Lockout/tagout (LOTO) isolates hazardous energy; a permit to work authorizes a hazardous job and its conditions. They are not competitors and not interchangeable: LOTO is a physical control that makes a machine safe to touch, while a permit is an administrative control that confirms a specific task is planned, authorized, and safe to start. The confusion costs people, because a job protected by one when it needed both is a job with a gap nobody sees until it bites.
The shorthand: LOTO makes the equipment safe; the permit makes the job safe. One protects against the machine; the other protects against the plan.
LOTO is often a control specified inside a permit: a permit for work on a conveyor will require LOTO as one of its conditions and verify it before authorizing. But many LOTO jobs need no permit (routine, well-understood, low complexity), and many permits govern jobs with no hazardous energy to lock out at all, working at height on a static structure, entering a space, hot work on an empty frame. They intersect constantly without being the same thing.
A technician must enter a large mixing vessel to replace paddle seals. Walk the controls: the agitator drive holds hazardous mechanical and electrical energy, so LOTO is mandatory, isolate, lock, verify zero energy by attempting start. But the vessel is also a confined space with atmosphere and access hazards LOTO does nothing about, so a permit to work is equally mandatory: atmosphere tested, attendant posted, rescue arranged, entry authorized in writing. Apply only LOTO and the technician is safe from the agitator and unprotected from the atmosphere. Apply only the permit and the paperwork is perfect while the drive can still turn. The job is safe only when both controls are live, and the permit is precisely the mechanism that ensures the LOTO was actually done and verified.
Both controls also depend on the wider safe-work system: the task-level thinking of a job safety analysis and the ranking logic of the hierarchy of controls sit around them.
A simple test: Is there hazardous energy to isolate? If yes, LOTO. Is the job non-routine, multi-hazard, high-consequence, or does it involve other people and systems? If yes, a permit. Many serious jobs answer yes to both, and the correct answer is never to pick one. When in doubt, the permit is the umbrella that forces the LOTO question to be answered explicitly.
Fabrico carries both controls in the flow of work: LOTO procedures and permit templates attached to the work order types that require them, so the right control opens with the job; isolation steps and permit authorizations captured and time-stamped; and the hand-back sequence recorded so energy restoration and permit closure happen in the right order. Fabrico does not authorize permits or apply locks, competent people do; it makes sure neither control is silently skipped and both are evidenced when the audit asks. EU-built, with EU data residency.
No. A permit authorizes a job; it does not physically isolate energy. Where hazardous energy exists, LOTO is the required physical control, and the permit should verify it, not substitute for it. Paper cannot stop a motor.
No. Routine, single-hazard, well-understood LOTO tasks often proceed under standard procedures without a formal permit. Permits are for non-routine, multi-hazard, or high-consequence work, which frequently includes LOTO as one of several controls.
The permit issuer confirms the job is complete and safe before authorizing return to service, and LOTO removal follows its own strict sequence: each worker removes their own lock, guards and energy are restored, and the machine is confirmed clear of people. The two closures must be coordinated, which is exactly what the permit is for.
Want LOTO and permits riding on the same work order, evidenced and impossible to skip? Book a Fabrico demo to see safe-work controls run through a field-ready CMMS.
Zaloguj
Blog