Process Safety Risk Assessment In Practice
How oil & gas, chemical, nuclear, and utilities operators use VisiumKMS to manage HAZOP studies, track PHA findings to closure, and ensure revalidations happen on schedule
Why risk assessment programs fail after the study ends
A process hazard analysis is one of the most resource-intensive activities in a PSM program. It takes multi-discipline teams, external facilitators, and days of structured sessions to produce. When it’s done, the study record is comprehensive, the findings are documented, and the recommendations are clear.
Then most of those recommendations enter a spreadsheet.
This is the most common failure pattern in process safety risk assessment programs — not inadequate studies, but inadequate follow-through. Recommendations lose ownership. Revalidation dates are tracked in someone’s calendar. A change to the process modifies the hazard picture but the PHA record isn’t updated. Years later, a post-incident investigation surfaces a finding from a prior HAZOP that was never closed.
VisiumKMS Risk Assessor is designed to close that gap. The study record lives in a secure enterprise repository. Every recommendation routes automatically to Resolution Tracker at study closure. Revalidations are tracked through Recurring Activities with automated reminders. MOC records link to relevant assessments so changes don’t silently invalidate prior studies.
The risk assessment program does its job when the findings it generates are tracked to verified closure — not when the study report is filed.
OSHA PSM (29 CFR 1910.119)
Element (e) of the PSM standard requires an initial PHA for every covered process using a recognized methodology, documentation of findings and recommendations, resolution of all recommendations, and revalidation at least every five years. Records must be retained for the life of the process. PHA deficiencies — incomplete documentation, unresolved recommendations, overdue revalidations — are among the most commonly cited PSM enforcement findings.
EPA RMP (40 CFR Part 68)
Program 3 facilities under the Risk Management Program must conduct hazard assessments using OSHA PSM-equivalent methodology. Findings, recommendations, and resolution documentation are required. Revalidation requirements mirror OSHA PSM. RMP inspections routinely examine whether PHA recommendations were resolved and whether revalidations are current.
API RP-750 / API RP-14J
API recommended practices for process hazard management define PHA requirements for petroleum and petrochemical facilities, including methodology selection criteria, team composition requirements, documentation standards, and recommendation resolution obligations. VisiumKMS Risk Assessor supports the recognized PHA methodologies defined in API RP-750.
CCPS Guidelines for Hazard Evaluation Procedures
Center for Chemical Process Safety guidelines establish technical standards for HAZOP, what-if, checklist, and related hazard evaluation methodologies, including documentation requirements, revalidation standards, and action item management expectations. VisiumKMS Risk Assessor is aligned to CCPS hazard evaluation procedure guidelines.
How It’s Used: Five Scenarios
VisiumKMS Risk Assessor handles the full lifecycle of a process safety risk assessment — from study documentation through recommendation tracking, revalidation scheduling, and MOC-triggered reassessment. Each scenario below reflects a real pattern from regulated industrial operations
1 — Real-time corrective action overdue monitoring
A HAZOP study produces a substantial record: every process node, every guide word deviation, every cause and consequence pair, every safeguard, every recommendation. In most organizations, that record is produced in a dedicated HAZOP facilitation tool or a spreadsheet — and the recommendations are extracted at the end of the study and handed off informally.
VisiumKMS Risk Assessor maintains the HAZOP record in a secure, searchable enterprise repository. At study closure, every recommendation routes directly to Resolution Tracker — each with a named owner, a target date, and an automated reminder schedule. The study record stays linked to every action it generated. When the next revalidation team convenes, they can see the full prior study, every recommendation that was made, and the documented evidence of what closed and when.
This is the difference between a HAZOP study that produces a document and a HAZOP study that produces a tracked, verified safety improvement.
Compliance connection
OSHA PSM § 1910.119(e)(5) requires that PHA recommendations be resolved and documented, and that the resolution be communicated to operating and maintenance personnel. Resolution Tracker provides the documented closure record. The linked study record provides the communication trail.
2 — PHA revalidation schedule management
PHA revalidation is one of the most consistently cited PSM deficiencies in OSHA enforcement actions. The five-year revalidation requirement is not difficult to understand, but it is difficult to manage across multiple process units, multiple sites, and a team where responsibility for individual PHAs shifts as personnel change.
VisiumKMS Recurring Activities tracks revalidation schedules for every PHA in the system and sends automated reminders to the responsible team as due dates approach — not a calendar entry that depends on one person’s memory, but a system-managed schedule that survives personnel changes and organizational restructuring.
The revalidation record is linked to the prior study. The revalidation team begins with full visibility into the original findings, every recommendation that was generated, and what closed before the reassessment begins. The revalidation produces its own recommendation set, which routes to Resolution Tracker and begins the cycle again. The complete revalidation history — every study, every recommendation, every closure — is retained in the system for the life of the process.
Compliance connection
CCPS process safety metrics guidelines explicitly call out near-miss reporting rates and recurring cause patterns as leading indicators. The ability to trend cause data across sites is evidence of a program that is using investigation data for continuous improvement, not just filing reports.
3 — MOC program health monitoring
Management of change programs generate significant data, including MOC volumes by site, workflow stage distribution, PSSR completion rates, items overdue at each approval stage, average time from initiation to closure. In most organizations, that data exists in the MOC system but is never analyzed systematically. MOC program health is assessed annually, at audit, not continuously.
Risk Intelligence surfaces MOC KPIs in real time: items raised by site and period, items at each workflow stage, items overdue by approval stage and owner, PSSR completion rates, and average cycle time from initiation to closure. A sudden increase in overdue approvals at a particular stage is visible immediately — not discovered when a temporary change expires unreviewed.
For multi-site operators, the ability to compare MOC program health across facilities identifies both outliers that need intervention and high-performing sites whose practices are worth sharing.
Compliance connection
OSHA PSM § 1910.119(l) requires a written MOC procedure and documented review for every change. MOC program health KPIs provide continuous evidence that the procedure is being implemented consistently — not just that it exists on paper.
4 - Audit program compliance and finding closure tracking
Process safety audit programs have their own compliance requirements: planned audits must be completed, findings must be classified and assigned, recommendations must be resolved within defined timeframes. Most organizations know whether their audit program is running, but far fewer have real-time visibility into whether it is performing.
Risk Intelligence provides pre-configured audit program KPIs: audits completed versus plan by period and site, findings by severity and audit type, overdue recommendation rate, and overall program compliance percentage. These are available as a real-time dashboard and as a reportable package for management review, board reporting, or regulatory submission.
When an auditor or regulator asks whether the audit program is on track, the answer is a dashboard view and a report — not a count performed in a spreadsheet the day before the meeting.
Compliance connection
PSM audit programs require documented evidence of planning, execution, and finding resolution. Risk Intelligence provides continuous visibility into audit program health and generates the compliance record that regulators and internal auditors expect.
5 - Executive and board safety performance reporting
Board-level safety reporting has become a governance expectation at regulated industrial operators. The challenge is not the reporting itself — it is the preparation burden. EHS directors routinely spend significant time before each board or leadership cycle assembling safety performance data from multiple systems, reconciling numbers that don’t match because they were pulled at different times, and formatting outputs that are already out of date by the time they are presented.
Risk Intelligence eliminates that cycle. Executive dashboards configured during implementation reflect live data from across the VisiumKMS platform — incident rates, corrective action closure performance, MOC program health, audit completion status — in a single view. KPI snapshots, trend charts, and summary reports export directly from the platform in formats suitable for board packages.
The result is that the time EHS directors spend on board preparation drops significantly, the data presented is current rather than assembled-and-frozen, and leadership gets a performance picture that actually reflects the state of the program.
Compliance connection
Boards and executive leadership at regulated industrial operators are increasingly expected to demonstrate active oversight of process safety performance. Consistent, data-driven safety reporting is evidence of that oversight — and Risk Intelligence makes it sustainable rather than heroic.
Three Areas Where VisiumKMS Risk Assessor Pays for Itself
Closing the Loop Between Study and Action
The most expensive part of a process hazard analysis is the study itself — the facilitation time, the team time, the documentation effort. All of that investment produces a set of recommendations that need to close. VisiumKMS Risk Assessor is the mechanism that ensures they do. Every recommendation routes to a named owner with a due date and an automated follow-up. The study record stays connected to every action it generated. The investment in the study produces verified safety improvement, not just a document.
Revalidation Compliance Without Manual Tracking
PHA revalidation is a mandatory OSHA PSM requirement that is routinely cited in enforcement actions — not because facilities deliberately skip revalidations, but because the scheduling is informal and the reminders are unreliable. VisiumKMS Recurring Activities converts revalidation scheduling from a manual exercise dependent on individual memory into a system-managed process that survives personnel changes and organizational restructuring. The revalidation compliance rate becomes a tracked KPI in Risk Intelligence, visible continuously rather than discovered at audit.
A Process Safety File That Stays Current
A process safety file that accurately represents current operating conditions requires two things: studies that are revalidated on schedule, and a connection between process changes and the assessments those changes affect. VisiumKMS provides both — revalidation scheduling through Recurring Activities and MOC-to-PHA linkage through the native platform integration. The result is a process safety file that reflects reality rather than a collection of point-in-time studies that diverge from current operations over time.
Go Deeper
Case Studies
See how industrial operators use VisiumKMS across oil & gas, chemical, and nuclear operations.
View Case Studies →
Process Safety Risk Assessment
See the full Risk Assessor module — HAZOP, PHA, what-if, checklist, and JSA support with native connection to Resolution Tracker and Management of Change.
See the Analytics Module →
Resolution & Action Tracking
Every investigation generates recommendations that need to close. See how VisiumKMS Resolution Tracker handles end-to-end corrective action management from investigation findings through to verified closure.
See Resolution Tracker →
See It in Your Environment
Book a discovery call with a process safety software specialist. We’ll show you how VisiumKMS Risk Assessor maps to your PHA program, your revalidation schedule, and your action closure requirements
Book a Discovery Call →