How to Rewrite Your LOTO Procedures Under OSHA 1910.147

Your plant's lockout/tagout binders haven't been touched since 2018. The safety manager just flagged that your energy control procedures don't reference the new robotic cell on Line 3, and an OSHA 1910 lockout tagout procedure audit is scheduled for next quarter. If you're the one holding the red pen, here's how to rebuild the program without grinding production to a halt.

Map every energy source before you write a single step

Start at the main disconnect, not the machine guard. Walk each line with an electrician, a mechanic, and the operator who runs it third shift. Document every energy type: electrical (480 V, 120 V control, stored capacitor charge), hydraulic (3,000 psi accumulator), pneumatic (120 psi reservoir), thermal (350 °F mold), gravitational (raised die), and chemical (pressurized resin). Assign each source a unique identifier — EL-01, HY-02, PN-03 — and photograph the isolation point. OSHA 1910.147(d)(3)(i) requires that procedures "clearly and specifically outline the scope, purpose, authorization, rules, and techniques" for each machine. Generic templates won't survive a citation.

Write machine-specific procedures in the sequence workers actually use

Structure each procedure in the order a technician executes it: notify affected employees, shut down using normal controls, isolate every energy source on your map, apply lockout devices, verify zero energy, perform the task, then remove locks in reverse order. Include the exact lock type (keyed-different padlock, hasp, valve cover), the verification method (voltage tester rated CAT IV, pressure gauge reading zero), and the re-energize sequence. Section 1910.147(d)(4) mandates that procedures address "stored energy" — so add a bleed-down step for the hydraulic accumulator and a capacitor discharge wait time stamped from the OEM manual. Number the steps 1 through 12 so the periodic inspector can tick them off without guessing.

Build the authorized-employee roster and train to the procedure, not the standard

List every person who will apply locks by name, badge number, and shift. Cross-reference with HR's training matrix. OSHA 1910.147(c)(7) requires initial training and retraining whenever "a change in job assignments, a change in machines, equipment or processes that present a new hazard, or a change in the energy control procedures" occurs. Your rewrite triggers retraining. Run a 90-minute hands-on session: each authorized employee performs a full lockout on the actual equipment using the new procedure while a qualified observer scores them against the step list. Document the pass/fail. Affected employees (operators, sanitation) get a 15-minute briefing on their role — stay clear, don't restart, know who to call.

Schedule and record the annual periodic inspection the right way

Section 1910.147(e)(1) requires an inspection "at least annually" by an authorized employee who is not the one using the procedure. Don't just sign a sheet. The inspector watches the authorized employee execute the procedure on the live machine, verifies each step matches the written document, and interviews the employee on hazard recognition. Record: date, machine ID, inspector name, authorized employee name, deviations found, corrective actions, and signatures. If the procedure has drifted — say the verification step now says "check pressure gauge" but the gauge was replaced with a transducer — update the procedure immediately and re-train. File the inspection record for three years minimum.

Control contractor and group lockout without gaps

When a millwright crew services the press, the host employer must coordinate per 1910.147(f)(2). Your procedure needs a contractor attachment: host provides the machine-specific procedure, contractor provides their lockout devices and authorized employee list, both parties walk the isolation points together, and each contractor applies their own lock to the group hasp. The host's authorized employee holds the hasp key until the last contractor lock comes off. For group lockout on the packaging line, designate a primary authorized employee who applies the first lock, verifies zero energy, and maintains the lockout log. Every crew member adds their lock; the primary removes theirs last.

Validate the rewrite with a dry run before the auditor arrives

Pick the most complex machine — usually the one with the most energy sources. Run a full lockout using only the new procedure. Time it. Note where the tech hesitates, where the verification tool doesn't reach, where the step sequence forces an awkward reach. Fix those three things. Then run the same dry run on the simplest machine. If both pass without deviation, your program is audit-ready. Archive the old procedures with a revision date and a "superseded" stamp; OSHA 1910.147(c)(4) expects you to retain the energy control program documentation.

Closing takeaway

A procedure rewrite isn't a paperwork exercise — it's the difference between a technician going home and a fatality investigation. Map energy sources physically, write steps in execution order, train to the document, inspect annually with teeth, and coordinate every contractor. Do that, and the next OSHA 1910 lockout tagout procedure review becomes a formality, not a fire drill.