A formal procedure for taking equipment out of service and ensuring that it cannot be operated until a qualified person has removed the lockout or tagout device (such as a lock or warning tag)