The rules that keep you alive

Plant safety rules can look like paperwork until you understand the hazard behind each one. This page translates the rulebook into what a worker actually does.

There's a federal rulebook for working inside a fence, and most people who follow it every day have never read it. This is the rulebook in plain words — what each rule is, where it comes from, and what it means when you're the one with the badge. The section numbers are real; the sentences are ours.

The big one: process safety management

29 CFR 1910.119. The rule that governs every refinery and most chemical plants. It has fourteen parts, and the plant has to do all of them: know its chemicals and its equipment on paper; run a hazard study of every process at least every five years; write step-by-step procedures for start-up, normal running, emergencies and shutdown, and review them yearly; train operators and retrain them at least every three years; review any change before it goes live; investigate any incident that could have been a catastrophe within forty-eight hours; audit the whole program every three years. Two parts are about you directly. Employee participation — you have a legal right to see the plant's safety analyses and to be consulted on them. Contractors, 1910.119(h) — the plant must screen your employer's safety record, tell you the hazards and the emergency plan, and control your access; your employer must train you and report hazards it finds. That paragraph is the reason for ISTC on Decker Drive and the badging trailer. It isn't company red tape. It's federal law.

The permit

A permit is a piece of paper that says: this job, this place, this time, is authorized, and the specific dangers have been checked. The rule names a hot-work permit — welding, cutting, grinding, anything that makes a spark near a process — and requires that the fire precautions be verified and written down before the work begins and that the permit cover a specific location and date. Nothing on a turnaround happens without one. When your foreman says "the permit's not signed," that's the law, not caution.

The hole watch

29 CFR 1910.146, permit-required confined spaces. Tanks, vessels, drums and towers can be confined spaces when they are large enough to enter, have limited entry or exit, and are not designed for continuous occupancy. A confined space becomes permit-required when it also has a serious hazard, such as a hazardous atmosphere, engulfment risk or another recognized danger. The rule creates a job: the attendant, which the crews call hole watch. The attendant stays outside the whole time, counts every person in and out, keeps in contact, and has the legal duty to order everyone out the moment anything looks wrong — and to call rescue rather than go in. The people inside have the duty to leave immediately when told. It is the most important job on a turnaround for the least pay, and it's where a lot of careers start. Take it seriously; the rule does.

The lock

29 CFR 1910.147, lockout/tagout. Before anyone works on a pump, a motor, a line that could start or release energy, it's locked in a safe state, and the normal rule is that the person who put the lock on removes it. OSHA allows an employer-directed exception when that worker is unavailable, but only under a documented procedure with verification, attempted contact and notice before the worker returns. On a shared job every worker puts their own lock through the same hasp — a dozen padlocks on one lockbox is a normal sight at a permit shack. If your lock isn't on it, the job isn't yours to work.

The fire watch

29 CFR 1910.252. When hot work is done near anything that can burn, a fire watch stands by with an extinguisher, knows how to raise the alarm, and stays thirty minutes after the last spark. That's the whole job, and the Chemical Safety Board's fatal-incident files are full of cases where the thirty minutes were skipped.

The gas you can't smell

Hydrogen sulfide. The rotten-egg gas that comes with sour crude. OSHA's ceiling is 20 parts per million; NIOSH's "immediately dangerous" level is 100. The trap is that at dangerous levels H2S kills your sense of smell first — you stop smelling it precisely when it's about to kill you. That's why the monitor is clipped to your collar and not optional, and why it's on the government's list as the reason.

The chemical with its own rule

29 CFR 1910.1028, benzene. A known human carcinogen, made and handled on the aromatics side of the plants. The limit is one part per million averaged over eight hours; the action level — where medical monitoring, blood tests and exposure records kick in — is half that. If your job puts you near benzene, your employer owes you a doctor and a record, by law.

The mask

29 CFR 1910.134, respiratory protection. A respirator only works if it seals to your face, so the rule requires a medical clearance, a fit test before first use and every year after, and a new fit test if your face changes — weight, scars, dentures. A respirator you weren't fit-tested on isn't protecting you; it's decorating you.

The clothes

FR. OSHA doesn't have a flame-resistant-clothing rule by name. It has 1910.132, which requires the employer to assess hazards and issue protective equipment, and a 2010 enforcement memo saying that in oil and gas operations with flash-fire risk, that means FR clothing. The performance standard the industry uses is NFPA 2112. So: FR on the site is your employer's decision under a federal duty, the plant's contract requires it, and the stores on Garth and Bayway sell it. Cotton under it; never polyester.

Four things people call "the card"

On a site, four different things get called "the card," and they answer four different questions. The safety-council card says you sat through the standardized hazard orientation. The site badge says this plant has cleared you for its gate after its own orientation. The craft certification — a welder's per process and position, an inspector's API card, a crane operator's national card — says you can do a specific job to a specific standard. The TWIC says the federal government has vetted you for unescorted access to a secure maritime area, and nothing else. None of them is the others. A person can hold all four or one; the confusion between them is where a lot of first-week trouble starts.

The card and the class

The safety-council card. ISTC on Decker Drive is a training council; the Basic Orientation Plus course it gives is a standardized contractor orientation that the plants accept in place of doing it themselves, and the card travels between member plants. It exists because of 1910.119(h) above. It isn't a license and it isn't a skill; it's proof you sat through the hazards.
OSHA 10 and OSHA 30. Voluntary awareness courses taught by authorized trainers. Useful, often required by a contractor, and not — the agency says so itself — a certification of competence to do any particular job.
The site badge. Every plant runs its own orientation and badging on top of the card. ExxonMobil's is the Baytown Area Badging Office, 2303 Decker Drive — the name the jobs page already uses. Published hours conflict across dated company and contractor material; confirm the current window with the badging office or your employer before you drive over, rather than trust a printed schedule here.

The test

Drug testing on a plant is your employer's policy unless you're in a federally regulated safety-sensitive job — a commercial driver, a pipeline operator — where it's 49 CFR Part 40 and the procedure is fixed by law. Either way, on a Gulf Coast site it's universal, random, and the first question at the gate.

The waterside card

TWIC. If your job takes you to a dock or a marine terminal, the Transportation Security Administration requires a Transportation Worker Identification Credential: apply online, fingerprints and photo in person, a background check, about a hundred and twenty-five dollars, good for five years.

How to read a contractor's safety record

Before you take a job with a contractor, you can know how safe they are, in two numbers they're used to being asked for. TRIR — total recordable incident rate — is injuries per two hundred thousand work-hours, roughly per hundred workers a year; it comes straight off the federal injury log every employer keeps. The whole refining sector runs about one; a good contractor is under one; a contractor who won't tell you theirs has told you. EMR — experience modification rate — is the number an insurer gives them: one is average, below one is better than average, above one costs them money and should worry you. Both are asked at every plant's contractor screening, because the federal rule requires the plant to evaluate contractor safety performance. You're allowed to ask too. The good ones are proud of the answer.

The morning brief, from the inside

Every day on every site starts the same way: a circle of hard hats, a supervisor with a clipboard, the day's permits, the hazards, the weather, the one thing that went wrong somewhere yesterday. Newcomers find it ceremonial. It is, in the old sense — a rite that says, out loud, before anything sparks, that the people in the circle intend to go home. The oldest hands take it most seriously. They've stood in circles that were one person smaller the next day, and they know that every line on this page was once a name.

The rule that isn't written

Every rule above exists because someone died without it. The permit, the hole watch, the lock, the thirty minutes: each line in the federal register was written after a funeral. The people who run safety on a site aren't the enemy of the schedule; they are the memory of those funerals, and the authority to stop work is the most important authority on the site. A crew that understands that finishes on time more often, not less.

Read it plainly

The permit controls one job.
The lock controls one energy source.
The attendant watches one entry.
The monitor watches the air.
The respirator needs a seal.
FR limits one kind of injury.
Training does not create craft skill.
A badge does not prove competence.
The procedure still matters after training.
Stop-work authority has to be usable.
Contractors share the same process hazards.
Site rules can exceed federal minimums.
Good crews ask before guessing.
Good supervisors answer plainly.
The safest shortcut is usually no shortcut.

Sources

OSHA, 29 CFR 1910.119 (process safety management), 1910.146 (permit-required confined spaces), 1910.147 (lockout/tagout), 1910.252 (welding, cutting and brazing), 1910.1000 Table Z-2 (hydrogen sulfide), 1910.1028 (benzene), 1910.134 (respiratory protection), 1910.132 (personal protective equipment); OSHA enforcement memo on flame-resistant clothing in oil and gas (2010); OSHA Outreach Training Program pages. NIOSH, IDLH value for hydrogen sulfide. Association of Reciprocal Safety Councils, Basic Orientation Plus; Industrial Safety Training Council, Baytown. U.S. Department of Transportation, 49 CFR Part 40. Transportation Security Administration, TWIC program. U.S. Chemical Safety Board, hot-work safety materials.

When a fact isn't confirmed, this site says so rather than guess — the safest sentence is about why that rule exists.

En español

Las reglas que lo mantienen vivo: hay un reglamento federal para trabajar dentro de la cerca. La grande: 29 CFR 1910.119, gestión de seguridad de procesos — catorce partes; la planta debe conocer sus químicos y equipos por escrito, estudiar los riesgos de cada proceso al menos cada cinco años, tener procedimientos escritos, capacitar y recapacitar cada tres años, revisar cada cambio, investigar cada incidente en cuarenta y ocho horas, auditar cada tres años. Dos partes son sobre usted: participación de los empleados (tiene derecho legal a ver los análisis de seguridad) y contratistas, 1910.119(h) — la planta debe revisar el récord de su empleador, informarle los peligros y controlar su acceso; por eso existen ISTC en Decker Drive y la caseta de credenciales. El permiso: un papel que dice que este trabajo, en este lugar, a esta hora, está autorizado y los peligros se revisaron; el permiso de trabajo en caliente es ley. El vigilante de espacios confinados (1910.146): un tanque, recipiente, tambor o torre puede ser un espacio confinado si permite entrar, tiene entrada o salida limitada y no fue diseñado para ocupación continua; requiere permiso cuando además presenta un peligro serio. El vigilante se queda afuera, cuenta a todos y tiene el deber legal de ordenar la salida en cuanto algo se vea mal. El candado (1910.147): antes de trabajar en un equipo se bloquea, y la regla normal es que quien puso el candado lo quite; OSHA permite una excepción dirigida por el empleador cuando esa persona no está disponible, pero solo bajo un procedimiento documentado con verificación, intento de contacto y aviso antes de que vuelva al trabajo. El guardia de incendio (1910.252): con extintor, treinta minutos después de la última chispa. El gas que no se huele: sulfuro de hidrógeno — límite de OSHA 20 ppm; a niveles peligrosos mata el olfato primero; por eso el monitor en el cuello. El benceno (1910.1028): cancerígeno; un ppm en ocho horas; a la mitad empieza la vigilancia médica obligatoria. La máscara (1910.134): prueba de ajuste antes de usarla y cada año. La ropa FR: OSHA exige evaluar el riesgo y dar protección; el estándar es NFPA 2112. La tarjeta de ISTC prueba que se sentó a escuchar los peligros; OSHA 10 y 30 son cursos voluntarios, no licencias. Las pruebas de drogas son política del empleador salvo en trabajos federales de seguridad. TWIC para los muelles. Cada regla existe porque alguien murió sin ella; la autoridad de detener el trabajo es la más importante del sitio.

Cómo leer el récord de seguridad de un contratista. Dos números que están acostumbrados a que les pidan: TRIR — lesiones por cada doscientas mil horas, más o menos por cada cien trabajadores al año; todo el sector refinador anda en uno; un buen contratista está debajo de uno; el que no lo dice ya lo dijo. EMR — el número de la aseguradora: uno es promedio, menos es mejor, más debe preocuparle. Ambos se piden en la revisión de contratistas de cada planta, porque la regla federal lo exige; usted también puede pedirlos. La junta de la mañana, desde adentro. Cada día en cada sitio empieza igual: un círculo de cascos, un supervisor con tabla, los permisos, los peligros, el clima, lo que salió mal en algún lado ayer; los nuevos lo ven como ceremonia; lo es, en el sentido antiguo — un rito que dice en voz alta, antes de que algo chispee, que la gente del círculo piensa volver a casa; los más viejos lo toman más en serio porque han estado en círculos que al día siguiente tenían una persona menos.