PSM Audit Standards in 2026: What Changed Across OSHA, EPA, API, ASME, NFPA, and ISO
The core process safety code stack moved on five fronts since 2021. Here is the edition currently in force for each governing body, what changed and when, what is still pending, and the questions a buyer should put to a PSM audit consultant before signing a scope of work.
By Inspection Vendor Index Editorial Team · Published 2026-07-11 · Updated 2026-07-11
Related category: Process Safety Management (PSM) Audit Consultants
OSHA's rule text hasn't moved since 1992, but what auditors check just did
29 CFR 1910.119, OSHA's Process Safety Management of Highly Hazardous Chemicals standard, has not been substantively amended since it was promulgated in 1992. That is still the legal baseline every PSM audit measures against. What changed is the enforcement layer sitting on top of it. OSHA issued a revised PSM enforcement directive effective January 26, 2024, replacing the audit-checklist format inspectors had used for roughly two decades with an expanded question-and-response structure covering all fourteen elements of the standard. That is a compliance-verification change, not a regulatory-text change, but it directly affects what a PSM auditor should be checking for and how findings get framed to match current OSHA field practice. OSHA also has an open information-collection renewal in process, a Federal Register notice published June 24, 2025 sought comment on extending OMB's approval of the PSM standard's paperwork requirements, with comments due August 25, 2025. Separately, OSHA is working through a pre-rule modernization effort open since 2013. A Small Business Regulatory Enforcement Fairness Act (SBREFA) review panel wrapped up in August 2016, and as of the most recent regulatory agenda tracking, OSHA has not set a date for a Notice of Proposed Rulemaking. Potential future changes under discussion include clarifying the atmospheric storage tank and retail exemptions, adding reactive chemical hazard coverage, and strengthening mechanical integrity requirements for aging equipment. None of that is law yet, and a buyer evaluating a PSM audit consultant should confirm the consultant is auditing against the 1992 standard as currently enforced under the 2024 directive, not against a proposed future version. The facility-siting piece of PSM did move on the industry-consensus side. API's siting suite, RP 752 (4th edition, permanent buildings), RP 753 (2nd edition, portable buildings), and RP 756 (2nd edition, tents and temporary structures), took effect in June 2024 with roughly five dozen new mandatory requirements covering fire and toxic release hazard analysis. OSHA's PSM standard requires facility siting analysis as part of process hazard analysis. If a facility's last siting study predates June 2024, it was built on the prior edition set.
EPA's 2024 RMP rule has a hard compliance date most facilities haven't hit yet, and it may not survive intact
EPA finalized amendments to the Risk Management Program rule (40 CFR Part 68) on March 11, 2024, styled Safer Communities by Chemical Accident Prevention, with an effective date of May 10, 2024. The rule adds a safer-technology-and-alternatives-analysis requirement for certain high-accident-rate sectors, expands third-party compliance audit requirements for facilities with a qualifying prior accident, requires root-cause analysis in incident investigations, adds an anonymous employee hazard-reporting mechanism, and reiterates that employees can call for a partial or complete process shutdown ahead of a potential catastrophic release. The part buyers most often miss is the timeline. Most prevention-program changes carry a compliance date of May 10, 2027, three years after the effective date, aligned to the next RMP five-year resubmission cycle. The safer-technology-and-alternatives-analysis requirement is tied to the facility's next process hazard analysis (PHA) revalidation occurring after that same May 2027 date. A facility whose RMP resubmission or PHA revalidation falls in 2026 or 2027 needs its RMP-linked audit scope written to the amended rule now, not the pre-2024 baseline, or the audit will need a redo within the year. That timeline is no longer settled ground. On February 24, 2026, EPA published a proposed rule, the Common Sense Approach to Chemical Accident Prevention, that would scale back major pieces of the 2024 amendments: narrowing the safer-technology-and-alternatives-analysis requirement to new Program Level 3 processes only, easing the third-party audit trigger, and rescinding several of the public information-disclosure provisions. The public comment period closed May 11, 2026, and as of this writing EPA has not published a final rule. Until it does, the 2024 amendments and the May 10, 2027 compliance date remain the operative rule. A PSM or RMP audit scope written today should say explicitly whether it is measured against the 2024 amendments as currently in force, and how the vendor would revise that scope if EPA finalizes the rollback before the 2027 deadline arrives.
Mechanical integrity codes turned over across the board between 2022 and 2024
Mechanical integrity is one of the fourteen elements of OSHA's PSM standard, and it leans almost entirely on API and ASME consensus codes rather than CFR text. Three core inspection codes changed editions inside a roughly two-year window. API 510, the Pressure Vessel Inspection Code, moved to its 11th edition in October 2022. API 570, the Piping Inspection Code, moved to its 5th edition in February 2024. API 653, the Tank Inspection, Repair, Alteration, and Reconstruction code, is still on its 5th edition from November 2014 but has since been updated by addenda, most recently in 2025. On the piping design side, distinct from in-service inspection, ASME B31.3, Process Piping, was reissued as the 2024 edition on December 27, 2024, after ANSI approval on July 9, 2024, with the code becoming effective six months after issuance under standard ASME convention. ASME already has the next edition scheduled for 2026, putting B31.3 on a faster revision cadence than the API inspection codes sitting alongside it in the same mechanical integrity program. A facility running new construction or major piping alteration work against a superseded B31.3 edition is a specific, checkable gap rather than a vague modernization concern. Ask any PSM or mechanical integrity auditor which dated edition of each API and ASME code their scope of work cites, and cross-check it against these dates.
NFPA consolidated six dust standards into one, and API and CCPS updated the metrics layer
NFPA made its biggest structural change in years on the fire-and-explosion side of process safety. Effective December 6, 2024, NFPA 660 consolidated NFPA 652 (Fundamentals of Combustible Dust, 2019 edition) along with five industry-specific dust standards, NFPA 61, 484, 654, 655, and 664, into a single standard. NFPA 652 stays at its 2019 edition as a standalone document; going forward its content lives inside NFPA 660. A facility with an existing dust hazard analysis (DHA) built to the old numbering should confirm its auditor cites NFPA 660 for anything reviewed or revalidated after December 2024, while still recognizing NFPA 652:2019 as the edition in force for older, unrevalidated DHAs. Separately, NFPA 70E, Standard for Electrical Safety in the Workplace, is on its 2024 edition, which added a new Annex Q on human performance and reinforced hazard elimination as the first control priority ahead of PPE. NFPA 68, Standard on Explosion Protection by Deflagration Venting, is on its 2023 edition; its companion, NFPA 69, Explosion Prevention Systems, is still on its 2019 edition. On the metrics side, API RP 754, Process Safety Performance Indicators for the Refining and Petrochemical Industries, is on its 3rd edition, published in 2021, and defines the tiered leading and lagging indicator structure most refining and petrochemical operators still report against. CCPS (the Center for Chemical Process Safety, part of AIChE) does not run on the same ANSI-style dated edition cycle as API, ASME, or NFPA. Its Guidelines for Risk Based Process Safety remains the reference framework most PSM management-system audits benchmark maturity against, and CCPS keeps refreshing the broader library around it; its introductory text, Process Safety for Engineers: An Introduction, went to a 2nd edition in 2022.
ISO's management-system layer is mid-transition, and that changes what a certification-linked audit should check
ISO 45001, the occupational health and safety management system standard many PSM programs map into, picked up Amendment 1 in 2024 adding climate-change considerations to the OH&S risk picture, but the base standard is still ISO 45001:2018. A full revision is underway, with ISO's own committee timeline putting the Draft International Standard stage around mid-2026 and publication not expected before 2027. There is no near-term forced transition here. ISO 14001, the environmental management system standard, is a different story and the most time-sensitive item in this update. ISO published the fully revised ISO 14001:2026 on April 15, 2026, replacing ISO 14001:2015 as amended by the 2024 climate-change amendment. That started a 36-month transition window, meaning ISO 14001:2015 certificates remain valid only until April 30, 2029 at the latest, with exact re-certification timing set by each site's certification body. A facility whose PSM audit scope touches environmental management system alignment, common where RMP and ISO 14001 obligations overlap, should confirm with its certifying body where it sits in that transition now rather than in 2028. For a buyer, the practical procurement question across all seven governing bodies is the same: ask the audit firm to name, in writing, the specific dated edition of every OSHA directive, EPA rule, API practice, ASME code, NFPA standard, and ISO standard its scope of work is measured against, and the date its internal reference library was last updated. A firm quoting a PSM gap assessment against a single stale edition, or against the whole stack with no edition numbers at all, is telling you something about how current its audit templates are. Quote variance across vendors is driven less by raw headcount hours and more by scope, how many of these code updates a gap analysis has to cross-walk against prior audit findings, how many separate governing bodies are actually in scope, and whether the vendor already owns current copies of the codes or has to source them. None of that is a figure a directory can responsibly publish without a vendor-specific quote, but it is exactly what should show up itemized in a proposal.
Key takeaways
- OSHA's 29 CFR 1910.119 text has not changed since 1992, but the enforcement directive inspectors use was rewritten effective January 26, 2024, and the separate PSM modernization rulemaking is still pre-rule with no proposed-rule date set.
- EPA's 2024 RMP amendments (Safer Communities by Chemical Accident Prevention), effective May 10, 2024, carry a compliance deadline of May 10, 2027 for most prevention-program changes, but a February 2026 EPA proposal (Common Sense Approach to Chemical Accident Prevention) would scale several of those requirements back before that date and remains unfinalized as of this writing.
- Mechanical integrity codes turned over on a rolling basis: API 510 (11th edition, October 2022), API 570 (5th edition, February 2024), and ASME B31.3 (2024 edition, issued December 27, 2024) all superseded prior editions inside roughly a two-year window.
- NFPA consolidated six combustible-dust standards, including NFPA 652, into the new NFPA 660 effective December 6, 2024, and moved NFPA 70E to its 2024 edition in the same cycle.
- ISO 14001:2026 published April 15, 2026 and starts a 36-month certificate transition (2015-based certificates valid to April 30, 2029 at the latest), while ISO 45001's revision is not expected until 2027 and carries no forced near-term transition.
FAQ
Does OSHA require facilities to follow the newest edition of API, ASME, or NFPA codes?
OSHA's PSM standard does not lock in a single dated edition of any consensus code. It references recognized and generally accepted good engineering practices (RAGAGEP), which enforcement guidance generally treats as the edition in effect when equipment or a process was designed, plus later editions a facility has actually adopted or that address a hazard the facility already has. That is exactly why a PSM audit scope of work should name specific code editions rather than just code numbers. Ask any consultant how they handle grandfathered equipment versus current-edition compliance before signing.
We are ISO 14001:2015 certified. Do we need to act now that ISO 14001:2026 exists?
Not immediately. ISO built a 36-month transition period into the April 15, 2026 publication of ISO 14001:2026, and 2015-based certificates remain valid until April 30, 2029 at the latest. Your certification body sets the exact re-certification audit timing for your site. It is reasonable to ask a PSM audit consultant whether their scope of work references the 2015 standard, the 2026 standard, or both, if your program is certification-linked.
Is OSHA's PSM standard itself about to change?
Not on any confirmed timeline. The modernization effort has been open since 2013 and completed its SBREFA small-business review panel in August 2016. As of the most recent regulatory agenda tracking, OSHA has not set a date for a formal Notice of Proposed Rulemaking. Treat modernization talk as directional, not a compliance deadline, until a proposed rule actually publishes.
Does EPA's 2026 proposed rule change the May 10, 2027 RMP compliance deadline?
Not yet, and possibly not at all if the timeline slips. On February 24, 2026, EPA published a proposed rule, the Common Sense Approach to Chemical Accident Prevention, that would scale back several 2024 RMP amendments, including narrowing the safer-technology-and-alternatives-analysis requirement and softening the third-party audit trigger. The public comment period closed May 11, 2026, and EPA has not issued a final rule as of this writing. Until a final rule publishes, the 2024 amendments and their May 10, 2027 compliance date remain the applicable requirements. Ask a PSM or RMP audit consultant whether their current scope of work is written to the 2024 baseline, the pending 2026 proposal, or both, and how they would revise the scope if EPA finalizes the rollback before 2027.
Editorial process Compiled from primary standards, codes, and regulatory sources, then adversarially fact-checked against those sources. Not written or reviewed by a licensed engineer or safety professional. Procurement education, not safety or legal advice.
Sourcing a process safety management (psm) audit consultants vendor? Send a procurement-safe scope and we route it toward qualified vendors.
Request vendors