2.2 Finding every isolation point
1910.147(d)(3) says that "all energy isolating devices that are needed to control the energy to the machine or equipment shall be physically located and operated in such a manner as to isolate the machine from the energy source(s)." The word doing the work is all. Every serious lockout failure in the second half of that sentence starts with an isolation point nobody knew about.
1 Why walking the machine beats reading the drawing
Drawings tell you how the machine was designed. The floor tells you how it ended up. Twenty years of production improvements, added conveyors, a spare pump tied into a nearby panel, a temporary feed that became permanent, a control transformer fed from the lighting circuit because that panel had a spare breaker — none of that reliably makes it back onto the one-line.
So the walkdown is not optional, and it is not a desk exercise. Someone knowledgeable stands at the machine with the drawings, traces each energy path physically, and writes down what is actually there. That person is doing the "developed" half of 1910.147(c)(4)(i), and there is no shortcut through it.
2 The isolation points people miss
The same handful of oversights show up across every industry. Print this list and carry it on the walkdown.
| Missed point | How it hides | How to find it |
|---|---|---|
| Second electrical feed | A large machine fed from two panels, or a retrofit drive on its own circuit | Count the conduits leaving the machine and follow each one |
| Separate control power | 120 V control transformer fed from a lighting or receptacle panel | Open the control cabinet and trace the incoming control conductors |
| Backfeed from an adjacent machine | Shared bus, tie conveyor, interlocked line section that can drive the roller you are working on | Ask what else moves when this machine runs; test for voltage before touching |
| Plant air branch | A drop from an overhead header with no local shut-off drawn anywhere | Follow every hose and tube out of the machine to its source |
| Hydraulic power unit in another room | Central HPU serving several presses | Trace the pressure and return lines; identify the unit and its isolation valve |
| Gravity load | Not an "energy source" anyone thinks to inventory | Ask what would move if every line were cut right now |
| Process feed from upstream | Hot fluid, steam, product or inerting gas continuing to arrive by piping | Follow the process piping, not the electrical drawings |
3 Naming the point so somebody else can find it
1910.147(c)(4)(ii)(B) requires "specific procedural steps" for isolating the machine, and step 4 of the Appendix A sequence has a blank line for "Type(s) and location(s) of energy isolating devices." Specific means someone who has never touched this machine can walk up and find the device at three in the morning.
A usable isolation-point entry has four parts:
- 1A unique identifier — DS-12, V-114, HPU-2 valve A. If the device is not labelled on the floor, label it before the procedure is finished.
- 2A physical location — "north wall of the MCC room, third disconnect from the door," not "in the electrical room."
- 3The type and magnitude it controls — 480 VAC 3-phase; 2,000 psi hydraulic supply; 110 psi plant air.
- 4The action and the device — "rotate to OFF and apply padlock through the handle hasp"; "close, then apply chain-and-clamp valve lockout."
Labelling the machine and labelling the procedure are the same job. A procedure that says "lock the main disconnect" on a machine whose disconnects are unlabelled is asking the technician to make a judgment call while standing in front of three identical grey boxes.
4 What does not count, no matter how convenient
The definition in 1910.147(b) ends by ruling out push buttons, selector switches and other control circuit type devices. Chapter 3 of Part 1 covered why. Here is the practical list of things that show up on procedures and should not:
Two more that are less obvious. A circuit breaker that cannot be locked in the open position is not usable as an isolation point until a lockout attachment is fitted — and per the definition of "capable of being locked out," fitting one is usually possible without dismantling or replacing the breaker, which means you are expected to do it. And a valve you can close but not lock is in the same position: chain-and-clamp and gate-valve lockouts exist precisely so that "there's no hole in it" stops being an answer.
5 One point, one lock, one person — and when that stops working
1910.147(d)(4)(i) requires lockout or tagout devices to be affixed to each energy isolating device by authorized employees, and (d)(4)(ii) requires lockout devices to be affixed in a manner that will hold the isolating device in a safe or off position. One device, one lock, applied by the person who is exposed.
A machine with six isolation points and a crew of four therefore needs a mechanism, or you get twenty-four padlocks and chaos. That mechanism is the group lockout arrangement of 1910.147(f)(3): the isolation points are locked with an operations or group lock, the keys go into a group lockbox, and each authorized employee puts a personal lock on the box when they begin work and removes it when they stop. Part 3, Chapter 4 covers the requirements in full — the point here is that the number of isolation points you found on the walkdown is what determines whether you need one.
6 Keeping the map true
An isolation-point list starts decaying the day it is written. A drive is replaced, a conveyor is added, a valve is moved during a shutdown. The standard has two mechanisms that catch this, and both are covered later in the course.
The first is retraining: 1910.147(c)(7)(iii)(A) requires retraining whenever there is a change in machines, equipment or processes that presents a new hazard, or a change in the energy control procedures. The second is the annual periodic inspection under 1910.147(c)(6)(i), which is performed by an authorized employee other than the ones using the procedure — a fresh pair of eyes walking the machine against the paper, which is exactly the conditions under which a missing isolation point gets noticed.
In between those two, one rule of thumb carries a lot of weight: if the machine changed, the procedure changes before the next job. Not at the next audit. Whoever signs off the modification owns the procedure update, and management-of-change systems that include the LOTO procedure in the sign-off are the ones whose paperwork still matches the floor five years later.
- 1910.147(d)(3) requires all energy isolating devices needed to control the energy to be located and operated — the walkdown at the machine, not the drawing, is what finds them.
- The usual misses: a second electrical feed, separate control power, backfeed from adjacent equipment, an unmapped air drop, a remote hydraulic power unit, gravity, and upstream process piping.
- Each isolation point needs a unique identifier, a physical location, the type and magnitude it controls, and the action plus device used to secure it (1910.147(c)(4)(ii)(B)).
- E-stops, mode selectors, interlocked gates and forced PLC outputs are control devices and are never isolation points (1910.147(b)).
- A device with no hasp is usually still "capable of being locked out" — bolt-on lockouts exist, and 1910.147(c)(2)(iii) requires new and majorly modified equipment to accept a lock.
- Every isolation point gets a device (1910.147(d)(4)(i)); when the point count exceeds what one person can manage, the group lockout arrangement of 1910.147(f)(3) is the answer.
Free educational content — not OSHA-authorized training, no certificate or card issued. Follow your employer's program and the standards cited.