A sticker on a machine panel is not a safety measure. It is an admission that everything else has already failed.
That is the blunt message running through industry guidance and specialist analysis on machinery safety, which places warnings, manuals and training at the very bottom of a formal hierarchy of controls — behind inherently safe design and behind physical guarding. The order matters, the guidance stresses, because a warning label outsources responsibility to human behaviour instead of removing the hazard at its source.
Design first, guards second, paperwork third
Under the principle of inherently safe design, hazards are supposed to be eliminated from the outset — by making manual intervention technically unnecessary during operation, or by limiting forces and speeds through engineering rather than instruction.
Only where risks cannot be fully ruled out at that level does the second tier apply: technical protective devices such as safety doors, mechanical interlocks or light curtains. Administrative measures — warnings and written instructions among them — sit third in the chain.
In real-world industrial practice, that sequence is routinely turned upside down. Retrofitting existing designs tends to be expensive, and tight
The same principle applies to your broader safety paperwork. If warnings and instructions are meant to sit at the bottom of the hierarchy of controls, your risk assessments need to actually document the higher-level measures — guarding, interlocks, isolation — not just the labels. A free toolkit gives you ready-to-use templates and checklists so every hazard is recorded against the right control. Download the free Risk Assessment Toolkit
Specialists point out that safety and productivity need not conflict. When guards are ergonomically awkward to operate, the risk rises that workers will tamper with or disable them. Safety mechanisms that are easy to reach and quick to reset, by contrast, help keep output stable.
A stopped machine is not a safe machine
One widespread misconception on the shop floor is that a machine at standstill is automatically safe. Even after shutdown, stored residual energy poses serious hazards — compressed air, mechanical tension in springs, raised weights, or the rotational inertia of components still coasting down. Add the risk of a sudden restart triggered by a responding sensor or a faulty operation elsewhere.
The real causes of accidents usually take shape long before the moment of the incident. Specifications frequently fail to state how blockages or material jams are to be cleared safely in the first place.
When design reviews look only at hazards during normal automatic operation, maintenance and setup work goes unconsidered. Commissioning, too, is often carried out only by particularly experienced specialists, while recurring faults in later routine operation get fixed on the spot without any feedback reaching the design department.
Workers frequently intervene in equipment on their own initiative because a stoppage blocks downstream processes and clearing the fault looks simple. Where such a move has previously gone without incident several times, and in-house maintenance is perceived as too slow, a dangerous exception quickly hardens into everyday routine.
Safe machinery must therefore be built to deliver effective protection even under time pressure, fatigue, inexperience or the onset of familiarity.
Physical barriers and the discipline of lockout
To control risks systematically, international standards rely on physical separation and defined shutdown procedures. Fixed guards may only be opened or removed with a special tool, and the fastening elements must remain attached to the component.
For movable guards, safety engineering distinguishes between a plain interlock, which monitors the switch position and stops hazardous movements, and an additional guard locking device. The latter keeps the door mechanically locked for as long as hazards persist from run-on movements.
For maintenance and cleaning work, procedures such as Lockout/Tagout (LOTO) require complete physical isolation and securing of all energy sources.
Alongside disconnection and the attachment of personal padlocks to the main switches, this always includes the controlled release of any remaining mechanical, pneumatic or hydraulic energy. Only once those barriers are in place can supplementary warning markings fulfil their supporting role in day-to-day work.
Lockout/Tagout only works if everyone follows the same written procedure — and that procedure has to be backed by the right documentation. A free Health & Safety Toolkit covers isolation, maintenance and machinery-safety checks with templates mapped to UK requirements like PUWER, so your LOTO discipline stands up to scrutiny. Get the free Health & Safety Toolkit
