Lockout/tagout and permit-to-work: controlling hazardous energy and high-risk jobs

General information only, not medical or legal advice.

Maintenance is when equipment is most dangerous. Guards are removed, interlocks are bypassed and people put their hands where the machine normally works. Two control-of-work tools exist specifically for this moment: lockout/tagout (LOTO), which isolates energy, and permit-to-work (PTW), which authorises and coordinates high-risk tasks.

Both remain persistent compliance problems. In OSHA’s preliminary list for fiscal year 2026, Control of Hazardous Energy (lockout/tagout), general industry (29 CFR 1910.147)³ appears third among the most frequently cited standards.

What hazardous energy is

OSHA defines the problem broadly: Energy sources including electrical, mechanical, hydraulic, pneumatic, chemical, thermal, or other sources in machines and equipment can be hazardous to workers.¹ The risk arises because During the servicing and maintenance of machines and equipment, the unexpected startup or release of stored energy can result in serious injury or death to workers.¹

The injuries are severe: Injuries may include electrocution, burns, crushing, cutting, lacerating, amputating, or fracturing body parts, and others.¹ OSHA’s examples are instructive because they are ordinary: A jammed conveyor system suddenly releases, crushing a worker who is trying to clear the jam.¹ Those at greatest risk include Craft workers, electricians, machine operators, and laborers¹.

What the LOTO standard requires

The LOTO standard establishes the employer's responsibility to protect workers from hazardous energy.¹ At its core is a written energy control programme with machine-specific procedures, periodic inspection of those procedures, and training.

Training is differentiated by role. All employees who are authorized to lockout machines or equipment and perform the service and maintenance operations need to be trained in recognition of applicable hazardous energy sources in the workplace, the type and magnitude of energy found in the workplace, and the means and methods of isolating and/or controlling the energy.¹ Others in the area must understand the prohibition against attempting to restart or reenergize machines or other equipment that are locked or tagged out.¹ Retraining is required too: Retraining of all employees to maintain proficiency or introduce new or changed control methods.¹

Best practices for LOTO that holds up

• Machine-specific, visual procedures. One-page procedures with photos of each isolation point, posted at the machine, outperform generic text.
• Personal locks, one person one lock. Group lockout boxes allow many workers to protect themselves on complex jobs without sharing keys.
• Always verify. The try-out step is where missed energy sources are found: secondary feeds, capacitors, gravity, springs and trapped pressure.
• Audit at the machine. Periodic inspections should watch a real lockout, not review paperwork.
• Design for isolation. Lockable isolators close to the work, clearly labelled, reduce the temptation to skip steps.

Permit-to-work: coordinating high-risk work

Permit-to-work (PTW) refers to a management system procedure used to ensure that work is done safely and efficiently.² It is used in hazardous industries, such as process and nuclear plants, usually in connection with maintenance work.² A permit involves procedured request, review, authorization, documenting and, most importantly, de-conflicting of tasks to be carried out by front line workers.²

Typical permit triggers include hot work (such as welding), confined space entry, cutting into pipes carrying hazardous substances (breaking containment), diving in the vicinity of intake openings, and work that requires electrical or mechanical isolation.² Confined spaces are a frequent case: OSHA describes them as areas that have limited or restricted means for entry or exit and is not designed for continuous occupancy⁴.

Simultaneous operations

The most valuable function of a permit system is coordination. PTW is a means of coordinating different work activities to avoid conflicts.² For example, PTW can preclude one workgroup welding or grinding in the vicinity of another venting explosive or flammable gases.²

Why permit systems fail

The evidence from the UK is stark: research by the Health and Safety Executive found that the most significant cause of maintenance-related accidents in the UK chemical industry was a failure to implement effective permit-to-work systems.² Common failures in control of work systems are a failure to follow the permit-to-work or isolation management procedures, risk assessments that are not suitable and sufficient to identify the risks, and/or the control measures and a combination of the two.² And a permit is not a substitute for thinking: A permit-to-work is not a replacement for robust risk assessment, but can help provide context for the risk of the work to be done.²

Linking LOTO and PTW

In mature systems, the permit references an isolation certificate, and the isolation certificate references the LOTO procedure. The permit issuer confirms isolations are in place and verified before signing; the permit cannot be closed until locks are removed under control. Digital permit systems make these links explicit and prevent conflicting permits from being issued for the same equipment.

Watch: lockout/tagout essentials

Self-check questions for your site

1. Does every machine that needs servicing have a written, specific procedure?
2. Can authorised workers name every energy source on the equipment they lock out?
3. Are permits checked at the work location, not just in the control room?
4. Do you have a register of simultaneous permits and a matrix of incompatible activities?
5. When was a lockout last observed and audited on the floor?

Building a control-of-work system step by step

Inventory equipment and energy sources. Walk each line and record every electrical, mechanical, hydraulic, pneumatic, chemical and thermal source, including stored energy in springs, accumulators and capacitors.

Write and photograph procedures. For each machine, document isolation points with photos and the verification method. Keep it to one or two pages.

Define permit types and authorities. Decide which work needs which permit, who may issue and accept permits, and how authority is granted and withdrawn.

Create an incompatible-operations matrix. List activities that must not happen together and make the matrix part of permit issue.

Audit and learn. Observe permits and lockouts in the field each month, record findings, and feed them back into procedures and training.

Key takeaways

• LOTO is consistently among OSHA’s most-cited standards; written, machine-specific procedures and training are mandatory.
• Verification of isolation is the step that catches hidden energy.
• Permit-to-work coordinates high-risk tasks and simultaneous operations; its failure is a leading cause of maintenance accidents.
• Treat both as part of one control-of-work system, ideally digitally linked.

Frequently asked questions

What is the difference between lockout and tagout?

Lockout places a physical lock on an energy-isolating device so it cannot be operated. Tagout attaches a warning tag. OSHA’s standard sets specific procedures and limitations for tagout systems where they are allowed, because a tag alone does not physically prevent re-energisation.

Who needs LOTO training?

Authorised employees who apply locks and perform servicing need detailed training on energy sources and isolation methods. Affected employees and others working in the area must understand the purpose of the procedures and the prohibition on restarting locked or tagged equipment. Retraining is required when methods change or proficiency lapses.

Which jobs normally need a permit-to-work?

Common examples are hot work such as welding, confined space entry, breaking containment on pipes carrying hazardous substances, diving near intakes and work that requires electrical or mechanical isolation.

Does a permit replace a risk assessment?

No. A permit-to-work provides context and coordination, but it is not a replacement for a suitable and sufficient risk assessment.

Are digital permit systems worth it?

They can help by linking permits to isolations, preventing conflicting permits and keeping an auditable record, but they only work if permits are still checked at the work location.

Sources

Every factual statement marked with a number links to the source below. Sources were retrieved on 23 October 2026; check the publisher for later revisions.

1. Control of Hazardous Energy (Lockout/Tagout) (OSHA) osha.gov
2. Permit-to-work (Wikipedia) en.wikipedia.org
3. Top 10 Most Frequently Cited Standards FY2026 (OSHA) osha.gov
4. Confined Spaces (OSHA) osha.gov