the formal procedure for taking equipment out of service and ensuring it cannot be operated until an unauthorized person has returned it to service is