Safe maintenance: LMRA, LOTO and permits to work

Maintenance means working outside the normal situation. You open equipment that is normally closed, bypass safeguards that are normally active and enter areas where nobody should be during production. That is why a disproportionate share of serious workplace accidents happens during maintenance — and why three proven layers of protection exist: the permit to work, lockout-tagout (LOTO) and the LMRA. This article explains what each layer does, how they fit together and which mistakes show up most often in practice.

Why maintenance work carries extra risk

During normal operation a machine is predictable: guards are in place, procedures are routine and the installation does what it does every day. Maintenance removes that predictability. Three factors make the work more dangerous than it looks:

• You deviate from normal operation. Standard procedures and safeguards are designed for production, not for a technician with their hands inside the machine.
• You open up equipment. Behind a panel or flange there can be rotating parts, hot media, chemicals or live voltage.
• Energy sources remain present. A machine that is "off" can still hold electrical, hydraulic, pneumatic or mechanical energy — think of a loaded spring or a pressurised line.

The European Agency for Safety and Health at Work covers these hazards extensively, from machine safety to confined spaces. The common thread: you don't control maintenance risk with a single measure, but with multiple layers that cover each other's gaps.

LMRA: the final check at the workplace

The Last Minute Risk Analysis (LMRA) is a short, personal safety check you carry out at the workplace itself, right before you start. Not a ten-page form, but a deliberate pause. You answer three core questions:

1. 1Do I understand the job? Do I know exactly which task I'm about to perform, in what order, and with which tools?
2. 2Are the hazards under control? Are the risks I can see here and now — not just the ones on paper — covered by measures that actually work?
3. 3Can I start without danger? Is the environment in order, does the situation match what I expected, and am I confident to begin?

If the answer to any question is "no" or "I'm not sure", you don't start. You fix the issue first or consult your supervisor.

Important: the LMRA is a supplement to the task risk analysis (TRA), not a replacement. The TRA is prepared in advance, at the desk, and describes the risks of the task in general. The LMRA catches what the TRA cannot see: the actual situation at the workplace. A leak that wasn't there yesterday, a colleague unexpectedly working on the same installation, scaffolding positioned differently. You perform an LMRA at the start of every job, and again whenever the situation changes — after a break, in different weather, or when the work turns out differently than planned.

LOTO: verifiably isolating energy sources

Lockout-tagout (LOTO) is the technique that prevents equipment from starting or releasing energy unexpectedly while someone is working on it. The principle: every energy source is physically locked and labelled, so nobody can re-energise it by accident — or on purpose. The basic steps:

1. 1Identify all energy sources. Electrical, hydraulic, pneumatic, thermal, mechanical, chemical — and don't forget gravity (a raised load or cylinder).
2. 2Shut down. Stop the installation using the prescribed procedure.
3. 3Lock out. Place a physical lock on the switch, valve or plug. Everyone working on the installation attaches their own lock.
4. 4Tag out. Give every lock a tag stating who placed it, why and when.
5. 5Release stored energy. Relieve pressure, discharge capacitors, let hot parts cool down, mechanically secure moving parts.
6. 6Verify. Try to start the installation. If nothing happens, you know the isolation works. This "try-out" step is what separates assuming from knowing.

The golden rule: only the person who placed a lock may remove it. That way nobody can release an installation while a colleague is still working on it.

Permits to work: organising high-risk work in advance

For work with elevated risk, an LMRA and LOTO alone are not enough — you want to organise the work formally in advance with a permit to work. Typical situations:

• Hot work: welding, grinding or cutting in an environment with fire risk
• Confined spaces: tanks, pits, pipelines — with risk of asphyxiation or intoxication
• Working at height: roofs, scaffolding, aerial platforms
• Electrical work: on or near live installations

A permit records what exactly will happen (description, location, time window), which risks apply, which measures must be in place before the start (gas measurement, fire watch, LOTO applied), which personal protective equipment is required and how the work is signed off. The division of roles is crucial: the applicant (often the executing party or technician) describes the work, while the issuer (the installation owner or operations) assesses whether the installation is ready and releases it. That separation is deliberate: the person who wants to do the work does not approve their own conditions. National regulators publish practical guidance too — in the Netherlands, the government's Arboportaal covers confined spaces, machine safety and more.

Three layers that complement each other

The strength lies in the combination, each at its own moment and level:

• The permit to work organises the job in advance and on paper: is this work allowed, under which conditions, and who is responsible?
• LOTO handles the technical side: the installation physically cannot deliver energy any more.
• The LMRA is the final human check at the workplace: does reality match the plan?

If one layer fails — a permit that misses a risk, a forgotten energy source — another layer catches it. That is the idea behind layered safety and compliance: don't rely on one perfect measure, rely on several reasonable ones.

Digital records: from paper to proof

Many organisations still handle permits and LMRAs on paper or in scattered spreadsheets. That works, until an auditor or inspector asks: "Show me which permit belonged to this job." By linking permits, LOTO records and LMRAs to work orders and maintenance in one system, you gain three things:

• Demonstrability: for every work order you can trace who released and checked what, and when.
• Repeatability: for recurring maintenance, the right permit requirements and LOTO points are attached automatically next time.
• Insight: you see which tasks frequently lead to aborted LMRAs — valuable input for improving your TRAs.

To understand how such a system works, read our explanation of what a CMMS is.

Common mistakes

• Treating the LMRA as a tick-box exercise. Signing the card without looking around isn't an LMRA, it's a signature. The value is in the deliberate pause, not the paperwork.
• Skipping LOTO for "just a quick fix". Short jobs — adjusting a sensor, clearing a blockage — cause serious accidents precisely because the installation was never isolated. Two minutes of work deserves the same locks as two days of work.
• The permit as after-the-fact paperwork. A permit filled in after the work has already started protects nobody. Release comes before the first action.
• Forgetting stored energy. "Power off" is not the same as safe: pressure, heat and gravity remain if you only lock the main switch.