Here's the striking thing about lockout/tagout, one of OSHA's most-cited standards year after year: almost none of the citations are equipment failures. They're procedural and documentation gaps — the kind visible the moment an inspector asks to see your written procedures. The failures cluster in three predictable places: no machine-specific procedures, skipped or undocumented annual inspections, and incomplete training records. And this doesn't happen because plants don't care about hazardous energy; it happens because maintaining a machine-specific procedure for every piece of equipment, an annual inspection of each one, and role-specific training records — all kept current as equipment changes — is a load a binder simply can't carry. Digital LOTO management makes the program provable by construction: photo-illustrated machine-specific procedures, the annual inspection scheduled and certified per machine, and authorized-worker training tied to the procedures. You can book a demo to see it on your equipment.
The LOTO Citations Aren't Equipment Failures — They're Missing Paperwork
Build machine-specific energy-control procedures with photos and steps, schedule and certify the annual inspection for every machine, and track authorized-worker training — so the documentation gaps that get plants cited under 1910.147 simply don't open.
The Standard Is Cited on Documentation, Not on Accidents
Lockout/tagout sits near the top of OSHA's most-cited list for a specific reason: its requirements are almost entirely about documentation and program discipline, and those are the easiest things for an inspector to check and the hardest for a paper-based program to keep current. An inspector doesn't have to witness an incident — they just ask for the written procedures. These are the gaps that draw the citations.
One generic facility-wide procedure doesn't satisfy 1910.147(c)(4) — the standard requires a written procedure specific to each machine. A plant with dozens of machines and one generic document is out of compliance the moment the procedures are requested.
The annual periodic inspection is one of the most commonly cited subsections, because employers either skip it entirely or fail to document it properly. An inspection that happened but wasn't certified is, to OSHA, an inspection that didn't happen.
Training deficiencies are among the most common citations — employees not trained on the procedures, training outdated after a change, or records that can't prove who was trained on what. The training may have occurred; without the record, it's a finding.
Equipment changes, procedures get outdated, and a program written once slowly diverges from the machines on the floor. A binder has no way to flag that a procedure no longer matches its machine — so the gap sits until an inspector or an incident finds it.
Every Machine Needs Its Own Procedure — With Every Energy Source
The core of 1910.147 is that a procedure has to be specific to the machine it protects, because hazardous energy isn't just the electrical disconnect everyone thinks of. It's mechanical, hydraulic, pneumatic, chemical, thermal, and stored energy — the spring, the capacitor, the elevated part, the pressurized line — and missing one source is what gets a worker hurt. A real machine-specific procedure accounts for all of them. This is what one has to contain.
The procedure lists each energy source on that specific machine — electrical, hydraulic, pneumatic, thermal, and the stored energy in springs, capacitors, and elevated parts — with the specific isolating device for each. The stored and secondary sources are the ones a generic procedure misses and a person on the floor forgets.
Prepare, shut down, isolate, apply lockout, verify zero energy, and only then perform work — the required sequence, but written for this machine with the actual devices and steps, so it's an executable procedure rather than a restatement of the generic six steps.
Each isolation point shown with a photo of the actual disconnect, valve, or bleed on that machine — so an authorized employee, especially one less familiar with the equipment, isolates the right device the right way instead of interpreting a text description under time pressure.
The step operators most often shortcut: confirming the machine is actually de-energized before work begins, by the specific verification method for that machine. The procedure makes verification an explicit, non-skippable step rather than an assumption.
Give Every Machine a Procedure That Matches It
iFactory builds photo-illustrated, machine-specific energy-control procedures that capture every energy source and the real 6-step sequence — so the generic-procedure citation can't happen and the person on the floor isolates the right device.
Every Procedure Needs a Documented Inspection Every Year
The periodic inspection under 1910.147(c)(6) is one of the most-cited subsections precisely because it's easy to let slide — it has to happen for every procedure, every year, and be certified with specific details. Managed on paper across dozens of machines, individual procedures quietly go a year or more without review. A system that schedules and certifies each one closes the gap that gets plants cited.
The inspection is per energy-control procedure, not once for the plant — so every machine's procedure needs its own annual review. Scheduling each as a recurring task with reminders is what keeps individual procedures from silently lapsing.
The inspection must be conducted by an authorized employee other than the one using the procedure being inspected — an independence requirement plants routinely get wrong. The system assigns and records the right inspector so the independence is provable.
The inspection includes a review between the inspector and each authorized employee of their responsibilities under that procedure — and for tagout, each affected employee too. It's where knowledge gaps surface, and it has to be captured, not just conducted.
The certification must identify the machine, the date, the employees included, and the person who performed the inspection. An inspection without that specific certification is, to an inspector, undocumented — the system captures all four every time.
Authorized, Affected, and Other — Tracked to the Machine
Training under 1910.147 isn't one class everyone takes; it's three distinct roles with different content requirements, and it has to be machine-specific and based on your actual procedures. Proving the right people had the right training on the right equipment is exactly where paper records fall short. This is the training the system tracks.
The people who apply and remove locks and perform the energy control — trained on the full procedure for each machine they work on. The system tracks which authorized employees are qualified on which equipment, so a task only goes to someone actually trained for it.
Those who operate machines that get locked out — trained on the purpose and use of the procedures and, critically, never to restart a locked-out machine. Their training is a distinct, lighter requirement that still has to be documented and current.
Everyone else who works in an area where LOTO is used — trained to recognize the procedures and stay clear. Easy to overlook, and a real citation category, so the system captures this tier too rather than letting it fall through.
Retraining is required when a job changes, a machine or process changes, a procedure is updated, or an inspection reveals a gap — not on a fixed annual clock. The system flags retraining against those actual triggers, so it happens when the standard requires, not by guesswork.
The Program Has to Stay Current as the Plant Changes
The deepest failure of paper LOTO is that it's static while the plant is not. Equipment is added, modified, and retired; procedures need updates; people change roles. A program that can't keep pace drifts out of compliance silently. What a digital system adds is the connective tissue that keeps every piece in sync as things change.
Each procedure is linked to its machine, so when equipment is modified the procedure that needs updating is obvious rather than buried — and a machine without a current procedure stands out instead of hiding in a binder.
When a procedure is updated, the authorized and affected employees who need retraining on it are flagged automatically — closing the loop between a procedure change and the training that OSHA requires to follow it.
Multi-worker servicing needs group lockout with each person's own lock, and work spanning shifts needs orderly handover of energy control. The system supports these higher-risk scenarios that a paper tag board handles poorly.
Procedures, inspections, training, and devices live in one place, so the written energy-control program the standard requires is a coherent, current whole — not a set of separate documents that have quietly drifted apart.
Procedures, Inspections, and Training in One Provable System
iFactory runs the full lockout/tagout program digitally: photo-illustrated machine-specific procedures, the annual inspection scheduled and certified per machine, role-based training tracked to the equipment, and the whole thing kept current as the plant changes — so 1910.147 compliance is a state you're in, not a binder you hope is up to date.
What Safety and Maintenance Teams Ask About LOTO Software
Close the Documentation Gaps Before an Inspector Finds Them
iFactory manages machine-specific LOTO procedures with photos, the certified annual inspection for every machine, and role-based authorized-worker training in one living system — so the procedural gaps that make 1910.147 a top-cited standard simply don't open at your plant.
