Environmental Professional Systems Auditor (EPSA)

Correct: Under 29 CFR 1910.333(a)(1), live parts to which an employee might be exposed must be de-energized before the employee works on or near them. The only exceptions allowed are when the employer can prove that de-energizing introduces additional or increased hazards, such as deactivating life support equipment, or is technically infeasible due to equipment design or operational limitations.

Incorrect: Relying on personal protective equipment while working live fails to follow the mandatory hierarchy of controls which prioritizes elimination of the hazard through de-energization. The strategy of allowing live work based solely on the technician’s training status ignores the regulatory requirement to prioritize de-energization for all repair activities. Opting for live work to maintain production efficiency does not meet the legal definition of infeasibility under Subpart S. Choosing to apply de-energization rules only to systems over 600 volts is a misunderstanding of the standard, as the requirement generally applies to any equipment operating at 50 volts or more.

Takeaway: OSHA requires de-energizing electrical equipment for maintenance unless it creates a greater hazard or is technically infeasible.

Correct: Under OSHA Standard 29 CFR 1910.147, if an energy-isolating device is capable of being locked out, the employer’s energy control program must utilize lockout. This ensures a physical restraint is placed on the energy-isolating device to prevent the machine or equipment from becoming energized, which is the primary method of protection for employees performing servicing or maintenance.

Incorrect: Relying solely on closing a valve without a mechanical lock fails to provide the positive protection required to prevent accidental re-energization by other personnel. The strategy of using tags as a default substitute is only permitted if the device is not capable of being locked or if the employer can demonstrate that the tagout program provides a level of safety equivalent to a lockout program. Focusing only on the primary electrical source ignores the significant hazards posed by stored pneumatic and hydraulic energy which must also be isolated. Choosing to skip isolation based on the specific nature of the task, such as not removing hoses, violates the requirement to control all hazardous energy sources before any servicing begins.

Takeaway: All energy-isolating devices capable of being locked must be secured with a lockout device to ensure full employee protection during servicing tasks.

Correct: Performing an incident energy analysis is the most robust method because it uses actual system data to calculate the potential thermal energy of an arc flash. This allows the employer to establish precise arc flash boundaries and select PPE that matches the specific risk. This approach aligns with NFPA 70E standards, which OSHA recognizes as a primary reference for meeting the requirements of 29 CFR 1910.333.

Incorrect: Utilizing task-based tables without verifying system parameters is risky because the tables are only valid within specific technical limits regarding fault current and clearing speed. Requiring maximum PPE for every task can lead to secondary hazards like heat exhaustion or reduced visibility and does not define necessary safety boundaries. Opting for hazard levels based on equipment age is an unreliable metric that ignores the electrical physics of fault current and clearing times.

Takeaway: Effective arc flash mitigation requires calculating incident energy based on specific system parameters to ensure appropriate PPE and boundary distances.

Correct: Under 29 CFR 1910.212, OSHA requires that employers provide one or more methods of machine guarding to protect employees from hazards created by the point of operation, ingoing nip points, rotating parts, flying chips, and sparks. The guarding must be designed and constructed to prevent the operator from having any part of their body in the danger zone during the operating cycle, ensuring a high level of physical protection that does not rely solely on worker behavior.

Incorrect: Relying on the age of the equipment as a reason to bypass guarding requirements is incorrect because OSHA standards apply to all machinery currently in operation regardless of its manufacture date. The strategy of designing guards for easy removal by hand is unsafe because guards should be permanent or require tools for removal to prevent unauthorized bypassing of safety features. Choosing to use Personal Protective Equipment as a primary substitute for physical guarding is a violation of the hierarchy of controls, which requires engineering controls like physical barriers to be implemented before relying on lower-level protections.

Takeaway: OSHA requires physical machine guarding to protect employees from mechanical hazards by preventing any part of the body from entering the danger zone.

Correct: Per 29 CFR 1910.147(c)(6)(i)(A), the periodic inspection must be performed by an authorized employee other than the one(s) utilizing the energy control procedure being inspected. This requirement ensures that the inspection provides an independent evaluation of the procedure’s adequacy and the employees’ compliance, helping to identify errors or shortcuts that the regular users might have developed over time.

Incorrect: The strategy of requiring executive management to perform technical inspections is not mandated by the standard, as the inspector must specifically be an authorized employee familiar with energy control. Relying solely on third-party consultants is a common misconception; while permitted, OSHA allows internal authorized personnel to conduct these reviews provided they are not the ones currently using the procedure. Choosing the person who originally developed the procedure to inspect it would violate the requirement for an independent review, as the standard specifically prohibits the employee currently utilizing the procedure from inspecting their own work.

Takeaway: OSHA requires periodic LOTO inspections to be performed annually by an authorized employee not currently using the procedure being inspected.

Correct: According to OSHA standard 29 CFR 1910.215, the work rest must be kept adjusted to a maximum distance of 1/8 inch from the wheel to prevent the workpiece from being jammed between the wheel and the rest. Additionally, the distance between the wheel periphery and the adjustable tongue guard must never exceed 1/4 inch to protect the operator from flying fragments in the event of wheel breakage.

Incorrect: Reversing the required distances for the work rest and tongue guard creates a significant hazard where the workpiece can slip between the rest and the wheel. Maintaining a uniform quarter-inch gap for both components fails to meet the stricter one-eighth-inch requirement for the work rest. Permitting the tongue guard to reach a half-inch clearance provides inadequate protection against the peripheral spray of sparks and debris during a mechanical failure.

Takeaway: Work rests must be within 1/8 inch and tongue guards within 1/4 inch of the grinding wheel.

Correct: Section 5(a)(1) of the OSH Act, the General Duty Clause, requires employers to provide a workplace free from recognized hazards that are causing or are likely to cause death or serious physical harm. For a citation to stand, OSHA must prove the hazard was recognized by the employer or the industry, the hazard was likely to cause serious harm, and there was a feasible and useful method to correct the hazard.

Incorrect: Relying on the existence of a documented injury in the OSHA 300 log is incorrect because the clause focuses on the potential for harm rather than waiting for an incident to occur. The strategy of requiring a written safety program within a specific timeframe is a requirement of certain specific standards but is not a foundational element for a General Duty Clause violation. Opting to link the citation only to National Emphasis Programs or specific industry codes ignores the fact that the General Duty Clause is a broad requirement applicable to all employers regardless of specific emphasis programs.

Takeaway: The General Duty Clause protects workers from recognized, serious hazards when no specific OSHA standard exists to address the risk.

Correct: Under OSHA standard 29 CFR 1910.132(d), the employer is required to assess the workplace to determine if hazards are present, or are likely to be present, which necessitate the use of PPE. This assessment must be verified through a written certification that identifies the workplace evaluated, the person certifying the evaluation, and the date of the hazard assessment.

Incorrect: Relying solely on the highest-rated equipment in a catalog fails to address the specific hazards identified through a site-specific analysis and may lead to over-protection that creates secondary hazards like heat stress. The strategy of using only the Safety Data Sheet is insufficient because it does not account for the unique environmental factors or specific task configurations present at the local facility. Opting to delegate the entire selection process to employees ignores the regulatory requirement that the employer must perform the assessment and select the equipment that properly fits each affected employee.

Takeaway: Employers must conduct and document a formal hazard assessment before selecting and implementing personal protective equipment in the workplace.

Correct: According to OSHA 1910.212(a)(3)(ii), the point of operation must be guarded by a device designed and constructed to prevent the operator from having any part of their body in the danger zone during the operating cycle. This ensures that physical contact with the moving blade is impossible while the machine is energized and performing its intended function.

Correct: According to OSHA 29 CFR 1910.211 and 1910.217, a guard is defined as a barrier that physically prevents the operator from reaching into the point of operation. A device is a mechanism that protects the operator by other means, such as sensing the operator’s presence and stopping the press, requiring the use of both hands on controls, or physically pulling the operator’s hands away from the danger zone during the downward stroke.

Incorrect: The strategy of classifying guards as temporary maintenance tools is incorrect because guards are primary safety features intended for use during normal production operations. Relying on the assumption that all guards must be electronically interlocked misinterprets the standards, as fixed guards are often simple physical barriers without electrical components. Focusing on guards as machine protection rather than operator protection fails to recognize the fundamental purpose of point-of-operation safeguarding required by federal safety regulations.

Takeaway: Guards provide a physical barrier to the point of operation, while devices interrupt the machine cycle or restrain the operator’s movement.

Correct: OSHA 1910.303(g)(2)(i) requires live parts of electric equipment operating at 50 volts or more to be guarded against accidental contact. This is achieved through approved cabinets, enclosures, or by limiting access to qualified persons.

Incorrect: Relying solely on warning signs is insufficient because signs do not provide a physical barrier to prevent accidental contact. The strategy of requiring PPE for all nearby staff is a secondary measure and does not replace the primary requirement for physical guarding. Focusing only on circuit interrupters is incorrect because these devices are not a substitute for physical guarding of high-voltage distribution components.

Takeaway: Live electrical parts 50 volts or higher must be guarded by enclosures, partitions, or restricted access to qualified personnel.

Correct: Section 5(a)(1) of the OSH Act, known as the General Duty Clause, requires employers to protect workers from recognized hazards that are likely to cause death or serious physical harm. This applies even when no specific OSHA standard exists for the particular hazard identified in the workplace.

Correct: Breaking the job into discrete steps allows for a granular analysis of specific risks associated with each movement or task. This systematic approach ensures that hidden hazards are identified and that the hierarchy of controls is applied to each specific risk rather than just addressing general site conditions.

Incorrect: Relying solely on historical data like OSHA 300 logs or supervisor interviews might miss new hazards inherent to the specific design of the new machinery. Simply assigning a numerical risk score to an entire department fails to identify the specific operational hazards encountered during individual task steps. Focusing only on a general site walk-around and PPE distribution ignores the fundamental JHA requirement to analyze the job process and prioritize elimination or engineering controls.

Takeaway: A Job Hazard Analysis requires breaking tasks into steps to systematically identify and mitigate specific hazards using the hierarchy of controls.

Correct: According to 29 CFR 1910.305(g)(1)(iv), flexible cords and cables may not be used as a substitute for the fixed wiring of a structure. Specifically, the standard prohibits routing these cords through holes in walls, ceilings, or floors, as this can lead to hidden damage of the insulation and increases fire risks.

Incorrect: The strategy of requiring all stationary equipment to be hard-wired ignores OSHA provisions that allow cord-and-plug connections for frequent interchange or maintenance access. Relying on a specific color-coding system for voltage identification is incorrect because OSHA does not mandate such a system for general industry flexible cords. Focusing only on a universal six-foot length limit is a misconception, as OSHA standards do not apply a blanket length restriction to all flexible cords used for stationary machinery in this manner.

Takeaway: OSHA prohibits using flexible cords as a substitute for fixed wiring, specifically forbidding them from passing through building openings like walls.

Correct: OSHA guidelines for incident investigation emphasize moving beyond individual fault to identify systemic failures. By examining organizational factors like training quality, equipment design, and management systems, employers can implement corrective actions that prevent recurrence. This approach addresses the root of the problem rather than just the immediate symptom of human error.

Incorrect: Relying solely on disciplinary measures fails to address the environmental or systemic conditions that may have encouraged the shortcut. Simply re-training the individual assumes the problem is isolated to one person’s knowledge rather than a potential flaw in the overall safety program. The strategy of peer evaluation focuses on blame and personality traits rather than identifying the process-related why behind the procedural deviation. Focusing only on documentation in the OSHA 301 form records the event but does not fulfill the analytical requirements of a root cause investigation.

Takeaway: Effective Root Cause Analysis identifies systemic organizational failures rather than stopping at individual human error or behavioral blame.

Correct: According to OSHA standard 1910.147(c)(5)(ii), lockout devices must be singularly identified and shall not be used for other purposes, such as locking toolboxes or lockers. This ensures that when a lock is seen on a piece of equipment, it is immediately recognized as a safety device intended to protect workers from hazardous energy.

Incorrect: The strategy of color-coding based on energy magnitude is a common industry practice but is not a mandatory OSHA requirement, as the standard only requires devices to be standardized within the facility by color, shape, or size. Requiring non-conductive materials for every device is an over-application of the rule, as this property is specifically critical for electrical hazards rather than mechanical or hydraulic energy. Opting for keyed-alike locks for emergency removal violates the principle that each authorized employee must have unique control over their own lockout device to prevent accidental re-energization while they are still working.

Takeaway: Lockout devices must be dedicated exclusively to energy control and be easily distinguishable from all other locks in the workplace.

Correct: Under 29 CFR 1910.305(a)(2)(i)(A), OSHA specifies that temporary electrical power and lighting wiring methods may be used during periods of construction, remodeling, maintenance, repair, or demolition of equipment or structures. The standard explicitly requires that such temporary wiring be removed immediately upon completion of the work for which the wiring was installed.

Incorrect: Relying on a 90-day limit is incorrect because that specific timeframe applies only to temporary wiring for decorative lighting, carnivals, and similar purposes, not for construction or repair work. The strategy of allowing indefinite use based on monthly inspections fails to recognize that temporary wiring is not designed for long-term durability or protection against environmental hazards. Opting for a fixed 60-day transition period is an arbitrary requirement not found in the standard, as the removal is tied to the completion of the task rather than a specific number of days.

Takeaway: Temporary wiring for construction or repair must be removed immediately after the specific project or task is finished.

Correct: Reviewing historical data such as OSHA 300 logs and incident reports allows the inspector to identify specific areas or machines where injuries are recurring. By combining this data with employee interviews, the manager can uncover why workers might be bypassing guards or where training is insufficient, which addresses the behavioral and systemic roots of hazards rather than just the physical state of the equipment.

Incorrect: The strategy of conducting inspections only during maintenance shutdowns prevents the auditor from seeing how machines are actually operated during production, which is when most injuries occur. Relying solely on generic checklists often leads to a ‘compliance-only’ mindset that misses site-specific hazards or subtle operational risks. Choosing to provide significant advance notice to supervisors can result in a temporary ‘polishing’ of the workspace that does not reflect the true daily safety culture or typical working conditions.

Takeaway: Effective workplace audits must integrate historical record analysis with active employee interviews to uncover systemic failures and behavioral risks.

Correct: Substitution is a preferred method in the Hierarchy of Controls because it removes the original hazard from the workplace. However, OSHA and NIOSH emphasize that a substitute must be carefully evaluated to avoid ‘regrettable substitution,’ where a new substance introduces different but equally serious physical or health hazards. A thorough assessment ensures that the overall risk to employees is truly reduced rather than simply shifted to a different type of exposure.

Incorrect: Relying solely on the existing respiratory protection program fails to prioritize the higher-level control of hazard reduction and assumes that PPE is the primary solution. Focusing only on the administrative ease of updating Hazard Communication records prioritizes documentation over the actual physical safety of the workers. Choosing to prioritize disposal costs and waste profiles addresses environmental and financial concerns but does not directly address the primary goal of reducing worker exposure to occupational hazards.

Takeaway: Effective substitution requires a comprehensive hazard assessment to ensure the replacement does not introduce new, unforeseen risks to worker health.

Correct: Under OSHA General Industry standards, a travel restraint system is designed to prevent a worker from reaching a fall hazard. By strictly limiting the lanyard length so it is shorter than the distance to the edge, the worker is physically barred from the danger zone.

Incorrect: Integrating a shock-absorbing lanyard is a specific requirement for fall arrest systems intended to stop a fall in progress rather than preventing access to the edge. Requiring an anchor point to support 5,000 pounds is the standard for fall arrest systems, whereas restraint systems typically require lower capacities. Relying on a self-retracting lifeline that locks upon acceleration describes a fall arrest mechanism which allows the worker to reach and fall over the edge before stopping.

Takeaway: A travel restraint system must be configured to physically prevent a worker from reaching any unprotected edge or fall hazard.