Process safety management vs. health and safety: where drift hides in high-hazard work
Summary
- Process safety management prevents catastrophic events such as fires, explosions, and toxic chemical releases
- Process safety focuses on low-frequency, high-consequence risk, while health and safety typically addresses injuries to individuals
- Strong personal safety results can hide safety drift because injury rates do not measure the condition of safety-critical systems
- Warning signs include overdue hazard reviews, management-of-change backlogs, deferred maintenance, and procedures that no longer reflect work as done
- Live permit-to-work controls, current chemical information and process specific indicators help to identify drift before a major incident occurs
Introduction
A worker slipping on a stair is a safety issue. A chemical release that impacts an entire facility is a process safety issue. Both matter. But they involve different patterns of risk – and measuring one does not tell you whether the other is under control.
That distinction becomes critical in high-hazard work. A site can reduce minor injuries, pass inspections and report months without a lost-time incident while ageing equipment, overdue hazard reviews, and informal workarounds quietly weaken the barriers preventing catastrophe.
This blog explains how process safety management differs from occupational health and safety, where process drift hides, and how stronger control of work and chemical visibility can expose it before an incident does.
Table of contents
Click on a specific section below to navigate to that area:
What is process safety management?
Process safety management (PSM) is a structured system for preventing or minimizing catastrophic releases of toxic, reactive, flammable, or explosive chemicals.
In the US, the Occupational Health and Safety Organization (OSHA) codifies PSM in 29 CFR 1910.119 for covered processes involving specified highly hazardous chemicals or flammable materials above defined thresholds.
OSHA describes PSM as a comprehensive program integrating technologies, procedures, and management practices.
What is process safety in plain terms?
Process safety keeps hazardous materials and energy where they belong. It aims to prevent loss of containment and the fires, explosions, toxic releases, structural failures, and environmental harm that can follow.
The Canadian Centre for Occupational Health and Safety (CCOHS) explains that the goal is to protect workers, surrounding communities, the environment, the business and its assets. Process safety complements occupational health and safety; it does not replace it.
The 14 elements of OSHA PSM (29 CFR 1910.119) at a glance
OSHA’s framework connects 14 elements. They are:
- Employee participation
- Process safety information
- Process hazard analysis (PHA)
- Operating procedures
- Training
- Contractors
- Pre-startup safety review
- Mechanical integrity
- Hot-work permits
- Management of change (MOC)
- Incident investigation
- Emergency planning and response
- Compliance audits
- Trade secrets
These are not 14 independent boxes. A weak MOC process can make procedures and training obsolete. Poor mechanical integrity can defeat safeguards identified by a PHA. Missing employee input can leave the system blind to how work is actually done.
OSHA requires PHA revalidation at least every five years and compliance audits at least every three, but the real test is whether the controls remain effective between reviews.
Process safety vs. health and safety: what’s the difference?
Health and safety usually focuses on preventing harm to individuals from hazards such as slips, falls, manual handling, or exposure. Process safety focuses on preventing major accidents caused by failures in hazardous processes. The disciplines overlap, but their risk profiles, controls, and evidence differ.
Personal safety protects the individual; process safety prevents the catastrophe
Safety thinkers like James Reason in his ‘Swiss Cheese’ model often distinguish between accidents that happen to individuals and accidents that happen to organizations. The first may happen relatively frequently and affect one person. The second may be rare, but can overwhelm multiple safeguards and harm many workers, a community, and the environment at once.
This does not make personal safety less important. It means a low rate of personal injury cannot stand in for evidence that process hazards are controlled.
Process safety and health and safety: side-by-side comparison
| Dimension | Occupational/ personal safety | Process safety |
|---|---|---|
| Typical events: | Slips, trips, falls, strains, minor exposures | Fires, explosions, toxic releases, major loss of containment |
| Pattern: | More frequent; usually lower consequence | Less frequent; potentially catastrophic |
| Primary focus: | The person, task and immediate workplace | The integrity of hazardous processes and multiple barriers |
| Typical controls: | Safe systems of work, PPE, ergonomics, training | PHA, MOC, engineering safeguards, mechanical integrity, permits |
| Useful indicators: | Injury rates, near misses, observations | Loss-of-containment events, overdue safety-critical work, barrier health, MOC and PHA status |
The risks that don’t show up in injury stats…
Personal safety metrics don’t always reveal growing process safety risks. Safety Drift can develop long before anyone gets hurt.
Why a great health and safety record can hide process safety risk
A strong personal-safety record can coexist with serious process risk because the measures answer different questions. Injury rates tell you what harm people have experienced. They do not tell you whether a relief system will work, a vessel is thinning, an alarm is reliable, or an unreviewed plant change has introduced a new failure path.
The BP Texas City lesson: a falling injury rate while process risk built
On 23 March 2005, explosions at BP’s Texas City refinery killed 15 workers and injured 180. A distillation tower flooded with hydrocarbons and became overpressurized during a unit restart, causing a flammable release that ignited.
Yet the year before the disaster, the refinery recorded the lowest injury rate in its history – nearly one-third of the oil-refinery sector average. The US Chemical Safety and Hazard Investigation Board (CSB) warned that injury rates do not account for catastrophic hazards or distinguish injuries from fatalities. The site had also experienced three major accidents in 2004, including a process fire.
The lesson is uncomfortable but clear: visible success in personal safety can hide weakening process controls.
EcoOnline deep dive – the 2013 West, Texas fertiliser plant explosion
A lack of incidents can be a cause for concern.
This documentary explores the 2013 West, Texas fertiliser plant explosion, which claimed the lives of 15 people and injured hundreds more.
Why lagging injury metrics don’t measure process safety at all
TRIR, lost-time injuries and days-away rates are lagging measures of occupational harm. They have a role, but they cannot show the condition of safety-critical barriers before a major event.
For process safety, leaders also need leading and lagging measures tied to containment and barrier health: overdue inspections, demands on safeguards, abnormal operating conditions, temporary repairs, open MOCs and releases by severity. If the dashboard stays green because it counts hard hats and hand injuries while ignoring those signals, drift has somewhere to hide.
Where process drift hides in high-hazard work
Process drift is the gradual erosion of process-safety controls as small deviations become normal. It develops when everyday adaptations – made to keep production moving, work around missing information or deal with limited resources – stop feeling exceptional.
High-risk industries cannot afford to treat permits and critical controls as paperwork.
Management-of-change backlogs, overdue PHAs, and deferred mechanical integrity
Drift often lives in queues and exceptions: a plant modification operating before its MOC closes; a PHA recommendation repeatedly deferred; a safety-critical inspection pushed behind production work; or an operating procedure that still describes yesterday’s process.
Each decision may appear reasonable in isolation. Nothing happens, so the workaround looks validated. Over time, assumptions stack up and safeguards become less independent than the organization believes. That is how work-as-imagined separates from work-as-done.
5 signs process drift is building on your site
- Open MOCs, PHA actions or audit findings are growing faster than teams close them.
- Safety-critical maintenance is deferred, repeatedly reprioritized, or closed without evidence that the barrier works.
- Temporary changes, bypasses and repairs remain in place without clear owners or expiry dates.
- Permits and procedures are complete on paper, but frontline teams rely on informal knowledge or routine workarounds.
- The dashboard celebrates low injury rates while process-safety indicators, weak signals and minor loss-of-containment events receive little attention.
Remember: These signals do not prove that a catastrophe is imminent. They show that the organization should look more closely.
Controlling process drift: from permits to chemical visibility
The answer is not more paperwork. It is better visibility of whether controls are current, connected, and working in real conditions. Leaders need to compare procedures with frontline practice, make weak signals easy to report, and act on deviations before they become accepted.
Permit-to-work and management of change as live process safety controls
A permit to work should be a live control for defined high-risk work, not simply evidence that a form was signed. It should connect the job to current hazards, isolations, simultaneous operations, competent authorization, handover, and close-out.
MOC serves a related purpose at process level: it tests proposed technical, procedural and organisational changes before they alter risk. Digital workflows can make dependencies, approvals, conflicts, and overdue actions visible across shifts and sites.
Real-time hazardous-substance visibility as an early-warning signal
Teams cannot assess process risk using outdated chemical inventories or scattered safety data sheets. They need to know which hazardous substances are present, where they are held, in what quantities, and how changes affect exposure, compatibility, and emergency planning.
Connected chemical information, risk assessments and control-of-work data can reveal mismatches earlier – for example, a permit involving a substance or area whose hazards have changed. Technology does not make the decision safe on its own. It gives competent people a more current picture on which to base that decision.
Could process drift be hiding behind your safety record? Why not take our quick quiz and find out.
Combat safety drift with intuitive EHS software
Book a demo
We’ll take you through exactly how EHS software can benefit your business.
Frequently asked questions
Process safety management (PSM) is a structured management system for preventing catastrophic releases of toxic, reactive, flammable or explosive chemicals. In the US, OSHA codifies it under 29 CFR 1910.119 for covered facilities. PSM manages hazardous-process integrity through 14 connected elements – not individual worker behavior alone.
Process safety prevents major accidents – fires, explosions and toxic releases – caused by loss of containment of hazardous materials or energy. Unlike personal safety, which addresses injuries such as slips and falls, it protects whole facilities, surrounding communities and the environment from low-frequency, high-consequence events.
Health and safety typically focuses on preventing individual injuries and ill health from workplace hazards. Process safety prevents rare but catastrophic failures in hazardous processes. They complement each other, but personal-injury performance cannot show whether safety-critical equipment, engineering safeguards and process controls are healthy.
Yes. A low injury rate measures personal-safety outcomes, not process-safety risk. Before the 2005 BP Texas City disaster killed 15 people, the refinery had recorded its lowest injury rate. Overdue inspections, degraded barriers and change backlogs can build while headline injury numbers remain positive.
OSHA’s 14 PSM elements are employee participation, process safety information, PHA, operating procedures, training, contractors, pre-startup review, mechanical integrity, hot-work permits, MOC, incident investigation, emergency planning and response, compliance audits, and trade secrets. Weakness in one element can undermine the wider system.
Process drift is the gradual erosion of process-safety controls: overdue PHAs, growing MOC backlogs, deferred mechanical-integrity work, persistent temporary changes and procedures that no longer match the plant. It develops quietly during incident-free operation and may only become obvious after a release, near miss or audit.
Technology can help organizations identify early signs of safety drift by improving visibility of inspections, audits, corrective actions and risk assessments. Digital safety systems also make it easier to monitor trends, identify recurring issues and ensure that procedures remain aligned with how work is actually performed.
Need a little more convincing? Check out our demo video library and ROI calculator. You can also explore our Safety Drift digital hub.
About the author
Laura Fitzgerald
Content Marketing Manager
Laura Fitzgerald is a Content Marketing Manager with EcoOnline. She has been writing about health and safety topics since 2017, with a focus on the areas of improving employee safety engagement and EHS legislation.