How to Conduct a Process Hazard Analysis (PHA)
How to Conduct a Process Hazard Analysis (PHA)
Author: Fidelis Associates | Published: 2026-03-02 | Last Updated: 2026-03-02
Meta Description: Process Hazard Analysis (PHA) is a systematic method for identifying and evaluating hazards in chemical processes. Learn HAZOP, What-If, LOPA, and when to use each PHA methodology.
Definition
A Process Hazard Analysis (PHA) is a systematic, team-based evaluation used to identify and assess hazards associated with chemical processes. Required by OSHA under 29 CFR 1910.119(e), PHA examines what could go wrong, how existing safeguards prevent or mitigate those scenarios, and whether additional protections are needed. It is widely regarded as the most critical element of Process Safety Management because it drives decisions about safeguards, operating limits, and risk reduction across the entire facility.
Table of Contents
- When PHA is Required
- What Are the OSHA-Approved PHA Methodologies?
- PHA Team Composition
- The PHA Process: Step by Step
- Revalidation Requirements
- Common PHA Pitfalls
When PHA is Required
OSHA requires a PHA for every process covered by the PSM standard. The regulation specifies:
- Initial PHA must be completed for all covered processes. OSHA established a priority order based on process hazard severity, age of the process, and operating history.
- Revalidation must occur at least every five years. The revalidation must update the PHA to reflect current process conditions, incorporate changes since the last analysis, and ensure previous findings have been addressed.
- New processes must have a completed PHA before startup, typically as part of the design and pre-commissioning phase.
PHA is also triggered by significant Management of Change (MOC) actions when proposed changes affect the process technology, chemistry, or equipment configuration.
What Are the OSHA-Approved PHA Methodologies?
OSHA permits several PHA methodologies. The choice depends on the complexity of the process, the phase of the lifecycle, and the level of detail required.
HAZOP (Hazard and Operability Study)
HAZOP is the most widely used PHA methodology in petroleum refineries, petrochemical plants, and chemical manufacturing facilities. It applies guide words (No, More, Less, Reverse, Part Of, As Well As, Other Than) to process parameters (flow, pressure, temperature, level, composition) at each node in the process to systematically identify deviations from design intent.
When to use: Complex continuous processes, processes with significant interaction between parameters, refining and petrochemical operations. HAZOP provides the most rigorous and auditable results for complex systems.
What-If Analysis
What-If analysis uses open-ended questions — "What if the pump fails?" "What if the operator opens the wrong valve?" — to identify hazards. It is less structured than HAZOP but can be faster and more flexible, particularly for simpler processes or when combined with a checklist.
When to use: Simpler processes, batch operations, early-stage project reviews, or as a supplement to other methodologies. What-If/Checklist combinations are common for processes where a standardized checklist captures most hazards.
Checklist Analysis
Checklist analysis compares a process against a list of known hazards, design standards, and best practices. It is efficient for well-understood processes with established design standards but can miss novel or process-specific hazards not covered by the checklist.
When to use: Well-understood processes with mature design standards, pre-startup verifications, or as a supplement to HAZOP or What-If for code compliance verification.
Failure Mode and Effects Analysis (FMEA)
FMEA systematically evaluates each component in a system to determine how it can fail, the effects of that failure on the system, and the severity and likelihood of the failure mode. It is component-focused rather than process-focused.
When to use: Equipment-intensive systems, safety instrumented systems, control system evaluations, and reliability-focused analyses where component-level failure modes drive system risk.
Fault Tree Analysis (FTA)
Fault Tree Analysis works backward from an undesired top event (such as a release or explosion) to identify the combinations of failures that could cause that event. It uses Boolean logic gates (AND, OR) to map failure pathways and can quantify event probabilities when failure rate data is available.
When to use: Investigating specific high-consequence scenarios in detail, quantifying risk for critical systems, or evaluating the adequacy of multiple layers of protection for a specific event.
Layer of Protection Analysis (LOPA)
LOPA is a semi-quantitative method that evaluates the adequacy of independent protection layers (IPLs) for specific hazard scenarios. Starting from an initiating cause, LOPA assigns a frequency to the initiating event and credits each qualifying IPL with a probability of failure on demand (PFD) to determine whether the residual risk meets the facility's risk tolerance criteria.
When to use: Following a qualitative PHA (HAZOP or What-If) to evaluate specific high-risk scenarios in more detail. LOPA is commonly used to determine Safety Integrity Level (SIL) requirements for safety instrumented functions.
PHA Team Composition
The quality of a PHA depends directly on the composition and experience of the team. OSHA requires the team to include:
- A person knowledgeable in the process being analyzed — typically an experienced operator or process engineer who understands normal operations, upset conditions, and process history
- A person experienced in the PHA methodology — often the facilitator, who guides the team through the analysis and ensures methodological rigor
- Other appropriate expertise — maintenance, instrumentation, safety, and engineering representation as needed
Effective PHA Teams
The most effective PHA teams include:
- A skilled, independent facilitator who manages the process without influencing the outcome
- Experienced operations personnel who have worked the process through startups, shutdowns, and upsets
- Process engineering representation for design basis and technical questions
- Maintenance/reliability representation for equipment condition and failure history
- Instrumentation and controls representation for control system and SIS issues
- A scribe who accurately captures the analysis in real time
Teams of 5-8 people are generally most effective. Larger teams reduce efficiency; smaller teams risk missing expertise.
The PHA Process: Step by Step
Step 1: Define Scope and Methodology
Identify the process boundaries, the methodology to be used, and the specific nodes or sections to be analyzed. Review current process safety information (P&IDs, operating procedures, equipment specifications, previous PHA reports, incident history).
Step 2: Assemble the Team
Select team members based on the required expertise. Ensure the team has access to all relevant process safety information before the study begins.
Step 3: Conduct the Analysis
Work through the process systematically, node by node (HAZOP) or question by question (What-If). For each identified deviation or scenario:
- Identify possible causes
- Identify existing safeguards (engineering controls, administrative controls, alarms, interlocks, relief devices)
- Evaluate the consequence and likelihood
- Determine whether existing safeguards are adequate
- Generate recommendations where additional protection is needed
Step 4: Document Findings and Recommendations
Record all scenarios, safeguards, risk rankings, and recommendations. Recommendations should be specific, actionable, and include a rationale that connects the recommendation to the identified risk.
Step 5: Resolve Recommendations
Management must promptly address each recommendation, document the response, and communicate the resolution to affected personnel. If a recommendation is rejected, the rationale must be documented.
Step 6: Communicate Results
PHA results must be made available to operating personnel, maintenance workers, and other affected employees per the employee participation requirements of PSM.
Revalidation Requirements
OSHA requires PHA revalidation at least every five years. Revalidation is not simply re-approving the previous study. An effective revalidation must:
- Verify that the previous PHA is still accurate and reflects current process conditions
- Incorporate all changes made since the last PHA (new equipment, modified procedures, process chemistry changes)
- Review incident and near-miss history since the last analysis
- Confirm that all previous recommendations have been resolved
- Evaluate whether the methodology used previously is still appropriate
- Update risk rankings based on current operating experience and any changes to the risk matrix
Many facilities choose to conduct a complete redo of the PHA at the revalidation interval rather than simply updating the prior study, particularly when significant changes have occurred.
Common PHA Pitfalls
Treating PHA as a Compliance Exercise
When PHAs are conducted solely to satisfy regulatory requirements, the analysis lacks depth. Teams rush through nodes, accept existing safeguards without critical evaluation, and generate few meaningful recommendations. The result is a documented PHA that provides little actual risk reduction.
Inadequate Process Safety Information
PHAs conducted with outdated P&IDs, incomplete equipment data, or inaccurate operating procedures produce unreliable results. This is especially common at petroleum refineries and midstream facilities where decades of modifications may not be fully reflected in current documentation. The analysis is only as good as the information it is based on.
Weak Facilitation
A facilitator who lacks independence, methodology expertise, or the ability to manage group dynamics will produce a weaker analysis. The facilitator must challenge assumptions, probe for missing scenarios, and maintain methodological discipline without dominating the technical discussion.
Failure to Track Recommendations
Generating recommendations without a robust tracking system for resolution undermines the entire purpose of the PHA. OSHA has cited facilities for failing to promptly address PHA recommendations — this is one of the most common PSM enforcement findings.
Insufficient Operations Representation
PHAs conducted primarily by engineers without experienced operators miss the practical realities of how the process is actually run, including workarounds, startup challenges, and upset conditions that are not captured in design documentation.
How Do You Choose the Right PHA Methodology?
OSHA 29 CFR 1910.119(e) does not prescribe a specific methodology — the employer is responsible for selecting an approach appropriate to the complexity and hazards of the process. That flexibility is intentional, but it places the burden of a defensible selection on the facility. The right choice should reflect process complexity, available team expertise, time and resource constraints, and the level of scrutiny expected by regulators or internal standards.
| Factor | HAZOP | What-If | Checklist | What-If/Checklist | | ------------------------ | ----------------------------------------- | ------------------------- | ----------------------------------- | -------------------------------------- | | Process complexity | High | Medium | Low | Medium | | Team expertise required | High | Medium | Low | Medium | | Time investment | High (days to weeks) | Medium (days) | Low (hours to days) | Medium (days) | | New vs. existing process | Both | Both | Existing preferred | Both | | Regulatory expectation | Preferred for HHC facilities | Acceptable for most | Simple processes only | Acceptable for most | | Best for | Complex continuous processes, high-hazard | Batch, simpler continuous | Well-understood, standard processes | Moderate complexity, combined approach | | Documentation output | Detailed node-by-node | Scenario-based | Compliance-focused | Hybrid |
In practice, methodology selection follows a few well-established patterns:
- HAZOP is the gold standard for highly hazardous chemical (HHC) facilities. It is the methodology most frequently expected by OSHA inspectors for complex continuous processes, and it produces documentation that holds up under enforcement scrutiny.
- What-If analysis is well-suited to batch processes, early-phase project reviews, and initial screenings where the goal is broad hazard identification rather than exhaustive node-by-node analysis.
- Checklist approaches work best for well-understood processes with mature design standards, where the hazard space is largely known and the analysis objective is confirming compliance with established requirements.
- What-If/Checklist hybrids are a practical middle ground for moderate-complexity processes. They combine the open-ended scenario generation of What-If with the systematic coverage of a standardized checklist, reducing both the time investment and the risk of gaps.
- Methodology is not locked in at the initial PHA. A facility that used HAZOP for its initial study may revalidate using a What-If/Checklist approach if the process has not changed significantly — provided the team documents the rationale and the revalidation captures all changes since the prior analysis.
Key Takeaways
- PHA is the most critical PSM element — it identifies the hazards that every other element is designed to control.
- Choose the methodology based on process complexity: HAZOP for complex continuous processes, What-If for simpler operations, LOPA for semi-quantitative risk evaluation.
- Team composition determines PHA quality — include experienced operators, a skilled independent facilitator, and representation from engineering, maintenance, and safety.
- Revalidation every five years must be a genuine update, not a rubber-stamp of the previous study.
- Track every recommendation to documented resolution; unresolved PHA findings are among the most cited OSHA PSM deficiencies.
Assess Your Program
Is your PHA process identifying real risks or just checking a compliance box? Start with a free self-assessment.
For expert-led PHA facilitation, FidelisCore provides experienced facilitators who have led HAZOP, What-If, and LOPA studies across petroleum refineries, petrochemical plants, hydrogen production facilities, and LNG terminals.
Request PHA Facilitation Support →
Related Resources
- What is Process Safety Management? A Complete Guide — PHA is one of the 14 PSM elements. Understand the full framework.
- The 14 Elements of PSM: A Practitioner's Breakdown — Practical guide to all 14 PSM elements with common gaps.
- Management of Change (MOC): Best Practices — MOC and PHA are tightly linked; changes often trigger PHA updates.
- What is a Pre-Startup Safety Review (PSSR)? — PSSR verifies that PHA recommendations are resolved before startup.
Fidelis Associates provides PHA facilitation and process safety consulting through FidelisCore. Our team has facilitated hundreds of PHAs across refining, petrochemical, hydrogen, and specialty chemical operations using HAZOP, What-If, LOPA, and SIL verification methodologies.
Ready to strengthen your operations?
Talk to a Fidelis specialist about how we can help.