Process Safety Management Elements

Why Process Safety Management Matters

Process Safety Management (PSM) exists because of catastrophe. The 1984 Bhopal, India methyl isocyanate release killed thousands. The 1989 Phillips 66 explosion in Pasadena, Texas killed 23 workers. The 2005 BP Texas City refinery explosion killed 15. Each of these events involved not a single slip or fall, but a systemic failure in how a facility managed the hazards of highly hazardous chemicals. In response, OSHA promulgated 29 CFR 1910.119, Process Safety Management of Highly Hazardous Chemicals, in 1992, and the EPA followed with the Risk Management Program (RMP) rule at 40 CFR Part 68.

For the CSP candidate, PSM is important for three reasons. First, it represents the clearest example of a management system approach to safety: it is not a list of hazards but a set of interlocking organizational controls. Second, it is heavily tested within the Advanced Application of Safety Principles domain because it integrates hazard analysis, risk assessment, engineering controls, training, change management, and auditing into one framework. Third, understanding PSM lets you reason about any high-consequence, low-probability hazard, even outside the chemical industry. Examiners love PSM because a single scenario can test your knowledge of a dozen distinct principles at once.

What Process Safety Management Is

PSM is a performance-based regulatory standard designed to prevent or minimize the consequences of catastrophic releases of toxic, reactive, flammable, or explosive chemicals. Unlike prescriptive standards that tell you exactly what to do, PSM tells you what outcomes to achieve and requires the employer to build a documented system to get there.

Applicability. The standard applies to processes that involve a chemical listed in Appendix A of 1910.119 at or above its threshold quantity (TQ), and to processes containing 10,000 pounds or more of a flammable gas or flammable liquid (with certain exceptions). A process is defined broadly to include any use, storage, manufacturing, handling, or on-site movement of these chemicals, and interconnected or co-located vessels are considered a single process. Key exemptions include retail facilities, oil and gas well drilling and servicing, normally unoccupied remote facilities, hydrocarbon fuels used solely for workplace consumption, and flammable liquids stored in atmospheric tanks kept below their normal boiling point without chilling or refrigeration.

Relationship to other frameworks. The EPA RMP rule mirrors OSHA PSM but focuses on offsite consequences to the public and environment; it adds hazard assessment (worst-case and alternative release scenarios), a management system, and a Risk Management Plan submitted to EPA. The Center for Chemical Process Safety (CCPS) publishes Risk Based Process Safety, which expands the concept to 20 elements organized into four pillars: Commit to Process Safety, Understand Hazards and Risk, Manage Risk, and Learn from Experience. You may see any of these on the exam, so know which framework a question is referencing.

The 14 Elements of OSHA PSM

Memorize these. Each is a required program component, and the exam will test both the content of each element and the specific numbers attached to it.

1. Employee Participation. Employers must develop a written plan of action for involving employees and their representatives in the development of PHAs and other PSM elements. Employees must have access to PHAs and all other information developed under the standard. This element reflects the principle that workers who operate the process have knowledge no engineer or consultant possesses.

2. Process Safety Information (PSI). Before conducting a PHA, the employer must compile written information in three categories: hazards of the chemicals (toxicity, PELs, physical data, reactivity, corrosivity, thermal and chemical stability, hazardous effects of inadvertent mixing); technology of the process (block flow or process flow diagram, process chemistry, maximum intended inventory, safe upper and lower limits for temperature, pressure, flow, and composition, and consequences of deviation); and equipment in the process (materials of construction, P&IDs, electrical classification, relief system design, ventilation design, design codes, material and energy balances, and safety systems). Equipment must be designed and maintained in accordance with Recognized and Generally Accepted Good Engineering Practices (RAGAGEP). PSI is the foundation; without accurate PSI, every downstream element is compromised.

3. Process Hazard Analysis (PHA). The analytical heart of PSM. The employer must perform an initial PHA using one or more recognized methodologies: What-If, Checklist, What-If/Checklist, Hazard and Operability Study (HAZOP), Failure Mode and Effects Analysis (FMEA), Fault Tree Analysis, or an appropriate equivalent. The PHA must address process hazards, previous incidents with potential for catastrophic consequences, engineering and administrative controls and their interrelationships, consequences of control failure, facility siting, human factors, and a qualitative evaluation of possible safety and health effects on employees. The team must include members with expertise in engineering and process operations, at least one employee with experience and knowledge of the specific process, and one member knowledgeable in the methodology. Findings and recommendations must be addressed and resolved in a timely manner with documented resolutions, and the PHA must be updated and revalidated at least every five years. PHAs must be retained for the life of the process.

4. Operating Procedures. Written procedures must cover each operating phase: initial startup, normal operations, temporary operations, emergency shutdown (including conditions requiring it and assignment of responsibility to qualified operators), emergency operations, normal shutdown, and startup following a turnaround or emergency shutdown. They must address operating limits and consequences of deviation, safety and health considerations including PPE and exposure controls, and safety systems and their functions. Procedures must be readily accessible, reviewed as often as necessary, and certified annually as current and accurate. Safe work practices (lockout/tagout, confined space entry, line breaking, control over facility entrance) must also be developed.

5. Training. Initial training must cover an overview of the process and the operating procedures, with emphasis on specific safety and health hazards, emergency operations, and safe work practices. Refresher training is required at least every three years, or more often if needed, and the employer must consult with employees on the appropriate frequency. Training must be documented with the employee identity, date, and the means used to verify understanding. Employees already operating a process when the rule took effect could be certified in writing as having the required knowledge in lieu of initial training.

6. Contractors. The host employer must evaluate contractor safety performance and programs when selecting contractors, inform them of known hazards and emergency action plan provisions, develop safe work practices to control contractor entry, periodically evaluate contractor performance, and maintain a contractor injury and illness log. The contract employer, in turn, must train its employees in safe work practices and process hazards, document that training, assure that employees follow site rules, and advise the host of unique hazards the contractor introduces. This element was a direct response to the Phillips Pasadena disaster, where contractor maintenance activity initiated the release.

7. Pre-Startup Safety Review (PSSR). Required for new facilities and for modified facilities when the modification is significant enough to require a change in PSI. Before highly hazardous chemicals are introduced, the PSSR must confirm that construction and equipment are in accordance with design specifications, that safety, operating, maintenance, and emergency procedures are in place and adequate, that a PHA has been performed and recommendations resolved (or, for modified facilities, that MOC requirements were met), and that training of each affected employee is complete. PSSR is the final gate between design and operation.

8. Mechanical Integrity (MI). Applies to pressure vessels and storage tanks, piping systems including components such as valves, relief and vent systems and devices, emergency shutdown systems, controls including monitoring devices, sensors, alarms, and interlocks, and pumps. Requires written procedures, training for maintenance personnel, inspection and testing following RAGAGEP at frequencies consistent with manufacturer recommendations and good engineering practice, documentation of each inspection and test, correction of deficiencies outside acceptable limits before further use or in a safe and timely manner, quality assurance that new equipment is fabricated and installed suitably for its application, and verification that maintenance materials, spare parts, and equipment are suitable. MI is about ensuring the primary containment stays intact.

9. Hot Work Permit. A permit must be issued for hot work operations conducted on or near a covered process. The permit documents that the fire prevention and protection requirements of 29 CFR 1910.252(a) have been implemented prior to beginning the work, indicates the date(s) authorized, and identifies the object on which hot work is to be performed. The permit must be kept on file until completion of the hot work.

10. Management of Change (MOC). Written procedures must be established to manage changes to process chemicals, technology, equipment, and procedures, and changes to facilities that affect a covered process. The procedures must address the technical basis for the change, impact on safety and health, modifications to operating procedures, the necessary time period for the change, and authorization requirements. Affected employees and contractors must be informed of and trained in the change prior to startup. PSI and operating procedures must be updated accordingly. The critical exception: replacement in kind, meaning a replacement that satisfies the original design specification, does not trigger MOC. Many catastrophic incidents, including Flixborough in 1974, resulted from unmanaged changes.

11. Incident Investigation. Each incident that resulted in, or could reasonably have resulted in, a catastrophic release must be investigated. The investigation must be initiated as promptly as possible but no later than 48 hours after the incident. The team must include at least one person knowledgeable in the process involved, a contract employee if the incident involved contractor work, and other persons with appropriate knowledge and experience. The report must include the date of the incident, date investigation began, description of the incident, factors that contributed, and recommendations. Findings must be addressed and resolved with documentation, the report must be reviewed with all affected personnel including contractors, and reports are retained for five years. Note the inclusion of near misses: this element treats a near catastrophe as seriously as an actual one.

12. Emergency Planning and Response. The employer must establish and implement an emergency action plan for the entire plant in accordance with 29 CFR 1910.38, which must include procedures for handling small releases. Employers covered by PSM may also be subject to HAZWOPER (1910.120) emergency response requirements if employees will respond to releases.

13. Compliance Audits. Employers must certify that they have evaluated compliance with PSM at least every three years. The audit must be conducted by at least one person knowledgeable in the process, a report of findings must be developed, deficiencies must be promptly addressed and documented, and the two most recent audit reports must be retained. This is the self-correcting feedback loop of the system.

14. Trade Secrets. Employers must make all information necessary to comply with PSM available to those developing PSI, PHAs, operating procedures, incident investigations, emergency planning, and compliance audits, regardless of trade secret status. Confidentiality agreements may be required. Employees and their representatives have access to trade secret information under the same provisions as the Hazard Communication standard.

How the Elements Work Together

The genius of PSM is that the elements form a continuous cycle rather than a checklist. Picture the lifecycle of a process. PSI establishes the factual baseline. The PHA uses that baseline to identify hazards and recommend safeguards. Operating procedures translate safeguards into daily practice, and training ensures people can execute them. Contractor controls extend those expectations to outside workers. Before startup, the PSSR verifies everything is in place. During operation, Mechanical Integrity maintains the hardware, hot work permits control a specific high-risk activity, and MOC ensures that any deviation from the analyzed state is itself analyzed. When something goes wrong, Incident Investigation feeds lessons back into PSI, PHA, and procedures. Emergency planning limits consequences when prevention fails. Compliance audits check the entire system every three years, and employee participation threads through all of it. Trade secrets ensures that proprietary concerns never block safety information.

Think of the cycle as Plan-Do-Check-Act applied to catastrophic hazards. PSI, PHA, and procedures are Plan; training, operations, MI, and permits are Do; incident investigation and audits are Check; MOC and resolution of recommendations are Act. Examiners frequently ask which element is triggered by an event, or which element failed in a scenario, and this systems view is how you answer those questions.

Key Numbers to Memorize

PHA revalidation: every 5 years, retained for life of process.
Operating procedures: certified annually.
Refresher training: at least every 3 years.
Incident investigation: initiated within 48 hours, reports retained 5 years.
Compliance audits: every 3 years, keep the two most recent.
Flammable gas or liquid threshold: 10,000 pounds.
Hot work permit: filed until work is complete.
PSSR: before introduction of highly hazardous chemicals.

Common PHA Methodologies and When to Use Them

Expect questions that ask you to select an appropriate PHA technique. Checklist is best for well-understood processes with established practices. What-If is a brainstorming method good for early design or simpler processes. What-If/Checklist combines creativity with structure. HAZOP is a systematic, guide-word driven method (no, more, less, reverse, other than, part of, as well as) applied to nodes on a P&ID; it is the most common method for complex continuous chemical processes. FMEA examines individual component failure modes and their effects, and works well for equipment-focused analysis. Fault Tree Analysis is a deductive, top-down method starting from an undesired top event, useful for quantifying the probability of a specific catastrophic outcome. Layer of Protection Analysis (LOPA) is a semi-quantitative method often used after a HAZOP to determine whether independent protection layers are adequate. If a question describes a complex, highly instrumented process with many parameters, HAZOP is almost always the intended answer.

Exam Tips: Answering Questions on Process Safety Management Elements

Tip 1: Identify which element the question is really about. Scenario questions describe an event and ask what was required or what failed. Translate the scenario into an element. A contractor was injured and the host did not know: Contractors. A valve was replaced with a different pressure rating: MOC (not replacement in kind). A unit started up with incomplete training: PSSR. Corroded piping ruptured: Mechanical Integrity. A near miss was not documented: Incident Investigation. Once you name the element, the answer usually follows.

Tip 2: Know the trigger and the timeline. Many distractors use the wrong number. If a question asks how often PHAs must be revalidated and offers 3 years, 5 years, and annually, do not confuse the PHA interval (5) with the audit interval (3) or the procedure certification interval (annual). Build a mental table and drill it.

Tip 3: Watch for replacement in kind. This is the most common MOC trap. If the replacement meets the original design specification, MOC is not required. If anything about it differs (material, rating, manufacturer with different specs, control logic), MOC is required. Read carefully for words like identical, same specification, or upgraded.

Tip 4: Distinguish PSM from RMP and from CCPS. If the question mentions offsite consequences, the public, worst-case release scenarios, or submission to EPA, think RMP. If it mentions 20 elements or four pillars, think CCPS Risk Based Process Safety. If it mentions 14 elements, Appendix A threshold quantities, or employee protection, think OSHA PSM.

Tip 5: Remember the order of operations. PSI must exist before PHA. PHA recommendations must be resolved and training complete before PSSR. PSSR must occur before chemicals are introduced. MOC must be completed and employees informed before startup of the change. Questions that ask what must occur first or what must occur before are testing this sequence.

Tip 6: Think management system, not hardware. PSM is a performance-based standard about organizational controls. When a question offers one answer that is a specific engineering fix and another that is a systemic program improvement, and the question asks about PSM compliance or root cause, the systemic answer is usually correct. Examiners want you to recognize that a corroded pipe is a symptom; the absence of an MI inspection program is the cause.

Tip 7: Include near misses. Incident investigation under PSM covers events that could reasonably have resulted in a catastrophic release. If a question describes a near miss and asks whether investigation is required, the answer is yes.

Tip 8: Know the required team composition. PHA teams need process expertise, operations experience, and methodology knowledge. Investigation teams need process knowledge and a contractor representative if contractors were involved. Audit teams need at least one person knowledgeable in the process. Questions about who must participate are common.

Tip 9: Use elimination on applicability questions. Know the exemptions cold: retail facilities, oil and gas well drilling and servicing, normally unoccupied remote facilities, atmospheric storage of flammables below normal boiling point without refrigeration, and hydrocarbon fuels used solely as workplace fuel. If a scenario matches an exemption, PSM does not apply regardless of quantity.

Tip 10: Connect PSM to broader safety principles. The CSP exam is not just regulatory recall. Be ready to explain why employee participation improves hazard identification, why MOC prevents incidents like Flixborough, how MI relates to barrier theory and layers of protection, and how compliance audits embody continuous improvement. Questions that ask for the purpose or rationale behind an element reward this deeper understanding.

Worked Example

A refinery replaces a carbon steel section of piping with a stainless steel section of the same diameter and pressure rating because the original corroded faster than expected. The maintenance supervisor states that no MOC review is needed because the new pipe has the same dimensions. Which statement is correct?

Reasoning: The change is in material of construction, which is a change in process equipment and in PSI. Same dimensions do not make it a replacement in kind, because the original design specification called for carbon steel. Stainless steel has different corrosion behavior, different thermal expansion, and may introduce different failure modes such as chloride stress corrosion cracking. Therefore MOC is required, PSI must be updated, and affected employees must be informed before startup. The correct answer is the option stating that MOC is required because the material of construction changed. Distractors would include options asserting that identical dimensions constitute replacement in kind, or that only a PSSR is needed, or that a full PHA revalidation is immediately required (not necessarily; MOC determines whether the PHA needs updating).

Final Summary

Process Safety Management is a 14-element, performance-based management system under 29 CFR 1910.119 designed to prevent catastrophic releases of highly hazardous chemicals. Its elements span information, analysis, procedures, people, hardware, change, learning, and verification, and they operate as an integrated cycle. For the CSP exam, master the list of elements, the key intervals and retention periods, the triggers that activate each element, the replacement in kind exception, the PHA methodologies, and the distinction between OSHA PSM, EPA RMP, and CCPS RBPS. Approach every scenario question by first naming the element, then recalling its specific requirements, and finally choosing the answer that reflects a systems view of safety rather than a single-point fix.