Control system and instrumentation changes, including setpoint adjustments, alarm rationalization, DCS logic modifications, safety instrumented system bypasses, and instrument range changes, frequently trigger MOC requirements that facilities overlook. OSHA has addressed a range of instrumentation scenarios, generally finding that changes to safety-critical instrument functions require the same documented hazard review and employee communication as physical equipment changes. These letters are especially relevant as facilities migrate to digital control systems where changes can be made quickly without the physical evidence that a wrench was used.

What OSHA Has Said

Nov 29, 2005
DCS Setpoint and Logic Changes as MOC-Triggering Events
OSHA addresses whether changes to distributed control system setpoints, alarm limits, and control logic require MOC. Changes affecting process safety function, even software-only changes, require MOC documentation.
Read OSHA Letter ↗
Mar 23, 2000
Safety Instrumented System Changes and PSM MOC
OSHA evaluates changes to SIS trip setpoints and logic. Any change that affects when a safety device activates or what action it takes is a change to process technology that requires MOC.
Read OSHA Letter ↗
Jun 23, 2023
Alarm Management and MOC: Rationalization Campaigns
OSHA addresses alarm rationalization projects that modify alarm setpoints and priorities across large portions of the control system. Such projects require a systematic MOC process, not individual work orders.
Read OSHA Letter ↗

⚡ Key Compliance Takeaway

A keyboard stroke in the DCS is still a change. Instrument setpoint changes, alarm limit adjustments, and SIS logic modifications that affect process safety function require MOC. Implement a formal software change management system integrated with your MOC process.