Lockout/Tagout (LOTO), Oil & Gas Glossary

What Is Lockout/Tagout?

Lockout/tagout (LOTO) is a mandatory safety procedure used at oil and gas facilities, drilling operations, and processing plants to ensure that hazardous energy sources — electrical, hydraulic, pneumatic, mechanical, thermal, and stored gravitational energy — are completely isolated and de-energised before maintenance or servicing work begins, using physical locks to prevent re-energisation and warning tags when locks cannot be applied, protecting workers from unexpected start-up, release of stored energy, or movement of equipment that could cause serious injury or death.

Key Takeaways

LOTO protects against six categories of hazardous energy: electrical (motors, transformers, switchgear), hydraulic (accumulator systems, hydraulic actuators), pneumatic (compressed air, gas-pressurised systems), mechanical (rotating equipment, springs under compression), thermal (steam systems, hot fluid lines), and stored/potential (elevated components, gravity-loaded equipment).
The LOTO sequence is: notify affected employees; identify all energy sources; shut down the equipment; isolate all energy sources (close valves, open breakers, block stored energy); apply lockout devices and personal locks; release or restrain stored energy (bleed pressure, drain lines, block elevated components); verify zero energy state before work begins.
Group lockout applies when multiple workers perform maintenance simultaneously — each worker applies their own personal lock to a hasped lockout point, so the equipment cannot be re-energised until every worker's lock has been removed, ensuring no single individual can inadvertently restart equipment while another worker is still inside.
OSHA 29 CFR 1910.147 (Control of Hazardous Energy) is the primary US standard; in Canada, provincial OHS codes govern LOTO — Alberta OHS Code Part 15 (Hazardous Energy Control), with equivalent requirements in BC, Saskatchewan, and Ontario. Norway references NORSOK S-001 and the Working Environment Act; Australia's Work Health and Safety regulations and NOPSEMA offshore petroleum safety requirements align with AS 4024 series standards.
LOTO programme failures — including inadequate energy isolation, group lockout bypass, and failure to verify zero energy — are consistently among the top causes of serious injury and fatality in oil and gas maintenance operations; IOGP Life-Saving Rule #7 specifically covers bypassing safety controls.

How Lockout/Tagout Works

A LOTO procedure begins with a written energy control procedure specific to each piece of equipment at the facility. The procedure identifies every energy source — every valve that must be closed, every circuit breaker that must be opened, every accumulator that must be bled, every spring that must be restrained — and specifies the isolation point, the type of lockout device required, and the verification method. The procedure is written by a competent person and reviewed by HSE and operations before being approved for use.

When maintenance work is required, the authorised employee follows the procedure: notifies the operating crew, shuts down the equipment through normal stopping procedures, isolates each energy source using lockout hasps and personal padlocks, releases stored energy by bleeding pneumatic systems, draining pressurised lines, blocking elevated components, and discharging capacitors in electrical systems. Before entering or touching the equipment, the worker verifies zero energy state by attempting to start the equipment, testing for voltage, and checking that pressure gauges read zero. Only after verification is the work performed. When work is complete, the equipment is reassembled, personnel are cleared, and each worker removes their own personal lock — in the reverse order of application.

LOTO Requirements Across International Jurisdictions

In Canada, Alberta's OHS Code Part 15 (Hazardous Energy Control) requires written energy control procedures, training for all affected employees, and annual program audits for all workplaces where workers are exposed to hazardous energy during maintenance. The AER does not specifically regulate LOTO procedures but enforces compliance with provincial OHS requirements through its site inspection programme; non-compliance findings at WCSB gas plants, oil sands facilities, and pipeline valve stations are recorded in AER inspection records. Major oil sands operators including Suncor, Cenovus, and Canadian Natural Resources operate site-specific LOTO programmes that exceed the OHS Code minimum, including positive isolation (double block-and-bleed valve isolation verified by pressure testing) for all work involving hydrocarbon-containing lines.

In the United States, OSHA 29 CFR 1910.147 requires written energy control procedures, annual program audits, and retraining whenever deficiencies are identified. OSHA's petroleum refining and natural gas processing standards (29 CFR 1910.119, Process Safety Management) reference LOTO as a required safe work practice for process equipment maintenance at PSM-covered facilities. In Norway, the Norwegian Working Environment Act and NORSOK S-001 (Technical Safety) require energy isolation procedures for all maintenance activities on the Norwegian Continental Shelf; Sodir's offshore safety regulations mandate that operators' Safety Management Systems include documented energy isolation procedures verified through the AoC process. In Australia, the Work Health and Safety Act 2011 and associated regulations require energy isolation procedures at all workplaces; NOPSEMA's offshore petroleum safety inspections verify that operators' Safety Cases include energy isolation procedures for critical equipment maintenance. In the Middle East, Saudi Aramco's General Instruction GI-0002.101 (Lockout/Tagout) specifies positive isolation requirements, group lockout procedures, and energy verification requirements for all maintenance activities at Aramco onshore and offshore facilities; ADNOC's HSE management system aligns with International Association of Oil and Gas Producers (IOGP) safe work practice guidelines including IOGP Report 459 on permit to work and energy isolation.

Fast Facts

OSHA estimates that proper lockout/tagout procedures prevent approximately 120 fatalities and 50,000 injuries per year in US workplaces — and that 10% of serious industrial accidents involve failure to control hazardous energy. In the oil and gas industry, where pressurised hydrocarbons, high-voltage electrical systems, rotating machinery, and elevated components are all present simultaneously at the same worksite, the combination of energy sources makes LOTO one of the most complex and highest-consequence safe work practices to execute correctly.

Positive Isolation vs. Lockout

Standard LOTO valve closure may be insufficient for maintenance on hydrocarbon-containing lines where valve failure could expose workers to toxic or flammable fluids. Positive isolation goes further by requiring physical disconnection of the line (spool removal, blind flanging, or double block-and-bleed with a vent between the two isolation valves) verified by a pressure test confirming zero pressure on the work side. At sour gas facilities in Alberta and on offshore platforms in the North Sea and Middle East, positive isolation is mandatory for any work on H2S-containing process lines, regardless of the duration of the task. The distinction between standard LOTO (valve closed and locked) and positive isolation (physically disconnected and verified) is critical — a closed valve with a leaking seat under pressure represents a residual hazard that standard LOTO does not adequately control for confined space entry or hot work near hydrocarbon lines.

Tip: The most dangerous LOTO failures occur not during initial isolation but during the restoration phase — when equipment is being re-energised and not all workers have confirmed they are clear. Enforce a physical count-out procedure: before any lock is removed to restore energy, the authorised employee physically accounts for every person who applied a personal lock, confirms they are outside the hazard zone, and documents the count. This is especially important in shift-change situations where the maintenance crew that started the work hands off to a different crew for completion.

Lockout/tagout is also known as:

LOTO — the universal abbreviation used in safety documentation, training materials, and regulatory citations in North America, Australia, and the Middle East
Energy isolation — the broader term used in European, Norwegian (NORSOK), and UK HSE safety documentation; covers the same concept as LOTO
Hazardous energy control — the regulatory term used in Alberta OHS Code Part 15 and equivalent Canadian provincial codes; encompasses LOTO plus additional positive isolation requirements
Positive isolation — the enhanced form of energy isolation requiring physical disconnection and pressure verification, required for hydrocarbon-containing lines and H2S environments

Frequently Asked Questions

What is lockout/tagout in oil and gas?

Lockout/tagout (LOTO) is the procedure for isolating all hazardous energy sources before any maintenance, inspection, or servicing work on oil and gas equipment. It requires closing valves and opening electrical breakers to isolate energy, applying physical locks to prevent re-energisation, releasing stored energy, and verifying zero energy state before work begins. LOTO is mandatory under OSHA 29 CFR 1910.147 in the US, provincial OHS codes in Canada, and equivalent regulations in Norway, Australia, and the Middle East.

What is the difference between lockout and tagout?

Lockout uses a physical padlock to prevent an energy isolation device from being returned to the energised position — it is the preferred method when the isolation point can accept a lock. Tagout uses a warning tag attached to an isolation point that cannot accept a lock, indicating the device must not be re-energised. Tags provide a warning but not a physical barrier; tagout alone is permitted only where the equipment's design makes lockout physically impossible, and it requires additional protective measures to compensate for the lower level of protection.

What is group lockout?

Group lockout is used when multiple workers perform maintenance simultaneously on the same piece of equipment. Each worker applies their own personal lock to a hasp at the energy isolation point. The equipment cannot be re-energised until every worker has removed their personal lock, preventing any single person from inadvertently restoring energy while others are still working inside. Group lockout is required whenever more than one person is involved in a maintenance task and is the standard procedure at multi-crew maintenance operations at oil sands facilities, refineries, and offshore platforms.

Why Lockout/Tagout Matters in Oil and Gas

Maintenance workers in oil and gas routinely work inside equipment — in pressure vessels, on pumps and compressors, inside electrical switchgear, beneath elevated components — where an unexpected energy release is immediately fatal. LOTO is the procedural barrier between a worker and that outcome. At a gas processing plant with hundreds of pumps, compressors, heat exchangers, and control valves, each requiring periodic maintenance, a LOTO programme that is correctly written, consistently followed, and regularly audited is not bureaucratic overhead — it is the difference between a safe maintenance culture and a facility where workers are periodically killed by equipment that someone failed to properly isolate. The OSHA and NOPSEMA inspection records of facilities with strong LOTO compliance show dramatically fewer serious injuries from energy releases than those where LOTO procedures are treated as paperwork rather than physical protection. In an industry that operates equipment under the most extreme pressure, temperature, and toxicity conditions in the industrial world, getting energy isolation right is one of the most fundamental safety obligations a facility operator has.