Chemical Plant NDT Consulting: OSHA PSM Mechanical Integrity Programs

The Mechanical Integrity Element Nobody Reads Until the CSB Shows Up

Of the fourteen elements in OSHA's Process Safety Management standard, Mechanical Integrity is the one most likely to be treated as a maintenance department checklist rather than the safety-critical program the regulation intends it to be — right up until a heat exchanger fails, a corroded line ruptures, and the U.S. Chemical Safety and Hazard Investigation Board (CSB) opens an investigation that traces the root cause back to an inspection program that existed on paper but wasn't actually catching the degradation mechanism in play. Williams Olefins in Geismar, Louisiana lost two workers in 2013 when a heat exchanger failed under conditions the CSB report tied directly to an inadequate mechanical integrity program. Chevron's Richmond refinery fire in 2012 was traced to sulfidation corrosion in an 8-inch carbon steel piping component that had been in a corrosion-monitoring program that didn't reflect current industry guidance on sulfidic corrosion in crude piping. Tesoro's Anacortes refinery explosion in 2010 killed seven workers in an incident CSB linked to high-temperature hydrogen attack in a heat exchanger that hadn't been inspected using a method capable of detecting that specific damage mechanism. None of these were Atlantis engagements — they're public CSB investigation findings, cited here because they are the exact failure pattern a well-run Mechanical Integrity program, with the right NDT methods matched to the right damage mechanisms, is built to prevent.

OSHA PSM: 29 CFR 1910.119 and the Fourteen Elements

The Process Safety Management standard, 29 CFR 1910.119, applies to processes involving a highly hazardous chemical listed in Appendix A at or above its threshold quantity, or a flammable liquid or gas present in one location in a quantity of 10,000 pounds or more, subject to specific exceptions for flammable liquids stored below their boiling point without the potential for a vapor cloud explosion. The standard's fourteen elements run from Process Safety Information and Process Hazard Analysis through Operating Procedures, Training, Mechanical Integrity, Management of Change, Pre-Startup Safety Review, Compliance Audits, Incident Investigation, Emergency Planning and Response, Hot Work Permits, Contractors, Trade Secrets, and Employee Participation. Mechanical Integrity, at 1910.119(j), is the element that governs the physical condition of the equipment the rest of the program assumes will hold pressure, contain product, and shut down safely when asked to.

Covered Processes and the Threshold Quantity Trap

A common gap-assessment finding is a facility that correctly scoped PSM coverage when the program was first built but never re-evaluated it against process changes — a debottlenecking project that pushed a flammable inventory over the 10,000-pound threshold, or a new unit that introduced a listed Appendix A chemical without anyone updating the covered-process boundary. Because Mechanical Integrity obligations attach to covered process equipment specifically — pressure vessels, storage tanks, piping systems, relief and vent systems, emergency shutdown systems, controls, and pumps that are part of a covered process — getting the boundary wrong means either inspecting equipment that isn't legally required (a resource-allocation problem) or, more dangerously, leaving covered equipment outside the MI program's inspection and testing schedule entirely.

Mechanical Integrity Under 1910.119(j): What the Rule Actually Requires

Section (j) requires written procedures for maintaining the ongoing integrity of covered equipment, training for employees involved in maintaining that integrity, and — the part with the most direct NDT relevance — inspections and tests performed using procedures that follow recognized and generally accepted good engineering practice (RAGAGEP), at a frequency consistent with applicable manufacturer recommendations and good engineering practice, and more frequently if operating experience indicates a need. When a deficiency is found, the regulation requires it be corrected before further use, or in a timely manner if the deficiency doesn't put the process in an unsafe condition in the interim. The documentation trail OSHA inspectors look for is specific: the equipment, the inspection date, the name of the person performing it, the serial number or identifier of the NDT equipment used, a description of the inspection performed, and the results — which is precisely the structured record a spreadsheet-based inspection log tends to lose track of once a facility has a few thousand covered components on the books.

RAGAGEP: Where API 510, 570, 653, and 579 Fit Into a PSM Program

RAGAGEP isn't a single document — it's a standard of practice, and for pressure equipment in covered processes, the API inspection code family is the RAGAGEP an OSHA inspector or a CSB investigator will expect to see referenced. API 510 governs pressure vessel inspection, repair, and rerating; API 570 governs in-service piping inspection; API 653 governs atmospheric storage tank inspection; API 574 covers inspection practices for piping, tubing, valves, and fittings; API 576 covers pressure relief device inspection; API 578 governs material verification programs to catch wrong-alloy installations before they become a failure; and API 580 and 581 govern risk-based inspection (RBI) methodology for setting inspection scope and frequency based on probability and consequence of failure rather than a flat calendar interval. API 579-1/ASME FFS-1 provides the fitness-for-service methodology for evaluating whether a flaw or thinning found during inspection allows continued operation, and for how long. A Mechanical Integrity program that can name the specific RAGAGEP document behind every inspection interval and method choice — rather than just asserting "per company procedure" — is a materially stronger position in front of an OSHA compliance officer than one that can't.

Corrosion under insulation (CUI) deserves its own mention, because it's a damage mechanism that's easy to miss on a visual walkdown and is explicitly addressed in API 583. Insulated piping and vessels in covered processes — particularly in the temperature bands most conducive to water intrusion and corrosion cell formation — need a CUI-specific inspection strategy, not just inclusion in the general piping inspection interval, and it's a frequent gap in programs that were built around visual and UT thickness checks on bare pipe.

Inspector Qualification Behind the RAGAGEP Interval

It's worth being precise about who does what in this chain, because it's a point of confusion in a lot of MI programs. API 510, 570, and 653 credential the inspector of record — the person who sets the inspection plan, interprets results, and makes the fitness-for-service call — through API's own individual certification program. The actual nondestructive examination performed at each interval, whether that's manual UT thickness gridding, phased array corrosion mapping, or magnetic particle testing on a nozzle weld, is typically executed by SNT-TC-1A-qualified NDT technicians working under a written practice maintained by the employer, with results reported up to the API-certified inspector for evaluation against the applicable code's acceptance criteria. To be clear about scope: Atlantis's ASNT Level III consulting writes, audits, and defends the NDT technician written practice and procedure package on the SNT-TC-1A side of that chain — we do not administer API's inspector certification program. Where a facility's MI documentation blurs that line, treating a technician's SNT-TC-1A Level II certification as if it satisfies the separate API inspector-of-record requirement, it's a finding waiting to happen at the next compliance audit.

A Worked Example: HF Alkylation Piping and PMI

Hydrofluoric acid alkylation units illustrate how specific RAGAGEP gets in practice. API Recommended Practice 751 governs safe operation of HF alkylation units and includes explicit guidance that carbon steel welds in HF acid service be controlled to a maximum hardness — commonly cited around 200 Brinell — because higher-hardness weld and heat-affected-zone microstructure is susceptible to hydrogen-induced cracking in HF service. That single requirement drives a specific NDT scope: hardness testing on welds after fabrication and periodically in service, along with positive material verification (PMI) to confirm the installed alloy matches the specification, since a single mixed-alloy fitting installed during a turnaround can become the unit's weakest point. A generic piping inspection procedure that doesn't call out hardness testing and PMI specifically for HF acid circuits is not RAGAGEP-compliant for that unit, even if it satisfies the base API 570 interval for wall-loss monitoring elsewhere in the plant. This is the kind of unit-specific, damage-mechanism-specific procedure writing that a generic corporate inspection template misses, and it's exactly where an ASNT Level III consulting engagement adds the most defensible value — matching the NDT method and interval to the actual degradation mechanism present in that specific process, not just the plant's general piping inspection cadence.

EPA RMP's Parallel Track (40 CFR Part 68)

EPA's Risk Management Program regulation, 40 CFR Part 68, runs largely in parallel to OSHA PSM for Program 3 processes, with a Mechanical Integrity provision that mirrors the OSHA language closely enough that a facility covered by both programs is effectively maintaining a single MI program that has to satisfy two federal regulators with two different enforcement histories and two different audit cycles. RMP sorts covered processes into three program levels — Program 1 for processes with limited offsite consequence and no history of accidents meeting specific criteria, Program 2 for processes not eligible for Program 1 or 3 and subject to a streamlined set of prevention requirements, and Program 3 for processes subject to OSHA PSM or classified under specific NAICS codes, which carries the full prevention program including the Mechanical Integrity element nearly identical in substance to 1910.119(j). Most refining, petrochemical, and chemical manufacturing processes covered by PSM land in RMP Program 3, which is why in practice the two Mechanical Integrity obligations are usually satisfied by the same underlying inspection program rather than two separate ones. A facility that treats these as separate compliance obligations — rather than one underlying MI program mapped to both regulatory citations — ends up duplicating documentation effort without actually closing the gap either regulator cares about.

Compliance Audits Every Three Years — and the Gap Assessment Before Them

1910.119(o) requires a compliance audit of the PSM program at least every three years, certifying that the facility has evaluated compliance with the standard's provisions, documenting the audit findings, and correcting deficiencies. Mechanical Integrity is consistently one of the elements with the most findings in these audits, because it's the element most exposed to gradual drift — a procedure that was RAGAGEP-current when written five years ago but hasn't kept pace with an API code revision, an inspector certification that's lapsed, or an equipment list that's grown without anyone re-scoping which items are actually part of a covered process. An independent gap assessment ahead of the formal three-year audit, run by someone with no stake in the existing program's outcome, routinely finds these gaps months before an OSHA compliance officer or an internal auditor working against a deadline would.

Building an MI Program That Survives an OSHA Inspection

Findings a Gap Assessment Turns Up Most Often

• Covered-equipment list wasn't re-verified after a management-of-change event pushed a new line or vessel into (or out of) covered-process scope.
• Inspection procedures reference "company standard" or "industry practice" without naming the specific RAGAGEP document and edition behind the method and interval.
• CUI-prone insulated piping and vessels are inspected on the same interval as bare piping, with no damage-mechanism-specific strategy for water intrusion zones.
• Deficiency tracking shows items open past their documented correction timeline with no engineering justification on file for the delay.
• NDT technician written practice hasn't been updated to reflect current API code editions the API-certified inspector of record is now using for acceptance criteria.
• PMI and hardness-testing requirements for known cracking-susceptible services (HF acid, wet H2S, amine) aren't called out separately from the general piping inspection procedure.

The programs that hold up share a common structure: an accurate covered-equipment list tied to process boundaries that gets re-verified after every management-of-change event, inspection procedures that cite the specific RAGAGEP document and edition behind every method and interval choice, personnel qualification records for NDT technicians that are complete and current, a deficiency-tracking system with documented closure timelines rather than an open-ended "in progress" status, and a data structure that lets an auditor pull five years of inspection history on a specific vessel in minutes rather than days. This is where ASNT Level III consulting contributes directly — writing or auditing the NDT written practice behind the MI program, developing RAGAGEP-referenced inspection procedures for the specific damage mechanisms present in a given process (sulfidation, CUI, high-temperature hydrogen attack, wet H2S cracking), and running the independent gap assessment that finds the documentation problem before OSHA does. Pairing that with Atlantis NDT ERP for equipment-list management, inspection scheduling, and deficiency tracking, and NDT reporting software that captures structured inspection data instead of scanned PDFs, turns Mechanical Integrity from a once-a-cycle scramble into a program that's audit-ready year-round. A digital twin platform carrying the equipment model, corrosion loop history, and current RBI/FFS status in one place gives both the PSM Mechanical Integrity element and the parallel EPA RMP program a single, defensible source of truth — which, when a CSB investigator or an OSHA compliance officer starts asking questions after an incident elsewhere in the industry, is exactly the record you want to already have.

Atlantis NDT Products & Services

Atlantis NDT pairs field expertise with software: NDT inspection management software — Atlantis ERP, a digital twin platform for asset integrity, and NDT reporting software. Build your team with NDT training & certification (ASNT SNT-TC-1A) and ASNT certification pathways, or bring in ASNT Level III consulting. Affordable, accessible, fully customizable — book a free consultation.