Management of change is not just a best practice—it is a regulatory requirement under multiple safety and environmental standards. Organizations that operate across jurisdictions or hold multiple certifications often need to satisfy MOC requirements from several regulations simultaneously. This guide compares what each major standard requires, highlights the differences, and explains how a single MOC software program can satisfy them all.
New — AI-assisted MOC forms: Ecesis now offers an AI MOC Question Generator that suggests review questions and, where a regulation applies, includes the citation (for example, 29 CFR 1910.119(l) or 40 CFR 68.75) so reviewers understand why each question matters. Suggestions are a starting point for your committee, not a substitute for professional or regulatory review.
MOC Requirements at a Glance
The table below summarizes what each major standard requires for management of change. The sections that follow explain each one in detail.
| Regulation | Citation | What it requires | Key trigger |
|---|---|---|---|
| OSHA PSM | 29 CFR 1910.119(l) | Written MOC procedures addressing technical basis, safety and health impact, procedure updates, time period, and authorization; train affected employees; update PSI | Changes to covered process chemicals, technology, equipment, procedures, or facilities (except replacement in kind) |
| EPA RMP | 40 CFR 68.75 | MOC procedures equivalent to PSM for covered processes; changes reviewed and documented before implementation | Changes to covered processes at RMP-regulated facilities |
| ISO 45001 | Clause 8.1.3 | Establish a process to control planned changes affecting occupational health and safety, and review the consequences of unintended changes | Planned changes to processes, products, services, or legal requirements |
| ISO 14001 | Clause 8.1 | Control planned changes and review the consequences of unintended changes that affect environmental performance | Planned or unintended operational changes with environmental impact |
| API RP 1173 | MOC element | Management of change within a pipeline safety management system; evaluate and control the risk of changes | Changes to pipeline design, operation, maintenance, or organization |
| COMAH / Seveso III | UK COMAH Regs | Manage modifications at establishments handling dangerous substances and review major-accident implications | Modifications to plant, process, or the nature or quantity of dangerous substances |
OSHA PSM — 29 CFR 1910.119(l)
Scope and Applicability
Applies to facilities that handle highly hazardous chemicals above threshold quantities. The Process Safety Management standard is the foundational MOC regulation in the United States and establishes the requirements that most other standards build upon.
Required MOC Elements
OSHA PSM requires written procedures to manage changes (except replacements-in-kind) to process chemicals, technology, equipment, and procedures. Before any change is implemented, the employer must address:
- The technical basis for the proposed change
- Impact of the change on safety and health
- Modifications to operating procedures
- Necessary time period for the change
- Authorization requirements for the proposed change
Additionally, employees involved in operating a process and maintenance and contract employees whose job tasks will be affected must be informed of, and trained in, the change prior to startup.
EPA RMP — 40 CFR 68.75
Scope and Applicability
Applies to facilities that use regulated substances above threshold quantities under the EPA Risk Management Program. The MOC requirements under RMP are nearly identical to OSHA PSM, as the EPA modeled its rule after the OSHA standard.
Required MOC Elements
EPA RMP requires the same five considerations as OSHA PSM (technical basis, safety and health impact, procedure modifications, time period, and authorization). The primary difference is focus: while OSHA PSM protects workers, EPA RMP is designed to protect the public and the environment from offsite consequences of chemical releases.
- Written MOC procedures covering changes to process chemicals, technology, equipment, and procedures
- Employee notification and training before startup of the changed process
- Update of process safety information to reflect the change
ISO 45001 — Section 8.1.3
Scope and Applicability
ISO 45001 is the international standard for occupational health and safety management systems. Unlike OSHA PSM, which targets specific high-hazard industries, ISO 45001 applies to any organization seeking to improve OH&S performance.
Required MOC Elements
ISO 45001 Section 8.1.3 requires organizations to establish a process for the implementation and control of planned temporary and permanent changes that can impact OH&S performance, including:
- New products, services, and processes, or changes to existing products, services, and processes (including work locations, work organization, working conditions, equipment, and workforce)
- Changes in legal requirements and other requirements
- Changes in knowledge or information about hazards and OH&S risks
- Developments in knowledge and technology
The standard also requires the organization to review the consequences of unintended changes and take action to mitigate any adverse effects, as necessary (Section 8.1.3).
ISO 14001 — Section 8.1
Scope and Applicability
ISO 14001 is the international standard for environmental management systems. Its MOC requirements focus on changes that could affect environmental aspects and impacts.
Required MOC Elements
ISO 14001 Section 8.1 requires organizations to control planned changes and review the consequences of unintended changes, taking action to mitigate any adverse effects. Specifically, organizations must consider:
- Changes to processes or the environmental management system
- Potential environmental impacts of planned changes before they are introduced
- Actions to mitigate adverse environmental effects from unintended changes
API RP 1173 — Pipeline Safety Management Systems
Scope and Applicability
API RP 1173 provides a framework for pipeline safety management systems. It applies to operators of hazardous liquid and gas pipelines and includes management of change as a core element.
Required MOC Elements
API RP 1173 requires operators to establish a management of change process that:
- Identifies changes that could affect pipeline safety before they are implemented
- Evaluates the risks associated with those changes
- Ensures appropriate review and approval
- Communicates changes to affected personnel
- Documents the change management process
- Covers changes to technology, equipment, procedures, and organizational structure
COMAH (UK) — Control of Major Accident Hazards
Scope and Applicability
The COMAH regulations apply to establishments in the United Kingdom that store or use dangerous substances above specified thresholds. COMAH is the UK equivalent of the EU Seveso III Directive.
Required MOC Elements
COMAH requires operators to identify and evaluate major accident hazards, including those that arise from changes. Specifically:
- The safety report must address the management of change within the safety management system
- Modifications to installations, processes, or storage that could have safety implications must be assessed before implementation
- Changes to organizational structure and staffing that could affect safety must also be managed
Building One MOC Program for Multiple Regulations
The good news is that these regulations share common principles: identify the change, assess the risks, obtain appropriate approvals, communicate to affected personnel, and document everything. A well-designed MOC program built on these principles can satisfy all applicable standards simultaneously.
Practical Approach
- Design for the superset — Build your MOC forms and workflows to capture the broadest set of requirements. If you need to satisfy both OSHA PSM and ISO 45001, your forms should cover both process changes and organizational changes.
- Use conditional logic — Not every change needs every question. MOC software with conditional logic can show OSHA-specific fields only when the change involves highly hazardous chemicals, and ISO-specific fields only when the change affects your management system.
- Map regulatory citations — For each section of your MOC form, document which regulatory requirement it satisfies. This makes audits straightforward and demonstrates intentional compliance rather than coincidental overlap.
- Train by regulation — Help reviewers understand which regulatory lens to apply based on the type of change. Environmental reviewers need to think about ISO 14001 and EPA RMP impacts, while safety reviewers focus on OSHA PSM and ISO 45001.
Ecesis EHS Software Solutions
MOC Software
Automated workflows, risk assessments, and change control
Process Safety Management
Comprehensive PSM compliance and documentation
EPA RMP Software
Risk management program compliance and reporting
ISO 45001 Software
Occupational health and safety management systems
ISO 14001 Software
Environmental management system compliance
EHS Compliance
Comprehensive compliance tracking and management
Frequently Asked Questions
Which regulations require a management of change process?
Several. OSHA Process Safety Management (29 CFR 1910.119) and EPA Risk Management Program (40 CFR 68.75) require MOC for covered processes. ISO 45001 and ISO 14001 require control of change for health, safety, and environmental management systems. API RP 1173 requires it for pipeline safety, and the UK COMAH regulations require it for major-hazard establishments.
What is the difference between OSHA PSM and EPA RMP MOC requirements?
The two are closely aligned. OSHA PSM (1910.119(l)) protects worker safety inside the facility, while EPA RMP (68.75) protects the surrounding community and environment. Their MOC provisions are nearly identical, so a single MOC process can generally satisfy both for a covered process.
Does ISO 45001 require an MOC process?
Yes. Clause 8.1.3 requires organizations to establish a process to manage planned changes that affect occupational health and safety performance, and to review the consequences of unintended changes and act to mitigate them.
Are temporary changes covered by MOC regulations?
Yes. OSHA PSM explicitly requires the MOC procedure to address the necessary time period for a change, which captures temporary modifications, and EPA RMP mirrors this. Temporary changes must be reviewed, authorized, given a defined expiration, and closed out like any other change.
What is the difference between a change and a replacement in kind?
A replacement in kind meets the design specification of the item being replaced and does not trigger MOC under OSHA PSM or EPA RMP. Any deviation from the original design specification is a change that must go through the full MOC review.
Can one MOC program satisfy multiple regulations?
Yes. Because the standards share the same core logic, a well-designed MOC program can satisfy OSHA, EPA, ISO, and other requirements at once when it captures the most stringent requirement for each field and applies the right workflow to each change.
How does MOC software help with multi-regulatory compliance?
MOC software applies the correct review path and required fields for each regulation, links changes to hazard analyses and pre-startup reviews, tracks temporary-change expirations, and maintains the documentation and audit trail that OSHA, EPA, and ISO auditors expect.
