OSHA PSM Compliance Checklist: 14 Elements Explained (29 CFR 1910.119)

Under 29 CFR 1910.119, OSHA's Process Safety Management standard applies to any facility using highly hazardous chemicals above threshold quantities. A single PSM violation carries a penalty of up to $15,625 per day. Willful violations can reach $156,259 per citation. Despite this, many facilities still treat PSM as a paperwork exercise rather than an operational discipline.

This guide walks through all 14 PSM elements, what OSHA compliance officers specifically audit for, and how digital inspection tools help facilities maintain continuous compliance — not just pass inspections.

What Is OSHA PSM (29 CFR 1910.119)?

The OSHA Process Safety Management standard was enacted after the 1984 Bhopal disaster and the 1989 Phillips Petroleum explosion in Pasadena, Texas, which killed 23 workers. PSM applies to facilities with covered chemicals (chlorine, ammonia, hydrogen, propane, and dozens of others) at or above the thresholds specified in Appendix A of the standard.

Industries commonly covered include petroleum refining, chemical manufacturing, petrochemicals, natural gas processing, pulp and paper mills, and agricultural chemical facilities. If your facility handles covered chemicals at threshold quantities, PSM compliance is not optional.

The 14 Elements of OSHA PSM — What Auditors Check

1. Process Safety Information (PSI) — §1910.119(d)

PSI must include complete documentation on the hazardous chemical (SDS, physical/chemical properties, reactivity, corrosivity), process technology (block flow diagrams, process chemistry, safe upper and lower operating limits for temperature, pressure, and flow), and equipment (materials of construction, P&IDs, design codes, relief system design basis).

Auditor focus: Is the PSI current? Does it reflect the actual process as operated today? OSHA has cited facilities where P&IDs were years out of date or relief valves were replaced without updating documentation. PSI that cannot be located during an inspection is treated as non-existent.

2. Process Hazard Analysis (PHA) — §1910.119(e)

A formal PHA (HAZOP, What-If, Fault Tree, or Checklist method) must be completed by a team that includes one person with experience in the process and one with PHA knowledge. PHAs must be revalidated every five years. Action items from PHAs must be resolved and documented.

Auditor focus: Were action items from the last PHA closed? Is the PHA revalidation overdue? OSHA has issued citations when PHA recommendations went unresolved for years. The five-year revalidation deadline is a hard rule — missing it is a per-se violation.

3. Operating Procedures — §1910.119(f)

Written operating procedures must cover startup, normal operations, temporary operations, emergency shutdown, emergency operations, normal shutdown, and startup after turnarounds. Procedures must be certified as current and accurate annually by the employer.

Auditor focus: Are procedures accessible to operators in the field? Are they in a language operators understand? Have they been updated after process changes? OSHA inspectors frequently find that procedures in the control room do not match what operators actually do — a red flag for systemic compliance failure.

4. Training — §1910.119(g)

Initial training for all employees operating covered processes, plus refresher training at least every three years. Training must document what was covered, who attended, and the means used to verify comprehension (written test, skills demonstration, or oral exam).

Auditor focus: Are training records complete and current? Do operators demonstrate understanding of emergency shutdown procedures in an interview? New contractors must receive safety information before entering covered process areas. Missing refresher training documentation is one of the most common PSM citations.

5. Contractor Safety — §1910.119(h)

Employers must evaluate contractor safety performance before awarding contracts for work in or adjacent to covered processes. Contractors must be informed of potential hazards, fire/explosion/toxic release procedures, and any special work permits required. The contractor must confirm its employees are trained in applicable hazards.

Auditor focus: Does the facility maintain injury/illness logs for contractors? Are contractors receiving the same safety briefings as regular employees? OSHA has cited facilities after contractor fatalities where contractor selection was based solely on price, with no documented safety performance evaluation.

6. Pre-Startup Safety Review (PSSR) — §1910.119(i)

A PSSR is required before startup of any new or significantly modified covered process. It must confirm that construction and equipment meet design specifications, safety and operating procedures are in place and accurate, the PHA has been completed and all recommendations resolved, and all personnel are trained.

Auditor focus: Is there documented evidence that PSSR was completed before startup? A PSSR done after startup is not compliant. Auditors will look for the date the PSSR was signed off versus the date the process was started.

7. Mechanical Integrity — §1910.119(j)

Written procedures for maintaining the ongoing integrity of process equipment — pressure vessels, storage tanks, piping systems, relief devices, emergency shutdown systems, and controls. Inspections and tests must follow recognized and generally accepted good engineering practices (RAGAGEP), such as API 510, API 570, API 653, and NFPA 70E.

Auditor focus: Are inspection frequencies being met? Are deficiencies tracked to resolution within a defined timeframe? Is there documentation showing repairs were made before equipment was returned to service? Mechanical Integrity is consistently the most-cited PSM element in OSHA enforcement actions. Inspectors will pull the inspection schedule and cross-reference it against completed inspection records to find gaps.

8. Hot Work Permit — §1910.119(k)

A hot work permit system must control all ignition sources — welding, cutting, grinding, spark-producing operations — in or near covered process areas. Permits must be issued by authorized personnel and must remain with the work crew in the work area for the duration of the task.

Auditor focus: Are permits being completed for all hot work, not just distributed? Are fire watch requirements being met — specifically, are fire watch personnel remaining at the work area for the required post-work period? OSHA has cited facilities where hot work permits existed but were not being used in the field.

9. Management of Change (MOC) — §1910.119(l)

All changes to process chemicals, technology, equipment, procedures, and facilities must go through a formal MOC process — with one explicit exception for "replacement in kind." MOC documentation must include the technical basis for the change, safety and health impacts, modifications to operating procedures, and the necessary training completed before startup of the changed process.

Auditor focus: Is the MOC process actually being used, or are changes being made informally? This is the leading root cause of PSM process safety incidents. OSHA will interview operators and engineers directly, looking for evidence of informal workarounds that bypassed the MOC system. "We did a temporary fix that became permanent" is a common finding.

10. Incident Investigation — §1910.119(m)

All incidents resulting in, or that could reasonably have resulted in, a catastrophic release must be investigated within 48 hours. Investigation reports must be retained for five years. Recommendations from investigations must be tracked to completion.

Auditor focus: Is the facility conducting near-miss investigations, not just incidents with actual injury? Near-miss reporting is a leading indicator of PSM culture. Are corrective actions tracked to completion, or do they sit open indefinitely? OSHA has cited facilities where investigations were completed but recommendations were never implemented.

11. Emergency Planning and Response — §1910.119(n)

Facilities must have an emergency action plan that coordinates with OSHA 1910.38 requirements and, for facilities with emergency responders, OSHA 1910.120 (HAZWOPER). Local emergency responders must be informed of the hazardous materials on site, the types of emergencies that could occur, and may participate in exercises and drills.

Auditor focus: Is the emergency response plan current and specific to the chemicals and scenarios at this facility? Has it been exercised within the last year? Are local emergency responders (fire department, HAZMAT team) familiar with the facility and its hazards? Generic emergency plans that were never customized to the site are a common finding.

12. Compliance Audits — §1910.119(o)

Facilities must audit their PSM programs at least every three years to verify compliance with the requirements of the standard. At least one member of the audit team must be knowledgeable about the process being audited. Audit reports must be certified by the employer. Reports and corrective action responses must be retained for two audit cycles.

Auditor focus: Are audit findings being addressed and closed within the committed timeframe? Is the audit conducted by people who are actually knowledgeable about the process, not just the EHS department alone? Is the audit report signed by a responsible company official?

13. Trade Secrets — §1910.119(p)

Employers may claim trade secret status for certain process information but cannot withhold it from employees, contractors, or emergency responders who need it to perform their roles safely. Employees have the right to see PSI and PHA documentation. Trade secret protection applies to how the information is used, not whether employees can see it.

14. Employee Participation — §1910.119(c)

Employers must develop a written plan for employee participation in PHAs and other PSM elements. Employees must have access to PHAs and other PSI relevant to their work. This element is often overlooked but is the cultural foundation of an effective PSM program — employees who are engaged in the process are far more likely to identify emerging hazards before they become incidents.

Most Common PSM Violations

Based on OSHA enforcement data, these five elements generate the most citations:

Mechanical Integrity (§j) — Inadequate inspection programs, missed inspection deadlines, unresolved deficiencies
Process Safety Information (§d) — Outdated P&IDs, incomplete PSI packages, missing equipment design documentation
Operating Procedures (§f) — Procedures not certified as current, not accessible to operators in the field
Management of Change (§l) — Changes made informally without MOC, "temporary" changes that became permanent
Process Hazard Analysis (§e) — Overdue PHA revalidations, open action items not tracked to resolution

PSM Compliance Checklist: 8 Core Verification Items

PSI package complete and current for all covered processes (§d checklist — osha-1910-119-psi-checklist)
PHA completed, revalidated within 5 years, all action items closed (§e — osha-1910-119-pha-checklist)
Operating procedures certified as accurate annually, accessible to operators (§f — osha-1910-119-operating-procedures-checklist)
Contractor safety performance evaluation documented before contract award (§h — osha-1910-119-contractor-checklist)
PSSR completed and documented before startup of new/modified process (§i — osha-1910-119-pssr-checklist)
Mechanical integrity inspection schedule current; deficiencies tracked to resolution (§j — osha-1910-119-mechanical-integrity-checklist)
MOC log showing all non-replacement-in-kind changes processed through formal review (§l)
Compliance audit completed within 3 years; all findings assigned corrective actions (§o)

How POPProbe Supports PSM Compliance

POPProbe's digital inspection platform includes pre-built checklists for all 14 PSM elements, mapped directly to the 29 CFR 1910.119 citation. Inspection teams can run digital PSM audits on mobile devices in the field, automatically generate audit reports with corrective action tracking, and maintain a real-time compliance dashboard showing element status across multiple facilities.

Explore PSM inspection checklists in POPProbe's regulatory compliance checklist hub, including the PSI checklist, PHA checklist, Mechanical Integrity checklist, hot work permit checklist, training checklist, contractor safety checklist, PSSR checklist, and full PSM program audit — all available in our checklist library.

Conclusion

OSHA PSM compliance requires documented, systematic processes across all 14 elements — not just on inspection day. The penalty exposure ($15,625/day per violation) makes proactive compliance far less costly than reactive corrections after an OSHA citation or, worse, after a process safety incident. Start with a gap assessment against all 14 elements, prioritize Mechanical Integrity and MOC — the highest-frequency failure points — and build a sustainable audit cadence using digital checklists that create an automatic paper trail and close the loop on every finding.