HAZOP vs PHA: Methodologies, Differences, and Where LOPA Fits

HAZOP versus PHA is not really a versus. A Process Hazard Analysis is the regulatory obligation under OSHA’s Process Safety Management standard, and a Hazard and Operability study is one of seven methods you can use to meet it. PHA is the exam you have to take. HAZOP is one way to answer the questions. Facilities that treat them as competing options either duplicate effort or assume they have satisfied a requirement they have not.

How PHA and HAZOP Relate

OSHA’s PSM standard at 29 CFR 1910.119 requires employers to perform an initial process hazard analysis on every covered process. The regulation says the PHA must “identify, evaluate, and control the hazards involved in the process.”¹ To meet that obligation, the employer picks one or more methodologies from a list the regulation spells out. HAZOP is on that list. So are What-If, Checklist, Fault Tree Analysis, and several others.

The confusion usually starts because HAZOP is the most recognizable name in the group. In petroleum refining and chemical manufacturing, it is the default choice for complex continuous processes, so people hear “HAZOP” far more often than “PHA.” Calling every safety study a HAZOP is like calling every sport basketball. The broader category matters because your process might not need a full HAZOP, and a different method could satisfy the same legal requirement at lower cost and in less time.

The Seven Accepted PHA Methodologies

The regulation at 29 CFR 1910.119(e)(2) lists exactly seven options for conducting a PHA.² HAZOP is one of them, and knowing the others is what makes the comparison meaningful:

What-If. A brainstorming approach where the team poses open-ended questions about what could go wrong. Works well for simpler processes or early-stage designs where detailed engineering data is still limited.
Checklist. Compares process features against a pre-built list of known hazards and industry standards. Fast and consistent, but only as good as the checklist itself.
What-If/Checklist. Combines the creative scope of What-If with the structure of a checklist. A solid middle ground for moderately complex operations.
HAZOP. The most structured and detailed of the common methods. Systematically examines process parameters for deviations from design intent using standardized guide words.
Failure Mode and Effects Analysis (FMEA). Focuses on individual equipment components, asking how each one could fail and what that failure would do to the larger system.
Fault Tree Analysis. Works backward from a specific undesired event, mapping out every combination of equipment failures and human errors that could cause it.
Any appropriate equivalent methodology. A catch-all allowing newer or specialized techniques, provided they meet the same rigor standard.

You can also combine methods. A facility might run a What-If/Checklist analysis on a straightforward storage area and a full HAZOP on a complex reactor system, and both count toward the same PHA obligation.

What Makes HAZOP Different

A HAZOP breaks a process into discrete sections called nodes. Each node is a manageable piece of the system, such as a section of piping between two vessels, a heat exchanger, or a reaction step. The team then works through each node by combining process parameters with standardized guide words to generate potential deviations from the intended design.

The standard guide words come from IEC 61882 and cover both quantity and quality:

No / Not. Complete loss of the intended function (no flow, no reaction).
More. Quantitative increase (higher pressure, higher temperature).
Less. Quantitative decrease (reduced flow, lower concentration).
Reverse. The opposite of what’s intended (backflow).
Part Of. Only some of the design intent is achieved (incomplete mixing).
As Well As. Something extra happens alongside the intended function (contamination).
Other Than. Complete substitution of the intended result (wrong material).

For batch or sequential processes, additional guide words like “Early,” “Late,” “Before,” and “After” address timing deviations. Each combination of parameter and guide word generates a scenario the team must evaluate. Applying “More” to “Pressure” in a reactor node forces the group to walk through what causes overpressure, what happens when it occurs, and whether existing relief valves and alarms are sufficient. If current safeguards fall short, the team records a recommendation for additional protection.

Every finding gets documented in a structured worksheet that logs the node, the deviation, its causes and consequences, existing safeguards, and any recommended actions. That worksheet is what OSHA inspectors will ask to see. The rigor of that node-by-node, word-by-word coverage is what separates HAZOP from a What-If session, and it is also why HAZOP is more time-consuming than the alternatives.

Choosing Between HAZOP and Another PHA Method

The regulation says your PHA method must be “appropriate to the complexity of the process.”¹ In practice, that means matching the tool to the job. A few factors drive the decision:

Process complexity. Continuous processes with dense piping, multiple control loops, and reactive chemistries almost always call for a HAZOP. The structure catches subtle interactions that broader methods miss. Simpler batch operations or storage-only facilities can usually get by with a What-If or Checklist approach.
Project phase. Early conceptual designs benefit from What-If brainstorming because detailed P&IDs may not exist yet. Operational revalidations of mature processes tend to favor HAZOP because the engineering data is available and the goal is to catch what has drifted since the last study.
Hazard severity. Processes involving highly toxic or highly reactive chemicals, or those near populated areas, warrant the most rigorous method available. An OSHA inspector reviewing a chlorine handling system is going to scrutinize a What-If analysis a lot harder than a HAZOP.
Resources. A HAZOP on a large continuous process can take a full team several weeks. Smaller operations may not have the staffing or budget for that, and the regulation doesn’t demand it when a less intensive method is genuinely appropriate.

The worst mistake is choosing a lightweight method because it is cheaper when the process genuinely needs deeper scrutiny. OSHA can cite you not for picking the wrong method by name, but for failing to adequately identify hazards, and an underscoped study is the fastest route to that citation.

Where LOPA Fits

Layer of Protection Analysis, or LOPA, is neither a PHA method nor a substitute for HAZOP. It picks up where qualitative methods leave off. After a HAZOP identifies hazard scenarios, LOPA assigns rough numerical failure rates to each safeguard and checks whether existing protections are genuinely adequate. Some facilities run LOPA during the HAZOP itself with the same team; others hand off a list of high-priority scenarios to a smaller specialized group afterward. Either way, the second pass often challenges assumptions the original team made about how reliable a given safeguard actually is.

Requirements That Apply No Matter Which Method You Pick

The choice between HAZOP and another methodology does not change the surrounding obligations, and this is where facilities most often stumble.

OSHA requires that the PHA team have expertise in engineering and process operations, include at least one employee with hands-on experience and knowledge specific to the process being evaluated, and include at least one member who is knowledgeable in the particular PHA methodology being used.² That last requirement is where external facilitators often come in. A HAZOP facilitator does not need a specific certification or license, but OSHA compliance officers can interview team members and review training records to verify they actually understood the methodology they used.³ Employers must also consult with employees and their representatives on the conduct and development of every PHA, and give them access to the completed analysis.¹

Whichever method produced the findings, the employer must establish a system to promptly address the team’s recommendations, document what actions will be taken, develop a written schedule for completing them, and communicate results to every employee whose work could be affected.¹ “Promptly” and “as soon as possible” are the operative terms. An employer can accept, modify, or reject a recommendation, but rejections must be documented with a clear rationale. Simply ignoring a finding is where willful violation citations come from. During inspections, OSHA compliance officers routinely pull up the PHA report and cross-reference it against the facility’s action tracking system.

At least every five years after the initial analysis, the employer must update and revalidate the PHA using a team that meets the same composition requirements as the original study.¹ The revalidation confirms the analysis still reflects the current process, accounting for equipment changes, procedural modifications, or new chemicals introduced since the last review. It must also address previous incidents with catastrophic potential, engineering and administrative controls and how they interact, consequences of those controls failing, facility siting relative to occupied buildings, and human factors. A revalidation that only re-checks the original hazard scenarios without touching those broader elements does not satisfy the standard, whether the underlying method is HAZOP or anything else on the list.

1
eCFR. 29 CFR 1910.119 – Process Safety Management of Highly Hazardous Chemicals
2
eCFR. 29 CFR 1910.119 – Process Safety Management of Highly Hazardous Chemicals
3
Occupational Safety and Health Administration. Process Hazard Analysis Facilitators Training Requirements