400 Chemicals, One IH, No Sampling History: A Defensible Risk Assessment Framework for the First-Time Industrial Hygienist

You walk in on day one. The inventory has 400 chemical products. Some of them have been on the shelf since the plant opened. A few have SDSs older than the last recession. No one has ever defined Similar Exposure Groups. There is no written qualitative exposure assessment. Sampling data is sparse, task-specific, and mostly from one noise survey done in 2019.

You are the plant’s first dedicated industrial hygienist — or the first one in several years — and OSHA’s HazCom 2024 employer compliance deadline of November 20, 2026 is on the calendar. Now build a defensible chemical risk assessment program.

This is the position most first-time or solo IHs inherit. There is no OSHA rule that says “sample these chemicals in this order.” Subpart Z gives you roughly 470 regulated substances — and OSHA itself says on its Annotated PEL page that many of those PELs are “outdated and inadequate for ensuring protection of worker health.” The 2025 ACGIH Guide lists over 2,000 TLVs. The gap between the 470 regulated PELs and the universe of chemicals that actually drive risk is where professional judgment lives.

What follows is the framework that holds up — the methodology a first-time IH, an outside consultant building a new program, or a corporate EHS team standardizing across multiple plants should use. It draws from OSHA HazCom 2024, OSHA Subpart Z, the AIHA Principles of Good Practice, and the NIOSH Occupational Exposure Banding process.

Why OSHA’s Framework Alone Doesn’t Get You There

Three regulatory pieces define the floor, but none of them tells you what to do with 400 chemicals:

HazCom 2024 (29 CFR 1910.1200). The July 2024 final rule aligned HazCom with the GHS 7th revision. Chemical manufacturers, importers, and distributors must comply by May 19, 2026 (extended from January 19, 2026). Employers must comply by November 20, 2026 (extended from July 20, 2026). HazCom requires a current written inventory, updated SDSs, compliant labels, and updated training. It does not tell you which chemicals to sample.

OSHA PELs in 29 CFR 1910.1000 Subpart Z. About 470 regulated substances. OSHA has openly stated that most of these PELs were adopted from 1968 ACGIH TLVs at the start of the OSH Act and have not been updated since — the agency itself calls many of them “outdated and inadequate.” For the majority of chemicals on your shelf, there is no federal PEL at all.

Substance-specific standards. Lead, hexavalent chromium, beryllium, silica, methylene chloride, 1-bromopropane, phthalic anhydride, and a handful of others have their own exposure assessment mandates. These apply regardless of whether your broader QEA is in place, and they should be identified in the inventory early.

What OSHA does not provide: a prioritization method. That is where AIHA and NIOSH carry the load.

AIHA Principles of Good Practice. The AIHA PGP is the recognized professional standard for exposure assessment. It defines Similar Exposure Groups (SEGs), the Qualitative Exposure Assessment (QEA), and the judgment categories (acceptable / unacceptable / uncertain) that drive sampling priority. As of the 2022 PGP update, control banding is an AIHA-endorsed “enhanced practice” for efficient chemical prioritization.

NIOSH Occupational Exposure Banding (OEB). NIOSH published the three-tier OEB process in 2019 (NIOSH 2019-132) with a free e-Tool. The process assigns any chemical to one of five exposure bands (A through E) based on its GHS health hazard classifications and the quality of available data. NIOSH’s own validation showed that the Tier 1 banding process produced a band that included the existing OEL or was more stringent than the OEL for 91% of chemicals tested. That makes OEB a defensible starting point for chemicals where no PEL exists.

Those two frameworks — AIHA PGP and NIOSH OEB — are what fill the gap between a 400-chemical inventory and a sampling plan.

The 90-Day Framework for Inheriting 400 Chemicals

Here is the sequence a first-time or solo IH can follow, grounded in OSHA documentation requirements and AIHA/NIOSH methodology. The specific day counts are illustrative — some plants move faster, some have data gaps that slow Day 15–45 work. The sequence is what matters.

Days 1–14: Build the Master Chemical Inventory

HazCom 2024 requires a current written inventory of every hazardous chemical on site. Reconcile three sources:

The SDS library (what you have on file)
Procurement records from the last 12–24 months (what actually gets ordered)
A physical walkthrough of storage, production, maintenance, and lab areas (what is physically present)

Flag every SDS older than three years for refresh — the manufacturer/importer HazCom 2024 deadline of May 19, 2026 means most of your upstream suppliers will be issuing revised SDSs through Q2 2026.

Output of this phase: a master inventory spreadsheet with chemical name, CAS, manufacturer, SDS date, quantity on site, storage location, and tasks/processes that use it.

Days 15–30: GHS Classification and NIOSH OEB Assignment

For each chemical in the inventory, extract the GHS health hazard classifications from the SDS (acute toxicity, carcinogenicity, reproductive toxicity, STOT-SE, STOT-RE, respiratory sensitization, skin sensitization). Then run each chemical through NIOSH’s OEB e-Tool.

NIOSH Tier 1 banding takes GHS hazard codes as input and outputs a band from A (highest hazard) to E (lowest hazard). The Tier 1 process is fast — typically 2–5 minutes per chemical — and NIOSH-validated against 91% of chemicals tested. For 400 chemicals at 3 minutes each, that is 20 hours of banding work. It is the single most leveraged investment you will make in the first 30 days.

For chemicals where Tier 1 returns an “insufficient data” flag, escalate to Tier 2 (semi-quantitative, using prescribed literature sources) or Tier 3 (expert judgment by a CIH or toxicologist).

Cross-check each banded chemical against the OSHA Annotated PEL table:

Band A or B + existing OSHA PEL = high-priority sampling candidate
Band A or B + no OSHA PEL = high-priority “no PEL, high hazard” target (requires more rigorous control justification)
Band C + moderate use = secondary priority
Band D or E = lowest priority unless used heavily by a specific SEG

Flag substance-specific standard chemicals (lead, hexavalent chromium, beryllium, silica, methylene chloride, 1-BP) separately. Those have their own exposure assessment requirements regardless of band.

Days 31–45: Define Similar Exposure Groups

Walk the floor. Group workers by job task, frequency of chemical contact, and duration. A plant of 200 workers typically maps to 15–40 SEGs. For each SEG, document:

Job titles included
Tasks performed (from task analysis or observation)
Chemicals contacted (from inventory cross-reference)
Duration and frequency of contact per shift
Existing engineering controls and PPE
Number of workers in the SEG

SEG definition is where a first-time IH earns credibility with operations — the SEGs must reflect how work actually happens, not how the org chart reads. Shift differences, rotating assignments, and overlap between departments all matter.

Days 46–60: Build the Prioritization Matrix

Combine the OEB band, SEG contact data, existing controls, and data uncertainty into a single priority matrix. A workable scoring model:

Hazard weight: A=5, B=4, C=3, D=2, E=1
Frequency weight: Daily=4, Weekly=3, Monthly=2, Rare=1
Control weight: None=3, PPE only=2, Engineering + PPE=1
Uncertainty weight: No data=3, Old/task-specific data=2, Current SEG-based data=1

Multiply the four weights for each chemical–SEG combination. The highest-scoring combinations become the top priorities for sampling.

Typical outcome: of 400 chemicals across 20 SEGs (8,000 possible combinations), 80–120 combinations land in the top 10–15% and drive the first 12–18 months of sampling work.

Days 61–80: Write the Qualitative Exposure Assessment

AIHA PGP expects a documented QEA for each SEG. For each SEG, the QEA records:

The SEG definition
The chemicals in scope for that SEG
The banding rationale for each chemical
The IH’s judgment: acceptable, unacceptable, or uncertain
The evidence supporting that judgment
The monitoring plan to resolve uncertain judgments

“Uncertain” is the judgment category that converts into a sampling event. Every SEG-chemical combination flagged as uncertain should map to a specific sampling plan entry.

The QEA is the audit artifact. OSHA, insurance carriers, corporate auditors, and plaintiffs’ attorneys in an occupational-disease claim all ask for exactly this document. Without it, the plant has no evidentiary defense for exposure judgments. With it, the judgments are dated, documented, and defensible.

Days 81–90: Publish the Sampling Plan and Written Program

The sampling plan should state:

The priority chemical–SEG combinations from the matrix
The sampling method for each (OSHA Methods, NIOSH Methods, ASTM)
The target sample size (AIHA PGP recommends a minimum of 6 samples per SEG-chemical combination to make a statistically defensible judgment)
The schedule (typically, top priorities in the first 12 months; secondary priorities in the second year)
The re-assessment trigger (new chemical, process change, incident, turnover in SEG composition)

The written program should document the methodology itself — how SEGs were defined, how banding was done, how priorities were set. This document is what a corporate audit, an OSHA inspection, or a workers’ compensation claim will demand. The methodology document is as important as the sampling data.

Feeding the Framework Back into HazCom 2024 Training

The employer HazCom 2024 compliance deadline is November 20, 2026. The SEG definitions and priority chemical list feed directly into HazCom 2024 training content:

Workers get trained on the chemicals they actually touch, organized by SEG
GHS categories learned in training map to the bands in the IH’s framework
Updated SDSs (post-May 19, 2026 from suppliers) feed the classification refresh cycle

HazCom training that is generic — “here are pictograms, here is where the SDSs are kept” — meets the regulatory floor but adds no operational value. HazCom training built on top of the SEG-based QEA tells each worker exactly which chemicals they are most exposed to and what the controls are.

What Defends the Plant on an Occupational-Disease Claim

The hardest part of this framework is not building it. It is documenting it in a form that holds up years later when a former worker files a claim.

Three documents — together — carry the evidentiary load:

The written IH program describing the methodology (AIHA PGP + NIOSH OEB + SEG definitions + prioritization matrix)
The dated QEA for each SEG showing what was judged, when, and on what evidence
The sampling records showing the monitoring done to resolve uncertain judgments

If those three are in place, the plant has a defensible exposure history. If any of the three is missing, every exposure before the IH arrived is effectively undocumented.

State-Level Variations

Federal HazCom and Subpart Z apply in every state. Cal/OSHA maintains its own PEL table with more stringent values on many substances than federal OSHA. Several state-plan states (Kentucky, Tennessee, Michigan, North Carolina, and others) generally adopt federal HazCom wholesale but enforce through state inspectors. Missouri, Kansas, Oklahoma, Nebraska, and Arkansas are federal OSHA states where HazCom 2024 applies directly.

A manufacturer standardizing across multiple states should use federal HazCom 2024 as the floor and Cal/OSHA-aligned exposure limits as the ceiling where operations run in California. That approach tends to satisfy every jurisdiction.

The Hard Parts

Three predictable difficulties come with this framework:

SDS quality. Many SDSs are out of date or carry incomplete GHS classifications. The May 19, 2026 manufacturer compliance deadline will improve this considerably, but a first-time IH will likely be working with a mix of HazCom-2012-era and HazCom-2024-era SDSs through late 2026. When an SDS is incomplete, NIOSH Tier 2 or Tier 3 banding is required — which means more IH time per chemical.

SEG boundaries on a real shop floor. Shift work, rotating assignments, overtime, and cross-training blur SEG boundaries. The pragmatic approach is to define the dominant SEG for each worker (where they spend the majority of their time) and then note secondary exposure profiles. Do not try to build an SEG for every edge case.

The political conversation about “uncertain” judgments. “Uncertain” is not a weak judgment — it is the honest one when data is missing. But operations teams sometimes read “uncertain” as “the IH doesn’t know what they are doing.” The first-time IH needs to be clear with management: “uncertain” is the technical term that triggers sampling, not a confession of incompetence. The sampling plan resolves the uncertainty.

When iSi Steps In

iSi’s industrial hygiene team regularly supports first-time IHs and plants onboarding a new IH program. Typical engagements include the full inherited-inventory reconciliation, NIOSH OEB banding for 300–600 chemicals, SEG definition from task observation, the written QEA and written IH program, and HazCom 2024 training alignment by the November 20, 2026 deadline. On multi-site operations, we standardize methodology across plants so corporate EHS has one document to audit against, not one per facility.

If you are the new IH — or the EHS director hiring or onboarding one — and the 400-chemical inventory is on your desk, the next step is a 30-minute scoping call. We will walk through the inventory at a high level and lay out what the first 90 days actually look like.