Process safety management systems and the law

Good engineering alone does not keep a plant safe for decades. Equipment ages, people change jobs, procedures drift, modifications pile up and lessons are forgotten. Process safety management (PSM) is the set of management system elements that keeps hazards understood and safeguards working throughout the life of a facility. This lesson describes the main PSM frameworks, then explains how the law requires them in Canada and the United States. Later lessons go deeper into individual elements such as hazard analysis, management of change and mechanical integrity.

What a PSM system does

A PSM system answers a handful of questions continuously. Do we know what our hazards are and what could go wrong? Do we have the information, procedures and trained people to operate safely? Are our safeguards designed properly and still working? Do we control changes so that they do not create new hazards? Do we learn from incidents and near misses? Are we checking that all of this actually happens? Each element of a PSM framework addresses one or more of these questions, and the elements depend on each other. A hazard analysis is only as good as the process safety information it uses; management of change is only useful if the drawings and procedures are updated afterwards.

The main frameworks

Several frameworks describe PSM elements. They overlap heavily and use different names for the same ideas.

CCPS's Risk Based Process Safety groups its 20 elements under four pillars: commit to process safety, understand hazards and risk, manage risk, and learn from experience. That structure is a useful way to see what any PSM system is trying to do, whichever legal framework applies.

The law in the United States

In the United States, two federal rules require formal process safety management. OSHA's Process Safety Management of Highly Hazardous Chemicals standard (29 CFR 1910.119), adopted in 1992 under the Clean Air Act Amendments of 1990, protects workers at facilities with processes that contain listed highly hazardous chemicals above threshold quantities or 10,000 pounds or more of flammable liquids or gases in one location, with some exemptions such as retail facilities, oil and gas well drilling and servicing, and normally unoccupied remote facilities. EPA's Risk Management Program rule (40 CFR Part 68) protects the public and the environment at facilities holding listed toxic or flammable substances above threshold quantities.

OSHA PSM requires employers to compile process safety information, perform a process hazard analysis and revalidate it at least every five years, write and certify operating procedures, train workers with refresher training at least every three years, manage contractors, conduct pre-startup safety reviews, maintain mechanical integrity, control hot work, manage change, begin incident investigations within 48 hours, plan emergency response, audit compliance at least every three years and involve employees throughout. OSHA held stakeholder meetings in 2022 on possible updates to the standard, but no revised rule had been proposed at the time of writing.

EPA's Risk Management Program sorts covered processes into Program 1, 2 or 3 based on their accident history, potential offsite consequences and industry; Program 3, which covers many chemical plants and refineries, has a prevention program closely aligned with OSHA PSM. Facilities must submit a risk management plan to EPA and update it at least every five years. A 2024 rule, Safer Communities by Chemical Accident Prevention, added requirements such as safer technology and alternatives analysis for some sectors, third-party compliance audits after certain accidents, and more information for the public. In February 2026 EPA proposed to rescind or revise many of these additions; check the current status before relying on either version. States such as California, New Jersey and Delaware have their own process safety programs, and California's refinery PSM rule (2017) is among the most demanding.

Is my facility covered?

Coverage decisions start with an inventory of hazardous materials, compared with the thresholds in each applicable rule. The quantity that counts is usually the maximum intended inventory in a process, including connected vessels and interconnected piping, not the average amount on site. The example below uses a few US federal threshold quantities to show the logic; Canadian facilities follow the same steps using the substance lists and thresholds of the Environmental Emergency Regulations and any provincial rules.

# Checking a facility's maximum intended inventories against US federal threshold
# quantities (pounds) for OSHA PSM and EPA RMP. Simplified illustration only.
thresholds = {          # substance: (OSHA PSM TQ, EPA RMP TQ), lb
    "chlorine":           (1500, 2500),
    "anhydrous ammonia":  (10000, 10000),
    "flammable mixture":  (10000, 10000),
}
site = {                # maximum intended inventory in one process, lb
    "chlorine": 1800,
    "anhydrous ammonia": 6500,
    "flammable mixture": 42000,
}
for sub, qty in site.items():
    psm, rmp = thresholds[sub]
    print(f"{sub:<18} {qty:>6} lb | OSHA PSM: {'covered' if qty >= psm else 'not covered':<11} "
          f"| EPA RMP: {'covered' if qty > rmp else 'not covered'}")

chlorine             1800 lb | OSHA PSM: covered     | EPA RMP: not covered
anhydrous ammonia    6500 lb | OSHA PSM: not covered | EPA RMP: not covered
flammable mixture   42000 lb | OSHA PSM: covered     | EPA RMP: covered

In this illustration the chlorine process is covered by OSHA PSM but not by EPA RMP, the ammonia system is below both thresholds, and the flammable mixture is covered by both. Real coverage decisions involve exemptions, mixture rules and definitions that need careful reading of the regulations. Falling below a threshold does not mean the hazard can be ignored: the general duty clauses in both countries still apply, and the ammonia system in this example still needs good process safety practices.

Making PSM real rather than paper

A common failure is a PSM system that exists mainly as binders and software records. Audits find every element documented, yet hazard analysis recommendations sit open for years, procedures do not match how the plant is run, and changes are approved by people who never look at the equipment. The CSB has found this pattern in many investigations. A working PSM system has a few signs: open actions are tracked and closed on time, operators help write and review procedures, management of change reviews include people who know the process, incidents and near misses are reported and investigated without blame, and leaders ask about process safety indicators as often as they ask about production.

Making the system real

A management system is only as good as the way it is used. Auditors look for evidence that each element works in practice: a PHA that was revalidated on time with its recommendations closed, an MOC file that shows a real hazard review, training records that match the people actually doing the work, and inspection results that led to repairs. A useful habit is to pick one recent incident or near miss and trace it through the elements: which element should have prevented it, did that element work as written, and if not, why not. This turns the list of elements into a living system rather than a set of binders.