Who Should Be Involved In The Lockout Tagout Process

Lockout tagout saves lives. That's not hyperbole — it's the reason the standard exists.

Every year, workers die or suffer catastrophic injuries because someone didn't isolate energy properly. Still, an operator restarts equipment not knowing someone's inside. Still, a maintenance tech assumes the machine is off. Day to day, a contractor cuts a pipe that's still pressurized. The scenarios are endless. The root cause is almost always the same: the wrong people were involved, or the right people weren't.

OSHA's 29 CFR 1910.147 is clear about what needs to happen. But the who? That's where most programs fall apart.

What Is Lockout Tagout (Really)

Strip away the regulatory language and lockout tagout is simple: ensure dangerous energy can't hurt anyone while work is happening.

That energy takes more forms than people realize. Electrical — obviously. But also hydraulic, pneumatic, mechanical, thermal, chemical, gravitational. In real terms, a raised press ram stores gravitational energy. A charged capacitor holds electrical energy after disconnect. A chemical reactor retains thermal and pressure energy long after feed stops.

Lockout means physically isolating each energy source with a lock only the authorized person can remove. Tagout means attaching a warning tag when a lock can't be applied — but tags alone don't physically prevent re-energization. That distinction matters. A lot.

The standard applies to servicing and maintenance. Changing a die. Adjusting a sensor. Smart companies define that line in writing. Where does production end and servicing begin? Normal production operations? Plus, clearing a jam. Different rules. But the line blurs fast. Everyone else argues about it after an incident.

Why the "Who" Question Changes Everything

You can have the best locks, the prettiest tags, the most detailed procedures — and still kill someone if the wrong person applies them. Or if the right person doesn't apply them.

I've seen facilities where the safety manager writes procedures but never steps onto the floor. In real terms, where operators think LOTO is "maintenance's job. " Where contractors show up with their own locks and nobody verifies compatibility. Where the night shift follows different rules because "nobody's watching.

The "who" determines whether your program lives on paper or in practice.

OSHA defines three categories of people. Most companies stop there. But the reality on the floor demands more nuance.

The Three OSHA-Defined Roles (And What They Actually Mean)

Authorized Employees

These are the people who perform the lockout. They apply locks, verify isolation, do the work, remove locks. That's it. That's the definition.

But here's what the regulation doesn't say: authorized doesn't mean "any maintenance tech."

Authorization is machine-specific. Energy-source-specific. Task-specific. So a tech authorized to lock out the 480V panel on Line 3 isn't automatically authorized for the hydraulic press on Line 7. Or the steam system. Or the nitrogen purge.

Real authorization requires:

• Training on that specific equipment's energy sources
• Demonstrated competency applying that specific procedure
• Understanding the verification steps for that specific machine
• Annual re-evaluation — not just a signature on a roster

I've audited programs where 50 people were "authorized" on a master list. Think about it: when I asked them to walk through the procedure for a single machine? Three could do it correctly.

Authorization isn't a title. It's a verified capability.

Affected Employees

These are people who operate or work near equipment being locked out. Which means they don't remove locks. Because of that, they don't apply locks. Their job: **know it's happening and stay clear.

Sounds simple. In practice? It's the biggest gap.

An affected employee needs to recognize:

• What a lockout device looks like on their equipment
• What the tag means — and that it's not a suggestion
• Who to ask if they're unsure whether equipment is locked out
• That they never attempt to restart locked-out equipment. Ever. No exceptions.

The night shift operator who wasn't briefed. The new hire who missed orientation. The temp worker from the agency who got zero LOTO training. These are your affected employees. And they're the ones most likely to make a fatal mistake.

Other Employees

Everyone else in the facility. Office staff. Visitors. Delivery drivers. The CEO walking the floor.

Their requirement: general awareness. Know what a lock looks like. Know it means "do not touch." Know who to tell if they see something wrong.

For more on this topic, read our article on when should ladders be inspected and by whom or check out what is the definition of a confined space.

Most companies skip this entirely. Then wonder why the sales rep tried to "help" by flipping a breaker.

The Roles OSHA Doesn't Name (But You Absolutely Need)

The LOTO Program Administrator

Someone owns the program. Not "safety owns it" — a person owns it.

This person:

• Writes and maintains machine-specific procedures
• Manages the authorized employee list (and actually audits it)
• Coordinates training — initial, refresher, new equipment
• Tracks lock and tag inventory
• Investigates near-misses and violations
• Updates the program when regulations or equipment change

In small facilities, this might be the maintenance supervisor. Day to day, in large ones, a dedicated safety engineer. But it's never "everyone's responsibility." That's code for "nobody's responsibility.

The Procedure Writer

Writing a real LOTO procedure isn't copying a template. It requires:

• Walking the machine with a maintenance tech and an operator
• Identifying every energy source — including the weird ones (spring tension, residual pressure, stored data)
• Photographing each isolation point
• Specifying lock type, tag type, verification method
• Testing the procedure before it goes live

I've seen procedures that missed the backup generator feed. The nitrogen blanket. The gravity-fed chemical line. The writer never walked the line. They sat at a desk.

The Verification Witness

Here's a role that should exist everywhere but rarely does: a second qualified person who watches the verification step.

Authorized employee isolates. Verifies. On top of that, witness watches the verification. Both sign.

Why? We check the wrong gauge. On top of that, because verification is where humans fail. In practice, we misread "zero" on a bouncing needle. We forget the stored energy check. A witness catches it.

This isn't in the standard. But the best programs I've seen? They all do it.

The Shift Handoff Coordinator

Lockouts spanning shifts are high-risk moments. The outgoing authorized employee must transfer control to the incoming one. That's why no gaps. No "I think he's coming in at 7.

A formal handoff process:

• Both authorized employees present at the lock
• Outgoing explains status, remaining work, hazards
• Incoming verifies isolation themselves — doesn't trust the outgoing person's word
• Lock transfer documented (group lockout box, personal lock swap, or formal handoff form)
• Supervisor notified

I've investigated two fatalities caused by shift handoff failures. In practice, both times, the incoming tech assumed the lock meant "safe" and didn't re-verify. Both times, the outgoing tech had missed an energy source.

The Contractor Liaison

Contractors bring their own locks. Their own procedures. Worth adding: their own training records. And they will interface with your equipment.

You need one person who:

• Reviews contractor LOTO programs before work starts
• Walks the job with their foreman
• Ensures energy source identification matches your drawings
• Coordinates group lockout when your people and theirs share isolation points
• Has authority to stop work if something's wrong

"Here's your permit, good luck" isn't coordination. It's negligence.

Common Mistakes (I've Seen All of These)

Mistake: Treating "authorized" as a blanket certification.
A maintenance tech gets 4 hours of LOTO training once. Now they're "authorized" on everything. Forever.
Reality: Authorization is per-procedure. Per-energy-type. Per-hazard. If they haven't touched that machine in 18 months, they're not current.