The LOTO Evidence Gap

A lockout/tagout program is only as strong as the evidence it leaves behind.

The 2025 records show a consistent pattern: employers were not only cited because a lock was missing or an isolation point was uncontrolled. Again and again, the issue was proof. Could the employer show that the correct procedure existed, was current, was assigned to the right people, was used on the right equipment, was verified at the point of work, closed out, and inspected on schedule?

That is the LOTO Evidence Gap.

The gap matters because LOTO is proven in the field, not in the binder. The most cited single requirement in 2025 was the energy-control procedure itself. The largest operational failure pattern was a missing, generic, or outdated procedure. The second was execution: a procedure that existed but was not demonstrably followed at the point of work.

When the records were classified by the specific evidence an inspector appeared unable to find, procedure and execution evidence gaps together accounted for 62.9% of the narrative-classified records.

This report maps where those gaps appeared and turns them into a practical framework: the Five LOTO Evidence Controls that safety leaders can audit against.

This report covers the FY2025 dataset - OSHA lockout/tagout citations issued from October 1, 2024 through September 30, 2025. It uses two analytical scopes, and keeping them distinct is essential to reading the findings correctly.

The structured metadata - clause, penalty, industry, state, and citation type - is available for all 4,771 records. The written narrative is not. It comes reliably only from federal OSHA and Illinois state-plan citations, so the failure-pattern and evidence-gap analysis is based on those 2,095 records. Penalty figures are the amounts published as of the data snapshot and can still change after contests, settlements, corrections, or final orders. Full detail is in the Methodology and Limitations sections.

The full 2025 benchmark establishes the scale of lockout/tagout enforcement under 29 CFR 1910.147.

On average, 2025 lockout/tagout inspections that produced a citation produced more than one citation record, consistent with the way energy-control deficiencies tend to cluster. A missing procedure is frequently accompanied by missing training and a missing periodic inspection on the same inspection.

Citation type and case mix

• Serious, 3,658 records. A condition OSHA judged capable of causing death or serious physical harm.
• Other-than-serious, 939 records. Conditions related to the standard but judged less likely to cause serious harm.
• Repeat, 156 records. Citations for substantially similar conditions previously cited.
• Willful, 18 records. The most serious classification, reserved for intentional disregard or plain indifference.

The case mix matters for compliance readers: the predominance of serious classifications indicates these are not paperwork technicalities. They reflect conditions tied to the actual control of hazardous energy on operating equipment.

The 1910.147 standard is long, but 2025 enforcement concentrated in a few requirement areas. Grouping the cited subsections makes the pattern legible.

Procedures, training, and periodic inspections accounted for 71.5% of citation records: three controllable program areas driving roughly seven of every ten 2025 lockout/tagout citation records.

Most cited 1910.147 subsections

These are the individual regulation subsections that make up the grouped areas above; the chart shows the ten most cited.

• 1910.147(c)(4)(i), 1,066 records. Energy-control procedures must be developed, documented, and used. The single most cited lockout/tagout requirement in 2025.
• 1910.147(c)(6)(i), 725 records. The employer must conduct a periodic inspection of each energy-control procedure at least annually.
• 1910.147(c)(1), 525 records. The employer must establish an energy-control program.

Together these point to a consistent enforcement reality: employers were most often cited for the control structure around energy isolation (the documented procedure, the proof people were trained, and the proof the procedure was reviewed) rather than for the physical isolation hardware itself.

2025 lockout/tagout citation records cluster heavily in manufacturing and adjacent process industries, sectors with high densities of powered equipment, conveyors, presses, and maintenance-intensive lines.

The leading industry groups by citation records were General Manufacturing, Fabricated Metal / Machinery, Food & Beverage, and Plastics & Rubber.

Manufacturing. Manufacturing-related sectors carried the largest concentration of 2025 records. These are environments where multiple energy sources (electrical, pneumatic, hydraulic, stored mechanical) converge on the same equipment, and where maintenance and clearing tasks routinely require de-energization. See manufacturing LOTO software.

Food and beverage. Food and beverage operations, among them commercial bakeries, cheese manufacturing, and miscellaneous food manufacturing, featured prominently. Sanitation and clearing tasks on conveyors, mixers, and packaging lines are classic lockout/tagout exposure points, often performed under time pressure across shifts. See food and beverage LOTO workflows.

Heavy and process industry. Plastics and rubber product manufacturing, machine shops, sawmills, and wood container/pallet manufacturing also appeared near the top of the dataset, sectors that combine high equipment counts with frequent maintenance interventions.

The figures below show where 2025 lockout/tagout citation records and current published penalties concentrated.

State totals reflect a combination of industrial base, inspection activity, and jurisdiction type. 2025 enforcement spans federal OSHA and 27 state-plan jurisdictions, and state plans differ in inspection priorities, reporting, and penalty structures. State data is useful for local benchmarking and editorial hooks, but should not be interpreted as a ranking of state safety performance. The geographic distribution broadly tracks where manufacturing and process industry is concentrated.

So far the benchmark has told us which OSHA requirements were cited most often. That tells us the rule that was broken, but not the story behind it. To understand what actually went wrong on the floor, we read the inspectors' written citation narratives and sorted each one into one of ten lockout/tagout failure categories. The chart below shows how the 2,095 narrative records break down.

The remaining categories (group control, hardware, contractor coordination, verification, and handover) each accounted for under 3% individually but represent specific, high-consequence operational gaps when they appear.

• Procedure failure (652). No procedure, a generic rather than machine-specific procedure, or a procedure that no longer matched the equipment.
• Execution failure (390). A procedure existed but was not followed correctly in the field: energy not fully isolated, steps skipped, or the posted procedure not used.
• Training failure (386). Authorized or affected employees could not demonstrate required knowledge, or training records did not support the work performed.
• Inspection failure (309). The required periodic inspection of the energy-control procedure was missing or could not be evidenced.

Critical-severity records, those where an injury is described, were a small share (58 of 2,095, 2.8%) but concentrated in execution failure and procedure failure, consistent with the intuition that the most dangerous gap is the one between a procedure on paper and what happens at the machine.

The same records can be read a second way. The failure categories above describe what went wrong; the Evidence Gap Index instead sorts each record by the specific proof the inspector could not find. Because one citation can involve more than one missing proof, these counts are grouped differently from the failure categories and do not match one-to-one.

Procedure and execution evidence gaps together accounted for 62.9% of the narrative-classified records. Two-thirds of the proof problems in 2025 narratives were of one of two kinds: no current, machine-specific written procedure the employer could produce, and no record or observable signal that the correct procedure was applied by the right people, to the right isolation points, with verification of zero energy.

This is the operational shape of the LOTO Evidence Gap: the proof most often absent was not the lock, but the documentation that the right procedure was followed and reviewed.

The pattern across the citations is consistent: employers were cited when they could not produce a specific piece of proof. We have translated that pattern into five evidence controls. Each one is a type of proof that was repeatedly missing in the records, and each can be checked on site by an EHS leader, consultant, or auditor. The number beside each control is how often that proof was the gap across the records reviewed (n=2,095).

1. 1
   Stage · Procedure

   Current machine-specific procedure

   A documented energy-control procedure tied to the specific asset, kept current as the equipment changes. The largest single gap we found in the data.

   862

   Procedure evidence gap
2. 2
   Stage · Training

   Authorized worker training record

   A record linking a named, authorized employee to the specific energy-control knowledge the task requires. Not just that training was delivered, but that the right person held it.

   385

   Training evidence gap
3. 3
   Stage · Field execution

   Field execution / sign-on record

   Evidence that the procedure was actually applied at the machine: who performed it, which isolation points were controlled, and when. This was the second-largest gap.

   455

   Execution evidence gap
4. 4
   Stage · Verification

   Isolation & zero-energy verification evidence

   A record that zero energy was verified before work began. This is the verification step at the heart of the standard, and the point at which execution failures most often became dangerous.

   Verification

   cross-cutting control
5. 5
   Stage · Closeout & inspection

   Closeout, handover & periodic inspection record

   Evidence that equipment was released, restarted, and handed over across shifts in a controlled, recorded way, and that the required periodic inspection was performed. An undocumented inspection reads, to an inspector, as no inspection.

   309

   Inspection evidence gap

Gap counts are 2025 evidence-gap records (narrative-classified, n=2,095).

These five controls are the practical answer to the LOTO Evidence Gap: they convert a paper program into auditable proof. A program that can produce all five can answer the question the 2025 data keeps posing. Not "do you have a procedure," but "can you prove the right one was used, verified, and reviewed."

The framework converts into a short site-walk checklist. None of these require buying anything; they require controlling the full lockout/tagout lifecycle and being able to evidence it.

1. Keep procedures machine-specific and current. Tie each procedure to a specific asset and review it when the equipment changes. Where binders are hard to keep current, lockout tagout procedure software keeps the procedure attached to the asset.
2. Evidence training, don't just deliver it. Keep records that link a named, authorized employee to the specific energy-control knowledge the task requires.
3. Evidence the periodic inspection. The at-least-annual inspection of each procedure must be performed and recorded.
4. Prove field execution. Keep a record of who applied the procedure, which isolation points were controlled, and when zero energy was verified.
5. Document the full lifecycle where relevant. Sign-on, verification, temporary removal, closeout, and shift handover are exactly the points where group lockout and multi-shift work break down.

In summary: 2025 enforcement rewarded employers who could prove control, not just claim it.

The 2025 citations tell a clear story: they were not mainly about missing hardware. Across 4,771 OSHA/DOL citation records and roughly $21.9M in current published penalties, the recurring issue was missing proof.

Procedures, training, and periodic inspections accounted for 71.5% of citation records. In the narrative-classified records, procedure and execution evidence gaps together accounted for 62.9%. Again and again, the question was not simply whether a procedure existed. It was whether the employer could prove the correct procedure was current, used by the right people, verified at zero energy, closed out, and inspected on schedule.

That is the LOTO Evidence Gap. It turns lockout/tagout from a paperwork question into an evidence question. The practical answer is the Five LOTO Evidence Controls: current machine-specific procedures, authorized worker training records, field execution and sign-on records, isolation and zero-energy verification evidence, and periodic inspection, closeout, and handover records.

For safety leaders, the takeaway is simple: a defensible LOTO program is not the one that looks complete in a binder. It is the one that can prove control at the machine.

FY2025 OSHA enforcement records (citations issued October 1, 2024 through September 30, 2025) were obtained from the U.S. Department of Labor Open Data API and supplemented with narrative descriptions from public OSHA violation-detail pages. All figures reflect a May 6, 2026 DOL API snapshot. All FY2025 citations under 29 CFR 1910.147 are included, spanning federal OSHA and 27 state-plan jurisdictions; narrative-dependent classification covers the federal OSHA subset and the Illinois state plan (2,095 of 4,771 records).

Each record's failure category and evidence-gap type are assigned by a deterministic, published clause-to-category rule, validated against an independent human read. Severity is judged separately. The full classification code, rules, and rubric are published in the project repository. Penalty figures are current published penalties as of the snapshot and may change after contests, settlements, corrections, or final-order updates.

• One year only. This is FY2025 data. It is not a trend study, and no multi-year direction should be inferred from it.
• Narrative coverage. Failure-pattern and evidence-gap findings draw on the 2,095 narrative-classified records. Roughly 60% of FY2025 citations (state-plan rows outside Illinois) lack a reliably available narrative and are excluded from narrative-dependent analysis.
• Penalty status. Penalty figures are current published penalties and may change after contests, settlements, corrections, or final-order updates.
• No state rankings. State totals reflect industrial base, inspection activity, and jurisdiction type, not relative employer risk.
• Evidence Gap Index is Zentri's classification. It describes what type of audit evidence appeared missing or insufficient based on available narratives; it is not an OSHA classification.
• No prevention claim. Nothing in this report should be read as a claim that any software prevents OSHA citations.
• Not complete enforcement coverage. This is the set of FY2025 public OSHA/DOL 1910.147 citation records available in the May 6, 2026 snapshot; it is not asserted to equal all OSHA lockout/tagout enforcement activity.
• Citation, not violation. This report counts and discusses citation records in the public enforcement data.

This report is free to read, cite, and share. For a formatted copy to save, print, or circulate internally, download the full PDF.

Want to see how your site measures up? Run the LOTO Audit Readiness Checklist - a one-page self-audit built on the five evidence controls in this report. Questions or press: hello@zentri.cc.

Zentri builds digital lockout/tagout software for manufacturing and process industries. The platform connects machine-specific procedures, training and sign-on records, isolation-point control, verification, periodic inspection, and closeout into a single auditable record, so the proof an inspector asks for is captured as the work happens, not reconstructed afterward.

The 2025 data is consistent on one point: most lockout/tagout enforcement is not about the absence of a lock. It is about the inability to prove the right procedure was current, followed, verified, reviewed, and closed out. Closing that gap is what Zentri is built to do.

Sam Nugent, a co-founder of Zentri, is a chemical engineer who has worked across a range of industrial settings. He led the research behind this report - assembling the enforcement records and building the failure-category and evidence-gap classification at the heart of the LOTO Evidence Gap.

Matthew Nugent, also a co-founder of Zentri, is a chemical engineer. His work across multiple industries kept showing the same thing: a lockout/tagout program can look sound on paper yet still be impossible to prove at the machine. He led the analysis behind the findings presented here.

"We published this because the data answers a question safety leaders actually ask: where does lockout/tagout enforcement concentrate, and what proof was missing when employers were cited? The answer was evidence, not hardware."