\ i U.S ENVIRONMENTAL PROTECTION AGENCY OFFICE OF INSPECTOR GENERAL Catalyst for Improving the Environment Evaluation Report EPA Region 8 Needs to Better Manage the Risk Management Program for Airborne Chemical Releases Report No. 09-P-0130 March 30, 2009 ------- Report Contributors: Rick Beusse Bao Chuong Jim Hatfield Erica Hauck Rebecca Matichuk Abbreviations CAA Clean Air Act CFR Code of Federal Regulations ECEJ Office of Enforcement, Compliance, and Environmental Justice EPA U.S. Environmental Protection Agency EPCRA Emergency Planning and Community Right-to-Know Act EPR Office of Ecosystems Protection and Remediation FY Fiscal Year MOU Memorandum of Understanding OECA Office of Enforcement and Compliance Assurance OEM Office of Emergency Management OIG Office of Inspector General RMP Risk Management Plan SEE Senior Environmental Employment Cover photo: Damage from a 2007 flash fire at an RMP-regulated natural gas processing facility in EPA Region 8. (EPA Region 8 photo) ------- \ U.S. Environmental Protection Agency Office of Inspector General At a Glance 09-P-0130 March 30, 2009 Why We Did This Review The purpose of the Clean Air Act (CAA) Risk Management Program is to reduce the likelihood of airborne chemical releases that could harm the public, and mitigate the consequences of releases that do occur. During our evaluation of U.S. Environmental Protection Agency (EPA) implement- tation of this program, we identified concerns with EPA Region 8's coordination and management of the Program that require the attention of Region 8 management. Background Under the CAA Section 112(r) Risk Management Program, stationary sources that contain more than the threshold quantity of any of the regulated substances on-site in a process must implement a risk management program. Within Region 8, the Office of Ecosystems Protection and Remediation (EPR) and the Office of Enforcement, Compliance, and Environmental Justice (ECEJ) are jointly responsible for implementing the Program. For further information, contact our Office of Congressional, Public Affairs and Management at (202)566-2391. To view the full report, click on the following link: www.epa.qov/oiq/reports/2009/ 20090330-09-P-0130.pdf EPA Region 8 Needs to Better Manage the Risk Management Program for Airborne Chemical Releases What We Found The two Region 8 offices jointly responsible for implementing the CAA 112(r) Risk Management Program have not effectively planned or coordinated compliance assurance activities. Further, regional operating guidance for the Program is inconsistent concerning the roles and responsibilities of each office. Consequently, over half of the high-risk facilities have never been audited or inspected, while duplicative oversight activities have been performed at lower-risk facilities. Further, cases of identified noncompliance remain unresolved. Based on criteria such as amount of covered chemicals stored on-site and potential population exposed during a worst-case scenario, we identified 61 high-risk facilities in Region 8. The Region had never inspected or audited 38 of these 61 high-risk facilities (62 percent) since the Program's inception in 1999. Cumulatively, these 38 high-risk facilities could potentially impact over one million people during a worst-case chemical release. Although 38 high-risk facilities had never been audited or inspected, 59 lower-risk facilities received duplicative oversight by being both audited and inspected by the Region. We reviewed nine cases that EPR referred to ECEJ for possible enforcement action because the facilities failed to certify they came into compliance after a program audit found noncompliance. ECEJ concluded that no enforcement action could be taken and returned the cases. Two of the facilities eventually certified they had come into compliance. However, no follow-up actions were taken by either office for the remaining seven facilities, and their compliance status has been unresolved for over 2 years. Cumulatively, these seven facilities could impact over 10,000 people in a worst-case chemical release scenario. Compared to other regions, Region 8 has taken fewer CAA Section 112(r)-related enforcement actions, and none have been taken at high-risk facilities. Region 8 has partnered with North Dakota to gain assistance in oversight activities at RMP facilities. Since 2004, North Dakota has assisted Region 8 by conducting 40 audits at agricultural ammonia facilities. What We Recommended We recommended that the Regional Administrator develop (1) a strategy for implementing the Risk Management Program in Region 8 that defines program goals, performance measures, and organizational responsibilities; and (2) an oversight process to evaluate the Region's success in implementing the strategy. Region 8 agreed with our findings and recommendations, and has already completed the recommended actions. ------- o z UNITED STATES ENVIRONMENTAL PROTECTION AGENCY WASHINGTON, D.C. 20460 OFFICE OF INSPECTOR GENERAL MEMORANDUM SUBJECT: FROM: TO: March 30, 2009 EPA Region 8 Needs to Better Manage the Risk Management Program for Airborne Chemical Releases Report No. 09-P-0130 Wade T. Najjum j Assistant Inspector General for Program Evaluation Carol A. Rushin Acting Regional Administrator, EPA Region 8 This is our report on the subject evaluation conducted by the Office of Inspector General (OIG) of the U.S. Environmental Protection Agency (EPA). This report contains findings that describe the problems the OIG has identified and corrective actions the OIG recommends. This report represents the opinion of the OIG and does not necessarily represent the final EPA position. Final determinations on matters in this report will be made by EPA managers in accordance with established audit resolution procedures. The estimated cost of this report - calculated by multiplying the project's staff days by the applicable daily full cost billing rates in effect at the time - is $157,141. Action Required In accordance with EPA Manual 2750, we are closing this report upon issuance in our tracking system since your response to the draft report provided corrective actions that meet the intent of the draft report's recommendations. In accordance with OIG policy, we will periodically follow up to determine how well the Agency's corrective actions have addressed the report's recommendations. We have no objections to the further release of this report to the public. This report will be available at http://www.epa.gov/oig. If you or your staff have any questions regarding this report, please contact me at (202) 566-0832 or najjum.wade@epa.gov, or Rick Beusse at (919) 541-5747 or beusse.rick@epa.gov. ------- EPA Region 8 Needs to Better Manage the Risk 09-P-0130 Management Program for Airborne Chemical Releases Table of Contents Purpose 1 Background 1 Noteworthy Achievements 3 Scope and Methodology 3 Results of Review 4 Conclusions 8 Recommendations 8 Region 8 Comments and OIG Evaluation 8 Status of Recommendations and Potential Monetary Benefits 9 Appendices A Details on Scope and Methodology 10 B Region 8 Response to Draft Report 12 C Distribution 21 ------- 09-P-0130 Purpose In November 2007, the Office of the Inspector General began an evaluation of the U.S. Environmental Protection Agency's (EPA's) implementation of the Clean Air Act (CAA) Section 112(r) Risk Management Program. The purpose of the Risk Management Program is to reduce the likelihood of airborne chemical releases that could harm the public, and mitigate the consequences of releases that do occur. The objectives of our evaluation were to determine whether (1) procedures are in place to ensure that facilities subject to the Risk Management Program regulations have submitted risk management plans (RMPs), and (2) the inspection process provides reasonable assurance that covered facilities comply with Risk Management Program requirements. Although we issued our report on EPA's overall Program performance in February 2009,l we are issuing this separate evaluation report due to specific concerns we identified in Region 8. Background In 1990, Congress amended CAA Section 112 to enact a program to prevent releases of certain hazardous chemicals and to mitigate the consequences of releases to the surrounding community. EPA promulgated the Risk Management Program rule (40 Code of Federal Regulations Part 68) in 1996 to meet the requirements of CAA Section 112(r)(7). Under the Program, stationary sources that contain more than the threshold quantity of any of 140 regulated substances (77 toxic and 63 flammable substances) in a process are required to conduct a worst-case release assessment, and to prepare and submit a risk management plan (RMP) to EPA. Facilities were required to submit their first RMPs by June 21, 1999, and update them at least every 5 years or when on-site regulated substances or processes change. The Program regulations (40 CFR 68.220) also require implementing agencies to periodically audit facility RMPs and require revisions when necessary to ensure compliance with the requirements for RMPs. These audits are referred to as 68.220 audits. Since very few States and local agencies have requested delegation of the Program, EPA is responsible for implementing the Program in most areas. None of the States in Region 8 have taken delegation, so the Region is directly responsible for all RMP facilities in the Region. EPA's Office of Emergency Management (OEM) in the Office of Solid Waste and Emergency Response is primarily responsible for managing the Program on a national level. OEM provides funding to the regions to assist in implementing the Program. Implementation activities include conducting audits and inspections, and providing technical assistance, outreach, and training. OEM also provides guidance to the regions regarding the Program's priorities and inspection strategies. In 2007, OEM distributed a list of high-risk facilities to the regions to encourage more effective use of the Program's resources and to help the regions better prioritize their inspection efforts. However, the regions are not required to inspect these higher-risk facilities before lower-risk facilities. Depending on the facility, the population potentially impacted in a worst-case release scenario ranges from zero to over 1.7 million for a single facility in Region 8, as reported in facility RMPs contained in the RMP National Database. 1 EPA Can Improve Implementation of the Risk Management Program for Airborne Chemical Releases, Report No. 09-P-0092, February 10, 2009. ------- 09-P-0130 The Office of Enforcement and Compliance Assurance (OECA) sets performance expectations for Risk Management Program compliance assurance activities. OECA's National Program Manager Guidance for Fiscal Year (FY) 2009 states that regions should conduct Risk Management Program inspections at 5 percent of the total number of regulated facilities in the Region each fiscal year, and may include periodic 68.220 audits as part of their compliance program. According to OECA and OEM staff, RMP inspections conducted under CAA section 1142 authority are more comprehensive than 68.220 audits and can result directly in enforcement actions. As the Program matured, EPA's oversight emphasis has moved from 68.220 audits to federally-enforceable inspections. OECA includes only on-site inspections - not 68.220 audits - in its performance measure for the Risk Management Program, while OEM includes both on-site inspections and on-site 68.220 audits in its performance measures. Risk Management Program Organization and Responsibilities in Region 8 In Region 8, two separate offices jointly implement the Risk Management Program under a Memorandum of Understanding (MOU) issued in 1997. According to the MOU, the Office of Ecosystems Protection and Remediation (EPR) is responsible for conducting Risk Management Program audits (i.e., 68.220 audits) and the Office of Enforcement, Compliance, and Environmental Justice (ECEJ) is responsible for conducting all Section 112(r) inspections in the Region. The 1997 MOU also states that: • EPR will coordinate all planned RMP audits with ECEJ; • any serious compliance and enforcement-related matters encountered during an RMP audit will be discussed as soon as practicable and referred to ECEJ for investigation and possible enforcement action; • ECEJ will conduct all RMP Section 112(r) inspections; and • the Region will develop a protocol for interactions between EPR and ECEJ regarding RMP audits and investigations. In 2004, Region 8 issued an Implementation Protocol (Interim Final) describing coordination activities between the two offices. The Protocol states that: • inspections conducted by EPR must always be coordinated with ECEJ; • RMP audits conducted by EPR can result in a Preliminary Determination Letter, which establishes deadlines for audited facilities to correct deficiencies; • facilities missing one or more established deadlines documented in a Preliminary Determination Letter should always be referred to ECEJ for enforcement action, and when a referral is made, ECEJ and EPR will meet to discuss the best approach for addressing the noncompliance; 2 Section 114 of the CAA provides EPA with the broad authority to inspect facilities for compliance with CAA requirements. ------- 09-P-0130 • EPR should coordinate requests and referrals to ECEJ via e-mail or an internal memorandum that includes a brief summary of the situation and audit results; and • when ECEJ receives a referral from EPR, ECEJ will evaluate the referral and input the results of this evaluation into a Coordination Table located on the shared drive. Allocation of Risk Management Program Resources in Region 8 EPR and ECEJ share the Risk Management Program resources provided to the Region from Headquarters. OEM provides the Region with funds to implement both the Risk Management Program and the Emergency Planning and Community Right-to-Know Act through the same account. The Region receives about $150,000 annually in extramural funds to implement both programs. These funds are shared by EPR and ECEJ. The amount of funds received by ECEJ has increased from $9,000 in FY 2005 to $50,000 in FY 2008. In FY 2007 and FY 2008, EPR received an average of slightly more than two-thirds ($104,500/year) and ECEJ received an average of almost one-third ($45,500/year) of the extramural funds. The Region also receives funding for 2.5 full-time equivalents (FTEs) from OEM for both the Risk Management Program and the Emergency Planning and Community Right-to-Know Act. According to EPR managers, 2.0 FTEs were assigned to EPR.3 OEM also funds five Senior Environmental Employment (SEE) Program employees in Region 8 to perform activities supporting several different programs, including the Risk Management Program. Four of the SEE employees are allocated to EPR and one is used by ECEJ to conduct inspections at RMP facilities. According to the former RMP Team Lead in EPR, the cumulative amount of time that the four SEE employees in EPR spend on Risk Management Program activities during a year is approximately equal to one full-time person. The SEE employees' remaining time is spent on other programs. Noteworthy Achievements Region 8 has partnered with North Dakota to conduct RMP audits of agricultural ammonia facilities. In 2004, EPR entered into an MOU with North Dakota's Departments of Agriculture and Insurance, under which the State conducts RMP audits at anhydrous ammonia storage facilities. Following the implementation of the MOU, EPR managers and staff told us that the State inspectors in North Dakota were trained to conduct audits at agricultural ammonia facilities. Although the MOU was not a delegation of authority under the Risk Management Program, EPR staff told us that the State has expressed interest in proceeding with delegation of the Program for agricultural ammonia facilities. Since 2004, North Dakota has assisted Region 8 by conducting 40 audits at RMP facilities. Scope and Methodology For our nationwide evaluation of EPA's implementation of the Risk Management Program, we interviewed staff and managers from EPA's OEM, OECA, Office of Air and Radiation, 10 EPA 3 EPR could not account for the remaining 0.5 FTE funded by OEM. ECEJ managers said they did not receive the 0.5 FTE. The Region had not resolved the allocation and usage of the 0.5 FTE as of November 2008. ------- 09-P-0130 regions, and 4 States with delegation of the Risk Management Program. We issued this report on February 10, 2009. As part of the nationwide evaluation, we conducted work in Region 8, where we identified several concerns with the Region's management of the Program. During our review of the Program in Region 8, we interviewed EPR and ECEJ staff and managers and reviewed guidance, procedures, budget reports, and other materials regarding the implementation of the Program by these offices. We obtained lists of audits and inspections completed since the inception of the Program from both EPR and ECEJ. We compared the lists of audits and inspections completed in Region 8 to the RMP National Database and the lists of high-risk facilities to identify facilities that have never been audited or inspected in Region 8. We also used the lists provided by EPR and ECEJ to track the referral process and coordination efforts between the two offices. We conducted our work from January 2008 to February 2009. Additional information on our scope and methodology is in Appendix A. Results of Review Region 8 has not managed the Risk Management Program efficiently or effectively. Two offices in Region 8 - EPR and ECEJ - are tasked with implementing the Program. However, these offices have not effectively coordinated their planning and compliance assurance activities. As a result, over half of the Region's 61 high-risk facilities have never been audited or inspected by the Region, while 59 lower-risk facilities were both audited and inspected. Further, seven cases of noncompliance identified through audits remained unresolved for more than 2 years, and the Region has taken a lower number of CAA 112(r)-related enforcement actions than other EPA regions. EPR and ECEJ Have Not Effectively Coordinated Program Efforts EPR and ECEJ have not coordinated activities and planning to best utilize resources and provide compliance assurance at RMP facilities. Although the Region has an MOU and an Implementation Protocol that outline the two offices' responsibilities and coordination procedures, neither office was consistently following the MOU or Implementation Protocol, and the two documents provided inconsistent guidance regarding each office's roles and responsibilities. The 2004 Implementation Protocol states that "normal coordination" should occur between EPR and ECEJ, and that the two offices will have coordination meetings on an "as needed" basis to discuss issues of importance to either or both groups. However, coordination between the two offices was not sufficient to effectively manage the Program. EPR and ECEJ did not coordinate their compliance assurance activities to ensure that high-risk facilities are inspected or audited. Rather, each office planned its activities independent of the other and maintained separate lists outlining the facilities they planned to visit. The list of RMP facilities each office planned to audit or inspect was posted on the Region's shared drive so both offices could view the lists. However, this was the extent of planning coordination between the two offices. The lack of coordination between the two offices continued during our field work. For example, in May 2008, EPR began conducting inspections under CAA Section 114 authority without ------- 09-P-0130 informing or coordinating with ECEJ.4 Coordination is particularly necessary when EPR conducts inspections because ECEJ may have to take enforcement actions on the deficiencies identified during those inspections. However, EPR and ECEJ disagreed on whether EPR staff should be conducting RMP inspections, and the MOU and Implementation Protocol contain conflicting information regarding responsibility for inspections. Specifically, the MOU states that "all Section 112(r) inspections will be conducted by 8ENF-T [ECEJ]." In contrast, the Implementation Protocol allows for inspections by EPR, but states that inspections conducted by EPR "must always be coordinated" with ECEJ. Further, EPR and ECEJ were not coordinating cases referred from EPR to ECEJ for possible enforcement action as outlined in the Implementation Protocol. According to the Protocol, EPR and ECEJ have shared responsibility to maintain a Coordination Table on the Region's shared drive that tracks the progress and outcome of enforcement referrals. However, this was not occurring at the time of our evaluation. Majority of Region 8 High-Risk Facilities Not Audited or Inspected Program guidance from OECA encourages regions to address public safety concerns by targeting RMP inspections based on several risk-related factors. However, Region 8 has duplicated its oversight efforts by conducting both audits and inspections at mostly lower-risk facilities, while the majority of the high-risk RMP facilities have never been audited or inspected since the Program's inception in 1999. Using three separate criteria, we identified 61 high-risk RMP facilities in Region 8.5 Between January 2000 and January 2008, Region 8 conducted audits at 519 facilities, but only 21 of those were high-risk facilities. Additionally, Region 8 conducted inspections at 86 RMP facilities, but only 9 of those were high-risk facilities. However, 7 of the 9 high-risk facilities inspected by ECEJ had previously been audited by EPR. Thus, 23 of the 61 high-risk facilities have been audited and/or inspected, while 38 (or 62 percent) have never been audited or inspected (see Table 1). Cumulatively, the 38 high-risk facilities that have not been audited or inspected could potentially impact over one million people during a worst-case chemical release. Table 1: Audits and Inspections at the 61 High-Risk Facilities in Region 8, through January 2008 No. of High-Risk Facilities 61 No. of High-Risk Facilities Audited 21 No. of High-Risk Facilities Inspected After an Audit 7 No. of High-Risk Facilities Inspected Only 2 No. of High-Risk Facilities Audited and/or Inspected 23 No. of High-Risk Facilities Never Audited or Inspected 38 Source: OIG list of high-priority facilities in Region 8 and audit and inspection data provided by Region 8 An EPR manager told us in November 2008 that EPR was no longer conducting RMP inspections and would wait until EPR and ECEJ jointly developed a strategy for the Program before conducting RMP inspections in the future. 5 These 61 facilities appeared on one or more of the following lists: OEM's list of high-priority facilities; the top 5 percent of facilities in terms of hazard indices; and facilities that could potentially impact 100,000 people or more in a worst-case release scenario. ------- 09-P-0130 Although most high-risk facilities have not been audited or inspected, many lower-risk facilities have been both audited and inspected. ECEJ had inspected a total of 86 RMP facilities since the inception of the Program, and 65 (or 76 percent) of these were facilities that had previously been audited by EPR. In addition, one of the facilities that EPR audited was previously inspected by ECEJ. Thus a total of 66 facilities have been both audited and inspected. The majority of these 66 facilities (59 out of 66, or 89 percent) were lower-risk facilities; i.e., facilities that did not appear on any of the three high-risk facility lists discussed earlier. In FY 2007, OECA instituted a performance target for each region to inspect 5 percent of its RMP facilities per year. This target does not consider whether the facilities are high-risk facilities. Although Region 8 was on track to meet this target in FY 2008, 37 of the 39 facilities (or 95 percent) that the Region had inspected in FY 2008 were lower-risk facilities.6 The RMP Enforcement Coordinator told us that ECEJ had been focusing inspections on smaller, less complex facilities because of the relative inexperience of the inspectors. She also expressed concerns that ECEJ may not have sufficient resources to start conducting inspections and taking enforcement actions at larger, more complex facilities. Accident data suggest that never-inspected high-risk facilities are more than 5 times as likely to have an accident as never-inspected lower-risk facilities. The higher accident rate for never- inspected high-risk facilities suggests the need to prioritize inspections based on risk. Without procedures in place to prioritize the inspections at these high-risk facilities, Region 8 may not be using its resources efficiently to ensure that high-risk facilities are complying with the Risk Management Program requirements. As a result, these facilities may not be taking measures to operate safely, thus putting the public, employees, and first responders at a higher risk in the case of an accident. Compliance Status of Some Referred Facilities Remains Unresolved The compliance status of seven RMP facilities audited by EPR and then referred to ECEJ remained unresolved after more than 2 years. In addition, the case files for some of the referred cases we reviewed were incomplete because the files did not include documentation that the cases were referred to and/or reviewed by ECEJ or that the compliance status of the facility had been resolved. Failure to resolve noncompliance at facilities could increase the risk of an accident and public exposure to airborne chemical releases. At the beginning of our evaluation, EPR provided us a list of 20 facilities it said it referred to ECEJ for enforcement action. However, after discussing these cases with EPR and ECEJ, both offices agreed that only 9 of these 20 cases were actually referred to ECEJ. We reviewed files for these nine cases to determine what actions ECEJ and EPR took to resolve the noncompliance that was the basis for the referral. These nine cases do not necessarily represent the entire universe of referred cases. We did not attempt to identify and review the entire universe of referred cases from EPR to ECEJ. 6 The FY 2008 inspection data we obtained from Region 8 only covered the period October 1, 2007, through January 2008; thus, we did not have inspection data for the full fiscal year. By the end of January 2008, the Region had already inspected 4.4 percent of the Region's RMP universe that year. ------- 09-P-0130 These nine facilities were audited by EPR in August and September 2006 and referred to ECEJ in March 2007 for failing to submit a Certificate of Completion after the audit. The Certificate of Completion is a document that EPR developed and requires facilities to complete in order to certify that they have resolved the deficiencies identified during an audit and subsequently described in a Preliminary Determination Letter. The RMP Enforcement Coordinator told us that ECEJ was unable to take enforcement actions against facilities that failed to submit a Certificate of Completion because it is not a requirement of 40 CFR Part 68. In reviewing the RMP case files for these nine facilities, we found that two of the facilities submitted their Certificates of Completion late, 3 to 4 months past the due date, while the remaining files did not contain a Certificate. Thus, the compliance status at seven of these nine facilities remained unresolved. Additionally, the files for these facilities did not contain documentation of the facilities' referral to ECEJ, or correspondence from ECEJ stating that ECEJ could not take an enforcement action.7 The RMP Enforcement Coordinator told us that she returned the files for these facilities to EPR and told EPR staff she was unable to take enforcement action at the facilities. However, there was no documentation of this decision in EPR's case files. The compliance status of these seven facilities has been unresolved for over 2 years. These facilities have not been inspected or re-audited by ECEJ or EPR, and have not received any enforcement action. Cumulatively, these seven unresolved facilities could impact over 10,000 people in a worst-case release scenario. Although ECEJ determined that they could not take enforcement action against facilities for failure to submit Certificates of Completion, the Risk Management Program regulations provide a mechanism for enforcing noncompliance identified during an audit. The regulations state that after providing the owner of a facility with the opportunity to respond to a Preliminary Determination Letter, the implementing agency (Region 8) may prepare a final determination letter specifying necessary revisions to a facility's RMP. Failure to comply with a final determination letter is a violation of the Risk Management Program regulations. However, as of January 2009, EPR had not used the final determination letter mechanism Region 8 Has Lowest Enforcement Rate of All Regions A comparison of Region 8's CAA Section 112(r) enforcement actions with other EPA regions suggests a concern with regional enforcement of the Program. Region 8 has taken fewer CAA 112(r)-related enforcement actions than other regions.8 As of January 2008, Region 8 had taken only 12 such enforcement actions since FY 2001, which is 2.3 to 44 times fewer enforcement actions than other regions. The number of actions taken by other EPA regions ranged from 28 to 532. Further, none of the 12 enforcement actions in Region 8 were at high-risk facilities. Region 8 also had the lowest number of enforcement actions in comparison to number of RMP facilities. 7 EPR provided us with an e-mail documenting the referral of these nine facilities to ECEJ in March 2007. However, neither this e-mail nor other documentation of the referral to ECEJ were included in the case files for these facilities. 8 Our analysis of enforcement actions includes all CAA Section 112(r)-related enforcement actions, as identified in the Integrated Compliance Information System database. Section 112(r) includes both the General Duty Clause and the Risk Management Program. Thus, some of the enforcement actions included in our analysis may be actions taken for violation of the General Duty Clause. ------- 09-P-0130 Based on the RMP universe as of November 29, 2007, the ratio of enforcement actions per RMP facility was 0.01 (12 actions/890 facilities) in Region 8. This is less than the ratio for the other regions, which ranged from 0.02 to 0.23. In our view, the issues described in this report negatively impacted the Region's enforcement of the Program. Conclusions Region 8 has not established effective processes and controls to provide reasonable assurance that resources are used effectively to accomplish the Risk Management Program's goals. The two offices tasked with implementing the Risk Management Program have not consistently followed operating guidance, which has resulted in an inefficient use of resources and insufficient coverage of RMP facilities. In addition, the Region's two existing guidance documents for the Program contain contradictory language on which offices should be conducting RMP inspections. Consequently, most of the Region's high-risk facilities have not been audited or inspected, while duplicative oversight activities have been performed at many lower-risk facilities. Further, the compliance status of seven facilities identified as noncompliant has remained unresolved for over 2 years. Some case files were incomplete and lacked documentation regarding their referral for enforcement and their compliance status. Region 8 has not clarified its guidance regarding how the two offices will coordinate inspection and enforcement activities, nor assigned responsibility and accountability for the Program. Recommendations We recommend that the Regional Administrator, EPA Region 8: 1. Develop a strategy for administering the Risk Management Program that defines program goals, performance measures, organizational responsibilities, documentation requirements, and required coordination between offices. 2. Develop an oversight process to evaluate the Region's success in implementing the Program strategy. Region 8 Comments and OIG Evaluation Region 8 agreed with our findings and recommendations. Additionally, in response to our draft report, Region 8 has already completed the recommended actions. The Region developed an Implementation Strategy that addressed Program goals, performance measures, organizational responsibilities, coordination, and Program resources. In addition, it includes an oversight process to evaluate EPR's and ECEJ's success in implementing the Strategy. Thus, both recommendations are being "closed" in our tracking system upon issuance of this final report. In accordance with EPA Manual 2750, the Region is responsible for recording completion of this corrective action in the Management Audit Tracking System. Appendix B contains the full text of Region 8's response to the draft report, including its Risk Management Program Implementation Strategy. ------- 09-P-0130 Status of Recommendations and Potential Monetary Benefits POTENTIAL MONETARY RECOMMENDATIONS BENEFITS (in SOOOs) Rec. No. 1 Page No. 8 Subject Status1 Develop a strategy for administering the Risk C Management Program that defines program goals, performance measures, organizational responsibilities, documentation requirements, and required coordination between offices. Action Official Regional Administrator, Region 8 Completion Date 3/18/2009 Claimed Agreed To Amount Amount 2 8 Develop an oversight process to evaluate the C Regional Administrator, 3/18/2009 Region's success in implementing the Program Region 8 strategy. 1 0 = recommendation is open with agreed-to corrective actions pending C = recommendation is closed with all agreed-to actions completed U = recommendation is undecided with resolution efforts in progress ------- 09-P-0130 Appendix A Details on Scope and Methodology For our nationwide evaluation of EPA's implementation of the Risk Management Program, we interviewed staff and managers from EPA's OEM, OECA, Office of Air and Radiation, 10 EPA regions, and 4 States with delegation of the Risk Management Program. We also obtained data from all EPA regions and the 9 States and 5 local agencies with delegation of the Risk Management Program. The EPA OIG had not conducted any prior audits or evaluations of the CAA 112(r) Risk Management Program in Region 8 before the nationwide evaluation. The results of our nationwide evaluation are included in the report, EPA Can Improve Implementation of the Risk Management Program for Airborne Chemical Releases (Report No. 09-P-0092, February 10, 2009). In order to determine whether procedures were in place in Region 8 to provide reasonable assurance that all facilities subject to the Program regulations had submitted RMPs (Objective 1), we reviewed the 2006 Toxics Release Inventory to identify facilities in Colorado that reported having on-site quantities of ammonia, chlorine, or hydrogen fluoride at levels well above the Risk Management Program thresholds. We then reviewed the RMP National Database (current as of November 29, 2007) to identify facilities that had not submitted RMPs or had not re-filed an RMP within its 5-year anniversary date. We met with Region 8 staff to discuss whether these facilities may be subject to Program requirements. To determine whether the inspection process provided reasonable assurance that covered facilities in Region 8 comply with Risk Management Program requirements (Objective 2), we obtained lists of audits and inspections completed since the inception of the Program in 1999 from both EPR and ECEJ.9 We used these lists to identify facilities that had never been audited/inspected. We also compared the lists of audited/inspected facilities to three lists of high-risk facilities. The three lists we used included: • OEM's lists of high-risk facilities (Tier 1 and Tier 2 facilities),10 • facilities that could impact 100,000 people or more in a worst-case release scenario, and • facilities with the highest 5 percent of hazard indices in their respective implementing agency. 9 The inspection and audit data we obtained from EPR and ECEJ went through January 2008. However, in our nationwide evaluation of the Risk Management Program, we used a cut-off date of December 31, 2007, for all audit and inspection analyses. Thus, the inspection and audit figures for Region 8 in this evaluation report may differ slightly from those in our nationwide Risk Management Program report. 10 OEM's criteria for identifying high-risk facilities included the population impacted in a worst-case release scenario, the amount of chemical held in a process above the regulatory threshold quantity, and the worst-case release scenario endpoint distance. OEM divided its list into two tiers, with Tier 1 facilities representing a higher inspection priority than the Tier 2 facilities. 10 ------- 09-P-0130 The hazard index of each facility was calculated using a formula11 developed by the Wharton School of the University of Pennsylvania. We used these three lists as OIG's criteria for identifying RMP facilities that are high-risk facilities. We interviewed EPR and ECEJ staff and managers and reviewed guidance, procedures, budget reports, and other materials regarding the implementation of the Program by these offices. In order to determine the number of 112(r)-related enforcement actions for Region 8 and the other regions, we searched the Integrated Compliance Information System database for all enforcement actions from FY 2001 to January 2008 that listed CAA 112(r) as the primary law and section. We conducted our evaluation of EPA's implementation of the Risk Management Program in accordance with generally accepted government auditing standards. Those standards require that we obtain sufficient, appropriate evidence to provide a reasonable basis for our findings and conclusions. During our evaluation we identified concerns with Region 8's management of the Risk Management Program. We believe the evidence obtained provides a reasonable basis for our findings and conclusions based on our objectives. 11 The Wharton School's hazard index is defined as "the sum over all chemicals of Iog2 (maximum quantity of inventory on-site/threshold), or, alternatively, as the number of chemicals times Iog2 of the geometric mean of the maximum-to-threshold quantity ratio." 11 ------- 09-P-0130 Appendix B Region 8 Response to Draft Report March 19, 2009 MEMORANDUM SUBJECT: EPA Region 8 Response to OIG Draft Evaluation Report, "EPA Region 8 Needs to Better Manage the Risk Management Program for Airborne Chemical Releases" FROM: Carol Rushin Acting Regional Administrator TO: Wade T. Najjum Assistant Inspector General Office of Program Evaluation Office of Inspector General Thank you for the opportunity to review and comment on the draft evaluation report titled, "EPA Region 8 Needs to Better Manage the Risk Management Program for Airborne Chemical Releases," Project Number OPE-FY08-0001. The report focuses on improving the implementation of the Clean Air Act Risk Management Program in Region 8, and includes recommendations. As a whole, Region 8 agrees with the findings and recommendations as outlined in the report. Since October 2008, both offices responsible for implementing the Risk Management Program have worked closely towards resolution of issues outlined in the draft report. We are committed to effectively managing our resources, planning and coordinating compliance activities and clarifying the roles and responsibilities of both offices. We will follow-up with the appropriate action at the seven facilities identified in the draft report as being unresolved. In addition, we will increase inspection and enforcement activities at high-risk facilities as defined by OECA and OEM. Below is our specific response to each of the recommendations. Recommendation number 1: Develop a strategy for implementing the Risk Management Program in Region 8 that defines program goals, performance measures, and organizational responsibilities. - Region 8 concurs with this recommendation. As mentioned above, the two offices within Region 8 have worked closely the past several months to clarify the organizational responsibilities and to properly align resources that will increase inspection and enforcement activities at high-risk facilities. As a result of this effort, we have finalized a strategy (Attachment) that defines program goals, 12 ------- 09-P-0130 performance measures, and organizational responsibilities. In addition, the strategy includes outreach and inspection strategies and standard operating procedures for sharing information between offices and associated recordkeeping. The inspection strategy is based on the specific risk-related factors encompassed in OSWER and OECA's jointly revised National Program Manager's guidance. These factors will be considered in deciding which facilities will be included in the annual inspection strategy. Recommendation number 2: Develop an oversight process to evaluate the Region's success in implementing the Program strategy. - The strategy also includes an oversight process to ensure successful implementation of the program strategy. End-of-year reviews will be conducted by management in the individual offices to assess progress over the past year and modify approaches for program implementation as needed. EPR will prepare an end-of-year report on all outreach and training activities for the CAA 112(r) program and report to management on the activities. ECEJ oversight of the program will be based on an end-of-year review of all inspection files. The review will be conducted by ECEJ management and the inspection team and will include an accounting of the high-risk facilities inspected and evaluation of the findings. Based on the findings, the enforcement team will formulate an approach for the upcoming year to ensure effective inspection targeting. - Each office will maintain records for the information forwarded from one office to the next. An annual summary of the records will be reviewed between the offices and shared with management in both offices. Region 8 feels confident that the above described measures concurrent with the realignment of resources and clear delineation of duties across offices will resolve the issues identified in the February 20, 2009 Draft OIG Evaluation Report. Again, we appreciate the opportunity to review and comment on this Report. If you have any questions or comments, the person most knowledgeable about this report is Cindy Reynolds, Director of the Air and Toxics Technical Enforcement Program. She can be reached at (303) 312-6206. Attachment 13 ------- 09-P-0130 EPA REGION 8 CAA 112(R)/RISK MANAGEMENT PROGRAM IMPLEMENTATION STRATEGY March 18, 2009 I. INTRODUCTION In November 2007, the Office of the Inspector General (OIG) began an evaluation of the EPA's national CAA 112(r) program. The objectives of the OIG review were to determine whether: • Procedures are in place to provide reasonable assurance that all facilities subject to the program have submitted risk management plans; and • The inspection process provides reasonable assurance that covered facilities comply with the risk management program requirements. During the evaluation, the OIG identified concerns with Region 8's program and issued a separate report in February 2009 to address these concerns. This report ("EPA Region 8 Needs to Better Manage the Risk Management Program for Airborne Chemical Releases") identified areas of concern and recommended a strategy be developed to address program goals, performance measures, and organizational responsibilities. The report also recommended an oversight process be developed to evaluate Region 8's implementation of the strategy. This strategy addresses the OIG recommendations and replaces the Implementation Protocol for Coordination of Efforts between the Technical Enforcement Program and the Preparedness and Prevention Team for implementation of the CAA 112(r) program. II. PROGRAM GOALS EPR and ECEJ have jointly developed the following goals for the CAA 112(r) program: • Implement the CAA 112(r) program consistent with national program guidance, meet performance measures, and reduce accident risk at chemical facilities in Region 8; • Provide a framework that delineates responsibilities across EPR and ECEJ for jointly implementing the program; • Provide a mechanism for forwarding incoming information to the appropriate office to ensure seamless implementation; and • Provide a mechanism for recordkeeping to allow for individual program oversight of the program's implementation. 14 ------- 09-P-0130 III. PERFORMANCE MEASURES Performance measures for the CAA 112(r) program are defined in EPA's Annual Commit System (ACS). These two measures are: • CH2 - Number of risk management plan audits and inspections completed; and • CAA11 - Conduct inspections at 5% of the total number of facilities in the region required to submit RMPs. Of these inspections, 10% must be conducted at high- risk facilities. These inspections at high-risk facilities must also include an evaluation of compliance with applicable EPCRA and CERLA requirements. IV. ORGANIZATIONAL RESPONSIBILTIES The division of responsibility between ECEJ and EPR ensures that there is not overlap in the individual responsibilities of the two offices. EPR will interface with industry while delivering outreach in group forums such as workshops and conferences. ECEJ will interface directly with regulated industry during inspections and investigations. EPR developed a strategy for conducting outreach (Attachment 1) and ECEJ developed a strategy for inspection activities (Attachment 2). The following provides a summary of the activities for the individual offices: EPR • Provide outreach for States, locals, industry on EPA software programs (e.g., Tier II submit, RMP Submit); • Provide outreach at SERC, LEPC and TERC meetings; • Provide outreach to industry as needed on requirements of EPCRA, CERCLA 103 and RMP; • Conduct cleanup and maintenance of OEM's RMP database; • Work with States to encourage RMP program assumption; • Identify industrial sectors for outreach; and • Identify potential non-filers through database reviews and local groups (fire departments, SERCs and LEPCs) and forward to ECEJ. 15 ------- 09-P-0130 EPR will develop an outreach plan that incorporates OEM priorities and guidance and meets the Region's overall implementation of the program as outlined in Attachment 1. ECEJ • Conduct inspections and investigations to evaluate compliance with EPCRA, CERCLA 103, RMP and GDC; • Develop enforcement actions as appropriate; • Respond to State and local requests regarding specific facility compliance; • Evaluate the NRC spill log to determine possible noncompliance with CERCLA 103, EPCRA and RMP; • Identify RMP non-reporters during EPCRA inspections and CERCLA 103 investigations; and • Conduct enforcement initiatives in industry sectors when noncompliant trends are found. OECA and OEM jointly created inspection priorities in the FY2010 NPM guidance. ECEJ will create an inspection strategy which encompasses these priorities as outlined in Attachment 2. V. PROGRAM COORDINATION A Standard Operating Procedure has been developed (Attachment 3) that addresses how information will be forwarded between ECEJ and EPR regarding the CAA 112(r) and EPCRA programs. POINTS OF CONTACTS: The contact in ECEJ is the Enforcement Coordinator for RMP/EPCRA/CERCLA 103 program. The contact in EPR is the RMP Coordinator. COORDINATION MEETINGS: On a quarterly basis, EPR and ECEJ will meet to discuss any pertinent coordination issues. These meetings will provide the opportunity for offices to share information of mutual interest, review any information forwarded between the offices, and share outreach and inspection results. VI. RESOURCES Prior to the 1995 reorganization, the emergency preparedness program and related enforcement activities fell into the Emergency Response Branch. Funding and resources are provided by the OEM in OSWER. When Region 8 reorganized, compliance monitoring and enforcement responsibility for these programs was placed in ECEJ. 16 ------- 09-P-0130 After detailed review and discussions of the division of responsibilities, Region 8 has re- aligned resources as follows: PROGRAM & FUNDING EPM SUPERFUND PREPAREDNESS SEEs EPR FTE 0.5 2.0 EXTRAMURAL $160K 3.0 ECEJ FTE 2.0 EXTRAMURAL $150K 2.0 (Note: this redistribution does not currently alter the FTE ceiling of either office.) VII. OVERSIGHT EPR will prepare an end-of-year report on all outreach and training activities for the CAA 112(r) program and report to management on the activities. ECEJ oversight of the program will be based on an end-of-year review of all inspection files. The review will be conducted by ECEJ management and the inspection team and will include an accounting of the high-risk facilities inspected and evaluation of the findings. Based on the findings, the team will formulate an approach for the upcoming year to ensure effective inspection targeting. Each office will maintain records for the information forwarded from one office to the next. The mechanism for this recordkeeping is outlined in Attachment 3. An annual summary of the records will be reviewed between the offices and shared with management in both offices. ATTACHMENTS: 1 - OUTREACH STRATEGY 2 - INSPECTION STRATEGY 3 - SOP FOR FORWARDING INFORMATION BETWEEN OFFICES AND ASSOCIATED RECORDKEEPING 17 ------- 09-P-0130 Attachment 1 OUTREACH STRATEGY EPR will perform outreach activities to the regulated community on the requirements of the Risk Management Program (RMP) to enhance the overall safety at facilities and the general public. EPR will use staff, SEE personnel, and contractors to provide general outreach on the RMP to emergency planners and responders by attending and providing program information at SERC, TERC and LEPC meetings. When specific industry groups are identified or request RMP outreach activities, EPR will take appropriate actions to insure the needs of these groups are met. EPR will develop outreach materials to address specific needs related to the RMP program and present these materials to appropriate emergency planning groups or industry sectors or facilities. An example of such a need is the current shift from paper or floppy disks to electronic submittal using RMP e* Submit software for re-submittal of RMP data. As other program changes, court decisions, or regulatory interpretations dictate, EPR will develop and present other outreach materials to assist the public in understanding the requirements of the program. If there is an industry segment or category that is found to present safety elevated risks of the release of a covered chemical, outreach activities may be developed and made available in an effort to abate the risks and improve public safety. 18 ------- 09-P-0130 Attachment 2 INSPECTION STRATEGY FOR THE RMP PROGRAM ECEJ's annual inspection strategy will based on a table of high risk inspection sites considering the following factors identified in OECA's and OSWER's FY2010 NPM guidance: Facilities whose reported RMP worst-case scenario population exceeds 100,000 people; Facilities holding any RMP-regulated substance on site in an amount more than 10,000 times the RMP threshold quantity for the substance; Facilities whose reported RMP worst-case scenario endpoint distance equals or exceeds 25 miles; Any RMP facility with a hazard index greater than or equal to 25; Facilities that have had one or more significant accidental releases within the previous five years; and Other facilities where information possessed by the Regional office indicates that the facility may be high-risk. • On an as needed basis, modifications to the strategy will be made if chemical events occur at RMP reporting facilities and an immediate investigation/ inspection is warranted. • ECEJ will conduct a minimum of 10% of the total RMP inspections at high-risk facilities consistent with the OEM and OECA's national program guidance for the RMP program. • Additional inspections will be based on geographic opportunity while conducting RMP inspections throughout the Region's six states. These inspections will include non-reporting facilities that may meet the RMP reporting criteria. • ECEJ is also responsible for the NPM measure for TRI non-reporter and data quality inspections. Concurrent with these inspections, compliance with both CAA 112r's RMP and GDC will be evaluated. 19 ------- 09-P-0130 Attachment 3 STANDARD OPERATING PROCEDURES FOR FORWARDING INFORMATION BETWEEN ECEJ AND EPR AND ASSOCIATED RECORDKEEPING PURPOSE This SOP defines the process by which information will be forwarded to the appropriate office. This will ensure that information coming into Region 8 will be promptly redirected as necessary. PROCESS FOR TRANSMITTING INFORMATION There are occasions in which information will come into one office that must be redirected based on the delineation of tasks. If a call comes into voice mail, the voice mail message will be forwarded to the appropriate office. Telephone conversations will be summarized and relayed via email to the appropriate office. Hardcopy information will be hand delivered, routed by interoffice mail, or scanned and transmitted via email. When hardcopy information is sent by interoffice mail, an email will follow to confirm transmittal of the information. In response to receipt of information transmitted by EPR, ECEJ will complete a tracking form that will describe the nature of the information and the subsequent review by ECEJ. The completed tracking form will be attached to the corresponding email with the records being maintained in a three ring notebook. EPR will keep a log of both incoming and outgoing information. During quarterly meetings, the teams can discuss specific topics of interest that arise from the exchange of information. POINTS OF CONTACTS ECEJ, Enforcement Coordinator for RMP/EPCRA/CERCLA 103 program EPR, RMP Coordinator 20 ------- 09-P-0130 Appendix C Distribution Office of the Administrator Acting Regional Administrator, Region 8 Acting Assistant Administrator for Solid Waste and Emergency Response Acting Assistant Administrator for Enforcement and Compliance Assurance Acting Assistant Administrator for Air and Radiation Assistant Regional Administrator, Office of Ecosystems Protection and Remediation, Region 8 Assistant Regional Administrator, Office of Enforcement, Compliance and Environmental Justice, Region 8 Director, Office of Emergency Management, Office of Solid Waste and Emergency Response Acting General Counsel Acting Associate Administrator for Congressional and Intergovernmental Relations Acting Associate Administrator for Public Affairs Audit Follow-up Coordinator, Region 8 Acting Inspector General 21 ------- |