THE E-STOP MUST HAVE POSITIVE OPERATION

Emergency stops must be designed so that, upon their activation, dangerous movements and operations of the machine will be stopped as quickly as possible without creating additional hazards. If they aren’t activated, then the machine must stay running by default. This is what’s meant by “positive operation.”

THE E-STOP FUNCTION MUST BE AVAILABLE AND IN OPERATION AT ALL TIMES

At every operator station there must be an emergency stop ready to be activated whenever necessary. The effects of an E-stop – namely, the ceasing of hazardous machine motion – must be maintained until the device can be manually reset according to ISO 13850-2006. This prevents machinery from starting up prematurely while the situation is being investigated.

THERE CAN’T BE A PADLOCK ON THE E-STOP

Having a padlock on the emergency stop device gives the impression of lockout/tagout (LOTO), which is a terrible application for an E-stop. Requirements for lockout stipulate that the hazardous energy sources must be physically isolated or blocked, and control systems that include interlocks and emergency stops are unable to meet these requirements in full.

THE E-STOP SHOULDN’T STAND IN FOR OTHER NECESSARY SAFETY MEASURES

Key safeguarding measures and functions such as light curtains, interlock devices and comprehensive safety training for operators must not be overlooked simply because an emergency stop is in place. These measures are just as important and should always be part of the risk reduction strategy for a machine.

THE E-STOP SHOULD IDEALLY BE ACTIVATED JUST TWICE PER YEAR

Assuming that there’s no need to stop hazardous motion in a given year, then the emergency stop should only be activated twice over this time period for the purpose of manual testing. Some manufacturers set things up so that operators use the E-stop for routine machine shutdowns, but this is a standards violation and will lead to the early breakdown of the device.