The Annual Lockout/Tagout Inspection: What 1910.147(c)(6) Actually Requires

A small metal fabrication shop has a written lockout/tagout program. It has procedures posted at the punch press, the shear, and the two CNC mills. Employees are trained. Locks and tags are stocked in a cabinet by the maintenance bench. On paper, this looks like a program that would survive an OSHA inspection.

Then an inspector asks for the most recent annual periodic inspection record for each procedure, and there isn't one. Not because the shop is careless — the locks get used every day, the training happened, the procedures are accurate. Nobody just realized that 1910.147 requires a separate, documented, once-a-year check of the procedures themselves, done by someone who isn't the person normally performing the work they're inspecting. This is the single most commonly missing piece of an otherwise functioning LOTO program, and it's worth understanding exactly what the standard asks for, because the requirement is narrower and more specific than "review the program every year."

What 1910.147(c)(6) Actually Says

The provision requires the employer to conduct a periodic inspection of the energy control procedure at least annually, to ensure that the procedure and the requirements of the standard are being followed. This is not a paperwork review done at a desk. The inspection has to observe the procedure being carried out in the field, on the actual equipment, by the actual employees who use it.

Two things make this inspection distinct from ordinary supervision. First, it must be conducted by an authorized employee other than the one(s) using the energy control procedure being inspected — you cannot have someone sign off on their own lockout habits. Second, where the procedure involves group lockout using a lock box or comparable device, the inspection has to include a review, conducted between the inspector and each authorized employee, of that employee's responsibilities under the specific procedure.

The inspection has to correct any deviations or inadequacies it finds. That means the annual check isn't just a compliance record — it's supposed to function as the mechanism that catches procedures that have quietly drifted from what's written, or written procedures that never matched how the equipment is actually isolated.

Why This Requirement Gets Missed

Most small shops that have a real LOTO program get the parts that are visible day to day right: written procedures, hardware, training records. The annual inspection fails for a structural reason rather than a willful one — it's the one requirement that produces no daily evidence of its absence. A missing lock gets noticed the first time someone needs one. A missing annual inspection produces nothing until the specific day someone asks for the record.

There's also a role-confusion problem. Many small operations have one or two people who are the de facto safety function, and the same person who trains the authorized employees and maintains the program often is the only person who could plausibly conduct the inspection — but the standard requires it be conducted by someone other than the employee actually using the procedure being reviewed. In a two-person maintenance department, this is workable: one technician inspects the other's use of a given procedure, and they alternate. In a one-person maintenance department, the employer has to bring in someone else — a supervisor, an owner who is also an authorized employee, or an outside consultant — to conduct the inspection credibly.

What the Inspection Has to Produce

OSHA requires the inspection be certified. The certification has to identify the machine or equipment on which the energy control procedure was being used, the date of the inspection, the employees included in the inspection, and the person who performed the inspection. This certification is the document an inspector will ask to see, and it's what's absent in the fabrication shop example above even when everything else is in order.

A useful way to think about the certification is that it has to answer four questions on its face: which procedure, which date, which employees were observed or interviewed, and who did the inspecting. A generic sign-off sheet that says "LOTO reviewed — OK" for the whole facility does not meet this, because it doesn't tie back to a specific procedure on a specific piece of equipment. If a facility has procedures for six different machines, it needs a record that shows each of those six procedures was individually inspected within the year — not one blanket annual sign-off covering the program as a whole.

Conducting the Inspection in Practice

The inspection should happen while the equipment is actually being locked out for real servicing work, not as a staged walkthrough. The inspector watches an authorized employee apply the procedure from start to finish: identifying and isolating each energy source, applying the lockout device, verifying zero energy state, and — when the work is done — restoring the equipment to service in the correct sequence. Deviations to look for include steps skipped because they seemed unnecessary that day, hardware substituted because the correct device wasn't on hand, and verification steps performed from memory rather than as the written procedure specifies.

Where the equipment uses group lockout — a lock box that lets multiple authorized employees each apply their own personal lock to a single isolation point — the inspection additionally requires a conversation with each employee covered by that procedure about their individual responsibilities under it. This catches a specific failure mode: a group lockout procedure that works fine when the same two or three people always use it together, but breaks down the first time someone new joins the crew and doesn't know when to add or remove their lock.

If the inspection turns up a deviation — a step that's routinely skipped, a procedure that no longer matches how the equipment is actually isolated because of a modification — the standard requires that gap be corrected. That can mean retraining the employees involved, rewriting the procedure to reflect how the equipment actually needs to be isolated, or replacing hardware that doesn't match what the procedure specifies. The inspection is only doing its job if it changes something when something needs to change.

Setting Up a Schedule That Doesn't Slip

Because the inspection produces no visible daily evidence, the practical fix is to put it on a calendar the same way insurance renewals or equipment certifications are tracked — not left to be remembered. Facilities with more than a handful of procedures often stagger them across the year rather than doing every machine in the same week, which spreads the workload and makes it easier for the person conducting the inspection to give each one real attention rather than rushing through a list.

Keep the certifications together in one place — a binder or a folder, not scattered across individual machine files — so that when an inspector asks for the annual review, the shop can produce every procedure's record without a search. That single organizational habit is often the difference between a program that looks complete and one that has the substance but can't demonstrate it on the day it matters.