Key takeaways
- Paper LOTO rarely fails on the day it is audited. It fails quietly, in the gaps between steps.
- The seven failure modes below are visible if you know where to look.
- Each one maps to a control that digital LOTO enforces by design.
Why paper LOTO looks fine until it isn’t
A paper register can’t tell you whether the person who signed it actually locked the point, checked for zero energy, or kept the key on them. Everything is recorded after the fact by the people being audited. That is why most isolation incidents are a surprise to the people who run the procedure.
The seven failure modes
1. Shared or spare keys
A crew lead holds keys for the whole team, or spares hang on a board. The rule that only the person who applied the lock can remove it no longer holds. Warning sign: keys outside a controlled lock box, or “master” keys in a drawer.
2. The try-out is skipped
The isolation is done, the job is late, and nobody attempts a start or tests for voltage. Warning sign: registers where the try-out tick always matches the lock time to the minute. We go deeper in why the try-out step gets skipped.
3. Tags nobody can read
Handwritten tags fade, get wet, fall off or carry only a first name. Warning sign: tags without a permit number or contact.
4. One lock, several people
One person locks and the rest of the crew works under it. If that person leaves, the protection leaves with them. Warning sign: fewer locks on the hasp than people on the job.
5. Missed energy sources
The motor is isolated but the pneumatic line, the gravity load or the stored pressure is not. Warning sign: procedures that list one isolation point for equipment that clearly has several.
6. Messy shift handovers
Locks are swapped between outgoing and incoming crews without a clean transfer. Warning sign: handover notes that say “locks transferred” with no names.
7. Registers filled in later
The register is completed at the end of the shift from memory. Warning sign: identical handwriting and pens across a whole page.
Failure mode, warning sign, digital control
| Failure mode | What you see on paper | How digital LOTO closes it |
|---|---|---|
| Shared keys | Keys on boards or with leads | 1-Man-1-Lock-1-Digital Key®: the key cannot be shared |
| Skipped try-out | Tick at the same minute as the lock | Zero-energy check captured before work can start |
| Unreadable tags | Faded or blank tags | Digital tag on the live record |
| One lock for many | Fewer locks than people | Virtual lockbox: each person locks on |
| Missed sources | One point for multi-energy equipment | Permit lists every isolation point |
| Shift handovers | “Locks transferred” | Named, time-stamped transfer |
| Late registers | Same pen, same time | Events recorded as they happen |
Where to start
Walk one area with the register in hand and compare it to what is on the isolation points right now. Count locks against people. Check the try-out times. Most plants find at least three of the seven within an hour. If you want help, our team runs a free LOTO gap assessment against OSHA 29 CFR 1910.147.
Frequently asked questions
What is the most common LOTO failure?
In our plant walks the most common gaps are shared or spare keys and skipped try-outs, because both are invisible on paper.
How can I audit paper LOTO quickly?
Compare the register with the isolation points in real time: locks against people, try-out times against lock times, and tags against permits.
Does digital LOTO remove the need for audits?
No, but it makes audits faster and more honest, because every action is recorded when it happens rather than written up later.
See Smart LOTO® run on your plant.
Book a demo