Lock Out Tag Out Training: A Practical Guide for H&S Teams

A maintenance crew is at a hydraulic press after an unplanned restart. Last year's LOTO induction is filed, but nobody can show that the current team has identified every energy source or verified the machine's isolation points. That's the gap that exposes Australian PCBUs during an audit, and it's also the gap that puts workers in front of stored hydraulic, electrical, mechanical or gravitational energy.

Lock out tag out training has to operate as a recurring competency cycle. Safe Work Australia's electrical risk guidance requires workers who de-energise equipment to receive instruction, information, training and supervision so equipment isn't inadvertently re-energised. Where possible, tags should also be attached to normal locks at every isolation point used to de-energise electrical equipment.

For a PCBU, that duty sits alongside sections 19 and 39 of the Work Health and Safety Act 2011, plus the WHS Regulation requirements dealing with plant and hazardous energy. The practical message is clear. A completed induction record doesn't prove current competence.

Table of Contents

• Why Australian PCBUs Cannot Treat LOTO Training as a One-Off Induction
  • The legal duty is ongoing
  • What a recurring cycle must prove
• The Eight-Step Isolation Sequence That Anchors Your Curriculum
• Matching Training Content to Each Worker Cohort
• Designing Curriculum, Assessment and Refresher Cadence
  • Four modules with field evidence
• Coordinating LOTO Training Across Contractors and Subcontractors
• Building Training Records That Withstand an Audit
  • Retrieval is part of the control
• Feeding Incidents and Near Misses Back Into the Training Cycle
  • Use a quarterly review agenda
  • Score the programme over the first month

Why Australian PCBUs Cannot Treat LOTO Training as a One-Off Induction

The legal duty is ongoing

Workers rotate. Contractors change. Plant gets modified. Shift arrangements alter how people communicate and hand over isolations. Each change can affect whether a worker remains competent to identify energy sources, apply the correct device and verify that zero energy has been achieved.

SafeWork NSW's plant and machinery energy-isolation guideline limits lockout work to competent persons. Workers must be trained and assessed as competent before they receive personal lockout devices. The competency elements include hazardous energy identification, isolation methods, device selection, zero-energy verification, site work instructions and machine-specific training.

That's why issuing a lock and tag before a supervised demonstration is a programme failure, not a minor administrative weakness. The worker may know the terminology but still miss a secondary isolator, a pressure accumulator or a stored load.

What a recurring cycle must prove

A credible programme shows that the PCBU:

• Identifies the authorised worker: The record states who may apply and remove isolation devices, and on which equipment or machine classes.
• Checks practical performance: The worker demonstrates the procedure on actual plant, not just through an online knowledge check.
• Reviews change triggers: New equipment, modified procedures, changed work groups, near misses and deviations prompt reassessment.
• Maintains supervision: Supervisors can recognise whether workers are following the written isolation procedure in the field.
• Retains evidence: Training, assessment and authorisation records remain current and easy to retrieve.

SafeWork Australia's guidance makes training part of the formal control used to prevent inadvertent re-energisation. SafeWork NSW also formalises personal accountability. Locks and danger tags are removed by the person who placed them, except under defined circumstances such as illness, injury, departure from the job where the worker can't be located, or loss of the key. Only competent and authorised personnel may remove a lock under those exceptions.

A one-off induction can introduce the rules. It can't establish that the rules remain understood and correctly applied across a changing workforce.

The Eight-Step Isolation Sequence That Anchors Your Curriculum

Use the SafeWork NSW eight-step sequence as the structure for both classroom content and field assessment. The isolation of plant factsheet sets out the sequence as shutting down machinery, identifying energy sources and hazards, identifying isolation points, isolating energy, controlling stored energy, locking isolation points, tagging controls and hazards, then testing the plant without creating risk.

The sequence should become eight linked modules, not a poster that workers sign without practice.

The last step deserves a separate written assessment item. The worker must explain what they tested, why the test was appropriate and where the result was recorded. A voltmeter test alone won't verify a hydraulic accumulator, a suspended load or trapped pneumatic pressure.

Practical rule: The person who applies a personal lock owns its removal. Don't let a supervisor casually remove it because the shift has ended.

SafeWork NSW's guidance also requires workers to notify affected people, follow shutdown instructions and control lock removal. For group work, the trainer should include a hasp or group lock box drill. Each worker places and removes their own personal lock, and the equipment remains unavailable until every personal lock has been removed.

A permit system can support the isolation process where work interfaces are complex. Use the permit-to-work process to connect authorisation, isolation status and work release, but don't let a permit replace the physical verification drill.

The resulting curriculum skeleton is straightforward: one module per isolation step, one practical demonstration per module, one written assessment covering reasoning and lock-removal rules, and one signed competency decision by an authorised assessor.

Matching Training Content to Each Worker Cohort

A single LOTO course creates false equivalence. The person applying a lock carries a different competency burden from the operator working beside the isolated plant, and both differ from the planner who writes the isolation procedure.

The usual budget leak sits with affected workers and planners. PCBUs fund a formal course for maintenance technicians, then rely on a short toolbox talk for operators who may still attempt a restart or remove a tag. They also forget that a planner's written procedure only works if workers can locate the isolators and understand the sequence.

Cohort sizing should follow the work, not the payroll category. Include every worker who may apply a lock, every person who could be exposed to an isolation, every supervisor who controls the work and every planner whose procedure affects the task. A contractor who only attends occasionally still needs verification before working on shared plant.

The practical trade-off is cost versus coverage. Training only authorised workers looks efficient, but it leaves communication and restart controls weak. Training every person to the same depth wastes time and can blur authorisation boundaries. Role-based training gives each cohort enough capability for its exposure and responsibility.

Designing Curriculum, Assessment and Refresher Cadence

A sound curriculum has four connected modules. They should be delivered as a system because a worker can identify energy correctly and still fail by choosing the wrong isolator or skipping verification.

Four modules with field evidence

Hazardous energy identification starts with the machine, not a generic slide deck. Workers identify electrical, hydraulic, pneumatic, mechanical, thermal, chemical and gravitational hazards that may remain after normal shutdown. SafeWork NSW's competency guidance specifically includes identifying hazardous energy sources and completing machine-specific training.

The eight-step isolation sequence then converts that hazard map into action. The worker follows the written procedure, not memory, and shows where each step is recorded.

Group lockout procedures cover hasps, group lock boxes, personal locks and shift handovers. The assessor watches each person attach their own lock and checks that no worker assumes another person's lock provides their protection.

Re-energisation release rules cover work completion, tool and personnel checks, affected-worker notification and personal lock removal. The worker must explain the conditions for release and what happens when the person who applied a lock can't remove it under ordinary circumstances.

Each module needs two assessments:

• Knowledge check: Ask the worker to identify the correct isolation point, explain stored-energy controls and state who may remove a personal lock.
• Practical demonstration: Require physical application of a lock, zero-energy verification with the worker's own tester, a safe attempt to operate the plant and a completed checklist.

Assess the reasoning as well as the sequence. Auditors may ask why a particular isolator was selected, how stored energy was controlled and how the worker knows the machine can't restart. A worker who can recite steps but can't explain the machine-specific decision hasn't demonstrated competence.

The intervals above should be treated as a risk-based operating standard for the programme. Routine workers can be reassessed every 12 months, while workers on high-energy plant or exposed to shift-change lockout conflicts should be reassessed every six months. Any near miss, procedure deviation, plant modification or evidence of inadequate knowledge should trigger immediate reassessment.

A completion record proves attendance. A supervisor-signed verification of competency proves a decision was made about performance.

Have the worker, supervisor and maintenance lead sign the competency outcome. An eLearning module can support knowledge delivery, but it shouldn't stand alone where the role involves physical isolation.

For larger workforces, a cloud-based LMS can help link course completion, practical assessment and expiry status. It can also support teams that need to automate compliance reminders without treating an automated reminder as evidence of competence.

Coordinating LOTO Training Across Contractors and Subcontractors

A contractor may arrive with a current LOTO certificate and still be unauthorised to isolate your plant. The host PCBU retains responsibility for coordinating work, explaining site-specific energy sources and checking that the contractor can apply the host procedure to the actual equipment.

Make contractor access conditional on three records:

1. A current LOTO statement of competency that identifies the worker and role.
2. Evidence of training on the energy sources present at your site, rather than a generic course title.
3. A signed SWMS that names the lockout coordinator and explains the energy-control interface.

The principal contractor's procedure should govern shared assets. Subcontractors shouldn't invent separate isolation schemes where multiple crews rely on the same energy source. That creates uncertainty about who controls the isolator, where personal locks are attached and who may release the plant.

Run a group lockout box drill during the site induction. Give each worker a hasp or group box, require them to place their personal lock, and test the handover process. The exercise should expose practical questions before the job starts, such as what happens when one crew finishes early, how the incoming crew confirms isolation and who records the change.

A contractor's authorisation should be rechecked when equipment, energy sources or scope changes. Treat any worker whose site-specific competence hasn't been verified as unauthorised to apply isolation locks, regardless of what their external paperwork says.

The SWMS should match the isolation procedure. Check that the named coordinator understands the plant, that the work steps reflect the site's isolation points and that contractor personnel know how to stop work if the procedure doesn't match the equipment. Contractor coordination fails when procurement checks training at engagement, then nobody revisits it at mobilisation or after a scope change.

Building Training Records That Withstand an Audit

Treat a LOTO record as live compliance evidence, not an HR file. An auditor needs to see what the worker was authorised to do, on which equipment, assessed by whom and with what result.

Every record should identify:

• The worker: Name, role, employer and authorisation status.
• The equipment: Specific machine, machine class and energy sources covered.
• The assessment: Date, assessor, written result and practical drill outcome.
• The verification: Worker signature plus sign-off from a competent supervisor.
• The evidence: A completed equipment checklist or photograph showing the actual plant used during assessment.
• The current status: Valid, restricted, expired, suspended or awaiting reassessment.

Generic attendance sheets don't answer the question an inspector is likely to ask: who is authorised to isolate this specific machine today? A record tied to the live asset list does.

Retrieval is part of the control

Store records so a manager can search by worker, equipment and date. The system should show expiry alerts, supervisor verification and the practical assessment result. If a record takes half an hour to find, the organisation can't demonstrate effective control at the point it matters.

Retain records for the duration of the worker's engagement plus five years, aligned with WHS recordkeeping guidance. Keep the current procedure and the assessment evidence together where possible, particularly if the machine has changed since the worker's original training.

Audit test: Ask a supervisor to name everyone authorised to isolate one machine, then retrieve the supporting records without searching through email attachments.

The record should also show restrictions. A technician assessed on an electrical isolation procedure isn't automatically competent on a hydraulic press. A contractor assessed on one asset isn't automatically authorised across the site.

For teams reviewing their document control, training record management can help connect worker status, assessment evidence and retrieval requirements. The platform is only useful if managers enter practical outcomes rather than marking every module complete.

Good records also support maintenance contractor quality management, because the principal contractor can verify that maintenance personnel have the right authorisation before work begins. The record becomes a work-control document, not merely proof that someone once attended training.

Feeding Incidents and Near Misses Back Into the Training Cycle

Closing a LOTO event doesn't close the learning loop. Every isolation, unplanned release, failed lockout, near miss or procedural deviation should produce information that the H&S team can use to test whether the training still matches the work.

Start the review with facts, not blame. Record the energy type, isolation point, worker involved, supervisor sign-off and the exact deviation from the written procedure. Then classify the issue so the programme can respond to the cause rather than repeating the rule.

Useful root-cause tags include:

• Incorrect sequence: The worker completed steps out of order or skipped a required control.
• Missing device: The correct lock, tag, hasp, tester or blocking device wasn't available.
• Communication failure: Affected workers, supervisors or incoming shifts didn't understand the isolation status.
• Contractor handover gap: A subcontractor changed the work arrangement without following the host group lockout process.
• Procedure mismatch: The written document didn't reflect the machine's actual isolation points or energy sources.

A contractor who re-energises a circuit before another worker removes a personal lock shouldn't trigger only a reminder to “be careful”. Add a focused toolbox discussion covering personal lock ownership, handover and release authority. If the same failure recurs, revise the drill and reassess the affected cohort, supervisors and contractor coordinator.

Use a quarterly review agenda

A quarterly review should be short enough to happen and detailed enough to expose trends. Put these items on the agenda:

1. Top energy-control failures: Review the most serious or repeated issues by energy type and isolation point.
2. Control changes: Record changes to plant, devices, procedures, work sequencing or supervision.
3. Training revisions: Identify modules, questions and practical drills that need updating.
4. Worker reassessment: Name the people who require reassessment and set the supervisor responsible for completing it.
5. Record quality: Check whether incidents, near misses and corrective actions are connected to competency records.

SafeWork NSW's guidance places emphasis on competence, machine-specific knowledge and zero-energy verification. A living programme shows those elements changing when field evidence says they need to change. An archived induction pack shows only that training once occurred.

Score the programme over the first month

Use twelve checkpoints and rate each pass, partial or fail. Record the evidence needed to upgrade a partial or fail rating.

Week one, inspect the LOTO register. Confirm every isolation point has a written procedure, a verified energy source and a nominated device owner. A pass requires the current asset list, procedure and device assignment to agree.

Week two, map worker cohorts. Compare each worker's actual training with their role and equipment exposure. Flag anyone whose last refresher exceeds 24 months and schedule reassessment. The 24-month flag is a management control for finding overdue records. It doesn't replace the risk-based intervals set by the programme.

Week three, audit contractor files. Check contractor and subcontractor induction records against the SWMS energy-control clauses. Confirm that the principal contractor and subcontractors use consistent group lock box procedures.

Week four, reconcile the records to live assets. Match authorised workers and practical assessments to the current machine list. Schedule the next refresher round, then report open gaps at the leadership WHS meeting.

The twelve checkpoints should cover more than training attendance. Include isolation-point procedures, device ownership, affected-worker awareness, supervisor sign-off, group lockout, shift change, contractor onboarding, SWMS alignment, incident review, reassessment triggers, record retrieval and leadership review.

Quick wins usually sit in the record format, supervisor sign-off cadence and first contractor review meeting. Rewriting every procedure may be necessary later, but it shouldn't distract the team from obvious evidence gaps that can be corrected immediately.

The strongest programmes connect the event register to the next training action. A failed verification becomes a revised practical drill. A contractor handover problem becomes a group lock box exercise. A procedure mismatch becomes a machine walk-through with the planner, supervisor and authorised workers together.

That cycle gives the PCBU something more useful than a training spreadsheet. It shows that workers are assessed against the hazards they face, that supervisors verify performance, and that incidents change the way the organisation trains.

If your LOTO records, machine procedures and contractor controls are difficult to connect, Safety Space provides a WHS management platform with configurable records, multi-site oversight and tools for managing subcontractor compliance. Visit Safety Space to review how its LOTO procedure and training evidence can fit into your next 30-day WHS improvement cycle.