Machine-Specific LOTO Procedures: What OSHA Requires in Writing

OSHA requires a written, machine-specific lockout tagout procedure for every piece of equipment in your facility that can release hazardous energy during servicing or maintenance. The rule is in 29 CFR 1910.147(c)(4), and it is the single biggest source of LOTO citations year after year. Generic, facility-wide procedures do not satisfy the standard. Each machine needs its own document that tells an authorized employee exactly how to shut it down, isolate its energy sources, verify zero energy, and restore it safely.

In FY 2025, 1910.147 was the fourth most cited OSHA standard with 2,177 citations, and the majority of those came from missing, generic, or outdated written procedures. A machine-specific procedure is not a suggestion. It is the legal foundation of your energy control program, and inspectors will ask for it first.

Why Written Machine-Specific Procedures Are Required

Under 29 CFR 1910.147(c)(4)(i), employers must develop, document, and utilize procedures for the control of potentially hazardous energy. The key word is "procedures," plural. OSHA does not allow one master document that tries to cover every machine in the plant. The agency expects procedures that are specific enough to direct an authorized employee through the exact steps for the exact equipment in front of them.

This matters because LOTO failures almost always come from uncertainty. A maintenance tech who does not know which disconnect controls a specific press, or whether a hydraulic accumulator holds residual pressure, is the tech who gets hurt. A clear, machine-specific procedure eliminates that guesswork.

OSHA states the rationale plainly in the preamble to the standard: "the development of procedures based on the specific machine or equipment is the only way to ensure that employees can safely service and maintain the equipment." Inspectors treat generic procedures as no procedure at all.

The Six Elements Every Written Procedure Must Contain

29 CFR 1910.147(c)(4)(ii) lists the minimum content requirements for every written procedure. A procedure that is missing any of these elements is a citable deficiency, even if the machine happens to be locked out correctly in practice.

• A specific statement of the intended use of the procedure. Identify the machine or equipment by name, asset number, and location. A procedure that says "all presses" does not qualify.
• Specific procedural steps for shutting down, isolating, blocking, and securing the machine. This includes the exact sequence of operations, disconnects to open, valves to close, and blocks or pins to install.
• Specific procedural steps for placing, removing, and transferring lockout or tagout devices. Identify who has authority to place the lock, where it goes, and what tag language is required.
• Specific requirements for testing the machine to verify the effectiveness of the energy control. The zero-energy verification step. This typically means attempting to start the machine after isolation and testing circuits with a voltmeter.
• Identification of all energy sources. Electrical, hydraulic, pneumatic, mechanical, thermal, chemical, and gravitational. Most citations in this category come from missing a secondary energy source like stored pneumatic pressure or gravity loads.
• Identification of the magnitude and type of energy that the machine utilizes. Voltage, pressure, temperature, and any stored or residual energy that must be dissipated or restrained.

These six elements are the skeleton of a compliant procedure. Most citations happen because one or two are missing, buried in a generic binder, or written in language too vague to follow.

When Can You Skip a Written Procedure?

The standard does allow a narrow exception in 29 CFR 1910.147(c)(4)(i). You are not required to document the procedure if every one of the following eight conditions is met:

1. The machine has no potential for stored or residual energy or reaccumulation of stored energy after shutdown.
2. The machine has a single energy source that can be readily identified and isolated.
3. Isolation and lockout of that single source will completely deenergize and deactivate the machine.
4. The machine is isolated from that energy source and locked out during servicing or maintenance.
5. A single lockout device will achieve a locked-out condition.
6. The lockout device is under the exclusive control of the authorized employee performing the servicing or maintenance.
7. The servicing or maintenance does not create hazards for other employees.
8. The employer has had no accidents involving the unexpected activation or reenergization of that type of machine during servicing or maintenance.

In practice, this exception almost never applies in modern manufacturing. Any machine with pneumatics, hydraulics, gravity loads, residual heat, or capacitors fails condition one. Multi-energy robotics and automated cells fail conditions two and three. Most EHS managers who think they qualify for the exception are wrong, and OSHA inspectors assume a written procedure is required unless the employer can prove all eight conditions are met.

How OSHA Inspectors Evaluate Your Procedures

During a LOTO inspection, the compliance officer will pull a sample of machines from your equipment list and ask for the written procedure for each. They compare the document to the machine in the field. If the procedure references a disconnect that does not exist, names a valve that has been replaced, or lists energy sources that do not match the actual configuration, that is a citation.

Inspectors also interview authorized employees and ask them to walk through the procedure. If the procedure is accurate but the employee cannot locate it or explain it, that is a training deficiency under 1910.147(c)(7). If the procedure itself is wrong, that is a documentation deficiency under 1910.147(c)(4). Facilities often get cited for both on the same machine.

The most damaging findings come from procedures that were correct when written but were never updated after equipment changes. A press that was retrofitted with new controls, a conveyor that had a second disconnect added, or a robot cell that expanded to include a cobot — any of these changes invalidate the original procedure. OSHA expects the procedure to reflect the current state of the equipment.

Common Documentation Failures That Trigger Citations

Based on OSHA enforcement data from recent inspections, the patterns repeat across industries. These are the written-procedure failures inspectors find most often:

• No written procedure exists for the machine at all, only a generic facility template.
• Procedure lists electrical isolation but misses hydraulic accumulators, pneumatic lines, or gravity loads.
• Procedure was written for the original equipment but was never updated after modifications.
• Zero-energy verification step is missing or vague ("verify power is off" without specifying how).
• Procedure references disconnects or valves that no longer exist or have been relocated.
• Procedure is stored in a binder nobody can find, or in a shared drive authorized employees cannot access at the machine.
• No periodic inspection has been documented, so there is no evidence the procedure is actually being followed.

The cost of these failures is high. Serious LOTO citations carry a maximum penalty of $16,550 per violation as of January 2025, and willful or repeated violations can reach $165,514. Most inspections that cite 1910.147(c)(4) also cite related training and inspection failures, multiplying the total penalty exposure.

Building a Defensible Procedure Library

The fix is not complicated, but it is labor-intensive if you start from scratch. Every machine in your facility needs a walk-down, an energy source inventory, and a procedure written in language your authorized employees can actually follow at the point of use. The procedure should live on the machine itself, typically as a durable placard, so it is available when the tech needs it rather than buried in a binder.

For facilities with dozens or hundreds of machines, building this library internally can take months of maintenance and EHS time that is already stretched thin. That is where outside help often pays for itself: a structured LOTO gap analysis identifies every missing or deficient procedure, and a custom placard program turns those procedures into field-ready documents mounted at each piece of equipment. An annual audit then keeps the library current as equipment changes.

Machine-specific written procedures are the foundation of every other part of your LOTO program. Training, periodic inspections, group lockout, and contractor coordination all depend on having accurate, current procedures in place. If the foundation is weak, the rest of the program is too.