OSHA Process Safety Management (PSM) 1910.119: The 14 Elements Explained
If you run a process that handles highly hazardous chemicals, OSHA's Process Safety Management standard is not optional, and it is not a checklist you complete once. It is a 14-element management system that must stay current as your process changes — and the elements that look like paperwork are the ones that cause catastrophic releases when they slip. This guide walks through 29 CFR 1910.119 element by element, shows you where programs fail audits, and explains what closed-loop execution actually looks like.
Build an audit-ready PSM program in WhyTrace Plus. WhyTrace Plus connects incident investigation, process hazard analysis findings, and corrective actions in one closed-loop system — so your PHA recommendations, MOC reviews, and incident follow-ups never fall off the radar. See how WhyTrace Plus supports process safety →
What OSHA PSM 1910.119 Covers and Who Must Comply
Process Safety Management (PSM) is OSHA's standard for preventing or minimizing catastrophic releases of toxic, reactive, flammable, or explosive chemicals. It applies to processes that involve a "highly hazardous chemical" at or above a defined threshold quantity, not to every workplace that stores chemicals.
Coverage under 29 CFR 1910.119 is triggered by two conditions:
- Listed toxic and reactive chemicals. Appendix A lists 137 highly hazardous chemicals, each with a specific threshold quantity in pounds. A process at or above that threshold is covered.
- Flammable liquids and gases. A process involving 10,000 pounds (4,535.9 kg) or more of a Category 1 flammable gas or a flammable liquid with a flashpoint below 100 °F (37.8 °C) on site in one location is covered, with limited exceptions (such as hydrocarbon fuels used solely for workplace consumption and certain atmospheric storage).
Common covered industries include oil and gas refining, chemical manufacturing, pulp and paper, water and wastewater treatment using chlorine, food processing using anhydrous ammonia refrigeration, and explosives manufacturing. As of 2026, the standard remains in effect as written, and OSHA continues to run National Emphasis Programs targeting facilities handling highly hazardous chemicals.
The point of coverage is consequence, not volume alone. The standard exists because the failures it addresses — a runaway reaction, a vapor cloud explosion, a toxic release — kill workers and surrounding communities, not just the individual at the point of failure.
The 14 Elements of PSM at a Glance
The PSM standard organizes its requirements into 14 interdependent elements. No single element stands alone — a weak Management of Change process, for example, quietly invalidates your Process Safety Information, which in turn degrades the next Process Hazard Analysis.
| # | Element | 29 CFR 1910.119 paragraph | Core obligation |
|---|---|---|---|
| 1 | Employee Participation | (c) | Written plan; consult employees on PHA and program elements |
| 2 | Process Safety Information (PSI) | (d) | Document hazards, technology, and equipment of the process |
| 3 | Process Hazard Analysis (PHA) | (e) | Systematic hazard evaluation; revalidate at least every 5 years |
| 4 | Operating Procedures | (f) | Written, current procedures for safe operation in each mode |
| 5 | Training | (g) | Initial and refresher training; document competency |
| 6 | Contractors | (h) | Evaluate, inform, and oversee contractor safety performance |
| 7 | Pre-Startup Safety Review (PSSR) | (i) | Confirm readiness before introducing hazardous chemicals |
| 8 | Mechanical Integrity (MI) | (j) | Inspect, test, and maintain critical equipment |
| 9 | Hot Work Permit | (k) | Permit system for welding/cutting near covered processes |
| 10 | Management of Change (MOC) | (l) | Review and approve changes before implementation |
| 11 | Incident Investigation | (m) | Investigate incidents and near-misses; track findings |
| 12 | Emergency Planning and Response | (n) | Establish and maintain an emergency action plan |
| 13 | Compliance Audits | (o) | Audit the PSM program at least every 3 years |
| 14 | Trade Secrets | (p) | Make information available while protecting trade secrets |
The two requirements most often missed are buried in this table: the 5-year PHA revalidation under (e) and the 3-year compliance audit under (o). Both are recurring deadlines, and both are easy to lose track of in a spreadsheet that no one owns.
Foundation Elements: Participation, Information, and Hazard Analysis
These three elements form the analytical foundation of PSM. Everything downstream — procedures, training, maintenance — depends on knowing the process hazards accurately and keeping that knowledge current.
Employee Participation, paragraph (c). You must develop a written plan of action for employee participation, consult with employees and their representatives on the conduct and development of PHAs, and give them access to the PHA and all other PSM information. This is not a sign-off formality — the operators who run the process daily often hold hazard knowledge that engineers reviewing drawings do not.
Process Safety Information, paragraph (d). Before conducting a PHA, you must compile written safety information covering three categories:
- Hazards of the chemicals — toxicity, permissible exposure limits, physical data, reactivity, corrosivity, and thermal/chemical stability.
- Technology of the process — block flow or process flow diagrams, process chemistry, maximum intended inventory, and safe upper and lower limits for variables like temperature, pressure, and composition.
- Equipment in the process — materials of construction, P&IDs, electrical classification, relief system design, ventilation, design codes, and safety system documentation.
PSI is the element that decays silently. Every undocumented change to the process makes the PSI inaccurate, and an inaccurate PSI guarantees an incomplete next PHA.
Process Hazard Analysis, paragraph (e). The PHA is the systematic, organized evaluation of process hazards. You must use a recognized methodology — What-If, Checklist, What-If/Checklist, HAZOP, FMEA, Fault Tree Analysis, or an equivalent — appropriate to the complexity of the process. The PHA team must address process hazards, prior incidents with catastrophic potential, engineering and administrative controls, consequences of control failure, facility siting, human factors, and the qualitative evaluation of safety and health effects of control failure.
Critically, the PHA must be updated and revalidated by a qualified team at least every five years to confirm it remains consistent with the current process. Findings and recommendations must be addressed promptly, resolution documented, and corrective actions completed — with the schedule communicated to affected employees. A PHA that produces recommendations no one tracks to closure is a finding waiting to happen.
Track PHA recommendations to closure. WhyTrace Plus assigns every PHA finding, MOC action item, and incident recommendation to a named owner with a due date and escalation rules — so the items that protect against a catastrophic release are not sitting unresolved in an email thread. Request a WhyTrace Plus demo →
Operational Elements: Procedures, Training, and Contractors
These elements translate hazard knowledge into how work actually gets done day to day. Auditors look for alignment between the written program and what they observe in the field.
Operating Procedures, paragraph (f). You must develop and implement written operating procedures consistent with the PSI, covering steps for each operating phase — initial startup, normal operations, temporary operations, emergency shutdown, emergency operations, normal shutdown, and startup after a turnaround or emergency shutdown. Procedures must include operating limits, consequences of deviation, safety and health considerations, and safety systems and their functions. They must be reviewed as often as necessary to stay current and certified annually as accurate.
Training, paragraph (g). Each employee involved in operating a covered process must receive initial training in an overview of the process and its operating procedures, with emphasis on specific safety and health hazards, emergency operations, and safe work practices. Refresher training is required at least every three years, or more often if needed. You must document that the employee understood the training — not merely that it was delivered.
Contractors, paragraph (h). Because contractors perform much of the maintenance, turnaround, and specialty work around covered processes, the standard imposes obligations on both host employers and contract employers:
| Host employer responsibility | Contract employer responsibility |
|---|---|
| Evaluate contractor safety performance before selection | Train employees in safe work practices for the assigned tasks |
| Inform contractors of known process hazards | Ensure employees know the applicable process hazards |
| Explain the emergency action plan | Document that each employee received and understood training |
| Maintain a contractor injury/illness log | Advise the host of hazards the contract work itself creates |
| Periodically evaluate contractor performance | Follow facility safety rules |
Contractor work is where outside hands meet the most hazardous equipment, and where communication gaps between host and contractor create exposure. The standard's emphasis here is deliberate.
Asset Integrity Elements: PSSR, Mechanical Integrity, and Hot Work
These elements protect against failures of the physical plant and the work performed on it. Mechanical Integrity, in particular, is consistently the most-cited PSM element in OSHA enforcement.
Pre-Startup Safety Review, paragraph (i). Before introducing a highly hazardous chemical into a new or modified facility, you must confirm that construction and equipment conform to design specifications, that safety/operating/maintenance/emergency procedures are in place and adequate, that a PHA has been performed and recommendations resolved for new facilities, and that affected employees have been trained. The PSSR is the last gate before hazardous chemicals enter the system — once they do, the opportunity to catch a design or procedural gap before consequences is gone.
Mechanical Integrity, paragraph (j). This element requires you to maintain the ongoing integrity of process equipment: pressure vessels and storage tanks, piping systems, relief and vent systems and devices, emergency shutdown systems, controls and alarms, and pumps. You must establish and document written procedures, train maintenance employees, perform inspections and tests following recognized engineering practices at frequencies consistent with manufacturer recommendations and operating experience, correct deficiencies before further use (or assure safe operation in the interim), and apply quality assurance to new and replacement equipment.
In OSHA enforcement, Mechanical Integrity has historically been the most-cited PSM element, with "inspection and testing" the most-cited subsection, followed by written procedures. The complexity of the element — many equipment categories, many inspection frequencies, deficiencies that must be tracked to correction — is precisely what makes it difficult to manage on paper and easy to cite.
Hot Work Permit, paragraph (k). You must issue a permit for hot work operations (welding, cutting, brazing, grinding) conducted on or near a covered process. The permit must document that fire prevention and protection requirements under 1910.252(a) are in place, identify the date(s) authorized, identify the object on which hot work is performed, and be kept on file until the work is complete.
Control Elements: MOC, Incident Investigation, and Compliance Audits
These elements keep the management system honest over time. They are the mechanisms by which a PSM program adapts to change, learns from failure, and verifies its own performance.
Management of Change, paragraph (l). You must establish written procedures to manage changes to process chemicals, technology, equipment, and procedures — and any change to a facility that affects a covered process — before the change is implemented. The MOC procedure must address the technical basis for the change, its impact on safety and health, modifications to operating procedures, the time period for the change, and authorization requirements. When a change occurs, affected employees and contractors must be informed and trained, and the PSI and operating procedures must be updated.
MOC is the element that protects every other element. A change implemented without an MOC review leaves the PSI wrong, the procedures wrong, the PHA outdated, and the training incomplete — all at once. "Temporary" changes that become permanent without ever going through MOC are a frequent root cause in catastrophic-release investigations.
Incident Investigation, paragraph (m). You must investigate each incident that resulted in, or could reasonably have resulted in, a catastrophic release — including near-misses. The investigation must begin within 48 hours, be conducted by a team with appropriate knowledge (including a person with operating experience for process-related incidents), and produce a report covering the date of the incident, the date the investigation began, a description of the event, contributing factors, and recommendations. You must establish a system to address and document resolution of the findings and recommendations, and retain the report for five years.
Compliance Audits, paragraph (o). You must certify that you have evaluated compliance with the PSM standard at least every three years. The audit must be conducted by at least one person knowledgeable in the process, produce a report of findings, document an appropriate response to each finding with deficiencies corrected, and retain the two most recent audit reports. This is the standard's self-check — and like the 5-year PHA revalidation, it is a recurring deadline that programs miss when no system tracks it.
Emergency Planning and Response, paragraph (n) requires an emergency action plan for the entire plant per 1910.38, plus provisions for handling small releases. Trade Secrets, paragraph (p) requires that the information needed to comply with the standard be made available to those who develop the PHA, operating procedures, and other elements — while permitting confidentiality agreements to protect proprietary information.
Where PSM Programs Fail Audits — and What Fixes It
Most PSM citations do not come from a missing element. They come from elements that exist on paper but break down in execution — recommendations that were never closed, deadlines that quietly passed, and documentation that no longer matches the plant.
The recurring failure patterns:
- PHA recommendations left open. The hazard analysis identifies risk reduction items, and the items sit unresolved with no owner, no due date, and no tracking. The standard requires prompt resolution and documented completion.
- Missed recurring deadlines. The 5-year PHA revalidation and the 3-year compliance audit pass unnoticed because they live in a spreadsheet no one monitors. A missed revalidation is a citable, documentable failure.
- MOC bypassed for "temporary" or "minor" changes. Changes get made in the field, the PSI and procedures are never updated, and the next PHA is built on inaccurate information.
- Mechanical integrity deficiencies not corrected. Inspections find problems; the corrective actions are not tracked to completion before the equipment is returned to service.
- Incident recommendations not closed. Investigations produce findings; resolution is never documented. The same contributing factor reappears in a later incident.
The common thread is the same one that defeats every management system run on email and spreadsheets: no closed loop. The action is identified, then lost. A functional PSM program assigns every PHA recommendation, MOC action, MI deficiency, and incident finding to a named owner with a due date, escalates overdue items automatically, and refuses to mark a record closed until resolution is documented and — where required — effectiveness is verified.
Close the loop on every PSM action item. WhyTrace Plus runs incident investigation, root cause analysis, and corrective action tracking as one connected workflow. Findings from a PHA, an MOC review, or an incident flow into assigned actions with owners, escalation, and verified closure — so audit-critical items do not disappear. See how WhyTrace Plus supports process safety management →
Frequently Asked Questions
Q. What is the threshold quantity that triggers OSHA PSM coverage?
PSM coverage is triggered when a process involves a highly hazardous chemical at or above its threshold quantity. For the 137 toxic and reactive chemicals in Appendix A of 29 CFR 1910.119, each has its own specific threshold in pounds. For flammables, coverage applies at 10,000 pounds or more of a Category 1 flammable gas or a flammable liquid with a flashpoint below 100 °F, on site in one location, with limited exceptions.
Q. How often must a Process Hazard Analysis be revalidated?
The PHA must be updated and revalidated by a qualified team at least every five years after the initial analysis is completed, to confirm it remains consistent with the current process. The revalidation must account for all changes since the last PHA — including management-of-change actions, incidents, near-misses, and new equipment.
Q. Which PSM element does OSHA cite most often?
Mechanical Integrity, paragraph (j), has historically been the most-cited PSM element in OSHA enforcement, with the "inspection and testing" subsection most cited, followed by written procedures. The element covers many equipment categories and inspection frequencies, and deficiencies must be tracked to correction — complexity that makes it hard to manage on paper.
Q. How is PSM different from EPA's Risk Management Program (RMP)?
OSHA PSM (1910.119) protects workers inside the facility and focuses on preventing catastrophic releases. EPA's RMP (40 CFR 68) protects the surrounding community and the environment and adds offsite consequence analysis and a public risk management plan. The two share most technical elements — many facilities subject to both build one integrated program to satisfy both, since duplicate PHAs, MOC systems, and audits create unnecessary cost and risk of divergence.
Q. What are the penalties for an OSHA PSM violation in 2026?
As of 2026, following the January inflation adjustment, a serious OSHA violation carries a maximum penalty exceeding $16,550, while willful or repeat violations can reach over $165,514 per citation. Because PSM citations frequently appear in groups across multiple elements after a single release, total exposure from a PSM enforcement action can be substantial. The assessed amount depends on OSHA's gravity-based calculation, including hazard severity and the employer's history.
Key Takeaways
- OSHA PSM under 29 CFR 1910.119 applies to processes handling highly hazardous chemicals — the 137 Appendix A toxics/reactives at their listed thresholds, and flammables at 10,000 pounds or more.
- The standard's 14 elements are interdependent: weak Management of Change degrades Process Safety Information, which degrades the next Process Hazard Analysis, which degrades everything downstream.
- Two recurring deadlines are routinely missed: the 5-year PHA revalidation and the 3-year compliance audit. Both are citable failures when they pass untracked.
- Mechanical Integrity is historically the most-cited PSM element, driven by inspection/testing gaps and deficiencies that are found but not corrected before equipment returns to service.
- Most PSM citations come from execution gaps, not missing elements — open PHA recommendations, bypassed MOCs, and unclosed incident findings. The fix is a closed-loop system with named owners, automated escalation, and verified closure.
Related Resources
| Resource | Description | Best For |
|---|---|---|
| Oil & Gas Incident Investigation: Methods and Regulatory Context | How to investigate releases and process-safety incidents in high-hazard energy operations | PSM-covered refineries and upstream operations connecting incident findings to corrective action |
| Corrective Action Management: Stop Losing Track of Your CAPA Items | Building a closed-loop system so PHA, MOC, and incident actions get verified and closed | Process safety teams tracking recommendations across multiple PSM elements |
| Safety Management Trends 2026: AI, IoT, and Regulatory Changes | The regulatory and technology shifts reshaping EHS programs this year | EHS leaders aligning PSM execution with broader 2026 safety strategy |
Sources:
- 29 CFR 1910.119 — Process safety management of highly hazardous chemicals | OSHA
- eCFR :: 29 CFR 1910.119
- 1910.119 App A — List of Highly Hazardous Chemicals, Toxics and Reactives | OSHA
- Process Safety Management (OSHA 3132) | U.S. Department of Labor
- OSHA PSM Citations for Mechanical Integrity | Inspectioneering
- A Quick Review of Recent OSHA PSM Citations | Inspectioneering
- OSHA Penalties 2026: Fine Amounts by Category | Occupros