How to write an asbestos operations and maintenance program

Last updated 2026-07-09

What is an asbestos O&M program and who is required to have one?

An asbestos operations and maintenance program is a written plan that tells workers how to work around asbestos-containing material (ACM) without disturbing it, and what to do when disturbance is unavoidable. It's the standing rulebook for managing asbestos in place.

OSHA's general industry asbestos standard, 29 CFR 1910.1001, requires a written O&M program when any work happens on or near ACM or presumed ACM (PACM) ^[1]. The construction standard, 29 CFR 1926.1101, covers renovation and demolition and carries its own O&M requirements ^[2]. This article sticks to general industry, which is what applies to building owners, facility operators, schools, hospitals, and most commercial properties.

Here's the misconception that gets employers cited: they assume only companies doing active removal need a program. Wrong. If your maintenance staff might drill into a wall, cut a ceiling tile, or otherwise disturb material that contains (or is presumed to contain) asbestos, OSHA expects a written program before anyone picks up a tool. The standard reaches any employer whose workers may reasonably be expected to encounter ACM, even by accident ^[1].

State-plan states can go beyond federal OSHA. California's Cal/OSHA, for one, has extra requirements under 8 CCR 1529 that track the federal construction standard and often apply to routine building maintenance. If you operate in a state plan state, check your state agency's rules alongside the federal standard.

What does OSHA actually require in a written asbestos O&M program?

29 CFR 1910.1001(f) sets the core requirement: employers must develop and put in place a written program that reduces employee exposure to at or below the permissible exposure limit (PEL) of 0.1 fiber per cubic centimeter (f/cc) as an 8-hour time-weighted average, and below the excursion limit of 1.0 f/cc as a 30-minute TWA ^[1].

The standard won't hand you a fill-in-the-blank template. It describes the outcomes your program has to hit and names some specific elements it must contain. Here's what the regulation requires the program to address:

• Identification of all ACM and PACM in your facility (or a procedure for identifying it)
• Engineering and work practice controls that keep exposures below the PEL
• Procedures for short-duration maintenance tasks on ACM
• Requirements for personal protective equipment when controls alone fall short
• A written description of housekeeping for asbestos debris and waste
• Medical surveillance for workers exposed at or above the action level (0.1 f/cc as a TWA)
• Training requirements for each job classification with potential asbestos exposure
• Air monitoring procedures and recordkeeping

The EPA publishes its own O&M guidance under the National Emission Standards for Hazardous Air Pollutants (NESHAP), and it applies to building owners whether or not their own people do the work ^[3]. Own the building? You may answer to both OSHA and EPA at once. The two overlap heavily but aren't identical.

One practical note. OSHA says "written program" and expects the document accessible to employees during their shifts. A binder in a locked office doesn't count. Workers should be able to find it and read it.

How do you identify asbestos-containing material before writing your program?

You can't write a real O&M program without knowing what you're dealing with. This is step one, and it's the step most small employers shortcut. That shortcut usually costs them later.

OSHA requires you to treat any material installed before 1981 as PACM until you prove otherwise through sampling ^[2]. The 1981 date traces back to the EPA's 1973 ban on spray-applied asbestos and the phase-out of most construction ACM through the late 1970s. Material installed after 1980 isn't automatically clean; some products carried asbestos into the early 1990s. When in doubt, test.

The identification process has three parts.

1. Visual inspection. Walk the facility and document every material that could contain asbestos: floor tiles, ceiling tiles, pipe insulation, duct insulation, joint compound, roof shingles, caulking, and fireproofing are the usual suspects. Your written program should include a building survey or point to one already done.

2. Bulk sampling and analysis. Collect samples of suspect material and send them to a laboratory accredited under the National Voluntary Laboratory Accreditation Program (NVLAP) ^[4]. Polarized light microscopy (PLM) is the standard method. Transmission electron microscopy (TEM) is more sensitive and more expensive. For most O&M purposes, PLM does the job.

3. Documentation. Build an ACM inventory: location, material type, estimated quantity, condition (friable or non-friable), and whether it's accessible during normal operations. This inventory becomes an exhibit to your written program and gets updated whenever conditions change or new areas are disturbed.

If sampling shows no asbestos above 1% by weight (OSHA's threshold for regulated ACM), document that result and keep it on file. That paper protects you in an inspection. Without it, an inspector can treat the material as PACM and cite you for not managing it that way.

What are the required elements of the written O&M program document itself?

Here's a section-by-section structure that covers everything 29 CFR 1910.1001 requires and matches how OSHA compliance officers expect the information laid out.

Section 1: Purpose and scope. One paragraph. State that the program applies to all employees who may contact or disturb ACM during their work, name the facilities covered, and cite the standard (29 CFR 1910.1001 for general industry).

Section 2: Responsibilities. Name the person who owns the program, by job title, more than "management." Spell out what maintenance supervisors, workers, and the program administrator each have to do.

Section 3: Hazard identification and ACM inventory. Reference the building survey and include a summary table or attach the full survey. State how the inventory gets updated (annually, or after any disturbance or renovation).

Section 4: Exposure assessment. Describe how you decide whether a task will push exposures above the action level (0.1 f/cc). OSHA lets you use objective data from published studies for routine tasks ^[1]. List your facility's tasks and the expected exposure for each, with the data source cited.

Section 5: Engineering and work practice controls. Describe the specific controls for each task type: wet methods for removing ACM, local exhaust ventilation, glove-bag procedures for pipe insulation, and so on. Write it clearly enough that a new maintenance hire could read the section and know what to do.

Section 6: Respiratory protection. State when respirators are required (any task expected to top the PEL), which type (usually a half-face air-purifying respirator with P100 filters for O&M work, a PAPR or supplied air for higher exposures), and that workers must be medically cleared and fit-tested under your hazard communication and PPE programs ^[5].

Section 7: Housekeeping. Ban dry sweeping and compressed-air cleanup of ACM debris. Require wet cleanup and HEPA-filtered vacuums. Describe waste disposal and the requirement for labeled, sealed bags.

Section 8: Training. List every job classification with potential ACM exposure. For each, give the topic, duration, and frequency. OSHA runs two main tiers: awareness training for workers who may encounter ACM incidentally, and O&M worker training (16-hour minimum) for workers who actually disturb ACM during maintenance ^[1].

Section 9: Medical surveillance. State that workers exposed at or above the action level for 30 or more days a year get annual medical exams, including a chest X-ray at intervals the attending physician sets, pulmonary function testing, and a medical and work history ^[1].

Section 10: Air monitoring. Describe when you'll run personal air sampling (before a new task type, when a task changes, if a worker reports symptoms), who collects samples (a CIH or qualified industrial hygienist), and how results get recorded and shared with workers.

Section 11: Recordkeeping. Spell out retention periods. Under 29 CFR 1910.1001(m), exposure records run 30 years and medical records run the duration of employment plus 30 years ^[1]. That's a long time. Build a records plan that actually accounts for it.

Section 12: Emergency procedures. Describe what happens if ACM gets disturbed by accident: stop work, evacuate the area, contact the program administrator.

Want to skip the blank page? SafetyFolio's safety program generator walks you through each section in about 15 minutes and spits out a formatted document you can fill in with your facility details.

What are the OSHA training requirements for asbestos O&M workers?

Training is one of the areas OSHA enforces hardest in asbestos cases. The requirements split by what the worker actually does ^[1].

Awareness training is for workers who work in buildings with ACM but don't disturb it. Custodial staff who clean around asbestos pipe insulation without touching it land here. OSHA requires training on what ACM looks like, where it sits in the building, the health effects of exposure, and how to report damaged or deteriorating ACM. There's no set minimum hour count for awareness training; the content requirement drives the length.

O&M worker training applies to workers who perform short-duration maintenance tasks on ACM, like pulling a small section of pipe insulation to reach a valve. OSHA requires a minimum of 16 hours, covering health effects, recognition of ACM and PACM, exposure monitoring, respirators and PPE, work practices, decontamination, waste disposal, and your specific written program ^[1].

Asbestos abatement worker training (full-scale removal) requires EPA AHERA-accredited training of at least 32 hours plus annual 8-hour refreshers. Most small building owners hire licensed abatement contractors for this rather than doing it in-house.

Training records have to show the date, topics covered, and names of everyone who attended. Keep them with your O&M program. During an inspection, the compliance officer will ask for them.

A point about who delivers the training. OSHA doesn't require an outside trainer for awareness training, but the 16-hour O&M worker training is usually done by a state-accredited asbestos trainer or a certified industrial hygienist. For most small facilities, hiring a qualified trainer once and keeping clean records costs far less than a citation.

What are the OSHA exposure limits for asbestos and how do they affect your program?

OSHA sets two exposure limits under 29 CFR 1910.1001(c) ^[1]:

• Permissible Exposure Limit (PEL): 0.1 fiber per cubic centimeter (f/cc) as an 8-hour TWA
• Excursion Limit: 1.0 f/cc as a 30-minute TWA
• Action Level: 0.1 f/cc as an 8-hour TWA (triggers medical surveillance and air monitoring)

OSHA cut the PEL from 0.2 f/cc to 0.1 f/cc in 1994. Some older O&M programs still quote the old number. If yours hasn't been touched in years, check it.

For most O&M tasks on intact, non-friable ACM, sound work practices (wet methods, HEPA vacuuming, limited disturbance) hold exposures well under the action level. OSHA lets employers rely on "objective data" showing a task doesn't exceed the action level rather than air-monitoring every single maintenance job ^[1]. The National Institute for Occupational Safety and Health (NIOSH) and various published industrial hygiene studies have characterized exposures for many common tasks; your program can cite those instead of running fresh samples.

That said, the first time you run a task, or any time a task goes sideways, air sampling is the only way to confirm exposures stayed under the limits. Build a trigger into your program for when sampling is required.

What are the recordkeeping requirements for an asbestos O&M program?

Asbestos recordkeeping under 29 CFR 1910.1001(m) carries some of the longest retention periods anywhere in OSHA ^[1]. Plan for it from day one.

Record type	Retention period
Exposure monitoring records	30 years
Medical surveillance records	Duration of employment + 30 years
Training records	1 year beyond employment
Written O&M program	Duration of program
ACM/PACM identification records	Duration of employment + 30 years

If your company gets acquired, merged, or shut down, these records must transfer to the new owner or go to NIOSH. OSHA's standard spells out the notification procedure ^[1].

For a small business, a 30-year requirement makes a paper-only system a real liability. Records get lost. Buildings flood. Employees walk out without transferring files. A digital system with off-site backup earns its keep here. At minimum, scan every original air monitoring and medical record and store copies in two places.

The incident report for any asbestos-related work injury or illness also falls under OSHA's 300 log rules, so those records carry their own retention timeline separate from the asbestos standard.

How do short-duration maintenance tasks change your O&M program requirements?

OSHA's 1994 revision of the general industry standard created specific provisions for "small-scale, short-duration" maintenance tasks on ACM ^[1]. These are tasks that disturb a small quantity of ACM for a limited time: pulling a section of pipe insulation to reach a fitting, replacing a small patch of floor tile.

For these, OSHA allows somewhat more flexible engineering controls than a full abatement project, as long as exposures stay below the PEL. The required work practices include:

• Wetting the ACM before and during removal
• Using glove-bag or mini-enclosure methods for pipe insulation
• Using HEPA vacuum equipment for cleanup
• Prohibiting activities that kick up extra dust
• Confining the work area to the smallest feasible space

Your written program should list the short-duration tasks maintenance staff might do and the exact work practice controls for each. A table works well. If a task isn't on the approved list, workers should stop and consult the program administrator before going further.

Here's where employers get cited: calling every task "short-duration" to dodge the tougher controls of larger projects. OSHA looks at the cumulative area disturbed and how often the task happens. A crew replacing two floor tiles a week, every week, isn't doing occasional short-duration work. Categorize honestly.

What does OSHA actually cite employers for in asbestos O&M program inspections?

OSHA's enforcement pattern shows exactly where programs break down ^[6]. A handful of categories account for most asbestos general industry citations.

No written program at all. The most basic violation. Employers figure that because they aren't doing abatement, they don't need a written program. OSHA disagrees, and citations under 29 CFR 1910.1001(f)(1) are common.

Training gaps. Workers doing maintenance around PACM with no awareness training. Easy to cite, hard to defend, because the training records either exist or they don't.

Failure to treat old material as PACM. Pre-1981 material that was never sampled has to be treated as PACM. Employers who put workers in contact with it with no controls and no documentation get cited under 29 CFR 1910.1001(j)(1).

Recordkeeping failures. Missing or incomplete air monitoring records, lapsed medical surveillance, or training records nobody can produce during the walkaround.

Inadequate hazard communication. Labels and warning signs are required wherever ACM or PACM is present and accessible. The rule to post regulated area signs stands even when no active work is happening ^[1].

Asbestos violations under the general industry standard can be classified serious or willful. A serious citation in 2024 carries a maximum penalty of $16,131 per violation; a willful or repeated citation can reach $161,323 per violation ^[7]. The bigger point sits behind the dollars: asbestos is a known carcinogen, and the rules exist because the health damage is real and permanent.

How do you keep your O&M program current after you write it?

A program that sits in a drawer for five years stops being compliant. Your O&M program needs a maintenance schedule as much as the building it covers.

Set an annual review date and hand it to a named person. The review should check:

• Whether the ACM inventory is still accurate (any disturbances, renovations, or newly found material?)
• Whether the list of job classifications with potential exposure is still complete
• Whether training records are current for every covered employee
• Whether the past year's air monitoring results are documented and filed
• Whether the emergency procedures still match current staffing
• Whether any regulatory changes (OSHA updates, state plan changes, EPA NESHAP amendments) call for revisions

Beyond the annual review, some events should trigger an immediate update: a renovation that uncovers unknown ACM, a change in building use that brings more workers into asbestos areas, a workplace injury tied to asbestos, or any OSHA inspection that flags a deficiency.

Document every review. A dated signature page showing who reviewed the program and what they checked is simple proof it's live rather than shelved. Inspectors ask, every time, whether the program has been reviewed recently and how.

For a faster path to a current, formatted document, SafetyFolio's written program generator produces a complete asbestos O&M program you can edit with your facility specifics. It doesn't replace your job of verifying the content against your actual building survey and task list, but it kills the blank-page problem.

Does the EPA require anything in addition to what OSHA requires?

Yes. EPA and OSHA regulate asbestos from different angles, and building owners need both on their radar.

OSHA's standard (29 CFR 1910.1001) protects workers. It kicks in where there's an employer-employee relationship and covers training, exposure limits, medical surveillance, and written programs ^[1].

The EPA's NESHAP regulation (40 CFR Part 61, Subpart M) governs asbestos emissions during demolition and renovation and applies to building owners whether or not they have employees ^[3]. If you demolish or renovate a facility above certain size thresholds and ACM is present, you have to notify the right authority (your state environmental agency or an EPA regional office) at least 10 working days before work starts. Skipping that notice is a Clean Air Act violation with its own penalties, separate from anything OSHA does.

The EPA also runs the AHERA (Asbestos Hazard Emergency Response Act) requirements for schools: triennial re-inspections, periodic surveillance every 6 months, and a specific O&M plan managed by an EPA-accredited management planner ^[8]. Run a K-12 school and AHERA sits on top of both OSHA and NESHAP.

For most commercial building owners with maintenance employees, the practical read is this. Write your O&M program to satisfy OSHA 29 CFR 1910.1001, then separately check your EPA NESHAP notification obligations before any renovation or demolition touches ACM. Two separate compliance jobs.

How long does it take to write an asbestos O&M program, and what does it cost?

Honest answer: it hinges almost entirely on whether you have a current building survey.

If you have a recent asbestos survey (done in the last 3 to 5 years by an accredited inspector) and you know which job classifications might contact ACM, you can write a solid O&M program in a day. The document structure is simple. The work is gathering your facility-specific details and confirming every required element is present and accurate.

No building survey? That comes first, and it isn't a DIY job. A qualified inspector with NVLAP-accredited laboratory analysis typically runs $500 to $3,000 for a small to mid-size commercial building, depending on square footage, sample count, and your region ^[9]. It isn't optional if you have pre-1981 construction and maintenance workers.

For the written document itself, your options run:

• Writing it yourself: $0 plus a few hours if you follow the framework in this article
• Using a program generator: $50 to $150 for a formatted template with guidance
• Hiring a consultant (CIH or IH firm): $500 to $2,500 for a program review and draft, more if they also run air monitoring or training

For most small facilities with intact, limited ACM and low-disturbance maintenance, writing the program yourself with a good template is reasonable. The case for a consultant gets strong when you have significant friable ACM, workers doing frequent maintenance near it, or a history of OSHA inspections.

The 16-hour O&M worker training, if you need it, runs $200 to $500 per worker from an accredited trainer. Annual refresher training for already-trained workers is usually 2 hours.

Frequently asked questions

Is an asbestos O&M program required for general industry employers, or only construction?

Both. General industry employers fall under 29 CFR 1910.1001, which requires a written O&M program whenever employees may be exposed to ACM or PACM. Construction employers doing renovation or demolition fall under 29 CFR 1926.1101. If your maintenance staff works in a building with asbestos-containing material, general industry requirements apply, even if you never do full abatement.

What is the OSHA permissible exposure limit for asbestos?

OSHA's PEL for asbestos is 0.1 fiber per cubic centimeter (f/cc) as an 8-hour time-weighted average, plus a 1.0 f/cc excursion limit over 30 minutes, under 29 CFR 1910.1001(c). The action level, which triggers air monitoring and medical surveillance, is also 0.1 f/cc as an 8-hour TWA. These limits have applied since OSHA's 1994 revision of the standard.

Do I need to hire a certified industrial hygienist to write my asbestos O&M program?

No. OSHA doesn't require a CIH to write the document. You can write it yourself as long as it contains all required elements. But certain tasks within the program do need qualified people: bulk samples must be analyzed by an NVLAP-accredited laboratory, air monitoring is usually done by a qualified industrial hygienist or CIH, and the 16-hour O&M worker training is usually delivered by a state-accredited asbestos trainer.

How do I handle asbestos-containing floor tiles in my building?

Intact, non-friable asbestos floor tiles in good condition are generally managed in place rather than removed. Your O&M program should document their location, condition, and access restrictions. Workers who wax, strip, or clean these floors need awareness training at minimum. Any task that cuts, sands, or heavily abrades the tiles crosses into regulated work with O&M worker controls. Dry buffing of intact tiles is generally low-risk if the tiles are sound.

What training do custodial workers need if they work around asbestos but never touch it?

Custodial workers who may work in areas with ACM but don't disturb it need awareness training. OSHA requires it to cover what ACM looks like, where it sits in the building, the health hazards of exposure, how to recognize damaged or deteriorating ACM, and how to report it. There's no minimum hour count for awareness training, but the content must be covered. Training records must be kept one year beyond the worker's employment.

How long do I have to keep asbestos exposure records?

Under 29 CFR 1910.1001(m), asbestos air monitoring and exposure records must be kept 30 years. Medical surveillance records run the duration of employment plus 30 years. These are among the longest retention requirements in OSHA's standards. If your company closes or is acquired, records must transfer to the new owner or go to NIOSH under the standard's notification requirements.

What happens if my maintenance workers accidentally disturb asbestos-containing material?

Your O&M program has to include emergency procedures for unplanned disturbance. Workers should stop work immediately, evacuate the area, and notify the program administrator. Keep the area restricted until a qualified person assesses how much was disturbed and whether decontamination is needed. Depending on the quantity, you may also have EPA NESHAP notification obligations. Document the incident, including corrective actions taken.

Do I need an asbestos O&M program if my building was built after 1980?

Maybe. OSHA requires you to treat pre-1981 material as PACM by default, but asbestos-containing products sold into the early 1990s in some categories. If you have bulk sampling from an NVLAP-accredited lab showing materials contain less than 1% asbestos by weight, document that and exclude those materials from your program. Without sampling data, treat suspect material as PACM regardless of build date.

What is the difference between asbestos abatement and an O&M program?

Abatement means removing or encapsulating ACM, usually during renovation or when material has deteriorated past the point of safe in-place management. An O&M program covers managing intact or slightly damaged ACM in place during normal operations. Abatement requires state-licensed contractors and heavier regulatory oversight. O&M programs cover routine building maintenance by facility staff.

Are there medical exams required for workers covered by an asbestos O&M program?

Yes, if workers are exposed at or above the action level (0.1 f/cc) for 30 or more days a year, 29 CFR 1910.1001(l) requires annual medical exams. These include a medical and work history, a physical exam focused on the pulmonary and cardiovascular systems, chest X-rays at intervals the physician sets, and pulmonary function testing. The employer pays for the exams and must give the examining physician a copy of the asbestos standard.

Does my asbestos O&M program need to address EPA requirements as well as OSHA?

For routine maintenance and worker protection, OSHA's standard (29 CFR 1910.1001) is your primary obligation. The EPA's NESHAP rules (40 CFR Part 61, Subpart M) apply to demolition and renovation above certain thresholds and require advance notice to your state environmental agency. Run a K-12 school and EPA's AHERA adds inspection, surveillance, and O&M plan requirements on top of OSHA. Check both agencies before any project.

How often do I need to review and update my asbestos O&M program?

OSHA doesn't set a mandatory annual review interval for the document, but the standard requires the program to stay accurate and effective. Best practice, reflected in EPA guidance and AIHA recommendations, is a documented annual review plus an immediate update after any renovation, newly found ACM, change in workforce or job tasks, or OSHA inspection finding. Date and sign each review and keep the record with the program.

What warning signs and labels are required for asbestos areas?

Under 29 CFR 1910.1001(j)(3), warning signs must be posted at all approaches to regulated areas where airborne asbestos exceeds the PEL. The required text includes 'DANGER,' 'ASBESTOS,' 'CANCER AND LUNG DISEASE HAZARD,' 'AUTHORIZED PERSONNEL ONLY,' and a respirator requirement notice. ACM products and containers must also carry warning labels. Even areas where ACM is present but not being disturbed require posted notification if workers may access them.

Sources

1. OSHA, 29 CFR 1910.1001 Asbestos (General Industry Standard): Requires written O&M program, sets PEL of 0.1 f/cc TWA and excursion limit of 1.0 f/cc, specifies training tiers, medical surveillance at action level, and 30-year retention for exposure records
2. OSHA, 29 CFR 1926.1101 Asbestos (Construction Standard): Applies to asbestos work in construction, renovation, and demolition; requires treating pre-1981 material as PACM
3. EPA, Asbestos NESHAP (40 CFR Part 61, Subpart M): EPA NESHAP governs asbestos emissions during demolition and renovation and applies to building owners regardless of employee status; requires advance notification before qualifying projects
4. NIST, National Voluntary Laboratory Accreditation Program (NVLAP): NVLAP accreditation is the standard for laboratories performing asbestos bulk sample analysis
5. OSHA, 29 CFR 1910.134 Respiratory Protection Standard: Workers required to wear respirators must receive medical clearance and fit testing under OSHA's respiratory protection standard
6. OSHA, Asbestos Safety and Health Topics Page: OSHA enforcement priorities for asbestos include written program requirements, training documentation, and PACM identification failures
7. OSHA, OSHA Penalties: Serious violations carry a maximum penalty of $16,131 per violation; willful or repeated violations can reach $161,323 per violation as of 2024
8. EPA, Asbestos Laws and Regulations (AHERA): AHERA requires K-12 schools to conduct triennial reinspections, 6-month periodic surveillance, and maintain an O&M plan managed by an EPA-accredited management planner
9. OSHA, Asbestos Safety and Health Topics Page: Building surveys for asbestos require accredited inspectors and NVLAP laboratory analysis before an O&M program can accurately identify ACM
10. NIOSH, Asbestos Fibers and Other Elongate Mineral Particles: State of the Science and Roadmap for Research: NIOSH published exposure characterization data for common maintenance tasks involving asbestos-containing materials
11. OSHA, Asbestos Standards Page: OSHA guidance describes the two-tier training structure: awareness training and 16-hour O&M worker training