4.2 Management of Change (MOC) & Industry Regulations

4.2 Management of Change and Applicable Standards

Quick Answer: A technical change is not complete when hardware is installed. It is complete when hazards have been reviewed, authorized controls are in place, affected information and procedures are current, people are prepared, and startup conditions have been verified.

Why change control matters

Changes can invalidate the assumptions behind process safety information, equipment design, operating procedures, inspection plans, spares, training, and emergency response. A Management of Change (MOC) process creates a traceable decision path before a non-routine change is placed in service.

The SMRP outline requires professionals to manage effects of changes to processes and equipment, update documentation and procedures, understand applicable standards and regulatory requirements, and ensure compliance. The exact legal requirements depend on jurisdiction and process scope. OSHA's Process Safety Management rule at 29 CFR 1910.119 is especially important for covered U.S. processes involving highly hazardous chemicals, but an organization may use MOC more broadly as an internal risk-control method.

Decide whether a proposal is replacement in kind

Under OSHA PSM, MOC procedures address changes other than replacement in kind. OSHA defines replacement in kind as a replacement that satisfies the design specification.

That is more precise than asking whether the new item looks similar. Check the controlled specification:

• material of construction and chemical compatibility;
• pressure, temperature, electrical, and mechanical ratings;
• dimensions or interfaces that affect process performance;
• capacity, speed, control range, and fail-safe state;
• firmware, software, alarm, trip, and interlock behavior;
• environmental qualification and certification;
• inspection, proof-test, and maintenance requirements.

A carbon-steel valve replaced with the same approved model and specification may qualify as replacement in kind. A titanium valve, smaller bore, different trim, changed fail position, or revised control logic normally changes a design characteristic and should enter the applicable change-review process. An emergency does not erase the obligation; the site needs an authorized emergency-change path with equivalent risk control and later closeout.

Core MOC workflow

A strong workflow includes:

1. Describe the change and boundary. Identify affected equipment, process, software, utilities, documents, and temporary conditions.
2. State the technical basis. Explain the problem, alternatives, design assumptions, and expected result.
3. Evaluate safety and health effects. Use the hazard-analysis method appropriate to risk and complexity. Consider process, occupational, environmental, cybersecurity, and human-factor hazards.
4. Identify requirements. Check law, permits, recognized and generally accepted good engineering practices where applicable, company standards, insurance conditions, and contracts.
5. Define authorizations. Obtain review and approval from roles with the required technical and operational authority.
6. Update information. Revise drawings, piping and instrumentation diagrams, cause-and-effect logic, equipment records, bills of material, set points, procedures, inspection tasks, spare strategies, and training material.
7. Prepare affected people. Inform and train employees and contractors whose work is affected before startup when required.
8. Verify readiness. Confirm installation, controls, procedures, training, documents, and action-item status under the facility's startup criteria.
9. Close and audit. Record approvals, retained action items, startup authorization, as-built status, and effectiveness review.

Temporary changes need an expiration date, an owner, visible status, and a restoration or permanent-conversion plan. Otherwise a temporary bypass can become an undocumented operating condition.

Pre-startup safety review: exact OSHA scope

For processes covered by OSHA PSM, 29 CFR 1910.119(i) requires a pre-startup safety review before the introduction of highly hazardous chemicals to:

• new facilities; and
• modified facilities when the modification is significant enough to require a change in process safety information.

For a new facility, the review confirms that construction and equipment meet design specifications, safety/operating/maintenance/emergency procedures are in place and adequate, the required process hazard analysis has been performed and recommendations resolved or implemented before startup, and training has been completed.

For a modified facility, the review confirms that the MOC requirements have been met. A company may choose to require a readiness review for other equipment energization, but that broader company rule should not be misquoted as the legal scope of OSHA paragraph (i).

Mechanical integrity under PSM

For covered processes, the mechanical-integrity program applies to specified equipment such as pressure vessels and storage tanks, piping systems, relief and vent systems, emergency shutdown systems, controls, and pumps. Procedures, training, inspection and test practices, frequencies, records, and quality assurance are part of the program.

If inspection or testing finds equipment outside acceptable limits, OSHA requires correction before further use or correction in a safe and timely manner when necessary means are taken to assure safe operation. That second clause is not permission to ignore a deficiency. The responsible team must understand the applicable rule, equipment risk, compensating measures, authorization, monitoring, and deadline.

Standards and regulations: use scope and edition correctly

A standard is not automatically law everywhere. It may become mandatory through legislation, regulation, permit, contract, corporate policy, insurer requirement, or adoption by reference. Keep an applicability register containing:

• issuing body and document identifier;
• title, edition, amendments, and effective date;
• affected assets, processes, and locations;
• legal, contractual, or internal basis;
• accountable owner and evidence of compliance;
• review trigger for new editions or operating changes.

Examples relevant to this field include the ISO 55000 family for asset management, ISO 14224 for collection and exchange of reliability and maintenance data in petroleum, petrochemical, and natural-gas industries, and the ISO 20816 series for evaluating machine vibration. Each has a scope. ISO 14224's taxonomy can inform other sectors, but its published scope should not be erased. Equipment-specific parts of ISO 20816, OEM instructions, engineering analysis, and site risk determine vibration criteria; there is no one universal alarm value for every machine.

In the United States, OSHA PSM, lockout/tagout, electrical safety, environmental permits, pressure-equipment rules, and other requirements may apply. Other jurisdictions use different authorities. A professional should identify the controlling obligation rather than select a familiar acronym by habit.

Document and procedure control

Before startup, affected controlled information should be accurate enough to operate and maintain the change safely. Common records include:

• approved design basis and calculations;
• equipment and instrument data sheets;
• P&IDs, electrical one-lines, logic diagrams, and set-point lists;
• operating, isolation, startup, shutdown, and emergency procedures;
• maintenance strategies, inspection intervals, task instructions, and job plans;
• functional-location and serialized-equipment records;
• spare-parts lists and interchangeability decisions;
• training and competency evidence;
• hazard-review actions and startup authorization.

Redline drawings can support field execution, but the process needs ownership and a deadline for verified as-built documents. A closed work order is not proof that every affected controlled document was updated.

Scenario method for exam questions

When evaluating a proposed change:

1. Compare it with the approved design specification.
2. If it is not replacement in kind, enter the applicable MOC process.
3. Identify hazards, technical basis, affected requirements, and approvers.
4. update information, procedures, maintenance tasks, and training.
5. Apply the correct startup/readiness review for the process and company.
6. Verify action closure or formally authorized risk controls.
7. Monitor whether the change achieved its intended result without new adverse effects.

The best response is usually the one that preserves technical review, authorization, documentation, and risk control rather than treating production urgency as permission to bypass them.