Rules
OSHA Process Safety Management Checklist: The 14 Elements and Where Audits Miss
The OSHA process safety management checklist covers 14 elements under 29 CFR 1910.119; here is what each one demands and where audits stall.
What to take away
- 29 CFR 1910.119 covers any process holding a listed highly hazardous chemical at or above its threshold quantity, or 10,000 pounds or more of a flammable in one location.
- The rule requires a written program built on 14 named elements and a compliance audit at least every three years.
- Audits fail most on process hazard analysis follow-through, management of change, and contractor evaluation, not on a missing manual.
- OSHA can classify a PSM violation as willful or repeated, which brings follow-up inspections and stricter settlement terms.
Who the PSM standard covers
29 CFR 1910.119 covers a process that involves a listed chemical at or above its threshold quantity. It also reaches a flammable liquid or gas held in one location at 10,000 pounds or more. Appendix A to the standard sets those thresholds.
Thresholds run from 100 to 20,000 pounds and are chemical specific, with chlorine at 1,500 pounds and anhydrous ammonia at 10,000. Coverage turns on what is inside the process, not what sits in a warehouse.
Retail facilities, oil and gas well drilling and servicing, normally unoccupied remote facilities, and hydrocarbon fuels burned as fuel sit outside the rule. The full text is at 29 CFR 1910.119.
The 14 elements and where audits stall
OSHA's PSM overview lists the 14 elements at 1910.119(c) through (p), and a manual alone satisfies none.
14 PSM Elements and Audit Gaps
- Employee participationno hazard reporting route
- Process safety informationstale P&IDs
- Process hazard analysisno owner for recommendations
- Operating proceduressteps not revised after modification
- Trainingrefresher past three-year mark
- Contractorsno safety performance evaluation
- Pre-startup safety reviewno review after change
- Mechanical integrityinspection intervals lapsed
Each element leaves records a compliance officer can compare with what the site did. The table pairs each element with the gap auditors find, like a good business development ops checklist pairs a deal stage with its warning sign.
| Element | Where audits miss |
|---|---|
| Employee participation, (c) | No documented route for operators to raise a hazard |
| Process safety information, (d) | P&IDs stale after a field change |
| Process hazard analysis, (e) | Recommendations with no owner or close-out date |
| Operating procedures, (f) | Steps not revised after a modification |
| Training, (g) | Refresher training past the three-year mark |
| Contractors, (h) | No evaluation of contract employer safety performance |
| Pre-startup safety review, (i) | No review before restart after a change |
| Mechanical integrity, (j) | Inspection and test intervals allowed to lapse |
| Hot work permit, (k) | Permits signed with no gas test on record |
| Management of change, (l) | Changes filed as replacement in kind |
| Incident investigation, (m) | Investigation opened later than 48 hours |
| Emergency planning and response, (n) | Drill records missing |
| Compliance audits, (o) | Findings listed but never corrected |
| Trade secrets, (p) | Information withheld that employees need to work safely |
What a compliant record contains
An inspection that follows a release starts with records. A package that holds up contains:
- The written program covering all 14 elements, with an accountable manager named for each.
- Process safety information, including the design basis for relief systems and the codes the process was built to.
- Process hazard analyses, the team's findings, and the schedule for resolving recommendations, kept for the life of the process.
- Compliance audit reports and the employer's response, covering at least the two most recent audits.
- Incident investigation reports, kept for five years, with corrective actions tracked to closure.
- Training records that show each operator's identity and the date of the last refresher.
Written records decide most cases. A performance management case study makes the same point about documentation: what never reached the file is treated as work that did not happen.
Failure to produce a required PSM record is a violation on its own, whether or not anything leaked.
What happens when an element fails
OSHA issued the PSM rule in 1992, three years after the October 1989 explosion at the Phillips 66 Houston Chemical Complex in Pasadena, Texas, which killed 23 workers. Enforcement since has been concentrated.
After the 2005 blast at BP's Texas City refinery, OSHA issued hundreds of willful citations under 1910.119. A willful violation brings follow-up inspections and, for a repeat offender, placement in OSHA's Severe Violator Enforcement Program.
Where a willful violation causes a worker's death, the case can be referred for criminal prosecution as a misdemeanor under the OSH Act. Management of change sits behind many of these citations, and reading change management with a skeptical eye is close to what an auditor does with the file.
Where the rules differ by state
About half the states and territories run an OSHA-approved State Plan, and each must be at least as effective as the federal rule. California goes further. Cal/OSHA enforces its own PSM standard at Title 8 CCR 5189, with a California list of covered chemicals and a separate risk management plan under CalARP.
Texas has no State Plan, so private employers there answer to federal OSHA. Louisiana's plan covers state and local government workers only, leaving private plants under the federal standard. The checks that hold across all of them are the ones in these management foundations checks.
