EPA Risk Management Program (40 CFR Part 68)
EPA's Risk Management Program rule under Clean Air Act section 112(r)(7) (40 CFR Part 68): for facilities holding more than a threshold quantity of a listed toxic or flammable substance, the program levels, management system, worst-case and alternative release analyses and accident history, the Program 2 and Program 3 prevention programs (process safety information, hazard analysis with safer technology analysis, procedures, training, mechanical integrity, change management, audits including third-party audits, incident investigation with root cause analysis, employee participation, hot work, contractors), emergency response coordination, programs and exercises, the risk management plan submitted to EPA, and public information duties. Built from the eCFR text current to September 22, 2026, which carries the 2024 amendments; EPA's 2026 proposal to roll some of them back is not final.
EPA Risk Management Program (40 CFR Part 68) is a compliance framework from United States (federal; delegated to state and local implementing agencies where approved under CAA 112(l)) with 8 domains and 51 controls that map to 4 other frameworks. The largest domains are Subpart D: Program 3 prevention program – EPA Risk Management Program (40 CFR Part 68) (13 controls), Subpart G: Risk management plan – EPA Risk Management Program (40 CFR Part 68) (12 controls), Subpart C: Program 2 prevention program – EPA Risk Management Program (40 CFR Part 68) (9 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (8)
Subpart A: General, program levels and management – EPA Risk Management Program (40 CFR Part 68)
| Code | Title |
|---|---|
| epa-risk-management-program-40-cfr-part-68::68.12 | § 68.12 General requirements |
| epa-risk-management-program-40-cfr-part-68::68.15 | § 68.15 Management |
Subpart B: Hazard assessment – EPA Risk Management Program (40 CFR Part 68)
| Code | Title |
|---|---|
| epa-risk-management-program-40-cfr-part-68::68.22 | § 68.22 Offsite consequence analysis parameters |
| epa-risk-management-program-40-cfr-part-68::68.25 | § 68.25 Worst-case release scenario analysis |
| epa-risk-management-program-40-cfr-part-68::68.28 | § 68.28 Alternative release scenario analysis |
| epa-risk-management-program-40-cfr-part-68::68.30 | § 68.30 Defining offsite impacts: population (with 68.33 environment) |
| epa-risk-management-program-40-cfr-part-68::68.36 | § 68.36 Review and update |
| epa-risk-management-program-40-cfr-part-68::68.39 | § 68.39 Documentation |
| epa-risk-management-program-40-cfr-part-68::68.42 | § 68.42 Five-year accident history |
Subpart C: Program 2 prevention program – EPA Risk Management Program (40 CFR Part 68)
| Code | Title |
|---|---|
| epa-risk-management-program-40-cfr-part-68::68.48 | § 68.48 Safety information |
| epa-risk-management-program-40-cfr-part-68::68.50 | § 68.50 Hazard review |
| epa-risk-management-program-40-cfr-part-68::68.52 | § 68.52 Operating procedures |
| epa-risk-management-program-40-cfr-part-68::68.54 | § 68.54 Training |
| epa-risk-management-program-40-cfr-part-68::68.56 | § 68.56 Maintenance |
| epa-risk-management-program-40-cfr-part-68::68.58 | § 68.58 Compliance audits |
| epa-risk-management-program-40-cfr-part-68::68.59 | § 68.59 Third-party audits |
| epa-risk-management-program-40-cfr-part-68::68.60 | § 68.60 Incident investigation |
| epa-risk-management-program-40-cfr-part-68::68.62 | § 68.62 Employee participation |
Subpart D: Program 3 prevention program – EPA Risk Management Program (40 CFR Part 68)
Subpart E: Emergency response – EPA Risk Management Program (40 CFR Part 68)
| Code | Title |
|---|---|
| epa-risk-management-program-40-cfr-part-68::68.90 | § 68.90 Applicability (responding and non-responding sources) |
| epa-risk-management-program-40-cfr-part-68::68.93 | § 68.93 Emergency response coordination activities |
| epa-risk-management-program-40-cfr-part-68::68.95 | § 68.95 Emergency response program |
| epa-risk-management-program-40-cfr-part-68::68.96 | § 68.96 Emergency response exercises |
Subpart F: Regulated substances and thresholds – EPA Risk Management Program (40 CFR Part 68)
| Code | Title |
|---|---|
| epa-risk-management-program-40-cfr-part-68::68.115 | § 68.115 Threshold determination |
Subpart G: Risk management plan – EPA Risk Management Program (40 CFR Part 68)
| Code | Title |
|---|---|
| epa-risk-management-program-40-cfr-part-68::68.150 | § 68.150 Submission |
| epa-risk-management-program-40-cfr-part-68::68.151 | § 68.151 Assertion of claims of confidential business information (with 68.152 substantiation) |
| epa-risk-management-program-40-cfr-part-68::68.155 | § 68.155 Executive summary |
| epa-risk-management-program-40-cfr-part-68::68.160 | § 68.160 Registration |
| epa-risk-management-program-40-cfr-part-68::68.165 | § 68.165 Offsite consequence analysis (RMP content) |
| epa-risk-management-program-40-cfr-part-68::68.168 | § 68.168 Five-year accident history (RMP content) |
| epa-risk-management-program-40-cfr-part-68::68.170 | § 68.170 Prevention program/Program 2 (RMP content) |
| epa-risk-management-program-40-cfr-part-68::68.175 | § 68.175 Prevention program/Program 3 (RMP content) |
| epa-risk-management-program-40-cfr-part-68::68.180 | § 68.180 Emergency response program and exercises (RMP content) |
| epa-risk-management-program-40-cfr-part-68::68.185 | § 68.185 Certification |
| epa-risk-management-program-40-cfr-part-68::68.190 | § 68.190 Updates |
| epa-risk-management-program-40-cfr-part-68::68.195 | § 68.195 Required corrections |
Subpart H: Other requirements – EPA Risk Management Program (40 CFR Part 68)
| Code | Title |
|---|---|
| epa-risk-management-program-40-cfr-part-68::68.200 | § 68.200 Recordkeeping |
| epa-risk-management-program-40-cfr-part-68::68.210 | § 68.210 Availability of information to the public |
| epa-risk-management-program-40-cfr-part-68::68.220 | § 68.220 Audits (responding to implementing agency RMP audits) |
Your Compliance Coverage
If you comply with EPA Risk Management Program (40 CFR Part 68), you already cover:
OSHA General Industry Standards (29 CFR Part 1910)
10%
6 controls mapped
Compare →EPA RCRA Hazardous Waste Management
7%
4 controls mapped
Compare →EPA EPCRA / SARA Title III (Emergency Planning and Community Right-to-Know)
2%
1 controls mapped
Compare →+ 1 more: Arizona Air Quality Regulations (ADEQ / ARS Title 49 / AAC Title 18 Chapter 2) (2%)
See all 4 mapped frameworks ↓Maps to 4 other frameworks
Coverage is not the same as your position
This page shows what EPA Risk Management Program (40 CFR Part 68) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is EPA Risk Management Program (40 CFR Part 68) and who does it apply to?
EPA Risk Management Program (40 CFR Part 68) is a compliance framework from United States (federal; delegated to state and local implementing agencies where approved under CAA 112(l)) with 8 domains and 51 controls. EPA's Risk Management Program rule under Clean Air Act section 112(r)(7) (40 CFR Part 68): for facilities holding more than a threshold quantity of a listed toxic or flammable substance, the program levels, management system, worst-case and alternative release analyses and accident history, the Program 2 and Program 3 prevention programs (process safety information, hazard analysis with safer technology analysis, procedures, training, mechanical integrity, change management, audits including third-party audits, incident investigation with root cause analysis, employee participation, hot work, contractors), emergency response coordination, programs and exercises, the risk management plan submitted to EPA, and public information duties. Built from the eCFR text current to September 22, 2026, which carries the 2024 amendments; EPA's 2026 proposal to roll some of them back is not final. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does EPA Risk Management Program (40 CFR Part 68) actually require?
EPA Risk Management Program (40 CFR Part 68) has 51 controls organised across 8 domains. The largest domains are Subpart D: Program 3 prevention program – EPA Risk Management Program (40 CFR Part 68) (13 controls), Subpart G: Risk management plan – EPA Risk Management Program (40 CFR Part 68) (12 controls), Subpart C: Program 2 prevention program – EPA Risk Management Program (40 CFR Part 68) (9 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of EPA Risk Management Program (40 CFR Part 68) do I already cover?
EPA Risk Management Program (40 CFR Part 68) maps to 4 other compliance frameworks. The top mapping partners are OSHA General Industry Standards (29 CFR Part 1910) (10% coverage), EPA RCRA Hazardous Waste Management (7% coverage), EPA EPCRA / SARA Title III (Emergency Planning and Community Right-to-Know) (2% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement EPA Risk Management Program (40 CFR Part 68)?
Start your EPA Risk Management Program (40 CFR Part 68) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about EPA Risk Management Program (40 CFR Part 68) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 51 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 907 frameworks.
Get Started Free →Free forever — no credit card required