Management of Change Process

Why Management of Change Matters
Many of the most catastrophic industrial incidents in history were triggered not by a failure of original design, but by a change that was made without adequate review. The 1974 Flixborough disaster (a temporary bypass pipe installed without engineering review), the 2005 BP Texas City explosion, and numerous smaller incidents all trace back to uncontrolled change. For this reason, Management of Change (MOC) is a core element of OSHA's Process Safety Management standard (29 CFR 1910.119(l)), EPA's Risk Management Program, ANSI/ASSP Z10, and ISO 45001 (Clause 8.1.3, Management of Change). On the BCSP CSP exam, MOC appears within the Program Management domain because it is a system-level control: it does not fix one hazard, it prevents new hazards from being introduced into a workplace that has already been engineered to be safe.

What Management of Change Is
MOC is a formal, documented process used to identify, evaluate, authorize, communicate, and track any change that could affect safety, health, or environmental performance before that change is implemented. The guiding principle is simple: no change without review. Changes subject to MOC typically include:
• Process chemicals, raw materials, or catalysts
• Technology, equipment, or process parameters (temperatures, pressures, flow rates, set points)
• Procedures, operating limits, or work practices
• Facility layout, utilities, or infrastructure
• Organizational changes (staffing levels, shift schedules, key personnel, contractors, reporting structures)
• Software, control logic, alarms, and safety instrumented systems
• Temporary changes (bypasses, jumpers, temporary piping) and emergency changes

A critical exam concept is the distinction between a change and a replacement in kind (RIK). A replacement in kind is a substitution that meets the original design specification exactly (same make, model, materials, rating, and function). RIK does not require MOC. Anything that deviates from the design specification, even if it seems minor or "equivalent," is a change and must go through MOC. Exam questions frequently test whether you can spot a disguised change, such as replacing a carbon steel gasket with a "similar" one of different material, or substituting a pump with a higher horsepower rating.

How the MOC Process Works
Although organizations customize their systems, a complete MOC process follows a recognizable sequence of steps:

1. Initiation and Identification. Anyone who proposes a change initiates an MOC request describing what will change, why, and where. A screening step determines whether the proposal is a true change or a replacement in kind.

2. Classification. Changes are categorized as permanent, temporary, or emergency. Temporary changes must have a defined expiration date and a plan to either restore original conditions or convert the change to permanent through the full process. Emergency changes may be expedited but still require documented approval and a follow-up review.

3. Technical Basis and Hazard Review. The proposed change is evaluated for its impact on safety and health. Depending on complexity this may involve a checklist, What-If analysis, HAZOP, Failure Modes and Effects Analysis (FMEA), Layer of Protection Analysis (LOPA), or job hazard analysis. OSHA PSM requires that the technical basis, impact on safety and health, modifications to operating procedures, necessary time period, and authorization requirements all be addressed.

4. Risk Assessment and Controls. Identified hazards are evaluated and controls are specified following the hierarchy of controls. Any required changes to engineering, administrative controls, or PPE are listed as action items with owners and due dates.

5. Authorization and Approval. Qualified, designated individuals (engineering, operations, safety, maintenance, and management as appropriate) review and sign off. Approval authority should match the level of risk; higher-risk changes require higher-level or multidisciplinary approval.

6. Update of Process Safety Information and Procedures. Drawings (P&IDs), equipment files, operating procedures, maintenance procedures, and emergency response plans are revised before the change is placed in service.

7. Training and Communication. All affected employees and contractors are informed of, and trained on, the change prior to startup. Communication is documented.

8. Pre-Startup Safety Review (PSSR). For significant changes, a PSSR verifies that construction matches design, that procedures are in place, that training is complete, and that all MOC action items are closed before introducing hazardous materials or energy.

9. Implementation and Closeout. The change is implemented, action items are verified as complete, and the MOC record is closed. For temporary changes, closeout includes restoration to original conditions or conversion to a permanent MOC.

10. Audit and Continuous Improvement. MOC records are periodically audited to confirm the process is being followed, to identify changes that bypassed the system, and to improve the program. ANSI Z10 and ISO 45001 frame this within the Plan-Do-Check-Act cycle.

Key Roles and Documentation
Typical roles include the initiator (identifies and describes the change), the reviewers (technical, operational, and EHS subject matter experts), the approver (accountable manager), and the MOC coordinator (tracks the system and maintains records). Documentation should be retained for the life of the process, and the MOC file becomes part of the facility's process safety information and audit trail.

Common Program Failures
The CSP exam often frames MOC questions around what goes wrong. Frequent failure modes include: changes implemented without MOC because they were mistakenly classified as RIK; temporary changes that become permanent by default; organizational changes (layoffs, shift reductions, loss of experienced personnel) not recognized as changes; approvals granted by people lacking technical competence; procedures and drawings not updated; training not completed before startup; and action items never verified as closed. Recognizing these pitfalls is key to selecting the best answer.

Relationship to Other Program Elements
MOC is interconnected with hazard analysis (PHA/JHA), process safety information, operating procedures, training, contractor management, mechanical integrity, PSSR, incident investigation, and auditing. Incident investigations frequently reveal MOC failures as root causes, and MOC in turn triggers updates to many other elements. Understanding these linkages helps you answer integrative questions that ask which element is most directly affected by a given scenario.

Exam Tips: Answering Questions on Management of Change Process

Tip 1 – Always test for replacement in kind first. If a question describes a substitution, ask whether it meets the original design specification. If anything differs (material, rating, capacity, manufacturer with different specs, chemical grade), it is a change and MOC is required. The exam loves answer choices that say "no review needed because the component is similar." Reject those.

Tip 2 – Remember that MOC applies to people and procedures, not just hardware. Questions describing staffing reductions, a new contractor, revised shift patterns, or a procedure rewritten to save time are MOC scenarios. The best answer will involve evaluating the change's impact on safety before implementation.

Tip 3 – Sequence matters. When asked what should happen first or before startup, the correct answer will almost always be a review, hazard analysis, approval, procedure update, or training step, never "implement the change and monitor." Hazard review precedes approval; procedure updates and training precede startup; PSSR precedes introduction of hazardous materials.

Tip 4 – Know the OSHA PSM MOC requirements. 1910.119(l) requires written procedures addressing: technical basis for the change; impact on safety and health; modifications to operating procedures; necessary time period for the change; and authorization requirements. Also remember that affected employees and contractors must be informed and trained prior to startup, and process safety information and procedures must be updated. Questions may list these elements and ask which is not required, or ask for the missing element in a scenario.

Tip 5 – Temporary and emergency changes are still changes. A temporary bypass still needs MOC with a defined duration and restoration plan. An emergency change may be expedited but still needs documented authorization and a follow-up review. Answer options implying that temporary or emergency status exempts a change from review are distractors.

Tip 6 – Match approval level to risk. If a question asks who should approve a change, the best answer involves qualified, designated personnel with technical competence appropriate to the risk, often a multidisciplinary review, rather than the initiator alone or the first available supervisor.

Tip 7 – Think like a safety professional, not a production manager. CSP questions are written from the standpoint of risk control. When a choice saves time or money by skipping steps, it is almost never correct. When a choice emphasizes documentation, communication, verification, and closure, it is usually the intended answer.

Tip 8 – Connect MOC to incident causation. If a scenario describes an incident that followed an undocumented modification, the root cause answer is typically "failure of the management of change system," not the individual component that failed. Look for systemic, management-system answers over blame-the-worker answers.

Tip 9 – Use the hierarchy of controls when the question asks what control to add after a change. MOC risk assessment should favor elimination, substitution, and engineering controls over administrative controls and PPE.

Tip 10 – Watch for "closeout" questions. MOC is not finished when the change is installed. It is complete when all action items are verified, documentation is updated, training is confirmed, and (for temporary changes) original conditions are restored or the change is made permanent. An answer that stops at implementation is incomplete.

Quick Review Summary
• MOC = formal review and authorization of any change that could affect safety or health, before implementation.
• Replacement in kind (exact match to design spec) is exempt; everything else is a change.
• Core steps: initiate, classify, hazard review, risk assess and control, authorize, update documentation and procedures, train and communicate, PSSR, implement and close out, audit.
• Covers equipment, chemicals, technology, procedures, facilities, software, and organizational/personnel changes.
• Temporary and emergency changes require MOC with defined duration and follow-up.
• Regulatory anchors: OSHA 1910.119(l), EPA RMP, ANSI/ASSP Z10, ISO 45001 Clause 8.1.3.
• On the exam, favor answers that review before acting, involve qualified approvers, update documents and training before startup, and verify closure.