Twelve Workers on One Job: How the “Last Lock” Principle Keeps Everyone Accounted For

A production line goes down for a major overhaul. Twelve people are involved: four mechanics, three electricians, two instrumentation technicians, plus three contractors and one safety officer.

Twelve people, seven isolation points of various kinds, each starting and finishing at different times. Making sure that not one of them is still inside when the power comes back on is not achieved by reminding each other. It takes a hardware mechanism designed for many people working together.

The Single-Person Method Does Not Scale

The logic of single-person lockout is simple. One person, one padlock, applied to the real isolation point. Do the work, verify, remove the lock, restore energy. The entire loop closes within one individual, with no coordination required.

Apply that logic to twelve people and it collapses immediately. If everyone locks at whatever point they believe is correct, nobody knows where the others locked. If only one person applies a lock, the other eleven are exposed to that person’s mistake. If they share one padlock, the first person to leave takes everyone’s protection with them.

Group lockout needs a mechanism in which twelve protections exist simultaneously, remain effective simultaneously, and release simultaneously only when all twelve agree.

Mechanism One: The Hasp Turns One Point into a Lock Station

A hasp is a hinged device with multiple holes. It clamps onto the isolation point and by itself holds the device in the off position. Its value lies in those holes — four, six, twelve, or more — each holding one worker’s personal padlock.

Twelve people, twelve padlocks on the same hasp. As long as any one lock remains, the hasp cannot be opened, the isolation device cannot be operated, and energy cannot be restored.

This is the “last lock” principle: the last person to leave the area removes the last padlock, and only then may the machine be energized. In sequence, whoever finishes first removes their own lock without waiting for anyone else. But as long as anyone has not removed theirs, the machine stays absolutely safe.

Mechanism Two: The Lock Box Centralizes the Keys

When there are many isolation points, spread over a wide area, and more people, a hasp is not enough — you cannot have twenty people crowd around one distribution cabinet.

The lock box offers a different architecture. The coordinator goes through every isolation point, de-energizes and locks each one, then places all the isolation keys inside the box and closes it. From that point, every worker hangs their personal padlock on the box.

The logic becomes: the isolation keys are in the box, the box is secured by twelve personal locks, and to get the keys out you must wait until all twelve locks are gone. Everyone must agree before the keys come out, before any isolation point can be unlocked, before energy can be restored.

The lock box suits many points and many people; the hasp suits one point or a few, with people concentrated in one area. The two can be used together.

The Coordinator: Command Authority, Not Removal Authority

Group lockout requires a designated coordinator. They confirm the isolation point list, supervise the order of application, organize the personnel count, lead the pre-removal confirmation, and sign off at the end.

But there is a hard line around the coordinator’s authority: they have no right to remove anyone else’s padlock.

That line gets crossed regularly. The classic scene is the coordinator checking the time, deciding everyone must be out by now, and reaching for someone else’s lock. This is the same error as the removal incidents described earlier — substituting judgment for confirmation, and letting management authority encroach on the right to life.

The coordinator’s job is to make sure every padlock is removed by the hand that put it there, not to make padlocks disappear.

The Complete Removal Sequence

Removal in group lockout differs from the single-person version in several key ways.

Once the work is finished, the work area inspection and the equipment condition check come first — the same as for single-person lockout. Then the differences begin. The personnel count is organized centrally by the coordinator, confirming each person individually, including the ones in places you cannot see. Notification is a two-way closed loop: the coordinator sends the message that energy is about to be restored, and confirms that it has been received.

Once confirmed, each worker removes their own padlock — personally, never through someone else. Only when all are gone does the coordinator open the hasp or the lock box, take out the isolation keys, release each isolation point one by one, and finally give the instruction to restore power.

Everything is recorded: the list of participants, each person’s lock number, application time, removal time, and the coordinator’s signature.