Hazardous Energy Explained: 5 Controls Before Servicing Work

OSHA 29 CFR 1910.147 covers servicing and maintenance where unexpected start-up or stored energy could injure employees, yet many field checks still treat energy as an electrical-only issue. This glossary explains hazardous energy through 5 practical controls supervisors can verify before maintenance, cleaning, jam clearing, setup, or troubleshooting begins.

Hazardous energy is any electrical, mechanical, hydraulic, pneumatic, chemical, thermal, gravitational, or stored force that can injure a worker if it starts, moves, releases, falls, flows, or pressurizes during servicing work. The term matters because a lock on one switch does not prove that every dangerous energy source has been controlled.

What is hazardous energy?

Hazardous energy refers to energy that can harm a worker when equipment is serviced, maintained, adjusted, cleaned, or cleared. OSHA defines the lockout/tagout scope in 29 CFR 1910.147, which applies when unexpected energization, start-up, or release of stored energy could injure employees. A supervisor should therefore ask about type, magnitude, isolation point, stored energy, and verification before anyone reaches into the machine.

The trap is that many teams use the word energy as a synonym for electricity. Across 25+ years of executive EHS work, Andreza Araujo has found that serious exposure often hides in ordinary mechanical states: gravity held by a cylinder, pressure trapped behind a valve, a suspended load, residual heat, or a conveyor that can move after a jam is cleared.

That is why hazardous energy recognition belongs before the procedure, not after the lock is already hanging. If the job scope changes from inspection to adjustment, or from cleaning to unblocking, the energy picture changes as well. The lockout tagout verification before maintenance step then becomes proof, not paperwork.

Why does OSHA treat energy control as more than a lock?

OSHA treats energy control as a program because a physical lock only controls one identified isolation point. The standard requires procedures, authorized employees, training, notification, periodic inspection, and steps for application and removal. In 2024, the Bureau of Labor Statistics recorded 5,070 fatal occupational injuries in the United States, and its event tables include contact incidents such as struck, caught, or compressed events that often involve uncontrolled motion or equipment energy.

BLS reports in its 2024 CFOI table that contact with objects and equipment remains a distinct fatal-injury event family, including powered and non-running equipment categories. The point for supervisors is not to force every contact incident into LOTO. The point is to recognize that energy control fails before the injury, usually when the team accepts a partial isolation as complete control.

Andreza Araujo's book A Ilusao da Conformidade is useful here because it separates visible compliance from effective protection. A lock box, tag, and signature can coexist with a still-pressurized line or a raised component whose gravity load was never blocked. The compliance object looks complete while the physical system is still capable of release.

5 controls that define hazardous energy in the field

The 5 controls that make hazardous energy manageable are identification, isolation, dissipation, restraint, and verification. Each control answers a different question: what energy exists, where it is separated, how stored force is released, what can still move, and how the team proves the final state. When one of the 5 is skipped, the job depends on assumption rather than control.

Identification

List every energy source, including electrical, hydraulic, pneumatic, mechanical, chemical, thermal, gravity, spring tension, and stored pressure.

Isolation

Separate each energy source at an energy-isolating device, not only at a push button, selector switch, software screen, or local stop.

Dissipation

Bleed, drain, vent, cool, discharge, or otherwise reduce stored energy that remains after the main source is isolated.

Restraint

Block, pin, chock, crib, support, or secure anything that can fall, roll, rotate, drop, swing, or shift under gravity or residual force.

Verification

Test the zero-energy state in a way that matches the hazard, using qualified people, job-specific procedure, and a clear restart boundary.

NIOSH recommends a written and carefully executed hazardous energy control program because lockout is part of machine maintenance and production servicing operations. In field terms, the program only becomes real when the supervisor can point to all 5 controls on the equipment, not just recite them during training.

How do supervisors differentiate energy sources in practice?

Supervisors differentiate energy sources by asking what could move, release, ignite, pressurize, heat, cool, fall, or expose a body part during the task. NIOSH explains that hazardous energy control programs should protect workers during machine maintenance and production servicing, which means the supervisor must read the work method, not just the equipment label. A cleaning job and a troubleshooting job can expose different energy paths on the same machine.

NIOSH recommends hazardous energy control as a planned program, and that matters because real work changes. A pneumatic line may look harmless after the main disconnect is open, although trapped pressure can still move a cylinder. A vertical gate may look stable while a worn brake holds its weight. A hot surface may be outside the electrical isolation boundary but still capable of serious injury.

Use the table before the permit or work order is signed. It complements field verification before high-risk work because it forces the crew to compare the task plan with the physical state of the equipment.

When should hazardous energy trigger lockout instead of a JSA only?

Hazardous energy should trigger lockout when servicing or maintenance exposes a worker to unexpected start-up, energization, motion, or release of stored force. A JSA can identify the hazard and define controls, but it does not isolate energy by itself. If a person must remove a guard, bypass a device, place a body part in a danger zone, or clear a jam, the control conversation has moved beyond awareness into isolation.

This distinction matters for supervisors because a JSA often becomes a substitute for control when production is behind schedule. The document says keep hands clear, while the job requires hands inside the equipment. The better test is direct: if the worker would be injured by motion, pressure, release, or restart during the task, the team needs an energy-control decision before the job proceeds.

The related article on building a JSA before high-risk work explains the planning side. Hazardous energy recognition adds a stronger field gate: the job cannot start until the isolation method, stored-energy release, restraint, and verification are all visible to the person accepting the work.

What traps make hazardous energy controls fail?

Hazardous energy controls fail when teams confuse stopping equipment with isolating equipment, confuse isolation with zero energy, or confuse paperwork with proof. OSHA's 1910.147 sequence includes preparation for shutdown, shutdown, isolation, lockout or tagout, release of stored energy, and verification. The sequence contains at least 6 distinct actions because each action controls a different failure mode.

The first trap is the local stop button. It interrupts operation, but it is not an energy-isolating device. The second trap is partial isolation, where electrical power is locked out while gravity, pressure, heat, or spring tension remains. The third trap is restart pressure after maintenance, when multiple crafts, contractors, or shifts have worked inside the boundary and no single person owns final verification.

These traps connect directly to machine guarding bypass signals. When a guard is bypassed to clean, adjust, or clear material, the organization has created a moment where behavior, design, and energy control meet. If leaders treat the bypass as a behavior issue only, they miss the energy that can still injure the worker.

How should leaders audit hazardous energy recognition?

Leaders should audit hazardous energy recognition by sampling real jobs, not by reviewing only the written procedure. In a useful audit, the supervisor, authorized employee, and affected employee explain the energy sources, point to isolation devices, show how stored energy was released, and demonstrate verification. A 15-minute field sample usually reveals more than a 30-page binder review.

The audit should include at least 4 job types: maintenance, cleaning, clearing jams, and setup or adjustment. It should also include contractors because handover is where isolation boundaries become unclear. Andreza Araujo's work in more than 250 cultural transformation projects shows a recurring pattern: when leaders only audit documents, the organization learns to perfect the file while the field keeps negotiating risk.

Use a simple scoring rule. A job passes only if every identified energy source has a matched control, every stored-energy path has been removed or restrained, and every worker can explain what must happen before restart. Anything less is not a paperwork deviation; it is a control failure with injury potential.

Conclusion

Hazardous energy is best understood as a field condition, not a training label, because the danger sits in motion, pressure, heat, gravity, chemistry, and stored force that can still act after equipment appears stopped.

For Headline Podcast readers, the leadership question is whether supervisors can prove the 5 controls before servicing work begins. If the answer is unclear, start with a focused diagnostic of energy recognition, lockout verification, and field decision rights through Headline Podcast.