Management of Change
Management of Change (MOC) is a systematic process used to identify, evaluate, and control hazards introduced when modifications are made to facilities, equipment, processes, materials, procedures, or personnel. Within the Associate Safety Professional (ASP) body of knowledge, MOC is a core safety program element because uncontrolled changes are a leading contributor to incidents, including catastrophic events such as the 1974 Flixborough explosion, where a temporary piping bypass was installed without adequate engineering review. MOC is formally required under OSHA's Process Safety Management standard (29 CFR 1910.119(l)) and EPA's Risk Management Program, but the concept applies broadly to any organization. A key principle is distinguishing 'replacement in kind' (an identical substitution requiring no review) from a true change that alters design basis, operating limits, chemistry, or safeguards. A typical MOC process includes: (1) initiating a change request describing the proposed modification and its technical basis; (2) performing a hazard analysis using tools such as checklists, What-If, or HAZOP to assess safety, health, and environmental impacts; (3) obtaining multidisciplinary review and authorization from engineering, operations, maintenance, and safety; (4) updating process safety information, drawings, procedures, and emergency plans; (5) training or informing affected employees and contractors before startup; (6) conducting a pre-startup safety review to verify all actions are complete; and (7) closing out the change, including converting temporary changes to permanent status or restoring original conditions by the defined expiration date. MOC also addresses organizational changes, such as staffing reductions, shift restructuring, or loss of experienced personnel, which can erode safety competence and oversight. Effective MOC programs define clear roles, time limits for temporary changes, documentation requirements, and periodic audits to verify compliance. For the ASP candidate, MOC illustrates the hierarchy of controls and risk assessment applied proactively. It ties into incident investigation (changes are frequently root causes), contractor management, and continuous improvement under management systems such as ANSI/ASSP Z10 and ISO 45001, which both explicitly require change management processes.
Management of Change (MOC): A Complete Guide for the BCSP ASP Exam
Nearly every major industrial catastrophe in modern history can be traced, at least in part, to an uncontrolled change. The 1974 Flixborough disaster in England, which killed 28 workers, occurred when a temporary 20-inch bypass pipe was installed to replace a cracked reactor without proper engineering review. The pipe failed, releasing roughly 30 tons of cyclohexane, which ignited. The Bhopal tragedy of 1984, the Texas City refinery explosion of 2005, and numerous U.S. Chemical Safety Board (CSB) investigations repeatedly cite the failure to recognize, evaluate, and control change as a root cause.
The lesson is simple but profound: a hazard analysis is only valid for the system as it was analyzed. The moment equipment, chemicals, procedures, staffing, or operating conditions are altered, the original risk assessment may no longer apply. Management of Change (MOC) is the systematic discipline that closes this gap. For the ASP exam, MOC is tested within the Safety Programs and Concepts domain and also surfaces in questions about Process Safety Management (PSM), risk management, and safety management systems (SMS). Understanding it thoroughly gives you leverage across multiple parts of the exam.
What Is Management of Change?
Management of Change is a formal, documented process for reviewing, authorizing, implementing, and communicating modifications to a facility, process, or organization before they are put into effect, so that new hazards are identified and controlled. The core idea is that no change should be made casually; every change must be deliberately evaluated for its impact on safety, health, and the environment.
Regulatory and Consensus Standard Basis
Several frameworks you should recognize for the exam formally require MOC:
1. OSHA Process Safety Management, 29 CFR 1910.119(l) - One of the 14 elements of PSM. It requires written procedures to manage changes (except replacements in kind) to process chemicals, technology, equipment, procedures, and changes to facilities that affect a covered process. Before any change, the employer must address: (a) the technical basis for the proposed change, (b) the impact of the change on safety and health, (c) modifications to operating procedures, (d) the necessary time period for the change, and (e) authorization requirements for the proposed change.
2. EPA Risk Management Program (RMP), 40 CFR Part 68 - Mirrors the OSHA PSM MOC requirement for facilities with regulated substances above threshold quantities.
3. ANSI/ASSP Z10 - The U.S. occupational health and safety management system standard. MOC is a key element within the Implementation and Operation section, and Z10 extends MOC beyond process plants to all workplaces, including organizational and staffing changes.
4. ISO 45001:2018, Clause 8.1.3 - Requires organizations to establish processes for the implementation and control of planned temporary and permanent changes that impact OH&S performance, and to review the consequences of unintended changes.
5. ANSI/ASSP Z590.3 (Prevention through Design) and CCPS Guidelines for Management of Change for Process Safety - Frequently referenced in safety literature and on exams.
What Counts as a Change?
A critical exam concept is distinguishing a change from a Replacement in Kind (RIK).
Replacement in Kind means replacing a component with one that meets the identical design specification - same manufacturer specifications, same materials, same ratings, same function. Example: replacing a worn 150-psi carbon steel gate valve with an identical 150-psi carbon steel gate valve of the same model. RIK does not trigger MOC.
A Change is anything that is not a replacement in kind. Categories include:
- Equipment changes: different materials of construction, pressure ratings, pump capacities, relief valve set points, instrumentation, or control logic.
- Process or chemical changes: new raw materials, different suppliers, altered concentrations, new catalysts, changes in operating temperature, pressure, or flow limits.
- Procedural changes: revised operating procedures, new maintenance methods, altered start-up or shutdown sequences.
- Facility changes: new buildings, relocated control rooms, revised layouts, modifications to ventilation or fire protection.
- Organizational changes: staffing reductions, changes in shift structure, loss of key experienced personnel, new contractors, reorganization of responsibilities. This category is heavily emphasized in Z10, ISO 45001, and CCPS guidance and is often overlooked - which makes it a favorite exam topic.
- Temporary changes: bypasses, jumpers, temporary piping, disabled alarms or interlocks, rental equipment. Temporary changes must have a defined time limit and a plan to return to the original configuration or formally convert the change to permanent.
- Emergency changes: changes made urgently to prevent an imminent hazard. These still require MOC, but the review may be expedited with follow-up documentation completed as soon as practical.
A subtle category is the 'creeping' or incremental change - small modifications that individually seem trivial but cumulatively alter the risk profile of a system. Good MOC programs catch these by setting a low threshold for review.
How Management of Change Works: The Process
Although the exact format varies by organization, the MOC workflow generally follows these steps:
Step 1 - Initiation and Request. Anyone who identifies a need for change submits an MOC request form describing what is to be changed, why (the technical basis or justification), and the proposed scope.
Step 2 - Classification and Screening. A designated MOC coordinator or reviewer determines whether the proposal is a replacement in kind (no further MOC needed) or a true change. If it is a change, they classify it as permanent, temporary, or emergency, and assign the level of review required based on complexity and risk.
Step 3 - Hazard and Impact Review. A multidisciplinary team (operations, engineering, maintenance, safety, and sometimes environmental and industrial hygiene) evaluates the safety, health, and environmental impact. Common tools include checklists, What-If analysis, Hazard and Operability Study (HAZOP), Failure Mode and Effects Analysis (FMEA), Layer of Protection Analysis (LOPA), and Job Hazard Analysis (JHA). The review also considers the impact on existing safeguards, the hierarchy of controls, regulatory compliance, and whether the change affects other systems or units.
Step 4 - Identification of Required Actions. The team lists everything that must be updated or completed before the change goes live: Process Safety Information (P&IDs, material safety information, equipment specifications, relief system design), Standard Operating Procedures, maintenance and inspection procedures, emergency response plans, training materials, and mechanical integrity records.
Step 5 - Authorization. Designated individuals with appropriate authority and competence formally approve the change. Approval levels are typically scaled - a low-risk change may require a supervisor signature, while a high-risk change may require plant management and the safety manager. The person authorizing a change should not be the only person who reviewed it.
Step 6 - Communication and Training. Employees and contractors whose job tasks are affected must be informed of and trained on the change before start-up. Under PSM, this is a specific requirement: affected workers must be trained prior to start-up of the process after the change.
Step 7 - Implementation. The physical or administrative change is made according to the approved scope. Deviations from the approved scope require a new or amended MOC.
Step 8 - Pre-Startup Safety Review (PSSR). For new or modified facilities where the change is significant enough to require a change in process safety information, a PSSR is conducted to verify that construction and equipment meet design specifications, procedures are in place, a hazard analysis has been performed and recommendations resolved, and training is complete. Note that PSSR is a separate PSM element (1910.119(i)) but is tightly linked to MOC.
Step 9 - Documentation and Close-Out. All records are updated, the MOC file is completed, and the change is formally closed. For temporary changes, the close-out confirms that the system has been returned to its original state or that the change has been re-evaluated and made permanent through MOC.
Step 10 - Audit and Continuous Improvement. The MOC program itself is periodically audited (PSM requires compliance audits at least every three years) to verify that changes are being captured, reviewed, and documented. Incidents are examined to determine whether an unmanaged change contributed.
Key Roles and Responsibilities
- Initiator / Requester: Describes the change and its justification.
- MOC Coordinator: Screens requests, routes them, tracks status, and maintains records.
- Technical Reviewers / Subject Matter Experts: Evaluate engineering, operational, safety, and environmental impacts.
- Safety Professional: Facilitates or participates in the hazard review, ensures regulatory requirements are met, and verifies training and documentation.
- Approvers / Authorizers: Managers with authority to accept the residual risk.
- Affected Employees: Must be informed and trained; they are also a key source of hazard identification.
Common Failures in MOC Programs
Exam questions often describe a scenario and ask you to identify the deficiency. Recognize these classic failures:
- Treating a true change as a replacement in kind (e.g., substituting a valve with a different material or rating).
- Making temporary changes with no expiration date, which silently become permanent.
- Performing the hazard review after the change has been implemented.
- Failing to update P&IDs, operating procedures, or training materials.
- Not informing contractors or off-shift personnel.
- Ignoring organizational changes such as staffing reductions, which erode knowledge and increase workload.
- Lack of management authorization or signature by someone without adequate authority.
- No follow-up to verify that recommended controls were actually installed.
Relationship to Other Safety Concepts
MOC does not stand alone. It is the mechanism that keeps other elements current:
- Process Hazard Analysis (PHA): MOC triggers a review or revalidation of the PHA when changes affect the process.
- Process Safety Information (PSI): MOC ensures drawings and data reflect the as-built condition.
- Mechanical Integrity: New equipment must be added to inspection and test schedules.
- Training: Affected employees require training before start-up.
- Pre-Startup Safety Review: Confirms readiness before operation.
- Incident Investigation: Investigations frequently reveal that an unmanaged change was a root cause.
- Plan-Do-Check-Act (PDCA): In Z10 and ISO 45001, MOC sits within the 'Do' (Implementation and Operation) phase and feeds the 'Check' phase through audits.
Exam Tips: Answering Questions on Management of Change
Tip 1 - Know the five PSM MOC considerations cold. The exam loves to ask what must be addressed before a change: technical basis, impact on safety and health, modifications to operating procedures, time period for the change, and authorization requirements. If a question lists these and includes a distractor such as 'cost-benefit analysis' or 'production impact,' the distractor is the wrong answer.
Tip 2 - Master the Replacement in Kind distinction. If a scenario describes replacing a component with one of a different material, rating, size, manufacturer specification, or function, it is a change, not RIK, and MOC is required. If it is truly identical to design specifications, MOC is not required. This is the single most common MOC trick question.
Tip 3 - 'Before' is the key word. MOC review, hazard analysis, documentation updates, and training all occur before the change is implemented or the process is restarted. Any answer choice suggesting the review happens after start-up is almost always wrong.
Tip 4 - Temporary changes still require full MOC and a time limit. Do not be lured by answers implying that temporary changes need less rigor. The correct approach is full review plus a defined duration and a plan to restore the original condition.
Tip 5 - Remember organizational and personnel changes. If a question describes a downsizing, shift change, or loss of a key engineer and asks what management system element should be applied, the answer is Management of Change (per Z10, ISO 45001, and CCPS guidance).
Tip 6 - Link MOC to PSSR correctly. MOC is the review and authorization of the change; PSSR is the verification immediately before start-up that everything is complete. They are distinct PSM elements (MOC is paragraph (l); PSSR is paragraph (i)). Questions may test whether you can tell them apart.
Tip 7 - Identify the root cause in scenario questions. When a case study describes an incident following a modification, look for the failure to conduct MOC as the systemic root cause rather than blaming the individual operator. The exam favors systems thinking over blaming the worker.
Tip 8 - Recognize MOC vocabulary. Terms such as 'technical basis,' 'authorization,' 'replacement in kind,' 'temporary change,' 'affected employees,' 'process safety information,' and 'pre-startup safety review' signal an MOC question even if the phrase 'Management of Change' never appears.
Tip 9 - Use elimination. Eliminate answers that skip steps, bypass authorization, delay documentation, or exclude affected personnel. The best answer is nearly always the most systematic, documented, and proactive option.
Practice Questions
Question 1: A maintenance crew replaces a failed stainless steel pump impeller with a bronze impeller because it was the only one in stock. Which statement is correct?
A. This is a replacement in kind and no further action is needed.
B. This is a change requiring MOC because the material of construction differs.
C. MOC is only required if the pump is in a PSM-covered process.
D. MOC is required only if the bronze impeller fails.
Answer: B. A different material of construction is not a replacement in kind. Although PSM mandates MOC for covered processes, a sound safety management system (Z10, ISO 45001) applies MOC universally, so C is too narrow.
Question 2: Under 29 CFR 1910.119(l), which of the following must be addressed prior to a change?
A. Return on investment
B. Necessary time period for the change
C. Production schedule impact
D. Vendor warranty terms
Answer: B. The time period for the change is one of the five required considerations.
Question 3: A plant installs a temporary hose to bypass a leaking heat exchanger. Three months later the hose ruptures. The most likely MOC program deficiency is:
A. Failure to perform a PSSR for a new facility
B. Failure to set and enforce a time limit for a temporary change
C. Failure to conduct a compliance audit every three years
D. Failure to classify the hose as a replacement in kind
Answer: B. Temporary changes must have a defined duration and be restored or formally made permanent.
Question 4: Which document is most likely to require updating as a result of an MOC for a new pressure relief valve set point?
A. OSHA 300 Log
B. Process Safety Information
C. Hot work permit
D. Emergency contact list
Answer: B. Relief system design and basis are part of Process Safety Information.
Question 5: A facility reduces its control room staff from four operators to two per shift. According to ANSI/ASSP Z10 and ISO 45001, this situation should be handled through:
A. Incident investigation
B. Management of Change
C. Mechanical integrity
D. Hot work program
Answer: B. Organizational and staffing changes are within the scope of MOC under modern safety management system standards.
Summary
Management of Change is the safeguard that keeps every other safety program valid. It requires that any modification that is not a replacement in kind be formally reviewed for its technical basis and safety impact, authorized by competent personnel, documented, communicated through training, and verified before start-up. For the ASP exam, focus on the five PSM considerations, the replacement-in-kind distinction, the requirement that reviews and training occur before implementation, the special handling of temporary and organizational changes, and the relationship between MOC, PHA, PSI, and PSSR. Approach scenario questions by asking: Was the change recognized? Was it reviewed before implementation? Was it authorized, documented, and communicated? If any answer is no, you have found the deficiency the exam is looking for.
ASP - Management of Change Example Questions
Test your knowledge of Management of Change
Question 1
At a chemical plant, a control valve on a solvent transfer line fails. To avoid a shutdown, maintenance proposes installing a flexible hose bypass around the valve for about two weeks until a replacement part arrives. The supervisor asks the safety coordinator how the management of change (MOC) process should treat the bypass. What is the MOST appropriate response?
Question 2
A plant switches to a different cooling-water treatment chemical. Two process engineers reviewed and approved the MOC request after confirming that reactor chemistry was unaffected. Weeks later, a maintenance technician is burned while servicing the dosing pump, because the new chemical calls for different PPE and different isolation steps. Which MOC weakness BEST explains this incident?
Question 3
In management of change (MOC) practice, which of the following is generally classified as a replacement in kind and therefore does NOT trigger a formal MOC review?