Health & Safety

Process safety management vs health and safety: where drift hides in high-hazard work

This blog explains how process safety management differs from occupational health and safety, where process drift hides, and how stronger control of work and chemical visibility can expose it before an incident does.
A file photo of a refinery
Back to all
Article

By Laura Fitzgerald

September 11, 2026

Summary

  • Process safety management prevents catastrophic events such as fires, explosions and toxic chemical releases
  • Process safety focuses on low-frequency, high-consequence risk, while health and safety typically addresses injuries to individuals
  • Strong personal safety results can hide safety drift because injury rates do not measure the condition of safety-critical systems
  • Warning signs include overdue hazard reviews, management-of-change backlogs, deferred maintenance, and procedures that no longer reflect work as done
  • Live permit-to-work controls, current chemical information and process-specific indicators help to identify drift before a major incident occurs

Introduction

A worker slipping on a stair is a safety issue. A chemical release that impacts an entire facility is a process safety issue. Both matter. But they involve different patterns of risk — and measuring one does not tell you whether the other is under control.

That distinction becomes critical in high-hazard work. A site can reduce minor injuries, pass inspections and report months without a lost-time incident while ageing equipment, overdue hazard reviews and informal workarounds quietly weaken the barriers preventing catastrophe.

This blog explains how process safety management differs from occupational health and safety, where process drift hides, and how stronger control of work and chemical visibility can expose it before an incident does.

Table of contents

Click on a specific section below to navigate to that area:

  1. 1. What is process safety management?
  2. 2. Process safety vs health and safety: what’s the difference?
  3. 3. Why a great health and safety record can hide process safety risk
  4. 4. Where process drift hides in high-hazard work
  5. 5. Controlling process drift: from permits to chemical visibility
  6. FAQs

What is process safety management?

Process safety management (PSM) is a structured system for preventing or minimising catastrophic releases of toxic, reactive, flammable or explosive chemicals.

In the US, the Occupational Health and Safety Organisation (OSHA) codifies PSM in 29 CFR 1910.119 for covered processes involving specified highly hazardous chemicals or flammable materials above defined thresholds.

OSHA describes PSM as a comprehensive program integrating technologies, procedures and management practices.

What is process safety in plain terms?

Process safety keeps hazardous materials and energy where they belong. It aims to prevent loss of containment and the fires, explosions, toxic releases, structural failures and environmental harm that can follow.

The Canadian Centre for Occupational Health and Safety (CCOHS) explains that the goal is to protect workers, surrounding communities, the environment, the business and its assets. Process safety complements occupational health and safety; it does not replace it.

The 14 elements of OSHA PSM (29 CFR 1910.119) at a glance

OSHA’s framework connects 14 elements. They are:

These are not 14 independent boxes. A weak MOC process can make procedures and training obsolete. Poor mechanical integrity can defeat safeguards identified by a PHA. Missing employee input can leave the system blind to how work is actually done.

OSHA requires PHA revalidation at least every five years and compliance audits at least every three, but the real test is whether the controls remain effective between reviews.


Process safety vs health and safety: what’s the difference?

Health and safety usually focuses on preventing harm to individuals from hazards such as slips, falls, manual handling or exposure. Process safety focuses on preventing major accidents caused by failures in hazardous processes. The disciplines overlap, but their risk profiles, controls and evidence differ.

Personal safety protects the individual; process safety prevents catastrophe

Safety thinkers like James Reason in his ‘Swiss Cheese’ model often distinguish between accidents that happen to individuals and accidents that happen to organisations. The first may happen relatively frequently and affect one person. The second may be rare, but can overwhelm multiple safeguards and harm many workers, a community and the environment at once.

This does not make personal safety less important. It means a low rate of personal injury cannot stand in for evidence that process hazards are controlled.

Process safety and health and safety: side-by-side comparison

Dimension Occupational/ personal safety Process safety

Typical events:

Slips, trips, falls, strains, minor exposures

Fires, explosions, toxic releases, major loss of containment

Pattern:

More frequent; usually lower consequence

Less frequent; potentially catastrophic

Primary focus:

The person, task and immediate workplace

The integrity of hazardous processes and multiple barriers

Typical controls:

Safe systems of work, PPE, ergonomics, training

PHA, MOC, engineering safeguards, mechanical integrity, permits

Useful indicators:

Injury rates, near misses, observations

Loss-of-containment events, overdue safety-critical work, barrier health, MOC and PHA status

Why a great health and safety record can hide process safety risk

A strong personal-safety record can coexist with serious process risk because the measures answer different questions. Injury rates tell you what harm people have experienced. They do not tell you whether a relief system will work, a vessel is thinning, an alarm is reliable, or an unreviewed plant change has introduced a new failure path.

The BP Texas City lesson: a falling injury rate while process risk built

On 23 March 2005, explosions at BP’s Texas City refinery killed 15 workers and injured 180. A distillation tower flooded with hydrocarbons and became overpressurised during a unit restart, causing a flammable release that ignited.

Yet the year before the disaster, the refinery recorded the lowest injury rate in its history — nearly one-third of the oil-refinery sector average. The US Chemical Safety and Hazard Investigation Board (CSB) warned that injury rates do not account for catastrophic hazards or distinguish injuries from fatalities. The site had also experienced three major accidents in 2004, including a process fire.

The lesson is uncomfortable but clear: visible success in personal safety can hide weakening process controls.

Why lagging injury metrics don’t measure process safety at all

TRIR, lost-time injuries and days-away rates are lagging measures of occupational harm. They have a role, but they cannot show the condition of safety-critical barriers before a major event.

For process safety, leaders also need leading and lagging measures tied to containment and barrier health: overdue inspections, demands on safeguards, abnormal operating conditions, temporary repairs, open MOCs and releases by severity. If the dashboard stays green because it counts hard hats and hand injuries while ignoring those signals, drift has somewhere to hide.


Where process drift hides in high-hazard work

Process drift is the gradual erosion of process-safety controls as small deviations become normal. It develops when everyday adaptations — made to keep production moving, work around missing information or deal with limited resources — stop feeling exceptional.

High-risk industries cannot afford to treat permits and critical controls as paperwork.

Management-of-change backlogs, overdue PHAs, and deferred mechanical integrity

Drift often lives in queues and exceptions: a plant modification operating before its MOC closes; a PHA recommendation repeatedly deferred; a safety-critical inspection pushed behind production work; or an operating procedure that still describes yesterday’s process.

Each decision may appear reasonable in isolation. Nothing happens, so the workaround looks validated. Over time, assumptions stack up and safeguards become less independent than the organisation believes. That is how work-as-imagined separates from work-as-done.

5 signs process drift is building on your site

  • Open MOCs, PHA actions or audit findings are growing faster than teams close them.
  • Safety-critical maintenance is deferred, repeatedly reprioritised, or closed without evidence that the barrier works.
  • Temporary changes, bypasses and repairs remain in place without clear owners or expiry dates.
  • Permits and procedures are complete on paper, but frontline teams rely on informal knowledge or routine workarounds.
  • The dashboard celebrates low injury rates while process-safety indicators, weak signals and minor loss-of-containment events receive little attention.

Remember: These signals do not prove that a catastrophe is imminent. They show that the organisation should look more closely.


Controlling process drift: from permits to chemical visibility

The answer is not more paperwork. It is better visibility of whether controls are current, connected and working in real conditions. Leaders need to compare procedures with frontline practice, make weak signals easy to report, and act on deviations before they become accepted.

Permit-to-work and management of change as live process safety controls

A permit to work should be a live control for defined high-risk work, not simply evidence that a form was signed. It should connect the job to current hazards, isolations, simultaneous operations, competent authorisation, handover and close-out.

MOC serves a related purpose at process level: it tests proposed technical, procedural and organisational changes before they alter risk. Digital workflows can make dependencies, approvals, conflicts and overdue actions visible across shifts and sites.

Real-time hazardous-substance visibility as an early-warning signal

Teams cannot assess process risk using outdated chemical inventories or scattered safety data sheets. They need to know which hazardous substances are present, where they are held, in what quantities, and how changes affect exposure, compatibility and emergency planning.

Connected chemical information, risk assessments and control-of-work data can reveal mismatches earlier — for example, a permit involving a substance or area whose hazards have changed. Technology does not make the decision safe on its own. It gives competent people a more current picture on which to base that decision.

Could process drift be hiding behind your safety record? Why not take our quick quiz and find out.

Calendar Icon

Frequently asked questions

What is process safety management?

Process safety management (PSM) is a structured management system for preventing catastrophic releases of toxic, reactive, flammable or explosive chemicals. In the US, OSHA codifies it under 29 CFR 1910.119 for covered facilities. PSM manages hazardous-process integrity through 14 connected elements — not individual worker behaviour alone.

What is process safety?

Process safety prevents major accidents — fires, explosions and toxic releases — caused by loss of containment of hazardous materials or energy. Unlike personal safety, which addresses injuries such as slips and falls, it protects whole facilities, surrounding communities and the environment from low-frequency, high-consequence events.

What is the difference between process safety and health and safety?

Health and safety typically focuses on preventing individual injuries and ill health from workplace hazards. Process safety prevents rare but catastrophic failures in hazardous processes. They complement each other, but personal-injury performance cannot show whether safety-critical equipment, engineering safeguards and process controls are healthy.

Can a company have a good safety record and still be at risk?

Yes. A low injury rate measures personal-safety outcomes, not process-safety risk. Before the 2005 BP Texas City disaster killed 15 people, the refinery had recorded its lowest injury rate. Overdue inspections, degraded barriers and change backlogs can build while headline injury numbers remain positive.

What are the 14 elements of process safety management?

OSHA’s 14 PSM elements are employee participation, process safety information, PHA, operating procedures, training, contractors, pre-startup review, mechanical integrity, hot-work permits, MOC, incident investigation, emergency planning and response, compliance audits, and trade secrets. Weakness in one element can undermine the wider system.

What is process drift?

Process drift is the gradual erosion of process-safety controls: overdue PHAs, growing MOC backlogs, deferred mechanical-integrity work, persistent temporary changes and procedures that no longer match the plant. It develops quietly during incident-free operation and may only become obvious after a release, near miss or audit.

How can technology help prevent safety drift?

Technology can help organisations identify early signs of safety drift by improving visibility of inspections, audits, corrective actions and risk assessments. Digital safety systems also make it easier to monitor trends, identify recurring issues and ensure that procedures remain aligned with how work is actually performed.

Need a little more convincing? Check out our demo video library and ROI calculator. You can also explore our Safety Drift digital hub.

About the author

Laura Fitzgerald

Content Marketing Manager

Laura Fitzgerald is a Content Marketing Manager with EcoOnline. She has been writing about health and safety topics since 2017, with a focus on the areas of improving employee safety engagement and EHS legislation.