Texas City. Bhopal. Piper Alpha. Deepwater Horizon. These disasters were not caused by acts of nature or by technical failures no one could have anticipated. They were caused by failures in the management of hazardous processes: inadequate maintenance programmes, ignored near-miss warnings, changes made without proper review, and production pressure that overrode safety protocols. Process Safety Management exists to prevent exactly these failures, through a structured system of controls that keeps hazardous processes operating within designed limits.
Process Safety Management (PSM) is the organised set of programmes, procedures, and practices that organisations in high-hazard industries use to manage the risks of catastrophic releases of hazardous chemicals or energy. Where occupational health and safety focuses on protecting individual workers from day-to-day hazards, PSM focuses on the integrity of the process itself: the systems, equipment, and management practices that, if they degrade, could cause explosions, toxic releases, or fires that kill many people at once.
Key Takeaways
|
14 elements The OSHA PSM standard (29 CFR 1910.119) defines 14 elements of an effective PSM programme. Together they form a comprehensive system for identifying, evaluating, and controlling major accident hazards in chemical and process industries |
Process vs Occupational Safety is fundamentally different. An organisation can have zero lost-time injuries and still be on the path to a catastrophic process accident. BP Texas City had excellent occupational safety metrics in the years before 15 people died in 2005 |
MOC Management of Change failures are implicated in a disproportionate share of major process accidents. Changes to process chemistry, equipment, or procedures made without formal hazard review remove the safeguards that protect against loss of containment |
Culture Is as important as the technical system. Organisations where production pressure consistently overrides process safety decisions are at high risk of major accidents regardless of the quality of their PSM documentation |
- PSM applies primarily to industries handling highly hazardous chemicals above threshold quantities: oil and gas, chemical manufacturing, petrochemicals, pharmaceuticals, explosives, and paper and pulp production.
- The OSHA PSM Standard (US), the Seveso III Directive (EU), and equivalent national regulations in most industrialised countries provide the legal framework for PSM requirements.
- Process safety incidents have different patterns from occupational safety incidents: they often occur after long periods without problems, triggered by small deviations that interact in unforeseen ways, making conventional safety metrics poor predictors of process safety performance.
- The Bow-Tie analysis methodology, which maps threats that could cause a hazardous event (left side), the preventive controls that stop it (centre), and the mitigative barriers that limit consequences if it occurs (right side), is the most widely used process safety risk communication tool.
Process Safety vs Occupational Safety: A Critical Distinction
The most dangerous misunderstanding in high-hazard industry safety management is treating process safety and occupational safety as the same discipline measured by the same metrics. An organisation can achieve years without lost-time injuries, earn occupational safety awards, and still be systematically degrading the barriers that prevent a catastrophic event. BP’s Texas City refinery demonstrated this precisely: it had won occupational safety recognition in the years before the 2005 explosion that killed 15 workers and injured 180 more.
Occupational safety addresses the hazards that individual workers encounter in routine work: falls, manual handling injuries, electrical contact, struck-by events. The risk model is one hazard affecting one person. Process safety addresses the systemic failure of a hazardous process: a loss of containment that releases toxic, flammable, or explosive material with potential to cause multiple simultaneous fatalities extending beyond the immediate site boundary.
This distinction requires different performance indicators. Lost-time injury frequency rate tells you nothing reliable about process safety performance. Process safety performance indicators (PSPIs) that monitor the health of critical barriers, including pressure relief valve test compliance, safety-critical instrument reliability, overdue inspection rates, and management of change cycle time, provide the leading indicator intelligence that genuine process safety management requires.
For organisations managing both dimensions within a single safety management system, our article on what is a safety management system and how do you implement one covers how the ISO 45001 framework accommodates both occupational and process safety disciplines within a coherent management structure.
⚠️ Build professional Process Safety Management capability
The Process Safety Management (PSM) Certification Training Course develops the hazard identification, risk assessment, barrier management, and PSM programme design skills that HSE and operations professionals in high-hazard industries need to manage major accident risk systematically. Covers all 14 OSHA PSM elements in depth.
The 14 OSHA PSM Elements
| # | Element | Core Requirement and Why It Matters |
|---|---|---|
| 1 | Process Safety Information | Complete, current documentation of hazardous chemicals (toxicity, flammability, reactivity), process technology (operating limits, consequences of deviation), and equipment (materials of construction, design standards). The foundation: you cannot manage hazards you do not understand. |
| 2 | Process Hazard Analysis | Systematic identification of hazards using HAZOP, What-If, FMEA or Fault Tree Analysis. Required at least every five years and after significant changes. The PHA identifies what can go wrong, the consequences, the existing safeguards, and whether additional controls are needed. |
| 3 | Operating Procedures | Written procedures for all operating phases: normal operations, startup and shutdown, temporary operations, emergency shutdown, and emergency procedures. Must reflect actual operational practice, not idealised design intent. |
| 4 | Training | All employees operating covered processes must be trained on process hazards, procedures, and safe work practices. Initial training plus refresher training at intervals not exceeding three years, with documented evidence of competency. |
| 5 | Contractors | Contractors working on or near covered processes must be selected based on safety performance, trained on site-specific hazards, and their safety performance monitored. The organisation’s safety obligations do not end at the gate. |
| 6 | Pre-Startup Safety Review | Formal safety verification before startup of new or significantly modified processes, confirming construction is consistent with design, procedures are in place, PHA recommendations are resolved, and employees are trained. |
| 7 | Mechanical Integrity | Inspection, testing, and maintenance of all process equipment on documented schedules. Equipment failure from inadequate mechanical integrity is a leading cause of loss of containment and one of the most frequently cited PSM deficiencies in major accident investigations. |
| 8 | Hot Work Permit | Permit system for ignition-source work (welding, cutting, grinding) in or near covered processes, with explicit atmospheric testing and area clearance verification before work begins. |
| 9 | Management of Change (MOC) | Formal review and authorisation of all changes to process chemicals, technology, equipment, and procedures before implementation. MOC failures, changes made without hazard review, appear in the causal chain of a disproportionate share of major process accidents. |
| 10 | Incident Investigation | Root cause investigation of all process safety incidents and near-misses, with corrective actions implemented and verified, and findings shared across the organisation. Near-miss investigation is as important as actual incident investigation: near misses are free lessons. |
| 11 | Emergency Planning and Response | Written emergency response plan specific to the process hazards on site, coordinated with local emergency responders, tested through regular drills and exercises. |
| 12 | Compliance Audits | At least every three years, a structured audit verifying that all 14 PSM elements are being implemented effectively, with findings tracked to resolution. |
| 13 | Trade Secrets | Employees involved in PSM activities must have access to all PSM information necessary for their safe performance of duties, including trade secret information, subject to appropriate confidentiality agreements. |
| 14 | Employee Participation | Employees must be meaningfully consulted and involved in developing and implementing PSM programmes, with access to all PHA results and incident investigation findings. Operator knowledge is a critical safeguard in any high-hazard operation. |
Management of Change: The Most Commonly Failed Element
Management of Change (MOC) is consistently identified in major accident investigations as the element most frequently bypassed or implemented inadequately. When a change is made to a process, equipment, or procedure without formal hazard review, safeguards that were designed into the original system may no longer function as intended. The change that seems minor, a valve relocated for operational convenience, a chemical substitution that appears equivalent, a temporary bypass that becomes permanent, can remove the last layer of protection between normal operations and catastrophic failure.
An effective MOC system requires: a clear definition of what constitutes a change requiring MOC review (as distinct from a like-for-like replacement), a documented review process that includes hazard assessment, a formal authorisation step before implementation, communication to affected personnel, and updating of process safety information, operating procedures, and training as required by the change.
“Temporary” changes deserve particular attention. Temporary modifications that are not subject to the same review discipline as permanent ones, or that remain in place beyond their authorised duration because the permanent solution is deferred, are a recurring feature in process accident investigations. A robust MOC system applies the same rigour to temporary changes and sets enforceable time limits on their duration.
Process Hazard Analysis: HAZOP in Practice
HAZOP (Hazard and Operability Study) is the most widely used Process Hazard Analysis methodology in the process industries. It works by a cross-functional team systematically applying guide words (MORE OF, LESS OF, NO/NONE, REVERSE, OTHER THAN, AS WELL AS, PART OF) to each parameter of each process node (flow, temperature, pressure, level, composition) to generate deviations from design intent, and then analysing each deviation for causes, consequences, existing safeguards, and the adequacy of those safeguards.
The cross-functional composition of the HAZOP team is not optional: process engineers, operators with hands-on experience, instrument engineers, safety engineers, and the design engineer all contribute knowledge that no single participant possesses. HAZOP teams that are dominated by engineers without operator input consistently miss the real-world operational deviations that operators know happen routinely.
HAZOP recommendations produce an action list that must be formally tracked, implemented, and verified before startup (for new facilities) or by a defined completion date (for operating facilities). HAZOP actions that are closed as “accept risk” without documented justification, or that remain open indefinitely, are a significant PSM deficiency.
The U.S. Chemical Safety and Hazard Investigation Board (CSB) publishes detailed investigation reports on major US process accidents at csb.gov that provide some of the most instructive case studies available for organisations developing their PSM capability. These reports are required reading for any PSM professional.
🔒 Build safety risk management capability alongside PSM
The Safety Risk Management Certification Training Course develops the risk assessment, barrier management, and risk control skills that complement PSM programmes in high-hazard operational environments, covering both quantitative and qualitative risk assessment methodologies.
The Role of Safety Culture in PSM Effectiveness
A PSM programme that exists in documentation but not in practice is a compliance exercise, not a safety system. The most technically sophisticated PSM documentation cannot prevent a major accident if the culture in which it operates allows production pressure to override safety stops, discourages operators from raising process safety concerns, or normalises the violation of safety-critical procedures because they are seen as inconvenient.
Every major process accident investigation that has examined culture has found versions of the same pattern: warning signals that were visible and documented but not acted upon; operators who knew the process was operating outside safe limits but did not feel empowered to stop it; managers who prioritised production schedules over the maintenance deferrals that were accumulating risk. The documentation was often adequate. The culture was not.
Building a genuine process safety culture requires the same leadership foundations as building any safety culture: visible leadership commitment modelled in daily behaviour (not just annual safety days), genuine psychological safety for raising process safety concerns without career consequence, and accountability structures that treat process safety performance as seriously as financial performance. Our article on how to build a strong safety culture in high-risk industries covers the leadership practices and organisational conditions that determine whether process safety rules are genuinely followed or routinely worked around.
Mechanical Integrity: Where Risk Accumulates Slowly
Mechanical integrity failures are one of the most common physical causes of loss of containment events. Corrosion, erosion, fatigue cracking, seal degradation, and thermal cycling all degrade process containment over time in ways that are not visible without systematic inspection. When inspection and maintenance programmes are deferred under financial or production pressure, risk accumulates silently until a failure occurs.
An effective mechanical integrity programme defines: the critical equipment items that require inspection and maintenance (pressure vessels, piping systems, relief devices, emergency shutdowns, pumps, heat exchangers), the inspection and testing methods appropriate to each equipment type and degradation mechanism, the inspection intervals required based on corrosion rates and remaining life calculations, and the fitness-for-service evaluation process when inspection finds defects.
Inspection findings must be trended over time. A single measurement of wall thickness tells you the current condition. Multiple measurements over time tell you the degradation rate, which allows prediction of when the equipment will reach minimum acceptable thickness. This predictive maintenance thinking, connecting current condition to future failure risk, is what distinguishes a mature mechanical integrity programme from a compliance tick-box exercise.
The mechanical integrity and predictive maintenance disciplines covered in PSM connect directly to the broader asset reliability framework covered in our article on what is reliability-centred maintenance (RCM) and how do you implement it. RCM methodology provides the analytical framework for determining the right inspection and maintenance strategy for each equipment item based on its failure mode characteristics and the consequences of failure.
Conclusion: PSM as an Operational Discipline, Not a Compliance Exercise
Process Safety Management is not a regulatory requirement to be satisfied on paper. It is an operational discipline that, applied rigorously and sustained under the inevitable pressures of commercial operation, genuinely prevents catastrophic accidents that destroy lives, communities, and organisations. The companies that operate high-hazard facilities without major accidents over decades are not luckier than those that have had disasters. They are more disciplined in maintaining the barriers that prevent them.
That discipline requires three things working together: a technically sound PSM programme covering all 14 elements with genuine depth; a safety culture in which production pressure does not override safety stops, near misses are reported and investigated, and everyone from the operator to the CEO models the behaviours the programme requires; and leadership commitment that is visible, sustained, and backed by the resources necessary to keep barriers healthy. Where all three are present, PSM works. Where any of them is absent, the risk of a major accident is significantly elevated regardless of how good the documentation looks.
Related reading: Process safety and occupational safety sit within the same management system. Our article on ISO 45001 vs OHSAS 18001: what changed and what organisations need to do covers how the current international OHS management system standard accommodates both occupational and process safety disciplines and what its leadership and worker participation requirements mean in practice.
Build professional health and safety management capability
Explore Alpha Learning Centre’s full range of Health and Safety courses, from process safety management and safety risk management through to safety leadership and culture, ISO 45001 implementation, and safety audit programmes.