Common OSHA PSM Mechanical Integrity Citations and How Inspection Records Prevent Them

Short answer: OSHA's own review of its refinery PSM National Emphasis Program found the same mechanical integrity failures over and over. Equipment deficiencies were left uncorrected. Inspection procedures did not set the number and location of thickness readings. Corrosion rates were not calculated or acted on. Anomalous readings were ignored. Some equipment was never inspected at all. Each failure is a records failure first, so each has a records fix.

This guide works from OSHA's primary sources rather than recycled percentages. The main source is OSHA publication 3918, Process Safety Management for Petroleum Refineries (2017). It summarises citations issued under the Petroleum Refinery PSM National Emphasis Program (CPL 03-00-004, launched June 2007). The patterns it describes apply to any facility covered by 29 CFR 1910.119, because the mechanical integrity text in paragraph (j) is the same for every covered process. Since January 2017, OSHA's chemical NEP, CPL 03-00-021, covers both chemical facilities and petroleum refineries in a single programme.

Why mechanical integrity draws so many citations

Direct answer: Mechanical integrity is where PSM meets physical equipment. Every vessel, pipe, relief device, alarm and pump in a covered process needs written procedures, inspections at a defensible frequency, documented results and timely correction of deficiencies. That is a large, ongoing body of evidence, and any gap is visible to an inspector.

OSHA 3918 lists mechanical integrity among the five PSM areas where OSHA issued the most citations during the refinery NEP. The others are process safety information, process hazard analysis, operating procedures and management of change. The publication describes four groups of MI compliance issues: (1) equipment deficiencies, (2) inspection, testing and maintenance procedures, (3) resolving anomalous data, and (4) making inspections and tests site-specific. Secondary reviews of Department of Labor citation data reach a similar conclusion. Inspectioneering's look at 2016 and 2017 data found mechanical integrity the most cited PSM element in both years, with inspection and testing the most cited sub-paragraph. Treat that as secondary context. The patterns below come from OSHA's own text.

The structure of paragraph (j) explains the pattern. (j)(1) lists the equipment. (j)(2) requires written procedures. (j)(3) requires training. (j)(4) covers inspection and testing: following RAGAGEP, setting frequency, and documenting each inspection. (j)(5) covers deficiencies, and (j)(6) quality assurance. An inspector can test each of these against your file in a single afternoon. For a paragraph-by-paragraph reading, see our page on the NDT side of 1910.119(j).

Citation pattern 1: equipment deficiencies left uncorrected

Direct answer: OSHA calls the failure to correct equipment deficiencies outside acceptable limits one of the leading causes of PSM noncompliance in refining. Relief devices were the most commonly cited equipment for deficiencies, followed by piping circuits, pressure vessels and alarm systems.

OSHA 3918 groups deficiency citations into four kinds: lack of proper maintenance or repair, inappropriate installation (such as wrong sizing), missing protective systems (such as absent relief devices), and insufficient structural support. Its examples are instructive because they are ordinary:

• A broken gate valve disabled a level gauge, so visual verification of liquid level no longer worked, and the problem stayed uncorrected.
• An engineered clamp was installed on a leaking 90-degree elbow that was outside acceptable limits. The clamp did not correct it, and the elbow stayed in service in a circuit carrying waste hydrogen sulfide gas.
• Hydrogen sulfide monitors with bad sensors or loose wiring were not inspected and tested regularly. Work orders marked "fix today" or "ASAP" stayed open for a week or more, with no tracking system.
• Six relief systems in an alkylation unit were found incorrectly sized and were not corrected in a timely way. No management of change justified the delay.
• Grounding cables removed from equipment were never replaced, and flammable-liquid piping was inadequately supported.

The records fix. Paragraph (j)(5) allows two routes. You can correct the deficiency before further use. Or you can correct it in a safe and timely manner while "necessary means are taken to assure safe operation". The second route needs evidence. A deficiency log that works records the finding date, the inspection report it came from, the acceptance limit it breached, the decision (repair, remove from service, or continue with interim measures), the interim measures and who approved them, any MOC raised, the target date and the close-out evidence. An NDT report that states plainly when a reading is below the minimum required thickness the owner supplied gives the deficiency log a clean starting point. It also removes any argument about when the owner "knew".

Citation pattern 2: missing or inadequate inspection procedures

Direct answer: OSHA cited both a complete absence of inspection and testing procedures and procedures too vague to follow. Piping circuits, pressure vessels, relief devices and monitoring alarms were the equipment types most often cited.

OSHA 3918 says basic items must follow the employer's MI procedures and be documented. Those items include the number and location of thickness measurements, welder certification requirements and positive material identification. Its examples of non-compliant procedures include:

• Procedures that did not set the specific number and location of thickness measurement locations for each pressure vessel and piping section. The same procedures did not say how to handle anomalous data, such as thickness readings that increase over time.
• Procedures that required welder qualifications for inspected systems without listing what those qualifications were.
• Inadequate procedures for inspecting, repairing and maintaining vessels and piping. These led to a poor evaluation of a leaking crude heater tube and many inadequately recorded piping inspections.
• Procedures not updated to reflect a newly adopted practice of changing piping inspection intervals.
• No inspection for corrosion under insulation (CUI), leaving sulfur-unit vessels and piping exposed to corrosive conditions with no assurance that external corrosion would be found.

The records fix. Write procedures that name the equipment, the code basis and the method, and that refer to a controlled CML list for each vessel and circuit. Inspection contractors should work to a written NDE procedure qualified under the employer's written practice and signed off by a Level III. The procedure should define calibration, scanning technique, CML identification and reporting format, so readings from different years and crews compare like for like. Our written practice development service and the PSM written practice page cover the NDT side of this paperwork.

Citation pattern 3: thickness measurements and corrosion rates

Direct answer: Thickness citations in the NEP included actual corrosion rates above expected rates with no action, missing UT thickness testing on pressure vessels, and boilers not inspected at the locations the employer's RAGAGEP specified. Others were pressure testing not done by an appropriately certified person, and corrosion rates never calculated to set thickness measurement intervals.

OSHA 3918 reminds employers that thickness readings have to be taken at predetermined condition monitoring locations (CMLs) to establish a pipe's integrity. Citing API 570 as an example RAGAGEP, it notes that CMLs belong at locations susceptible to deterioration, such as injection points, mixing points and dead legs, not just spaced along the line. The final number of CMLs depends on potential impact, expected corrosion rates and system complexity.

On frequency, OSHA 3918 states that API 570 (the 2016 edition it cites) recommended thickness-measurement intervals by piping class. Class 1 services such as flammables that can rapidly vaporise, hydrogen sulfide, anhydrous hydrogen chloride and hydrofluoric acid were at least every five years. Classes 2 and 3 were at least every ten years. The inspector or piping engineer sets the actual interval under the owner-user's quality assurance system, without exceeding the API 570 limits. API 570 is now in its fifth edition (February 2024). Confirm current class definitions and maximum intervals against the current edition before you cite them. See our guide to API 570 piping service classes.

The records fix. Each CML needs a stable identifier, a location sketch or isometric reference, the baseline reading and every later reading, with the method and instrument recorded. The owner's inspector then calculates long-term and short-term corrosion rates and remaining life, and documents why the chosen interval follows from them. When the actual rate exceeds the expected rate, the record should show the response: a shorter interval, more CMLs, a damage-mechanism review or a repair. Our guide on long-term and short-term corrosion rate calculation walks through the arithmetic in plain terms.

Citation pattern 4: anomalous data ignored

Direct answer: OSHA states that an inaccurate or irregular test result must be retested, not disregarded. If the anomaly remains after retest, the employer must find the cause and resolve it. NEP inspections found employers who took no action when thickness readings increased over time.

A thickness reading that grows between surveys is physically implausible for a corroding component. It usually means a different probe position, a coating or deposit effect, a calibration error, a lamination, or a reading taken at a different spot than last time. OSHA 3918 cites CCPS guidance that inspection data should be reviewed for anomalies so suspicious information can be verified or corrected. It notes that API 570 (2016) addresses the same principle in its data-analysis section. The danger in ignoring an anomaly is that it hides real wall loss. An inflated reading can push a calculated corrosion rate to zero, or make it negative, and stretch the next interval.

The records fix. Keep an anomaly log as part of each survey report. It should list readings that differ from the prior survey by more than a set tolerance, readings that increase, and readings below a screening threshold. Then record the retest result and the resolution: confirmed, corrected, or escalated for engineering review. Good NDE practice flags these in the field so the technician can retest while still on site. On scanned areas, a corrosion map shows whether a low spot reading is an isolated pit or part of a wider area. That is often how an anomaly gets resolved.

Citation pattern 5: generic procedures and equipment left out

Direct answer: OSHA found that every instance of equipment not inspected, or inspected inadequately, traced back to an inadequate site-specific inspection or test procedure. Boilerplate corporate procedures missed the equipment and failure modes particular to the process.

Examples in OSHA 3918 include H2S monitors, flow, temperature and level alarms, flame detectors and shutdown alarms that were checked only when they malfunctioned. Pressure gauges on coalescers were never calibrated. Named process piping streams were not adequately inspected. Heat exchangers had loose or missing anchor-bolt nuts, and vessel supports and grounding cables were never inspected. OSHA points to PSM's non-mandatory Appendix C: the first step of an effective MI programme is to compile and categorize a list of process equipment and instrumentation for inclusion in the programme.

The records fix. Reconcile the MI equipment list against current P&IDs at least at every PHA revalidation and after every MOC. Make sure each item has an inspection or test plan, a frequency basis and a last-done date. Instruments and alarms need test records as much as vessels do. Supports, foundations and grounding belong in external visual inspection scopes.

Citation patterns mapped to the records that prevent them

Direct answer: Each citation pattern has a matching record. Build the record, keep it current and make it retrievable, and an inspector's questions have ready answers.

Preparing for a PSM inspection of the MI element

Direct answer: Pick a sample of covered equipment and walk each item from the equipment list to its plan, its last inspection record, its interval calculation and any open deficiency. If any link in that chain is missing for one item, assume an inspector will find it.

A practical self-check before a compliance audit under 1910.119(o) (required at least every three years) or an NEP inspection:

1. Choose a sample of relief devices, piping circuits, pressure vessels and alarms, since these are the equipment types OSHA cited most.
2. For each, confirm it appears on the MI list and has a written inspection or test plan naming the RAGAGEP.
3. Pull the last record and check the five documentation elements in (j)(4)(iv).
4. For thickness-monitored equipment, check that CMLs are defined, that rates are calculated and that the interval follows from them.
5. Look for anomalies in the last two surveys and confirm each one was retested and resolved.
6. Check every open deficiency for interim measures, approvals and a credible close date.
7. Confirm that recent MOCs updated the equipment list, CMLs and procedures.

Our PSM audit preparation page covers the wider audit. EPA's RMP Program 3 uses the same MI text at 40 CFR 68.73, as explained in our RMP vs PSM mechanical integrity guide. Canadian sites answer to provincial pressure-equipment regulators such as ABSA or TSSA rather than OSHA. The same record discipline holds up there too.

How Atlantis supports this

Atlantis NDT produces the inspection evidence that these citations turn on. We perform UT thickness surveys at your defined CMLs, corrosion mapping and phased array where spot readings are not enough, CUI screening and follow-up, MT and PT, and external visual examination of supports and foundations. The work is done by ASNT-certified technicians under ASNT Level III oversight, to written procedures. Reports carry the (j)(4)(iv) elements, identify each CML, compare results with the minimum thickness you supply, and list anomalies with retest results. The owner's API-certified inspector then calculates rates, sets intervals and decides deficiency dispositions. Atlantis does not make those decisions and is not the inspector of record. See inspection services and piping circuit CML inspection, or request a quote within 24 hours.

Frequently asked questions

What are the most common OSHA PSM mechanical integrity citations?

OSHA's refinery NEP review highlights four MI issues: uncorrected equipment deficiencies, missing or inadequate inspection and testing procedures, unresolved anomalous data, and procedures that are not site-specific. Within those, OSHA flags thickness-measurement problems and unestablished inspection frequencies for piping and vessels.

Which equipment does OSHA cite most under 1910.119(j)?

For deficiencies: relief devices, then piping circuits, pressure vessels and alarm systems. For inspection frequencies: piping circuits, then pressure vessels, relief devices and monitoring alarms.

Is mechanical integrity the most cited PSM element?

OSHA 3918 lists MI among the most-cited PSM areas in the refinery NEP. A secondary review of DOL data for 2016 and 2017 ranked it first in both years. Check current OSHA enforcement data for recent years.

What does OSHA expect for thickness measurement locations?

Procedures that set the specific number and location of CMLs for each pressure vessel and piping section. Locations should include susceptible areas such as injection points, mixing points and dead legs, plus a method for dealing with anomalous readings.

What should happen when a thickness reading increases?

OSHA says irregular results must be retested, not disregarded. If the anomaly persists, determine the cause and resolve it. Record the retest and resolution in the inspection file.

How often must PSM piping be inspected?

PSM requires frequencies consistent with manufacturers' recommendations and good engineering practice, more often if experience shows a need. OSHA 3918 cites API 570 (2016) class-based maximum thickness intervals. Use the current API 570 edition as your basis and confirm its limits.

What does (j)(5) require for equipment deficiencies?

Deficiencies outside acceptable limits must be corrected before further use, or in a safe and timely manner while necessary means are taken to assure safe operation. Document whichever route you take.

What must a PSM inspection record contain?

The date, the name of the person who performed the inspection or test, the equipment serial number or other identifier, a description of the inspection or test, and the results.

Does OSHA cite corrosion under insulation?

Yes. OSHA 3918 gives an example of a sulfur unit where insulated vessels and piping were never inspected for CUI, and calls CUI a common non-compliant condition.

How often are PSM compliance audits required?

1910.119(o) requires the employer to certify a compliance evaluation at least every three years, and to keep the two most recent audit reports.

Want a second set of eyes on your thickness data before an audit? Ask about a CML survey, or request an inspection quote.