Domain 1 · Safety Principles · 10 min read
Process Safety Management
Scope of the PSM Standard
Process safety management (PSM) prevents or minimizes the consequences of catastrophic releases of toxic, reactive, flammable, or explosive chemicals. OSHA's PSM standard, 29 CFR 1910.119, applies to processes involving a highly hazardous chemical listed in its Appendix A at or above the listed threshold quantity (TQ), and to processes involving 10,000 lb or more of a flammable liquid or gas on site in one location. EPA's Risk Management Program (40 CFR Part 68) applies parallel prevention requirements and adds off-site consequence analysis and public risk management plans.
A process includes any group of vessels that are interconnected, and separate vessels located so that a release could involve them. Notable exclusions include retail facilities, oil and gas well drilling and servicing, normally unoccupied remote facilities, hydrocarbon fuels used solely for workplace consumption (such as propane for comfort heating) when not part of a covered process, and flammable liquids stored in atmospheric tanks or transferred while kept below their normal boiling point without chilling or refrigeration.
The 14 Elements of PSM
| Element | Core requirement | Numbers to know |
|---|---|---|
| Employee participation | Written plan of action; consult employees on PHAs and other elements; provide access to PHAs and PSM information | - |
| Process safety information (PSI) | Hazards of the chemicals, technology of the process, and equipment information compiled before the PHA | Complete before PHA |
| Process hazard analysis (PHA) | Systematic team analysis of process hazards using an appropriate method | Update and revalidate at least every 5 years; retain for life of process |
| Operating procedures | Written steps for each operating phase, operating limits, safety and health considerations, safety systems | Certify current and accurate annually |
| Training | Initial training in the process and procedures; refresher training | Refresher at least every 3 years |
| Contractors | Evaluate contractor safety performance; inform of hazards and emergency plan; control entry; log contractor injuries and illnesses | - |
| Pre-startup safety review (PSSR) | Before introducing highly hazardous chemicals to new or significantly modified facilities | - |
| Mechanical integrity (MI) | Written procedures, training, inspection and testing per RAGAGEP, correction of deficiencies, quality assurance | Frequency per manufacturer and good engineering practice |
| Hot work permit | Permit for hot work on or near covered processes documenting fire prevention and protection per 1910.252(a) | - |
| Management of change (MOC) | Written procedures to manage changes other than replacement in kind | Before the change is implemented |
| Incident investigation | Investigate incidents that resulted in, or could reasonably have resulted in, a catastrophic release | Begin within 48 hours; retain reports 5 years |
| Emergency planning and response | Emergency action plan per 1910.38, including procedures for small releases | - |
| Compliance audits | Certify compliance by audit; respond to findings and document corrections | At least every 3 years; keep 2 most recent reports |
| Trade secrets | Make needed information available to those compiling PSI, doing PHAs, and investigating, under confidentiality agreements if needed | - |
- PHA revalidation: at least every 5 years
- Compliance audit: at least every 3 years; retain the two most recent reports
- Refresher training: at least every 3 years
- Operating procedures: certified annually
- Incident investigation: initiated within 48 hours; reports retained 5 years
- Flammable liquid or gas threshold: 10,000 lb in one location
Process Safety Information and Flow Diagrams
PSI is the foundation for every other element; a PHA cannot be valid if the information it analyzes is wrong. PSI has three parts. Hazards of the chemicals include toxicity, permissible exposure limits, physical data, reactivity, corrosivity, thermal and chemical stability, and the hazardous effects of inadvertently mixing different materials (typically drawn from the SDS). Technology of the process includes a block flow diagram or simplified process flow diagram, process chemistry, maximum intended inventory, safe upper and lower limits for temperature, pressure, flow, and composition, and an evaluation of the consequences of deviations. Equipment information includes materials of construction, piping and instrument diagrams, electrical classification, relief system design and design basis, ventilation design, design codes and standards, material and energy balances, and safety systems such as interlocks and suppression.
| Drawing | What it shows | Typical use |
|---|---|---|
| Block flow diagram (BFD) | Major process units as blocks with main material flows | Concept-level overview; training orientation |
| Process flow diagram (PFD) | Major equipment, main process streams, operating temperatures, pressures, flow rates, material and energy balance data | Process design; understanding normal operating conditions |
| Piping and instrumentation diagram (P&ID) | All equipment, piping with line sizes and specifications, valves, instruments, control loops, interlocks, relief devices, vents, and drains | PHA (especially HAZOP node by node), MOC review, lockout point identification, maintenance |
Process Hazard Analysis
The PHA identifies, evaluates, and controls the hazards of a covered process. The employer selects a methodology appropriate to the complexity of the process: what-if, checklist, what-if/checklist, hazard and operability study (HAZOP), failure mode and effects analysis (FMEA), fault tree analysis, or an appropriate equivalent. PHAs are prioritized by the extent of the process hazards, number of potentially affected employees, age of the process, and operating history.
- The hazards of the process
- Any previous incident that had a likely potential for catastrophic consequences
- Engineering and administrative controls applicable to the hazards and their interrelationships, including detection methods (process monitoring, alarms, detectors)
- Consequences of failure of engineering and administrative controls
- Facility siting
- Human factors
- A qualitative evaluation of the range of possible safety and health effects of control failures on employees in the workplace
The PHA team must include at least one employee with expertise in engineering and process operations, at least one employee with experience and knowledge specific to the process being evaluated, and one member knowledgeable in the PHA methodology. The employer must have a system to promptly address the team's findings and recommendations, resolve them in a timely manner, document actions taken, and communicate them to affected operating, maintenance, and other employees. Each PHA is updated and revalidated at least every five years so that it is consistent with the current process and incorporates lessons learned, and it is retained for the life of the process.
| Method | Approach | Best suited for |
|---|---|---|
| What-if | Brainstorming of "What if…?" questions by an experienced team | Simple processes; early design; changes |
| Checklist | Comparison to a list of known hazards, codes, and practices | Standard, well-understood equipment; experience-based checks |
| What-if/checklist | Brainstorming structured and gap-checked by a checklist | Moderately complex processes |
| HAZOP | Guide words (no, more, less, reverse, part of, as well as, other than) applied to parameters at each node of the P&ID | Complex continuous or batch processes; new designs |
| FMEA | Each component's failure modes and their effects tabulated | Equipment and mechanical systems; single-failure analysis |
| Fault tree analysis | Deductive, top-down logic using AND/OR gates from an undesired top event | Quantifying combinations of failures leading to one major event |
Management of Change and Pre-Startup Safety Review
Management of change (MOC) applies to changes to process chemicals, technology, equipment, procedures, and facilities that affect a covered process. A replacement in kind, meaning a replacement that satisfies the design specification, is not a change. Before implementing a change, the MOC procedure must address the technical basis, the impact on safety and health, modifications to operating procedures, the time period for the change (temporary changes are still changes), and authorization requirements. Affected employees, including contract employees, are informed and trained before start-up of the changed process, and PSI and operating procedures are updated.
A pre-startup safety review (PSSR) is required for new facilities and for modified facilities when the modification is significant enough to require a change in PSI. The PSSR confirms that construction and equipment are in accordance with design specifications; safety, operating, maintenance, and emergency procedures are in place and adequate; a PHA has been performed for new facilities and MOC requirements are met for modified facilities; and training of each employee involved in operating the process is complete.
Pressure Relief
Every pressure vessel and closed system needs protection against overpressure from credible scenarios: blocked outlet, fire exposure, thermal expansion of trapped liquid, runaway reaction, utility failure (cooling water, power, instrument air), control valve failure, and tube rupture in heat exchangers. Many systems also need vacuum relief to prevent collapse when liquid is pumped out or vapor condenses. Relief device discharges are routed to a safe location such as a flare, scrubber, catch tank, or elevated vent.
| Device | Action | Notes |
|---|---|---|
| Relief valve | Spring-loaded; opens gradually in proportion to overpressure | Liquid service |
| Safety valve | Spring-loaded with rapid full-opening (pop) action | Gas, vapor, and steam service |
| Safety relief valve | Pop or proportional action depending on application | Either liquid or vapor service |
| Rupture (bursting) disk | Non-reclosing membrane that bursts at a set pressure | Fast, leak-tight; used alone or upstream of a valve to protect it from corrosive or fouling service; a pressure gauge or telltale between disk and valve detects a leaking disk |
| Pilot-operated relief valve | Main valve controlled by a pilot | Allows operating closer to set pressure |
| Vacuum breaker / conservation vent | Admits air or blanket gas; relieves small pressure and vacuum on tanks | Atmospheric and low-pressure storage tanks |
Under the ASME Boiler and Pressure Vessel Code (Section VIII), relief valves are set at or below the vessel's maximum allowable working pressure (MAWP). During relief, pressure may rise above MAWP only by the permitted accumulation: 10% for a single device, 16% for multiple devices, and 21% for a fire exposure case.
Chemical Compatibility and Materials
Chemical compatibility concerns both the reactions between stored or mixed materials and the reaction between a chemical and its container or equipment. Incompatible mixing can produce heat, fire, explosion, toxic gas, or violent polymerization. PSI must document the hazardous effects of inadvertent mixing, and a compatibility matrix (such as a reactivity chart) is used for storage layout, waste consolidation, and transfer-hose and piping design.
| Combination | Result | Control |
|---|---|---|
| Oxidizers + flammables or organics | Fire or explosion | Separate storage; segregated spill containment |
| Acids + bases | Violent heat release, spattering | Separate cabinets and containment |
| Acids + cyanides | Hydrogen cyanide gas | Strict segregation; dedicated waste streams |
| Acids + sulfides | Hydrogen sulfide gas | Segregation; ventilation; gas detection |
| Hypochlorite (bleach) + acids | Chlorine gas | Never mix cleaners; labeling and training |
| Hypochlorite + ammonia | Chloramine gases | Same as above |
| Water-reactives + water | Flammable or toxic gas and heat (e.g., sodium, calcium carbide) | Dry storage; no water-based sprinklers over them without evaluation |
Materials of construction must resist the process chemicals at operating temperature and pressure. Examples: hydrofluoric acid attacks glass, so glass sight glasses are unsuitable; wet chlorine rapidly corrodes carbon steel that dry chlorine does not; some elastomers swell or dissolve in solvents, causing gasket and hose failure. Material substitutions require MOC unless they meet the original specification.
Inherently Safer Design
Inherently safer design applies PtD thinking to chemical processes. Its four strategies are minimize (intensify: smaller inventories and equipment), substitute (a less hazardous material or chemistry), moderate (attenuate: dilute, refrigerate, or operate at lower temperature and pressure), and simplify (eliminate unnecessary complexity and make errors less likely or easier to correct). Inherent strategies remove or reduce the hazard itself; passive, active, and procedural safeguards then manage what remains, in that order of reliability.
Finished reading?
Lock it in with a quick Domain 1 · Safety Principles quiz.