Management Systems
The 14 Elements of PSM (OSHA) vs the 20 Elements of Risk Based Process Safety (CCPS)
Vinit Pandey · Published 15 October 2026
In short: OSHA's Process Safety Management standard (29 CFR 1910.119) has 14 elements and is a regulatory minimum in the US. The CCPS Risk Based Process Safety (RBPS) framework has 20 elements grouped under four pillars and adds culture, competency, conduct of operations, metrics and management review, scaling effort to the level of risk.
Key takeaways
- OSHA PSM: 14 elements, a regulatory minimum under 29 CFR 1910.119
- CCPS RBPS: 20 elements under four pillars, a risk-based good-practice framework
- RBPS adds culture, competency, stakeholder outreach, conduct of operations, readiness, metrics and management review
- A good gap assessment scores a site against both, separating compliance gaps from maturity gaps
When people ask how many elements process safety management has, the answer depends on which framework they mean. The US OSHA PSM standard, published in 1992 after a series of major chemical accidents, defines 14 elements. The Center for Chemical Process Safety (CCPS) published Guidelines for Risk Based Process Safety in 2007, defining 20 elements in four pillars. Other variants exist — the Energy Institute framework, and company-specific models with 12 to 22 elements — but almost all of them trace back to these two.
OSHA's standard applies in the US to processes holding more than a threshold quantity of a listed highly hazardous chemical, or 10,000 lb or more of a flammable liquid or gas. Outside the US it has no legal force, but its 14 elements remain the most widely recognised baseline. RBPS is not a regulation; it is a good-practice framework designed to be scaled to the hazard and to address why compliant programs still fail.
The 14 elements of OSHA Process Safety Management
The OSHA PSM standard (29 CFR 1910.119) requires the following 14 elements:
- ●Employee participation
- ●Process safety information
- ●Process hazard analysis
- ●Operating procedures
- ●Training
- ●Contractors
- ●Pre-startup safety review
- ●Mechanical integrity
- ●Hot work permit
- ●Management of change
- ●Incident investigation
- ●Emergency planning and response
- ●Compliance audits
- ●Trade secrets
The 20 elements of CCPS Risk Based Process Safety
RBPS groups its 20 elements under four pillars. Commit to process safety: process safety culture; compliance with standards; process safety competency; workforce involvement; stakeholder outreach.
Understand hazards and risk: process knowledge management; hazard identification and risk analysis.
Manage risk: operating procedures; safe work practices; asset integrity and reliability; contractor management; training and performance assurance; management of change; operational readiness; conduct of operations; emergency management.
Learn from experience: incident investigation; measurement and metrics; auditing; management review and continuous improvement.
How the two frameworks map
Most OSHA elements have a direct RBPS counterpart, sometimes under a broader name:
- ●Process safety information → process knowledge management
- ●Process hazard analysis → hazard identification and risk analysis
- ●Employee participation → workforce involvement
- ●Hot work permit → safe work practices (which also covers other permits)
- ●Mechanical integrity → asset integrity and reliability
- ●Pre-startup safety review → operational readiness
- ●Emergency planning and response → emergency management
- ●Compliance audits → auditing
- ●Trade secrets → no direct RBPS element; access to information is handled within process knowledge management
What RBPS adds — and why it matters
Seven RBPS elements have no direct OSHA counterpart: process safety culture, compliance with standards, process safety competency, stakeholder outreach, conduct of operations, measurement and metrics, and management review. These are precisely the areas that incident investigations repeatedly point to — a culture that normalises deviation, operating discipline that erodes, and leadership that sees no leading indicators until an event occurs.
RBPS is also explicitly risk-based: the rigour applied to each element should be proportional to the hazard, the demand for the activity, and the site's process safety culture. A small, low-hazard unit and a large refinery should not run identical programs.
Which framework should a gap assessment use?
For a US facility covered by the standard, OSHA's 14 elements are mandatory and must be assessed first. For most facilities elsewhere — including in India, where there is no single PSM statute — the practical answer is both: use OSHA's elements as the recognised compliance baseline, and RBPS's 20 elements to assess maturity and effectiveness. Scoring each element separately for 'implemented' and 'effective' keeps a well-documented but poorly practised element from looking healthy on paper.
Frequently Asked Questions
What are the 14 elements of PSM?
Under OSHA 29 CFR 1910.119 the 14 elements are employee participation, process safety information, process hazard analysis, operating procedures, training, contractors, pre-startup safety review, mechanical integrity, hot work permit, management of change, incident investigation, emergency planning and response, compliance audits, and trade secrets.
What are the 20 elements of RBPS?
CCPS Risk Based Process Safety has 20 elements in four pillars: process safety culture, compliance with standards, process safety competency, workforce involvement, stakeholder outreach, process knowledge management, hazard identification and risk analysis, operating procedures, safe work practices, asset integrity and reliability, contractor management, training and performance assurance, management of change, operational readiness, conduct of operations, emergency management, incident investigation, measurement and metrics, auditing, and management review and continuous improvement.
What are the four pillars of process safety?
In the CCPS Risk Based Process Safety framework, the four pillars are: commit to process safety, understand hazards and risk, manage risk, and learn from experience.
Is OSHA PSM mandatory in India?
No. OSHA PSM is a US regulation. Indian facilities are governed by the Factories Act provisions (now within the OSH Code), the MSIHC Rules and sector-specific rules, but OSHA's 14 elements and CCPS RBPS are widely used in India as the management-system framework for meeting those obligations.