Lockout Tagout (LOTO) SWMS
Multi-energy isolation for plant maintenance — electrical, hydraulic, pneumatic, mechanical, and stored energy. Covers personal vs crew lockout, try-out verification, and group lockout procedures per AS/NZS 4836 and AS/NZS 4024.
SWMS variants reference your state's WHS legislation. Instant download after payment.
This SWMS covers the full scope of multi-energy isolation — lockout, tagout, and verification — performed before maintenance, cleaning, unblocking, inspection, repair, or modification of powered plant in Australian workplaces. The document addresses electrical isolation at distribution boards and machine isolators, hydraulic isolation and pressure bleed-down, pneumatic isolation and pressure dissipation, mechanical blocking of suspended loads and gravity-held components, dissipation of stored capacitive and spring energy, and isolation of process pipework by blind-flange or double-block-and-bleed. It is written for maintenance fitters, electricians working on plant, millwrights, production supervisors who coordinate line stoppages, and contractor crews engaged to service industrial, manufacturing, food-processing, mining, and warehousing plant. Every procedure in this document has been authored against the 2023 Safe Work Australia Code of Practice "Managing the risks of plant in the workplace" and the AS/NZS 4024 series of machinery-safety standards.
Lockout/tagout is not itself a high-risk construction work category, but the activities it protects routinely trigger multiple HRCW categories — Category 9 (work on or near energised electrical installations) whenever electrical isolation is the subject of the lockout, Category 11 (work in or near a confined space) when a worker must enter a vessel or silo after isolation, and Category 3 (work at a height greater than 2 metres) when access to isolation points requires ladders, EWPs, or platforms. Under Section 299 of the WHS Regulation 2025 a SWMS must be prepared before any of these triggering activities commence, kept available on site, and given to the Principal Contractor on request. The Australian enforcement record since 2024 is unambiguous: in December 2024 a Queensland timber mill was fined $300,000 after a worker was killed operating an unguarded de-barker that had not been isolated before maintenance, and in August 2024 Paving Group Pty Ltd (Quantumstone) was fined $75,000 by SafeWork SA after a worker suffered traumatic injury from an unguarded conveyor roller that had been accessed without lockout. Both prosecutions found that guards had been removed without any accompanying lockout procedure. This SWMS reflects the 2024-2026 enforcement baseline, including the industrial-manslaughter provisions now in force in every state.
Hazards identified
12 hazards covered, sorted by priority.
Crush, amputation, or fatality when a co-worker, automatic control, or shift-change operator re-energises plant while a maintenance worker has hands or body inside the machine envelope.
High-pressure fluid injection injury, whiplash from hose ejection, and crush from suspended hydraulic loads dropping when an isolation valve is opened without pressure bleed-down.
Uncontrolled movement of cylinders and actuators, ejection of fittings, and impact injury when pneumatic circuits are not vented to atmosphere before work commences.
Entanglement and crush injury from rotating components that continue spinning for minutes after power is removed; large industrial fans can spin for over 10 minutes after isolation.
Electrocution and arc-flash injury from residual charge in variable-frequency drive DC buses, uninterruptible-power-supply strings, and capacitor banks even after upstream isolation.
Crush or fatal strike from suspended guillotine rams, unsupported scissor-lift platforms, raised press tools, or gravity-fed hoppers when mechanical blocking is not applied.
High-velocity strike or entanglement from stored spring energy released during disassembly without controlled de-tensioning.
Steam burns, scalds, and thermal injury when steam traps, hot-oil lines, or jacketed vessels are opened without cool-down and isolation confirmation.
Toxic, corrosive, or flammable chemical exposure when a flanged joint is broken without upstream isolation, drain-down, and confirmed zero-pressure.
Premature restoration of plant when incoming shift removes locks placed by outgoing shift, or when multiple contractors work on the same plant without a group lockout.
Proceeding with maintenance on plant that is still energised because the isolation device was mislabelled, defective, or the wrong isolator was locked; the leading cause of LOTO fatalities worldwide.
Plant returned to service with guards missing or interlocks bypassed; subsequent operator injury even though the maintenance worker was unharmed during the task itself.
Control measures
Hierarchy-of-controls order: elimination → substitution → isolation → engineering → administrative → PPE.
- 1Use lockable energy isolators at the source for every hazardous energy — electrical circuit breaker or disconnect switch, hydraulic ball valve, pneumatic ball valve with vent, process isolation valve — not just the local operator stop or emergency stop. Emergency stops and control-system stops are not isolation devices.
- 2Dissipate all stored energy before commencing work. Bleed hydraulic accumulators to tank, vent pneumatic receivers to atmosphere, discharge capacitors and DC buses per the manufacturer's specified wait time (typically 5 minutes for VFDs), mechanically block suspended loads, chock rolling plant, and allow flywheels and fans to spin down to a verified stop.
- 3Verify the zero-energy state using the prove-test-prove sequence for electrical isolations: prove the calibrated two-pole voltage tester on a known live source, test the isolated circuit at the point of work, and prove the tester again immediately afterward per AS/NZS 4836. For fluid systems, confirm zero pressure at a test point downstream of the isolation valve before breaking any joint.
- 4Apply a personal danger lock and a personal red danger tag to every isolation point — one worker, one lock. The lock must be keyed such that only the worker who applied it can remove it. Yellow out-of-service tags are not LOTO devices and must never substitute for personal danger locks.
- 5For multi-worker tasks, use a group lockbox. Each worker places a personal lock on the lockbox, and the isolation keys are held inside until every worker has removed their lock. The maintenance planner or competent person who coordinates the isolation holds the first lock and removes it last.
- 6Document every isolation in a plant-specific isolation register identifying every energy source, isolation point, stored-energy dissipation step, verification method, and responsible person. Review the register annually and after any plant modification that alters an energy source.
- 7Permit-to-work systems apply to high-risk isolations — confined-space entry after isolation, live-work authorisation where isolation is not reasonably practicable, and hot-work near residual process materials. Permits must be signed by an authorised issuer and remain visible at the work area for the duration of the task.
- 8Electrical lockout complies with AS/NZS 4836:2023 — de-energise, isolate at the upstream source, apply lock-out/tag-out, and verify dead at the point of work. Where live work is unavoidable, a separate live-work authorisation is required in addition to the SWMS and is outside the scope of this LOTO procedure.
- 9Mechanical lockout of plant complies with AS/NZS 4024.1 — safety of machinery, in particular the isolation and energy-dissipation requirements of AS/NZS 4024.1501 and the hierarchy-of-protective-measures framework of AS/NZS 4024.1201.
- 10Controlled restart sequence: all tools and foreign objects removed from the plant envelope, all guards refitted and interlocks confirmed operational, isolated personnel accounted for and notified of imminent restart, all personal locks removed in the prescribed order, isolators restored, and a functional test conducted under supervision before releasing plant to production.
- 11Train all workers authorised to apply locks to a documented competency standard covering the specific energy sources, isolation devices, and verification methods for the plant in their scope. Refresher training at least every two years and on every material plant change. Competency records retained for the life of the employment.
- 12PPE baseline for electrical isolation tasks: arc-rated shirt and trouser selected against the calculated incident energy at the isolation point, Class 0 insulated gloves over leather protectors for low-voltage work, insulated tools per AS IEC 60900, safety glasses to AS/NZS 1337.1, safety footwear with electrical hazard rating, and hard hat Class E for switchboard work.
- 13PPE baseline for hydraulic and pneumatic isolation: face shield over safety glasses during pressure bleed-down to protect against fluid injection and ejected fittings; chemical gloves selected for the working fluid; spill containment at the point of bleed-down.
- 14Psychosocial controls per WHS Regulation 2025 r55A-55D: realistic maintenance windows that allow full isolation and cool-down time, no production pressure to shortcut verification steps, two-person standard for complex multi-energy isolations, and clear written procedures at the point of work.
- 15Pre-isolation briefing with every worker who will be protected by the lockout, confirming the scope of work, every energy source to be isolated, verification sequence, group-lockout arrangement, and the restart procedure. Record attendance on the SWMS worker sign-on register.
- 16After any lockout-related near-miss or incident, conduct an immediate review before resuming work; update the plant isolation register and the SWMS if any deficiency is identified, and notify the regulator within the statutory window if the incident meets the notifiable-incident threshold under Section 36 of the WHS Act.
Applicable Codes of Practice
Principal binding guidance covering isolation, lockout, stored-energy dissipation, and controlled restart for all powered plant; directly addresses the Quantumstone and Queensland timber-mill fact patterns.
Binding guidance on electrical isolation, live-work authorisation, arc-flash controls, and prove-test-prove verification at the point of work.
Applies when LOTO is performed on construction sites; establishes HRCW categorisation, SWMS content, and Principal Contractor interaction requirements.
Binding requirements for permit-to-work, atmospheric testing, and rescue standby where isolation precedes entry into a vessel, silo, duct, or pit.
Technical standard for machinery isolation, energy dissipation, and protective-measures hierarchy; the principal Australian standard for plant safeguarding.
Technical standard for de-energisation, prove-test-prove verification, and live-work authorisation; cited throughout for electrical isolation steps.
Technical standard governing insulated-tool selection and re-test intervals for electrical isolation work.
High-Risk Construction Work triggered
Electrical isolation work brings a licensed electrician into proximity with energised switchboards, distribution boards, motor starters, and variable-frequency drives. Until the isolation is applied and verified dead, the worker is working near energised equipment and the HRCW category is triggered.
Because the triggering electrical work constitutes HRCW, Section 299 of the WHS Regulation 2025 (NSW) requires the SWMS to be prepared before work commences, kept available on site for inspection, reviewed and updated if the work changes, and provided to the Principal Contractor on request. Failure by a PCBU to prepare or keep a current SWMS for HRCW is an offence under Section 300; maximum penalty for a body corporate is $36,000 per offence, and for an individual $7,200. More seriously, the Queensland Office of Work Health and Safety Prosecutor in December 2024 secured a $300,000 fine against a timber-mill company after a worker was killed operating an unguarded de-barker that had not been isolated for maintenance. In August 2024, SafeWork SA prosecuted Paving Group Pty Ltd (Quantumstone) for $75,000 following a traumatic conveyor injury where guards had been removed without LOTO. Industrial-manslaughter provisions now in force in every state apply where a LOTO failure causes a fatality.
Who this is for
- →Maintenance fitters, millwrights, and mechanical tradespeople servicing industrial plant across manufacturing, food, mining, and warehousing.
- →Licensed electricians performing isolation, fault finding, modification, or upgrade on fixed plant and motor circuits.
- →Production supervisors and maintenance planners coordinating line stoppages, shutdowns, and multi-contractor work scopes.
- →Contractor crews engaged to perform maintenance on a client's plant under a group-lockout arrangement.
- →Site supervisors and WHS leads reviewing subcontractor LOTO procedures during pre-start and permit issue.
What you receive
- ✓Editable Microsoft Word (.docx) document delivered within 24 hours of payment
- ✓Title page with PCBU name, ABN, site address, plant identifier, competent person, and revision-date fields.
- ✓Signed approval block for PCBU, plant owner, and nominated maintenance supervisor.
- ✓Hazard register with the 12 hazards above, each with consequence, inherent risk, controls, and residual risk scored on a 5x5 likelihood-consequence matrix.
- ✓Isolation register template — one row per energy source with isolation point, dissipation step, verification method, and responsible person.
- ✓Group-lockout procedure template with lockbox workflow, key-custodian responsibilities, and handover sign-off for multi-shift works.
- ✓Permit-to-work templates for confined-space entry after isolation, hot work, and authorised live-work in the narrow circumstances where it is unavoidable.
- ✓Worker sign-on register for daily acknowledgement, with space for competency and training references.
- ✓Legislation schedule pre-populated for NSW with variance table for VIC, QLD, SA, WA, TAS, NT, ACT.
- ✓Emergency contacts, incident-reporting procedure, and review-and-update log for tracking revisions after near-misses and plant modifications.
Worked example
A confectionery factory in Western Sydney schedules a 10 pm Sunday maintenance window to replace a tensioner bearing on a packaging-line conveyor belt. The maintenance planner coordinates three workers — one fitter, one licensed electrician, one millwright apprentice — through a group lockout. The planner identifies three energy sources: a 415 V three-phase feed at the line isolator, a 6 bar pneumatic supply for the pusher cylinders, and gravity energy in the raised tensioner arm. The electrician isolates the 415 V feed at the line isolator, applies a personal lock and danger tag, and completes a prove-test-prove verification with a calibrated two-pole tester at the motor terminal block. The fitter closes the pneumatic ball valve, opens the bleed valve, and confirms zero pressure at the downstream test port. The millwright apprentice installs a certified mechanical pin through the tensioner arm to remove the gravity load. All three workers place their personal locks on the group lockbox; the planner retains the isolator keys inside and applies his own lock. Work proceeds for two hours. At restart, tools are accounted for, guards are refitted, the production supervisor is notified, each worker removes his lock in reverse order, the planner removes his lock last, isolators are restored, and a test run is conducted under supervision before the line is released to production at 1 am.
Related legislation
- Work Health and Safety Act 2011 (NSW) — Section 19 primary duty of care; Section 27 officer due diligence; Section 36 notifiable incidents; industrial manslaughter provisions under 2024 amendments.
- WHS Regulation 2025 (NSW) — r. 200-208 duties relating to plant; r. 208 guarding; r. 213 maintenance, inspection, cleaning; r. 298-300 SWMS for HRCW; r. 150 electrical risks; r. 55A-55D psychosocial hazards.
- Electrical Safety Act 2002 (QLD) and equivalents — licensing of electrical isolation work.
- Dangerous Goods (General Industry Safety) Regulation 2000 and state equivalents — isolation requirements for hazardous-chemical process plant.
- Major Hazard Facility provisions under Chapter 9 of the WHS Regulation — elevated isolation and permit requirements at registered MHFs.
- Environmental Protection Act 1994 (QLD) and state equivalents — controlled release obligations during line-break and drain-down activities.
Frequently asked questions
Is a yellow out-of-service tag sufficient for lockout?
No. A yellow out-of-service tag indicates to operators that the plant is not to be used, but it is not a lockout device. Lockout requires a personal danger lock and a red personal danger tag applied by the worker protected by the isolation. The tag alone does not physically prevent another worker from operating the isolator. Both the 2023 Plant Code of Practice and AS/NZS 4024 treat locks and tags as distinct devices that serve different functions.
How long must I wait for stored electrical energy to dissipate before working on a VFD?
Follow the manufacturer's specified wait time, typically 5 to 15 minutes for the DC bus of a variable-frequency drive to discharge to a safe voltage. The only reliable method is to measure DC bus voltage with a calibrated meter before commencing work. Do not rely on indicator LEDs alone, as they can fail. UPS strings and capacitor banks may require substantially longer discharge times and additional bleed resistors.
Do I need a permit-to-work for every isolation?
Not every isolation requires a permit, but permits are mandatory for higher-risk categories: confined-space entry following isolation, hot work in residual-material areas, breaking containment on hazardous-chemical lines, and any live-work authorisation. The permit documents the scope, the isolation state, the monitoring requirements, and the sign-off for restart. The SWMS sits underneath the permit system.
How does a group lockout work with multiple contractors?
Each contractor's workers place a personal lock on a group lockbox; the isolation keys are held inside the box until every lock is removed. A designated competent person — typically the maintenance planner or permit issuer — applies the first lock and removes it last, after personally verifying the plant is safe to return to service. No worker may remove another worker's lock; lock-removal procedures under duress require a documented authorised-absence process.
What does the December 2024 Queensland timber-mill prosecution tell me about LOTO enforcement?
The $300,000 fine imposed on the timber-mill company after a worker was killed operating an unguarded de-barker confirms that courts treat missing LOTO during maintenance as a serious category-2 WHS offence. The earlier Quantumstone prosecution ($75,000 in August 2024) made the same point for conveyor roller maintenance. Both cases involved guard removal without any accompanying lockout procedure. Industrial-manslaughter prosecution is the next step where a LOTO failure causes a fatality.
Is this SWMS compliant with the 1 July 2026 Section 26A changes?
Yes. From 1 July 2026, 34 approved Codes of Practice become legally binding under Section 26A of the amended WHS Act. This SWMS cites the currently-approved Codes that will become binding — Managing the Risks of Plant in the Workplace, Managing Electrical Risks, Construction Work, and Confined Spaces — and aligns with the AS/NZS 4024 and AS/NZS 4836 technical standards. No amendment is required for the 2026 transition; review is recommended whenever plant modifications introduce new energy sources or isolation points.