How to write a process safety management program for small employers

Last updated 2026-07-11

Does OSHA's PSM standard apply to small businesses?

Yes, and it surprises a lot of owners. The PSM standard at 29 CFR 1910.119 has no size exemption. If you hold more than a threshold quantity (TQ) of any chemical on OSHA's Appendix A list, you are covered, whether you run 8 employees or 800. ^[1]

Threshold quantities range from 100 pounds for some acutely toxic materials to 10,000 pounds for flammable liquids and gases. Anhydrous ammonia has a TQ of 10,000 pounds. Chlorine sits at 1,500. Hold more than the TQ in a single process and the full standard kicks in. ^[6]

Two narrow exemptions exist. Retail facilities are out. So are oil and gas well drilling and servicing operations. Hydrocarbon fuels used solely for workplace consumption as a fuel are also excluded, as long as they are not part of a process containing another covered chemical. ^[1] None of that helps most small manufacturers, cold storage operations running ammonia refrigeration, or chemical distributors.

Check Appendix A before you assume PSM does not touch you. Plenty of small facilities running ammonia refrigeration systems above 10,000 pounds have been cited because they figured their size kept them safe. It doesn't.

What are the 14 required elements of a PSM program?

The standard lists all 14 in 29 CFR 1910.119, and every one is mandatory. Here they are, with a plain-English note on what each actually asks for:

Element	What it requires
1. Process Safety Information (PSI)	Written documentation of chemical hazards, technology, and equipment
2. Process Hazard Analysis (PHA)	Structured hazard review using a recognized methodology
3. Operating Procedures	Written step-by-step procedures for all operating modes
4. Training	Initial and refresher training for operators, documented
5. Contractors	Pre-qualification, orientation, and performance monitoring of contractors
6. Pre-Startup Safety Review (PSSR)	Safety review before starting new or modified processes
7. Mechanical Integrity	Inspection and testing program for critical equipment
8. Hot Work Permit	Written permit system for hot work near covered processes
9. Management of Change (MOC)	Formal review before any process or equipment change
10. Incident Investigation	Written investigation of incidents and near-misses
11. Emergency Planning and Response	Coordination with local emergency responders
12. Compliance Audits	Full program audit every three years
13. Trade Secrets	Employee access to PSM information, even trade secret info
14. Employee Participation	Written plan for employee involvement in PHA and all elements

Some feel enormous. Others are genuinely manageable. Employee participation and hot work permits are not where small employers struggle. Process hazard analysis and mechanical integrity are, because they take real engineering rigor and eat the most calendar time. ^[1]

OSHA's standard requires employers to document "the action to be taken to resolve the findings and recommendations" from a PHA. That means the output of your hazard review is a living document, not a report you file and forget. ^[1]

How do you know if your chemical quantity triggers PSM?

Start with Appendix A to 29 CFR 1910.119. It lists 137 toxic and reactive chemicals with their threshold quantities, plus a general provision covering flammable liquids and gases above 10,000 pounds in a single process. ^[6]

The key word is "process." OSHA defines a process as any activity involving a highly hazardous chemical, including use, storage, manufacturing, handling, or on-site movement. Interconnected vessels count as one process. Vessels that are not interconnected and are separated by distance or containment may be separate processes. That distinction decides whether you clear the threshold. ^[7]

Here is a simple way to check: 1. List every chemical on-site. 2. Cross-reference each against Appendix A. 3. For any match, calculate the maximum quantity you could hold in that process at any one time. 4. Compare to the listed TQ.

Say you carry 9,500 pounds of anhydrous ammonia and the TQ is 10,000. Don't shrug and move on. Inventory swings. One delivery puts you over. Document your maximum inventory and design your ordering so you stay under threshold if that is genuinely your plan. OSHA inspectors look at maximum inventory, not average. ^[2]

What goes into process safety information, and how do you compile it?

Process safety information is the foundation of the whole program. Nothing else, not the PHA, not the operating procedures, gets done well without complete PSI. The standard breaks it into three buckets: chemical hazards, process technology, and equipment. ^[1]

For chemical hazards, you need toxicity data, permissible exposure limits, physical data (boiling point, vapor pressure, density), reactivity data, corrosivity data, and thermal and chemical stability data. Safety Data Sheets cover most of it. If your SDS is current and complete, it often satisfies the chemical hazard requirement. Our hazard communication article walks through the SDS format.

For process technology, you need a description of the chemistry, the maximum intended inventory, the safe upper and lower limits for temperature, pressure, flow, and composition, and an evaluation of the consequences of deviations. This is where you need someone who truly understands your process. For a small ammonia refrigeration system, the equipment manufacturer's documentation and your system design drawings go a long way.

For equipment, you need materials of construction, piping and instrumentation diagrams (P&IDs), electrical classification, relief system design, ventilation system design, the codes and standards used in design (ASME, ANSI, and the like), and material and energy balances for covered processes built after May 26, 1992. ^[1]

Older equipment gets a small out. If you can document that the equipment was designed and built to the "good engineering practice" of its era, that satisfies the PSI requirement. Get it in writing from a qualified engineer. ^[2]

How do you conduct a process hazard analysis for a small facility?

A PHA is a structured, systematic review of the hazards in your covered process. OSHA accepts several methodologies: What-If, Checklist, What-If/Checklist, Hazard and Operability Study (HAZOP), Failure Mode and Effects Analysis (FMEA), Fault Tree Analysis, or an equivalent method. ^[1]

For most small employers with a single covered process, What-If or What-If/Checklist is the right call. HAZOP is the gold standard in chemical plants, but it takes a trained facilitator, a full team, and days of meetings. A well-run What-If study by a knowledgeable team satisfies the standard and is far more practical at a 15-employee facility. ^[8]

The team matters. OSHA requires the PHA be performed by a team with expertise in engineering and process operations, and at least one member must know the specific PHA method being used. ^[1] For a small shop, that usually means bringing in one outside person with PHA facilitation experience if you don't have it on staff. That's a legitimate cost. Skipping it to save money is what leads to citations.

Your PHA must address the hazards of the process, previous incidents with catastrophic potential, engineering and administrative controls, consequences of control failure, facility siting, human factors, and a qualitative evaluation of possible safety and health effects. ^[1]

OSHA required the initial PHA on the process most likely to cause a catastrophic incident first, with all covered processes analyzed by May 26, 1997. That deadline is long gone, so a complete PHA is a compliance requirement from day one. PHAs must be updated and revalidated every five years. ^[1]

Document everything. The written PHA report, the team's recommendations, management's response to each one, and the timeline for closing action items all become part of your program. Inspectors will ask for all of it.

How do you write operating procedures that meet PSM requirements?

Operating procedures under PSM run deeper than what most small businesses write for anything else. The standard spells out what each operating phase has to cover. ^[1]

You need written procedures for initial startup, normal operations, temporary operations, emergency shutdown (including the conditions that require it and who is authorized to initiate it), emergency operations, normal shutdown, and startup following a turnaround or emergency shutdown. ^[1]

For each phase, the procedure must cover the steps involved, operating limits, the consequences of deviating from those limits, the steps to correct or avoid deviation, and safety and health considerations including chemical properties and hazards, necessary PPE, and the controls that prevent exposure. ^[1]

Procedures must be accurate and they must be accessible to operators. "Accessible" means physically available to the person doing the job, not locked in a filing cabinet in the manager's office. OSHA has cited employers specifically for procedures that weren't available at the point of operation.

You must certify annually that your operating procedures are current and accurate. The certification is a one-page review. Keeping the procedures accurate underneath it is the real work. Any time you change equipment, chemistry, or operating parameters through your Management of Change process, the procedures get updated before the change goes live. ^[1]

One overlap to plan for: your energy control procedures for covered equipment live in both the lockout/tagout standard (29 CFR 1910.147) and your PSM operating procedures. Write them once and reference them in both places. Our lockout tagout guide covers the LOTO side.

What does the mechanical integrity element actually require you to do?

Mechanical integrity (MI) is one of the two or three elements where small employers sink the most time, and honestly, where the worst failures happen. The element applies to pressure vessels and storage tanks, piping systems (including valves and other components), relief and vent systems and devices, emergency shutdown systems, controls (monitoring devices, sensors, alarms, interlocks), and pumps. ^[1]

The standard requires written procedures for maintaining the ongoing integrity of process equipment, employee training on those procedures, inspections and tests consistent with manufacturer's recommendations and good engineering practice, documentation of each inspection and test, a system for correcting deficiencies, and quality assurance procedures for new equipment and repairs. ^[1]

In practice, you need an inspection and testing schedule for every piece of critical equipment, records of every inspection, and a documented process for what happens when something fails. If your ammonia refrigeration system has a pressure vessel due for inspection, that inspection can't just happen. It gets documented, the results recorded, and any deficiency tracked to resolution.

Tie your MI program to your equipment inventory. List every piece of covered equipment. Pin down the applicable code or manufacturer's recommendation for inspection frequency. Build a calendar. Track it. OSHA does not prescribe a specific inspection frequency for most equipment. It defers to applicable codes (API, ASME, ANSI) and good engineering practice. But whatever frequency you pick, you have to hit it. ^[2]

Hiring a third-party inspection firm once a year for your pressure vessels and relief devices is common, and usually the right call for a small employer without a full-time reliability engineer.

How does management of change work, and why do so many small employers get it wrong?

Management of Change draws citations more than almost any other element, and the reason is brutal in hindsight: something changed and nobody documented it. ^[3]

The standard requires a written MOC system for any change to process chemicals, technology, equipment, and procedures, plus any organizational change that affects the process. It excludes "replacement in kind," so swapping a pump for an identical pump needs no MOC. Swap in a different model, a different size, or a different material, and it does. ^[7]

Your MOC procedure must address the technical basis for the change, its impact on safety and health, any modifications to operating procedures, the time period for the change, and authorization requirements. Before the change starts, affected employees must be informed and trained, and PSI and procedures must be updated. ^[1]

Here's the trap. Someone makes a "temporary" fix during an emergency and never formalizes it. OSHA gives the word "temporary" almost no deference. If a temporary change runs past its approved period, it goes through full MOC review. Facilities get cited all the time for "temporary" modifications that sat in place for years.

An MOC form doesn't need to be complicated. One page capturing the description of the change, the technical justification, a safety review sign-off, the procedures updated, and the training completed is enough for most small facility changes. What matters is that it exists and gets used every single time.

What does OSHA require for incident investigation under PSM?

PSM requires an investigation of every incident that resulted in, or could reasonably have resulted in, a catastrophic release of a covered chemical. That second clause is the one people miss. Near-misses count. ^[1]

An investigation team must be assembled within 48 hours of the incident. It must include at least one person knowledgeable in the process involved, a contract employee if the incident involved contractor work, and others with the right knowledge and experience. ^[1]

The investigation has to produce a written report covering the date of the incident, the date the investigation started, a description of the incident, the factors that contributed to it, and the recommendations that came out of it. ^[1]

That report stays on file for five years. Recommendations must be resolved and the resolution documented. Findings must be shared with everyone in the facility who could benefit, contractors included. ^[1]

Our incident report guide covers what a well-structured incident record needs, which feeds straight into this requirement.

The biggest gap for small employers is timing. Forty-eight hours feels fast when you're also managing the aftermath. The team does not need to finish the investigation in 48 hours. It needs to be convened. Set a calendar reminder for 24 hours after any significant near-miss so you don't blow the formation deadline.

How do you handle contractor requirements under PSM?

If you hire contractors to work in or near a covered process, PSM puts specific duties on both you (the host employer) and the contractor. This element blindsides small employers who think contractor management ends at a certificate of insurance.

As the host, before the contractor starts, you must inform them of the known fire, explosion, or toxic release hazards tied to their work and the process, explain your emergency action plan, develop and implement safe work practices controlling their entrance, presence, and exit in covered process areas, periodically evaluate their safety performance, and keep a contract employee injury and illness log for their work in the process. ^[1]

The contractor carries its own obligations under the standard: training its employees on hazards, documenting that training, making sure employees know the applicable safe work practices, and telling you about any hazards they find while working. ^[1]

For a small facility, that means your contractor onboarding needs a PSM-specific module. Before any contractor touches your ammonia system, they get a site-specific safety orientation covering your covered process hazards. Document it every time. A sign-in sheet listing the topics covered and a signature from each contractor employee is the floor, not the ceiling.

How long does it take to build a PSM program from scratch?

Honestly? A full PSM program for a small facility with one covered process usually takes six to eighteen months to build right. The range is wide because the hardest variable is how complete your existing documentation already is.

Good P&IDs, current equipment records, and some operating procedures already on paper put you at the low end. Starting from blank paper, you'll spend the first two months just gathering and verifying process safety information before you can do anything else.

Here is a sequence that works for small employers:

1. Confirm applicability (1-2 weeks) 2. Gather and complete PSI (4-12 weeks) 3. Conduct PHA (4-8 weeks including team scheduling) 4. Write or update operating procedures (4-8 weeks) 5. Build mechanical integrity program (4-8 weeks) 6. Develop MOC, hot work permit, and contractor procedures (2-4 weeks) 7. Write emergency action and response plans (2-4 weeks) 8. Develop training program and document initial training (4-8 weeks) 9. Write and conduct pre-startup safety review for any new or modified process (as needed) 10. Write compliance audit procedure and schedule the audit (1-2 weeks)

Items 3 through 8 can overlap with careful project management. Items 1 and 2 cannot. Everything downstream depends on complete PSI.

If you want a faster start on the written elements (procedures, forms, employee participation plan), SafetyFolio's safety program generator produces customizable PSM document templates in about 15 minutes, which gives you a structured skeleton instead of a blank page. The technical content (your actual PHA, your equipment-specific MI procedures) always needs your own process knowledge.

Budget for outside help on the PHA at minimum. A qualified PHA facilitator for a small process typically costs $5,000 to $20,000 depending on complexity, per industry consultants. That number stings. An OSHA PSM citation carries a maximum penalty of $16,550 per serious violation as of 2024, and repeat violations reach $165,514. The math usually favors doing the PHA right the first time. ^[4]

What does a compliance audit require and how do you do one yourself?

The compliance audit element requires you to certify you've evaluated your PSM program at least every three years, that the audit was done by at least one person knowledgeable in the process, and that the findings were documented and deficiencies corrected. ^[1]

The standard does not require a third-party auditor. You can run the audit yourself if someone at your facility genuinely understands both the process and the standard. In practice, a self-audit runs into one limit: the person who built the program is often the one reviewing it. A second set of eyes catches what the builder can't.

OSHA's PSM compliance guidance (OSHA 3132) suggests checking every element against the regulatory text, interviewing operators and contractors, reviewing records, and physically observing operations. ^[2]

A practical approach for a small employer: write an audit protocol built on the 14 elements and use it as a checklist. Interview at least two operators. Review MOC records, incident investigation reports, training records, and MI inspection logs. Write up what you found, both the compliant items and the gaps. Build an action plan for the gaps with assigned owners and due dates. Sign and date the certification.

Retain the two most recent compliance audit reports. That is the retention period the standard specifies. ^[1]

What are the most common PSM citations OSHA issues to small employers?

OSHA's enforcement data and its PSM National Emphasis Program point to a consistent set of problem areas. ^[3]

Mechanical integrity violations top the list. Specifically: no written MI procedures, inspections not done on schedule, or deficiencies found but never corrected or tracked. ^[3]

Process hazard analysis problems come second. No PHA at all, a PHA that was never revalidated on the five-year clock, or a PHA whose recommendations were never resolved.

Management of change is third. Changes made with no MOC review, or an MOC process that existed on paper but wasn't followed.

Operating procedures round it out. Outdated procedures, procedures not accessible to operators, or procedures missing required operating modes (emergency shutdown and startup after emergency shutdown are the usual gaps).

OSHA's PSM National Emphasis Program directs inspectors toward the ammonia refrigeration sector, where small cold-storage operators show up disproportionately in citation data. ^[3] The reason is plain. Large chemical companies staff dedicated process safety engineers. A small cold-storage facility often hands PSM to a maintenance supervisor already stretched across everything else.

Our osha overview covers the inspection and citation process if you want background on how an OSHA inspection of a PSM-covered facility actually unfolds.

What is the EPA RMP rule and does it apply alongside PSM?

If OSHA PSM covers you, there's a strong chance the EPA's Risk Management Program (RMP) rule under 40 CFR Part 68 covers you too. The two programs run parallel by design. They share many chemicals, and for the overlapping ones, EPA's listed quantities generally match OSHA's threshold quantities. ^[5]

The RMP rule requires covered facilities to submit a Risk Management Plan to EPA, including an off-site consequence analysis (what a worst-case release would do to surrounding communities), a five-year accident history, and an emergency response program. ^[5]

For Program 3 facilities (the most rigorous tier, which covers most processes already subject to PSM), the prevention program requirements mirror the PSM standard almost exactly. That was deliberate. EPA and OSHA coordinated the rules so that complying with PSM's prevention program essentially satisfies RMP's Program 3 prevention requirements. ^[5]

So check RMP applicability while you build your PSM program. Your PHA, MI program, MOC system, and operating procedures satisfy both standards. The extra RMP work is the off-site consequence analysis and the RMP submission to EPA's RMP*eSubmit system. That submission is public record, which means your neighbors and local emergency planners can read it. Some small employers are caught off guard by that.

EPA's 2024 amendments to the RMP rule added requirements including safer technology analysis and third-party audits for certain processes. Check 40 CFR Part 68 as amended to see whether your process is in scope. ^[5]

Frequently asked questions

Is there a small business exemption from OSHA's PSM standard?

No. The PSM standard at 29 CFR 1910.119 has no employee-count exemption. Any employer with more than a threshold quantity of a listed highly hazardous chemical in a covered process must comply with all 14 elements. The only exemptions are retail facilities, oil and gas well drilling and servicing, and hydrocarbon fuels used solely as workplace fuel and not part of a covered process.

How much does it cost to build a PSM program for a small facility?

Expect $15,000 to $80,000 for a small facility doing most of the work in-house while hiring a PHA facilitator and an inspection firm. The biggest variable is PHA facilitation, which typically runs $5,000 to $20,000 depending on process complexity. Avoiding outside help on the PHA is where most small employers create future problems, because a poorly done PHA doesn't satisfy the standard and doesn't actually find hazards.

What is a threshold quantity under PSM and where do I find the list?

A threshold quantity is the minimum amount of a highly hazardous chemical that triggers PSM coverage for a process. The list is Appendix A to 29 CFR 1910.119, on OSHA's website. It covers 137 specific chemicals plus a general provision for flammable liquids and gases above 10,000 pounds. Quantities range from 100 pounds for some acutely toxic substances to 10,000 pounds for ammonia and flammables.

How often does a process hazard analysis need to be updated?

OSHA requires PHA revalidation every five years from the date of the initial PHA. Each revalidation must be documented, and the team must include at least one member who participated in the previous PHA or is thoroughly familiar with it. Revalidation isn't a full redo. It reviews what has changed and updates the analysis accordingly. You must also update the PHA any time a management of change review reveals new hazards.

Can I write my own PSM program without a consultant?

You can write most of it yourself: the employee participation plan, operating procedures, MOC forms, hot work permit system, contractor management procedures, and compliance audit protocol. The elements that genuinely need outside expertise are the process hazard analysis (which needs a facilitator trained in PHA methodology) and mechanical integrity inspection procedures (which should reference applicable ASME, API, or ANSI codes). Cutting corners there usually costs more later.

What records do I need to keep for PSM compliance?

PHA reports and updates must be retained for the life of the process. Operating procedures must be certified accurate annually. MI inspection records must be kept and available. Incident investigation reports must be retained for five years. The two most recent compliance audits must be retained. Training records must document what training was done, who did it, the means used, and the date. Keep it all in one organized PSM file.

Does PSM apply to propane or natural gas at my facility?

Possibly. The general provision in Appendix A covers flammable liquids and gases with a flash point below 73°F in a quantity greater than 10,000 pounds in a process. Propane qualifies. Natural gas qualifies. But flammable fuels used solely for workplace consumption as fuel (forklifts, heating) and not part of a covered process are exempt. If propane feeds a manufacturing process rather than serving as fuel, check carefully against the 10,000-pound threshold.

What is a pre-startup safety review and when do I need one?

A PSSR is a formal safety check completed before startup of any new process, or any modified process where the change was significant enough to require a change in operating procedures. The review confirms that construction and equipment match the PSI, that safety, operating, maintenance, and emergency procedures are in place, that the PHA is done and recommendations resolved, and that training of affected employees is complete. For small facilities, a one-day walk-down with a documented checklist usually satisfies it.

Do I have to include contractors in my PSM employee participation plan?

Yes, but the obligation is structured differently than for direct employees. You must inform contractors of known hazards, give them access to relevant process hazard information, and evaluate their safety performance. The contractor employer, not you, trains its own employees. But contract employees working in your covered process area must be informed of your emergency action plan and your site-specific safe work practices. Document every contractor orientation.

What happens if OSHA finds a PSM violation at my facility?

PSM violations are typically classified as serious or willful. Serious violations carry a maximum penalty of $16,550 as of 2024. Willful or repeat violations can reach $165,514 each. OSHA can also issue an imminent danger citation and require immediate shutdown of a process. Beyond the penalties, a PSM citation triggers enhanced inspection attention. The National Emphasis Program means inspectors arrive specifically trained to examine all 14 elements.

What is the difference between PSM and EPA RMP?

OSHA PSM (29 CFR 1910.119) protects workers on-site. EPA RMP (40 CFR Part 68) protects surrounding communities from off-site consequences of a chemical release. They share many chemicals and threshold quantities, and Program 3 RMP prevention requirements mirror PSM almost exactly. If you're subject to both, your PSM program satisfies most of the RMP prevention requirements. The extra RMP work is the off-site consequence analysis and the public RMP submission to EPA.

How do I handle a process that was built before PSM became effective in 1992?

Pre-existing equipment gets a documented accommodation in the PSI element. If you can't locate the original design codes and standards for older equipment, you can document that it was designed and built in accordance with good engineering practice at the time. Get a qualified engineer to put that in writing. For PHA purposes, pre-1992 equipment must still be fully analyzed. Age doesn't reduce the PHA requirement. It often raises the hazard count because older equipment may lack modern safety instrumentation.

Can I use a What-If analysis instead of a HAZOP for my PHA?

Yes. OSHA's PSM standard lists What-If, Checklist, What-If/Checklist, HAZOP, FMEA, Fault Tree Analysis, and equivalent methodologies as acceptable. For most small facilities with a single, relatively straightforward covered process, a well-facilitated What-If or What-If/Checklist analysis satisfies the standard and is far more practical than a full HAZOP, which needs a large trained team and typically takes several days of intensive meetings.

Sources

1. OSHA, 29 CFR 1910.119 Process Safety Management of Highly Hazardous Chemicals (full standard text): 14 required PSM elements, threshold quantities, process definition, PHA methodology options, five-year revalidation, 48-hour incident investigation team formation, and annual operating procedure certification requirements
2. OSHA, Process Safety Management Guidelines for Compliance (OSHA 3132): Guidance on good engineering practice documentation for pre-existing equipment, compliance audit approach, and inspector expectations for PSI completeness
3. OSHA, PSM Covered Chemical Facilities National Emphasis Program (NEP), Directive CPL 03-00-021: Enforcement priorities under PSM NEP, citation patterns including mechanical integrity and MOC as top violation categories, and small employer share of PSM violations in ammonia refrigeration sector
4. OSHA, Penalties (maximum civil penalty amounts adjusted for 2024): Maximum serious violation penalty of $16,550 and willful or repeat violation penalty of $165,514 per violation as of 2024
5. EPA, Risk Management Program (RMP) Rule, 40 CFR Part 68: RMP program tiers, coordination with OSHA PSM, off-site consequence analysis requirement, and 2024 rule amendments adding safer technology analysis and third-party audits
6. OSHA, Highly Hazardous Chemicals List (Appendix A to 1910.119): 137 listed toxic and reactive chemicals with threshold quantities ranging from 100 pounds to 10,000 pounds, plus general flammable provision
7. OSHA, Standard Interpretations index (letters of interpretation search): OSHA interpretations on process definition, replacement in kind, temporary change classification, and contractor obligations under the standard
8. Center for Chemical Process Safety (CCPS), Guidelines for Hazard Evaluation Procedures (AIChE): Industry benchmark guidance on PHA methodology selection including What-If, HAZOP, and FMEA approaches and resource requirements for each
9. EPA, Risk Management Program (RMP) eSubmit and reporting: RMP submissions are publicly accessible records visible to neighboring communities and local emergency planners
10. OSHA, Process Safety Management of Highly Hazardous Chemicals: Final Rule, 57 FR 6356 (February 24, 1992): Original PSM rulemaking establishing May 26, 1992 effective date and May 26, 1997 deadline for completing initial PHAs on all covered processes