Chapter 18
LOCKOUT/TAGOUT AND VERIFICATION

Contents

Approved by Keith Gershon
Rev. 06/11

NOTE:
. . . . . Denotes a new section.
. . . . . . . . Denotes the beginning of changed text within a section.
. . . . . . . . Denotes the end of changed text within a section.

____________________

18.1 Policy

It is Lawrence Berkeley National Laboratory (Berkeley Lab) policy to prevent the unintended or unexpected startup or release of hazardous energy during servicing, maintenance, or modification activities. No employee shall install, service, remove, or perform maintenance on any equipment or machinery that may involve an energy hazard until that equipment has been de-energized, locked, tagged, and verified to be in a zero-energy state, in accordance with this document.

18.2 Purpose

To establish minimum safety requirements for the lockout and tagout (LOTO) of hazardous energy sources and the verification of energy isolation through the use of isolating devices and techniques during service or maintenance on equipment.

18.3 Scope

This program applies to all workers who may be exposed to hazardous energy while performing any servicing, maintenance, or modification activity.

The LOTO and verification procedures identified in this document must be strictly followed when it is necessary to work on any equipment that generates, holds, or may release any form of hazardous energy while the equipment is shut down, including, but not limited to:

This chapter does not apply to the Facilities Division’s High Voltage Switching Procedures that are performed in accordance with Facilities Procedure ADMN-056 and associated Facilities procedures referenced within ADMN-056.

18.3.1 Where LOTO Is Required

LOTO is required whenever service, maintenance, or modification is being performed on equipment or apparatus in which the unexpected energization or start-up of the equipment, or the release of stored energy, could cause injury to people or damage to equipment.

18.3.2 Exclusions

LOTO procedures do not apply under the following three conditions:

  1. Work on cord-and-plug-connected electrical equipment, in which:

    The use of a plug LOTO device is strongly recommended (see Figure 18-1).

    lock-out plug

    Figure 18-1. Lockout box for plugs

  2. Operations on energized equipment (e.g., measuring, troubleshooting, calibration), where continuity of service is essential to safety, or shutdown of the system cannot be reasonably accomplished. Supervisor approval is always required for such operations, and documented safety procedures that provide an equivalent level of safety must be established and followed.

    Special safety equipment may be required. See PUB-3000, Chapter 8 (Electrical Safety).

  3. Minor tool changes, adjustments, and other minor servicing activities that take place during normal operations, provided that (a) such activities are routine, repetitive, and integral to the use of the equipment and that (b) the work is performed using alternative measures that provide effective personnel protection.

18.4 Responsible Parties

18.4.1 All Workers

Each worker is responsible for his or her own safety. Never undertake a task that you feel is unsafe.  

All workers are responsible for recognizing when LOTO is being used, the general reasons for LOTO, and the importance of not tampering with or removing a lock and tag.

18.4.2 LOTO-Authorized Employees

LOTO-Authorized Employees have responsibility for recognizing the conditions of work that require LOTO, assessing all of the hazardous energy sources, using correct procedures and materials to implement LOTO, and maintaining control over their keys.

Each LOTO-Authorized Employee performing servicing, maintenance, or modification is responsible for applying his or her own lock and tag.

NEVER apply LOTO for anyone else. See Section 18.11 for Group LOTO Procedures.

18.4.3 Supervisors

Supervisors are responsible for:

18.4.4 EH&S Division

The Environment, Health & Safety (EH&S) Division is responsible for:

18.4.5 Facilities Division Director

The Facilities Division Director is responsible for ensuring that all outside contractors operating under the supervision of the Facilities Division are informed of and adhere to the Berkeley Lab LOTO policy (see Section 18.13 [Berkeley Lab Subcontractors/Vendors]).

18.5 Lockout/Tagout and Verification Procedures

All LOTO operations shall utilize either an equipment-specific written procedure or the General LOTO procedure, as applicable. Regardless of the procedure used, it is important that the following LOTO principles are strictly adhered to:

18.5.1 Equipment-Specific Written Energy-Control Procedure

An equipment-specific written energy-control procedure must be developed and used whenever the equipment or apparatus undergoing servicing, modification, or maintenance:

18.5.1.1 Preparing and Posting Equipment-Specific Written Procedures

A written energy-control procedure must be generated by the department, group, or LOTO-Authorized Employee most familiar with the equipment. This procedure must be used by any LOTO-Authorized Employee who will LOTO the equipment.

The procedure must be reviewed and updated as necessary any time there is a change in the equipment or associated hazards.

Supervisors must ensure that equipment requiring written procedures is identified and that the procedure is posted on the equipment or is readily available to the worker(s) authorized to LOTO the equipment.

If the written procedure is not posted on the equipment, the equipment must be clearly labeled to indicate the availability and location of the procedure. The supervisor or worker responsible for the equipment may determine the appropriate format and content of the label. For example:

CAUTION: An equipment-specific written procedure exists for the locking and tagging of this equipment. This equipment-specific written procedure may be obtained from ___________________ *

[*Entry to be determined by the supervisor].

18.5.1.2 Elements of an Equipment-Specific Written Procedure

The written hazardous energy control procedure must be specific to each piece of equipment (by model number or serial number) or apparatus, and must be inclusive of all energy types it contains. More complex equipment may require a separate procedure for each type of hazardous energy to be controlled or each type of maintenance or servicing task expected to take place. Maintenance and service manuals must be consulted to ensure accuracy and sufficient level of detail.

18.5.1.3 Required Content

Equipment-specific written procedures must incorporate all of the applicable elements of each step in Section 18.5.2 (General LOTO Procedure). It is essential that the specific application of each LOTO step be clearly explained in the context of the specific equipment or apparatus.

In addition, each written hazardous energy control procedure must identify the specific equipment or apparatus to which the procedure applies, and must identify the following elements:

  1. The procedure that will be performed that requires the control of hazardous energies
  2. The components or locations that are generating the hazardous energies to be controlled
  3. The energy types that will be controlled
  4. The specific locations for shutting down, isolating, blocking, safely releasing, and securing all potentially stored or residual hazardous energies
  5. The type of LOTO hardware to use (see Figure 18-2)
  6. How to test for verification of hazardous energy control

See Section 18.19.2 (Appendix 2: Equipment-Specific Lockout/Tagout Posted Procedure) for an example of an equipment-specific written procedure format.

loto hardware

Figure 18-2. LOTO Hardware

18.5.2 General LOTO Procedure

Before starting any LOTO procedure, the LOTO-Authorized Employee(s) performing the work shall physically locate and identify all isolating devices to be sure which switches, valves, or other energy-isolating devices apply to the equipment or apparatus to be locked out. Any questionable identification of electrical or other energy sources shall be resolved by the LOTO-Authorized Employee(s) with their supervisor before proceeding.

If safety would be compromised by following this prescribed sequence of procedures, the LOTO-Authorized Employee(s), with supervisor approval, may modify the sequence. However, all steps must be performed.

18.5.2.1 LOTO Application Steps

18.5.2.1.1 Step 1 – Preparation

  1. Review the written procedure, if applicable. The LOTO-Authorized Employee must determine if an equipment-specific written energy-control procedure is required for the task. (See Section 18.5.1 [Equipment-Specific Written Energy-Control Procedures]). If so, the LOTO-Authorized Employee must obtain and follow the equipment-specific written procedure. If a new written procedure must be generated, or an existing procedure needs to be changed or updated, the LOTO-Authorized Employee must contact his or her supervisor.

  2. Assess energy type and magnitude. The LOTO-Authorized Employee must assess the type, magnitude, and hazards of the energy to be controlled.

  3. Determine methods of energy isolation. The LOTO-Authorized Employee must determine the appropriate methods of controlling the hazardous energy. Methods for energy isolation may include such things as circuit breakers, disconnect switches, or valves (see examples in Figure 18-3).

Push buttons, selector switches, and control circuits are not energy-isolating devices.

Figure 18-3. Lockout/Tagout Methods

18.5.2.1.2 Step 2 – Notification

Notify all affected employees. The LOTO-Authorized Employee must notify all affected employees of the impending shutdown. These persons must be informed that they are not to disturb the lockout device or attempt to restart the equipment until they are informed that the lockout has been cleared and it is safe to resume normal operations.

18.5.2.1.3 Step 3 – Shutdown

  1. Verify that it is safe to shut down equipment. The LOTO-Authorized Employee must verify that it is safe to shut down the equipment.
  2. Perform normal equipment shutdown. The LOTO-Authorized Employee must turn off or shut down the equipment using established methods for that equipment.

18.5.2.1.4 Step 4 – Isolation and Verification

  1. Isolate all energy sources. The LOTO-Authorized Employee must operate (switch off, valve off, etc.) energy-isolating device(s).
  2. Verify that the correct energy-isolation device has been operated. The LOTO-Authorized Employee must take steps to ensure that the means used (disconnect, valve, etc.) for energy isolation correctly correspond to the equipment on which LOTO is being performed.

Note: For verification of electrical energy isolation, a best-practice procedure (if safe to do so) may include an “on-off-on” procedure, wherein: (1) the equipment is placed in an operating condition; (2) the disconnect is operated; (3) the equipment is confirmed to have switched off; (4) the disconnect is re-energized; (5) the equipment is confirmed to have switched on; (6) the disconnect is operated; (7) equipment is confirmed to have switched off.

18.5.2.1.5 Step 5 – LOTO Device Application

  1. Lock out energy sources. A red lock must be affixed so as to hold the energy-isolating device in an off or safe position that physically prohibits normal operation of the energy-isolating device.
  2. Write name, date, contact number, purpose of LOTO, and any other relevant information on the tag, and apply with lock or plastic locking tie. If the placement of the tag would compromise safety by obscuring indicator lights or controls, the tag may be located as close as is safely possible to the device, in a position that will be immediately obvious to anyone attempting to operate the device.

18.5.2.1.6 Step 6 – Additional Measures If Necessary

  1. Insert physical restraints or disconnect components. Insert blocks or chocks for moving or raised parts, insert blind flanges for pressurized piping, disconnect springs (only if safe to do so), etc., to ensure potential moving parts are physically restrained or disconnected.
  2. Release stored energy. The LOTO-Authorized Employee must completely release or otherwise control any stored energy and block any unexpected motion. The presence of stored energy usually indicates that an equipment-specific written procedure is required. The equipment must be in a zero-energy state (see Section 18.18 [Definitions and Acronyms]).

18.5.2.1.7 Step 7 – Isolation Verification Confirmation

  1. Attempt to restart the equipment. The LOTO-Authorized Employee must physically attempt to operate the energy-isolating device and attempt to restart the equipment using the normal equipment controls.
  2. Test equipment for zero-energy state. The LOTO-Authorized Employee must test potential energy sources using appropriately rated instruments. Any instrument used to test for voltage, pressure, or temperature must be checked for proper operation both before and after use. If the LOTO-Authorized Employee is not qualified to test the energy being isolated, he or she must ensure that the energy is tested by a qualified person.

    Only electrically qualified and LOTO-Authorized Employees can test for verification of electrical de-energization (see PUB-3000, Chapter 8 [Electrical Safety]).

    All energy is to be treated as present until positively proven otherwise.

18.5.2.1.8 Step 8 – Keeping Devices in Place

The lock and tag shall remain in place until work on the equipment is 100% complete. In rare circumstances, it may be necessary to temporarily remove LOTO devices before work is 100% complete (such as for adjustment or repositioning equipment). See Section 18.8 (Temporary Removal of LOTO Devices).

18.5.2.2 Release from LOTO Steps

18.5.2.2.1 Step 1 – Preparation & Notification

  1. Notify all affected persons that the system is to be returned to service. Ensure all persons remain clear of the equipment point of operation or hazard zone.
  2. Clear all tools and personnel. The LOTO-Authorized Employee must check the work area to ensure that all tools, debris, and personnel are at a safe distance from the equipment.
  1. Replace safety guards. The LOTO-Authorized Employee must check the equipment to ensure that any removed guards are reinstalled.

18.5.2.2.2 Step 2 – Removal of Additional Devices

  1. The LOTO-Authorized Employee must remove any additional devices applied under LOTO Application, Step 6.
  2. Remove all safety grounding devices.
  3. Verify that it is safe to re-energize. The LOTO-Authorized Employee must verify that the work for which the LOTO was applied has been completed and that it is safe to re-energize equipment.

18.5.2.2.3 Step 3 – Removal of All Locks and Tags

  1. Remove lock(s) and tag(s). Each LOTO device must only be removed by the LOTO-Authorized Employee who applied it. If the person who placed the locks and tags is not available, the procedure for Emergency Removal of LOTO Devices must be followed (see Section 18.9).
  2. Notify all affected employees that the lockout condition has been cleared.
  3. Energize the equipment and restore the equipment to the normal condition.

18.6 Training and Authorization

18.6.1 General Requirements

General awareness training shall be done to ensure that every Berkeley Lab employee knows and understands the purpose, contents, and application of this program to the level necessary for his or her job requirements. The awareness-level LOTO course described below for Affected and Other Employees fulfills this initial training requirement.

Reminder: LOTO may only be performed by LOTO-Authorized Employees who have completed formal classroom training per Section 18.6.3.1, have received task and equipment-specific on-the-job training, and have been authorized by their supervisors per Section 18.6.3.2.

18.6.2 Affected and Other Employees

Affected and Other Employees are required to be trained in LOTO awareness, which describes the use of this energy-control program, how to recognize LOTO, why LOTO is implemented, and the prohibition of attempts to restart or re-energize equipment that has been locked and tagged out.

Tampering with or removing someone else’s LOTO devices can cause serious injury or fatalities, and is a serious safety violation!

LOTO awareness training is obtained through EHS0010, Overview of EH&S at LBNL.

18.6.3 LOTO-Authorized Employees

A LOTO-Authorized Employee is a worker who is:

  1. Trained and
  2. Specifically authorized by his or her supervisor or line management to perform LOTO

18.6.3.1 LOTO-Authorized Employee Training Requirements

The training requirement for LOTO-Authorized Employees is fulfilled by first taking EHS0358, Lockout/Tagout Verification Training, then EHS0359, Lockout/Tagout Practical Training. As the outcome of LOTO training, LOTO-Authorized Employees must be able to recognize applicable hazardous energy sources, the type and magnitude of the energy available in the workplace, and the methods and procedures for their isolation and control.

18.6.3.1.1 Alternative to Formal Training

For employees with minimal LOTO responsibilities, such as the need to LOTO only one piece of equipment, the training requirement may be fulfilled without the formal classes described in Section 18.6.3.1, above. The alternative training plan requires the consent of the LOTO subject matter expert (SME).

The alternative plan shall consist of a document that describes the equipment, details the authorized employee’s specific responsibilities for properly executing the LOTO, and provides for the authorized employee to demonstrate the LOTO steps to the LOTO SME or designee.

This document may be in the form of an Activity Hazard Document (AHD), Equipment-Specific LOTO Procedure, or an equivalent format that is acceptable to the LOTO SME.

The authorized employee’s Job Hazards Analysis (JHA) shall clearly state the specifics of the alternate plan and note that the employee is not authorized to perform LOTO on any other equipment.

18.6.3.2 LOTO Refresher Training Requirements

LOTO refresher training is required annually for LOTO-Authorized Employees. The refresher training consists of EHS0258, plus a one-hour practical skills demonstration, EHS0369.

LOTO-Authorized Employees may also need to be Qualified and Authorized Electrical Workers to perform verification of electrical de-energization. Refer to PUB-3000, Chapter 8 (Electrical Safety) for detailed training requirements for Qualified and Authorized Electrical Workers.

18.6.3.3 Supervisor Authorization

Specific authorization is to be provided by the supervisor after the employee satisfies the classroom training requirement and has received equipment-specific training. The supervisor must ensure that the employee is thoroughly familiar with the equipment (within the context of his or her job function) and with the energy-control procedures. A practical exercise may be required by the supervisor to demonstrate proficiency. The content of this exercise will depend on the types of hazardous energy control and the complexity of the procedure’s steps.

Once satisfied that both the training and authorization requirements have been met, the supervisor may authorize an employee to perform LOTO. This authorization stipulates the specific equipment or types of equipment on which the LOTO-Authorized Employee may perform LOTO.

18.6.4 Reauthorization and Retraining

Reauthorization is required when:

  1. A LOTO-Authorized Employee's job changes or he or she is reassigned, or
  2. New equipment is to be used, or
  3. New hazards are introduced, or
  4. New energy-control procedures are to be implemented

Retraining and/or reauthorization may be required when:

  1. A supervisor has reason to believe that an employee has insufficient knowledge of LOTO procedures or policy, or
  2. A periodic inspection shows a deficiency in the LOTO-Authorized Employee's ability or interest to implement LOTO policy correctly

18.6.5 Training Documentation

Documentation of equipment-specific training must be in writing. Training documentation must be retained for three years, and be readily available for inspection by Berkeley Lab EH&S Division representatives or LOTO Program evaluators upon request.

18.7 LOTO Equipment

18.7.1 Locks

Only RED padlocks may be used when performing LOTO (see Figure 18-5). All RED padlocks, regardless of manufacturer, shape, size, etc., are considered personal LOTO locks. Any other lock may be used for configuration management or other administrative purposes. It is permissible to paint or tape a padlock red.

Berkeley Lab LOTO locks may not be used for any purpose other than LOTO.

The following are additional requirements pertaining to LOTO Locks:

Figure 18-5. Examples of RED padlocks.


18.7.2 Keys

18.7.2.1 Key Control – Personal Locks

Each Berkeley Lab-approved LOTO padlock shall have one key only. The key must be in the control of the LOTO-Authorized Employee who applies the lock. There are to be no spare or emergency keys.

18.7.2.2 Key Control – Personal Locks Keyed Alike

A group of locks with a common key may be used for equipment with multiple energy-isolation devices, if desired. If a group of locks are keyed alike for this purpose, one key only may be issued for use by the LOTO-Authorized Employee.

18.7.3 Tags

The following are requirements for LOTO tags:

Berkeley Lab LOTO tag

Figure 18-6. Berkeley Lab LOTO tag

18.7.4 Division-Specific LOTO Procedures

A division may develop LOTO procedures or requirements specific to its operational needs. Such division-specific procedures or requirements must:

  1. Be approved by the Berkeley Lab Electrical Safety Officer (ESO) or member of the Berkeley Lab Electrical Safety Committee (ESC) representing that division
  2. Meet all of the LOTO requirements of this chapter
  3. Contain provisions for on-the-job or classroom training of all LOTO-Authorized Employees who will be performing the division-specific LOTO procedure
  4. Contain provisions that divisional line management is responsible for ensuring that each LOTO-Authorized Employee is following the division-specific LOTO Program

18.8 Temporary Removal of LOTO Devices

When LOTO devices must be temporarily removed from the energy-isolating device so that the equipment or component can be re-energized for adjustment or positioning, the following sequence of eight actions must be taken:

  1. Notify the affected employees and area supervisor.
  2. Clear the equipment of tools and materials.
  3. Remove all employees from the machine or equipment area, and ensure that required tools are safely and properly positioned.
  4. Remove all repositioning and blocking devices, and return all vents and valves to their normal operating positions.
  5. Remove all grounding/shorting conductors, hooks, or wands.
  6. Put on any required personal protective equipment (PPE).
  7. Energize and proceed with testing or positioning.
  8. De-energize all systems and reapply lockout/tagout measures to continue the servicing, maintenance, or modification of the equipment.

18.9 Emergency Removal of LOTO Devices

See Appendix 5.

WARNING: This is considered to be an emergency procedure, only to be undertaken in extreme circumstances and with divisional approval.

When the LOTO-Authorized Employee who applied a LOTO device is not available to remove it, that device may be removed by his or her supervisor if it is safe to do so, and only after the following emergency-removal procedure has been implemented:

Extreme care must be taken, and the following four steps must be performed. Documentation of these steps can be done by using the form in Appendix 5:

  1. The supervisor must verify that the LOTO-Authorized Employee is not at the Berkeley Lab facility.
  2. The supervisor must make every reasonable effort to contact the LOTO-Authorized Employee. This may include a telephone call to the employee's home or other location.
  3. The supervisor must verify that it is safe to remove the LOTO devices.
  4. Before the worker returns to any work duty, the supervisor must ensure that the LOTO-Authorized Employee is presented with the removed lock upon returning to work and is informed of the reasons for the emergency removal.

Note: If the LOTO-Authorized Employee's immediate supervisor is not available, the emergency removal may be performed by one level of management above the LOTO-Authorized Employee's supervisor, or by a delegated individual with documented authorization by the supervisor to perform this function, using the above steps. Contact the Berkeley Lab Electrical Safety Officer at (510) 486-4694 if no authorized person is available to implement the emergency removal procedure.

18.10 Tagout Only

In the rare case that a device is not capable of being locked out, a “tagout only” procedure may be used, subject to the following conditions. The following criteria must be met before using a tagout-only procedure:

To conduct a tagout-only procedure, the LOTO-Authorized Employee must follow all the steps outlined in Section 18.5.2 (General LOTO Procedure), with the following two changes:

  1. Omit the placement of the lock.
  2. Instead, the LOTO-Authorized Employee must utilize a second means of isolating the hazardous energy. Removal of an isolating circuit element, blocking of a controlling switch, opening of an extra disconnect device, and removal of a valve handle are all examples of secondary measures. The second means of isolation must be identified on the tag, and the tag must be affixed as in Step 8 of the General LOTO Procedure (see Section 18.5.2.1.8, above).

    Extra caution must be exercised when using a tagout-only procedure. Tags may evoke a false sense of security by the at-risk employee. Tags are warning devices and do not provide the physical restraint provided by a lock.

18.11 Group LOTO Procedure

When multiple LOTO-Authorized Employees perform servicing, maintenance, or modification on the same piece of equipment or apparatus, the supervisor may determine that the use of a group LOTO procedure is appropriate.

  1. The project supervisor determines that a group LOTO procedure is appropriate.
  2. The supervisor must convene a meeting of all members of the group to be covered under the procedure.
  3. The designated LOTO-Authorized Employee is responsible for ensuring that each step of the equipment-specific written procedure has been completed.
  4. The designated LOTO-Authorized Employee must apply his or her personal LOTO lock(s) and tag(s) to the energy-control device(s) and indicate on the tag(s) that a group LOTO is in effect.
  5. The designated LOTO-Authorized Employee shall place his/her key(s) inside of a gang lockbox (see Figure 18-7). The gang lockbox shall be constructed in such a way as to permit multiple locks to be attached to the outside of the enclosure, preventing it from being opened until all locks are removed.
  6. The designated LOTO-Authorized Employee shall also place a LOTO lock and tag on the outside of the gang lockbox.
  7. All other workers performing work on the equipment shall ensure that each step of the equipment-specific written procedure has been completed, and then lock and tag the gang lockbox in a manner that prevents access to the key inside until all locks have been removed.
  8. When the work has been completed and after each worker has removed his/her respective lock from the gang lockbox, the designated LOTO-Authorized Employee removes his or her LOTO lock from the outside of the gang lockbox, obtains the keys from the lockbox, and returns the equipment to service as described in Section 18.5.2.2 (Release from LOTO Steps).

    Gang lockboxes Gang lockboxes Gang lockboxes

    Figure 18-7. Gang LockBoxes

18.12 Shift Changes

If equipment will remain de-energized after the end of a shift, and work will continue by the oncoming shift, an orderly transfer of LOTO devices between LOTO-Authorized Employees from the outgoing and incoming shifts must be performed, subject to the following conditions:

The following criteria must be met before using a shift-change procedure:

18.12.1 Shift Change LOTO Procedure

  1. The LOTO-Authorized Employees from both shifts must both be present at the lockout device.
  2. The off-going LOTO-Authorized Employee must remove his or her lock and tag, and the oncoming LOTO-Authorized Employee must immediately place his or her lock and tag on the group LOTO device.
  3. The LOTO-Authorized off-going employee must inform the oncoming LOTO-Authorized Employee of any potential hazards.
  4. Before work begins, the oncoming worker(s) shall:
    1. Re-verify that all safety devices (such as blocking) are in place, and
    2. Re-verify that there is zero energy in the system, and
    3. Attempt to restart or re-energize the system before anyone enters the hazard zone

18.12.2 When There Is a Gap between Shifts

18.12.2.1 Leaving Locks in Place

If the meeting between off-going and oncoming shift workers does not occur, the off-going shift employee’s LOTO devices shall remain in place. The oncoming employee who will be working on that equipment shall add his/her LOTO lock and tag to a multiple-lock adaptor and proceed with the work, following the requirements of this document. This worker shall remove his/her LOTO when finished working on the equipment.

18.12.3 Unforeseen Shift-Change Problems

If the orderly transfer of LOTO devices is not possible because of a gap in shifts, contact the Berkeley Lab Electrical Safety Officer at (510) 486-4694 for further direction.

18.13 Berkeley Lab Subcontractors/Vendors

See Section 18.19.4 Appendix 4.

All outside subcontractors/vendors involved in construction or maintenance for Berkeley Lab who engage in activities covered by the Berkeley Lab LOTO Program shall be required to include in their safety plans LOTO procedures that conform to the requirements of this document. Before placing a lock and tag at Berkeley Lab, subcontractors/vendors must have an approved LOTO permit posted on the job site. A permit application can be submitted by the subcontractor/vendor or the Berkeley Lab point-of-contact (POC) by going to the following site: http://electricalsafety.lbl.gov/. This permit outlines the LOTO steps assigned to Berkeley Lab and the subcontractor/vendor during the LOTO activities. All subcontractor employees are responsible for personally locking out and tagging out the equipment that they work on.

All subcontractor LOTO locks shall be red.

There shall be only one key per lock. Spare, master, or emergency keys are not permitted on the site.

Subcontractors/vendors shall provide their own LOTO equipment.

All subcontractor employees have the responsibility to implement LOTO procedures for equipment that they are working on. All subcontractor employees have potential exposure to LOTO activities and must be trained in the recognition of the procedure and the importance of respecting locks and tags.

Upon LOTO permit approval and the subcontractor’s/vendor’s signed acknowledgement of a job briefing, the LOTO permit is recognized as the subcontractor’s/vendor’s company LOTO policy for the identified scope of work.

18.13.1 Berkeley Lab Point-of-Contact Responsibilities

The Berkeley Lab point of contact (POC) (i.e., Project Manager [PM], Construction Manager [CM], Service Requester, etc.) is responsible for ensuring that all subcontractors/vendors for that project are informed of the Berkeley Lab LOTO policy, procedures, and devices as described in this chapter. This can be achieved by performing a thorough briefing of the LOTO permit before work begins.

The POC shall not authorize work to begin prior to receiving an approved LOTO permit. The POC shall ensure that a briefing is conducted and that the permit is signed by everyone participating in the LOTO activity before work begins.

The POC shall return the signed LOTO permit to the EH&S Division Electrical Safety Group upon expiration of the LOTO permit.

The POC is responsible for communicating information about the subcontractor’s/vendor’s LOTO procedures to Berkeley Lab workers who are affected by the subcontractor’s/vendor’s LOTO activities.

The LOTO permit may specify that the Facilities Division or other designated organization will have local oversight of a utility or other system that is associated with subcontract work. This does not relieve the subcontractor/vendor from LOTO responsibilities. In such instances, the controlling Berkeley Lab shop will implement the following procedure:

  1. The controlling Berkeley Lab shop will apply an administrative lock on a multiple-lockout device on the energy-isolation device after securing the system.
  2. All subcontractor/vendor LOTO-Authorized Employees will satisfy themselves that the hazardous energy has been appropriately isolated, and apply their individual LOTO locks while they are working on that system.
  3. After the work is completed, and all of the subcontractor’s/vendor’s locks are removed, the Berkeley Lab shop removes the administrative lock and, after verifying it is safe to do so, re-energizes the system.

18.13.2 EH&S Division Responsibilities

The EH&S Division shall review the contractor safety plan and ensure that it provides a level of LOTO safety equivalent to this PUB-3000 chapter and 29 CFR 1910.147(c)–(f).

The EH&S Division shall provide final approval of the LOTO permit.

18.14 Students, Guests, and Visitors

All visiting scientists, engineers, participating guests, and students who work in areas in which LOTO is utilized are considered Affected or Other Employees and must receive LOTO awareness training in accordance with Section 18.6.2.

However, visiting scientists or students who perform service, maintenance, or equipment modification are required to be trained as a LOTO-Authorized Employee in accordance with Section 18.6.3. As such, they must be specifically LOTO-Authorized in accordance with Section 18.6.3.2, and must adhere to LOTO procedures as described in Section 18.5.2 (General LOTO Procedure).

The Berkeley Lab supervisor responsible for a visitor has all of the responsibilities of a supervisor, as described in this PUB-3000 chapter.

18.15 Periodic Inspections

Each division is responsible for conducting an inspection and certification of its energy-control procedures annually. Division Safety Coordinators will work with the Berkeley Lab Electrical Safety Officer. The EH&S Division will coordinate the audit sitewide.

The periodic inspection must be performed and documented by a LOTO-Authorized Employee other than the one utilizing the procedures being inspected. Specifically, the inspector must be able to determine whether the inspected procedures are:

  1. Adequate
  2. Understood
  3. Being followed by employees

The periodic inspection must be designed to correct any deviations or inadequacies observed. The inspection should provide for a demonstration of the procedures. Following the inspection, there must be a review of each employee’s responsibilities under the energy-control procedure that was inspected.

The certification must state that the periodic inspection has been performed. The certification must identify the machine(s) or equipment on which the energy-control procedure was utilized, the date of the inspection, the employees included in the inspection, and the employee performing the inspection.

Procedure inspections may be directly entered on a Web-based form found under the LOTO section at: http://electricalsafety.lbl.gov/.

Alternatively, the form found in Appendix 3 may be filled in by hand, printed and sent to the Berkeley Lab Electrical Safety Officer.

18.16 Tag-On

Sump pumps, emergency lights, refrigerators, or equipment that must be shut down in a controlled manner fall into a class of equipment that should not be accidentally de-energized.

When a circuit breaker, disconnect switch, or energy-securing device is readily accessible to any employee, the circuit breaker or disconnect switch may be tagged to indicate that it is not to be turned off (see Figure 18-8).

The energy-securing device must not be locked by any means that would prevent the device from being used as an emergency disconnect.

The tag must include the name of the responsible person and an alternate, date, and phone number.

Figure 18-8. Tag-On

18.17 Standards

18.18 Definitions and Acronyms

Administrative Lock: Any lock that is used for a purpose other than LOTO. The lock may serve a safety function other than LOTO, a configuration-control function, or other purpose. An administrative lock, unlike a LOTO lock, may be controlled by one or more individuals. An administrative lock shall not be labeled with a danger tag or sticker. An administrative lock is not a substitute for a LOTO lock. A LOTO lock cannot be used as an administrative lock.

Affected Employee: A person whose job requires him/her to be near or around the hazard zone (but not within the hazard zone) when equipment or apparatus is being maintained or serviced under a locked-out or tagged-out condition. See also the definitions for LOTO-Authorized Employee and Other Employee.

Associated Equipment: Equipment or apparatus that interacts with the primary equipment or apparatus to be serviced or maintained. This interaction may be hazardous to employees servicing the primary equipment or apparatus.

Blocked: A condition where a mechanical device is inserted into the energy path to physically prevent movement. Most commonly used with mechanical machinery or fluid-filled lines.

Capable of Being Locked Out: An energy-isolating device is capable of being locked out if it has a hasp or another means of attachment to which, or through which, a lock can be affixed with the device in the “off” or de-energized position, or it has a locking mechanism built into it. Other energy-isolating devices are capable of being locked out if lockout can be achieved without the need to dismantle, rebuild, or replace the energy-isolating device or permanently alter its energy-control capability.

Continuous Positive Control: The cord and plug are in the physical possession or control of the LOTO-Authorized Employee performing service or maintenance (for example, the cord is in his/her hand, or the plug is in his/her pocket).

Cord-and-Plug-Powered Equipment: Portable electric equipment, such as power tools, computers, printers, appliances, etc., for which exposure to the hazards of unexpected energization or start-up of the equipment is controlled by the unplugging of the equipment from the energy source and by the plug being under the continuous control of the employee performing the servicing or maintenance.

Dissipated: A condition where all stored energy has been reduced to a nonhazardous level. Most commonly used with energy-storing devices such as capacitors, pressure receivers, accumulators, reservoirs, or springs.

EH&S Division: Environment, Health & Safety Division.

Emergency Removal of LOTO Devices: A procedure for the removal of a lock and tag, including any energy-isolating device to be removed by someone other than the employee who applied them. Only the supervisor can remove a LOTO-Authorized Employee’s lock and tag.

Energized: Connected to an energy source or containing residual or stored energy.

Energy-Isolating Device: A mechanical device that physically prevents the transmission or release of energy, including but not limited to the following:

Energy-isolating devices must be capable of allowing a lock to be installed. Push buttons, selector switches, software interlocks, and control circuit type devices are not energy-isolating devices and cannot be used to isolate hazardous energy.

Energy Source: Any source of electrical, mechanical, hydraulic, pneumatic, chemical, thermal, or other energy, including ionizing and nonionizing radiation.

Equipment or Apparatus: Commercially purchased and nonpurchased Berkeley Lab or other custom-built devices that utilize energy to operate.

Evaluator: A LOTO-Authorized Employee, not involved in the LOTO procedures being inspected, trained in evaluating the effectiveness of the procedures and applicable LOTO-Authorized Employee’s performance.

Exposure: Being subjected to a source of risk presented by hazardous energy sources.

Gang Lockbox: A box used to contain the LOTO lock key(s) of designated LOTO-Authorized Employee(s) during a group LOTO procedure. Individual LOTO locks are placed in the gang box by each LOTO-Authorized Employee covered under the designated LOTO-Authorized Employee. The gang lockbox shall be constructed in such a way as to permit multiple individual LOTO locks to be attached to the outside of the enclosure, preventing it from being opened except by removal of every individual LOTO lock.

Group Lockout/Tagout: A procedure to coordinate the servicing or maintenance work assignment of several groups, multiple energy sources, or multiple LOTO procedures extending over more than one shift (days or weeks).

Hazard Zone: The space near a source of hazardous energy where a person could be harmed if the hazardous energy was suddenly or unexpectedly released, such as the unexpected release of stored pressure, the unexpected movement of a machine, or the spray from a hazardous chemical that was unexpectedly released.

Hazardous Energy: Energy that, if not controlled, is of such a magnitude that it is capable of causing harm to a person or loss of resources (see also PUB-3000 Chapters 7, 13, 16, 25, 27, 28, 29, and 33 and other Work Smart Standards).

Hazardous Energy Control: The process of systematically implementing mechanical means to prevent hazardous energy from flowing to a person.

Hazardous Energy Control Procedure: A written document that contains equipment-specific information and procedural steps that a LOTO-Authorized Employee must follow in order to safely control hazardous energy during servicing or maintenance of equipment or apparatuses. Procedures must be reviewed annually.

Hazardous Energy Source: A piece of equipment or apparatus, process line, etc., that is a source of electrical, mechanical, hydraulic, pneumatic, chemical, thermal, or other energy, including stored energy such as springs, capacitors, gravity, etc., and which by release of that energy source poses a threat or danger to personnel or equipment.

Individual Lock (see also LOTO Lock): A lock issued to a LOTO-Authorized Employee for which no other employee has the key or means of opening without using destructive force. Locks used for control of hazardous energies shall be unique in design and color, shall not be used for any other purpose, and shall be easily distinguishable from other standard locks (e.g., Administrative Lock, multikey, combination, and other non-LOTO locks).

Isolated: A condition where all sources of hazardous energy have been controlled by physically stopping the energy path so that the energy cannot flow to workers. The term “isolated” is commonly used with electrical circuits and fluid lines.

Isolation Point: A location such as a valve, breaker, switch, blank-off, or block-out, or another lockable point located such that, when in the “OFF” position, prevents the flow or release of hazardous energy. Computer control circuitry, software, or other control circuits do not constitute energy-isolation points.

Lockout Device: A device that utilizes a positive means, such as a single-key LOTO lock, to hold an energy-isolating device in the safe position and prevent the energizing of equipment or apparatus. Included are lockout hasps, blank flanges, and bolted slip blinds.

Lockout Tag: A distinctive, durable tag attached to the LOTO lock shackle that identifies it as a lockout device and identifies the individual who placed the lock, the individual’s phone number, and the time and date it was placed. The tag shall be of a standard shape and size for use throughout Berkeley Lab. A lockout tag is not a substitute for a lockout device.

Lockout/Tagout (LOTO): The method of applying a mechanical lockout device and a tag on an energy-isolating device by a LOTO-Authorized Employee in accordance with established written procedures in order to control hazardous energies and prevent the equipment from being operated until the lockout device is removed.

LOTO: Lockout/Tagout.

LOTO-Authorized Employee: A person who has completed the required hazardous energy control training (general and procedure-specific), and is LOTO-Authorized by the supervisor to lockout and tagout energy-control points for a specific equipment or apparatus to perform service or maintenance. A person must be a LOTO-Authorized Employee to apply a lock or tag to control hazardous energy. See also the definitions for Affected Employee and Other Employee.

LOTO Lock (see also Individual Lock): A lock issued to a LOTO-Authorized Employee for which no other employee has the key or means of opening without using destructive force. Locks used for control of hazardous energies shall be unique in design and color, shall not be used for any other purpose, and shall be easily distinguishable from other standard locks (e.g., Administrative Lock, multikey, combination, and other non-LOTO locks).

Nationally Recognized Testing Laboratory (NRTL): A private-sector organization, recognized by OSHA, that determines whether specific equipment and materials (products) meet consensus-based standards of safety to provide the assurance that these products are safe for use in the U.S. workplace.

Normal Production Operations: The utilization of a piece of equipment or apparatus to perform its intended functions.

Other Employee: A person whose work duties require him or her to be in proximity to an area where energy-control procedures have been implemented on equipment or apparatus, or in areas where energy-isolation devices have been locked out. See also the definitions for Affected Employee and LOTO-Authorized Employee.

Point of Contact (POC): The primary interface between the subcontractor/vendor and Berkeley Lab. This is the person who will directly authorize the subcontractor to start work. The POC is usually a Project Manager (PM), Construction Manager (CM), Service Requester, etc. The POC ensures that LOTO permits are in place and correct, a briefing has been conducted, and all participants in the LOTO have signed the permit.

Qualified Person: An electrical worker, designated by a Berkeley Lab supervisor, who by reason of experience and instruction has demonstrated familiarity with the construction, installation, maintenance, and operation of the electrical equipment; installations; and the electrical hazards involved. This employee also is required to be current with all required qualification training. See PUB-3000, Chapter 8 (Electrical Safety).

Routine Operations: Safe service, maintenance, adjustments, and inspections taking place during normal production operations.

Stored Energy Source: Any device that is capable of holding energy after equipment shutdown. This includes, but is not limited to, capacitors, tanks, pipes, springs, and flywheels.

Tagout: The placement of a tagout device on an energy-isolating device, in accordance with an established procedure, to indicate that the energy-isolating device and the equipment being controlled may not be operated until the tagout device is removed. Using tagout alone as a form of hazardous energy control is not a positive means of controlling hazardous energy and shall not be used without an approved locking device.

Tagout Device: A prominent warning device, such as a tag and a means of attachment, that can be securely fastened to an energy-isolating device in accordance with an established procedure to indicate that the energy-isolating device and the equipment being controlled may not be operated until the tagout device is removed. The tag shall include the reason for placing the tag, the name of employee placing the tag, how that employee may be contacted, and the date the tag was placed. Tags must be durable and able to withstand the environment to which they are exposed for the maximum time of exposure expected. These tags shall not be used for other purposes.

Zero-Energy State: A condition that is reached when all energy sources to or within equipment are isolated, blocked, or otherwise relieved, with no possibility of reaccumulation. Equipment is not safe to work on until it is in a zero-energy state.

_____________________

<< Chapter 17 || Table of Contents || Appendix 1 >>