Why Energy Isolation Is a Pillar of Industrial Safety

Energy isolation is the part of lockout tagout that people describe loosely and OSHA defines precisely. Ask ten maintenance supervisors what it means and you will get ten answers, most of them some version of “turning the machine off.” That is not what it means, and the gap between those two ideas is where people get hurt.

Turning a machine off is a control function. Isolating it is a physical one. This page covers what energy isolation actually is under 29 CFR 1910.147, what counts as an energy isolating device and what does not, and why the distinction decides whether a lock is doing anything at all. If you would rather your crew watched it, our LOTO training video covers the same material.

Quick Answer: What Is Energy Isolation in Safety?

Energy isolation means physically preventing hazardous energy from reaching a machine before anyone services it. OSHA 1910.147(b) calls the thing that does it an energy isolating device: a mechanical device that physically prevents the transmission or release of energy. A breaker, a disconnect, a line valve or a block qualifies. A push button does not.

What Is an Energy Isolating Device?

1910.147(b) defines it as a mechanical device that physically prevents the transmission or release of energy. The standard then lists what qualifies: a manually operated electrical circuit breaker, a disconnect switch, a manually operated switch by which the conductors of a circuit can be disconnected from all ungrounded supply conductors and where no pole can be operated independently, a line valve, a block, and any similar device used to block or isolate energy.

Then comes the sentence that decides most arguments: push buttons, selector switches and other control circuit type devices are not energy isolating devices.

I want to sit on that for a second, because it is the single most useful line in the standard. A stop button, a selector switch, an emergency stop, a light curtain, an interlocked gate: all of those act on the control circuit. They tell the machine to stop. The energy is still sitting on the other side of a closed contactor, and a contactor can weld shut, a PLC can be forced, a relay can drop back in. None of that matters if the disconnect is open and locked, and all of it matters if you trusted the E-stop.

There is a second test. 1910.147(b) also defines capable of being locked out: a device qualifies if it has a hasp or other means of attachment through which a lock can be affixed, or a locking mechanism built into it. Other devices count too, as long as lockout can be achieved without dismantling, rebuilding or replacing the device, or permanently altering its energy control capability.

That second test has teeth, because of what 1910.147(c)(2)(ii) says next. If the isolating device is capable of being locked out, you must lock it out. Tagging it instead is only available if you can demonstrate that your tagout program provides full employee protection under 1910.147(c)(3). So “we tag that one because it’s awkward” is not a position you can defend. For the hardware itself, we keep a full list of energy isolating device examples on a separate page.

Energy Isolating Device vs Lockout Device: What Is the Difference?

These get used interchangeably and they are not the same thing at all.

The energy isolating device belongs to the machine or the building. It is the breaker in the panel, the disconnect on the wall, the valve in the line, the block under the ram. It is what physically stops the energy. It was there before you arrived and it will be there after you leave.

The lockout device is yours. 1910.147(b) defines it as a device using a positive means such as a lock, key or combination type, to hold an energy isolating device in a safe position and prevent energising. Blank flanges and bolted slip blinds are included in that definition, which surprises people, and it makes sense once you see that a bolted blind holds the line in a safe state as positively as a padlock holds a breaker.

The tagout device is the third thing, and it is the answer to a question I get constantly: what is the warning device usually attached to an energy isolating device? That is a tagout device. 1910.147(b) calls it a prominent warning device, a tag and a means of attachment, securely fastened to an energy isolating device to indicate it may not be operated until the tag is removed. It carries no physical restraint whatsoever.

So the sequence is: the isolating device does the isolating, the lockout device holds it there, and the tagout device tells people why. Lose track of which is which and you end up with a crew that has locked a stop button and thinks it is protected.

Why Is Energy Isolation Important?

The purpose is narrow and it is worth being exact about, because 1910.147(c)(1) states it: before any employee performs servicing or maintenance where unexpected energising, start up, or release of stored energy could occur and cause injury, the machine has to be isolated from the energy source and rendered inoperative.

Isolated and rendered inoperative. Both. That is the whole standard in one clause.

OSHA puts a figure on what that buys you. In its Lockout/Tagout fact sheet, DEP FS-3529, the agency estimates compliance with the standard prevents roughly 120 fatalities and 50,000 injuries each year, and that workers hurt by exposure to hazardous energy lose an average of 24 workdays recuperating.

What I would add from the field is that the injuries in this category are unusually severe. There is no minor version of a press cycling with a hand inside it. The energy that runs production machinery is sized to move steel, and when it is released into a person the outcome is amputation, crushing, or worse. That is why the rule demands a physical barrier rather than a procedural one. A procedure can be misread. A locked disconnect cannot pass current.

How Does Energy Isolation Fit Into the Lockout Tagout Procedure?

1910.147(d) requires the procedure to cover six elements, and it says they have to be done in sequence. Isolation is the third of the six.

1. Preparation for shutdown, per 1910.147(d)(1)
2. Machine or equipment shutdown, per (d)(2)
3. Machine or equipment isolation, per (d)(3)
4. Lockout or tagout device application, per (d)(4)
5. Stored energy relief, per (d)(5)
6. Verification of isolation, per (d)(6)

You will find sources online giving four steps, five, seven, eight and ten. The standard gives six, and it is worth using OSHA’s own count so your procedure and your training agree with the document a compliance officer will be holding. We walk each one in full on our guide to the six steps of a lockout tagout procedure.

Isolation sits at step three for a reason. It comes after shutdown, because operating an isolating device on a running machine can create its own hazard, and 1910.147(d)(2) specifically requires an orderly shutdown to avoid increasing the risk. And it comes before the locks go on, because you cannot lock a device that is not yet in the safe position. Step four holds step three in place.

One more thing about step six. In the field this gets called the try-out, and you will hear the whole procedure called LOTOTO, for lock out, tag out, try out. 1910.147(d)(6) requires the authorized employee to verify that isolation and de-energisation have actually been accomplished before starting work. Pressing the start button with the guard closed, checking with a meter, cracking a bleed valve: whatever proves it for that energy source.

What Are the Potentially Hazardous Energy Sources?

1910.147(b) defines an energy source as any source of electrical, mechanical, hydraulic, pneumatic, chemical, thermal, or other energy. Six named categories plus a catch-all. Here is what each one looks like when you are standing in front of it.

• Electrical. Line and control power, plus anything still holding charge after the disconnect opens: capacitors, drives, battery backups, UPS units. On variable frequency drives you have to wait out the DC bus discharge, and the wait is on the nameplate.
• Mechanical. Rotating and reciprocating parts, flywheels still coasting, springs under compression or tension, belts and chains under load. A flywheel can turn for a long time after the motor is dead.
• Hydraulic. Pressurised oil or water in cylinders, lines and accumulators. Accumulators are the ones that catch people, because they hold full pressure long after the pump is off and the gauge at the panel reads zero.
• Pneumatic. Compressed air and gas in receivers, cylinders and lines. Easy to forget because it is quiet and invisible, and quite capable of driving a cylinder through a hand.
• Chemical. Product in a vessel or line that can burn, react, or displace the air you are breathing.
• Thermal. Steam, hot surfaces, hot product, and cryogenics. Cold counts as thermal energy.
• Other, which in practice means gravity. Raised rams, blades, platens, tailgates, elevated beds, suspended loads. This is the one with no entry of its own in the standard and the one I have seen kill people, because the answer is almost never a padlock. It is a block or a pin.

A machine rarely has one. A press has electrical, hydraulic, pneumatic and gravity all at once, and each needs its own isolation point identified before anyone starts. That is what 1910.147(d)(1) means when it says the authorized employee must have knowledge of the type and magnitude of the energy before turning anything off.

When Should Hazardous Energy Be Isolated?

Whenever an employee is servicing or maintaining a machine and unexpected energising, start up, or release of stored energy could injure someone. 1910.147(a)(2)(i) sets the scope that way, and 1910.147(b) defines servicing and/or maintenance broadly: constructing, installing, setting up, adjusting, inspecting, modifying, maintaining, and servicing, and it names lubrication, cleaning and unjamming specifically.

Unjamming. Worth pausing on, because clearing a jam is the single most common moment this rule gets skipped. It takes ten seconds, the machine is right there, and reaching in feels like nothing. It is squarely inside the standard.

Now the boundary. 1910.147(a)(2)(ii) says normal production operations are not covered, and servicing during normal production is only covered if the employee has to remove or bypass a guard or other safety device, or has to put part of their body into the point of operation or an associated danger zone during the operating cycle.

There is then an exception to the exception. Minor tool changes and adjustments, and other minor servicing activities during normal production, are outside the standard if they are routine, repetitive and integral to the use of the equipment for production, and the work is done using alternative measures that provide effective protection. All of those conditions, not some.

In practice this is where I see the most honest confusion, and my advice is unglamorous: if you are arguing about whether a task is minor and routine, lock it out. The argument takes longer than the lock.

Two more exclusions worth knowing. Cord and plug connected equipment is outside the standard when unplugging controls the hazard and the plug stays under the exclusive control of the person doing the work, per 1910.147(a)(2)(iii)(A). And hot tap operations on pressurised pipelines are excluded under (a)(2)(iii)(B) where continuity of service is essential, shutdown is impractical, and documented procedures with proven protective equipment are followed.

Beyond servicing, isolation also comes into play alongside other permitted work. Hot work, confined space entry, line breaking and equipment relocation all commonly require an energy isolation step as part of the permit, and if you are running multiple shifts on one job, 1910.147(f)(4) requires specific procedures for the orderly transfer of lockout or tagout protection between the off-going and oncoming employees. In plain terms, the outgoing shift’s locks stay on until the incoming shift’s locks are on. There is never a moment where the isolation point is unlocked.

What If You Have to Re-Energise for Testing?

This comes up on almost every real job. You need the machine to move to check your work. 1910.147(f)(1) gives an exact sequence for temporarily removing the devices, and it is not “just pop the lock off for a second”:

1. Clear the machine of tools and materials, per 1910.147(f)(1)(i)
2. Remove employees from the machine area, per (f)(1)(ii)
3. Remove the lockout or tagout devices, per (f)(1)(iii)
4. Energise and proceed with testing or positioning, per (f)(1)(iv)
5. De-energise all systems and reapply the full energy control measures under paragraph (d) before continuing the work, per (f)(1)(v)

That last step is the one people short-cut. You do not resume from where you left off. You go back through the six elements of 1910.147(d) again.

Releasing for good is governed by 1910.147(e). Before the devices come off and energy is restored: inspect the work area to confirm nonessential items are removed and components are operationally intact, per (e)(1); check that all employees are safely positioned or removed, per (e)(2)(i); and notify affected employees that the devices have been removed before the machine is started, per (e)(2)(ii).

And 1910.147(e)(3) is the rule everyone knows and some people bend: each device is removed by the employee who applied it. There is an exception, and it is narrow. If that employee is not available, the device may be removed under the direction of the employer only where specific procedures and training have been developed, documented and built into the energy control program, and the employer can demonstrate equivalent safety. The procedure has to include verifying the employee is not at the facility, making all reasonable efforts to contact them to tell them their device was removed, and ensuring they know before they resume work there.

If your plant has a bolt cutter hanging next to the lock station and no written procedure for using it, that exception is not available to you.

Who Is Authorized to Perform Lockout Tagout Procedures?

1910.147(c)(8) is blunt about it: lockout or tagout shall be performed only by the authorized employees who are performing the servicing or maintenance. Not a supervisor on their behalf, not the operator as a favour. The person whose hands are going in is the person who hangs the lock.

1910.147(b) defines an authorized employee as a person who locks out or tags out machines or equipment in order to perform servicing or maintenance on them, and it adds a detail people miss: an affected employee becomes an authorized employee when their duties include performing that servicing or maintenance. The roles are not job titles. They follow the task.

An affected employee is defined more narrowly than most people assume. It is an employee whose job requires them to operate or use the machine being serviced, or whose job requires them to work in the area where the servicing is being performed. That is the operator and the people working nearby, not simply everyone untrained.

There is a third group, and it matters for training. 1910.147(c)(7)(i)(C) covers all other employees whose work operations are or may be in an area where energy control procedures may be used. They get instructed about the procedure and about the prohibition on attempting to restart or re-energise anything locked or tagged out.

And whoever applies the locks, 1910.147(c)(9) requires affected employees to be notified by the employer or the authorized employee both before the devices are applied and after they are removed. Two notifications, not one. Retraining is triggered, not scheduled, under 1910.147(c)(7)(iii)(A).

Energy Isolation and Lock Out Tag Out: Final Thoughts

If you take one thing from this page, take the sentence from 1910.147(b): an energy isolating device is a mechanical device that physically prevents the transmission or release of energy. Everything else follows from it. The reason push buttons are excluded, the reason a tag is weaker than a lock, the reason a block belongs in a LOTO kit alongside padlocks, the reason step three of the procedure comes before step four.

The programs I have audited that get this right share one habit. Their machine-specific procedures name the isolating device, by location, for every energy source on that machine. Not “de-energise the press.” Panel P-4, breaker 12. Air valve on the north wall. Hydraulic accumulator bleed at the pump skid. Once that list exists, the rest of the standard mostly takes care of itself, and a new hire can be walked through it in ten minutes.

Get the isolation points written down, get devices that fit them, and make sure the person whose hands are in the machine is the one holding the key. If you need material to train on it, our Lockout Tagout PowerPoint runs in about fifteen minutes, and there are free lockout tagout training videos if you want to see isolation done on real equipment first.

Frequently Asked Questions About Energy Isolation: