Epa Risk Management Program · Cross-discipline · 5 min read

EPA Risk Management Program (RMP) — 40 CFR Part 68 (Clean Air Act §112(r))

EPA Risk Management Program (RMP) — 40 CFR Part 68 (Clean Air Act §112(r))

Records covered (merged here): chemical-process-reg-018 (Chemical/Process, flagship regulation). Safety/HSE sibling records point here as well. Companion: the shared OSHA PSM brief (osha-psm-1910-119.md) — RMP protects the surrounding community and environment where PSM protects workers; many facilities are subject to both.

1. What it is, who issues and enforces it

The Risk Management Program, 40 CFR Part 68, implements Clean Air Act §112(r) (added by the 1990 CAA Amendments). Issuer and enforcer: the US Environmental Protection Agency. It requires facilities holding more than threshold quantities of regulated substances to develop a risk management plan, including a hazard review/offsite consequence analysis and a prevention program, and to file a summary (the RMP) with EPA. Enforcement runs through EPA regional offices and delegated state programs, via inspections and post-release enforcement; violations are also enforceable by citizen suits under the CAA.

2. Scope, triggers, thresholds

RMP applies to any stationary source holding a regulated substance above its threshold quantity in a process — 140 listed substances (77 toxic, 63 flammable) with individual thresholds (e.g., chlorine 2,500 lb, anhydrous ammonia 10,000 lb, propane 10,000 lb in certain uses). The threshold is aggregate on-site quantity in the process.

Three program levels scale the prevention-program burden:

  • Program 1 — processes with no offsite-consequence history and no public receptors in the worst-case circle; minimal prevention requirements (essentially the hazard review plus certification).
  • Program 2 — streamlined prevention program; covers processes not eligible for Program 1 and not in the listed high-hazard industries.
  • Program 3 — full prevention program, closely paralleling OSHA PSM's 14 elements; applies to processes in 10 specified NAICS sectors (including chemical manufacturing, petroleum refining, pulp/paper) or subject to OSHA PSM.

3. Key compliance obligations

  1. Hazard review / Process Hazard Analysis. Program 2 requires a hazard review; Program 3 requires a full PHA (compatible with the OSHA PSM PHA — one analysis can satisfy both, but the RMP filing must reflect it).
  2. Offsite Consequence Analysis (OCA). Worst-case release scenario and alternative release scenario modeling for each regulated toxic/flammable substance; defines the vulnerable zone (population, public receptors, environmental receptors). This is the element with no PSM equivalent and the one that drives community-right-to-know.
  3. Five-year accident history. Reportable releases in the prior five years.
  4. Prevention program. Program 2: safety information, hazard review, operating procedures, training, maintenance, compliance audits, incident investigation. Program 3: the PSM-equivalent suite (process safety information, PHA, operating procedures, training, mechanical integrity, MOC, pre-startup review, compliance audits, incident investigation, employee participation, hot work, contractors).
  5. Emergency response program. Coordination with local responders; exercises.
  6. RMP filing. Submit the RMP (executive summary, registration, OCA data, prevention program summary, accident history) to EPA via RMP*eSubmit; resubmit at least every 5 years and within 6 months of certain changes. RMP data (minus OCA detail) is publicly available — a genuine transparency obligation, not just a filing.
  7. Safer Technology and Alternatives Analysis (STAA). The 2024 RMP amendments (83 FR-era rule finalized March 2024, with phased compliance) require certain Program 3 facilities (refineries, chemical manufacturers, etc., in specified NAICS codes, generally those with prior accidents or near fenceline communities) to evaluate safer technologies and alternative designs during PHAs — the most significant substantive addition in the rule's history.

4. Penalties and consequences

CAA §113 penalties (inflation-adjusted; verify current figures):

  • Administrative: up to ~$120,000+ per violation per day in higher tiers.
  • Civil judicial: up to ~$120,000+ per day per violation.
  • Criminal: knowing violations causing endangerment carry multi-year imprisonment.

Post-release RMP enforcement cases routinely settle in the millions with supplemental environmental projects. The §112(r)(1) General Duty Clause — which applies to all stationary sources handling extremely hazardous substances regardless of thresholds — is independently enforceable and is EPA's tool for facilities below RMP thresholds.

5. Version and live changes (checked 2026-09-30)

  • 2024 RMP final rule (published March 2024): added STAA for specified Program 3 processes, third-party compliance audit triggers (after reportable accidents), root-cause analysis for incidents, employee participation enhancements, community notification and information-availability provisions, and emergency-response exercise requirements. Compliance dates are phased 2025–2027 depending on the provision — as of September 2026, most provisions are in effect or imminently due.
  • Litigation status: industry challenges to the 2024 rule were filed; as of this writing the rule remains in effect (no vacatur). Flag: check current D.C. Circuit status before advising a client the STAA or third-party-audit provisions are stayed — they were not stayed as of September 2026, but this is live litigation territory.
  • Broader EPA reconsideration posture in 2025–2026 (as seen in the OOOOb/OOOOc methane actions) has not, as of September 2026, produced a proposal to roll back the 2024 RMP rule — but regulatory posture can change; verify.
  • CCPS Certified Process Safety Professional (CCPSC) — flagship process-safety credential; RMP prevention programs are core exam/body-of-knowledge territory.
  • TÜV Rheinland Functional Safety Engineer — SIS safeguards credited in PHAs underpin both PSM and RMP prevention claims.
  • PE (Chemical) / CEng (IChemE) — professional licensure behind PHA leadership and OCA engineering work.

7. Honest flags

  • Penalty figures are inflation-adjusted; verify current numbers.
  • The 2024 rule's phased compliance dates mean some provisions' obligations depend on the calendar — always check the provision-specific date.
  • Litigation over the 2024 amendments is the key uncertainty; this brief reflects the rule as in effect in September 2026.

Covers catalogue record: chemical-process-reg-018 — the single canonical RMP record; sibling disciplines reference this brief.


Original ETS reference writing, verified against public sources on 2026-09-30. Thin sourcing is flagged inline. Not legal advice — confirm current editions with the issuing body.

Next step

Credentials prove you studied. ETS proves the part works.

The Academy maps to the codes your auditors ask about — PPAP, APQP, FMEA, GD&T, ISO 13485 — taught by engineers who have defended designs in production and in court.

  • NDA on request
  • Senior engineer replies in one business day
  • Fixed price where applicable
  • Your data stays yours