🚧 Under construction — VoTechWorks is being built. A free tech program — complimentary, as our commitment to get America working.
voTechWorksGrade 13 · a vocational technology learning center, by urbanicity
newSchoolWorks.com › VoTechWorks › Technology & Design › Cybersecurity › Universal Core: Safety, Workplace Math, Communication & Career Readiness for Cybersecurity › Lesson 1
TEC-CYBE44-01 · Lesson 1 · 24 clock hours · theory

Workplace Safety for IT and Data-Center Environments (OSHA 10-Hour General Industry)

Objective. Students will identify and explain OSHA 10-Hour General Industry hazard categories — including electrical safety, lockout/tagout, ergonomics, fire safety, and PPE selection — as they apply to server rooms, network closets, and office IT environments.

⚠ Pending professional review

This lesson, its worked examples and its practice questions has not yet been verified by an industry-certified professional or by a certification or approval body. It is a study draft and may contain errors. Do not use it as instructions for work on a job site or on live equipment. Always follow your instructor, your supervising professional, and current official references and regulations.

VoTechWorks program approval and accreditation are still in progress. Credentials are issued only by the certifying bodies named in each program, after their own exams.

Why Workplace Safety Matters in IT and Data-Center Environments

Cybersecurity professionals spend much of their time in server rooms, network closets, and office IT spaces. These environments contain unique hazards — high-voltage electrical equipment, heavy rack-mounted hardware, restricted airflow corridors, and chemical-based fire suppression systems — that can cause serious injury or death if workers are unprepared. OSHA (the Occupational Safety and Health Administration) sets and enforces federal workplace safety standards under the OSH Act. Completing the OSHA 10-Hour General Industry training gives you a recognized foundation in hazard recognition and control that employers across the country expect.

OSHA 10-Hour General Industry Overview

The OSHA 10-Hour General Industry program is delivered by OSHA-authorized trainers, either in person or through an approved online format. It covers hazard recognition, avoidance, and prevention across a broad range of general-industry settings. Upon completion, participants receive a Department of Labor (DOL) card or completion certificate from the authorized provider — not directly from OSHA. The program is voluntary at the federal level, but many employers and some state regulations require it as a condition of employment or site entry.

Key topic areas that apply directly to IT and data-center work include:

Electrical Safety

Server rooms operate at standard voltages for end-user equipment, but uninterruptible power supplies (UPS), power distribution units (PDUs), and three-phase circuits in larger facilities involve energy levels that can cause electrocution, arc flash, or fire. OSHA's electrical standards (Subpart S of 29 CFR 1910) require that electrical panels be kept clear, covers remain in place, and only qualified persons perform electrical work. In practice, IT workers should never open energized electrical panels, should report damaged cords and exposed conductors immediately, and should treat any unknown circuit as live until confirmed otherwise.

Lockout/Tagout (LOTO)

Lockout/Tagout procedures (governed by 29 CFR 1910.147, the Control of Hazardous Energy standard) protect workers from the unexpected energization or startup of machinery and equipment. In a data-center context, LOTO is relevant when replacing components in high-voltage UPS systems, working on HVAC units that serve the server floor, or servicing electrical distribution equipment. The basic sequence is: identify all energy sources, notify affected personnel, shut down the equipment using the normal stopping procedure, isolate energy sources (disconnect switches, circuit breakers), apply a lockout device and personal lock, release or restrain any stored energy (capacitors, gravity), and verify the equipment is de-energized before touching it. Every worker who could be harmed applies their own lock — only they can remove it.

Personal Protective Equipment (PPE)

PPE is selected based on the specific hazard, not personal preference. OSHA Publication 3151 outlines the general framework: conduct a hazard assessment, select PPE that matches the hazard, train workers to use and maintain it, and document the assessment. In IT environments, common PPE needs include:

PPE is the last line of defense in the hierarchy of controls — engineering controls and administrative controls should be used first where feasible.

Fire Safety in the Data Center

Fires in IT environments most commonly involve electrical equipment. The correct portable fire extinguisher class for energized electrical fires is Class C. Never use a water-based (Class A) extinguisher on energized equipment — water conducts electricity and can cause electrocution. Many modern data centers use gaseous suppression systems (such as clean-agent systems) rather than sprinklers to protect equipment from water damage. Every worker must know the location of fire extinguishers and exits, understand the facility's emergency action plan (EAP), and be able to activate the manual alarm.

When a UPS or other electrical device begins smoking, the correct sequence is: (1) alert others and activate the fire alarm, (2) evacuate the area following posted egress routes, (3) if trained and the fire is small and contained, use a Class C extinguisher — but never re-enter a smoke-filled room, (4) call emergency services (911), and (5) notify your supervisor and begin the facility's incident-notification procedure.

Ergonomics

Repetitive tasks such as typing, mouse use, and cable termination, combined with awkward postures when working in tight network closets or under raised floors, contribute to musculoskeletal disorders (MSDs). Basic ergonomic practices include adjusting monitor height so the top of the screen is at or slightly below eye level, keeping wrists neutral while typing, taking short breaks to change posture, and using proper lifting technique (lift with legs, keep the load close, avoid twisting) when moving servers or UPS batteries.

Walking and Working Surfaces and Egress

Blocked or cluttered aisles are among the most commonly cited OSHA violations in any industry. In server rooms and network closets, cable bundles across walking paths, unsecured floor tiles, and equipment staged in egress corridors all create trip and fall hazards and can impede evacuation. Means of egress — the path from any point in the facility to a public way — must remain unobstructed at all times. Exit signs must be illuminated and visible.

Key terms8

OSHA 10-Hour General IndustryAn OSHA-authorized training program covering hazard recognition and prevention in general-industry workplaces; completion is recognized by a DOL card or certificate issued by the authorized trainer.
Lockout/Tagout (LOTO)A set of procedures required by 29 CFR 1910.147 to isolate equipment from all hazardous energy sources before servicing, preventing unexpected startup or release of stored energy.
Personal Protective Equipment (PPE)Wearable items — such as safety glasses, gloves, or hearing protection — selected through a formal hazard assessment to protect workers when engineering or administrative controls alone are insufficient.
Class C Fire ExtinguisherA portable extinguisher rated for use on fires involving energized electrical equipment; it uses a non-conductive extinguishing agent to avoid electrocution risk.
Hierarchy of ControlsA prioritized framework for reducing workplace hazards: elimination, substitution, engineering controls, administrative controls, and PPE — in that order of effectiveness.
Hazardous Energy (Stored Energy)Any energy — electrical, mechanical, hydraulic, pneumatic, chemical, thermal, or gravitational — that could be released unexpectedly and harm a worker; must be isolated and dissipated before servicing equipment.
Emergency Action Plan (EAP)A written plan required by OSHA for workplaces meeting certain criteria, detailing evacuation routes, alarm procedures, roles, and emergency contacts to be followed when a fire or other emergency occurs.
Means of EgressThe continuous, unobstructed path from any point inside a building to a public way, consisting of the exit access, the exit itself, and the exit discharge; must remain clear at all times.
In class: Complete all required OSHA 10-Hour General Industry modules using the OSHA-authorized online or in-person delivery format, answering module knowledge checks with a minimum passing score before advancing. · Conduct a guided virtual walk-through of a simulated data-center floor plan, identifying at least ten specific hazards (exposed cabling, improper rack loading, blocked egress, missing PPE stations) and logging each in a hazard-identification worksheet. · Participate in a table-top scenario: a UPS (uninterruptible power supply) begins smoking in the server room — students must verbally sequence the correct response including evacuation, fire extinguisher class selection (Class C), and incident notification procedures.
Materials: OSHA 10-Hour General Industry authorized course materials (print or LMS-hosted), OSHA Publication 3151 (Personal Protective Equipment), NFPA fire extinguisher class reference card, hazard-identification worksheet, data-center floor-plan diagram
Check: Students present their completed OSHA 10-Hour card or completion certificate (issued by OSHA-authorized provider) AND score 80% or higher on instructor-administered 20-question safety knowledge quiz covering electrical hazards, PPE, lockout/tagout, and emergency procedures.

Practice check8

Answer each question, then check it. Nothing is recorded; this is your own practice.

Security Operations / Risk Management
1. A technician is about to replace a faulty battery module inside an energized UPS cabinet rated at 480 volts. What is the FIRST action required under OSHA's Control of Hazardous Energy standard before touching internal components?
Security Operations / Incident Response
2. A server room UPS starts producing smoke. The fire is small and still contained to the unit. Which fire extinguisher class is correct for this situation?
Security Operations / Risk Management
3. During a hazard walk-through of a network closet, you notice several heavy patch cables running across the main aisle floor between two racks. Under OSHA's general-industry standards, this condition is primarily a concern because it:
Security Operations / Risk Management
4. Which OSHA publication provides employers and workers with a framework for conducting a PPE hazard assessment and selecting appropriate protective equipment?
Security Operations / Risk Management
5. An IT worker replaces hard drives in a rack-mounted storage array daily and begins experiencing pain in both wrists. According to ergonomic best practices, which administrative control should be implemented first?
Security Operations / Risk Management
6. Under OSHA's lockout/tagout standard, who is authorized to remove a personal lockout device from a piece of equipment?
Security Operations / Incident Response
7. A data center switches from water-based sprinklers to a clean-agent gaseous suppression system. What is the PRIMARY reason for this change in an IT environment?
Security Operations / Risk Management
8. Which of the following correctly describes the relationship between the OSHA 10-Hour General Industry card and OSHA itself?
Record this lesson on my transcript. Sign in with your key and enrollment email to record lessons (enroll free if you have no key). This page stays open to read and practise.
Program planNext lesson →