Annual Lockout/Tagout Procedure Inspection: Who and What

A maintenance department has a lockout/tagout programme, trained workers and a calendar reminder marked annual inspection. That reminder is only the starting point. Under federal OSHA's control of hazardous energy standard, the employer must inspect its energy-control procedures at least annually, use an authorised employee who is not one of the people using the procedure being inspected, correct deviations or inadequacies, review the appropriate worker responsibilities and certify the inspection with specified identifying details.

The reader task here is the periodic procedure inspection. The broader Complys US lockout/tagout guide explains how the energy-control programme works, and the completed replacement draft for that broad owner contains only a short annual-inspection summary. This page focuses on how the procedure-inspection duty is carried out and recorded. It does not certify that any specific machine is isolated, decide whether a job falls within an exception, or replace a competent site evaluation. The rule addressed is federal OSHA section 1910.147 for covered servicing and maintenance, principally in general industry. Construction, agriculture and several other specified types of employment fall outside this particular section's scope.

Inspect the energy-control procedure, not just the filing cabinet

Section 1910.147, paragraph c1 requires an energy-control programme consisting of procedures, employee training and periodic inspections. The inspection provision in paragraph c6 asks whether the energy-control procedure and the standard's requirements are being followed. A check that a document exists and has a recent revision date is insufficient as an answer to that question. The employer must have a basis to determine whether the procedure fits the equipment and is being used as required.

The procedure itself is the logical unit of review. Match it to the machine or equipment and the covered servicing task. Confirm what energy sources it identifies, how shutdown and isolation are described, what devices are applied, how stored energy is controlled, how isolation is verified and how the equipment is returned to service. Those topics reflect the wider rule's procedure requirements. The inspector should compare the written steps with the equipment and actual work rather than infer compliance from a cover-page signature. If the procedure is generic, outdated or fails to account for an added pneumatic or hydraulic source, the annual cycle is an opportunity to catch and correct it.

This does not mean an employer can wait for the annual inspection when a new hazard or equipment change is already known. If a change makes the procedure inadequate, the employer's energy-control programme needs to protect workers now. The periodic inspection is one control within a living programme, not an annual grace period for known gaps. Nor is it the same thing as the worker verifying isolation at the point of each servicing job. The latter is an operational step under the applicable energy-control procedure; the periodic inspection tests whether the procedure and its use remain sound.

The interval is at least annual

Paragraph c6i requires a periodic inspection of the energy-control procedure at least annually. Keep a schedule tied to the procedures the employer actually uses, not just one calendar event titled LOTO audit. A single corporate audit date may help organise work, but it should not conceal an uninspected machine-specific procedure. Establish which procedures are in the programme, when each was last inspected and which inspections still need to be completed.

The standard does not say that a procedure becomes safe merely because its certification is dated within the year. A recently inspected procedure may need attention after an equipment modification, a newly identified source of stored energy or a worker's report that a step cannot be followed. Conversely, a document's age alone does not tell the inspector which deviation occurred. Separate scheduling evidence from inspection findings. The annual interval prompts a real review; it is not an automatic legal determination generated by a date field.

Where a facility has many pieces of equipment, group scheduling can reduce administrative work if it still gives each relevant procedure the inspection the standard requires. A practical register may record procedure identifier, machine or equipment, latest inspection date, inspector, participants, findings and corrective action. That register is employer process. OSHA specifies the inspection and certification content, not a particular spreadsheet, barcode or software product. If equipment and procedure identifiers are inconsistent, fix the map before a reviewer cannot tell which procedure was actually inspected.

Choose an inspector who meets the role rule

The inspection must be performed by an authorised employee other than the employees utilising the energy-control procedure being inspected, under paragraph c6iA. An authorised employee is the person who locks out or tags out equipment to perform covered servicing or maintenance. A manager is not automatically an authorised employee just because the manager signs audit forms. Equally, being a manager does not disqualify someone who actually meets the authorised-employee role and the separation requirement for the procedure being inspected.

Make the assignment specific. Who is using this procedure, and who will inspect it? A technician who is currently one of its users cannot simply self-certify the procedure inspection. Another authorised employee who does not use that procedure can perform it if the person can make a meaningful review. The standard's text supplies the role and separation rule. The employer should also ensure the inspector can understand the equipment and identify deviations; that is a sensible competence consideration for doing a real inspection, not a new federally prescribed inspector certificate.

An outside consultant may help with programme review, but hiring a consultant does not erase paragraph c6iA's requirement about who performs the periodic procedure inspection. Likewise, a software report that lists overdue inspections cannot act as the authorised employee. It can help the employer plan, gather and retrieve records, but a qualified human still has to make and document the inspection decisions. Avoid using the term third-party certified unless a separate, applicable requirement actually calls for it.

Correct deviations and inadequacies

The periodic inspection must be conducted to correct any deviations or inadequacies identified, according to paragraph c6iB. The outcome therefore matters more than a pass/fail stamp. If a procedure omits a valve that workers isolate in practice, the written steps are inadequate. If a worker follows an old step after the machine changed, procedure use has deviated. If a tag is treated as though it physically prevents movement, the review needs to address the standard's tagout limits as well as any local instruction.

Record what was observed, which step or control was affected, how the issue was corrected, who approved the revised procedure and what communication or retraining was needed. The rule's certification fields are limited, but an employer can preserve additional evidence to demonstrate that findings were actually resolved. Calling an inspection complete while a known hazardous-energy gap remains open would make the process meaningless. A work assignment should be managed under a protective control while a deficiency that affects safe servicing is corrected.

Do not label every observation as an employee training failure. An apparent shortcut may reflect a procedure that cannot be followed as written, missing hardware or an energy source not included in the machine description. Review the cause before choosing the response. The correction might be a procedure revision, additional isolation equipment, a change in supervision, communication to workers, retraining, or a combination. The standard has separate retraining triggers when inspections reveal deviations or inadequacies in workers' knowledge or use. A corrected document alone does not prove affected workers understand the new method.

A useful closeout record links each finding to an action and a check that the action was completed. This is employer process rather than a prescribed OSHA ticket layout. It gives the next inspector enough history to see whether the same weakness recurs. If an inadequacy has immediate safety implications, do not wait for a monthly reporting meeting to decide how the next servicing job will be protected. The purpose of the standard is to prevent unexpected energisation or release of stored energy during the work.

The employee review differs for lockout and tagout

The inspection includes a review of worker responsibilities, but the group changes with the energy-control method. Under paragraph c6iC, where lockout is used, the inspector reviews the responsibilities of each authorised employee with that employee. Under paragraph c6iD, where tagout is used, the review includes each authorised and affected employee, as well as the tag limitations described in the standard.

That difference is easy to miss when a company uses one form for every procedure. Affected employees operate or use the machine or work in the area where servicing occurs, but they do not necessarily apply locks or tags. Tagout relies on a warning device rather than the physical restraint of a lock, so the standard calls for a wider responsibilities review and attention to tag limitations. The employer should identify the actual method and worker groups before the discussion. A form that always lists only the authorised technician can be incomplete for a tagout inspection.

Ask participants to explain the responsibilities relevant to their role and procedure. An authorised employee should understand how the procedure controls the machine's actual sources and how devices are applied, transferred and removed under the programme. Affected employees should understand the restrictions relevant to equipment bearing a tag and why a tag must not be bypassed. The exact discussion should match the procedure and the standard. The point is to establish whether people know and follow the method, not to collect attendance initials without a meaningful review.

For tagout, paragraph c7ii identifies limitations workers must understand. A tag is a warning device, does not provide the physical restraint of a lock, must not be bypassed or ignored, and has to remain legible and securely attached. The inspector should use those elements in the responsibilities review required by c6iD. A company should not present the tag as equivalent to a lock merely because both devices appear in one policy. The conditions under which tagout can be used are a separate decision under the standard.

Certify the inspection with the required details

Paragraph c6ii requires the employer to certify that periodic inspections have been performed. The certification must identify the machine or equipment on which the energy-control procedure was being utilised, the inspection date, the employees included in the inspection and the person performing it. These are the fields the regulation expressly names. A document headed annual inspection complete without the necessary identifiers is not a reliable certification.

Be precise about the equipment. A site-wide label such as production line may be too vague if several machines have different isolation methods. Check that the procedure identifier, machine record and certification refer to the same asset. Identify the employees included, not merely the number attending. Record the inspector's identity clearly enough to confirm the authorised-employee separation rule. If the inspection covers several procedures or pieces of equipment, the certification should still let a reader determine what was inspected and who participated in each relevant review.

The standard does not prescribe a particular digital signature platform, certificate template or cloud archive. An employer can use an electronic system if the record contains the required information and remains retrievable. Make the certification only after the inspection has actually occurred. A prefilled form, a scheduled calendar event or a generic auto-generated statement cannot substitute for the required inspection. Attach or link observations and corrective actions when that helps demonstrate what was done, while distinguishing those helpful supporting records from the fields expressly required in the certification.

Training certification is a separate record under paragraph c7iv. It contains employee names and training dates. Do not use a training certificate as a replacement for the procedure-inspection certification, or vice versa. A worker may have current training and still be using a procedure that needs correction. An inspected procedure may still require retraining after a change or identified knowledge gap. Each record answers a different compliance question.

What to do when the inspection finds a knowledge gap

Paragraph c7iii requires retraining for authorised and affected employees when job assignments, machines, equipment, processes or energy-control procedures change in ways that present new hazards. Additional retraining is also required when a periodic inspection reveals, or the employer otherwise has reason to believe, that employees' knowledge or use of the procedures has deviations or inadequacies. The retraining must re-establish proficiency and introduce new or revised control methods as necessary.

The connection to the annual inspection is direct but not automatic for every finding. A missing machine label may require the employer to correct equipment identification; a worker misunderstanding a tag's limitations points to a training issue. Some findings require both. Record the basis for the response and make sure a revised procedure reaches the employees who use it. Do not assume a bulletin posted in the break room establishes that workers can isolate the changed machine safely. The employer should confirm that the workers can apply the procedure under the new conditions.

Avoid inventing a fixed number of days within which every finding must be closed. The standard requires correction of identified deviations and retraining in the stated circumstances, and safe work cannot proceed on a known inadequate control. Local policy can set escalation and closeout times that fit the risk. Keep such policy distinct from the federal text. A high-risk deficiency may demand immediate control, while an administrative clarification may follow a different route. The site decision must reflect the actual hazard.

A practical inspection record sequence

Use this sequence as a way to organise the statutory duties, not as a substitute for the standard or a machine-specific procedure.

| Stage | Question | Record to retain | | --- | --- | --- | | Identify scope | Which energy-control procedure and machine or equipment will be inspected? | Procedure and equipment identifiers. | | Choose inspector | Is the inspector an authorised employee who is not among the people using this procedure? | Inspector identity and role. | | Examine procedure and use | Does the current procedure fit the equipment and is it being followed? | Inspection observations. | | Review responsibilities | For lockout, were authorised employees reviewed? For tagout, were authorised and affected employees plus tag limitations reviewed? | Employee list and review notes. | | Correct findings | What deviations or inadequacies were identified and how were they corrected? | Action, owner and closeout evidence. | | Certify | Does the certification identify equipment, date, employees included and inspector? | Completed inspection certification. |

The sequence helps a distributed maintenance team avoid two recurring failures: an inspection listed as done with no evidence of the procedure examined, and an observation recorded with no effective correction. It also gives the next programme reviewer a trail from the procedure to the workers and actions. The legal certification fields should be present even if the employer chooses a leaner local form. Additional fields can be useful, but they should not obscure those core identifiers.

Common mistakes to avoid

Having the same user inspect their own procedure. Paragraph c6iA requires a different authorised employee for the periodic inspection of the procedure being used. Check the role assignment for each procedure, not only the person's job title.

Treating one annual meeting as inspection of every machine. A programme-wide meeting may support coordination, but the employer still needs the required procedure inspections and certifications tied to the machines or equipment concerned.

Using a training roster as the inspection certificate. Training and periodic inspection have different purposes and required record contents.

Applying the lockout review group to tagout. Tagout inspections include affected employees and review of the limitations of tags. The procedure method changes the worker review.

Recording a finding without correcting it. The purpose of the inspection includes correction of deviations and inadequacies. Track the action and recheck whether the resulting procedure can be used safely.

Claiming a calendar reminder is legal compliance. Reminders help schedule work. The inspection, worker review, correction and certification still have to happen.

Waiting for the next annual review after a known equipment change. The employer must use an adequate energy-control method for the present work. The periodic inspection schedule is not permission to ignore a discovered new energy source.

An annual procedure inspection is useful when it changes what happens on the next servicing job. It tests whether a specific procedure is followed, gives an independent authorised employee a chance to find weaknesses, revisits worker responsibilities and produces a traceable certification. Keep those functions together, and the record will show more than a date on a dashboard.

For the full energy-control framework, see the Complys US lockout/tagout overview. Businesses assessing compliance-record tools can visit Complys US and confirm current functionality for their procedures and inspection records. This article does not claim that Complys inspects machinery, verifies isolation, conducts worker reviews or certifies OSHA compliance automatically.

Related guides

See also: New or Altered Overhead Crane: OSHA Initial Inspection and Tests, OSHA Baseline vs Annual Audiogram: Employer Guide.