Plant maintenance isolation handover in New Zealand

Maintenance work can cross a shift change, a contractor boundary or a workshop-to-site transfer. The most dangerous gap is assuming that a machine is safe because someone wrote “isolated” or “repaired” without showing the actual energy sources, personal locks, remaining work and conditions for restart. A handover should preserve the physical isolation and make the next team's decision explicit.

WorkSafe New Zealand's safe-use-of-machinery guidance addresses hazards during cleaning, maintenance and blockage clearance. Its mobile plant guidance for forestry describes handover of current lockout and de-energisation state. The latter is sector-specific evidence of good practice, not a universal rule copied onto every machine. This article focuses on handover of an existing isolation and maintenance job, not a full lockout procedure for every plant type.

Identify the plant and job state

Record asset identifier, exact location, maintenance task, work order, start time and people involved. A plant label such as “conveyor 2” may be ambiguous if several units share a line. Name the primary maintainer and receiving person. Describe whether the work is not started, partly complete, awaiting parts, being tested or ready for a separate release decision. This prevents the next shift interpreting a completed paperwork step as completed repair.

Keep the manufacturer's instructions and site procedure with the work order. A contractor may have its own isolation method, but it must align with the machine's real energy sources and the host site's arrangements. If a method does not cover an attachment, stored pressure or linked feed, stop and reassess rather than borrowing a generic form.

Record every relevant energy source

Identify electrical, hydraulic, pneumatic, mechanical, thermal, gravitational or stored energy that could affect the job. State each isolation point and the means of securing it. Where a load or moving part can fall, a switch-off alone may not provide a safe state. The competent team should prove or test the isolation according to its procedure and record the result. A handover sheet should describe the verified condition without inviting an untrained person to perform the technical test.

Personal locks and tags need a controlled transfer method. Do not ask a departing worker to remove a lock merely so the next shift can “take over” on paper. The site must follow its actual group lockout or shift-change procedure so protection remains continuous. The record should distinguish locks owned by individuals, a group lock box and any plant-level restriction. If identity or status is uncertain, do not restart.

Communicate incomplete work and residual hazards

List guards removed, components disconnected, temporary supports, tools inside the machine, leaks, exposed conductors and tests still required. Mark the physical plant so operators know it is unavailable. Where several contractors are involved, give each affected party the current status. WorkSafe's overlapping-duties guidance explains why businesses sharing a risk must consult, cooperate and coordinate rather than assuming a contract transfers all responsibility.

Photographs can help show the work state but should be dated and linked to the right asset. A photo does not prove that energy is isolated or that a repair is sound. Record a competent person's assessment for technical questions and keep any permit or specialist inspection separate.

Make the shift handover two-way

The outgoing maintainer explains the isolation points, work completed, parts outstanding, failed tests and restrictions. The incoming maintainer checks the written record against the physical plant and asks questions before taking charge. Capture both identities, time and any discrepancy. If an affected operator or supervisor is absent, keep the plant out of service until they receive the current instruction.

Use a visible status, but do not let colour alone carry the meaning. “Yellow” or “on hold” should link to a detailed record stating what remains unsafe. If the site uses a digital board, confirm that it reflects the physical locks and tags. A dashboard can be stale when a technician makes an urgent change at the machine.

Plan a controlled restart

Completion of maintenance is not automatically permission to energise. Confirm tools and people are clear, guards are restored, temporary supports are removed or accounted for, tests and inspections are complete, and affected workers have been told. Remove locks under the site's authorised process. Record the person who performed the final check and the person who accepted the equipment for operation. If a defect remains, preserve the restriction and create a new action rather than closing the old record prematurely.

Example: hydraulic press across shifts

An evening team isolates a press for a leaking hydraulic line. It locks the relevant supplies, releases stored pressure under its method, supports a moving component and removes a guard. The replacement line has not arrived. At shift change, the outgoing technician shows the incoming team the physical isolation, support, removed guard and open work order. The incoming lead verifies the condition and signs the handover. When the part arrives, the team completes the repair, restores guarding and runs the required checks before a supervisor accepts restart. The first shift's lock is transferred only through the site's safe procedure.

The essential evidence is continuity of control while the team changes, followed by a separate restart decision. A single “maintenance complete” field would not show either.

Learn from handover failures

Retain the isolation record, work order, handover, tests, defects and final acceptance. Review near misses where a worker encountered unlabelled plant or an unrecorded energy source. Improve the physical procedure and supervision, not just the form. The record must be usable at the machine by the people exposed to the risk.

For a current-product discussion, see Complys New Zealand health and safety software and ask how maintenance evidence and human owners can be tracked. This guide does not claim Complys controls lockout devices, senses energy state, validates technical repair or automatically authorises restart.