4.1 Process Safety Management (PSM) & Risk Management Plan (RMP)

Process Safety Management (PSM) & Risk Management Plan (RMP)

Catastrophic industrial incidents involving toxic, reactive, flammable, or explosive chemicals pose extreme hazards to facility personnel, surrounding civilian populations, and ecological receptors. In response to major historical chemical catastrophes—such as the 1984 Bhopal methyl isocyanate release and the 1989 Pasadena polyethylene plant explosion—the United States established a dual-agency regulatory structure to prevent high-consequence chemical releases.

The Occupational Safety and Health Administration (OSHA) promulgated the Process Safety Management (PSM) of Highly Hazardous Chemicals standard under 29 CFR § 1910.119, focusing on protecting workplace personnel within facility fence-lines. Concurrently, under Section 112(r) of the Clean Air Act Amendments of 1990, the Environmental Protection Agency (EPA) promulgated the Risk Management Program (RMP) rule under 40 CFR Part 68, focusing on preventing chemical releases that could impact surrounding communities and off-site environmental receptors.

Certified Hazardous Materials Managers (CHMMs) operating industrial, chemical manufacturing, refining, or municipal water treatment facilities must master the intricate alignment, overlapping requirements, and distinct differences between OSHA PSM and EPA RMP regulations.

---

1. Regulatory Alignment & Threshold Quantity (TQ) Disparities

While OSHA PSM and EPA RMP share foundational engineering frameworks, their statutory scopes and chemical applicability thresholds exhibit critical differences.

+-----------------------------------------------------------------------------------------+
|                        OSHA PSM vs. EPA RMP JURISDICTIONAL MATRIX                       |
|                                                                                         |
|   REGULATORY ATTRIBUTE   | OSHA PSM (29 CFR § 1910.119)     | EPA RMP (40 CFR Part 68)          |
|   -----------------------+----------------------------------+---------------------------------- |
|   Primary Statutory Base | OSH Act of 1970 § 6(b)           | Clean Air Act § 112(r)            |
|   Target Protected Group | On-site workers and contractors  | Off-site public & environment     |
|   Covered Chemical Scope | ~137 listed toxic/reactives +    | 77 toxic substances +             |
|                          | Category 1 flammable gases or    | 63 listed flammable substances
|                          | liquids with FP < 100°F, subject |                                  
|                          | to regulatory exceptions         |           |
|   Hazard Assessment      | Process Hazard Analysis (PHA)    | Offsite Consequence Analysis (OCA)|
|                          | (On-site impacts & mitigation)   | (Worst-case & alternative plumes) |
|   Regulatory Program     | Single unified standard (14 elem)| 3 Program Tiers (Program 1, 2, 3) |
|   Public Disclosure      | Trade secret protections apply   | Publicly accessible / LEPC filing |
+-----------------------------------------------------------------------------------------+

Key Threshold Quantities (TQs)

A process is covered by PSM or RMP if the quantity of a listed highly hazardous chemical (HHC) or regulated substance meets or exceeds its specific regulatory Threshold Quantity (TQ) in a single process (or interconnected/co-located vessels).

[!IMPORTANT] OSHA flammable coverage and exceptions: Under 29 CFR § 1910.119(a)(1)(ii), the 10,000-pound threshold covers a Category 1 flammable gas or a flammable liquid with flash point below 100°F in one location. Paragraphs (a)(1)(ii)(A) and (B) exclude qualifying hydrocarbon fuels used solely for workplace consumption and qualifying flammable liquids stored in atmospheric tanks or transferred below their normal boiling point without chilling or refrigeration. Determine coverage from the actual process and exception text rather than an NFPA 704 rating.

---

2. The 14 Elements of OSHA Process Safety Management

OSHA PSM is structured into 14 performance-based management elements designed to establish comprehensive defense-in-depth across the lifecycle of a chemical process.

+-----------------------------------------------------------------------------+
|                        THE 14 ELEMENTS OF OSHA PSM                          |
|                                                                             |
|   [1]  Employee Participation       [8]  Mechanical Integrity (MI)          |
|   [2]  Process Safety Information   [9]  Hot Work Permits                   |
|   [3]  Process Hazard Analysis (PHA)[10] Management of Change (MOC)         |
|   [4]  Operating Procedures         [11] Incident Investigation             |
|   [5]  Training & Competency        [12] Emergency Planning & Response      |
|   [6]  Contractor Safety            [13] Compliance Audits (3-Year Cycle)   |
|   [7]  Pre-Startup Safety Review    [14] Trade Secrets                      |
+-----------------------------------------------------------------------------+

Element 1: Employee Participation (29 CFR § 1910.119(c))

Employers must develop a written plan of action to ensure employee involvement. Employers must consult with employees and their representatives on the conduct and development of PHAs and all other elements of PSM, providing employees full access to all PSM documentation.

Element 2: Process Safety Information (PSI) (§ 1910.119(d))

Before performing a PHA, the employer must compile comprehensive written process safety information covering three distinct domains:

1. Hazards of the Process Chemicals: Toxicity, Permissible Exposure Limits (PELs), physical constants (vapor pressure, boiling point), reactivity data, thermal/chemical stability, and hazardous effects of inadvertent mixing.
2. Technology of the Process: Process flow diagrams (PFDs), block flow diagrams, maximum intended inventory, safe upper and lower limits (temperatures, pressures, flows, compositions), and evaluation of consequences of process deviations.
3. Equipment in the Process: Materials of construction, Piping and Instrumentation Diagrams (P&IDs), electrical classification, relief system design and design basis, ventilation system design, safety systems (interlocks, scrubbers, detection alarms), and documentation establishing that equipment complies with Recognized and Generally Accepted Good Engineering Practices (RAGAGEP) (e.g., ASME Boiler and Pressure Vessel Code, API 510/570/653, NFPA codes, ANSI/ISA standards).

Element 3: Process Hazard Analysis (PHA) (§ 1910.119(e))

The PHA is a thorough, systematic identification, evaluation, and control of process hazards.

• Methodologies: The employer must select one or more recognized PHA methodologies appropriate for the process complexity:
  • What-If Analysis: Brainstorming potential operational failures and deviations.
  • Checklist: Structured comparison against engineering checklists and codes.
  • What-If / Checklist: Hybrid approach combining brainstorming with formal verification.
  • Hazard and Operability Study (HAZOP): Rigorous, systematic evaluation using guide words (NO, MORE, LESS, AS WELL AS, PART OF, REVERSE, OTHER THAN) applied to process parameters (Flow, Temperature, Pressure, Level, Composition).
  • Failure Mode and Effects Analysis (FMEA): Component-level hardware reliability assessment identifying failure modes and their equipment/process consequences.
  • Fault Tree Analysis (FTA): Deductive, top-down quantitative or qualitative logic tree modeling boolean events leading to a defined catastrophic top event.
• Team Composition: The PHA must be conducted by a multidisciplinary team including at least one engineer/expert knowledgeable in the specific process chemistry and engineering, and at least one operating employee who has direct, active experience working in the process.
• 5-Year Revalidation Cycle: PHAs must be revalidated and updated by a qualified team at least every five (5) years to ensure the analysis reflects current operational realities and modifications.

Element 4: Operating Procedures (§ 1910.119(f))

Facilities must maintain written, clear operating procedures covering all phases of operations:

• Initial startup, normal operations, temporary operations, emergency shutdown (including conditions under which emergency shutdown is required and assignment of shutdown responsibilities), emergency operations, normal shutdown, and startup following turnaround.
• Operating limits: Consequences of deviation and specific steps to correct/avoid deviations.
• Safety and health considerations: Chemical properties, control measures, engineering controls, PPE, and raw material quality control.
• Annual Certification: The employer must certify annually that operating procedures are current and accurate.

Element 5: Training (§ 1910.119(g))

• Initial Training: Each employee operating a covered process must be trained in an overview of the process and in operating procedures before operating the equipment.
• Refresher Training: Mandatory refresher training must be provided at least every three (3) years (or more frequently if determined necessary in consultation with employees) to ensure ongoing competency.
• Documentation: The employer must maintain training records documenting employee identity, date of training, and the verification method used to establish comprehension.

Element 6: Contractors (§ 1910.119(h))

Applies to contract employers performing maintenance, repair, turnaround, major renovation, or specialty work on or adjacent to a covered process.

• Host Employer Responsibilities: Evaluate contractor safety performance and programs during selection; inform contractors of known fire, explosion, or toxic release hazards; explain facility emergency action plans; control contractor entrance/exit into process areas; and maintain a contractor injury and illness log.
• Contract Employer Responsibilities: Train contract workers in safe work practices; verify contract employees receive training on process hazards; document training; ensure contract employees follow facility safety rules; and promptly report any hazards or injuries.

Element 7: Pre-Startup Safety Review (PSSR) (§ 1910.119(i))

A PSSR is mandatory for all new facilities and for modified facilities whenever a modification is significant enough to require a change in Process Safety Information under MOC.

• The PSSR must confirm prior to introducing highly hazardous chemicals that:
  1. Construction and equipment meet design specifications.
  2. Safety, operating, maintenance, and emergency procedures are in place and adequate.
  3. A PHA has been performed and all recommendations have been resolved or implemented.
  4. Training of each operating employee has been fully completed.

Element 8: Mechanical Integrity (MI) (§ 1910.119(j))

Applies to pressure vessels, storage tanks, piping systems (including valves), relief and vent systems, emergency shutdown systems, and controls/interlocks/alarms.

• Employers must establish written inspection and testing procedures following RAGAGEP (e.g., API 510 for pressure vessels, API 570 for process piping, API 520/576 for relief devices).
• Inspection frequencies must follow manufacturer recommendations and industry codes.
• Equipment deficiencies that exceed acceptable operating limits must be corrected before further use or in a safe, timely manner when safe operation is assured.

Element 9: Hot Work Permits (§ 1910.119(k))

Employers must issue a written Hot Work Permit for all hot work operations (welding, cutting, brazing, open-flame burning, grinding) conducted on or near a covered process.

• The permit must verify that fire prevention and protection requirements under 29 CFR § 1910.252(a) have been implemented prior to work (e.g., combustible materials cleared or shielded within a 35-foot radius, combustible gas testing completed, fire watch assigned with functional fire extinguisher).
• The permit must document the date(s) authorized for hot work and identify the exact equipment/location. The permit must be kept on file until completion of the hot work operations.

Element 10: Management of Change (MOC) (§ 1910.119(l))

Employers must establish and implement written procedures to manage changes to process chemicals, technology, equipment, procedures, and facilities that affect a covered process.

+-----------------------------------------------------------------------------+
|                        MOC MANDATORY REVIEW PROTOCOL                        |
|                                                                             |
|   [1] The technical basis for the proposed change.                          |
|   [2] Impact of change on occupational safety and health.                   |
|   [3] Modifications to operating and maintenance procedures.                |
|   [4] Necessary time period for the change (Temporary vs. Permanent).       |
|   [5] Authorization requirements for the proposed change.                   |
|   [6] Pre-implementation update of PSI, Operating Procedures & Training.    |
+-----------------------------------------------------------------------------+

[!CAUTION] The "Replacement-in-Kind" (RIK) Boundary: MOC procedures apply to all changes except "Replacements-in-Kind" (RIK). An RIK is defined as a replacement that satisfies the exact engineering design specification of the original item (e.g., replacing a failed 316SS 150# gate valve with an identical 316SS 150# gate valve). Replacing an item with a different material, different pressure rating, or altering a control setpoint is not an RIK and requires a formal MOC.

Element 11: Incident Investigation (§ 1910.119(m))

• Scope: The employer must investigate every incident that resulted in, or could reasonably have resulted in (a "near-miss"), a catastrophic release of a highly hazardous chemical.
• Timeline: An incident investigation must be initiated as promptly as possible, but not later than 48 hours following the incident.
• Investigation Team: Must include at least one person knowledgeable in the process (including a contract employee if the incident involved contract work) and persons with appropriate investigation expertise.
• Report & Retention: A written report must detail the date of incident, date investigation began, incident description, factors contributing to the incident, and recommendations. Findings and resolutions must be tracked to completion. Reports must be retained for at least five (5) years.

Element 12: Emergency Planning & Response (§ 1910.119(n))

Employers must establish and implement an Emergency Action Plan in accordance with 29 CFR § 1910.38. In addition, if employees will respond to releases, the employer must comply with the hazardous waste operations and emergency response standard (29 CFR § 1910.120(q) - HAZWOPER).

Element 13: Compliance Audits (§ 1910.119(o))

• Frequency: Employers must certify that they have evaluated compliance with PSM at least every three (3) years.
• Audit Team: The compliance audit must be conducted by at least one person knowledgeable in the process.
• Corrective Action & Retention: A written report must document findings, and the employer must promptly determine and document appropriate responses to each finding. Employers must retain the two (2) most recent compliance audit reports on file.

Element 14: Trade Secrets (§ 1910.119(p))

Employers must make all information necessary to comply with the standard available to those compiling PSI, developing PHAs, writing operating procedures, conducting audits, and investigating incidents, regardless of trade secret claims (subject to standard confidentiality agreements).

---

3. EPA Risk Management Program (RMP) 3-Tier Architecture (40 CFR Part 68)

Under Clean Air Act Section 112(r), EPA establishes three regulatory compliance "Programs" based on process hazard potential, accident history, and public exposure risk:

+-----------------------------------------------------------------------------------------+
|                        EPA RMP THREE-PROGRAM CLASSIFICATION TIERS                       |
|                                                                                         |
|   PROGRAM TIER | ELIGIBILITY CRITERIA                             | MANDATED REQUIREMENTS       |
|   -------------+--------------------------------------------------+---------------------------- |
|   PROGRAM 1    | - Worst-case release distance does not reach     | - Worst-case release        |
|   (Lowest Risk)|   any public receptor. |   hazard assessment.        |
|                | - No accidental release in past 5 years with     | - 5-year accident history.  |
|                |   offsite deaths, injuries, or response/restor.  | - Emergency response        |
|                | - Coordinated with local emergency responders.   |   coordination with LEPC.   |
|   -------------+--------------------------------------------------+---------------------------- |
|   PROGRAM 2    | - Process not eligible for Program 1 AND         | - Streamlined Prevention    |
|   (Moderate)   |   not subject to Program 3.                      |   Program (7 elements:      |
|                | - Typically applies to publicly owned water/     |   Safety Info, Hazard       |
|                |   wastewater in non-OSHA states, retail, farming.|   Review, Ops, Training, MI)|
|   -------------+--------------------------------------------------+---------------------------- |
|   PROGRAM 3    | - Process not eligible for Program 1 AND:        | - Full Prevention Program   |
|   (Highest     |   (a) Covered by OSHA PSM (29 CFR 1910.119), OR  |   (Program 3 prevention     |
|    Risk)       |   (b) Belongs to specific high-hazard NAICS      |   elements comparable to    |
|                |                                                  |   PSM, plus Part 68 duties) |
|                |       codes (e.g., 32411 petroleum refineries,   |   EPA environmental rules). |
|                |       32511 petrochemical, 325181 chlor-alkali). | - Full OCA (WCS & ARS).     |
+-----------------------------------------------------------------------------------------+

Current RMP rule status (August 2026)

EPA's 2024 Safer Communities by Chemical Accident Prevention amendments remain the operative final rule. They add phased requirements in areas such as natural-hazard and power-loss evaluation, facility siting, selected safer-technology analyses, incident root-cause analysis, third-party audits, employee participation, emergency-response notification, exercises, and public information. EPA's February 2026 Common Sense Approach to Chemical Accident Prevention action is a proposal, not a final rule; it does not by itself change current obligations. A CHMM must use the current eCFR, the facility's compliance dates, and EPA's live RMP page rather than treating a proposal as law.

---

4. Offsite Consequence Analysis (OCA) & Hazard Assessments

EPA RMP mandates that facilities conduct atmospheric dispersion modeling to quantify potential toxic plumes, overpressures, and radiant heat impacts on public and environmental receptors.

1. Worst-Case Release Scenario (WCS)

• Release Quantity: For a toxic gas, release the greatest vessel or pipe quantity over 10 minutes. Toxic liquids use the Part 68 volatilization assumptions, while the flammable worst-case scenario uses the applicable vapor-cloud-explosion framework. Do not apply one instantaneous/10-minute rule to every physical state.
• Atmospheric Modeling Assumptions (Mandated Conservative Defaults):
  • Atmospheric stability class: F Stability (very stable night conditions with minimal vertical mixing).
  • Wind speed: 1.5 meters per second ($3.4\text{ mph}$).
  • Ambient air temperature: $25^\circ\text{C}$ ($77^\circ\text{F}$) or the highest maximum daily temperature during the prior 3 years.
  • Passive mitigation (e.g., dikes, catch basins) may be credited only if capable of holding the full vessel capacity without failing. Active mitigation (e.g., water sprays, scrubbers, auto-valves) cannot be credited.
• Endpoint Criteria: Modeling continues until the plume concentration dilutes to the regulated Toxic Endpoint (typically based on ERPG-2: Emergency Response Planning Guideline 2, the maximum airborne concentration below which nearly all individuals could be exposed for up to 1 hour without irreversible health effects) or flammable overpressure endpoint ($1.0\text{ psi}$ blast overpressure or radiant heat flux of $5\text{ kW/m}^2$ for 40 seconds).

2. Alternative Release Scenario (ARS)

• Mandated for Program 2 and Program 3 processes.
• Evaluates more realistic, credible operational failure scenarios (e.g., pipe rupture, pump seal failure, relief valve discharge, overfilled vessel).
• Use typical meteorological conditions for the stationary source; EPA's default is D stability and 3.0 m/s wind when representative local data are unavailable. Both active and passive mitigation may be considered when they are appropriate to the alternative scenario.

5-Year Accident History & Reporting Updates

• 5-Year Accident History: Facilities must document all accidental releases from covered processes in the prior 5 years that caused on-site or off-site deaths, injuries, significant property damage, evacuations, sheltering-in-place, or environmental damage.
• RMP Submissions: Risk Management Plans must be submitted electronically via EPA CDX (RMP*eSubmit) and updated:
  • At least every five (5) years from initial submission.
  • Within six (6) months of adding a newly regulated substance above the TQ or making a significant process modification.
  • Within six (6) months of any accidental release meeting the 5-year accident history criteria.