In many industrial environments, shutting off a machine is often treated as the first—and sometimes the only—step toward safety.
From a maintenance perspective, that assumption shows up more often than people expect.
But in real-world operations,“off” does not always mean safe.
This case is one I often refer to when discussing lockout/tagout procedures. It didn’t involve complex systems or unusual hazards. It was a routine maintenance task—something that happens every day in facilities across the industry.
And yet, it ended in a fatal incident.
The incident took place in a manufacturing facility in the United States.
A maintenance technician was assigned to adjust a belt on a large rotating machine. Before starting, he shut off the equipment using a wall switch. From his perspective, the machine was no longer running and safe to work on.
However, there was no lockout/tagout program in place.
No locks.
No tags.
No formal energy control procedure.
Believing the equipment was safe, the technician climbed a ladder and began the adjustment.
Shortly after, another employee entered the area. Seeing the machine turned off, he assumed it had been left that way unintentionally. Trying to restore normal operation, he switched it back on.
The machine restarted immediately.
The result was fatal.
This incident was not caused by a single mistake. It was the result of multiple missing safeguards.
No energy isolation
Shutting off a switch stops operation, but it does not isolate hazardous energy. The system remained capable of being re-energized at any moment.
No lockout/tagout system
Without locks or tags, there was no physical barrier preventing restart—and no visible warning that maintenance was in progress.
Lack of communication
The second worker did not act recklessly. He simply had no indication that someone was working on the equipment.
No defined responsibility
There was no clear ownership of energy control. No one was responsible for isolating, verifying, or securing the system.
This was not just a procedural gap—it was a system failure.
Lockout/tagout (LOTO) is often viewed as a compliance requirement.
In practice, it serves a much more specific purpose: preventing unexpected energy.
A proper LOTO process ensures that:
• Equipment is fully de-energized
• Energy sources are physically isolated
• Restart is mechanically prevented
• Only the person who applied the lock can remove it
Without these steps, equipment can be reactivated at any time—intentionally or unintentionally.
And that is exactly what happened in this case.
Never rely on a switch
A control switch only stops operation. It does not eliminate the possibility of reactivation. In many systems, energy can still be restored instantly.
LOTO must be a system—not a choice
In this facility, there was no structured program. An effective LOTO system requires:
• Defined procedures
• Proper lockout devices
• Employee training
• Clear accountability
If any of these elements are missing, safety becomes inconsistent.
Visibility is critical
Locks and tags are not only control devices—they are communication tools. They clearly signal: Do not operate. Maintenance in progress. Without that signal, others will make assumptions.
Training must reflect real situations
Most incidents do not happen because people ignore safety rules. They happen because people misunderstand the situation. Training must address real-world conditions—not just written procedures.
Safety culture determines outcomes
This case reflects a reactive environment—one where safety is not built into daily operations. A strong safety culture does the opposite:
• Identifies risks before work begins
• Applies procedures consistently
• Treats energy control as non-negotiable
Lockout/tagout violations remain one of the most frequently cited safety issues in industrial environments.
Incidents like this still occur—not because the risks are unknown, but because the systems designed to control them are incomplete or not consistently applied.
This case serves as a reminder:
LOTO is not about equipment.
It is about protecting people.
In many situations, it is the final barrier between routine maintenance and a life changing accident.
If maintenance work depends on energy,
then safety depends on controlling that energy.
And if energy is not fully controlled,
safety is only assumed—not verified.
