Plant Defect Found on Site: Isolation to Return to Service

The moment a defect is found

A pre-start check finds a damaged guard. A forklift operator reports a brake problem. A hired elevated work platform makes an unfamiliar noise. The first useful question is not which form to complete. It is whether anyone can still use the plant, enter its danger zone or restart it before the defect is assessed. A clear response protects the worker who found the problem and the colleague who starts the next shift without knowing it exists.

Stop the affected activity and tell the person controlling the plant and work area. If the defect could create an immediate risk, prevent operation and keep people clear while a competent person determines the controls. Do not let an operator finish one last lift or run the machine empty to see if the problem goes away. Do not assume every minor cosmetic issue requires the same response as a failed safety device. The responsible person needs to assess what has failed, what harm could follow, and whether the plant can be safely used at all. Until the safety position is established, the affected use should be held.

This guide follows the Safe Work Australia model plant code, WorkSafe Victoria's isolation guidance and SafeWork NSW energy isolation guidance. The model code states that its effect depends on local adoption. Equipment-specific rules and manufacturer instructions can demand more than a general article can cover.

Identify the plant and the unsafe condition precisely

Record the item number, make, model, location, person reporting, time and the condition observed. A phrase such as plant faulty is too vague to guide the repairer or the next shift. Describe what happened and under what conditions: the brake pedal sank under load, a guard was missing after cleaning, or an alarm did not sound during a check. Note whether the plant was operating, stopped or being serviced when the problem appeared. Photos can help if they can be taken without exposing anyone to risk.

Find out whether the same fault could affect connected plant or other work. A damaged power lead may create an electrical exposure at the socket as well as at the tool. A failed lifting attachment may compromise a load that is still suspended. A hydraulic leak may leave stored pressure or a slippery travel path. One worker's report can reveal a wider hazard. Protect that area and warn people who might approach it.

The defect record should be linked to the actual item, not only to a generic equipment category. If three similar hire machines share a site, a tag and electronic status that omit the serial or fleet identifier can leave the wrong machine available and the unsafe one in circulation. Agree a physical identifier that workers can match to the register.

Separate an out-of-service warning from energy isolation

An out-of-service tag tells people not to use an item. It is a communication control. It does not necessarily prevent hazardous energy from reaching moving parts, release stored pressure, secure a raised component or protect someone working inside the danger zone. WorkSafe Victoria warns that an out-of-service tag should not be relied on for personal protection. The repair task may need a documented isolation procedure, locks, tests and control of residual energy.

Consider two different situations. A damaged ladder may be marked, removed from the work area and secured so nobody can take it. It does not have a motor to lock out. A conveyor with a failed guard may need several energy sources isolated before a technician reaches into it. The procedures must fit the plant and task. A universal instruction to put a tag on it misses the physical hazard; a universal instruction to use the same lockout sequence on every item can also be wrong.

If plant is hired or shared, notify the owner or supplier as well as the site controller. Clarify who may inspect, repair and authorise return. Do not let a commercial request to keep the hire period productive override the safety hold. Document the handover so the hire company's technician and site supervisor understand the same fault and status.

Shared plant needs a shared hold decision

On a site with several employers, one firm may own the machine, another may operate it, and a third may provide maintenance. Decide who has custody of the keys, who can move the item to a repair area, and who tells other crews that it is unavailable. The owner may arrange the repair, but the workplace controller still needs to manage access and exposure on its site. A maintenance technician may confirm that the defect was repaired, but the site's supervisor may need to confirm that barriers, work areas and users are ready for operation again.

Write those handoffs in a short defect record. If the item is moved off site, record its destination and the restriction on return. If a replacement item arrives, treat it as a different machine with its own pre-start and competency questions. Do not simply copy the removed item's approved status to the replacement. This prevents the common failure in which each party assumes someone else has finished the safety check.

Plan isolation for the repair task

The November 2024 Safe Work Australia model plant code describes isolation as a predetermined process for work such as maintenance, repair and cleaning. It discusses identifying all energy sources, isolation points, stored energy, locking and tagging, and testing without exposing people to danger. Victorian guidance also stresses a risk assessment and competent design of the procedure. Use the manufacturer information, the site procedure and a person competent in the plant's hazards.

Energy may be electrical, hydraulic, pneumatic, mechanical, thermal, gravitational or stored in a battery or spring. Turning off the main switch does not guarantee that a raised load will stay put or that pressure is gone. Identify who controls each source and what other equipment would be affected by isolation. Coordinate with people working nearby. A repairer should not inherit an assumed safe state from a previous shift without checking the controls required by the procedure.

Before anyone enters the danger zone, confirm the plant is shut down and isolation has been applied for the actual work. Check that locks and tags identify the people protected and that the method for proving the isolation is safe. Follow the approved process for group work, shift changes and temporary testing. Do not remove another person's personal protection simply because the work appears finished. The local procedure should state what happens if the person who applied a lock cannot be contacted.

Example: conveyor guard failure

An operator sees that a conveyor guard has come loose. The belt is stopped and the work area kept clear. A warning is placed at the controls, but the repairer must still assess how to isolate the drive, any automatic restart signal and stored movement before reaching the guard. After repair, the guard fit and protective devices are checked. The operator is told when the conveyor is authorised to run again. The warning tag alone was never the repairer's energy control.

Keep the status visible across shifts

A plant defect often lasts longer than the person who found it. Put the out-of-service status where the next user will see it, and record it in the site or fleet system if one is used. Tell the shift supervisor, maintenance team and any contractor with access. For mobile plant, consider keys, parking location and physical access so a person cannot accidentally take it. For fixed plant, consider the control panel and handover board. Match the electronic record to the physical tag and isolation state.

The status should say what use is prohibited, who owns the assessment and what must happen before release. A record marked awaiting repair can become misleading if a temporary measure permits a limited task. If such use is proposed, it needs a competent risk decision within the law and manufacturer limits, with clear boundaries communicated to operators. Do not describe a temporary workaround as full return to service.

If the defect is discovered during an inspection by a third party, capture the inspector's findings and any statutory action. A notice, certificate condition or required inspection cannot be bypassed by an internal ticket being closed. Local plant registration and inspection rules may apply to the item. Get specialist advice when the repair affects load-bearing structure, safety systems or a regulated inspection condition.

Repair or replace using the right competence

The model plant code says maintenance and repair should follow manufacturer specifications, and that deficiencies in those specifications should be raised with the manufacturer. Identify the repair scope before ordering a part. A loose guard fastener, damaged fork, cracked weld and control-system fault do not call for the same expertise. Some repairs or alterations may change the design or create new safety duties. The competent person should decide whether manufacturer or engineering input is needed.

Record the work performed, parts fitted, measurements, tests and any remaining limitations. A work order saying fixed does not show whether the underlying failure was understood. If the same fault has occurred repeatedly, investigate the cause and the way the plant is used. A new part may fail again if the operating load, environment or maintenance interval remains wrong. Update the risk assessment and inspection schedule if the evidence warrants it.

If replacement is safer or repair is not feasible, remove the defective item from the workplace or secure it against use. Queensland's damaged-ladder alert illustrates the need to take a damaged item out of service for competent repair or destruction. It is an equipment-specific example, not a rule that every item can be repaired to the same standard.

Test before authorising return to service

Repair completion and permission to operate are different decisions. Before release, confirm that the defect has been remedied, guards and protective devices are correctly installed, tools and temporary aids are removed, and the plant behaves as expected during an appropriate test. WorkSafe Victoria's isolation guidance lists checks to make before removing an out-of-service tag. The manufacturer, competent repairer and local requirements may specify additional tests or inspection.

Plan the test so people are clear and controls remain in place until the authorised stage. Some tests require energy to be restored or guards temporarily removed. Those are separate higher-risk steps and need a controlled procedure. Do not turn the machine on while a technician is still inside the work area simply because a repair ticket shows complete. Identify who may remove each lock or tag and who makes the final operational release decision.

Where an external inspector or engineer is required, hold the item until the evidence is received and its conditions are understood. Attach the report to the item record. If the report allows restricted use, state the restrictions at the plant and in the roster or work instruction. An operator should not have to search an engineering attachment to discover that the plant is limited to a reduced load.

Example: forklift brake fault

A forklift operator reports inconsistent braking during a pre-start check. The vehicle is parked safely and its use stopped. The supervisor identifies the unit and warns the next shift. A competent technician diagnoses and repairs the brake system under an appropriate isolation and access procedure. After repair, a safe functional test is performed and documented. The person authorised by the site's process reviews the result, removes the out-of-service status and tells operators it may be used. A new pre-start check then verifies that the worker taking the next shift sees a normal condition. A line reading service complete without the test and handover is an incomplete return-to-service decision.

Decide whether the event needs wider reporting

A defect can be a near miss, an incident, a notifiable event or simply a maintenance issue, depending on what happened and the local law. Do not equate every plant defect with a statutory notification. Equally, do not close the safety record as maintenance if the failure caused an injury or dangerous occurrence that must be considered for regulator notification. Preserve relevant evidence and seek the site incident lead's decision promptly. Equipment-specific reporting duties can also arise under registration, inspection or supplier arrangements.

Look for patterns across similar plant. If two machines have the same guard failure, inspect the fleet and consider whether the defect is linked to a common part or maintenance method. Tell other sites or hirers who may be affected. A repair on one unit does not necessarily remove a shared risk. Escalate to the manufacturer or supplier when the fault suggests a design or batch issue.

Use the outcome to improve pre-start questions and maintenance. The point is not to add a checkbox for every rare failure. It is to ask whether workers could have detected the problem earlier, whether the reporting route worked, and whether the isolation and release decision stayed intact through shifts and contractors.

A handover record that can be checked

This is a workflow record, not a universal statutory form. Keep it proportionate to the item and hazard. A damaged hand tool may need a short clear record; a repaired lifting device may require technical reports and formal inspection evidence. The same principle applies in both cases: workers need an unambiguous status and an accountable person must decide when safe use can resume.

Where Complys fits

The Complys Australian plant and equipment register page is a commercial destination for teams considering how to organise plant records. Before relying on any particular register, check the workflow in the actual product with the team that will use it. A digital record cannot physically isolate energy, certify plant or prove that a repair is safe.

Build the operational process first. Name who receives defect reports, who can stop use, who plans isolation, who repairs, and who authorises release. Then put the item evidence and dates in the register. Make the physical status and digital status agree. A notification is useful only if the right person sees it in time to prevent another use.

Next step: Pick one item currently awaiting repair and trace whether the next operator can tell that it is held, why, and who may release it. Explore the Complys Australian plant register page and ask for a demonstration of any workflow your team needs.