Lockout/Tagout on the Rig: Kill the Energy Before the Repair

A mud pump holds pressure after the breaker is open. A drawworks drum can roll with the power off, dragging a hand into the line. A generator set can be started remotely, by another crew, from a panel two hundred feet away. On a rig, "it's off" is never a complete sentence. The energy has to be locked out, tagged out, and verified dead before a single wrench goes on. That is the whole discipline of lockout/tagout, and it is the maintenance task where shortcuts cost lives.

Why rig equipment is worse than a factory

Lockout on a factory line is simple compared to a rig. The energy sources multiply: electrical, hydraulic, pneumatic, mechanical, thermal, and stored. A BOP accumulator holds hydraulic energy that does not drain when you flip a switch. A counterweighted crown block stores mechanical energy in the geometry itself. Pressure in the mud system, compressed air in the rig air system, tension in the hoisting line. Each one has to be identified, isolated, and tested before the repair starts, and the isolation points on a rig are spread across skids, not gathered on one panel.

There is also the shift problem. The mechanic who locks out the pump at 14:00 goes off tour at 18:00, and the pump stays locked until he comes back, or someone breaks his lock, which is exactly the violation that gets people hurt. A real program answers that with shift handover in the lockout records, not with a bolt cutter.

The procedure that survives the rig

Step one is a written energy control procedure for each piece of equipment that stores or receives energy, and on a rig that list is long: mud pumps, drawworks, top drive, rotary table, generators, compressors, winches, the BOP unit. Step two is training: authorized employees who apply the locks, and affected employees who simply need to know the equipment is locked and not to touch it. Step three is the sequence, and the sequence is the part crews skip. Notify. Shut down. Isolate. Release stored energy. Verify with a test, not a guess. Lock and tag. Try to start it and confirm nothing moves.

The verification step is where the system earns its keep. On a rig, "verify" means physically testing that the equipment will not start, not trusting the panel light. The crew that skips the test is the crew that finds the defect the hard way.

Group lockout and the shift that changes

The hardest part of lockout on a rig is not the first lock; it is the group. When a pump has three energy sources and three crews will work inside it, the standard calls for group lockout: one authorized person coordinates the locks, every worker adds their own lock, and the equipment stays locked until every worker has removed theirs. The rule that has to be written into the procedure is the one that covers the shift change: the offgoing crew removes its locks only after the oncoming crew has verified the isolation and applied its own. The alternative, a single master lock that the night crew "borrows," is the exact failure that the standard was written to prevent, and it is the one auditors look for first.

LOTO meets the maintenance schedule

Lockout is not a separate program from maintenance; it is the front door of it. The preventive maintenance schedule on this site only means something when the repair window includes the time to lock out properly, and the spare parts discipline on this site is what makes the window short. A pump that comes down for a packing change and sits for two days because the part is not staged means more entries into a locked-out machine, and every entry is a chance for the lockout to fail. The tight program stages the part before the pump stops.

And when a lockout fails, the incident reporting rules on this site decide what happens next: the near miss gets reported and the procedure gets fixed, or it gets hidden and the next crew repeats it. The reporting culture is the second half of the lockout culture.

If your crews are using one master lock "because it's faster" or locks come off between shifts, book a working session with the OpsFlo operations team. Book a call here to see lockout records, maintenance windows, and shift handovers tracked with owners and timestamps.