Skip to content
STEELTOETOOLS
Part 213 min

2.2 Finding every isolation point

1910.147(d)(3) says that "all energy isolating devices that are needed to control the energy to the machine or equipment shall be physically located and operated in such a manner as to isolate the machine from the energy source(s)." The word doing the work is all. Every serious lockout failure in the second half of that sentence starts with an isolation point nobody knew about.

1 Why walking the machine beats reading the drawing

Drawings tell you how the machine was designed. The floor tells you how it ended up. Twenty years of production improvements, added conveyors, a spare pump tied into a nearby panel, a temporary feed that became permanent, a control transformer fed from the lighting circuit because that panel had a spare breaker — none of that reliably makes it back onto the one-line.

So the walkdown is not optional, and it is not a desk exercise. Someone knowledgeable stands at the machine with the drawings, traces each energy path physically, and writes down what is actually there. That person is doing the "developed" half of 1910.147(c)(4)(i), and there is no shortcut through it.

On the job: do the walkdown with a maintenance technician and an operator together. The technician knows the panels; the operator knows the machine reaches for air from the overhead line when the main receiver is low, and that the wash-down pump shares a starter with the mixer. Neither of them has the whole picture alone.

2 The isolation points people miss

The same handful of oversights show up across every industry. Print this list and carry it on the walkdown.

Frequently missed isolation points and how to find them
Missed pointHow it hidesHow to find it
Second electrical feedA large machine fed from two panels, or a retrofit drive on its own circuitCount the conduits leaving the machine and follow each one
Separate control power120 V control transformer fed from a lighting or receptacle panelOpen the control cabinet and trace the incoming control conductors
Backfeed from an adjacent machineShared bus, tie conveyor, interlocked line section that can drive the roller you are working onAsk what else moves when this machine runs; test for voltage before touching
Plant air branchA drop from an overhead header with no local shut-off drawn anywhereFollow every hose and tube out of the machine to its source
Hydraulic power unit in another roomCentral HPU serving several pressesTrace the pressure and return lines; identify the unit and its isolation valve
Gravity loadNot an "energy source" anyone thinks to inventoryAsk what would move if every line were cut right now
Process feed from upstreamHot fluid, steam, product or inerting gas continuing to arrive by pipingFollow the process piping, not the electrical drawings

3 Naming the point so somebody else can find it

1910.147(c)(4)(ii)(B) requires "specific procedural steps" for isolating the machine, and step 4 of the Appendix A sequence has a blank line for "Type(s) and location(s) of energy isolating devices." Specific means someone who has never touched this machine can walk up and find the device at three in the morning.

A usable isolation-point entry has four parts:

  1. 1
    A unique identifier — DS-12, V-114, HPU-2 valve A. If the device is not labelled on the floor, label it before the procedure is finished.
  2. 2
    A physical location — "north wall of the MCC room, third disconnect from the door," not "in the electrical room."
  3. 3
    The type and magnitude it controls — 480 VAC 3-phase; 2,000 psi hydraulic supply; 110 psi plant air.
  4. 4
    The action and the device — "rotate to OFF and apply padlock through the handle hasp"; "close, then apply chain-and-clamp valve lockout."

Labelling the machine and labelling the procedure are the same job. A procedure that says "lock the main disconnect" on a machine whose disconnects are unlabelled is asking the technician to make a judgment call while standing in front of three identical grey boxes.

4 What does not count, no matter how convenient

The definition in 1910.147(b) ends by ruling out push buttons, selector switches and other control circuit type devices. Chapter 3 of Part 1 covered why. Here is the practical list of things that show up on procedures and should not:

E-stop
Interrupts a control signal, not the energy
Mode key switch
Software state, defeatable, not a mechanical break
Interlocked gate
A safety device, not an isolation device
Forced PLC output
A programmer can undo it from a laptop

Two more that are less obvious. A circuit breaker that cannot be locked in the open position is not usable as an isolation point until a lockout attachment is fitted — and per the definition of "capable of being locked out," fitting one is usually possible without dismantling or replacing the breaker, which means you are expected to do it. And a valve you can close but not lock is in the same position: chain-and-clamp and gate-valve lockouts exist precisely so that "there's no hole in it" stops being an answer.

5 One point, one lock, one person — and when that stops working

1910.147(d)(4)(i) requires lockout or tagout devices to be affixed to each energy isolating device by authorized employees, and (d)(4)(ii) requires lockout devices to be affixed in a manner that will hold the isolating device in a safe or off position. One device, one lock, applied by the person who is exposed.

A machine with six isolation points and a crew of four therefore needs a mechanism, or you get twenty-four padlocks and chaos. That mechanism is the group lockout arrangement of 1910.147(f)(3): the isolation points are locked with an operations or group lock, the keys go into a group lockbox, and each authorized employee puts a personal lock on the box when they begin work and removes it when they stop. Part 3, Chapter 4 covers the requirements in full — the point here is that the number of isolation points you found on the walkdown is what determines whether you need one.

Common mistake: designing the procedure around the hardware you happen to own. If the machine has six isolation points, the procedure lists six. Buying six more hasps is a smaller problem than a procedure that quietly drops two points because the shop only had four locks.

6 Keeping the map true

An isolation-point list starts decaying the day it is written. A drive is replaced, a conveyor is added, a valve is moved during a shutdown. The standard has two mechanisms that catch this, and both are covered later in the course.

The first is retraining: 1910.147(c)(7)(iii)(A) requires retraining whenever there is a change in machines, equipment or processes that presents a new hazard, or a change in the energy control procedures. The second is the annual periodic inspection under 1910.147(c)(6)(i), which is performed by an authorized employee other than the ones using the procedure — a fresh pair of eyes walking the machine against the paper, which is exactly the conditions under which a missing isolation point gets noticed.

In between those two, one rule of thumb carries a lot of weight: if the machine changed, the procedure changes before the next job. Not at the next audit. Whoever signs off the modification owns the procedure update, and management-of-change systems that include the LOTO procedure in the sign-off are the ones whose paperwork still matches the floor five years later.

Key takeaways
  • 1910.147(d)(3) requires all energy isolating devices needed to control the energy to be located and operated — the walkdown at the machine, not the drawing, is what finds them.
  • The usual misses: a second electrical feed, separate control power, backfeed from adjacent equipment, an unmapped air drop, a remote hydraulic power unit, gravity, and upstream process piping.
  • Each isolation point needs a unique identifier, a physical location, the type and magnitude it controls, and the action plus device used to secure it (1910.147(c)(4)(ii)(B)).
  • E-stops, mode selectors, interlocked gates and forced PLC outputs are control devices and are never isolation points (1910.147(b)).
  • A device with no hasp is usually still "capable of being locked out" — bolt-on lockouts exist, and 1910.147(c)(2)(iii) requires new and majorly modified equipment to accept a lock.
  • Every isolation point gets a device (1910.147(d)(4)(i)); when the point count exceeds what one person can manage, the group lockout arrangement of 1910.147(f)(3) is the answer.

Free educational content — not OSHA-authorized training, no certificate or card issued. Follow your employer's program and the standards cited.