Machine Guarding and Lockout on a Packaging Line
A food packaging line has a case sealer with an unguarded chain-and-sprocket drive at waist height. Operators clear jams by reaching in while the line is running; the line has an interlocked access door, but the interlock is bypassed with a jumper wire because it 'stopped production.' Three operators and one maintenance tech service the line. Lockout locks and tags exist in a cabinet but are not issued personally; a single key hangs on a nail by the panel. Last month an operator caught a glove in the chain and suffered a laceration. Management wants a refresher training session and a new sign.
1. Identify the control failures and explain why training and signage will not resolve them. What must change?
Read the worked answer
The failures are systemic, not behavioral. The unguarded chain-and-sprocket at waist height is an entanglement hazard that should be guarded by a fixed barrier; the interlocked door is the secondary layer, and it has been defeated with a jumper, which removes the interlock entirely. The single key on a nail means lockout is not personal: anyone can remove anyone else's lock, so the procedure provides no protection. Locks and tags in a cabinet rather than issued to individuals confirm the program is nominal.
Training and a sign address none of this. A sign does not stop a hand; training cannot overcome an interlock that is jumpered because production pressure rewards bypassing it. The hierarchy requires elimination or engineering control first: guard the drive, restore and control the interlock so bypass is not possible without a documented, authorized procedure, and redesign jam clearing so it does not require reaching into a running machine.
Required changes: fixed guarding on the drive; restored interlock with tamper-resistant design and a bypass permit process; a written lockout program with personal locks and keys, documented procedures, and training for all four workers; investigation of why bypass was tolerated; and supervision that treats bypass as a stop-work event.
2. The maintenance tech argues lockout is unnecessary for jam clearing because it takes 'only a few seconds.' How do you respond, and what does a compliant jam-clearing procedure require?
Read the worked answer
The duration argument is the classic failure mode. A few seconds is exactly the window in which stored energy releases: a chain under tension, a raised load, a spring, or a control that restarts. The severity of entanglement does not scale with how long the task takes; the exposure occurs in the instant of contact. The glove laceration already demonstrates the hazard is real.
A compliant procedure requires: identification of all energy sources (electrical, mechanical, gravity, pneumatic, thermal); a documented, machine-specific lockout procedure; shutdown and isolation at the energy-isolating device; application of a personal lock and tag by each worker; release or blocking of stored energy and verification of zero energy by attempting startup or testing; and removal of locks only by the person who applied them, with a documented exception process. Jam clearing must be designed so it can be done with the machine stopped and energy isolated, or with guarding that prevents access to the hazard.
The tech should be retrained, but the durable fix is engineering and program design: make the safe method the easy method, and make bypass visible and accountable.