Hazards: Unexpected start-up or reenergization during servicing · Release of stored energy — hydraulic, pneumatic, spring, gravity, steam · Electrocution and arc flash while working on a circuit believed dead · Caught-in, crushing or amputation from a machine that restarts
Why it matters
Control of hazardous energy, 29 CFR 1910.147, was the fourth most cited OSHA standard in fiscal year 2025. OSHA lists what these injuries look like: "electrocution, burns, crushing, cutting, lacerating, amputating, or fracturing body parts." The machine does not have to be running to hurt you — only able to start, or still holding something back.
Key points
- Know every energy source before you touch the switch. 1910.147(d)(1): type and magnitude, the hazards, how it is controlled. Electrical, hydraulic, pneumatic, mechanical, thermal, chemical, gravity, spring — the second control circuit or the shared air header is the one that gets missed.
- Shut down in order, isolate at the device. (d)(2) orderly shutdown, (d)(3) every isolating device located and operated. Use this machine's written procedure: a generic one does not know where your disconnect is.
- Bleed, block and drain the stored energy. (d)(5): relieved, disconnected, restrained, rendered safe — accumulators, capacitors, raised rams, loaded springs, hot lines. Where it can build back up, keep verifying.
- Verify with an instrument, not an opinion. (d)(6): verify isolation and deenergization before work starts. Meter the conductors, read the gauge, try the start once the area is clear.
- One person, one lock, one key. (d)(4)(i) and (e)(3): you affix your own device and you remove it. Four people in there, four locks on.
- Restart is a procedure too. (e)(1)-(e)(2): area inspected, parts back together, everybody clear, affected employees told before it comes back on.
- On a jobsite, 1926.417 is the rule. 1910.147 does not cover construction: tag the controls, render deenergized circuits inoperative, tag every point where they can be energized.
Do / Don't
Do
- Read this machine's procedure before you start.
- Put your own lock and tag on every isolation point.
- Test dead with a meter proved on a known source.
- Tell the operator and the next shift what is locked out.
Don't
- Cut, bypass or "borrow the key" for someone else's lock.
- Trust an E-stop, interlock or selector switch as isolation.
- Reach past a guard to clear a jam, even for a second.
- Leave a lock on and go home without telling anyone.
Quick site check
- Is today's machine procedure on hand, and does it name the disconnects?
- Enough locks, tags and hasps for everyone working in there?
- Meter and gauges available, and the meter proved?
- Who is accountable for the group lockout on this job?
- Name the machine you serviced most recently. How many separate energy sources does it have, and can you name every one?
- Where is the disconnect for it, and what is the label on that disconnect?
- What on that machine holds pressure, spring force or a raised weight after the power is off?
- How did you verify it was actually dead — a meter reading, a gauge, or hitting the start button?
- If your lock is still on it at the end of shift and you go home, what happens next?