Most chemical plants I've worked with already have a process safety program. They've got a PHA on file, a management of change form nobody likes filling out, and a compliance audit every three years because 29 CFR 1910.119 makes them do it. So when ISO 45001 shows up, the instinct is to treat it as a second system bolted onto the first. Different binder, different owner, different audit week.
That's the wrong move, and it's an expensive one. ISO 45001:2018 was written broadly enough that almost every clause in it has a direct counterpart somewhere in OSHA's Process Safety Management standard or in EPA's Risk Management Program rule, 40 CFR Part 68. The plants that get real value out of certification are the ones that stop running parallel programs and start running one program that happens to satisfy two sets of language.
Why Chemical Plants Treat ISO 45001 as an Add-On
The separation usually isn't intentional. PSM at most sites was built by process safety engineers, chemical engineers who think in terms of relief valves, layers of protection, and HAZOP worksheets. ISO 45001 tends to land with EHS generalists, the people who already own the OSHA 300 log and the JSA program. Different departments, different vocabularies, and eventually two management systems that never talk to each other even though they're regulating the same hazards.
I've come to think the real cost isn't the duplicate paperwork, though that's real too. It's that a plant running two disconnected systems ends up with two disconnected risk pictures. The PHA team knows about the reactor overpressure scenario. The ISO 45001 risk register, if it exists at all, doesn't mention it, because nobody imported it. An auditor asking "where do occupational and process safety risks actually converge" gets two different answers from two different people in the same building.
Where the Two Systems Actually Overlap
OSHA's PSM standard, 29 CFR 1910.119, covers facilities that handle any of the more than 130 highly hazardous chemicals listed with their threshold quantities in Appendix A, plus flammables above 10,000 pounds. It has 14 required elements. ISO 45001 has ten clauses in its main body, but the operational ones map onto PSM almost element for element.
| PSM Element (1910.119) | ISO 45001:2018 Clause | What Integration Looks Like |
|---|---|---|
| Employee Participation (c) | 5.4 Consultation and participation of workers | One worker involvement procedure covering both PHA teams and general OH&S committees |
| Process Safety Information (d) | 6.1.2.1 Hazard identification (input data) | PSI documents feed the hazard register directly instead of being re-transcribed |
| Process Hazard Analysis (e) | 6.1.2.1 / 6.1.2.2 Hazard identification and risk assessment | PHA output becomes the OH&S risk assessment for that process unit |
| Operating Procedures (f) | 8.1.1 Operational planning and control | Shared procedure library, one revision workflow |
| Training (g) | 7.2 Competence | Combined competence matrix; one training record system |
| Contractors (h) | 8.1.4.2 Contractors | Single contractor pre-qualification and site orientation program |
| Pre-Startup Safety Review (i) | 8.1.3 Management of change (pre-implementation check) | PSSR checklist doubles as the MOC closure gate |
| Mechanical Integrity (j) | 8.1.1 Operational planning and control | Inspection, testing, and preventive maintenance data shared with risk assessment updates |
| Management of Change (l) | 8.1.3 Management of change | One MOC form, one approval chain, one record |
| Incident Investigation (m) | 10.2 Incident, nonconformity, and corrective action | Root cause findings update both the PHA and the OH&S risk register |
| Emergency Planning and Response (n) | 8.2 Emergency preparedness and response | One emergency response plan, drilled once, satisfying both |
| Compliance Audits (o) | 9.1.2 Evaluation of compliance / 9.2 Internal audit | Combined audit protocol, one audit cycle |
Look at that table for a minute. Twelve of fourteen PSM elements already have a home in ISO 45001's structure. The two that don't map cleanly, hot work permits and trade secrets, are narrow procedural items, not systemic gaps. There is very little in ISO 45001 that a well-run PSM program isn't already halfway toward satisfying.
Hazard Identification and Process Hazard Analysis Under Clause 6.1.2
Clause 6.1.2.1 requires a proactive, ongoing hazard identification process that considers routine and non-routine activities, past incidents, and how work is actually organized, not just how it's written down. PSM's 1910.119(e)(2) requires the PHA to use a methodology appropriate to the complexity of the process, listing What-If, checklist, What-If/checklist, HAZOP, FMEA, and fault tree analysis, or an equivalent method, and to be revalidated at least every five years.
The mistake I see most often is treating the PHA as the process safety hazard register and treating a separate JSA program as the occupational hazard register, with no bridge between them. A reactor overpressure scenario identified in a HAZOP is an occupational hazard too, for the operator standing at the panel when it happens. Feeding PHA findings directly into the clause 6.1.2 hazard identification process, rather than re-deriving them, is the single fastest way to close the gap between the two systems. That's consistent with the broader risk-based process safety principle: hazard identification only earns its keep when the output actually changes what operators, maintenance techs, and safety staff do day to day.
Management of Change: Same Job, Two Names
ISO 45001 clause 8.1.3 requires the organization to establish a process for managing planned temporary and permanent changes that impact OH&S performance, including changes to raw materials, equipment, processes, and staffing. PSM's 1910.119(l) requires essentially the same review before a change to process chemicals, technology, equipment, or procedures is implemented, other than a replacement in kind.
Running these as two separate forms is one of the more common findings I flag during a management review. If your MOC form was built for PSM, it already asks about chemistry, equipment specs, and technical basis. Add three fields, current occupational risk rating, required PPE or engineering control changes, and worker representative sign-off, and that single form satisfies clause 8.1.3 without a second workflow. A plant that maintains two MOC systems is also maintaining two chances for a change to slip through unreviewed, which is exactly the failure pattern the U.S. Chemical Safety Board documented in its investigation of the April 17, 2013 West Fertilizer Company explosion. The lesson from that investigation wasn't that ammonium nitrate is dangerous, everyone already knew that. It was that storage and handling changes accumulated over years without the kind of change-review discipline either PSM or ISO 45001 is designed to force.
Emergency Preparedness, Mechanical Integrity, and Contractor Management
Clause 8.2 requires a documented emergency preparedness and response process, tested periodically, and revised based on the results of tests and actual emergencies. For a chemical plant already subject to PSM's emergency planning element and, in many cases, EPA's RMP emergency response provisions under 40 CFR Part 68, the drill schedule, the mutual aid agreements, and the incident command structure should be one plan, exercised once. It shouldn't be three separate plans exercised on three separate schedules just because three separate regulations technically require it.
Mechanical integrity is trickier because ISO 45001 doesn't name it as a standalone clause. It falls under 8.1.1's operational planning and control. That's fine as long as your PSM mechanical integrity data, inspection intervals, deficiency tracking, run-to-failure decisions, is visible to whoever owns the ISO 45001 risk register. A relief valve overdue for testing is a process safety finding and an occupational risk simultaneously. It should not require two separate corrective action records to say so.
Contractor management is the cleanest overlap on the list. PSM 1910.119(h) and ISO 45001 clause 8.1.4.2 both require the host employer to inform contractors of known hazards, evaluate contractor safety performance, and maintain a log of contractor injuries related to the contractor's work. One contractor pre-qualification packet, one site orientation, one incident log. There's rarely a good reason to run this twice.
Worker Participation Requirements Chemical Plants Often Miss
Clause 5.4 is more prescriptive than most plants expect. It requires consultation and participation of non-managerial workers in hazard identification, incident investigation, and the development of OH&S objectives, not just notification after the fact. PSM's employee participation element, 1910.119(c), requires a written plan describing how employees are consulted on PHAs and given access to the PHA and related information.
The gap I see most often is that a plant's employee participation plan under PSM technically satisfies the letter of 1910.119(c) but never touches the broader OH&S program, PPE selection, ergonomics reviews, incident investigation beyond process safety events. Clause 5.4 asks for consultation across the whole system. A single worker participation procedure that names PHA teams, safety committees, and near-miss reporting as connected inputs rather than separate programs will satisfy both requirements and, more importantly, actually get used. Clause 5.4's participation requirement rewards closer study than there's room for here, particularly around what auditors check for during consultation reviews.
Building One Audit Program Instead of Two
Clause 9.1.2, evaluation of compliance, and clause 9.2, internal audit, both require documented evidence that the organization periodically checks itself against applicable requirements. PSM's compliance audit element, 1910.119(o), requires the same thing on a three-year cycle, specifically for process safety management system elements.
A combined audit protocol doesn't mean auditing everything at once. It means building one audit calendar, one set of checklists cross-referenced to both PSM elements and ISO 45001 clauses, and one corrective action tracker. When a finding surfaces, whether from a PSM compliance audit or an ISO 45001 internal audit, it goes into the same system and gets tracked to closure the same way. Auditors, whether they're OSHA compliance officers or your certification body's lead auditor, respond well to seeing one coherent record instead of being handed two binders and asked to reconcile them on the spot.
What Integration Actually Looks Like in Practice
Four steps make that integration real:
- Start with a gap crosswalk. The table above is a starting point, not the finished product for your site — your PHA scope, your RMP program level, and your existing document structure will change some of the mapping.
- Assign single ownership for each overlapping element rather than co-ownership between process safety and EHS; shared ownership is how things fall through in practice.
- Merge the forms before you merge the department org charts. A shared MOC form and a shared audit checklist change behavior faster than a reporting-line change does.
- Revalidate the hazard register any time the PHA is revalidated. A five-year PHA cycle that never updates the ISO 45001 risk register in between is producing two documents that describe a plant that no longer exists.
None of this requires abandoning either standard's identity. ISO 45001 certification and PSM compliance remain two different legal and contractual obligations, audited by two different parties, for two different reasons. What integration buys you is a single set of underlying records that can answer to both without being rebuilt for either. If you're earlier in the process and still scoping what an ISO 45001 implementation actually touches at a chemical site, get clear on how the standard's clauses translate into day-to-day operations before you start merging documents. And if you're weighing how ISO 45001 sits alongside your existing OSHA obligations more broadly, that relationship is worth understanding on its own terms before you tackle the process safety layer specifically.
Frequently Asked Questions
Does ISO 45001 certification satisfy OSHA PSM requirements?
No. ISO 45001 certification is voluntary and issued by a third-party certification body; PSM compliance under 29 CFR 1910.119 is a legal OSHA obligation enforced through inspection and citation. A well-integrated management system can use the same underlying records, PHAs, MOC forms, audit findings, to satisfy both, but one does not substitute for the other legally.
Which ISO 45001 clause corresponds to process hazard analysis?
Clause 6.1.2.1, hazard identification, and 6.1.2.2, assessment of OH&S risks, are the closest equivalents. PHA output required under 1910.119(e) can and should feed directly into the clause 6.1.2 hazard identification process rather than being maintained as a separate register.
Do chemical plants need both ISO 45001 and an RMP under 40 CFR Part 68?
They're independent obligations that often apply to the same facility. RMP applies based on chemical inventory thresholds under EPA's rule; ISO 45001 is a voluntary occupational health and safety management system standard. A facility can be subject to RMP, PSM, and ISO 45001 simultaneously, and the emergency response and hazard assessment work under each should be consolidated rather than triplicated.
How is management of change handled differently under ISO 45001 versus PSM?
Functionally, it isn't. ISO 45001 clause 8.1.3 and PSM 1910.119(l) both require review of changes before implementation, covering equipment, materials, procedures, and technology. Facilities running both typically use one MOC form with fields covering both the technical/process safety review and the occupational risk review, closed out through a single approval chain.
What happened to OHSAS 18001 for chemical plants that were already certified?
OHSAS 18001 certificates became invalid worldwide on March 12, 2021, following the International Accreditation Forum's mandated three-year migration period after ISO 45001:2018 was published. Any chemical plant still holding an OHSAS 18001 certificate has been out of compliance with the accreditation requirement for that standard for several years and needs a full ISO 45001 transition, not a renewal.
Last updated: 2026-09-03
Jared Clark
Principal Consultant, Certify Consulting
Jared Clark is the founder of Certify Consulting, helping organizations achieve and maintain compliance with international standards and regulatory requirements.