4.2 Hot Work and Management of Change

Hot work on or near a covered process

Ammonia plants are full of steel, oil, insulation, and residual refrigerant. A welder who "just tacks a hanger" on a live liquid line is not doing maintenance. That is hot work on or near a covered process, and 29 CFR 1910.119(k) treats it as its own PSM element.

The employer must issue a hot-work permit for hot work operations conducted on or near a covered process. The permit must document that the fire prevention and protection requirements in 29 CFR 1910.252(a) have been implemented before the work begins. It must indicate the date or dates authorized for the hot work and identify the object on which hot work is to be performed. The permit must be kept on file until completion of the hot work operations. That last sentence is a favorite exam trap: the retention rule is until completion, not five years, not "the last two permits," and not "post it on the welding machine forever."

Hot work in this context is welding, cutting, brazing, and other operations that introduce ignition sources. Grinding that throws sparks onto a covered process is treated as hot work in competent ammonia programs even when someone wants to call it "just cleanup." The CIRO decision is not "is the torch pretty?" It is "is this ignition source on or near the ammonia process?" If yes, permit it.

What the permit has to force you to think about

1910.252(a) is the welding fire-prevention rule: relocating combustibles, using guards, assigning a fire watch where required, and making sure the atmosphere and the other side of the wall or vessel are not a surprise. In an engine room that means, in operator language:

• Identify the object — "#2 recirculator equalizing line, south flange," not "somewhere on the roof."
• Confirm dates authorized — a permit written in January does not authorize a July return visit.
• Confirm fire prevention is actually in place before the arc starts: insulation removed or protected, oil-soaked rags gone, a charged hose or extinguisher staged, a fire watch with a view of both sides of a bulkhead when the work can transmit heat or sparks.
• Confirm the process condition: isolated, pumped out, and at a known pressure, or explicitly authorized as hot work on or near a still-live system with compensating controls.
• Keep the paper until the work is complete, including the cool-down period the fire watch is covering.

A contractor who arrives with a torch and a corporate permit that does not name your vessel, your dates, or 1910.252(a) has not met 1910.119(k). The host employer's covered process is still the host employer's process.

Management of change — everything except replacement in kind

29 CFR 1910.119(l) is the element that stops a plant from becoming a different machine than the one the PHA and the PSI describe. The employer must establish and implement written procedures to manage changes — except for replacements in kind — to:

• Process chemicals
• Technology
• Equipment
• Procedures
• Facilities that affect a covered process

Replacement in kind means a replacement that satisfies the existing design specification. Swapping a failed 0–300 psig glycerin-filled pressure gauge for the identical model, range, and materials is replacement in kind. Installing a different range, a different material, a snubber that changes response, or a transmitter that feeds a new interlock is a change.

The CIRO-scale examples are meant to be boringly clear:

Adding evaporator load is the classic miss. The extra circuit looks like "just another coil," but charge, vessel working volume, relief capacity, detector coverage, and operating procedures all move. That is MOC. A same-for-same gauge is not.

The five questions MOC must answer before the change

1910.119(l)(2) requires that the procedures assure these considerations are addressed prior to any change:

1. Technical basis for the proposed change — why this design, this oil, this setpoint, this coil circuit.
2. Impact of the change on safety and health — charge, relief, detection, ventilation, exposure, and what a release would look like after the change.
3. Modifications to operating procedures — what operators will do differently on the next shift.
4. Necessary time period for the change — temporary bypass versus permanent, and when the temporary state ends.
5. Authorization requirements — who can say yes, in writing, before wrenches turn.

If any of those five is missing, it is not an MOC. It is a conversation in the shop. CIRO items often give you a change that was "approved" by a supervisor on a sticky note with no technical basis and no safety-and-health review. That is a failed MOC, not a close call.

Inform, train, update PSI, and know when PSSR applies

1910.119(l)(3). Employees involved in operating a process, and maintenance and contract employees whose job tasks will be affected by a change, must be informed of and trained in the change prior to start-up of the process or the affected part of the process. The training clock is before startup, not "we will catch them at the next monthly meeting."

1910.119(l)(4) and (l)(5). If the change results in a change in process safety information, update the PSI. If it results in a change in operating procedures or practices, update those too. Piping and instrumentation diagrams, relief-valve summaries, charge records, setpoint lists, and the written procedure for the new circuit are not paperwork for later.

Pre-startup safety review is the bridge to paragraph (i). OSHA requires a PSSR for new facilities and for modified facilities when the modification is significant enough to require a change in the process safety information. If you had to change PSI, you do not start ammonia into the new circuit on a handshake. Confirm that construction is in accordance with design, safety/operating/maintenance/emergency procedures are in place, PHA recommendations for the modification are resolved, MOC was completed, and operating employees are trained.

A temporary hose jumper "just for tonight" is still a change to equipment and procedures. If it is not replacement in kind, it needs MOC, a defined time period, and authorization. Temporary is the word that most often hides an unauthorized modification in an ammonia plant.