A risk management plan is a document that a project manager prepares to foresee risks, estimate impacts, and define responses to issues. It also contains a risk assessment matrix.

A risk is "an uncertain event or condition that, if it occurs, has a positive or negative effect on a project's objectives." Risk is inherent with any project, and project managers should assess risks continually and develop plans to address them.

The risk management plan contains an analysis of likely risks with both high and low impact, as well as mitigation strategies to help the project avoid being derailed should common problems arise. Risk management plans should be periodically reviewed by the project team to avoid having the analysis become stale and not reflective of actual potential project risks.

OSHA believes that the implementation of an effective training program is one of the most important steps that an employer can take to enhance employee safety. Accordingly, PSM requires that each employee presently involved in operating a process or a newly assigned process must be trained in its overview and operating procedures. The training must include emphasis on the specific safety and health hazards of the process, emergency operations, including shutdown, and other safe work practices that apply to the employee's job tasks.

Those employees already involved in operating a process on the PSM effective date do not necessarily need to be given initial training. Instead, the employer may certify in writing that the employees have the required knowledge, skills, and abilities to safely carry out the duties and responsibilities specified in the operating procedures.

A refresher training must be provided at least every three years, or more often if necessary, to each employee involved in operating a process to ensure that they understand and adhere to the current operating procedures. The employer, in consultation with the employees involved in operating the process, must determine the appropriate frequency of refresher training.

All process hazard analyses must be updated and revalidated, based on their completion date, at least every five years. The process hazard analysis is a thorough, orderly, systematic approach for identifying, evaluating, and controlling the hazards of processes involving highly hazardous chemicals. The employer must perform an initial process hazard analysis (hazard evaluation) on all processes covered by this standard. The process hazard analysis methodology selected must be appropriate to the complexity of the process and must identify, evaluate, and control the hazards involved in the process.

Changes may occur at your facility that make it no longer subject to the RMP regulations (e.g., you replace the regulated substances in your process with unregulated substances, etc.) If your facility is no longer covered by RMP, you must notify EPA as specified in Section 68.190(c)

To be certain that process safety management is effective, employers must certify that they have evaluated compliance with the provisions of PSM at least every three years. This will verify that the procedures and practices developed under the standard are adequate and are being followed. The compliance audit must be conducted by at least one person knowledgeable in the process, and a report of the findings of the audit must be developed and documented, noting deficiencies that have been corrected. The two most recent compliance audit reports must be kept on file.