Machine-specific procedures, placards, inspections and audits

A lockout program lives or dies by its procedures. When a millwright arrives at an unfamiliar machine at three in the morning, the procedure posted beside it is what tells them where every isolation point is, what device to use, how to release the stored energy and how to verify. If the procedure is missing, out of date or vague, the worker is left to guess. This lesson covers how good machine-specific procedures are written and maintained, how placards and labels support them, and how periodic inspections and audits keep the whole system honest.

What a machine-specific procedure contains

Formats vary, but good procedures share a common structure:

• a header with the machine name and unique identifier, location, procedure number, revision number and date, author and approver;
• the scope: which tasks the procedure covers, and any tasks that need a different procedure or an approved alternative method;
• an energy source table listing each source with its identifier, type, magnitude, location, isolating device, lockout device, stored energy control and verification method;
• the shutdown, isolation, lockout, stored energy and verification steps in order;
• the release and restart steps, including the order in which energy is restored;
• photographs or diagrams showing each isolation point, with the identifier visible on a label;
• special notes: hazards such as hot surfaces or chemicals, other permits required, group lockout arrangements and contacts.

Writing a procedure

Procedures are best written by a small team that includes an authorized person who works on the machine, an operator, and someone who knows the program requirements. A typical process:

• gather manuals, drawings and existing procedures;
• walk down the machine, tracing every energy source to its isolating device and noting stored energy;
• label each isolation point with its identifier if it is not already labelled;
• take photographs of each isolation point, showing the device and label;
• draft the procedure in plain language, using short numbered steps;
• field-test it: have an authorized person who did not write it perform the lockout from the draft alone, while the team watches for gaps or confusing steps;
• correct the draft, get it approved and post it;
• add it to the procedure register with a review date.

Plain language matters. Steps such as 'Isolate all sources' tell an experienced person nothing they did not know and tell a new person nothing they can use. 'Turn disconnect DS-14 on the east wall to OFF and apply lock' is clear.

Placards and labels

Many workplaces post a one-page placard at each machine, with photographs and the energy table, so the procedure is available at the point of use. Each isolating device should carry a durable label with its identifier and what it isolates, such as 'DS-14: Press 3 main power'. Labels and placards must match: if the procedure says V-22, the valve must say V-22. Mismatched or missing labels are a common inspection finding and a common cause of the wrong device being isolated.

Keeping procedures current

Equipment changes: a new air cylinder is added, a disconnect is moved, a heater is installed with its own supply. Each change can make the procedure wrong. Good programs link procedure review to management of change, so that any modification to equipment or energy sources triggers a review before the equipment returns to service. Procedures are also reviewed when an incident or near miss reveals a problem, when workers report a mismatch, and on a fixed schedule.

Periodic inspections

CSA Z460 calls for periodic review of the hazardous energy control program and procedures, including observation of authorized persons performing lockout, to confirm that procedures are accurate and followed. Quebec requires written procedures to be reviewed periodically, and other provinces expect employers to show that their procedures are maintained. Many Canadian employers adopt an annual inspection of each procedure as good practice.

A good periodic inspection is more than a paperwork check. The inspector watches an authorized person perform the lockout on the actual equipment, compares what they do with the written procedure, checks that the procedure still matches the equipment, and talks with the worker about their responsibilities. Findings are recorded and corrected.

Audits of the program

Beyond inspecting individual procedures, the program as a whole should be audited, often annually, by someone independent of day-to-day lockout. An audit checks whether the program document is current, whether every machine that needs a procedure has one, whether training records are complete, whether periodic inspections were done and their findings closed, whether lock removal logs show problems, whether contractors were managed properly, and whether workers at all levels understand the rules. Audit checklists produce a score that can be tracked over time, but the most useful output is a list of specific improvements.

Using findings to improve

Inspections and audits are only useful if their findings lead to changes. Typical improvements include rewriting unclear steps, adding missing photographs, relabelling isolating devices, adding lockout stations, buying the right devices, retraining individuals or groups, redesigning equipment to make isolation easier, and engineering out frequent exposures. Sharing results with workers and the health and safety committee builds trust and shows that reports of problems lead to action.

Procedures for similar machines

Large sites may have dozens of identical machines. It can be efficient to write one procedure covering a group of machines with the same type and magnitude of energy, the same isolating devices in the same relative locations and the same stored energy controls. The risk is that the machines drift apart over time through modifications. A group procedure must list each machine it covers, and each machine must still be labelled and checked. When one machine in the group is modified, the procedure must be updated or that machine given its own procedure.

Electronic procedures and records

Many organizations now keep procedures, inspection records and training records in electronic systems, sometimes with tablets or QR codes at each machine that link to the current procedure and photographs. These systems make it easier to control revisions, schedule inspections and analyse trends. They also create new risks: a worker without connectivity cannot see the procedure, and an electronic version may differ from an old paper placard left on the machine. Programs using electronic procedures should keep a reliable posted copy at the point of use and remove outdated paper versions whenever a procedure is revised.

The annual review of the program

Once a year, many employers review the whole program with management and the health and safety committee. The review looks at inspection and audit findings, incidents and near misses, leading indicators, changes to regulations and standards (such as new editions of consensus standards), changes in equipment and staffing, and feedback from workers. It ends with a short action plan with owners and dates. This closes the loop shown in lesson 4: the program is not a binder on a shelf but a system that learns.

Learning from other sites

Organizations with several sites can share procedures, inspection findings and incident lessons between them. A failed verification at one plant often reveals a weakness that exists on similar equipment elsewhere. Regular sharing, through safety bulletins, cross-site audits or a central procedure library, spreads improvements quickly and prevents each site from having to discover the same problem the hard way.

Finally, keep procedures readable. A procedure that runs to many pages will not be read at three in the morning. Put the essential steps and photographs on the placard, and keep background information, such as the risk assessment for an alternative method, in the full procedure file.