended components lowered or mechanically supported, and moving parts allowed to reach a complete stop. Where energy cannot be eliminated, another engineered method may be necessary to prevent its uncontrolled release.
The required isolation method should reflect the equipment and the task. A simple machine with one electrical supply may have a straightforward lockable isolator, while a large industrial installation can require several electrical and mechanical isolation points controlled under a documented sequence.
How a Lockout Procedure Is Carried Out
The exact process depends on the machinery, site and applicable safety arrangements, but an effective lockout follows a deliberate sequence. The procedure should be planned rather than improvised after work has already started.
A typical sequence includes:
-
Identify the equipment, the work to be undertaken and all relevant hazardous energy sources.
-
Notify affected personnel where the shutdown or isolation may influence their work.
-
Stop the equipment using the appropriate normal shutdown procedure.
-
Operate the identified energy-isolating devices to separate the equipment from its energy sources.
-
Apply the required personal or system locks and identification.
-
Release, restrain or otherwise control stored and residual energy.
-
Verify that isolation has been achieved before entering the danger area or beginning work.
-
Maintain control of the isolation throughout the task.
-
After the work is complete, check that guards and components are restored, tools are removed and personnel are clear.
-
Remove locks under the authorised procedure and restore energy in a controlled manner.
Verification is a critical stage. The method depends on the hazard and can include an appropriate electrical test, checking pressure indicators, confirming valves are in the required position or attempting a normal start after isolation where this is safe and appropriate. Operating controls should subsequently be returned to the required position before work proceeds.
Restoration also requires control. Re-energising equipment without checking the work area can introduce hazards just as serious as inadequate isolation at the beginning of the task.
Personal Locks, Group Lockout and Identification
A personal lock provides individual control over an isolation. In a correctly managed arrangement, the lock identifies the person protected by it and that person controls its removal. This principle prevents one worker from casually restoring an energy source while another worker remains exposed.
Where several people are working on the same equipment, group lockout arrangements may be required. These can use multi-lock devices, lock boxes or another controlled system that allows each worker to maintain personal protection while several isolation points are secured. The arrangement should make it impossible to restore the equipment until the required personal locks have been removed.
Tags or labels can provide useful information such as the identity of the person applying the lock, the reason for isolation and relevant work details. Identification is particularly important on installations with multiple similar isolators or where several maintenance activities are taking place simultaneously.
Special procedures are also needed for shift changes, personnel changes, lost keys and situations in which a worker who applied a lock is no longer available. Removing another person's lock without a formal process undermines the fundamental principle of personal control. Organisations therefore normally define who may authorise exceptional removal and what checks must be completed first.
Lockout in Work at Height and Engineered Safety Systems
Lockout becomes particularly important when unexpected equipment movement could affect someone working at height. A worker may be correctly protected against a fall but still be endangered if machinery starts, a platform moves, a suspended component changes position or equipment connected to the work area becomes energised.
Typical examples include maintenance of building maintenance units, powered façade access equipment, lifting systems, overhead cranes, conveyors and roof-mounted mechanical plant. Similar considerations can arise when working near automated machinery or equipment capable of remote operation.
Some systems present several hazards simultaneously. Maintenance on a powered suspended access installation, for example, can involve electrical energy, gravitational loads, mechanical movement and the risk of falling from height. Isolation of the electrical supply alone does not necessarily control every one of those hazards.
Lockout should therefore form part of the wider task-specific risk assessment and safe system of work. Fall protection equipment should not be treated as a substitute for eliminating hazardous movement, and isolation should not be treated as a substitute for fall protection where exposure to a fall remains.
The same principle applies to engineered fall protection systems themselves. Inspection or maintenance of equipment associated with powered access, retractable systems or movable structures may require components to be placed in a defined safe condition before technicians approach them.
Managing and Verifying Lockout Procedures
A reliable lockout system depends on clear procedures, competent personnel and accurate information about the equipment. Generic instructions are insufficient where machinery has multiple supplies, unusual stored-energy hazards or a complex sequence for safe shutdown and restoration.
Site procedures should clearly define responsibilities for identifying isolation points, applying locks, verifying isolation and returning equipment to service. Locks, tags and other devices should be suitable for their intended environment and distinguishable from equipment used for ordinary operational purposes.
Periodic review is important because installations change. Electrical supplies may be modified, valves replaced, equipment extended or control systems upgraded. A lockout procedure based on an outdated configuration can direct workers to an isolation point that no longer creates the safe condition expected.
For UK workplaces, lockout should be understood within the broader legal requirement to control risks from work equipment and energy sources. The Provision and Use of Work Equipment Regulations 1998 require appropriate measures to ensure that work equipment can be isolated from all its sources of energy where appropriate, while the Electricity at Work Regulations 1989 are particularly relevant to electrical isolation and work on or near electrical systems.
Ultimately, a lockout procedure is a method of establishing and maintaining control over hazardous energy. Its effectiveness depends not on the presence of a padlock alone, but on correct identification of energy sources, secure isolation, control of stored energy, verification before work and disciplined restoration of the equipment afterwards.