Hierarchy of Controls and Control Selection

Control selection follows risk-reduction logic

The hierarchy of controls is a ranked sequence of ways to reduce risk, codified by the National Institute for Occupational Safety and Health (NIOSH) and embedded in ANSI/ASSP Z10 and ISO 45001 Clause 8.1.2. It is not just a list to memorize — it encodes a prevention principle: controls that remove the hazard or physically separate people from it are more reliable than controls that depend on attention, memory, or perfect behavior during every exposure.

The five levels, most to least effective:

1. Elimination — physically remove the hazard or the task entirely.
2. Substitution — replace the hazard with a less hazardous material, process, tool, or energy source.
3. Engineering controls — isolate people from the hazard by design (guards, ventilation, enclosure, interlocks).
4. Administrative controls — change how people work (procedures, permits, rotation, signage, training, scheduling).
5. Personal protective equipment (PPE) — a barrier worn on the worker (gloves, respirator, hearing protection, face shield).

Why the top three win

Elimination, substitution, and engineering controls reduce risk without significant human interaction, so their reliability does not erode shift to shift. Administrative controls and PPE are the lowest two tiers precisely because they require a worker to do the right thing every time. NIOSH groups the first three as inherently more protective for this reason.

ASP items frequently test whether you jump too quickly to training or PPE. Training is important, but it does not remove a rotating shaft, lower airborne concentration, or eliminate a fall exposure. PPE can be required, but it is the last line of defense. The stronger answer is usually to redesign, guard, enclose, ventilate, automate, or substitute at the source.

Checking for new hazards and layering

Control selection requires checking for introduced hazards. A substitution can cut toxicity but raise flammability (a lower flash point). A machine enclosure can trap heat or block maintenance access. Automation can introduce stored energy and troubleshooting exposure. Job rotation can lower individual dose while increasing the number of people exposed.

Layered controls are normal. A confined-space task may require eliminating entry where possible, isolation and lockout, ventilation, atmospheric testing, an entry permit, an attendant, rescue planning, communication, and PPE — all at once. The hierarchy does not say PPE is never used; it says PPE should not be the only answer when higher-level controls are feasible.

Worked example: workers are overexposed to noise at 92 dBA on an 8-hour shift, above the OSHA 90 dBA permissible exposure limit (PEL). Issuing earplugs (PPE) is the reflexive answer and the weakest tier. Stronger options follow the hierarchy: substitute quieter equipment, add engineering controls such as enclosures or damping, then use administrative limits on exposure time, and only then rely on hearing protection for residual exposure — always reassessing the residual dose.

Exam workflow

• If the task can be removed, consider elimination.
• If the hazard can be made less hazardous, consider substitution.
• If exposure can be physically prevented or reduced, use engineering controls.
• If work must still occur, add procedures, scheduling, permits, supervision, and training.
• Select PPE for remaining exposure and verify suitability and fit.
• Reassess residual risk after controls are installed, including during cleaning, maintenance, and abnormal conditions.

Feasibility, effectiveness, and the prevention-through-design link

Two feasibility tests appear in exam reasoning. Engineering feasibility asks whether a control can technically be built and operated; economic feasibility asks whether the cost is reasonable relative to the risk reduced. The hierarchy is a preference order, not a rigid mandate — but ISO 45001 Clause 8.1.2 requires that lower-tier controls be justified, meaning you should document why a higher tier was not used. The exam penalizes answers that leap to PPE "because it is cheaper" without showing that elimination, substitution, or engineering were infeasible.

Prevention through Design (PtD), a NIOSH national initiative, applies the hierarchy at the earliest possible stage — in the design of facilities, equipment, processes, and work — when elimination and substitution are cheapest and most effective. The cost of changing a control rises sharply as a project moves from concept to construction to operation, so the highest-leverage controls are chosen before steel is set, not after an injury.

PPE as a managed system, never a single act

When PPE is required, it must be administered as a program, not handed out once. A defensible PPE program includes a hazard assessment to select the right equipment, proper fit (for respirators, a documented fit test under the OSHA respiratory protection standard, 29 CFR 1910.134), training on use and limitations, inspection, cleaning, storage, and replacement. Worked example: workers wear N95 respirators against a vapor, but vapors are not filtered by particulate respirators — the wrong PPE class was selected, so residual risk is essentially unchanged.

The lesson the exam tests: PPE only reduces risk if the right device is correctly selected, fitted, used, and maintained, which is exactly why it sits at the bottom of the hierarchy.