Skip to content
OSHA Process Safety Management (29 CFR 1910.119)

Compliance Audits

The certification at least every three years that procedures and practices comply with the PSM standard

Strategic context

What this element is and why it matters

OSHA PSM at 1910.119(o) requires the employer to certify at least once every three years that the PSM procedures and practices are adequate and are actually being followed. Under (o)(1) the audit has to be conducted by a person who knows the process. Under (o)(2) a report has to be developed. Under (o)(3) the employer has to determine and document a response to the findings and document the correction. Under (o)(4) the most recent and the prior audit reports have to be retained. Our team runs these audits with the depth that turns them into a genuine diagnostic.

Compliance Audits

Individual significance for organisations

Auditing is how an organisation discovers what it does not yet know about its own performance. Facilities that audit rigorously identify drift before it ever shows up as an incident, while facilities that audit superficially miss the patterns that matter most. This element is the self diagnostic capability of the whole system, and without it programmes degrade silently. We help your team make the audit something it actually learns from.

Contribution to OSHA Process Safety Management (29 CFR 1910.119)

Paragraph (o) is the assurance layer that sits over every other OSHA PSM element. It validates the process safety information in (d), tests the quality of the hazard analysis in (e), examines the change discipline in (l), checks the training records in (g), and verifies the mechanical integrity programmes in (j). The findings feed the root cause analysis in incident investigation in (m) and drive the corrective actions managed through change in (l). The three year cycle gives the organisation a hard cadence to keep.

Key requirements

What compliant execution looks like

An audit at least every three years under (o)(1)
An auditor who knows the process as required by (o)(1)
An audit report under (o)(2)
A documented response to the findings and the correction under (o)(3)
Retention of the most recent and the prior audit under (o)(4)
Integration with the corporate audit programme and ISO 19011
Implementation methodology

How we implement this element

A focused six step methodology calibrated to deliver compliance audits as a working capability rather than a documented compliance artefact.

Audit Scope per Element

To meet (o) we build an audit protocol covering each PSM element from (c) through (n) and specify the sample size, the evidence required, and the interview protocol.

Auditor Selection

To meet (o)(1) we select auditors who know the process, ensure their independence, and specify their training against ISO 19011 and CCPS audit competency.

Field Audit Execution

We run a multi day on site audit with document review, field walk down, and interviews of operators, supervisors, and leadership, aligned with your corporate audit standards.

Report and Findings

To meet (o)(2) we categorise the findings as critical, major, or minor and align them with your corporate audit reporting and corrective action database.

Response and Closure

To meet (o)(3) we promptly determine the response, document the corrective action, verify closure on a closed loop, and integrate it with management of change where it applies.

Retention

To meet (o)(4) we retain the most recent and the prior audit and integrate them with your document system and corporate audit programme.

Implementation flow

Element implementation flow chart

A decision gated workflow that shows the actual sequence of activities from initiation through steady state operation, with key decision points highlighted.

Start
The three year cycle starts or a significant change triggers an audit
Auditor Selection (o)(1)
Knows the process and is independent
Protocol Build
Sample size, evidence, and interviews defined for each element
Document Review
Information, hazard analysis, procedures, training, integrity, change, investigation, and response
Field Walk Down
Construction against design and field verification of operations
Interviews
Operator, supervisor, engineer, and leadership
Findings Categorisation
Critical, major, or minor under (o)(2)
Decision
Critical Finding?
Decision gate
Response (o)(3)
Owner, target date, and corrective action
Close Out Verification
Effectiveness of the action verified by the auditor
Retention (o)(4)
The most recent and the prior audit kept on file
Deliverables

What we produce

  • An audit programme charter on a three year cadence
  • An auditor competency and independence framework
  • An audit protocol for each PSM element
  • A field audit execution plan
  • A finding closure database
  • An audit report retention procedure
Common pitfalls

Where execution fails

  • Box ticking audits that only find what the auditors already expect
  • Findings filed but never closed
  • Auditor competency below the rigour the element demands
  • The three year cycle slipping past thirty six months
Standards & references

Codes this element is built on

OSHA 29 CFR 1910.119(o) (Compliance Audits, US)CCPS Guidelines for Auditing Process Safety Management SystemsISO 19011 2018 (Auditing Management Systems)ISO 45001 2018 Clause 9.2 (Internal Audit)MSIHC Rules 1989 Rule 4 (India)Factories Act 1948 Section 41B (Safety Audit, India)
Implement this element

Talk to us about implementing Compliance Audits

We can scope this element implementation against your facility, regulatory context, and existing management system maturity, then integrate it with the other OSHA Process Safety Management (29 CFR 1910.119) elements you already operate.