Industry · Energy

LOTOTO in the energy sector

In energy, equipment is never taken out of service just for maintenance. Operations still have to keep supply going, switch the surrounding parts of the system and know exactly which units are unavailable. LOTOTO here depends on a clear handover: who released the equipment, who isolated which medium, and when it goes back into service.

LOTOTO in the energy sector is the lockout, tagout and tryout procedure applied to generation and distribution equipment, where operations hand a unit over to maintenance only once every medium acting on the job has been isolated.

Maintenance gets the equipment only once every medium is isolated.

01

Why is the handover between operations and maintenance so critical?

Short answerOperations own the equipment, and maintenance works on it only after it has been handed over. An unclear handover is where information about what is isolated, and who is still working, most easily gets lost.

In a power station, heating plant or substation, the state of equipment is decided by operations: the control room operator, dispatch or shift staff. Maintenance teams and contractors receive the equipment for the duration of the job and return it afterwards. In between, both sides need to see the same picture of where things stand.

On paper, that picture is spread across the permit, the operations log, a phone call and a verbal handover at shift change. A digital record keeps it in one place: the request, the approval, isolation confirmed medium by medium, the work groups attached and the point at which work was finished.

02

Which equipment and media are isolated in the energy sector?

Short answerTypically substations, transformers, boilers, turbines, pumps, compressors and piping systems with their valves. Besides electrical energy, the main concerns are steam, water and gas under pressure, heat and the inertia of rotating machines.

Equipment / areaExamples of energy sources and media
Substations and switchgearelectrical, high and low voltage
Transformerselectrical, thermal
Boilersthermal, steam and water under pressure, fuel
Turbines and generatorsmechanical (rotation), steam, thermal, electrical
Pumpselectrical, mechanical, pressurised medium
Compressorselectrical, pneumatic, mechanical
Piping systems and valvessteam, water, gas under pressure, thermal

These are illustrative examples only. The actual media and isolation points are defined by your equipment register and your site’s approved procedures.

A single unit often needs several media isolated, by different people. An authorised electrician secures the electrical side; a mechanical technician closes the steam or water supply. In the digital record each energy has its own performer, lock number and time of confirmation. User types can be tied to energy types, so an electrician, for example, confirms only electrical isolation. The principle is explained in detail under energy isolation.

Equipment and technical points in the energy sector usually carry their own operational identifiers, used by the control room and maintenance alike. A digital isolation record should use exactly the same identifiers, so that no doubt arises about which point is meant during the handover between operations and maintenance.

03

How do you reconcile planned outages with the need for availability?

Short answerPlanned outages can be prepared in advance as draft records. During the work it is visible which units are out of service and what state each lockout is in.

Energy operations are built around availability. An outage is planned so the rest of the system can keep running, and every job requires cooperation from operations. Dispatch therefore needs an up-to-date overview: what has been requested, what approved, what is already locked out and where work has been finished.

The system can show an overview of active lockouts without login, for example on a screen in the control room. If a unit already has another active lockout, the system warns about it when a new record is created. Equipment that is taken out of service together can be grouped in advance and locked out as a whole group.

01Draft02Requested03Approved04Locked05Work finished06Unlocking07ArchiveLOCKOUT
Illustrative workflow. The actual steps, roles, approvals and the way Tryout is recorded are set up according to your site’s rules.
ReadLockout tracking
04

Why does approval not mean that work can start?

Short answerApproving a request, carrying out the isolation and verifying that it works are three different acts with different responsibilities. The digital process keeps them separate and in order.

An operator approves lockouts only for the equipment they are responsible for. After approval, the performers isolate each medium and each confirms their part. The overall status “locked out” is reached only once every required energy has been confirmed. Until then the partial state is visible, and it is clear what is still outstanding.

The third step is verifying that the isolation is effective (Tryout). We design how Tryout is recorded and built into the digital workflow according to your site’s rules. How approval and the request lifecycle are set up is covered under digital permit to work and roles and authorisations.

05

How do you hand work over at shift change and involve contractors?

Short answerEvery group working on the equipment attaches itself to the lockout. The unit can only be returned to operations once no group is still active.

During outages, in-house electricians, mechanical fitters, instrumentation technicians and service contractors may all work on the same unit. When each group attaches to the lockout, the overview shows who is working, how to reach them and whether they have finished their part. Unlocking is blocked while even one group remains active.

Before unlocking, the requester has to close the work. If the shift changes in the meantime, an authorised substitute can take over the step, and the record keeps who actually carried it out. Whether contractors get their own access or are represented by a responsible person on site is something we design around your rules.

06

What remains on record once the job is complete?

Short answerThe whole sequence: who requested, who approved, who isolated and de-isolated each medium, which groups worked and when the work was closed.

Completed records move to the archive. The audit log keeps every change with who made it, when, and the old and new value. When preparing the next outage or investigating an event, it is possible to trace how the job actually ran. More on the LOTO audit trail page.

07

What changes in day-to-day work at an energy site?

We do not quote percentages or savings estimates. These are the concrete changes a digital process brings:

A clear handoverOperations and maintenance see the same equipment status
Isolation by mediumEach medium has its own performer and confirmation
Overview in the control roomActive lockouts on a screen, no login needed
Controlled return to serviceUnlocking only after every group has finished
08

How do you get started with digital LOTOTO in energy?

Short answerWith a review of how you currently hand equipment over, followed by a pilot on one operating unit.

In the energy sector we build on our experience with LOTOTO processes and on an analysis of your site. Together we look at who releases equipment today, how isolation of each medium is recorded and where information gets lost at handover. Roles, approvals and the equipment register are then set up accordingly. How implementation works, and what can be digitalised, is described on the solution page.

09

What does digital LOTOTO in energy not replace?

A digital record does not replace your site’s switching and isolation rules, nor the competence of the people carrying them out.

FAQ

Frequently asked questions

Can high-voltage and low-voltage isolation be recorded separately?

Yes. High-voltage electrical and electrical are separate energy types in the list. Each can have its own performer on the record.

Can dispatch see active lockouts without logging in?

Yes. The system has a public overview of active lockouts that refreshes automatically and can be shown on a wall-mounted screen, for example.

Who is allowed to approve lockouts?

Approval is configured to match your rules. An operator’s right to approve is tied to the equipment they are responsible for.

Can the solution run on a server on our own site?

Yes. One option is a local server at the plant with remote access over VPN. The exact set-up is chosen to suit your requirements.

Next step

How do you hand equipment over to maintenance today?

We will walk through your current process with you, from the request through isolation of each medium to return to service, and suggest what is worth digitalising first.