Lockout Tagout LOTO Annual Program Audit And Verification

The annual Lockout Tagout program audit serves three primary objectives: (1) verify compliance with CSA Z460-20 and jurisdictional OHS regulations by confirming that every energy-isolating device on site has a current, accurate written energy control procedure (ECP); (2) validate field execution by observing workers performing lockout sequences and zero-energy state verification on a statistically representative sample of equipment; and (3) identify systemic gaps in training currency, hardware condition, documentation accuracy, and management commitment. The audit is not a pass/fail inspection — it is a diagnostic tool that drives continuous improvement in the energy control program. Findings are categorized by severity and entered into a corrective action tracking system with assigned owners and due dates.

This procedure applies to all facilities, departments, and job sites under the organization's safety management system where lockout tagout is used for energy isolation during maintenance, repair, cleaning, unjamming, or setup activities. The audit encompasses (a) a review of all written energy control procedures (ECPs) against the installed equipment inventory, (b) a records audit of training documentation for all affected and authorized employees, (c) a physical inspection of all LOTO hardware (hasps, padlocks, tags, group lock boxes, and dedicated LOTO kits), (d) a field verification of a minimum of 10% of all ECPs (or 5 machines, whichever is greater) selected randomly across departments, and (e) a review of incident reports involving energy isolation failures or near-misses from the previous 12 months. Excluded: electrical utility switching, low-risk tasks covered by a documented alternative isolation method (e.g., plug-and-play equipment with visible disconnect under 600V), and administrative areas with no energy isolation requirements.

• LOTOThe auditor must not perform any lockout tagout sequence themselves unless they are a currently authorized employee with up-to-date training on the specific equipment being audited. The auditor's role is to observe and verify, not to execute. All field verifications must be conducted with an authorized employee who is actively performing the lockout under their normal duties.
• ZEVZero-energy state verification (ZEV) must be performed using calibrated instruments appropriate for the energy type: a CAT III/IV voltage tester for electrical, a pressure gauge for pneumatic/hydraulic, and visual inspection for gravitational/stored energy. The auditor must witness the ZEV step and confirm that the worker does not rely solely on the position of a disconnect switch or pressure gauge reading — secondary verification (e.g., attempting to start the machine after lockout) is required per CSA Z460-20 Section 7.3.3.
• PPEThe auditor must wear the same PPE as required by the energy control procedure for each machine being verified. This commonly includes: safety glasses (CSA Z94.3), steel-toed boots (CSA Z195), hearing protection (CSA Z94.2) in areas above 85 dBA, arc-rated clothing (NFPA 70E) if auditing electrical equipment with potential arc flash risk, and high-visibility vest if auditing in a mobile equipment or forklift zone. Gloves rated for the specific energy hazard (e.g., rubber insulating gloves for electrical verification) must be worn by the authorized worker performing the lockout; the auditor may observe from a safe distance.
• STORStored energy hazards require special attention during the audit. Before any lockout is released, confirm that all stored energy has been dissipated, blocked, or restrained. This includes: capacitors discharging to below 50 V, pneumatic lines bled to 0 psi, springs mechanically blocked, counterweights chocked, and suspended loads lowered or cribbed. If stored energy cannot be fully dissipated (e.g., large flywheels, accumulator banks), the ECP must specify the dissipation method and the maximum acceptable residue. The auditor must document any instance where stored energy dissipation is not adequately addressed in the written ECP.
• RENRe-energization must be performed strictly according to the written ECP. The auditor must verify that the authorized worker removes personal lockout devices only after all personnel are clear, guards are replaced, and a visual sweep of the area is completed. The auditor must also confirm that group lockout procedures (if used) follow the "last in, first out" principle and that the group lock box is properly secured. Any deviation from the re-energization sequence must be documented as a critical non-conformance.

• Master LOTO log and energy control procedure inventory — current, dated, and signed by the program administrator. Must list every machine/equipment piece with an ECP, its unique identifier, location, date of last revision, and the names of authorized employees trained on that specific procedure.
• Current LOTO training records (classroom and field verification) for all affected and authorized employees. Each record must include: employee name, date of training, topics covered (5-step lockout process, zero-energy verification, group lockout, shift handoff, and re-energization), expiry date (if any), and the trainer's signature. A log showing training currency by department.
• Sample of site-specific energy control procedures (ECPs) — at least 2–3 per department for the field verification portion. The auditor should pre-select a random sample plus any machines that have a history of incidents or near-misses.
• LOTO hardware inventory — physical count and condition check of: lockout hasps (all sizes), padlocks (keyed differently, no master key accessible), tag-out tags (pre-printed or writable, durable), group lock boxes (with capacity for multiple padlocks), and dedicated LOTO kits (if used). A hardware replacement log is helpful for tracking wear.
• Measuring / monitoring instruments — voltage tester (CAT III/IV rated, with visual and audible indication), pressure gauge (0–300 psi minimum, with calibration sticker within validity), multimeter (True RMS, with probes rated for the circuit voltage), thermal imaging camera (optional but recommended for identifying overheating components or residual heat in hydraulic systems), and a phase rotation tester (for 3-phase equipment). All instruments must have current calibration certificates on file.
• Audit checklist template — a structured form that guides the auditor through each step of the audit, with fields for documenting ECP content accuracy, training record completeness, hardware condition, field observation results, and non-conformance severity ratings. Can be paper or digital (SafeDesk recommended for real-time data entry and photo attachment).
• Corrective action log — a tracking document for recording non-conformances found during the audit, with columns for: finding description, severity (Critical / Major / Minor), root cause, assigned owner, due date, status (Open / In Progress / Closed), and closure verification date. The log must be reviewed at each monthly safety committee meeting until all items are closed.