Category: Machine Safety & Compliance

  • Machine Guarding Compliance for Australian Manufacturers: A Practical Guide

    Machine Guarding Compliance for Australian Manufacturers: A Practical Guide

    Guarding Is Where Machine Safety Becomes Visible

    Walk through any production plant and the guards tell you a great deal. Guards that fit, close properly and are in place suggest a site that takes machinery seriously. Guards propped open, cable tied back, missing fasteners or stored in a corner tell a different story, usually about a machine that jams and a guard that gets in the way of clearing it.

    This guide explains what Australian law and standards require of machine guarding, the types of guard and where each belongs, why guards get defeated and a point that catches many manufacturers out: what happens to your legal position when you modify a machine.

    What the Law Requires

    In Queensland the requirements sit in the Work Health and Safety Regulation 2011 and are explained in the Managing the risks of plant in the workplace Code of Practice 2021. Section 208 of the regulation deals specifically with guarding and sets an order of preference for the type of guard to be used.

    A permanently fixed physical barrier where access to the guarded area is not needed during operation, maintenance or cleaning.

    An interlocked physical barrier where access is needed. It prevents access while the area is hazardous and allows it when the risk has been removed.

    A physical barrier that can only be altered or removed using a tool where neither of the first two is reasonably practicable.

    A presence sensing safeguarding system where a physical barrier is not reasonably practicable. This is equipment such as a light curtain that detects a person and stops the hazard before they reach it.

    The regulation also sets requirements for the guard itself. It must be of solid construction and securely mounted so as to resist impact or shock. It must make bypassing or disabling the guarding as difficult as is reasonably practicable. It must not create a risk in itself. It must be properly maintained. And where a guard can be removed for maintenance or cleaning, the plant must not be able to be restarted until the guard is replaced.

    The Standards Behind the Law

    The detailed engineering guidance is in the AS/NZS 4024 Safety of Machinery series. It is a large series, and a handful of parts do most of the work for guarding.

    AS/NZS 4024.1100 is the application guide and the place to start.

    AS/NZS 4024.1201 covers risk assessment and risk reduction, which determines what guarding a machine needs.

    AS/NZS 4024.1601 covers the design and construction of fixed and movable guards.

    AS/NZS 4024.1602 covers interlocking devices associated with guards.

    AS 4024.1603 covers prevention of unexpected start-up.

    AS/NZS 4024.1604 covers emergency stop principles.

    AS/NZS 4024.1801 gives safety distances to prevent upper and lower limbs reaching danger zones.

    AS/NZS 4024.1803 gives minimum gaps to avoid crushing parts of the body.

    Where a guard depends on a control system, as an interlock or a light curtain does, the reliability of that system matters as much as the barrier. ISO 13849 is the standard used to determine and achieve the performance level a safety function requires.

    Choosing the Right Guard

    The order of preference in the regulation maps directly to how often people need to get in.

    If nobody needs access during normal running, cleaning or routine maintenance, fix the guard permanently.

    If people need regular access, to clear a jam, change a reel or clean, use an interlocked guard. Opening it stops the hazard, and the machine cannot run until it is closed.

    If access is occasional and an interlock is not practicable, a guard that needs a tool to remove is acceptable, on the understanding that removing it is a maintenance task carried out under isolation.

    Presence sensing devices suit openings where product has to pass or where a physical barrier would make the machine unworkable. They demand careful design. The device has to be far enough from the hazard that the machine stops before a person can reach it, which means the stopping time has to be measured.

    The reach distances and gap sizes in the 4024 series exist because a guard with an opening is only safe if a hand or finger passing through it cannot reach the hazard. A mesh guard with apertures too large for its distance from a nip point looks compliant and is not.

    Why Guards Get Defeated

    Operators rarely defeat a guard out of carelessness. They do it because the guard makes the job harder than it needs to be. The common reasons are consistent across plants.

    The machine jams often, and opening an interlocked guard triggers a slow restart. The guard blocks the view of something the operator needs to see. Cleaning requires removing a guard that takes ten minutes and a spanner. The interlock switch is unreliable and causes false stops. The guard was added after the machine was built and does not fit the way the machine is actually used.

    The regulation’s requirement that bypassing be made as difficult as reasonably practicable is one answer: coded interlock switches in place of simple ones, fasteners that stay with the guard, and switches positioned where they cannot be reached with a spare actuator. The better answer is to remove the reason. Fix the jam. Add a viewing window. Design the guard to open without tools where cleaning is frequent, with an interlock. A guard that suits the task does not get defeated.

    Guarding in Food and Beverage Plants

    Hygiene and safety can pull in different directions. A fully enclosed guard is safe and hard to clean. An open design is easy to clean and exposes the hazard. Good guarding for food plants resolves this by design: stainless construction, sloped surfaces that shed water, no ledges or hollow sections where product collects, hinged or lift off panels with interlocks for frequent cleaning access, and interlock devices rated for washdown.

    Conveyors deserve particular attention. Nip points at transfers, tail drums and return rollers are among the most common sources of injury in packaging halls, and they are often left unguarded because they are low, numerous and awkward.

    Modifying a Machine Changes Your Position

    This is the point most often missed. Manufacturing plants modify machines constantly: a guard is cut back to fit a new conveyor, a section is extended, a machine is speeded up, two machines are joined, an imported machine is adapted to local product.

    Under work health and safety law, designers and manufacturers of plant carry specific duties to ensure it is safe. The Queensland code of practice makes clear that when plant is altered, the person making the alteration takes on the duties of a designer or manufacturer for that alteration. A plant that modifies its own machine, or engages someone to do it, has stepped into that role.

    The practical consequences are these. A modification needs a risk assessment before it is made, not after. Guarding and safety functions affected by the change need to be redesigned and validated. The work should be documented with drawings, the assessment and test records. And the original manufacturer’s compliance no longer covers the altered parts.

    The same thinking applies to second hand and imported machinery. Suppliers have duties, but a machine built for another market may not meet Australian expectations for guarding, and the plant that installs it should assess it before it runs.

    A Guarding Audit in Seven Checks

    Walk each machine and ask. Is every hazard that a person can reach guarded? Is each guard the right type for how often access is needed? Are guards intact, secured and free of damage? Do interlocks work, and does the machine stay stopped while the guard is open? Can any guard be bypassed easily, and is there evidence that it has been? Are openings small enough for their distance from the hazard? Has the machine been modified since its guarding was last assessed?

    Record what you find with photographs, rank the findings by severity and deal with the worst first. Then look for the pattern. If the same guard is defeated on every shift, the fix is to the machine and not to the people.

    Where BevTech Fits

    BevTech is a family owned engineering business in Richlands, Brisbane, with more than 25 years in beverage and FMCG manufacturing. Guarding work usually needs three disciplines at once, and we have all three in house. Our fabricators and machine shop design and build guards in stainless steel to suit washdown environments. Our industrial electricians install guard interlocks, light curtains, safety relays and emergency stop circuits. Our TUV certified functional safety engineers assess the risk, determine the performance each safety function needs and validate the result.

    If you have machines whose guarding has not kept pace with the changes made to them, use the contact form at bevtech.com.au/contact.

    This article is a general guide current as at October 2026 and is not legal advice. Refer to the code of practice and Workplace Health and Safety Queensland for the requirements that apply to your plant.

  • Risk Matrix Explained: How to Use One for Plant and Machinery

    Risk Matrix Explained: How to Use One for Plant and Machinery

    A Simple Grid With a Lot Riding on It

    The risk matrix is probably the most widely used safety tool in Australian industry. It appears in risk assessments, permits, contractor paperwork, incident reports and board papers. It is also widely misused, and a matrix applied badly can leave a plant feeling safer on paper while nothing on the floor has changed.

    This guide explains what a risk matrix is, how to score one sensibly, where it fits in Queensland’s approach to managing risk and why machinery needs more than a coloured square.

    What a Risk Matrix Is

    A risk matrix is a grid that combines two judgements: how likely it is that something will cause harm, and how bad the harm would be. Each is given a rating, the two are combined, and the result is a risk level, usually shown as a colour from green to red.

    The most common layout is five by five. Likelihood runs from rare to almost certain and consequence from minor to catastrophic. If each is scored from 1 to 5 and the two are multiplied, the result falls between 1 and 25. Organisations then set bands, such as low, medium, high and extreme, and attach a required response to each.

    The purpose is to rank. A matrix helps a site decide which risks to deal with first and who needs to approve living with what remains.

    Where It Fits in Queensland’s Rules

    Queensland’s guide to this subject is the How to manage work health and safety risks Code of Practice 2021. It sets out a four step process: identify hazards, assess risks if necessary, control risks, and review hazards and control measures to ensure they are working.

    Two things in that code surprise people. First, the words if necessary. The code says a risk assessment may not be necessary if you already know the risk and how to control it effectively. Many hazards have well established and accepted controls, and the expectation is that you simply apply them. Second, the code does not prescribe any particular matrix. It asks you to consider how severe the harm could be and how likely it is to occur, and it notes that risk increases as severity and likelihood increase.

    So a risk matrix is a tool some organisations choose to use. It is not the legal requirement. The requirement is to eliminate risks so far as is reasonably practicable and, where that is not possible, to minimise them. Some activities do carry a mandatory risk assessment, including entry to confined spaces and live electrical work.

    Scoring Likelihood

    The Queensland code describes five levels of likelihood: certain, very likely, possible, unlikely and rare. It asks you to consider how often people are exposed to the hazard and for how long, how effective existing controls are, whether changes in the organisation could increase the chance of harm, the working environment, and how people actually behave, including when they are tired or rushed.

    The common mistake is to score likelihood from memory: it has never happened here, so it must be rare. A plant that has run a machine for ten years without an injury may have been careful, or lucky. Look at exposure. A task done forty times a shift by every operator is a very different proposition from one done twice a year by a fitter.

    Scoring Consequence

    Consequence should be the most severe outcome that could reasonably result, not the most common one. Most contacts with a moving conveyor end in a fright. The one that matters ends in an amputation.

    The code’s questions are useful here. Could the hazard cause death, serious injury or illness, or only minor injury? How many people could be affected? Could one event lead to others? If the honest answer includes a fatality or a permanent injury, score it that way, however unlikely it seems.

    A Worked Example

    Take a labelling machine where operators reach in to clear jams. The guard door has an interlock, but it has been unreliable and operators have learned that the machine can be jogged with the door open.

    Likelihood. Jams happen several times a shift and every operator clears them. With a defeated interlock, contact with moving parts is likely.

    Consequence. Crush or entanglement injuries to the hand, potentially permanent.

    Rating. High, on any reasonable matrix.

    Now the important part. The matrix has told you this is urgent. It has not told you what to do. That comes from the hierarchy of control.

    The Hierarchy of Control Is Where the Work Happens

    The code ranks control measures from most to least effective. Elimination comes first. Then substitution, isolation and engineering controls. Then administrative controls such as procedures and training. Personal protective equipment comes last.

    For the labeller, eliminating the jam at its source might mean correcting a label feed problem so that nobody needs to reach in at all. An engineering control would be a reliable interlock that cannot be defeated, with a jog function that works only under safe conditions. A sign and a toolbox talk are administrative controls, and on their own they sit near the bottom of the list.

    A risk assessment that scores a hazard, adds a procedure and rescores it as low has usually skipped the levels that matter. The code is direct about cost as well. It is one of the factors in deciding what is reasonably practicable, but it cannot be used as a reason for doing nothing.

    Five Ways Risk Matrices Go Wrong

    The score becomes the goal. Teams argue about whether something is a 9 or a 12 instead of what to do about it.

    Residual risk is adjusted to fit. A control is written down, the likelihood is dropped two levels and the square turns green, whether or not the control is in place and working.

    Severe but unlikely events are averaged away. A fatality risk scored as rare can land in the same band as a frequent minor injury. They are not the same problem and should not be managed the same way.

    Different people give different answers. Without agreed definitions, two assessors will score the same hazard two bands apart.

    The assessment is never revisited. The code expects controls to be reviewed when they prove ineffective, before changes to the workplace and when new hazards are found. A matrix filled in at installation says little about a machine that has been modified three times since.

    EM10167 HDR

    Why Machinery Needs More Than a Matrix

    A general risk matrix is a reasonable first pass for a machine. It is not enough to design a safety system. Machine safety work in Australia follows the AS/NZS 4024 Safety of Machinery series, in which AS/NZS 4024.1201 deals with risk assessment and risk reduction.

    When a control measure depends on a control system, such as an interlock, a light curtain or an emergency stop, the question changes from how risky is this to how reliable must this safety function be. That is answered with a structured method that considers the severity of injury, how often people are exposed and whether the hazard can be avoided, and it produces a required performance level for the safety function. The circuit then has to be designed and validated to achieve it.

    This is the point where a plant risk assessment hands over to functional safety engineering. It is also where modifications cause trouble, because changing a machine can change the risk and the performance its safety functions need.

    Making Your Matrix Useful

    Define every likelihood and consequence level in words people can apply, with examples from your own site. Assess with the people who do the job, because they know how it is really done. Record the controls that actually exist, not the ones in the manual. Treat any credible fatality or permanent injury as needing attention regardless of the score. Check that controls are in place before rescoring. Keep the record, since the code notes that records demonstrate what you have done to comply. And set a trigger for review: any modification, any incident and any change to how the task is done.

    Risk matrix

    Where BevTech Fits

    BevTech is a family owned engineering business in Richlands, Brisbane, with more than 25 years in beverage and FMCG manufacturing. Much of our work begins where a risk assessment ends: designing and installing the engineering controls it calls for. Our TUV certified functional safety engineers and industrial electricians upgrade guard interlocks, light curtains, safety relays and emergency stop circuits, and our machine shop makes the guards and change parts that remove the need to reach in.

    If a risk assessment on your site has produced actions that need engineering, use the contact form at bevtech.com.au/contact.

    This article is a general guide current as at October 2026 and is not legal advice. Refer to the code of practice and Workplace Health and Safety Queensland for the requirements that apply to your workplace.

  • SWMS in a Factory: When a Safe Work Method Statement Is Actually Required

    SWMS in a Factory: When a Safe Work Method Statement Is Actually Required

    The Most Requested Safety Document in Australia

    Ask a contractor to do almost anything on a manufacturing site and someone will ask for a SWMS. Safe work method statements have become the default paperwork for contract work, requested for jobs ranging from a roof repair to changing a light fitting. Many plant managers assume the law requires one for every task. It does not, and understanding where the real requirement sits helps a plant spend its safety effort where it counts.

    This guide explains what a SWMS is, when Queensland law requires one, how that applies inside a factory and what to use for everything else.

    What a SWMS Is

    A safe work method statement is a document that sets out the high risk work to be done, the hazards and risks involved, the control measures to be used and how those controls will be implemented, monitored and reviewed. It is meant to be a short, practical document that the people doing the work can read and follow. It is prepared before the work starts.

    When the Law Requires One

    The requirement comes from the Work Health and Safety Regulation 2011 in Queensland, and it is narrower than most people think. A SWMS must be prepared before high risk construction work commences. Two conditions therefore have to be met: the work must be construction work, and it must fall within one of the 18 categories the regulation defines as high risk.

    Both terms have specific meanings.

    What Counts as Construction Work

    Construction work is defined as any work carried out in connection with the construction, alteration, conversion, fitting-out, commissioning, renovation, repair, maintenance, refurbishment, demolition, decommissioning or dismantling of a structure. A structure is anything that is constructed, whether fixed or moveable, temporary or permanent, and includes buildings, frameworks and pipelines.

    The definition is wide, and it includes installing, testing and maintaining essential services in connection with a structure. It also has limits. It does not include the manufacture of plant, and the national model code of practice notes that it does not include testing, maintenance or repair work of a minor nature, giving the servicing of air conditioning systems as an example.

    For a factory this creates two broad groups of work. Routine maintenance of production machinery is generally not construction work. Projects that change the building or its services often are: an extension, a new mezzanine or platform, roof work, trenching for drains or cables, structural alterations and new service runs.

    The High Risk Categories That Turn Up in Plants

    Of the 18 categories of high risk construction work, these are the ones most likely to arise on a manufacturing site.

    Work where there is a risk of a person falling more than 2 metres. Work in or near a confined space. Work on or near energised electrical installations or services. Work on or near pressurised gas distribution mains or piping. Work on or near chemical, fuel or refrigerant lines. Work in an area where there is movement of powered mobile plant, which in a factory usually means forklifts. Work in or near a shaft or trench deeper than 1.5 metres. Work in an area that may have a contaminated or flammable atmosphere. Structural alterations that need temporary support. Work that disturbs asbestos. Work in areas with artificial extremes of temperature.

    Put the two tests together and the picture becomes clearer. A contractor building a new platform beside a production line, working above 2 metres with forklifts passing, is doing high risk construction work and needs a SWMS. A fitter replacing a gearbox on a conveyor at floor level is not.

    What a Compliant SWMS Contains

    Where one is required, the regulation says the SWMS must identify the work that is high risk construction work, specify the hazards and the risks to health and safety, describe the measures to be implemented to control those risks, and describe how the control measures are to be implemented, monitored and reviewed. It must be set out in a way that is readily accessible and understandable to the people who use it.

    That last requirement is the one most often failed. A forty page generic document downloaded from a template library, covering every hazard known to industry, is not readily understandable. A good SWMS is specific to the job and the site and is short enough to be read at the start of the shift.

    Who Is Responsible for What

    The business carrying out the high risk construction work must ensure the SWMS is prepared before work starts and that the work is carried out in accordance with it. If the work is not being done in accordance with the SWMS, it must stop immediately and resume only when it is.

    The SWMS must be reviewed and revised if the control measures change. It must be kept until the high risk construction work is completed, and for at least two years if a notifiable incident occurs in connection with the work.

    As the business in control of the site you also have duties. You know things about the workplace that the contractor does not: where the live services are, when forklifts are busiest, what is in the tank next to the work area. A SWMS written without that information is incomplete. Larger jobs bring more formality. A construction project costing $250,000 or more needs a principal contractor and a written WHS management plan.

    One Queensland Rule Outside Construction

    There is a further requirement that manufacturing sites should know about. Under Queensland’s electrical safety regulation, electrical work on or near energised equipment is generally prohibited. Where it is permitted under one of the narrow exceptions, the conditions include a risk assessment and a safe work method statement. This applies whether or not the work is construction work, so an electrician fault finding live on a production machine may need one.

    What to Use When a SWMS Is Not Required

    The absence of a SWMS requirement does not mean the absence of a duty. Every business must manage risks to health and safety, and for hazardous non-construction tasks that means identifying hazards and putting controls in place. The form that takes is up to you.

    Most plants use one or more of the following. A job safety analysis, which breaks a task into steps and lists the hazards and controls for each. A standard operating procedure for routine tasks. A permit to work for defined high hazard activities such as hot work, confined space entry and work on isolated plant. A short pre-start check done at the job by the people about to do it.

    Choosing the right tool is more useful than demanding a SWMS for everything. For a hot work job, a permit that checks for flammable material and posts a fire watch does more than a SWMS that mentions fire in a list.

    The Problem With Asking for a SWMS Every Time

    You are entitled to set site rules that go beyond the legal minimum, and many plants require a SWMS or equivalent from every contractor. There is a cost. When a document is demanded for every job, contractors produce generic ones, site staff stop reading them, and the paperwork that matters is lost among the paperwork that does not.

    A better approach is to ask three questions of any contractor job. Is it high risk construction work, in which case a SWMS is mandatory? Is it energised electrical work, which brings its own requirements? If neither, what is the right risk control document for this task, and has the contractor actually thought about our site?

    How BevTech Works on Client Sites

    BevTech is a family owned engineering business in Richlands, Brisbane, with more than 25 years in beverage and FMCG manufacturing. Our electricians, fitters and fabricators work on operating production sites every day, so job specific risk documentation, site inductions and isolation procedures are part of how we plan work, whether that is a breakdown repair, a machine installation or a shutdown crew. We would sooner be asked hard questions about how we will do a job safely than be handed a form to sign.

    If you have a project coming up and want a contractor who plans it properly, use the contact form at bevtech.com.au/contact.

    This article is a general guide current as at October 2026 and is not legal advice. Whether particular work is construction work can be a matter of judgement, so confirm the requirements for your job with Workplace Health and Safety Queensland.

  • Confined Spaces in Food and Beverage Plants: Tanks, Silos and the Rules for Entry

    Confined Spaces in Food and Beverage Plants: Tanks, Silos and the Rules for Entry

    The Hazard Inside the Tank

    Food and beverage plants are full of vessels: fermenters, bright beer tanks, syrup and blending tanks, CIP tanks, silos, hoppers and pits. Most of the time nobody goes inside them. When someone does, usually to inspect, repair or clean, they enter one of the most dangerous workplaces in industry. Confined space incidents have a grim pattern. The atmosphere overcomes the first person, and those who rush in to help become casualties too.

    This guide explains what makes a space a confined space under Queensland law, why beverage plants carry particular risks, what must be in place before anyone enters and how good design removes the need to enter at all.

    What a Confined Space Is

    The definition is in Queensland’s Work Health and Safety Regulation 2011 and it has three parts. A confined space is an enclosed or partially enclosed space that is not designed or intended primarily to be occupied by a person, that is designed or intended to be at normal atmospheric pressure while a person is inside, and that is or is likely to be a risk to health and safety from one or more of four things.

    Those four are an atmosphere that does not have a safe oxygen level, contaminants such as airborne gases, vapours and dusts that may cause injury from fire or explosion, harmful concentrations of any airborne contaminant, and engulfment.

    Two points follow. A confined space is defined by its hazards, not its size. And the same vessel can change status. A tank that has been emptied, cleaned, ventilated and tested may present no atmospheric risk, while the same tank with residue in it does.

    The Confined spaces Code of Practice 2021 lists where confined spaces are commonly found: vats, tanks, pits, pipes, ducts, silos, pressure vessels, sewers, wells and shafts. It also notes what generally is not one, including places designed for people to work in and enclosed spaces with ready ground level access such as cool stores.

    Why Beverage Plants Carry Extra Risk

    Carbon dioxide. Fermentation produces it, carbonation uses it and it is used to purge and blanket vessels. It is heavier than air, so it settles in the bottom of tanks, in pits and in low points, and it cannot be seen or smelled. It is harmful in its own right as well as displacing oxygen.

    Nitrogen and other inert gases. Used for purging and blanketing, they displace oxygen without any warning sensation. A person entering an oxygen depleted space can lose consciousness within a breath or two.

    Cleaning chemicals. CIP systems use caustic and acid solutions and sanitisers. Residues and vapours can remain in a vessel, and chemicals that are safe apart can react if mixed.

    Engulfment. Silos and hoppers holding sugar, grain or malt can bury a person who steps onto a crust or a bridged surface.

    Connected services. Tanks are connected to product lines, CIP supply, steam, gas and agitators. Any of these can introduce a hazard to someone inside if it is not isolated.

    The code states that air normally contains 21 per cent oxygen by volume and that levels of 19.5 per cent to 23.5 per cent are considered safe. Outside that range, entry needs specific controls.

    The First Duty Is to Avoid Entry

    The regulation puts a duty on designers, manufacturers, importers and suppliers of plant and structures to eliminate the need to enter a confined space, so far as is reasonably practicable, and to eliminate the risk of inadvertent entry. Where that is not practicable, the need to enter must be minimised and the space designed with a safe means of entry and exit.

    For a plant, the same thinking applies to every task that currently requires entry. Can it be done from outside? The code points to design features such as outlets and facilities for cleaning that eliminate the need for entry, lining materials that are durable and need minimal cleaning, and mechanical parts designed for safe and easy maintenance.

    What Must Be in Place Before Anyone Enters

    Where entry cannot be avoided, the regulation sets out specific requirements.

    A written risk assessment. It must be carried out by a competent person and recorded in writing. It considers the atmosphere, the work to be done, the work methods and the emergency procedures needed. It must be reviewed when the risks change.

    A confined space entry permit. Completed in writing by a competent person, it identifies the space, names the workers permitted to enter, states the period of validity and the control measures, and records when everyone has left and the work is complete.

    Signs. Signs warning against entry by anyone other than those involved in the work must be placed at each entrance while the space is accessible.

    Communication and a standby person. There must be continuous communication with the worker from outside the space, and a standby person in the vicinity to monitor conditions and, if practicable, observe the work.

    Emergency procedures. First aid and rescue procedures must be established and practised, so that they are known to work before they are needed.

    Training. Everyone involved, including those who issue permits, stand by and manage the work, must be trained in the hazards, the controls, the permit and the emergency procedures.

    In practice these sit alongside atmospheric testing before and during entry, ventilation, and isolation of every service connected to the vessel.

    The Standby Person and Rescue

    The standby person’s role is to stay outside. They monitor the people inside, keep communication going, control who enters and raise the alarm. They do not go in.

    That rule exists because of how confined space fatalities happen. The instinct to help a collapsed colleague is strong, and the atmosphere that felled the first person will fell the second just as quickly. Rescue must be planned to be carried out from outside wherever possible, with retrieval equipment rigged before entry. Anyone who has to enter for a rescue where the oxygen level is unsafe or contaminants are present needs air supplied respiratory protective equipment and the training to use it.

    A plan that relies on calling emergency services is not a rescue plan. The time available is measured in minutes.

    Records You Need to Keep

    The risk assessment must be kept until at least 28 days after the work is completed. The entry permit must be kept until the work is completed. If a notifiable incident occurs, both must be kept for two years. Training records must be kept for two years.

    Contractors Entering Your Tanks

    Tank inspections, repairs and specialist cleaning are often contracted out. The contractor will bring its own procedures, but it does not know your plant. You know what was last in the vessel, which lines connect to it, what gases are used nearby and how your isolation system works. Sharing that information, agreeing who issues the permit and confirming the rescue arrangements before the day of the job are part of your duty as the business in control of the workplace.

    If the work is construction work, such as structural repairs to a silo, working in or near a confined space is one of the categories of high risk construction work and a safe work method statement is also required.

    Engineering the Entry Out

    The most effective confined space control is not a better permit. It is not having to go in. In beverage plants the usual reasons for entry are cleaning, inspection and repair, and each can be reduced with engineering.

    Clean in place systems with properly designed spray coverage remove the need for manual cleaning. Inspection ports, sight glasses and cameras allow internal checks from outside. Agitators, level probes and spray devices that can be withdrawn through a manway or a top nozzle can be serviced without anyone entering. Level and temperature instruments reduce the temptation to look inside.

    It is worth listing every confined space entry your plant made last year and asking, for each, what change would have made it unnecessary.

    Where BevTech Fits

    BevTech is a family owned engineering business in Richlands, Brisbane, with more than 25 years in beverage and FMCG manufacturing. A good part of our work reduces the need for people to go where they should not have to. We design, automate and upgrade CIP systems, including a hot water rinse process for a can seamer controlled by a Siemens S7-1200, and we have automated glycol refrigeration for beer tank temperatures on a Siemens S7-1500. Our fabricators and machinists make the fittings and access modifications that let work be done from outside the vessel.

    If there are tanks on your site that people still enter to clean or inspect, use the contact form at bevtech.com.au/contact and we can look at whether that entry can be designed out.

    This article is a general guide current as at October 2026 and is not a substitute for training or for the code of practice. Confirm the requirements for your workplace with Workplace Health and Safety Queensland.

  • Lockout Tagout in Australian Plants: Isolation Procedures That Protect People

    Lockout Tagout in Australian Plants: Isolation Procedures That Protect People

    The Machine That Started While Someone Was Inside It

    Many of the worst injuries in manufacturing follow the same script. A machine stops or jams. Someone reaches in, climbs in or opens it up to clear, clean or repair it. The machine starts, because someone else pressed a button, a sensor cleared, a program resumed or stored energy released. The injury is done in less than a second.

    Lockout tagout is the procedure that prevents this. This guide explains what it is, the steps involved, what the rules in Queensland expect and where isolation procedures most often break down.

    What Lockout Tagout Means

    Lockout tagout, often written LOTO, is an American term that has become common in Australian plants. Australian guidance more often speaks of isolation, or isolation and lockout. The idea is the same. Before anyone works on plant, every source of energy is disconnected and physically locked in the off position by the person doing the work, and a tag is attached to say who has isolated it and why.

    Isolation is the act of disconnecting plant from its energy sources. Lockout is fitting a device, usually a padlock, that prevents the isolation being reversed. Tagout is attaching a danger tag that identifies the person and warns others not to operate the isolator.

    What the Law Expects in Queensland

    Queensland’s Work Health and Safety Regulation 2011 requires that maintenance, inspection and testing of plant be carried out by a competent person, and it sets requirements for operational controls. The Managing the risks of plant in the workplace Code of Practice 2021 states that plant should usually be isolated before maintenance or cleaning starts, and that plant should be isolated from power sources and unable to be switched on or activated accidentally before alterations begin.

    The code also deals with stored energy, calling for it to be released, for moving parts that would lower under gravity to be lowered and for supports to be provided. And it is clear about the limits of emergency stops: emergency stop devices should not be the only method of controlling risks.

    The technical standard behind this is part of the AS/NZS 4024 Safety of Machinery series, which includes AS 4024.1603 on the prevention of unexpected start-up.

    Energy Is More Than Electricity

    The most common isolation error is to switch off the electrical supply and assume the machine is safe. Production equipment holds energy in many forms, and every one needs its own isolation.

    Electrical. Mains supply, control supplies fed from elsewhere, and stored charge in capacitors, drives and batteries.

    Pneumatic. Compressed air held in cylinders, reservoirs and lines after the supply is shut.

    Hydraulic. Pressure in accumulators, rams and hoses.

    Mechanical. Springs under tension or compression, flywheels and parts that are still moving.

    Gravity. Raised platens, lift tables, counterweights and anything that will fall when its support is removed.

    Thermal. Steam, hot water, hot surfaces and refrigerants.

    Process. Product, CIP chemicals, gas and anything else that can flow into the work area through a pipe.

    A beverage filler may have all seven. An isolation procedure for it has to name each one and the point where it is isolated.

    The Steps of an Isolation

    Good procedures follow the same sequence.

    Prepare. Identify the plant, every energy source and every isolation point. Tell the people affected, including the person in control of the area.

    Shut down. Stop the plant using its normal controls.

    Isolate. Operate each isolation point: the isolator switch, the air and hydraulic shut off valves, the process valves.

    Lock and tag. Each person working on the plant fits a personal lock and danger tag to each isolation point.

    Release stored energy. Vent air, bleed hydraulic pressure, discharge capacitors, lower or block raised parts, allow hot parts to cool, drain lines.

    Verify. Prove the isolation has worked. Try to start the plant from its controls. Test for voltage with a proven instrument. Check gauges read zero. This is the step most often skipped and the one that catches the mistakes.

    Do the work.

    Restore. Replace guards, clear tools and people, remove locks and tags, and warn others before restarting.

    One Person, One Lock, One Key

    The strength of the system lies in a simple rule. Each person puts on their own lock, keeps their own key and removes their own lock. Nobody is protected by somebody else’s lock.

    Where several people work on the same plant, each applies a personal lock, using a multi lock hasp so that the isolator cannot be closed until the last lock is removed. For large jobs with many isolation points, a lock box is used. The isolation points are locked by one set of locks, the keys go in the box and each worker locks the box.

    Queensland’s electrical safety guidance makes the same points for electrical isolation: individuals should ensure their own personal lock is applied to the isolation point, and a lock box may be needed where multiple devices cannot be fitted.

    Danger Tags and Out of Service Tags

    These do different jobs and should never be confused. A danger tag is personal. It means a person is working on this plant and their safety depends on the isolator staying where it is. An out of service tag is about the equipment. It means the item is defective or unsafe to use, and it protects the plant and the next user.

    A tag by itself is a warning, not a barrier. Tags can fall off, fade or be ignored. Wherever an isolator can be locked, it should be.

    What Is Not Isolation

    Emergency stop buttons, guard interlocks, a stop command on the HMI and a program held in the PLC are all control functions. They can fail, be reset by someone else or be overridden by a fault. Queensland’s electrical isolation guidance puts it plainly: control circuits or electronic switching devices shall not be used as a method of isolation.

    The practical difficulty is the quick job. Clearing a jam takes thirty seconds and a full isolation takes five minutes, so people rely on the interlock or the stop button. That is when people get hurt. The answer is partly discipline and partly design: remove the cause of the jam, provide local isolators within reach, and where frequent access is unavoidable, engineer a properly designed safety function for that task instead of leaving people to improvise.

    Removing Someone Else’s Lock

    Sooner or later a lock is left on and its owner has gone home. Every site needs a written procedure for this before it happens. It should require a real attempt to contact the person, confirmation that they are not on site, an inspection of the plant by an authorised person, a documented decision by a manager and notification to the lock owner before their next shift. Cutting a lock off because production is waiting is how the system dies.

    Contractors and Isolation

    Contractors working on your plant must be covered by an isolation. Agree before the job whose procedure applies, who identifies the isolation points and who applies locks. In most plants the site isolates and the contractor adds personal locks. Contractors do not know your equipment. A second supply to a control panel or an air line fed from another machine is exactly the thing an outsider will miss.

    Where Isolation Procedures Fail

    Isolation points that are not labelled, so the wrong one is switched. No written procedure for the specific machine. Stored energy not released. No verification. One lock for a whole crew. Locks with shared or master keys. Isolators that are hard to reach, so people do not bother. Modifications that added an energy source the procedure does not mention. Each of these is cheap to fix and expensive to leave.

    Where BevTech Fits

    BevTech is a family owned engineering business in Richlands, Brisbane, with more than 25 years in beverage and FMCG manufacturing. Our electricians and mechanical trades work under isolation on client plants every day, and we help sites make isolation easier to do properly: installing lockable local isolators and air dump valves where they are needed, labelling isolation points to match the drawings, updating drawings after modifications, and designing safety functions through our TUV certified functional safety engineers for tasks where frequent access is unavoidable.

    If isolating a machine on your site is harder than it should be, use the contact form at bevtech.com.au/contact.

    This article is a general guide current as at October 2026 and is not a substitute for site procedures or training. Confirm the requirements for your workplace with Workplace Health and Safety Queensland.

  • Machine Risk Assessments: A Practical Guide for Plant Operators

    Machine Risk Assessments: A Practical Guide for Plant Operators

    A machine risk assessment is often treated as a box ticking exercise, something completed once when equipment is installed and then largely forgotten unless a regulator or insurer specifically requests an updated version. This is a significant missed opportunity, since a properly conducted risk assessment is one of the most useful planning tools available to a plant operator, not just for compliance purposes but for prioritising where genuine safety investment will deliver the greatest risk reduction.

    What distinguishes a proper risk assessment from a checklist

    A generic compliance checklist confirms whether standard guarding and safety features are present. A proper machine risk assessment goes considerably further, evaluating each identified hazard against the actual operating conditions of the machine, including how operators genuinely interact with it during normal operation, changeover, and maintenance, not just its original design intent. This distinction matters because many real world hazards emerge from the gap between how a machine was designed to be used and how it is actually used in daily production, a guard that is technically present but routinely propped open during a frequent changeover step, for example, represents a real, active hazard that a simple presence checklist would miss entirely.

    The core elements of a thorough assessment

    A comprehensive machine risk assessment typically works through hazard identification across each phase of the machine’s operational life, normal production running, changeover and format adjustment, cleaning and CIP cycles, and maintenance access, since each phase exposes operators and technicians to different hazard profiles. For each identified hazard, the assessment evaluates severity, the realistic worst case outcome if the hazard is realised, and likelihood, factoring in both the inherent risk and the frequency of exposure given how the machine is actually used. This combination produces a risk rating that allows hazards to be prioritised sensibly, rather than treating every identified issue as equally urgent.

    The assessment should also evaluate existing control measures against this risk rating, identifying where current guarding, interlocking, or procedural controls are genuinely adequate for the assessed risk level, and where they fall short of what the risk actually warrants.

    Why qualified assessment matters

    Risk assessment is specialist work, and the quality of the assessment depends heavily on the experience and qualification of the person conducting it. A TUV certified functional safety engineer brings formal training in safety integrity level evaluation and a structured methodology for assessing hazard severity, likelihood, and required risk reduction, which produces a more rigorous and defensible assessment than an informal walkthrough conducted by plant staff without this specific expertise, however experienced those staff may be in general production operations. This matters both for getting the engineering right and for demonstrating proper due diligence should the assessment ever be reviewed following an incident.

    Using the assessment to prioritise investment

    One of the most valuable outputs of a thorough risk assessment is a prioritised list of identified hazards ranked by risk level, which gives plant operators a defensible basis for sequencing safety investment. Rather than addressing whichever issue happens to be raised most recently by an operator or whichever feels most visible during a casual walkthrough, a risk based priority list ensures capital and maintenance resourcing goes first to the hazards with the genuine highest combination of severity and likelihood, which is both the more responsible approach and the more defensible one if safety investment decisions are ever scrutinised.

    Risk assessments as a living document

    Equipment, processes, and production demands change over time, and a risk assessment conducted at installation can become outdated as a machine is integrated with new equipment, as production speeds increase, or as changeover frequency rises due to a growing SKU range. Plant operators should treat risk assessments as living documents requiring periodic review, particularly following any significant change to a machine’s configuration, integration, or operating pattern, rather than a one time exercise completed and filed away indefinitely.

    Translating findings into action

    A risk assessment alone does not reduce risk, it identifies where action is needed. The findings should feed directly into a remediation plan covering guarding upgrades, interlocking improvements, emergency stop circuit reviews, and where required, updated design drawings reflecting the corrected safety architecture, sequenced according to the risk priority identified in the assessment, and ideally scheduled around planned maintenance shutdowns to minimise additional production disruption.

    Qualified risk assessment support

    Bevtech Engineering and Automation’s team includes TUV functional safety engineers who provide thorough, structured machine risk assessments for food and beverage manufacturing equipment, along with the design and remediation capability to act on the findings. To schedule a risk assessment for your facility or review existing assessments that may be due for an update, contact Bevtech on +61 400 881 321 or admin@bevtech.com.au, or visit 25 Silvio St, Richlands QLD.

  • The Cost of Non Compliance: Why Functional Safety Engineering Matters

    The Cost of Non Compliance: Why Functional Safety Engineering Matters

    Non compliance with machine safety requirements is often discussed purely in terms of regulatory exposure, the possibility of a fine following an inspection or incident. This framing significantly understates the real cost structure facing FMCG manufacturers, where safety non compliance carries financial and operational consequences across several layers, many of which materialise long before any regulator becomes involved.

    Beyond the regulatory fine

    A safety incident, even a relatively minor one, triggers a chain of consequences that extends well past any direct regulatory penalty. The affected machine or line is typically taken out of service during incident investigation, creating production loss independent of any fine. Workers compensation claims and associated insurance premium increases follow most incidents involving injury, regardless of severity. And for FMCG manufacturers supplying major retail chains or beverage brand customers, a documented safety incident can trigger a supplier safety audit or review, since many large retail and brand customers now actively monitor the safety performance of their supply chain as part of their own risk management, meaning a safety failure at a supplier site can create commercial consequences entirely separate from the regulatory process.

    The insurance dimension

    Insurers increasingly factor documented safety system quality into premium calculations for manufacturing risk, and a plant with thorough, current risk assessments and properly engineered safety systems is generally better positioned in insurance negotiations than a plant relying on informal or outdated safety documentation. Beyond premium impact, in the event of a significant incident, the quality of a plant’s documented safety due diligence, including formal risk assessments and evidence of functional safety engineering input, can materially affect how an insurance claim or liability matter is resolved, since demonstrated good faith effort to properly assess and address known hazards is viewed very differently from a plant that had no structured safety assessment process at all.

    What functional safety engineering actually adds

    The gap between surface level compliance and genuine functional safety engineering is significant, and it is where much of the real risk reduction value lies. Surface level compliance might confirm that guards are present and emergency stops are installed. Functional safety engineering goes considerably further, calculating the required safety integrity level for each hazard based on severity, frequency of exposure, and possibility of avoidance, and then verifying that the actual safety circuit design, including the specific components used, their failure modes, and the overall system architecture, genuinely achieves that required integrity level rather than simply appearing adequate on visual inspection.

    This distinction matters enormously in practice. A safety relay or interlocking system that looks correctly installed can still fail to achieve the required safety integrity level if the underlying circuit design, component selection, or redundancy does not match what the actual assessed risk demands. TUV certification reflects formal training in this calculation and verification methodology, which is why functional safety engineers bring a level of rigour that general electrical competency, while valuable, does not automatically include.

    The cumulative risk of incremental compromise

    Non compliance rarely arrives as a single deliberate decision. It typically accumulates through a series of individually reasonable feeling compromises, a guard modified during an urgent breakdown repair and never properly restored, a safety interlock temporarily bypassed to keep a line running during a busy period and never formally closed out, a machine integrated with new equipment without the interlocking logic being fully updated to reflect the new combined hazard profile. Each of these decisions, made under production pressure, can feel justified in the moment, but together they create a safety integrity gap that a structured functional safety review will typically surface in detail, often to the surprise of plant management who were not aware how much had quietly drifted from the original design intent.

    Closing the gap proactively

    The cost of proactively closing safety integrity gaps through structured functional safety engineering is almost always lower than the layered cost of non compliance materialising through an actual incident, insurance impact, or customer audit failure. For procurement and operations leaders, this argues for treating functional safety engineering investment as core risk management rather than discretionary compliance spend, and for engaging genuinely qualified functional safety expertise rather than relying solely on general electrical or mechanical competency to assess and design safety critical systems.

    Qualified functional safety expertise

    Bevtech Engineering and Automation’s team includes TUV functional safety engineers who provide genuine safety integrity level assessment and verified safety circuit design for food and beverage manufacturing equipment, going beyond surface level compliance to close real safety gaps. To discuss a functional safety review for your facility, contact Bevtech on +61 400 881 321 or admin@bevtech.com.au, or visit 25 Silvio St, Richlands QLD.

  • Building a Safety Upgrade Roadmap for Ageing Production Equipment

    Building a Safety Upgrade Roadmap for Ageing Production Equipment

    Ageing production equipment presents a particular safety planning challenge for FMCG plant managers. Unlike a new machine purchase, where safety design is built in from the outset to current standards, legacy equipment often predates current safety expectations, has accumulated incremental modifications over years of operation, and frequently cannot be brought fully into line with current best practice through a single remediation project without either prohibitive cost or extended production downtime that the business cannot realistically absorb in one go.

    Why a single remediation pass rarely works

    When a risk assessment on older equipment identifies a substantial list of safety gaps, the natural instinct is to address everything at once. In practice, this is rarely achievable within a single capital budget cycle or a single planned shutdown window, particularly for plants with multiple ageing assets each carrying their own list of identified issues. Attempting to force a complete remediation into a single phase often results in either an unrealistic budget request that fails to gain approval, leaving the plant with an unaddressed risk list and no clear path forward, or a rushed implementation that compromises on the quality of the remediation work to fit an artificial timeline.

    The case for a phased roadmap

    A structured, phased safety upgrade roadmap addresses this challenge directly. Rather than treating safety remediation as a single all or nothing project, a roadmap sequences identified hazards by risk priority, addressing the highest severity and highest likelihood issues first, while establishing a realistic multi year timeline for working through the full remediation list in a way that fits genuine budget cycles and production shutdown availability. This approach also creates a defensible compliance position throughout the process, since a documented, actively progressing roadmap demonstrates genuine commitment to risk reduction, in contrast to an unaddressed risk assessment sitting in a drawer with no action plan attached to it.

    Structuring the roadmap

    An effective roadmap begins with the comprehensive risk assessment findings, ranked by risk priority, and then maps each identified item against available remediation windows, typically planned shutdown periods, against estimated cost for design, fabrication, and installation, and against any practical sequencing dependencies, for example, where a control system upgrade needs to precede a related guarding or interlocking change because the new safety logic depends on the upgraded control platform. This produces a multi year plan that can be presented to finance and operations stakeholders as a structured programme with clear milestones, rather than an open ended and somewhat alarming list of outstanding safety issues with no visible plan to address them.

    Balancing risk priority against practical constraints

    While risk severity should drive overall prioritisation, practical constraints legitimately influence sequencing within that framework. Some safety upgrades require a planned shutdown to implement safely, which means timing is constrained by the shutdown calendar regardless of risk ranking, while others can be implemented with minimal production disruption and can therefore be addressed sooner even if their risk ranking sits slightly lower than an item awaiting the next shutdown window. A well built roadmap accounts for this nuance rather than rigidly sequencing purely by risk score without regard for genuine implementation feasibility.

    Maintaining a defensible position throughout

    Through the life of a multi year roadmap, it is important to maintain interim risk controls for items not yet reached in the remediation sequence, additional procedural controls, supervision, or temporary engineering measures that reduce risk in the interim period before the permanent remediation is implemented. This demonstrates that the plant is not simply aware of an outstanding hazard and ignoring it pending budget availability, but is actively managing the interim risk while working toward permanent resolution, which is a materially stronger position both for genuine safety outcomes and for any subsequent compliance review.

    Reviewing and updating the roadmap

    A safety upgrade roadmap should be reviewed periodically, both to track progress against the planned sequence and to incorporate any new hazards identified through ongoing operations, equipment changes, or incident near misses that were not part of the original risk assessment. Treating the roadmap as a living document, rather than a fixed plan set once and never revisited, ensures it remains a genuinely useful tool for ongoing safety management rather than becoming outdated shortly after it is first developed.

    Roadmap development and delivery support

    Bevtech Engineering and Automation’s TUV functional safety engineers can develop a structured, risk prioritised safety upgrade roadmap for ageing production equipment, and the broader engineering team can deliver the design, fabrication, and electrical work required at each phase, providing continuity from initial assessment through to completed remediation across the full life of the programme. To discuss building a safety roadmap for your facility, contact Bevtech on +61 400 881 321 or admin@bevtech.com.au, or visit 25 Silvio St, Richlands QLD.

  • TUV Certified Functional Safety: What It Means for Your Plant

    TUV Certified Functional Safety: What It Means for Your Plant

    TUV certification appears regularly in engineering and safety documentation, often referenced as a credential without plant managers necessarily understanding what it specifically verifies or why it should influence the choice of safety engineering partner for production line work. For procurement and operations teams evaluating safety related engineering services, understanding what this qualification actually represents helps clarify why it matters for certain categories of work and not others.

    What TUV functional safety certification verifies

    TUV, a German based certification body with international recognition, offers formal qualification programmes in functional safety engineering, training engineers in the structured methodology for assessing machine hazards, calculating required safety integrity levels, and designing safety systems that demonstrably achieve those required levels. This is meaningfully different from general electrical trade qualification, which certifies competency to safely install and maintain electrical systems generally, but does not specifically train in the quantitative risk assessment and safety circuit verification methodology that functional safety engineering requires.

    A TUV certified functional safety engineer has demonstrated formal competency in evaluating hazard severity and likelihood, determining the corresponding required performance level or safety integrity level for a given safety function, and verifying that the actual designed safety circuit, including component selection, redundancy, and failure mode behaviour, genuinely achieves that required level rather than simply appearing adequate based on standard practice or visual inspection.

    Why this distinction matters in practice

    General electrical competency is entirely sufficient for the great majority of electrical work on a production line, standard installations, routine maintenance, and most control system programming do not require functional safety specific expertise. Safety critical system design is different. A safety circuit that looks correctly assembled, with appropriate rated components installed in a sensible configuration, can still fail to achieve its required safety integrity level if the underlying calculation of required risk reduction was not properly performed, or if the circuit’s specific failure modes were not formally analysed against that requirement. This is precisely the gap that functional safety engineering is designed to close, and it is why safety critical work genuinely benefits from TUV certified expertise rather than general electrical competency alone, however experienced that general electrical team may be in other areas.

    Where functional safety expertise applies

    Functional safety engineering is most relevant for machine guarding and interlocking system design, emergency stop circuit architecture, particularly on complex multi zone or multi machine lines where stop circuits need careful coordination, safety related control system programming, where PLC logic governs safety functions rather than purely production functions, and risk assessment work that feeds into any of the above, since an inaccurate risk assessment undermines the validity of even a well executed safety circuit design built on top of it.

    What to ask a prospective safety engineering partner

    For procurement teams sourcing safety critical engineering work, it is reasonable to ask directly whether the engineers performing risk assessment and safety circuit design hold current TUV or equivalent functional safety certification, rather than assuming general electrical qualification covers this specialist competency. It is also worth asking how the partner documents their safety integrity level calculations and verification process, since a properly qualified functional safety engineer should be able to provide this documentation as a matter of course, not as an unusual special request.

    The value beyond the certification itself

    While the certification itself verifies formal training, the practical value for a plant comes from the rigour this training brings to actual project work, more thorough hazard identification during risk assessment, more defensible safety integrity level calculations, and safety circuit designs that are verified against requirement rather than assumed adequate based on general good practice. This translates directly into both better genuine safety outcomes and a stronger documented position should any safety system ever be reviewed following an incident or as part of a customer audit.

    TUV certified expertise on the team

    Bevtech Engineering and Automation’s team includes TUV functional safety engineers working alongside experienced industrial electricians and control system engineers, providing genuinely qualified safety critical design capability for food and beverage manufacturing equipment, from initial risk assessment through to verified safety circuit design and implementation. To discuss safety critical engineering work for your facility, contact Bevtech on +61 400 881 321 or admin@bevtech.com.au, or visit 25 Silvio St, Richlands QLD.

@Fd2X@HoSi10178
Shutdown Checklist
Bevtech fmcg beverage shutdown planning checklist glass.webp0000

Get Your FMCG & Beverage Plant Shutdown Planning Checklist

We wont spam you :) or share your details.
We will send you an email with the PDF checklist.