Annual review. Blend tanks BT-1 to BT-3 added to the covered process after process review. Siting and emergency response updated.
D. Heasley
Distribution
Controlled copies are kept in the Building B control room, the PSM Coordinator's office and the EHS office. An electronic copy is on the plant document system. Printed copies outside these locations are uncontrolled. Employees and contractors may view this program at any of the controlled copy locations at any time.
SECTION 1Purpose, Scope and Responsibilities
1.1 Purpose
This document is the written Process Safety Management (PSM) program for the Thunderbolt Solvent System at Perry's Awesomeness Factory (Building B). It sets out how Perry Industries meets each element of 29 CFR 1910.119 for this process, who is responsible, and where the supporting records are kept. Sections 3 through 17 follow the order of the standard, paragraphs (c) through (p).
1.2 Scope
The covered process is the Thunderbolt Solvent System. It stores, transfers and refluxes Thunderbolt, and blends the recovered Thunderbolt into Awesomeness (isopropyl alcohol, 99.5% minimum, CAS 67-63-0). Section 2 sets out the coverage determination and the process boundary. The process includes:
T-1, 12,000-gallon vertical carbon steel atmospheric storage tank in the flammable tank farm dike (60 ft x 50 ft x 4 ft, drain valve DV-1), with its unloading connection at the flammable/oil unloading pad;
XV-101, T-1 outlet automatic valve, and P-101, T-1 to R-101 transfer pump, with the connecting piping;
R-101, 2,500-gallon jacketed reflux kettle (normal charge 2,000 gallons), with its steam supply valve TV-101 and relief valve PSV-101;
E-101 overhead condenser and V-102 500-gallon recovery receiver, with the vent header and flame arrester;
the V-102 draw-off line and pump P-102 to the Awesomeness line, and Awesomeness blend tanks BT-1, BT-2 and BT-3 (1,500 gallons each, normal batch 1,200 gallons, blended at ambient temperature, product about 10 wt% isopropyl alcohol), with their outlet piping to the packaging filler;
Safety systems: LEL detectors LD-1 to LD-3, ESD-101 emergency shutdown, level, temperature, pressure and flow instruments and their alarms and interlocks.
T-3 (white mineral oil) shares the flammable tank farm dike but is not a highly hazardous chemical; it is treated as an adjacent hazard in the PHA. T-2 (Polyjuice Base, 25% aqueous ammonia) is in a separate ammonia storage area and is not part of this PSM process; see Section 2.4. Ammonia solutions are listed in Appendix A of 1910.119 only above 44% ammonia by weight. T-2 is covered separately under the EPA Risk Management Program (document RMP-PJB-001).
1.3 Responsibilities
Person
Position
PSM responsibilities
Mike Perry
Founder & Chief Awesomeness Officer
Management approval of this program; authority to commit resources.
Hari Seldon
Plant Manager, Building B
Local approval; approves MOCs and PSSRs; certifies operating procedures annually; signs compliance audit certification.
Doug Heasley
Process Controls Engineer
PSM Coordinator. Maintains this program and the process safety information; MOC coordinator; PHA coordinator; tracks PHA, audit and incident recommendations.
Montgomery Scott
Maintenance Manager, Building B
Mechanical integrity owner; maintenance training; equipment deficiency control; quality assurance of parts; hot work permit issuer for maintenance work.
Emergency planning and response for the process; ERT training under 29 CFR 1910.120(q).
Malcolm Reynolds
Production Supervisor, Awesomeness Line (days), (555) 555-0111
Thunderbolt Solvent System operator training and qualification; enforces TSS operating procedures and safe work practices; hot work permit issuer for operations in the R-101 room and tank farm.
Jenn Resko
Production Supervisor, Brilliance Line (days)
Brilliance line operator training; enforces Brilliance line procedures; hot work permit issuer for the Brilliance line.
Marty McFly
Night Shift Supervisor
Night shift operator qualification and procedure enforcement; hot work permit issuer for operations areas on nights.
Wendy Weaver
Director of Human Resources
Training records retention; employee access to PSM information requests.
Control room operators
Qualified operators
Operate the process per procedures; execute ESD-101 when shutdown conditions exist (Section 6.3).
SECTION 2Applicability Determination
2.1 Coverage basis - 1910.119(a)(1)(ii)
Paragraph (a)(1)(ii) applies the standard to "a process which involves a Category 1 flammable gas (as defined in 1910.1200(c)) or a flammable liquid with a flashpoint below 100 °F (37.8 °C) on site in one location, in a quantity of 10,000 pounds (4535.9 kg) or more," with two exceptions. Isopropyl alcohol is not listed in Appendix A, so coverage rests on (a)(1)(ii).
Thunderbolt flash point: 53 °F (12 °C), closed cup. This is below 100 °F.
Thunderbolt specific gravity: 0.785 at 20 °C, which is 6.55 lb per gallon.
Awesomeness in BT-1 to BT-3: about 10 wt% isopropyl alcohol; flash point 97 °F (36 °C), Pensky-Martens closed cup (ASTM D93), Perry QC lab, March 2026 (Awesomeness SDS AWE-42). Because the flash point is below 100 °F, the whole weight of the mixture in the blend tanks is counted as flammable liquid, not only its IPA content. Density 1.05 g/mL (8.76 lb/gal) at 20 °C.
Quantity in the process
Vessel or line
Quantity basis
Gallons
Pounds
Storage below boiling point?
R-101 reflux kettle
Normal charge
2,000
13,100 (x 6.55)
No - run at reflux
V-102 recovery receiver
Maximum intended (90%)
450
2,948 (x 6.55)
Not storage - process vessel
E-101, vapor, transfer and draw-off piping
Engineering estimate
50
328 (x 6.55)
Not storage
Thunderbolt subtotal, not counting T-1 or BT
2,500
16,376
BT-1, BT-2, BT-3 Awesomeness (about 10 wt% IPA)
Normal batch, 3 x 1,200 gal
3,600
31,536 mixture (x 8.76); 3,154 IPA content
No - blending vessels, not storage
T-1 storage tank
Maximum intended (95%)
11,400
74,670 (x 6.55)
Yes - ambient, atmospheric
Total flammable liquid in the process
17,500
122,582 lb mixture (91,046 lb Thunderbolt plus 31,536 lb Awesomeness)
Table 2-1. Flammable liquid inventory in the process. 10,000 lb of Thunderbolt is reached at about 1,527 gallons (10,000 / 6.55).
R-101 alone holds 13,100 pounds, which is above 10,000 pounds. The process is covered on R-101's inventory by itself, without counting T-1.
2.2 The atmospheric storage exception - 1910.119(a)(1)(ii)(B)
Paragraph (a)(1)(ii)(B) excepts "flammable liquids with a flashpoint below 100 °F (37.8 °C) stored in atmospheric tanks or transferred which are kept below their normal boiling point without benefit of chilling or refrigeration." The exception does not apply to this process. R-101 holds 13,100 lb of Thunderbolt at its normal boiling point of 181 °F (83 °C), the boiling point at 14.7 psia as defined in paragraph (b), and R-101 is a process vessel, not storage. OSHA has stated that the exception reaches only storage and associated transfer (letter to Rep. Richard E. Neal, February 22, 1995).
The process is covered on the R-101 inventory alone, without counting T-1 or the blend tanks.
2.3 Process boundary
Paragraph (b) defines process to include "any group of vessels which are interconnected." T-1 is piped to R-101 through XV-101 and P-101, and V-102 is piped through P-102 to blend tanks BT-1, BT-2 and BT-3. T-1, the transfer piping, the draw-off line and the blend tanks are part of the covered process, and every element of this program applies to them. The blend tanks hold a flammable liquid (flash point 97 °F) in blending service, not storage. The boundary ends at the packaging filler.
Finished Awesomeness in closed containers is outside the process. Once filled and closed, the containers are not connected to any process vessel; OSHA has stated that container storage of flammable liquids of this kind falls under the (a)(1)(ii)(B) exception (letter to Joe Virsack, July 9, 1999). The PHA facility siting node addresses the finished goods area next to the blend tanks.
2.4 Process boundary determination - T-2 Polyjuice Base
T-2 (Polyjuice Base, 25% aqueous ammonia) is a separate process and is not part of the Thunderbolt Solvent System. Ammonia solutions are listed in Appendix A only above 44% ammonia by weight, and aqueous ammonia is not a flammable liquid. Separate vessels are one process when they are located so that a release at one could involve the other (paragraph (b) definition of process); EPA applies the same test to co-located vessels under 40 CFR Part 68, treating two vessels as one process when a single event, such as a fire or explosion, could involve both or interfere with mitigation (EPA RMP guidance, applicability of program levels for co-located vessels).
T-2 is in its own ammonia dike (40 ft x 40 ft x 3.5 ft, drain valve DV-2) about 170 ft from the flammable tank farm dike, across the Building B access road, with no shared piping, its own unloading pad (20 ft x 30 ft) and its own spill kit SK-10, safety shower SS-4 and water-fog monitor WM-1 (drawing PI-B-101). A release or fire at one area does not involve the other. The determination is reviewed at each PHA revalidation and through MOC for any change that reduces the separation.
2.5 Other provisions
(a)(1)(ii)(A), hydrocarbon fuels used solely as fuel: does not apply. Thunderbolt is a raw material.
(a)(2): Building B is not a retail facility, an oil or gas well operation, or a normally unoccupied remote facility. The control room is staffed whenever production runs.
Appendix A: no listed toxic or reactive chemical is present in the process at or above its threshold quantity.
PI-B-101 — Building B — Perry's Awesomeness Factory SPCC Facility DiagramPI-B-101 · Select to enlarge
Figure 2-1. Building B facility diagram, drawing PI-B-101 (drawn at 1 in = 80 ft; reduced here, use the graphic scale). Flammable tank farm (T-1, T-3) at top; ammonia storage area (T-2) below, about 170 ft south across the access road.
SECTION 3Employee Participation - 1910.119(c)
This section is the written plan of action required by 1910.119(c)(1).
3.1 Consultation - 1910.119(c)(2)
Perry Industries consults with employees and their representatives on the conduct and development of PHAs and on the development of the other PSM elements. This is done as follows:
At least one Thunderbolt Solvent System operator serves on every PHA team, revalidation and MOC hazard review. Operators from both shifts are invited to the PHA sessions for the nodes they run.
The Building B Safety Committee (hourly and salaried members from both shifts) reviews draft operating procedures, safe work practices and training materials before they are issued. Committee minutes record comments and how each was resolved.
Operators review and initial each operating procedure at the annual certification (Section 6.4).
Employees may raise a process safety concern to their supervisor, the PSM Coordinator, the EHS Manager or the Safety Committee. Concerns are logged and answered in writing.
Incident investigation teams include an employee knowledgeable in the process (Section 14).
3.2 Access to information - 1910.119(c)(3)
Employees and their representatives have access to the PHAs and to all other information developed under this program. This includes process safety information, operating procedures, MOC records, PSSR records, incident investigation reports, mechanical integrity records and compliance audit reports.
Copies are kept in the Building B control room and the PSM Coordinator's office and can be read at any time.
Requests for copies go to the PSM Coordinator or to Wendy Weaver, Director of Human Resources. Copies are provided within 7 working days.
Trade secret information is handled under Section 17.
3.3 Informing employees of this plan
This plan is covered in initial operator training and in refresher training. A notice telling employees where the PSM program and PHA can be read is posted on the Building B safety board.
Drawing
SECTION 4Process Safety Information - 1910.119(d)
The process safety information below was compiled before the February 2024 PHA revalidation and is updated through MOC (Section 13). The full compilation, including P&IDs and design files, is kept in the PSM Coordinator's office. This section summarizes it.
4.1 Hazards of the Highly Hazardous Chemical
Sources: NIOSH Pocket Guide to Chemical Hazards (isopropyl alcohol); NOAA CAMEO Chemicals datasheet for isopropanol; PubChem GHS classification summary; Kaer Morhen Chemical Supply Co. SDS for Thunderbolt. The SDS meeting 29 CFR 1910.1200(g) is used to the extent it contains the information required by (d)(1).
Item - 1910.119(d)(1)
Thunderbolt (isopropyl alcohol, 2-propanol), CAS 67-63-0, UN1219
(i) Toxicity
Irritation of eyes, nose and throat; drowsiness, dizziness, headache; dry, cracking skin (NIOSH). GHS: H319 causes serious eye irritation; H336 may cause drowsiness or dizziness. IDLH 2,000 ppm (based on 10% of LEL).
Colorless liquid. Flash point 53 °F (12 °C) closed cup. Boiling point 181 °F (83 °C). LEL 2.0%, UEL 12.7% (at 200 °F). Autoignition 750 °F (399 °C). Vapor pressure 33 mm Hg at 68 °F. Vapor density 2.07 (air = 1), vapors collect at floor level. Specific gravity 0.785 at 20 °C (6.55 lb/gal). Miscible with water. GHS flammable liquid Category 2 (H225).
(iv) Reactivity data
Stable under normal conditions. Classed as a peroxidizable compound: can form peroxides on long contact with air (CAMEO). Thunderbolt is used within its shelf life and is not concentrated to dryness in R-101; still bottoms are drained before the kettle is refilled.
(v) Corrosivity data
Isopropyl alcohol is not classified as corrosive to metals. CAMEO lists aluminum as incompatible; no aluminum is used in wetted parts. Wetted parts are carbon steel and 304/316 stainless steel (Table 4-5). Water content is held at 0.5% or less by raw material specification.
(vi) Thermal and chemical stability
Stable under normal conditions of storage and use. No thermal decomposition or runaway reaction hazard was identified at process conditions (about 181 °F) in the 2024 PHA; R-101 is a physical reflux and recovery step with no chemical reaction.
(vii) Inadvertent mixing
Incompatible with strong oxidizers, acids, acid anhydrides, halogens, chlorine, ethylene oxide, isocyanates, acetaldehyde and aluminum (NIOSH, CAMEO). Sodium hydroxide 50% is mixed with Thunderbolt on purpose in BT-1 to BT-3; the heat of dilution of the caustic is controlled by slow addition. Foreseeable mix-ups at Building B: sodium hydroxide 50% or Polyjuice Base delivered into T-1. Neither is listed as an incompatibility for isopropyl alcohol in NIOSH or CAMEO; either would put T-1 and R-101 off specification and change still bottom composition. Controls: dedicated, labeled unloading connection for T-1; QC release of each delivery before unloading (Section 6).
Table 4-1. Chemical hazard information.
Awesomeness in BT-1 to BT-3 (SDS AWE-42): water about 80%, sodium hydroxide 5%, isopropyl alcohol 10%, Genius Blend surfactant (trade secret) 5%. Classified flammable liquid Category 3 (flash point 97 °F (36 °C), Pensky-Martens closed cup, Perry QC lab, March 2026), skin corrosion Category 1A and serious eye damage Category 1; pH about 14. Hazards added by the blend step: caustic burns and heat of dilution when 50% sodium hydroxide is added.
4.2 Process Technology
(d)(2)(i)(A) Block flow diagram
Figure 4-1. Block flow diagram, Thunderbolt Solvent System. P&ID drawings TSS-PID-001 through -004 (EHS Consulting Services) are in the PSI file.Select to enlarge
(d)(2)(i)(B) Process chemistry
There is no chemical reaction in the process. Thunderbolt is received by tank truck into T-1 and pumped in batches to R-101. R-101 heats the charge with low-pressure steam in the jacket to its boiling point and holds it at total or partial reflux. Vapor rises to E-101, condenses, and returns to R-101 as reflux or is drawn off as distillate to V-102. Recovered Thunderbolt in V-102 is pumped by P-102 to Awesomeness blend tanks BT-1 to BT-3, where it is blended at ambient temperature with water, 50% sodium hydroxide and the surfactant package to make Awesomeness (about 10 wt% IPA). Each blend tank batch is packaged through the filler. Still bottoms (water, non-volatile residue) are drained at the end of a batch to 55-gallon drums and managed as D001 hazardous waste.
(d)(2)(i)(C) Maximum intended inventory
Equipment
Capacity (gal)
Max. intended (gal)
Max. intended (lb)
T-1 storage tank
12,000
11,400 (95%)
74,670
R-101 reflux kettle
2,500
2,125 (85%, LAHH)
13,919
V-102 recovery receiver
500
450 (90%)
2,948
Piping and E-101
-
50
328
BT-1, BT-2, BT-3 (Awesomeness, 8.76 lb/gal)
3 x 1,500
3 x 1,200 (batch size)
31,536 (3,154 lb IPA)
Thunderbolt maximum (T-1, R-101, V-102, piping)
14,025
91,865
Process maximum, all flammable liquid
17,625
123,401
Table 4-2. Maximum intended inventory. R-101 normal charge is 2,000 gal (13,100 lb); the 2,125 gal maximum is the high-high level trip point. Blend tank batches are limited to 1,200 gal by the batch recipe and the BT high-level alarms.
PCV-103 on supply; jacket relief PSV-103 set 50 psig
E-101 cooling water flow
110-130 gpm
90 gpm
-
FAL-104 100 gpm; FALL-104 90 gpm trips ESD-101
E-101 vent temperature
< 90 °F
-
100 °F
TAH-105 100 °F (vapor breakthrough)
V-102 level
10-80%
-
90% (450 gal)
LAH-106 85%; LAHH-106 90% closes TV-101
R-101 room atmosphere
0% LEL
-
10% LEL
LD-1 to LD-3 alarm 10% LEL; 25% LEL trips ESD-101
Thunderbolt composition
≥ 99.5% IPA
99.5% IPA
0.5% water
QC release of each delivery (certificate plus plant test)
BT-1 to BT-3 level
Up to 1,200 gal
-
1,500 gal (capacity)
Level indicator and high-level alarm on each tank; FQ on P-102 draw-off
BT-1 to BT-3 temperature
Ambient
-
Ambient (no heating)
No heating or cooling; caustic added slowly to limit heat of dilution
Table 4-3. Safe operating limits. Values are the process design basis from EHS Consulting Services design file ECS-2013-044 as revised by MOC.
(d)(2)(i)(E) Consequences of deviation
Deviation
Consequence, including effects on employees
T-1 overfill
Thunderbolt overflows into the flammable tank farm dike. Large vapor-producing pool next to T-3; ignition gives a dike fire exposing T-1 and T-3. Operators at the flammable/oil unloading pad exposed to vapor and fire.
R-101 overcharge
Liquid carried into the vapor line and E-101; liquid to V-102 or the vent; pressure surge; release in the R-101 room.
R-101 low level with steam on
Overheating of the exposed shell; residue baking; increased leak risk at the bottom outlet.
R-101 high temperature or pressure
Pressure rise toward PSV-101 set point; relief of flammable vapor through the vent stack above the roof; risk of flange or gasket failure releasing hot Thunderbolt vapor into the room. Flash fire or explosion if ignited; burns, inhalation exposure for operators.
Loss of condenser cooling
Uncondensed vapor to the vent; flammable vapor at the roof; pressure rise in R-101 (see above).
Leak in R-101 room
Vapor heavier than air collects at the floor; LEL alarms; flash fire if ignited. Exposure above the PEL for operators without respiratory protection.
Off-spec raw material (water or contaminant)
Changed boiling behavior; more still bottoms; contamination of Awesomeness product. Oxidizer contamination could create a fire or reaction hazard.
Table 4-4. Consequences of deviation (from the February 2024 HAZOP).
4.3 Process Equipment
Tag
Equipment
Materials of construction
Design basis
Relief / design basis
T-1
12,000 gal vertical atmospheric storage tank, 12 ft dia.
Carbon steel shell, bottom and roof; no internal lining
Pressure-vacuum vent for normal breathing and filling; emergency vent sized for fire exposure
XV-101
T-1 outlet automatic valve, fail-closed
Carbon steel body, PTFE seat
Fire-safe ball valve, air-to-open
-
P-101
Transfer pump, 40 gpm
Ductile iron casing, 316 SS impeller, double mechanical seal
Centrifugal, explosion-proof motor
Seal leak detection
R-101
2,500 gal jacketed reflux kettle
304 SS vessel, carbon steel jacket
Vessel MAWP 15 psig and full vacuum at 250 °F; jacket 50 psig
PSV-101 set 15 psig; basis: external fire and loss of cooling with full steam. Discharges to stack above roof
E-101
Overhead shell-and-tube condenser
304 SS tubes, carbon steel shell
Cooling water on tube side
Thermal relief on cooling water side
V-102
500 gal recovery receiver
304 SS
Atmospheric, vented to header
Vents through flame arrester FA-101
P-102
V-102 draw-off pump to blend tanks
316 SS wetted parts
Centrifugal, explosion-proof motor
-
BT-1, BT-2, BT-3
1,500 gal Awesomeness blend tanks with agitators
304 SS
Atmospheric, ambient temperature
Vented to the vent header through FA-101
Piping
Transfer, vapor, reflux and drain lines
Carbon steel Sch. 40 (liquid); 304 SS (vapor)
Flanged, spiral-wound gaskets
Thermal relief between block valves
Table 4-5. Equipment information - (d)(3)(i)(A) and (D).
(d)(3)(i)(B) Piping and instrument diagrams
P&IDs TSS-PID-001 (T-1 and unloading), -002 (P-101 and transfer), -003 (R-101, E-101, V-102) and -004 (ESD-101 and safety instrumented functions). Current revisions are listed in the PSI index. P&IDs are field-verified at each PHA revalidation and after every MOC that changes them.
(d)(3)(i)(C) Electrical classification
Area classification for the process follows 29 CFR 1910.307, Hazardous (classified) locations. The R-101 room is classified Class I, Division 2, Group D throughout, and Class I, Division 1, Group D within 5 feet of R-101 and V-102 openings, sample points and the P-101 seal, and in floor trenches. The T-1 area of the flammable tank farm is Class I, Division 2, Group D within the dike, and Class I, Division 1 within 5 feet of the T-1 vent and the unloading connection. Electrical equipment in these areas is intrinsically safe, approved for the location, or safe for the location, as 1910.307(c) requires. Approved equipment is marked for Class I, Group D with a temperature marking that does not exceed the 750 °F (399 °C) ignition temperature of isopropyl alcohol (1910.307(c)(2)(ii)). The area classification drawing is TSS-E-010. The BT-1 to BT-3 blend area is Class I, Division 2, Group D within 5 feet of the tank openings and the P-102 seal. The extent of each classified area was set using NFPA 497 and NFPA 70 (National Electrical Code).
(d)(3)(i)(E) Ventilation system design
The R-101 room has continuous mechanical exhaust (EF-101) with floor-level pickups, design 1 cfm per square foot of floor area, discharging above the roof. Makeup air enters at high level. A low-flow switch on EF-101 alarms in the control room. LEL detectors LD-1 to LD-3 are mounted 18 inches above the floor.
(d)(3)(i)(F) Design codes and standards employed (RAGAGEP, 1910.119(d)(3)(ii))
The following industry standards were used to design and build the process and are the recognized and generally accepted good engineering practices for this equipment.
Equipment
Industry standard used
T-1
UL 142, Steel Aboveground Tanks for Flammable and Combustible Liquids; API Standard 2000, Venting Atmospheric and Low-pressure Storage Tanks; NFPA 30, Flammable and Combustible Liquids Code
R-101, E-101, V-102
ASME Boiler and Pressure Vessel Code, Section VIII, Division 1 (R-101 and jacket are code-stamped and National Board registered); TEMA (E-101)
Material and energy balances are in EHS Consulting Services design file ECS-2013-044, Section 3, and are updated by MOC when throughput, steam or cooling water design changes.
(d)(3)(i)(H) Safety systems
System
Function
ESD-101
Pushbuttons in the control room and at the R-101 room door. Closes TV-101 (steam to R-101 jacket) and XV-101 (T-1 outlet) and stops P-101. Also tripped automatically by 25% LEL, PAHH-102 and FALL-104.
LD-1 to LD-3
LEL detectors in the R-101 room. Alarm at 10% LEL; trip ESD-101 at 25% LEL.
LAHH-102
R-101 high-high level. Closes XV-101 and stops P-101.
TAHH-102 / LAL-102
R-101 high-high temperature and low level. Close TV-101.
LSHH-101
T-1 high-high level, independent of LT-101. Horn and beacon at the unloading pad.
PSV-101, PSV-103
Pressure relief for R-101 and the steam jacket.
FA-101
Flame arrester on the vent header.
Fire protection
Wet-pipe sprinklers in Building B; spill kit SK-1 and AR-AFFF foam cart in the main aisle just outside the R-101 room door; hydrant FH-2 east of Building B, between the flammable tank farm and the ammonia storage area.
Table 4-7. Safety systems.
(d)(3)(ii) and (iii) Good engineering practice
EHS Consulting Services (Sarah B. Wood, PE) documented at commissioning in 2014, and again at the 2024 PHA revalidation, that the equipment complies with recognized and generally accepted good engineering practices (letter ECS-2024-019 in the PSI file). No equipment in the process was built to codes or practices no longer in general use.
SECTION 5Process Hazard Analysis - 1910.119(e)
5.1 PHA history and schedule
PHA
Date completed
Method and notes
Initial PHA
February 2014
HAZOP, before startup
Revalidation 1
February 2019
HAZOP revalidation
Revalidation 2 (current)
February 2024
HAZOP, full revalidation (all nodes re-run)
Next revalidation due
February 2029
At least every five years after completion of the last, per (e)(6)
HAZOP was chosen under (e)(2)(iv) because the process has continuous control loops, interlocks and a heated vessel at its boiling point. The PHA addresses each item of (e)(3): the hazards of the process; previous incidents with likely potential for catastrophic consequences; engineering and administrative controls and their interrelationships, including detection; consequences of control failure; facility siting; human factors; and a qualitative evaluation of the range of possible safety and health effects of control failure on employees.
5.2 PHA team - February 2024 - 1910.119(e)(4)
Name
Position
Expertise brought to the team
Sarah B. Wood, PE
EHS Consulting Services
Team leader and facilitator. Knowledgeable in the HAZOP methodology (e)(4); process design engineer of record.
Doug Heasley
Process Controls Engineer, PSM Coordinator
Engineering: controls, interlocks, ESD-101 logic.
Kara Thrace
Lead Operator, Thunderbolt Solvent System, (555) 555-0109
Employee with experience and knowledge specific to this process (e)(4); 9 years on R-101.
Marty McFly
Night Shift Supervisor
Process operations, night shift practice, startup after ESD.
Montgomery Scott
Maintenance Manager
Mechanical integrity, maintenance and turnaround practice.
Dana Scully
EHS Manager
Industrial hygiene, safety, regulatory.
Steve Resko
ERT Leader
Emergency response, fire protection, facility siting.
Scribe: EHS Consulting Services staff. Sessions: February 6-9, 2024, 4 days. Previous incidents reviewed under (e)(3)(ii): no incident with likely potential for catastrophic consequences has occurred. One near miss (2021, gasket weep at the P-101 discharge flange, about 1 quart, no ignition) was reviewed.
5.3 HAZOP nodes and sample worksheet entries
Nodes: (1) truck unloading to T-1; (2) T-1 storage; (3) T-1 to R-101 transfer; (4) R-101 heating and reflux; (5) E-101 and V-102; (6) still bottoms drain; (7) facility siting and tank farm; (8) V-102 draw-off and Awesomeness blending in BT-1 to BT-3. The table shows a sample of the worksheet. The full worksheet (148 deviations) is in the PHA report ECS-2024-PHA-03. The February 2024 HAZOP covered the V-102 draw-off to the blend tank inlet valves.
Node
Deviation
Causes
Consequences
Safeguards
Recommendation
Status
1 Unloading to T-1
High level
Delivery larger than available space; LT-101 failure
T-1 overfill into dike; vapor and pool fire next to T-3
LAH-101; independent LSHH-101 horn at pad; attended unloading
R-1 Written ullage check signed before hose is connected
R-2 Add LAHH-102 trip test to MI schedule, quarterly
Closed April 2024
4 R-101 reflux
High pressure
TV-101 fails open; loss of cooling
Pressure rise; PSV-101 relieves vapor; flange leak in room
PAH/PAHH-102; ESD-101; PSV-101
R-3 Verify PSV-101 sizing for loss of cooling with full steam
Closed August 2024 (ECS calc. 24-118)
4 R-101 reflux
Loss of containment
Bottom outlet valve or gasket failure
Hot Thunderbolt release; vapor at floor; flash fire
LD-1 to LD-3; EF-101; ESD-101; sprinklers; foam cart
R-4 Replace bottom outlet valve with fire-safe, remotely operated valve
Open - MOC-2025-011; due Dec. 2026 turnaround
5 E-101 / V-102
No cooling water flow
CW pump trip; valve closed
Vapor to roof vent; R-101 pressure rise
FAL-104 (alarm only in 2024); TAH-105
R-5 Change FAL-104 to low-low trip of ESD-101
Closed March 2025 (MOC-2025-004)
5 E-101 / V-102
High level V-102
Draw-off left open; blend line not accepting
Overflow to vent header; liquid at FA-101
LAH-106
R-6 Add LAHH-106 to close TV-101
Closed March 2025 (MOC-2025-004)
7 Siting
Fire in flammable tank farm dike
T-1 overfill or leak, ignited
Fire exposing T-1 and T-3; smoke and runoff toward the access road and the ammonia area (about 170 ft south) could slow response there
Separate dikes; FH-2; AR-AFFF; ERT
R-7 Pre-plan combined fire and ammonia scenario with NMEFD
Closed April 2025
4 Human factors
Startup after ESD in wrong order
Steam restored before cooling water
Pressure rise on restart
Procedure TSS-OP-07
R-8 Add permissive: CW flow proven before TV-101 can open
In progress - MOC-2026-002; due Nov. 2026
Table 5-1. HAZOP entries, February 2024 revalidation (sample), with recommendation status.
5.4 Resolving recommendations - 1910.119(e)(5)
Node 8, blend tanks, added October 2026 after the process review; recommendation R-9: HAZOP supplement for BT-1 to BT-3 (blend tanks, caustic addition, packaging filler connection) with EHS Consulting Services, due December 2026, open in the PSM Action Tracker. It will be folded into the February 2029 revalidation.
Each recommendation is entered in the PSM Action Tracker by the PSM Coordinator within 5 working days of the PHA report, with an owner and a written target date.
The Plant Manager reviews the tracker monthly. A recommendation may be declined only in writing, with the reason (for example, the analysis was based on a factual error, or an alternative gives equal protection), signed by the Plant Manager.
Actions are completed as soon as possible. Changes are made through MOC (Section 13).
Resolutions are communicated to operating, maintenance and other affected employees at shift meetings and in refresher training. Attendance is recorded.
5.5 Retention - 1910.119(e)(7)
PHAs, updates, revalidations and documented resolution of recommendations are kept for the life of the process in the PSM Coordinator's office and on the plant document system.
Written operating procedures give clear instructions for safely running the process, consistent with the process safety information in Section 4. Each procedure contains the operating limits (consequences of deviation and steps to correct or avoid deviation), the safety and health considerations in (f)(1)(iii), and the safety systems and their functions in (f)(1)(iv).
6.1 Procedure index
Number
Title
1910.119(f)(1)(i) phase
Last certified
TSS-OP-01
Initial startup of the Thunderbolt Solvent System (new or after major modification)
(A) Initial startup
Jan. 2026
TSS-OP-02
Receiving Thunderbolt by tank truck into T-1 (includes ullage check and QC release)
(B) Normal operations
Jan. 2026
TSS-OP-03
Charging R-101 from T-1
(B) Normal operations
Jan. 2026
TSS-OP-04
R-101 heat-up, reflux and distillate draw-off to V-102
(B) Normal operations
Jan. 2026
TSS-OP-05
Still bottoms drain to drums
(B) Normal operations
Jan. 2026
TSS-OP-06
Temporary operations: running with one LEL detector out of service; temporary hose transfer
(C) Temporary operations
Jan. 2026
TSS-OP-07
Emergency shutdown with ESD-101
(D) Emergency shutdown
Jan. 2026
TSS-OP-08
Emergency operations: leak, fire, loss of cooling water, power failure
(E) Emergency operations
Jan. 2026
TSS-OP-09
Normal shutdown and cool-down of R-101
(F) Normal shutdown
Jan. 2026
TSS-OP-10
Startup after turnaround or after an emergency shutdown
(G) Startup after turnaround or ESD
Jan. 2026
Table 6-1. Operating procedure index.
6.2 Content of each procedure
Steps for the operating phase, in order, with the expected reading at each step.
Operating limits from Table 4-3, the consequence of deviation, and the steps to correct or avoid the deviation - (f)(1)(ii).
Properties and hazards of Thunderbolt; precautions to prevent exposure (closed transfer, bonding and grounding, ventilation, PPE: chemical splash goggles, nitrile or butyl gloves, FR clothing in the R-101 room); control measures if contact or airborne exposure occurs (flush skin and eyes with water, move to fresh air, report to the control room); quality control of raw material and control of inventory levels; special hazards (vapor heavier than air, invisible flame) - (f)(1)(iii).
Safety systems that apply to the task and what each does - (f)(1)(iv).
Fire or flammable vapor alarm (10% LEL) in the R-101 area that is not cleared at once.
Loss of condenser cooling water (FALL-104 trips ESD-101 automatically).
R-101 high-pressure or high-temperature alarm that does not respond to corrective action within 2 minutes.
Any Thunderbolt leak the area operator cannot stop at once.
Evacuation alarm for Building B, or a tank farm fire.
Assignment of shutdown responsibility
Emergency shutdown is assigned to the qualified control room operator on shift. The control room is staffed whenever the process runs. The operator presses ESD-101 in the control room. ESD-101 closes TV-101 (steam to the R-101 jacket) and XV-101 (T-1 outlet) and stops P-101. The area operator may also press the ESD-101 pushbutton at the R-101 room door on the way out. Only operators qualified on TSS-OP-07 (Section 8) may be assigned to the control room while the process runs. Overnight and on weekends R-101 is in safe hold (Section 6.5): the steam block valve and XV-101 are already closed and P-101 is stopped, so there is nothing further to shut down.
6.4 Access, review and annual certification - 1910.119(f)(2) and (f)(3)
Current procedures are kept in the control room binder and at the R-101 room operator station, and on the plant document system. They are readily accessible to employees who work in or maintain the process.
Procedures are reviewed as often as necessary to reflect current practice, including changes from MOC (Section 13).
The Plant Manager certifies every January that the procedures are current and accurate. Last certification: January 2026. Next: January 2027.
6.5 Operating schedule and safe hold
The Thunderbolt Solvent System is operated only on day and night shift, Monday through Friday, with the control room staffed. At the end of each night shift and before weekends R-101 is placed in safe hold under TSS-OP-09: batch complete, R-101 cooled below 100 °F, steam block valve closed, XV-101 closed, P-101 stopped, V-102 level recorded. The overnight and weekend operator, qualified on TSS-OP-07 and TSS-OP-09, makes rounds, records T-1, T-2, T-3 and T-4 levels and detector readings, and does not charge or heat R-101. Tank-truck deliveries of Thunderbolt are received on day shift Monday through Friday only. Still bottoms from the Friday night batch are drummed and moved to the HWA by the night shift before leaving.
SECTION 7Safe Work Practices - 1910.119(f)(4)
The following safe work practices control hazards during operations and maintenance. They apply to Perry Industries employees and to contractor employees.
Practice
Procedure
Key controls for this process
Lockout/tagout
BLD-B-SWP-01 (29 CFR 1910.147)
Isolate P-101, TV-101, XV-101 and the steam supply; block and bleed before opening; verify zero energy.
Confined space entry
BLD-B-SWP-02 (29 CFR 1910.146)
T-1, R-101 and V-102 are permit-required confined spaces. Drain, flush, purge and blind; test oxygen, LEL and IPA concentration before and during entry.
Opening process equipment or piping (line break)
BLD-B-SWP-03
Line break permit; drain and depressure; PPE for residual Thunderbolt; drip pan and spill kit SK-1 at the break; LEL check before and during work.
Hot work
BLD-B-SWP-04 (Section 12)
Hot work permit for any hot work on or near the process.
Control of entry into the process area
BLD-B-SWP-05
Maintenance, contractor, laboratory and other support personnel sign in at the control room before entering the R-101 room or the tank farm, state their task, and sign out when done. The control room operator may refuse or stop entry.
Bonding and grounding
BLD-B-SWP-06
Tank truck bonded before the dome or hose is opened; drums bonded and grounded during still bottoms drain.
Ignition source control
BLD-B-SWP-07
No smoking, open flames or non-approved electrical equipment in classified areas; intrinsically safe radios and flashlights only.
SECTION 8Training - 1910.119(g)
8.1 Initial training - 1910.119(g)(1)
Each employee involved in operating the process, and each employee before operating it on a new assignment, is trained in an overview of the process and in the operating procedures in Section 6. Training emphasizes the specific safety and health hazards, emergency operations including shutdown, and safe work practices that apply to the employee's job tasks.
Module
Method
Means of verifying understanding
Process overview, Thunderbolt hazards, PSI
Classroom, 4 hours
Written test, 80% to pass
Operating procedures TSS-OP-01 to -10
Classroom plus on-the-job with a qualified operator, minimum 10 shifts
Supervisor sign-off on each procedure
ESD-101 and emergency operations (TSS-OP-07, -08)
Control room walk-through and drill
Performance demonstration observed by supervisor
Safe work practices (Section 7)
Classroom, 2 hours
Written test
Campus EAP and small release procedure
Classroom, 1 hour
Written test
8.2 Refresher training - 1910.119(g)(2)
Refresher training is given at least every three years, and more often if necessary, so that each operator understands and follows the current operating procedures. Perry Industries consulted with the operators (Safety Committee, March 2024) on frequency. Result: full refresher every three years, plus an ESD-101 drill for each operator every six months and a review of any procedure changed in the past year at the annual January certification.
8.3 Training documentation - 1910.119(g)(3)
For each employee, the training record contains the identity of the employee, the date of training, and the means used to verify that the employee understood the training (test score, performance sign-off or drill observation). Supervisors confirm that each operator has received and understood the training before assigning the operator to the process. Records are kept by Human Resources (Wendy Weaver) for the duration of employment plus five years.
SECTION 9Contractors - 1910.119(h)
9.1 Application - 1910.119(h)(1)
This section applies to contractors performing maintenance or repair, turnaround, major renovation or specialty work on or adjacent to the process. It does not apply to contractors providing incidental services that do not influence process safety, such as janitorial work, food and drink services, laundry, delivery or other supply services. Tank truck drivers delivering Thunderbolt are a delivery service, but they unload only under TSS-OP-02 with a Perry operator in attendance.
9.2 Perry Industries responsibilities - 1910.119(h)(2)
Paragraph
How Perry Industries meets it
(h)(2)(i)
Before selection, the EHS Manager obtains and evaluates the contractor's safety performance and programs: injury and illness rates (3 years), experience modification rate, written safety programs, training records, references, and any required certifications (for example, ASME-qualified welders for R-101 work).
(h)(2)(ii)
Contract employers are informed in writing of the known fire, explosion and toxic release hazards of their work and the process (pre-job briefing form CB-01, signed).
(h)(2)(iii)
The applicable provisions of the Campus Emergency Action Plan are explained to the contract employer before work starts: alarms, evacuation routes, assembly area AA-2 "Shire", reporting.
(h)(2)(iv)
Entrance, presence and exit of contract employers and employees in the process area are controlled through BLD-B-SWP-05: sign-in at the Gate 2 house and the control room, badges, sign-out.
(h)(2)(v)
Contractor performance is evaluated at the end of each job and at least annually for long-term contractors (form CE-02).
(h)(2)(vi)
The EHS Manager keeps a contract employee injury and illness log for contractor work in the process area.
Contracts for work on or adjacent to the process require the contract employer to:
(h)(3)(i) assure each contract employee is trained in the work practices necessary to perform the job safely;
(h)(3)(ii) assure each contract employee is instructed in the known fire, explosion and toxic release hazards of the job and the process, and the applicable provisions of the emergency action plan;
(h)(3)(iii) document that each contract employee has received and understood the training, with a record containing the employee's identity, the date of training and the means used to verify understanding;
(h)(3)(iv) assure each contract employee follows the facility safety rules, including the safe work practices in Section 7;
(h)(3)(v) advise Perry Industries of any unique hazards presented by the contract employer's work, or of any hazards found by the contract employer's work.
SECTION 10Pre-Startup Safety Review - 1910.119(i)
A pre-startup safety review (PSSR) is performed for new facilities and for modified facilities when the modification is significant enough to require a change in the process safety information. The MOC form (Appendix A) states whether a PSSR is required.
Before Thunderbolt is introduced to the new or modified equipment, the PSSR confirms that:
(i)(2)(i) construction and equipment are in accordance with design specifications;
(i)(2)(ii) safety, operating, maintenance and emergency procedures are in place and adequate;
(i)(2)(iii) for new facilities, a PHA has been performed and recommendations resolved or implemented before startup; for modified facilities, the MOC requirements of Section 13 are met;
(i)(2)(iv) training of each employee involved in operating the process has been completed.
The PSSR team is at least the PSM Coordinator, an operations supervisor and the Maintenance Manager or their designee, with the EHS Manager for any change to safety systems. The team walks down the equipment and completes the checklist in Appendix B. The Plant Manager authorizes startup by signing the checklist. Open items that do not affect safe startup may be carried with an owner and date; open items that affect safety must be closed before startup.
SECTION 11Mechanical Integrity - 1910.119(j)
11.1 Equipment covered - 1910.119(j)(1)
Inspection and test frequencies below are consistent with the manufacturers' recommendations and good engineering practice, as required by (j)(4)(iii). The industry standard listed is the practice used for the inspection or test method. Frequencies are increased when operating experience shows it is necessary.
Bump test monthly; calibration quarterly; trip tests quarterly
Manufacturer; ANSI/ISA 61511
Storage and process tanks (i)
BT-1, BT-2, BT-3
Operator external visual; internal visual and UT thickness
Monthly; 5 years
STI SP001; manufacturer
Pumps (vi)
P-101, P-102
Vibration and seal check; seal leak detector test
Monthly; quarterly
Manufacturer
Table 11-1. Mechanical integrity equipment list and inspection schedule.
11.2 Written procedures - 1910.119(j)(2)
Written maintenance procedures (MI-TSS-01 through MI-TSS-14) cover each inspection and test in Table 11-1, PSV removal and reinstallation, gasket and bolting practice, and seal replacement on P-101. The Maintenance Manager owns these procedures.
11.3 Training for maintenance - 1910.119(j)(3)
Each employee maintaining the process equipment is trained in an overview of the process and its hazards and in the procedures that apply to the job. Contract maintenance employees are trained by their employer (Section 9) and receive the Perry process overview before work.
11.4 Inspection and testing records - 1910.119(j)(4)(iv)
Each inspection and test is documented with: the date; the name of the person who performed it; the serial number or other identifier of the equipment; a description of the inspection or test; and the results. Records are kept in the computerized maintenance system and in the equipment files.
11.5 Equipment deficiencies - 1910.119(j)(5)
Deficiencies in equipment that are outside acceptable limits defined by the process safety information are corrected before further use, or in a safe and timely manner when necessary means are taken to assure safe operation. Interim measures and the target date are approved by the Plant Manager and recorded.
11.6 Quality assurance - 1910.119(j)(6)
New equipment is checked as fabricated for suitability for the service (material certificates, code stamps and data reports).
Installation is checked against design specifications and manufacturer instructions before the PSSR.
Maintenance materials, spare parts and equipment are verified suitable for the service: positive material identification of alloy parts, gasket and bolt specifications, replacement-in-kind check against the equipment file.
SECTION 12Hot Work Permit - 1910.119(k)
A hot work permit (Appendix D) is issued for hot work operations on or near the process. Hot work means work involving electric or gas welding, cutting, brazing, or similar flame or spark-producing operations. "Near" includes the whole R-101 room, the tank farm, the unloading pad and any location within 35 feet of process equipment, piping or vents.
The permit documents that the fire prevention and protection requirements of 29 CFR 1910.252(a) are in place before work begins, including:
movable fire hazards removed to a safe place, or guards used to confine heat, sparks and slag, and work not performed if these cannot be done - 1910.252(a)(1);
combustibles relocated at least 35 feet or protected; floor and wall openings covered; ducts protected - 1910.252(a)(2);
suitable fire extinguishing equipment ready for instant use;
fire watch assigned where required, kept for at least a half hour after the work is complete - 1910.252(a)(2)(iii);
no hot work in the presence of explosive atmospheres, or in sprinklered buildings while sprinkler protection is impaired - 1910.252(a)(2)(vi); LEL tested and recorded at 0% before and during the work;
equipment that held Thunderbolt drained, cleaned, purged and tested before hot work on it - 1910.252(a)(3).
The permit indicates the date(s) authorized and identifies the object on which hot work is performed. It is signed by the permit issuer (Production Supervisor or Maintenance Manager) and the control room operator. The permit is posted at the job and kept on file until the hot work is complete. Perry Industries keeps completed permits for one year for audit.
SECTION 13Management of Change - 1910.119(l)
13.1 What requires MOC
MOC applies to changes, except replacement in kind, to process chemicals, technology, equipment and procedures, and to changes to facilities that affect the process. Replacement in kind means a replacement that satisfies the design specification. Examples that require MOC: a new gasket material, a new raw material supplier or grade, changed alarm or trip set points, software changes to ESD-101 logic, bypassing an interlock, a temporary hose, a change to an operating procedure step, new construction near the R-101 room. Temporary changes get a written end date and are reversed or made permanent through MOC.
13.2 Procedure
The originator fills in Part 1 of the MOC form (Appendix A) and gives it to the MOC Coordinator (Doug Heasley).
The MOC Coordinator decides if the change is replacement in kind. If not, an MOC number is assigned.
Before the change, the review addresses each item in 1910.119(l)(2): (i) the technical basis for the change; (ii) impact on safety and health, by hazard review (checklist or what-if; HAZOP for major changes); (iii) modifications to operating procedures; (iv) the time period needed for the change; (v) authorization requirements.
Approvals: PSM Coordinator, Maintenance Manager, EHS Manager and Plant Manager. Changes to safety systems also need the ERT Leader.
Process safety information is updated if the change affects it - (l)(4). Operating procedures and practices are updated if the change affects them - (l)(5).
Employees involved in operating the process, and maintenance and contract employees whose tasks will be affected, are informed of and trained in the change before startup of the process or the affected part - (l)(3).
A PSSR (Section 10) is completed where required, then the change is closed by the MOC Coordinator.
13.3 Emergency changes
When a change is needed at once to keep the process safe, the shift supervisor may authorize it by phone with the PSM Coordinator. The MOC form is completed and the full review done within 2 working days. This does not remove any of the (l)(2) considerations; it only allows them to be documented after a verbal review.
SECTION 14Incident Investigation - 1910.119(m)
(m)(1) Each incident that resulted in, or could reasonably have resulted in, a catastrophic release of Thunderbolt in the workplace is investigated. This includes near misses such as an LEL alarm from a real leak, a PSV lift, an interlock demand, or a tank overfill stopped by LSHH-101.
(m)(2) The investigation is started as promptly as possible, but not later than 48 hours after the incident. The shift supervisor notifies the EHS Manager and PSM Coordinator at once, and the EHS Manager starts the investigation.
(m)(3) The team includes at least one person knowledgeable in the process, a contract employee if the incident involved a contractor's work, and others with the knowledge and experience to investigate and analyze the incident. The EHS Manager leads.
(m)(4) A report is prepared at the end of the investigation (Appendix C). At a minimum it includes: the date of the incident; the date the investigation began; a description of the incident; the factors that contributed to the incident; and any recommendations.
(m)(5) Recommendations go into the PSM Action Tracker with an owner and due date and are resolved promptly. Resolutions and corrective actions are documented.
(m)(6) The report is reviewed with all affected personnel whose job tasks are relevant to the findings, including contract employees where applicable. Attendance is recorded.
(m)(7) Reports are kept for five years.
SECTION 15Emergency Planning and Response - 1910.119(n)
15.1 Emergency action plan
The emergency action plan for the entire plant is the Perry Industries Campus Emergency Action Plan, Rev. 4, March 14, 2026, which meets 29 CFR 1910.38. It covers reporting, alarms, evacuation routes and assembly areas (Building B primary: AA-2 "Shire"), critical operations before evacuation (control room operator trips ESD-101 if it can be done from the control room), accounting for employees, and rescue and medical duties. The windsock is on the Building B roof.
15.2 Procedure for handling small releases
This procedure is the Campus Emergency Action Plan, Section 13 (Building B Annex), reproduced word for word. The Campus EAP is the master; if the two ever differ, the EAP governs.
A small release of Thunderbolt that operators handle is: a drip or weep at a flange, valve packing, pump seal or sample point; about 5 gal or less; no fire; no one exposed; no LEL alarm.
Do these steps in order:
The area operator stops the leak if it can be done safely — close the nearest block valve, or ask the control room to stop P-101 and close XV-101.
Call the control room, ext. 0. Give the location and what is leaking. The control room tells the Lead Operator (Kara Thrace, (555) 555-0109) if on shift.
Remove ignition sources (stop hot work, do not operate electrical switches near the spill) and use spill kit SK-1, in the main aisle just outside the R-101 room door, with its non-sparking tools. Keep the spill out of floor drains and the doorway.
Put used sorbent in the SK-1 steel container (grounded salvage drum), close it, and take it to the HWA for management as D001 hazardous waste. Tell Dana Scully.
Anything larger, any fire or LEL alarm, or any doubt: sound the evacuation alarm, the control room trips ESD-101, and the Building B ERT responds. This also applies if at any time the spill grows or anyone feels dizzy or gets a headache — stop, leave the room and tell the control room.
15.3 Emergency response - 29 CFR 1910.120(q)
Releases beyond the small-release procedure are handled by the Building B Emergency Response Team (ERT) under 29 CFR 1910.120(q). The ERT has 12 members across both shifts, trained to the hazardous materials technician level, 1910.120(q)(6)(iii), and is led by Steve Resko, ERT Leader, (555) 555-0101. Equipment in the ERT room by the control room: 8 SCBA (30-minute cylinders) with 8 spare cylinders, cascade fill at the Gate 2 house; 6 Level B encapsulating splash suits (no Level A suits; the NMEFD hazmat team provides Level A); butyl and nitrile gloves and chemical boots; portable 4-gas meter (O2/LEL/CO/H2S) with PID and a spare 4-gas meter; ammonia colorimetric tubes; decon kit; two 95-gal overpack drums; stretcher. Elsewhere: AR-AFFF foam cart and spill kit SK-1 in the main aisle just outside the R-101 room door; spill kits SK-2 to SK-6 and SK-10; hydrant FH-2. Outside help: dial 911 for New Mos Eisley Fire Department (NMEFD) Station 7, about 2 miles, which has a hazmat team. Sheaves Environmental Response, (555) 555-0177, handles cleanup. NMEFD has toured the R-101 room and tank farm and has the Thunderbolt SDS.
The Building B emergency response plan required by 1910.120(q)(1)-(2) is maintained by the ERT Leader. Employees who are not ERT members evacuate under the Campus EAP and do not take part in response.
SECTION 16Compliance Audits - 1910.119(o)
(o)(1) Perry Industries certifies at least every three years that it has evaluated compliance with 1910.119 to verify that the procedures and practices developed under the standard are adequate and are being followed. The Plant Manager signs the certification.
(o)(2) The audit is conducted by at least one person knowledgeable in the process. Perry uses a team led by a person not assigned to the process.
(o)(3) A report of the findings is developed.
(o)(4) Perry promptly determines and documents an appropriate response to each finding, and documents that deficiencies have been corrected (PSM Action Tracker).
(o)(5) The two most recent compliance audit reports are kept.
Audit
Date
Team / status
Previous
September 2022
Sarah B. Wood, PE (lead), Dana Scully. Report kept. All findings closed.
Most recent
September 2025
Sarah B. Wood, PE (lead), Dana Scully, Kara Thrace. 9 findings, all closed; the refresher training records finding was closed December 2025 with records consolidated in the training database.
Next due
By September 2028
Three years after the September 2025 audit.
SECTION 17Trade Secrets - 1910.119(p)
(p)(1) All information needed to comply with 1910.119 is made available, without regard to possible trade secret status, to those compiling the process safety information, those helping develop the PHA, those developing operating procedures, and those involved in incident investigations, emergency planning and response, and compliance audits.
(p)(2) Perry Industries may require those persons to sign confidentiality agreements not to disclose the information, as set forth in 29 CFR 1910.1200.
(p)(3) Subject to the rules and procedures in 29 CFR 1910.1200(i)(1) through (i)(12), employees and their designated representatives have access to trade secret information contained in the PHA and other documents developed under this standard.
Thunderbolt is a single chemical of public identity. The "Genius Blend" surfactant package (GB-0042) added in BT-1 to BT-3 is a trade secret within the process. Its identity is made available under (p)(1) to those compiling PSI, doing the PHA, writing procedures, investigating incidents, planning emergency response and auditing, who may be asked to sign confidentiality agreements under (p)(2). The PSM Coordinator marks trade secret information in PSM documents.
APPENDIX AManagement of Change Form
Form PSM-F-01. One form per change. Attach drawings, calculations and hazard review.
☐ Yes - stop, no MOC needed (initials ____) ☐ No - continue
Part 2 - Review before the change - 1910.119(l)(2)
Consideration
Answer / reference
(i) Technical basis for the change
(ii) Impact on safety and health (hazard review method and result)
☐ Checklist ☐ What-if ☐ HAZOP Result:
(iii) Modifications to operating procedures (list SOPs)
(iv) Time period needed for the change
(v) Authorization required (see Part 4)
Part 3 - Updates and communication
Item
Needed?
Done (initials / date)
Process safety information updated (P&ID, limits, electrical classification, relief basis) - (l)(4)
☐ Y ☐ N
Operating procedures / practices updated - (l)(5)
☐ Y ☐ N
Mechanical integrity procedures and schedule updated
☐ Y ☐ N
Operators, maintenance and contract employees informed and trained before startup - (l)(3)
☐ Y ☐ N
PSSR required (Appendix B)
☐ Y ☐ N
Part 4 - Approvals
Position
Signature
Date
PSM / MOC Coordinator
Maintenance Manager
EHS Manager
ERT Leader (safety system changes)
Plant Manager
Closed by MOC Coordinator
APPENDIX BPre-Startup Safety Review Checklist
Form PSM-F-02. Complete before Thunderbolt is introduced to new or modified equipment.
PSSR No. / MOC No.
Date:
Equipment / scope
Item
Yes
No
N/A
Comment / open item
1. Construction and equipment - (i)(2)(i)
Equipment built and installed per design specifications and P&IDs (field walk-down done)
Materials verified (certificates, PMI where alloy)
Pressure test / leak test complete and recorded
Relief devices installed, set pressure and tag verified
Electrical equipment suitable for area classification
Bonding and grounding in place
Alarms and interlocks loop-checked and trip-tested
2. Procedures - (i)(2)(ii)
Operating procedures written or updated and in the control room
Maintenance and inspection procedures updated
Emergency procedures and ERT pre-plan updated
Safety procedures (LOTO, confined space, line break) updated as needed
3. Hazard analysis - (i)(2)(iii)
New facility: PHA done and recommendations resolved or implemented
Modified facility: MOC complete, PSI updated
4. Training - (i)(2)(iv)
Every operator of the process trained on the change (records attached)
Maintenance and contract employees affected informed and trained
Team member / position
Signature
Date
PSM Coordinator
Operations Supervisor
Maintenance Manager
Startup authorized - Plant Manager
APPENDIX CIncident Investigation Report
Form PSM-F-03. Start the investigation within 48 hours. Keep the report five years.
Report No.
Date and time of incident - (m)(4)(i)
Date investigation began - (m)(4)(ii)
Location / equipment
Type
☐ Release ☐ Fire ☐ Near miss ☐ Interlock / relief demand ☐ Other
Quantity released (estimate)
Injuries / exposures
Contractor work involved?
☐ No ☐ Yes - company and contract employee on team:
Investigation team - (m)(3)
Name
Position
Knowledge of process?
Description of the incident - (m)(4)(iii)
Factors that contributed to the incident - (m)(4)(iv)
Recommendations - (m)(4)(v) and resolution - (m)(5)
No.
Recommendation
Owner
Due
Resolution / date
1
2
3
Review with affected personnel - (m)(6)
Group (incl. contractors)
Date reviewed
By
Investigation lead signature: ______________________________ Date: ______________
APPENDIX DHot Work Permit
Form PSM-F-04. Required for hot work on or near the Thunderbolt Solvent System (1910.119(k)). Post at the job. Keep on file until the work is complete.
Permit No.
Date(s) authorized:
Time valid
From ________ to ________ (not to exceed one shift)
Fire prevention and protection - 29 CFR 1910.252(a)
Precaution
Yes
N/A
Initials
Object moved to a safe location, or movable fire hazards removed - (a)(1)(i)
Guards in place to confine heat, sparks and slag where hazards cannot be removed - (a)(1)(ii)
Combustibles within 35 ft relocated or protected; floor and wall openings covered - (a)(2)(i), (vii)
Ducts and conveyors that could carry sparks protected or shut down - (a)(2)(viii)
Suitable fire extinguisher at the job, ready for use - (a)(2)(ii)
Sprinkler protection in service (no hot work while impaired) - (a)(2)(vi)(B)
Atmosphere tested: LEL 0% before work; continuous monitor at the job - (a)(2)(vi)(C)
Equipment that held Thunderbolt drained, cleaned, purged and tested - (a)(3)
Equipment isolated and locked out (LOTO tag nos.: ________)
Drains and trenches within 35 ft covered
Fire watch assigned, trained, has extinguisher and alarm means - (a)(2)(iii)
Fire watch to remain at least 30 minutes after work ends - (a)(2)(iii)(B)
Control room operator informed; nearby operations that could release vapor suspended
Gas test
Reading (% LEL)
Time
Tester
Before start
During work
During work
Role
Signature
Date / time
Permit issuer (Production Supervisor or Maintenance Manager)
Control room operator
Person doing hot work
Fire watch
Final check after fire watch - work area safe
APPENDIX EReferences
Regulations
29 CFR 1910.119, Process safety management of highly hazardous chemicals, including Appendix A (mandatory) and Appendix C (nonmandatory compliance guidelines). eCFR.
UL 142; API Standard 2000; API 510, 520, 521, 570, 576; ASME BPVC Section VIII Div. 1; ASME B31.3; National Board Inspection Code; STI SP001; ANSI/ISA 61511; NFPA 11, 13, 30, 70, 497.
Related Perry Industries documents
Campus Emergency Action Plan, Rev. 4, March 14, 2026.
Building B Emergency Response Plan (1910.120(q)), ERT Leader.
Risk Management Program, Polyjuice Base Storage and Transfer, RMP-PJB-001.
Building B SPCC Plan, certified March 14, 2026; LQG Contingency Plan Rev. 3 (separate document; cross-references the SPCC Plan). Drawing PI-B-101, Building B facility diagram; drawing PI-C-001, campus site plan.