Group Lockout, a Cut Padlock, and Arc-Rated Clothing at a Conveyor Rebuild
At a food-processing plant, a 480 V conveyor drive is being rebuilt by a mechanical contractor during a weekend shutdown. The plant's lockout/tagout procedure uses a group lockbox: each worker places a personal lock on the box, and the box key controls the disconnect. On Saturday afternoon the night-shift supervisor could not find the box key, cut the padlock hasp with bolt cutters, and restored power to test an adjacent line. The contractor's crew was still inside the conveyor, which was held in tension by a 300 kg counterweight, and a pneumatic tensioner remained pressurized at 90 psi. The electrical hazard label on the MCC bucket reads 6 cal/cm2; the contractor was wearing an 8 cal/cm2 arc-rated shirt but no face shield or gloves. Records show that the contractor had not received the plant's LOTO awareness briefing, and the plant had not exchanged lockout information with the contractor's employer.
1. Identify the lockout/tagout failures in this event and explain what a compliant multi-employer arrangement requires.
Read the worked answer
Failures, in order of severity:
- A lock was removed by someone other than the person who applied it. Removal of another person's lock is only permitted under a documented procedure: verified attempts to contact the authorized employee, approval by the employer's designated official, notification to the employee before they return, and a written record. Cutting a hasp with bolt cutters because a key was missing meets none of these.
- Key control was defeated. If the box key can be retrieved or bypassed by a supervisor, the group lockbox is decorative. The key must be controlled so that the box cannot be opened while any personal lock is in place.
- The machine was re-energized while people were in the line. No try-out or verification step was performed before restart, and no one confirmed the crew was clear.
- Stored energy was not addressed - a 300 kg counterweight and 90 psi pneumatic tensioner were still live after electrical isolation.
- Multi-employer coordination failed. The host employer must inform the contractor of the plant's lockout procedures, the hazards, and the equipment involved; the contractor must ensure its own employees follow an equivalent procedure and apply their own locks. Neither happened.
- No shift-change or transfer-of-lock procedure, which is exactly the gap the supervisor exploited.
A compliant arrangement has: a written multi-employer agreement, contractor-specific lockout procedure, host briefing with sign-off, group lockbox with the key inside a personal lock, each worker's own lock on the box, and an explicit rule that power is never restored until every lock is off and the area is verified clear.
2. Describe the correct energy-isolation sequence for the conveyor rebuild, including stored energy and verification.
Read the worked answer
Sequence:
- Notify all affected workers and the contractor crew of the shutdown, scope, and duration.
- Identify all energy sources from the equipment drawings and a field walkdown - 480 V feed, any control voltage, the counterweight (gravity), the pneumatic tensioner, and any springs or residual drive motion.
- Shut down using the normal stop, then open and rack out or lock open the MCC disconnect. Apply a lock and tag to the disconnect at the point of isolation.
- Group lockout: each authorized worker, including every contractor employee, applies a personal lock to the group lockbox; the disconnect key goes in the box. No one removes another's lock.
- Dissipate stored energy: block or pin the 300 kg counterweight so it cannot descend, bleed the pneumatic tensioner to zero and confirm on a gauge at the actuator, and allow the VFD capacitor discharge time specified by the manufacturer (often 5-10 minutes) before opening the drive enclosure.
- Verify isolation: attempt a normal start at the local control station to prove the drive will not run, then return the control to off. Test the voltage detector on a known live source before and after checking the conductors.
- Verify stored energy: confirm the counterweight is mechanically blocked, not just braked, and that the pneumatic circuit reads zero pressure with the supply isolated.
Only then does work begin. If the crew leaves the area, locks stay on. If a lock must be removed, the documented removal procedure applies, with attempts to contact the worker and verification that no one is exposed.
3. Is the contractor's arc-rated clothing adequate for the described task? Justify your answer and specify what is needed.
Read the worked answer
Not adequate. An 8 cal/cm2 arc-rated shirt covers the torso, but arc-rated PPE is a system, not a garment. The label states 6 cal/cm2 incident energy at the working distance, which places the task in the range where the body needs clothing rated at or above the incident energy, and the head, face, hands, and ears need protection too. Wearing the shirt alone leaves the face, neck, and hands exposed - the areas most often burned in an arc flash.
For an incident energy of 6 cal/cm2, the expected ensemble is arc-rated long-sleeve shirt and pants (or coverall) rated at least 8 cal/cm2, an arc-rated face shield or arc-rated flash-suit hood, hard hat, safety glasses, hearing protection, and heavy-duty leather gloves over the arc-rated system. The task should also be challenged first: can the adjacent line be tested de-energized? If a test truly requires energized work, it needs an energized work permit, a justification that de-energizing introduces greater hazard or is infeasible, a hazard analysis, and a qualified person with the correct test instrument rated for the voltage.
Two further points: the label itself should be verified - an incident energy calculation depends on the assumed working distance and protective device settings, and a stale label on an MCC bucket is common. And the contractor's employer is responsible for providing and verifying PPE, but the host must disclose the known electrical hazards. Both obligations appear to have failed here.