VPP applicants whose operations are covered by the Process Safety Management (PSM) Standard must provide responses to each question that is applicable to their operations. Responses must cover all PSM-related operations. Please indicate that a question is "Not Applicable" if it addresses functionality outside the scope of the operations, and briefly explain why.
OMB Control Number: 1218-0239 Expires 01-31-2018
Public reporting burden for this collection of information is estimated to average 20 hours per response, including time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding the burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden, to the Directorate of Cooperative and State Program U.S. Department of Labor, 200 Constitution Ave., Suite N3700 NW, Washington, DC 20210-4537 and reference the OMB Control Number 1218-0239.
I. Management of Change.
II. Pressure Relief System Design.
Guidance: An MOC procedure is required anytime a change per the requirements of 1910.119(l) is considered. An MOC procedure is a proactive management system tool used in part to determine if a change might result in safety and health impacts. OSHA's MOC requirement is prospective. The standard requires that an MOC procedure be completed, regardless of whether any safety and health impacts will actually be realized by the change.
Guidance: Typically, the PHA team does not do a relief system engineering analysis. However, the PHA team should determine, through proper evaluation and consultation with the engineering/technical staff, if the existing/current engineering analysis of the relief system is adequate for the current/actual unit throughput.
If the throughput change was implemented between the times the PSM standard became effective (May 26, 1992) and the time the original PHA was required based on the PHA phase-in schedule, the original PHA would need to address the throughput change. However, if there was a throughput change after the original PHA, the relevant process safety information (e.g., relief system design and design basis) would need to be updated and the next PHA update/"redo" or PHA revalidation would need to address the throughput change. In either event, an MOC procedure on the throughput change would need to have been conducted and incorporated into the next scheduled PHA.
Guidance: This includes the original design and design changes. Examples of PSI related to relief devices, their design and design basis include, but are not limited to such items as:
Similarly, the design and design bases PSI are required for the rest of the relief system equipment downstream from the relief devices, i.e., relief vent lines, manifolds, headers, other relief discharge disposal equipment, such as flare stacks, scrubbers, atmospheric discharge stacks, or thermal oxidizers.
Guidance: PHA teams must address basic questions regarding what happens to the hazardous materials after they are relieved to atmosphere, including:
Part of the site's PHA team's evaluation, after it identifies the locations of open vents, is to determine if employees might be exposed when hazardous materials are relieved. If the PHA team concludes that a current and appropriate evaluation (such as the use of dispersion modeling) has been conducted, the evaluation could find that the vessels/vents relieve to a safe location. If the PHA team determines that this hazard has not been appropriately evaluated, the PHA team must request that such an evaluation be conducted, or make some other appropriate recommendation to ensure that the identified hazard/deviation is adequately addressed.
Compliance Guidance: What controls does the employer use to assure this hazardous condition does not exist?
PSI documentation (e.g., corporate or facility engineering standards/policies) from the employer addressing this hazardous condition.
Select four relief devices which discharge to the atmosphere and determine what controls have been implemented and/or specified for this condition. Review the P&IDs to ensure they properly address these issues. Additionally, where this situation exists, does the PHA address this hazard?
Reference 29 CFR 1910.106(i)(3)(ii) Paragraph UG-134(g), Section VIII of the 1968 ASME Boiler and Pressure Vessel Code - "Discharge lines from pressure-relieving safety devices shall be designed to facilitate drainage or shall be fitted with an open drain to prevent liquid from lodging in the discharge side of the safety device..."
Guidance: API 576, Section 6 provides guidance into the inspection of relief devices. Section 6.1.1 states, "Failure of pressure-relieving devices to function properly when needed could result in the overpressure of the vessels, exchangers, boilers, or other equipment they were installed to protect. A properly designed, applied, and installed pressure-relieving device that is maintained in good operating condition is essential to the safety of personnel and the protection of equipment during abnormal circumstances. The principal reason for inspecting pressure-relieving devices is to ensure that they will provide this protection.
API 576, Section 5 discusses examples of "Causes of Improper Performance". More detail is provided in this section, but a brief overview in Section 5.2.2 states, There are many causes of damaged valve seats in refinery or chemical plant service, including the following.
b) Foreign particles introduced into the valve inlet and pass through the valve when it opens, such as mill scale, welding spatter or slag, corrosive deposits, coke, or dirt. The particles may damage the seat contact required for tightness in most pressure-relief valves. The damage can occur either in the shop during maintenance of the valve or while the valve is in service.
c) Improper or lengthy piping to the valve inlet or obstructions in the line. These can cause a valve to chatter. The pressure under the seat may become great enough to open the valve. However, as soon as the flow is established, the built-up pressure drop in the connecting piping may be so great that the pressure under the seat falls and allows the valve to close. A cycle of opening and closing may develop, become rapid, and subject the valve seating surfaces to severe hammering, which damages the seating surfaces, sometimes beyond repair.
d) Careless handling during maintenance, such as bumping, dropping, jarring, or scratching of the valve parts.
e) Leakage past the seating surfaces of a valve after it has been installed. This leakage contributes to seat damage by causing erosion (wire drawing) or corrosion of the seating surface and thus aggravating itself. It may be due to improper maintenance or installation such as misalignment of the parts, piping strains resulting from improper support, or complete lack of support of discharge piping. Other common causes of this leakage are improper alignment of the spindle, improper fitting of the springs to the spring washers, and improper bearing between the spring washers and their respective bearing contacts or between the spindle and disk or disk holder. Spindles should be checked visually for straightness. Springs and spring washers should be kept together as a spring assembly during the life of the spring. Seat leakage may also result from the operating pressure being too close to the set pressure of the valve.
f) Improper blowdown ring settings. These can cause chattering in pressure-relief valves. The relief valve manufacturer can be contacted for specific blowdown ring settings for liquid service and for vapor service.
g) Severe oversizing of the pressure-relief valve for the relief loads encountered can cause the valve to close abruptly, resulting in disc and nozzle seating surface damage."
Guidance: API 510 requires in-service pressure vessel tests when the API authorized pressure vessel inspector believes they are necessary.
Guidance: Recognized and Generally Accepted Good Engineering Practices (RAGAGEP) that require credentials include, but are not limited to:
Guidance: A deficiency (reference 29 CFR 1910.119 (j)(5)) means a condition in equipment or systems that is outside of acceptable PSI limits. In the case of a pressure vessel, this could mean degradation in the equipment/system exceeding the equipment's acceptable limits (e.g., operating a vessel, tank or piping with a wall thickness less than its retirement thickness).
Guidance: Examples of safety systems include but are not limited to: emergency relief systems including relief devices, disposal systems and flares; automatic depressurization valves; remote isolation capabilities, aka emergency isolation valves; safety-instrumented-systems (SIS) including emergency shutdown systems and safety interlock systems; fire detection and protection systems; deluge systems; fixed combustible gas and fire detection system; safety critical alarms and instrumentation; uninterruptible power supply; dikes; etc.
Guidance: If the employer (site) inspects and tests all piping the same, regardless of the consequence of failure of the piping (i.e., piping inspections are implemented using the same MI program (1910.119(j)(2) and action/task (1910.119(j)(4) procedure for all piping without consideration of their consequence of failure or other operational criteria), then this question is not applicable.
Guidance: An example of a piping deficiency would be a situation where piping inspection data indicates that its actual wall thickness is less than its retirement thickness, and the site has conducted no other evaluation to determine if the piping is safe for continued operation.
Guidance: Typically, piping replacements are replacements-in-kind (RIK) when the process service does not change. However, if the piping replacement is not an RIK, then an MOC procedure is required.
V. Operating Procedures – Normal Operating Procedures (NOP), Emergency Shutdown Procedures (ESP) and Emergency Operations (EOP).
Guidance: ESP are usually warranted during events that may include the failure of process equipment (e.g., vessels, piping, pumps, etc.) to contain or control HHC releases, loss of electrical power, loss of instrumentation or cooling, fire, explosion, etc. When EOP do not succeed during upset or emergency conditions in returning the process to a safe state, implementation of an ESP may be necessary.
When normal operating limits for parameters such as pressure, temperature, level, etc., are exceeded during an excursion, system upset, abnormal operation, etc., a catastrophic release can occur if appropriate actions are not taken. These actions must be listed in the EOP and must specify the initiating conditions or the operating limits for the EOP (e.g., temperature exceeds 225°F or pressure drops below 15 psig).
Information typically listed in EOP and/or ESP includes, but is not limited to the responsibilities for performing actions during an emergency, required PPE, additional hazards not present during normal operations, consequences of operating outside operating limits, steps to shutdown the involved process in the safest, most direct manner, conditions when operators must invoke the emergency response plan, or scenarios when they themselves must stop and evacuate.
VI. PHA, Incident Investigation, and Compliance Audits Findings/Recommendations.
Have all corrective actions from PHA, incident investigations, MOCs, and compliance audits been corrected in a timely manner and documented? Provide a list of all outstanding corrective actions, the date of corrective initiation, the projected completion dates, and the interim measures that are being taken to protect workers during the corrective action period
Guidance: There may be instances when a PHA team identifies deficiencies in equipment/systems reference 29 CFR 119(j)(5). If the site continues to operate the deficient equipment/system, list interim measures reference 29 CFR 119(j)(5) to assure safe operation, and also 119(e)(5) requirements to resolve the findings and recommendations related to the identified deficiency.
The phrase from 119(j)(5), "safe and timely manner when necessary means are taken to assure safe operation", when taken in conjunction with 119(e)(5) means that when a PHA team identifies a deficiency in equipment/systems and the site does not correct the deficiency before further use, your system for promptly addressing the PHA team's findings and recommendations must assure: 1) that the recommendations are resolved in a timely manner and that the resolutions are documented; 2) that you have documented what actions are to be taken, not only to resolve the recommendation, but to assure safe operation until the deficiency can be corrected; 3) that you complete actions as soon as possible; and 4) that you have developed a written schedule describing when corrective actions related to the resolution and any interim measures to assure safe operations will be completed.
The system that promptly addresses and resolves findings and recommendations referred to in both 1910.119(e)(5) and 1910. 119(m)(5) are not requirements to develop a management program for globally addressing the resolution of findings and recommendations. Rather, these "system" requirements address how each specific finding and recommendation will be individually resolved (Hazard Tracking requirement under VPP). Each finding or recommendation will have its own unique resolution based on its nature and complexity.
VII. Facility Siting/Human Factors.
Guidance: Facility siting considerations for occupied structures include both permanent and temporary (e.g., trailers) structures.
Global/generic facility siting questionnaires/checklists. Some employers (PHA teams) attempt to comply with this 1910.119(e)(3)(v) requirement by answering global/generic facility siting questions on a short questionnaire/checklist. PSM is a performance standard and the means the site uses to comply with the standard are generally up to them as long as their performance ensures compliance with the requirement of the standard. If the site uses a questionnaire/checklist as part of the PHA to identify, evaluate and control all hazards associated with facility siting, this is permissible as long as the method used complies with the PHA methodology requirement, and, more importantly, all facility siting hazards have been addressed (i.e., identified, evaluated and controlled). Does the siting study / PHA evaluate and document the application of each question / checklist item to the specific process under review? Do the questions / checklist items comprehensively address siting hazards in the process?
For example, a PHA team responds "Yes" to a questionnaire/checklist asking, "Is process equipment located near unit battery limit roads sited properly?" based on this example it would first be expected that the PHA team would have identified each location where process equipment is sited near a unit battery limit road. Next, it would be expected that you would have evaluated each piece of process equipment located in the vicinity of a roadway. This evaluation is conducted to determine if each of the specific process equipment's siting is adequate/controlled (e.g., guarded by crash barriers, elevated on a concrete pedestal, etc.) to protect it from releasing its hazardous contents should it be struck by vehicular traffic. Without specific justification or other specific evidence that corroborates the site's "Yes" response to this global/generic questionnaire/checklist question, a possible regulatory issue could exist for failing to address process equipment siting near roadways when it conducted its PHA.
Guidance: Occupancy Criteria Evaluations for Employee Occupied Structure. OSHA does not accept occupancy criteria evaluations as the basis for a site's determination that adequate protection has been provided for employees in occupied structures which sites have identified as being potentially subject to explosions, fires, ingress of toxic materials or high energy releases. In these occupancy criteria evaluations, the site identifies vulnerable employee occupied structures and the hazards they may be subjected to, but rather than providing protection to either the structures or employees through measures like employee relocation, spacing, or protective construction, the site simply accepts the employee exposures as adequate based on their own acceptable occupancy criteria. This occupancy criteria evaluation is solely based on the occupancy threshold criteria a site is willing to accept. For instance, API 752 list occupancy threshold criteria used by some companies as 400 personnel hours per week as acceptable exposure for employees in an occupied structure, regardless of the magnitude of the hazard these employees are potentially exposed to. The 400 personnel hours per week equates to 2 employees continually exposed in an occupied structure even if that structure has virtually no protective construction and it is sited immediately adjacent to a high pressure-high temperature reactor which contains flammable or extremely toxic materials.
Non-Essential Employees. A site's PHA facility siting evaluation must consider the presence of non-essential personnel in occupied structures in or near covered processes. The "housing" of these non-essential employees in occupied structures near operating units may expose them to explosion, fires, toxic material, or high energy release hazards. Therefore, unlike direct support/ essential personnel (e.g., operators, maintenance employees working on equipment inside a unit, field supervisors, etc.) who are needed to be located in or near operating units for logistical and response purposes, sites (PHA teams) must consider and justify why non-essential employees are required to be located in occupied structures which are vulnerable to the hazards listed above. The term "non-essential" identifies those employees who are not needed to provide direct support for operating processes. Non-essential employees include, but are not limited to, administrative personnel, laboratory employees when they are working inside a lab, maintenance staff when they are working inside maintenance shops/areas, and employees attending training classes.
Guidance: An example of how a temporary structure could affect a release of HHC would include a situation where a trailer's unclassified electrical system could potentially ignite flammable materials/unconfined vapor cloud if released from the process.
Guidance: Some sites (PHA teams) attempt to comply with this requirement by simply addressing some global/generic human factors questions on a short questionnaire/checklist. This type of methodology would not, by itself, be adequate if the PHA team did not have specific justifications for each of its global/generic responses.
For example, if a PHA team responds "Yes" to a questionnaire/checklist asking whether emergency isolation valves (EIV) are accessible during emergencies, OSHA would then expect that the PHA team had identified, evaluated, and considered each EIV's accessibility (i.e., would the EIV be located in an area that might be consumed in fire, or is the EIV located above grade).
VIII. Operator Training.
Guidance: An "A" operator might be required to perform a different set of operating procedures than a "C" operator. Therefore, to determine if the employee has in fact been trained on the specific operating procedures they are expected to perform, cross-reference the specific procedures that an individual operator is expected to perform with the training records of the specific procedures for which the individual operator has received training. Also determine if operators perform tasks more than what is expected for their level of training.
IX. Safe Work Practices.
Guidance: "Motorized equipment" includes, but is not limited to automobiles, pickup trucks, fork lifts, cargo tank motor vehicles (CTMV), aerial lifts, welder's trucks, etc.
X. Incident Investigation Reports.
Provide a list of incidents and near-miss incidents that occurred at the site within the last year. Describe the facility's process for uncovering causal factors. Have all factors that contributed to each of the incidents been reported and investigated?
Guidance: An "actual incident" is defined as an incident with negative consequences such as a large HHC release, employee injuries or fatality, or a large amount of property or equipment damage. Typically, based on loss-control history, there is a much higher ratio of near-miss incidents in the chemical processing and refining industries than there are actual incidents.
XI. Blowdown Drums and Vents Stacks (Blowdowns).
Guidance: Blowdown(s) – refers to a piece of disposal equipment in a pressure-relieving system whose construction consists of a drum to collect liquids that are separated ("knockout") from vapors and a vent stack, which is an elevated vertical termination discharging vapors into the atmosphere without combustion or conversion of the relieved fluid. Blowdown(s) are separate vessels intended to receive episodic (e.g., when de-inventorying a vessel for a planned shutdown) or emergency discharges. Blowdown(s) are designed to collect liquids and to dispose of vapors safely. In the refinery industry, hydrocarbons typically enter blowdown(s) as liquids, vapors, or vapors entrained with liquids. Blowdown(s) typically include quench fluid systems which reduce the temperature of hot, condensable hydrocarbons entering the blowdown as well as the amount of vapor released via the vent stack. These systems can include internal baffles to help disengage liquids from hydrocarbon vapors. Sometimes, blowdown(s) include inert gas or steam systems to control flashback hazards and to snuff vent stack fires if ignited by sources such as lightning
Examples of PSI related to blowdowns, their design and design basis include, but are not limited to, such items as:
Guidance: Of particular concern are heavier-than-air hydrocarbons with relatively low boiling points. Additionally, hot hydrocarbons pose a greater risk because they are more volatile. Releasing these materials under the right conditions can result in the formation of unconfined vapor clouds which can and have resulted in major catastrophes at refineries and chemical plants.
Guidance: Examples of conditions that may have changed since the original design and installation of the blowdowns include: increased throughput in the unit(s) that relieve to the blowdowns; additional relief streams routed to the blowdown, blowdowns originally designed only to handle lighter-than-air vapor emissions from their stacks have had liquids or other heavier-than-air releases emitted from their vent stacks; additional equipment, a new unit, or occupied structures have been sited near the blowdowns in a manner that was not addressed in the original design or design basis, etc.
Guidance: Other structures such as control rooms, trailers, offices, motor control centers, etc., must be considered in a PHA to determine if they have been sited in a safe location that might be affected by a hydrocarbon or toxic material release from a blowdown. Unsafe locations can include, but are not limited to, the location of equipment which could act as an ignition source, such as a furnace stack; an employee platform on a column where employees would be exposed in the event of a release; a control room; a satellite building; a trailer; a maintenance area/shop; an emergency response building; an administration building; a lunch or break room; etc.
Guidance: The data must include the date of the inspection or test, the name of the person who performed the inspection or test, the serial number or other identifier of the equipment on which the inspection or test was performed, a description of the inspection or test performed, and the results of the inspection or test.
*Accessibility Assistance: Contact OSHA's Directorate of Cooperative and State Programs at (202) 693-2200 for assistance accessing PDF materials.
All other documents, that are not PDF materials or formatted for the web, are available as Microsoft Office® formats and videos and are noted accordingly. If additional assistance is needed with reading, reviewing or accessing these documents or any figures and illustrations, please also contact OSHA's Directorate of Cooperative and State Programs at (202) 693-2200.
**eBooks - EPUB is the most common format for e-Books. If you use a Sony Reader, a Nook, or an iPad you can download the EPUB file format. If you use a Kindle, you can download the MOBI file format.Back to Top
The Department of Labor does not endorse, takes no responsibility for, and exercises no control over the linked organization or its views, or contents, nor does it vouch for the accuracy or accessibility of the information contained on the destination server. The Department of Labor also cannot authorize the use of copyrighted materials contained in linked Web sites. Users must request such authorization from the sponsor of the linked Web site. Thank you for visiting our site. Please click the button below to continue.