How CUPAs Structure the Review

The agency review of a CalARP or RMP submittal isn’t a one-pass document check. In most California counties the process looks something like this:

By the time the reviewer leaves the site, they have a working list of what’s missing, what’s outdated, and what doesn’t match. That list becomes the agency’s findings letter.

The Deficiencies That Come Up Most Often

These are the gaps that appear repeatedly in CUPA review checklists across California counties and in the deficiency lists CUPA conference presenters have published year after year. None require unusual circumstances. They show up at facilities that have had plans in place for a decade.

• Offsite consequence analysis (OCA) modeled with the wrong vessel or wrong release quantity. Reviewers check whether the worst-case scenario corresponds to the single vessel or pipe containing the largest amount of regulated substance. We see modeling done against an outdated inventory, against a non-worst-case vessel, or with release coordinates that don’t match the facility’s actual location. The 5-year OCA update is also frequently missed.
• Process safety information that doesn’t reflect what’s installed. Reviewers compare P&IDs against the walk-through. Common findings include drawings with no title block date or “approved by” signature, P&IDs that don’t show recent piping changes, missing maximum-inventory calculations, and safe upper and lower operating limits that exist nowhere in writing. Some facilities rely on the SDS (Safety Data Sheet) as their chemical hazard information. It isn’t enough.
• Process hazard analysis with open recommendations and no tracking. A PHA (process hazard analysis) more than five years old is an immediate red flag. So is a PHA that lists recommendations with no resolution and no tracking system. Reviewers also look for PHA team training records and whether the methodology was facility-specific or pulled from a generic checklist.
• Template operating procedures that don’t match the equipment. When reviewers see SOPs (standard operating procedures) that look like vendor boilerplate with the facility name pasted in, they go straight to the temporary-operations, emergency-shutdown, and startup-after-shutdown procedures, which template documents usually lack. They also check for the annual SOP certification, which is required and frequently missed.
• Training records that don’t add up. The list of qualified operators should match the current roster. Training matrices should show position, years of experience, and refresher dates. Verification of understanding (testing, signed acknowledgments) is required for Program 3 and Program 4 facilities. Reviewers flag training files that have certificates of attendance but no evidence the employee retained the material.
• Mechanical integrity gaps. Maintenance that runs reactively instead of on a defined schedule. Safety alarms and gas detectors without calibration records. Cranes and hoists used to move ton containers with no annual inspection. Piping inspection programs that exist on paper but not in the work-order system. The mechanical integrity element ties heavily to process safety information, and reviewers look for that linkage.
• Incident investigations that show “no incidents.” A facility reporting zero incidents over five years often has them and isn’t capturing them. Reviewers ask about near misses, safety-system trips, and small releases. They also look for whether findings were communicated to affected personnel and whether corrective actions were closed.
• Management of change (MOC) and pre-startup safety review (PSSR) gaps. For Program 3, the MOC master list is one of the first things reviewers ask for. A list with three entries over three years at a facility that has clearly modified equipment is a flag. So is an MOC system that has technical sign-offs but no documented safety review.
• Emergency response coordination missing. Reviewers check whether the facility has documented coordination with the local administering agency, whether response equipment is inspected, and whether the facility’s status as a “responding” or “non-responding” facility is consistent throughout the plan.

Red Flags That Stand Out Right Away

Some deficiencies don’t require a full review to surface. CUPA presenters at the 2026 California Unified Program conference listed the items that catch a reviewer’s eye on first contact with a submittal:

• A hazard review or PHA dated more than five years prior, with open recommendations
• Operating procedures that read like a manufacturer’s template
• No defined refresher training cycle
• Maintenance that’s reactive rather than scheduled
• Process safety information gaps (no maximum inventory, no operating limits, undated P&IDs)
• No MOC safety review on changes that clearly happened
• Emergency response with no documented coordination with local agencies

When two or more of these show up together, the review tends to escalate from a routine findings letter to a more detailed request for documentation.

What to Have Ready Before Submitting

For facilities preparing for a five-year update, a renewal, or a first submittal, the table below summarizes what reviewers typically want available the day they arrive. For more on the audit process itself, see our guide to CalARP compliance audits and agency review.

This isn’t a complete agency checklist. CUPAs vary in how they structure the review, and Title 19 CCR §§5080–5100 (the CalARP program element requirements) and the federal RMP rule at 40 CFR Part 68 cover the regulatory framework in more detail. But the gaps above account for the majority of findings letters we read when clients bring in a previous reviewer’s comments and ask us to fix the plan.

The most common pattern we see when we walk into a facility for the first time after a failed CUPA review is that the underlying operations are fine. The covered process is being run safely. What’s broken is the connection between the plan document and the facility. Closing that gap is usually faster than rebuilding the program from scratch.

Next Steps

If you’re preparing a five-year update, recovering from a failed agency review, or building a CalARP plan for the first time, a plan written against the same completeness criteria the CUPA will use saves time on both sides of the review. We’ve worked with California facilities on CalARP plans across ammonia refrigeration, chlorine disinfection at water and wastewater plants, and acid and reactive operations in metal finishing and electronics. Our team comes to your site, reviews what’s there, and tells you what needs to change.