Process safety management systems and the law

Good engineering alone does not keep a plant safe for decades. Equipment ages, people change jobs, procedures drift, modifications pile up and lessons are forgotten. Process safety management (PSM) is the set of management system elements that keeps hazards understood and safeguards working throughout the life of a facility. This lesson describes the main PSM frameworks, then explains how the law requires them in Canada and the United States. Later lessons go deeper into individual elements such as hazard analysis, management of change and mechanical integrity.

What a PSM system does

A PSM system answers a handful of questions continuously. Do we know what our hazards are and what could go wrong? Do we have the information, procedures and trained people to operate safely? Are our safeguards designed properly and still working? Do we control changes so that they do not create new hazards? Do we learn from incidents and near misses? Are we checking that all of this actually happens? Each element of a PSM framework addresses one or more of these questions, and the elements depend on each other. A hazard analysis is only as good as the process safety information it uses; management of change is only useful if the drawings and procedures are updated afterwards.

The main frameworks

Several frameworks describe PSM elements. They overlap heavily and use different names for the same ideas.

CCPS's Risk Based Process Safety groups its 20 elements under four pillars: commit to process safety, understand hazards and risk, manage risk, and learn from experience. That structure is a useful way to see what any PSM system is trying to do, whichever legal framework applies.

The law in Canada

Canada has no single federal process safety management regulation equivalent to the US OSHA standard. Instead, process safety obligations come from several sources. Provincial occupational health and safety laws impose a general duty on employers to take every precaution reasonable in the circumstances, and inspectors and courts use recognized PSM practice as a measure of what is reasonable. The Canadian Society for Chemical Engineering (CSChE) publishes a widely used Process Safety Management Guide based on the twelve CCPS elements. CSA Z767, Process Safety Management, first published in 2017 and revised as CSA Z767:24, sets out PSM requirements in a management system format; it becomes mandatory where a regulator, permit or contract adopts it.

Several sector regulators add specific requirements. The Canada Energy Regulator requires management systems that include process safety for federally regulated pipelines and facilities, and provincial energy regulators such as the Alberta Energy Regulator and the BC Energy Regulator do the same for upstream oil and gas (HSE-330 to HSE-333). Technical safety authorities such as the TSSA in Ontario regulate boilers, pressure vessels, fuels and refrigeration plants and require operating engineers for larger plants. Under the Canadian Environmental Protection Act, the Environmental Emergency Regulations, 2019 require facilities that store listed substances above threshold quantities to notify Environment and Climate Change Canada and, above higher thresholds, to prepare, test and exercise environmental emergency plans (HSE-251).

Other provinces and sectors have their own rules, and many Canadian operators that are part of international companies follow US or European PSM standards voluntarily. Insurers, customers and industry programs such as the Chemistry Industry Association of Canada's Responsible Care also expect PSM systems. For practical purposes, any Canadian facility with significant inventories of hazardous materials should operate a PSM system based on CSA Z767 or the CSChE guide, whether or not a specific regulation names it.

Is my facility covered?

Coverage decisions start with an inventory of hazardous materials, compared with the thresholds in each applicable rule. The quantity that counts is usually the maximum intended inventory in a process, including connected vessels and interconnected piping, not the average amount on site. The example below uses a few US federal threshold quantities to show the logic; Canadian facilities follow the same steps using the substance lists and thresholds of the Environmental Emergency Regulations and any provincial rules.

# Checking a facility's maximum intended inventories against US federal threshold
# quantities (pounds) for OSHA PSM and EPA RMP. Simplified illustration only.
thresholds = {          # substance: (OSHA PSM TQ, EPA RMP TQ), lb
    "chlorine":           (1500, 2500),
    "anhydrous ammonia":  (10000, 10000),
    "flammable mixture":  (10000, 10000),
}
site = {                # maximum intended inventory in one process, lb
    "chlorine": 1800,
    "anhydrous ammonia": 6500,
    "flammable mixture": 42000,
}
for sub, qty in site.items():
    psm, rmp = thresholds[sub]
    print(f"{sub:<18} {qty:>6} lb | OSHA PSM: {'covered' if qty >= psm else 'not covered':<11} "
          f"| EPA RMP: {'covered' if qty > rmp else 'not covered'}")

chlorine             1800 lb | OSHA PSM: covered     | EPA RMP: not covered
anhydrous ammonia    6500 lb | OSHA PSM: not covered | EPA RMP: not covered
flammable mixture   42000 lb | OSHA PSM: covered     | EPA RMP: covered

In this illustration the chlorine process is covered by OSHA PSM but not by EPA RMP, the ammonia system is below both thresholds, and the flammable mixture is covered by both. Real coverage decisions involve exemptions, mixture rules and definitions that need careful reading of the regulations. Falling below a threshold does not mean the hazard can be ignored: the general duty clauses in both countries still apply, and the ammonia system in this example still needs good process safety practices.

Making PSM real rather than paper

A common failure is a PSM system that exists mainly as binders and software records. Audits find every element documented, yet hazard analysis recommendations sit open for years, procedures do not match how the plant is run, and changes are approved by people who never look at the equipment. The CSB has found this pattern in many investigations. A working PSM system has a few signs: open actions are tracked and closed on time, operators help write and review procedures, management of change reviews include people who know the process, incidents and near misses are reported and investigated without blame, and leaders ask about process safety indicators as often as they ask about production.

Making the system real

A management system is only as good as the way it is used. Auditors look for evidence that each element works in practice: a PHA that was revalidated on time with its recommendations closed, an MOC file that shows a real hazard review, training records that match the people actually doing the work, and inspection results that led to repairs. A useful habit is to pick one recent incident or near miss and trace it through the elements: which element should have prevented it, did that element work as written, and if not, why not. This turns the list of elements into a living system rather than a set of binders.