Plant isolation and maintenance handover in Australia

The riskiest moment in a plant maintenance job may be the handover: a shift changes, a specialist contractor leaves, or production asks whether equipment can be restarted. A work order marked complete does not prove that hazardous energy is controlled, people are clear, guards are restored or an authorised person has released the plant. The handover needs a live account of isolation status and return-to-service authority.

This guide concerns Australian workplaces. Safe Work Australia's model code on managing risks of plant describes isolation and lock-out in maintenance. Model guidance must be checked against the applicable state or territory law, regulator guidance, plant design and site procedure. A written record supports the physical control; it cannot isolate equipment.

Identify the plant and the job boundary

Before work begins, identify the exact asset, location, maintenance scope, people involved and person in control of the plant. A production line may contain several machines and shared supplies. The handover must say which equipment is excluded from use and where the job boundary begins and ends. Record the job number, drawing or asset identifier, permit or local isolation procedure, and expected shift changes.

Assess all relevant energy and movement hazards with competent people. Electrical supply may be only one source. Stored pneumatic or hydraulic pressure, gravity, heat, rotating parts, chemicals and adjacent plant can create exposure. An isolation schedule should identify each point and how the team will verify a safe state. The generic phrase “power off” is too imprecise to govern return to service.

Record the physical isolation, not just a status label

Use the site-approved lock-out method and verify isolation before starting work. The Safe Work Australia plant code distinguishes a lock from a tag: a tag communicates information but does not itself isolate an energy source. Where several workers are exposed, the method must protect each person rather than rely on one worker's memory. Competent personnel should assess any exception or complex group-isolation arrangement under local procedure.

The record should identify the isolation points, who applied each device, verification method, time, exceptions and people still working. It should never publish lock or key details that undermine the physical controls. If a point cannot be isolated as planned, stop and escalate for a safe alternative; do not mark the checklist complete to preserve a schedule.

Make shift and contractor handovers explicit

At a shift change, the outgoing lead should state what is finished, what is open, which guards or components are removed, which workers retain personal protection and what tests remain. The incoming lead should inspect the job boundary and acknowledge the transfer under the approved procedure. A verbal update is useful but should not be the only evidence for a multi-shift task.

Contractors may finish their allocated repair while the host workplace still needs inspection, testing or reinstatement. Capture the contractor's work record, defects found, parts changed and any restriction on operation. Name the host decision-maker who accepts the work and checks the plant. Contractor sign-off alone does not authorise production to restart if other people or hazards remain.

Separate maintenance completion from release

Use distinct stages: work complete; tools and people accounted for; guards and safety devices restored; tests completed; isolation removed under the approved method; and authorised release. The order and technical tests depend on the equipment. Do not let a software status change remove a physical lock, bypass an interlock or substitute for a competent inspection.

If tests require temporary energisation, plan that as a controlled phase with clear communications and exclusion arrangements. Record who authorised it and what happened afterwards. When a defect remains, specify whether the plant is out of service, partially restricted or subject to a new assessment. Avoid an ambiguous “passed with notes” result.

Example: pump repair across two shifts

A contractor replaces a seal on a pump during the afternoon. The repair is mechanically complete, but an electrical test and guard reinstatement remain. The outgoing team records the locked isolation points, test still due, people on the job and the removed guard. The night lead checks the physical state before accepting control. In the morning, the competent tester records the result, the guard is verified and authorised personnel follow the local de-isolation procedure. Production receives a separate release message with the asset identifier and conditions.

The work order can show progress throughout. It should not say “available” after the seal replacement merely because the contractor has closed its task. This is the difference between a maintenance record and a safe handover.

Review repeated handover failures

Look for plant that repeatedly passes through shifts with unclear isolation ownership, missing component lists or late test results. Correct the procedure, staffing or job planning rather than asking teams to fill more boxes. A useful audit samples the original work order, physical isolation record, shift acknowledgements, test evidence and release decision as one chain. If timestamps or named roles contradict, investigate before treating the job as closed.

The same approach applies to emergency repairs, but urgency does not remove the need to identify hazards and people in control. Local emergency procedures may change who authorises a step; the handover should preserve that decision and why it was made.

For a current-product discussion, see Complys AU WHS compliance software and ask how a maintenance task, human owner, evidence and release decision can be recorded in the present product. This guide does not claim Complys controls isolation devices, verifies zero energy or authorises equipment to restart automatically.