What is lock-out tag-out (LOTO) and why is it used aboard ship?

Lock-out tag-out exists because verbal warnings and mental notes fail, reliably and repeatedly, which is exactly why so many serious engine room and deck accidents involve someone starting equipment, opening a valve, or restoring power while a colleague was still inside or working on it, often in good faith and without realising anyone else was there. LOTO is designed to make that impossible rather than merely unlikely.

The first step is identifying every energy source that could move the equipment or make it dangerous: electrical supply at the breaker or isolator, but also stored or residual energy that is easy to forget, hydraulic or pneumatic pressure trapped in a line, a spring-loaded mechanism, or the pressure and temperature of a process system like steam or a fuel line. Each source is isolated at its own point: breakers opened and racked out where fitted, valves shut and, wherever the design allows, physically blanked rather than just shut, since a valve can be reopened by someone unaware of the work, but a blank flange cannot pass fluid regardless. Trapped pressure is bled off and confirmed at zero, not assumed.

Each isolation point then gets its own lock, ideally a personal padlock held only by the person doing the work, and a tag stating clearly what is being worked on, who applied the lock, and when. Where more than one person is working on the same job, a lock box or multi-lock hasp lets each individual apply their own padlock to the same isolation point, so the equipment cannot be returned to service until every person working on it has personally removed their own lock, not just until the job is reported finished by someone else. Before work starts, a try-start, a physical attempt to operate the isolated equipment, confirms the isolation actually worked, since a mislabelled breaker or valve is a real and recurring failure mode.

LOTO sits inside the wider permit-to-work system: the permit authorises the job and records the risk assessment, while the physical locks and tags are the hands-on control that makes the isolation real rather than just documented. Removing locks and tags is done only when the work is genuinely complete, the area is clear, and it is safe to reinstate, following the same discipline in reverse. On ships, LOTO applies well beyond the obvious electrical panel: steering gear, mooring winches, cargo pumps, refrigeration compressors, and anything with rotating or pressurised parts all warrant the same isolate-lock-tag-verify sequence before anyone puts hands on them for maintenance.