The answer is all of the above: you must follow lockout/tagout procedures in every one of those situations. OSHA's control of hazardous energy standard, 29 CFR 1910.147, covers servicing and maintenance of machines, including cleaning, jam clearing, troubleshooting, and repair. It also covers equipment that has failed and equipment sitting idle awaiting repair or removal, as long as stored energy or unexpected startup could injure someone.
That single sentence settles the exam question, but not the shop-floor reality. The standard's text is short; its implications are not. Servicing is defined broadly, the word "maintenance" includes cleaning, and the exemption for "normal production" is narrower than most crews assume. This explainer works through the mechanism of hazardous energy, the numbers behind lockout injuries, the edge cases that trip up experienced technicians, and the practical sequence that keeps a repair job from becoming a fatality report.
How hazardous energy actually hurts people during repair work
Lockout/tagout exists because machines store energy in ways that are invisible until release. A stopped motor is not a de-energized motor. Pressurized fluid in a hydraulic line, a raised load held by gravity, a compressed spring, and a spinning flywheel all retain energy after the disconnect is opened. The mechanism of injury is almost always the same: a stored-energy source converts to kinetic energy while a body part is inside the machine's point of operation.
OSHA's standard targets "unexpected" energization and release. That word matters. The hazard is not a coworker deliberately pressing start while watching you; it is the coworker who presses start without knowing you are inside, or the control circuit that restarts automatically when pressure recovers. Lockout isolates the energy source physically, usually with a padlock on a disconnect. Tagout is a warning-only method and is permitted only when the energy-isolating device cannot be locked, and only with added protections equivalent to lockout.
The standard defines servicing and maintenance to include "constructing, installing, setting up, adjusting, inspecting, modifying, and maintaining and/or servicing machines or equipment." Cleaning, lubricating, and unjamming are named activities. Equipment failures and awaiting-repair status change nothing about the hazard; a broken machine can hold the same energy as a running one, often more, because a failure may have left a load suspended or a valve stuck open. That is why the keyword's answer is all of the above rather than a list of exceptions.
The scope numbers: who gets hurt and how often
Lockout/tagout consistently ranks among OSHA's most-cited standards, and the injury data explain why. OSHA has long attributed roughly 50,000 injuries and about 20 fatalities per year to hazardous-energy events in general industry, with a substantial share occurring during servicing and maintenance rather than routine operation. Amputations dominate the severe-injury categories; electrocutions and crushing injuries follow.
Citation volume is a useful proxy for how often employers get the basics wrong. Lockout/tagout typically appears in OSHA's top ten most frequently cited standards each fiscal year, with thousands of violations annually. The most common findings are missing written energy-control procedures, inadequate employee training, and failure to conduct periodic inspections. Those are documentation failures, but each one maps to a physical failure mode: a worker who was never trained does not verify zero energy, and an unverified machine restarts.
The exposure is concentrated in a few tasks. Clearing jams, changing tooling, and cleaning inside guarded areas account for a large share of incidents, which is precisely the work the "normal production" exemption does not cover. A jam clearance during a production run is servicing, not production, even though the machine is nominally in use.
Edge cases where crews misjudge the rule
Several situations feel like gray areas but resolve cleanly under the standard. Explicit knowledge of equipment failure or an emergency does not waive lockout. OSHA's compliance guidance allows an exception for work on energized equipment only when de-energizing introduces a greater hazard or is infeasible, such as troubleshooting that requires live voltage measurements or work on a continuous industrial process. That exception is narrow, requires specific alternative protections, and does not cover convenience.
Equipment awaiting repair or removal is still covered when stored energy is present. A press with a die stuck at bottom dead center, a conveyor with a jammed part under tension, and a pump skid with residual pressure all remain hazardous while they sit. "It's broken" is not an energy-control status.
Red flag: "The machine is off, so it's safe." Off is a control state, not an energy state. Stored hydraulic pressure, gravity, and capacitance do not care about the switch. Red flag: "I'm only cleaning." Cleaning is named servicing under the standard when it occurs where unexpected energization could injure. Red flag: "I'll be quick." Most lockout fatalities involve brief tasks. Speed pressure is the hazard, not a justification. Red flag: "The tag says don't start it, so we're covered." Tagout without lockout is permitted only under the narrow conditions above. A tag is a warning, not a barrier. Red flag: "The line is down for the week, so we can skip it." Awaiting repair or removal is explicitly within scope when energy may be present.
The counterintuitive professional caveat: lockout does not guarantee zero energy. Verification does. Isolation may miss a second feed, a backfeed through a control circuit, or a gravity-held load. Experienced technicians treat the lock as a claim on the source and the verification step as the actual safety act.
Why tagout is not a cheaper lockout, and other misconceptions
The most consequential misconception is that tagout and lockout are interchangeable safety labels. They are not. Tagout relies on human compliance with a warning; lockout imposes a physical barrier. The standard requires employers to use lockout whenever the device can be locked, and to treat tagout as a fallback with equivalent protection. That asymmetry is why lockout dominates the citation and injury records.
A second misconception is that lockout ends when the padlock goes on. The standard's sequence has six steps: prepare for shutdown, notify affected employees, shut down, isolate, apply locks and tags, and release stored energy. Verification of isolation follows as the seventh practical step, and it is the one most often skipped. Applying a lock before releasing a spring or bleeding a line leaves the stored energy intact and the worker trusting a false signal.
A third is the paperwork fallacy. The written procedure, the machine-specific energy-control procedure, is not a filing exercise. It is the mechanism that tells a worker where every energy source is and in what order to isolate it. Machines with multiple energy sources, which is most modern equipment, are where generic lockout fails and machine-specific procedures earn their keep.
Comparison table: lockout versus tagout versus live-work exception
| Approach | Physical barrier | When permitted | Protective mechanism | Typical failure mode |
|---|---|---|---|---|
| Lockout | Yes, lock on isolating device | Whenever the device can be locked | Physical prevention of re-energization | Missed energy source or skipped verification |
| Tagout | No, warning tag only | Only if device cannot be locked, with equivalent protection | Relies on worker compliance | Tag removed or ignored |
| Energized work exception | None | De-energizing infeasible or introduces greater hazard | Alternative protective measures | Narrow exception stretched for convenience |
| Group lockout | Yes, multiple locks | Crews sharing an isolation point | Each worker holds a key | One worker removes another's lock |
| Cord-and-plug unplugging | Yes, if plug is controlled | Only when plug is under exclusive control | Separation from source | Plug reachable by others |
The time course: what a compliant repair sequence looks like
Lockout timing is not arbitrage; it is discipline. The sequence below reflects the standard's required order and the practical inspection checkpoints. Durations are typical ranges for a single-machine service job, not rules.
Timeline table: stages of an energy-controlled repair
| Stage | Typical duration | Action | Failure risk if skipped |
|---|---|---|---|
| Preparation | 5-15 minutes | Identify all energy sources, review machine-specific procedure | Missed second feed or stored load |
| Notification | 1-5 minutes | Inform affected employees and supervisors | Surprise restart by uninformed coworker |
| Shutdown and isolation | 5-20 minutes | Stop machine, open disconnect, apply lock and tag | Residual energy release |
| Energy release | 2-10 minutes | Bleed pressure, block loads, discharge capacitors | Spring, gravity, or pressure release |
| Verification | 2-5 minutes | Test for zero energy at the point of work | False sense of security |
| Repair or cleaning | Task-dependent | Perform servicing inside the isolated zone | Re-energization mid-task |
| Restoration | 5-15 minutes | Inspect, clear tools, notify, remove locks in reverse order | Startup with personnel or tools inside |
Periodic inspection of the procedure itself is also required, typically annually for each machine-specific procedure. That review catches the drift that happens when equipment is modified and the written procedure is not.
Practical actions and thresholds
Translate the standard into a checklist a supervisor can enforce. The steps below mirror the regulatory sequence and add the verification habits that separate compliant shops from lucky ones.
Inventory every machine's energy sources before authorizing work. Mechanical, electrical, hydraulic, pneumatic, thermal, chemical, and gravity are the seven categories to check on the procedure form. Write a machine-specific procedure for each covered unit and post it at the point of use. Generic procedures fail on multi-source equipment. Train authorized employees on recognition, isolation, and verification. Train affected employees, everyone who works near the machine, on the lockout concept and their duty not to remove locks or restart equipment. Apply lock and tag before releasing stored energy, then verify zero energy at the point of work. The verification test is non-negotiable. Enforce group lockout with a lock for each worker or a lockbox system, so no single person can restore energy while others are exposed. Conduct the periodic inspection at intervals of at least annually per procedure, and re-inspect after any equipment modification.
Two thresholds worth memorizing. First, lockout is the default whenever the isolating device can be locked; tagout requires documented justification and equivalent protection. Second, the energized-work exception requires that de-energizing be infeasible or introduce a greater hazard, which is a narrow, documented determination, not a time-saving choice.
Limitations: where the standard stops and judgment begins
The standard governs general industry and sets the floor, not the ceiling. Construction and maritime have separate energy-control requirements, and some jurisdictions enforce state plans with stricter provisions. The regulation also does not prescribe every machine's procedure; it requires the employer to develop one, which means the quality of the safety system depends on how seriously the employer treats the written procedure and the inspection.
The evidence base is also limited. Injury and citation statistics show where failures happen, but they cannot prove a specific shop's risk or predict outcomes for a particular repair job. Compliance reduces risk; it does not eliminate the possibility of an unrecognized energy source. Treat the process as the control, and the inspection as the check on the process.
[HIGH-STAKES DISCLAIMER] This article is general educational information about workplace safety regulation, not a legal opinion or a substitute for an employer's site-specific energy-control program. It does not promise any outcome from following it. Consult a qualified safety professional or your local occupational safety authority, and for immediate danger call local emergency services.