OSHA Process Safety Management (29 CFR 1910.119)

Compliance Audits

Triennial certification that procedures and practices comply with the PSM standard

Strategic context

What this element is — and why it matters

OSHA PSM 1910.119(o) requires the employer to certify at least every 3 years that PSM procedures and practices are adequate and being followed. Per (o)(1), audit must be conducted by a process-knowledgeable person. Per (o)(2), a report must be developed. Per (o)(3), the employer must determine and document response to findings and document correction. Per (o)(4), most recent and prior audit reports must be retained.

Compliance Audits

Individual significance for organisations

Auditing is how an organisation discovers what it doesn't know about its own performance. Sites that audit rigorously identify drift before it manifests as incidents; sites that audit superficially miss the patterns that matter. The element is the system's self-diagnostic capability — without it, programmes degrade silently.

Contribution to OSHA Process Safety Management (29 CFR 1910.119)

(o) is the assurance layer over every other OSHA PSM element. It validates (d) PSI, tests (e) PHA quality, examines (l) MOC discipline, checks (g) training records, and verifies (j) MI programmes. Findings feed (m) incident investigation root-cause analysis and drive (l) MOC corrective actions. The triennial cycle gives organisations a hard cadence to maintain.

Key requirements

What compliant execution looks like

Triennial audit per (o)(1)
Auditor competency — knowledgeable in the process per (o)(1)
Audit report per (o)(2)
Response to findings and correction documentation per (o)(3)
Retention of most recent and prior audit per (o)(4)
Integration with corporate audit programme and ISO 19011
Implementation methodology

How we implement this element

A focused 6-step methodology calibrated to deliver compliance audits as a working capability — not a documented compliance artefact.

Audit Scope per Element

Per (o), build audit protocol covering each PSM (c) through (n) element; specify sample size, evidence requirement, interview protocol.

Auditor Selection

Per (o)(1), select auditors knowledgeable in the process; ensure independence; specify training per ISO 19011 / CCPS audit competency.

Field Audit Execution

Multi-day on-site audit with document review, walk-down, operator / supervisor / leadership interviews; align with corporate audit standards.

Report & Findings

Per (o)(2), categorise findings (critical / major / minor); align with corporate audit reporting and corrective-action database.

Response & Closure

Per (o)(3), promptly determine response; document corrective action; close-loop verification; integrate with MOC where applicable.

Retention

Per (o)(4), retain most recent and prior audit; integrate with EDMS and corporate audit programme.

Implementation flow

Element-implementation flow chart

Decision-gated workflow showing the actual sequence of activities — from initiation through steady-state operation — with key decision points highlighted.

Start
Triennial cycle initiated or significant change triggers audit
Auditor Selection per (o)(1)
Process-knowledgeable + independent
Protocol Build
Per element — sample size + evidence + interviews
Document Review
PSI, PHA, procedures, training, MI, MOC, investigation, ER
Field Walk-Down
Construction-vs-design + operations field verification
Interviews
Operator + supervisor + engineer + leadership
Findings Categorisation
Critical / major / minor per (o)(2)
Decision
Critical Finding?
Decision gate
Response per (o)(3)
Owner + target date + corrective action
Close-Out Verification
Action effectiveness verified by auditor
Retention per (o)(4)
Most recent + prior audit kept on file
Deliverables

What we produce

  • Audit programme charter with triennial cadence
  • Auditor competency and independence framework
  • Audit protocol per PSM element
  • Field audit execution plan
  • Finding closure database
  • Audit report retention procedure
Common pitfalls

Where execution fails

  • Tick-box audits finding what auditors expect
  • Findings filed but never closed
  • Auditor competency below the rigour the element requires
  • Triennial cycle slipping past 36 months
Related elements

Explore related elements in this framework

All elements in this framework

OSHA Process Safety Management (29 CFR 1910.119) — full element index

Implement this element

Talk to us about implementing Compliance Audits

We can scope this element implementation against your facility, regulatory context, and existing management-system maturity — and integrate it with the other OSHA Process Safety Management (29 CFR 1910.119) elements you already operate.