Process Safety Management (PSM): What It Is and Why It Exists
Process Safety Management (PSM) is OSHA's regulatory framework under 29 CFR 1910.119 that requires employers handling highly hazardous chemicals above specified threshold quantities to implement a comprehensive 14-element management system designed to prevent catastrophic releases - explosions, fires and toxic exposures - that can kill workers and devastate surrounding communities. PSM isn't about slips, trips and falls. It's about preventing the kind of events that make the evening news - the Bhopal disasters, the Texas City refinery explosions, the Deepwater Horizon blowouts that kill dozens and injure hundreds in a single incident.
The distinction between process safety and occupational safety is fundamental. Occupational safety manages high-frequency, lower-severity events - a worker strains their back, cuts their hand, or trips on a hose. Process safety manages low-frequency, catastrophic-severity events - a reactor vessel ruptures, a flammable vapor cloud ignites, or a toxic gas release forces community evacuation. You can have an excellent occupational safety record and still be one failed pressure relief valve away from a disaster. Some of the worst process safety incidents in history occurred at facilities with award-winning lost-time injury rates.
That's why PSM exists as a separate, comprehensive regulatory requirement - because the consequences of getting it wrong are measured not in lost workdays but in body counts.
Free Download: 5 Safe Work Procedures
Choose from 112 professionally written SWPs. No credit card required.
Get Free SWPsWho Must Comply with PSM?
OSHA's PSM standard applies to employers with processes involving:
- Chemicals listed in Appendix A of 29 CFR 1910.119 at or above their specified Threshold Quantities (TQ). The list includes over 130 chemicals - from acetaldehyde to vinyl fluoride - with TQs ranging from 100 to 15,000 pounds depending on the chemical's hazard profile.
- Flammable liquids and gases in quantities of 10,000 pounds or more in a single process (with specific exemptions).
Industries Commonly Subject to PSM
| Industry | Common PSM-Covered Chemicals |
|---|---|
| Oil Refining | Hydrogen fluoride, hydrogen sulfide, flammable hydrocarbons |
| Chemical Manufacturing | Chlorine, ammonia, ethylene oxide, phosgene |
| Petrochemical | Propylene, butadiene, ethylene, methane |
| Pulp and Paper | Chlorine dioxide, sulfur dioxide |
| Water/Wastewater Treatment | Chlorine, sulfur dioxide, anhydrous ammonia |
| Cold Storage / Refrigeration | Anhydrous ammonia (threshold: 10,000 lbs) |
| Agriculture (fertilizer) | Anhydrous ammonia, ammonium nitrate |
| Food and Beverage | Anhydrous ammonia (refrigeration systems) |
| Semiconductor Manufacturing | Silane, phosphine, arsine, diborane |
Notable Exemptions
PSM does not apply to:
- Retail facilities
- Oil or gas well drilling or servicing operations
- Normally unoccupied remote facilities
- Hydrocarbon fuels used solely for workplace consumption as fuel (e.g., propane for heating) when not part of a process
However, facilities exempt from federal PSM may still be covered by EPA's Risk Management Program (RMP) under 40 CFR Part 68, state-level process safety regulations (such as California's CalARP), or Canadian provincial requirements. The regulatory landscape is layered and exemption from one standard doesn't guarantee exemption from all.
The 14 Elements of PSM
The PSM standard consists of 14 interrelated elements. Think of them as a system, not a checklist - weakness in any single element can undermine the entire program. Here's what each requires.
1. Employee Participation
Employers must develop a written plan of action regarding employee participation and consult with employees on the conduct and development of process hazard analyses and other PSM elements. Workers who operate, maintain and work near covered processes have direct knowledge of hazards and system behaviors that engineers and managers lack.
This isn't advisory language - OSHA expects documented evidence that workers were actively involved in PHA development, procedure writing, incident investigations and program audits.
2. Process Safety Information (PSI)
Before conducting a Process Hazard Analysis, employers must compile comprehensive, accurate and current information about:
- The hazards of the chemicals: Toxicity, permissible exposure limits, physical properties, reactivity data, corrosivity, thermal and chemical stability - essentially the complete hazard profile from Safety Data Sheets and technical literature.
- The technology of the process: Block flow diagrams, process chemistry, maximum intended inventory, safe upper and lower operating limits for temperature/pressure/flow/composition and consequences of deviations.
- The equipment in the process: Materials of construction, piping and instrument diagrams (P&IDs), electrical classification, relief system design and design basis, ventilation system design, design codes and standards, material and energy balances and safety systems.
PSI must be kept current. When process modifications occur, when equipment is replaced, or when new hazard data becomes available, the PSI must be updated. Storing this information in a centralized, searchable document management system prevents the all-too-common scenario where critical process information exists only in a retired engineer's desk drawer.
3. Process Hazard Analysis (PHA)
The PHA is the analytical heart of PSM. It's a systematic evaluation of the potential causes and consequences of fires, explosions, releases of toxic or flammable chemicals and major spills. OSHA requires that PHAs use one or more recognized methodologies:
- What-If: Brainstorming-based approach using structured "what if" questions
- Checklist: Comparison against established standards and known hazards
- What-If/Checklist: Combination of both approaches
- HAZOP (Hazard and Operability Study): Systematic node-by-node analysis using guide words (no, more, less, reverse, etc.) applied to process parameters - the most thorough and widely used method for complex processes
- FMEA (Failure Mode and Effects Analysis): Systematic evaluation of equipment failure modes and their consequences
- Fault Tree Analysis: Top-down deductive analysis starting with an undesired event and working backward to identify contributing causes
PHAs must address:
- The hazards of the process
- Previous incidents with catastrophic potential
- Engineering and administrative controls applicable to the hazards
- Consequences of failure of engineering and administrative controls
- Facility siting (proximity of process equipment to occupied buildings, control rooms, etc.)
- Human factors
- A qualitative evaluation of possible safety and health effects on employees
PHAs must be performed by a team with expertise in engineering, process operations and the specific PHA methodology - plus at least one member with direct process experience. Recommendations must be documented, addressed and resolved in a timely manner. PHAs must be updated and revalidated at least every 5 years.
4. Operating Procedures
Written operating procedures are required for each covered process, addressing:
- Initial startup
- Normal operations
- Temporary operations
- Emergency shutdown - including conditions that require it and assignment of responsibility
- Emergency operations
- Normal shutdown
- Startup following a turnaround or emergency shutdown
Procedures must include operating limits, consequences of deviation, steps to avoid or correct deviations and safety and health considerations (hazardous properties, precautions, exposure controls, quality control measures). They must be readily accessible to workers and reviewed annually to certify they are current and accurate.
"Readily accessible" is a frequent citation point. Procedures locked in a supervisor's office, stored only on an intranet that floor operators can't access, or written in technical language that operators can't understand don't meet the standard.
5. Training
Initial training must ensure that each employee involved in operating a covered process understands the process, the specific operating procedures, the hazards and the emergency procedures. Refresher training is required at least every 3 years, or more frequently if necessary.
Training must include verification that workers have understood the content - not just documentation that they attended. OSHA looks for competency verification, not attendance sheets.
6. Contractors
Employers who use contractors to perform maintenance, repair, turnaround, or specialty work on or adjacent to covered processes must:
- Evaluate contractor safety performance and programs before selection
- Inform contractors of known potential fire, explosion, or toxic release hazards
- Explain the emergency action plan to contractors
- Develop and implement safe work practices for contractor activities
- Periodically evaluate contractor safety performance
- Maintain an injury and illness log for contractor employees
Contractors, in turn, must train their employees in safe work practices, document that training, ensure employees follow the facility's safety rules and advise the employer of any hazards identified during the work.
7. Pre-Startup Safety Review (PSSR)
A PSSR is required for new facilities and for modified facilities when the modification is significant enough to require a change in process safety information. The PSSR must confirm that:
- Construction and equipment are in accordance with design specifications
- Safety, operating, maintenance and emergency procedures are in place and adequate
- A PHA has been performed and recommendations resolved
- Training for each employee involved in operating the process has been completed
- Modified equipment meets the requirements of the Management of Change element
8. Mechanical Integrity
This element requires written procedures and a program to maintain the ongoing integrity of process equipment, including:
- Pressure vessels and storage tanks
- Piping systems (including valves)
- Relief and vent systems and devices
- Emergency shutdown systems
- Controls (monitoring devices, sensors, alarms, interlocks)
- Pumps and rotating equipment
The program must include written maintenance procedures, training for maintenance workers, regular inspections and testing at documented intervals, correction of deficiencies and quality assurance for equipment fabrication and installation. Track all mechanical integrity activities - inspection schedules, test results, deficiency corrections and equipment histories - through your document management system.
9. Hot Work Permits
A hot work permit system is required for hot work operations (welding, cutting, brazing, or other spark-producing activities) conducted on or near a covered process. The permit must document:
- Date and authorization
- The object on which hot work is to be performed
- Whether atmospheric monitoring has been conducted
- Fire protection measures in place
- Confirmation that the area has been inspected and safeguards verified
10. Management of Change (MOC)
MOC is one of the most critical - and most frequently violated - PSM elements. Written procedures are required to manage changes to process chemicals, technology, equipment and procedures. Before any change is implemented, the MOC process must address:
- The technical basis for the proposed change
- Impact on safety and health
- Modifications to operating procedures
- Necessary time period for the change
- Authorization requirements
Affected employees and contractors must be informed of and trained on the change before startup. Process safety information and operating procedures must be updated accordingly.
The most common MOC failure is not recognizing that a change has occurred. "Temporary" modifications that become permanent, "minor" equipment substitutions with different metallurgy, gradual operating parameter drift - these are all changes that require MOC but often slip through because nobody identified them as changes.
11. Incident Investigation
Every incident that resulted in, or could reasonably have resulted in, a catastrophic release must be investigated. Investigations must begin within 48 hours of the incident and must include:
- Date and description of the incident
- Factors contributing to the incident
- Recommendations resulting from the investigation
Investigation teams must include at least one person knowledgeable in the process, a contract employee if the incident involved contract work and other persons with expertise as necessary. Reports must be reviewed with affected personnel and recommendations must be tracked to resolution. Reports must be retained for 5 years.
Effective incident reporting and investigation capabilities are essential for PSM compliance. The 48-hour investigation initiation requirement means you need systems in place before an incident occurs - not scrambling to create them after.
12. Emergency Planning and Response
Employers must establish and implement an emergency action plan in accordance with 29 CFR 1910.38. For PSM-covered facilities, this goes beyond basic fire evacuation. Plans must address:
- Procedures for handling small releases that could escalate
- Alarm systems and communication protocols
- Evacuation procedures and routes
- Coordination with local emergency response agencies
- Accounting for all personnel after evacuation
13. Compliance Audits
Employers must certify that they have evaluated compliance with PSM requirements at least every 3 years. The audit must be conducted by at least one person knowledgeable in the process and the audit report must document findings, corrective actions and resolution timelines. The two most recent audit reports must be retained.
Use structured inspection and audit tools to ensure comprehensive coverage of all 14 elements during compliance audits.
14. Trade Secrets
Employers must make all information necessary for PSM compliance available to employees and their representatives, regardless of trade secret claims. Trade secret protections may require confidentiality agreements but cannot be used to withhold process safety information from workers, their representatives, or OSHA.
Common PSM Violations and OSHA Enforcement
PSM violations consistently rank among OSHA's most-cited standards. The most frequent citations involve:
| PSM Element | Common Violation |
|---|---|
| Process Hazard Analysis | PHAs not updated within 5-year cycle, recommendations not resolved |
| Operating Procedures | Procedures not current, not accessible, not annually certified |
| Mechanical Integrity | Inspections not conducted per schedule, deficiencies not corrected |
| Management of Change | Changes implemented without MOC review, "replacement in kind" misapplied |
| Process Safety Information | P&IDs not current, equipment design information missing |
| Training | Refresher training overdue, no competency verification |
OSHA enforcement in PSM is aggressive. The Chemical Safety Board (CSB) investigates major incidents and publishes findings that frequently drive OSHA enforcement actions. Willful PSM violations can carry penalties exceeding $160,000 per violation and facilities with multiple violations face cumulative penalties in the millions.
PSM in Canada
Canada does not have a single federal PSM regulation equivalent to OSHA's 29 CFR 1910.119. However, process safety requirements exist through:
- CSA Z767 (Process Safety Management): The Canadian Standards Association standard that provides a comprehensive PSM framework aligned with international best practices
- Provincial OHS regulations: Several provinces have specific requirements for major hazard facilities
- Alberta's Directive 071: Requirements for upstream oil and gas operations
- Industry standards: Many Canadian facilities voluntarily adopt OSHA PSM or the equivalent elements as best practice
Canadian employers operating in high-hazard industries should not assume the absence of a single PSM regulation means the absence of process safety obligations. Provincial OHS legislation imposes general duties to identify and control hazards, which regulators interpret to include process safety management for facilities handling hazardous materials.
Building a PSM Program: Where to Start
PSM is comprehensive and resource-intensive. For facilities just beginning or rebuilding their program, prioritize in this order:
- Compile Process Safety Information. Everything else depends on accurate PSI. If your P&IDs don't match the field, if your operating limits aren't documented, or if your chemical hazard data is incomplete, every subsequent analysis will be flawed.
- Conduct or update Process Hazard Analyses. The PHA is the engine that drives the rest of the program. Without it, you're guessing about your risks.
- Establish Management of Change procedures. This prevents your PSI and PHAs from becoming outdated the moment a change is made.
- Implement Mechanical Integrity programs. Equipment failure is the most common proximate cause of process safety incidents. Know what you have, know its condition and keep it maintained.
- Build out the remaining elements - operating procedures, training, contractor management, incident investigation, emergency planning, compliance auditing and employee participation.
The Technology Foundation for PSM
Managing a PSM program with paper files and spreadsheets is theoretically possible but practically unsustainable. The volume of documentation - P&IDs, PHAs, MOC records, mechanical integrity logs, training records, investigation reports, audit findings - demands a centralized, searchable, version-controlled system.
Make Safety Easy provides the digital backbone for PSM compliance. Centralize your process safety documentation in our document management system. Track incident investigations from initial report through root cause analysis to corrective action closure with incident reporting tools. Schedule and document mechanical integrity inspections with digital checklists and automated reminders. Book a demo to see how it supports your PSM program, or explore pricing for your facility.