17.3 Workplace Safety: OSHA Standards, Hazard Analysis, and Control Hierarchy

Workplace safety, occupational health, and industrial ergonomics are governed by comprehensive federal statutory frameworks, consensus technical standards, and quantitative hazard assessment methodologies. Industrial engineers play a direct, legal role in designing production systems, material handling lines, and maintenance workflows that comply with federal standards while minimizing operational risk. On the NCEES FE Industrial and Systems examination, questions in this domain evaluate regulatory compliance, incident rate mathematics, Job Hazard Analysis (JHA) procedures, machine safeguarding specifications, and hazardous energy control protocols.

---

1. The Occupational Safety and Health Act and General Duty Clause

The Occupational Safety and Health Act of 1970 (OSH Act, Public Law 91-596) established the modern federal regulatory infrastructure for occupational welfare, creating two complementary federal entities:

• OSHA (Occupational Safety and Health Administration): An agency of the U.S. Department of Labor (DOL) responsible for promulgating enforceable occupational safety and health standards, conducting workplace compliance inspections, and issuing citations and financial penalties.
• NIOSH (National Institute for Occupational Safety and Health): A scientific research agency within the Centers for Disease Control and Prevention (CDC) under the Department of Health and Human Services (HHS). NIOSH conducts epidemiological research, tests workplace hazards, and publishes technical recommendations and criteria documents (such as the RNLE), but possesses no regulatory enforcement or citation authority.

The General Duty Clause: Section 5(a)(1)

While OSHA maintains thousands of specific codifications under Title 29 of the Code of Federal Regulations (CFR)—such as 29 CFR 1910 for General Industry and 29 CFR 1926 for Construction—technological and industrial advancements frequently produce hazardous conditions for which no specific, promulgated standard yet exists (e.g., severe ergonomic lifting stressors, occupational heat illness, workplace violence). Under such circumstances, OSHA enforces compliance via Section 5(a)(1) of the OSH Act, commonly known as the General Duty Clause:

"Each employer shall furnish to each of his employees employment and a place of employment which are free from recognized hazards that are causing or are likely to cause death or serious physical harm to his employees."

To establish a lawful violation of the General Duty Clause, the government must establish four distinct legal elements:

1. A condition or activity in the workplace presented a hazard to employees.
2. The employer or the employer's industry recognized the hazard (evidenced by internal company safety policies, OSHA hazard alerts, trade association guidelines, or widespread scientific consensus).
3. The hazard caused or was likely to cause death or serious physical harm.
4. A feasible and useful method existed to eliminate or significantly reduce the hazard.

---

2. OSHA Injury and Illness Recordkeeping (29 CFR Part 1904)

Under 29 CFR Part 1904, employers with more than 10 employees (unless classified in a low-hazard retail, finance, or real estate exempt industry) must maintain official logs of work-related injuries and illnesses.

                    OSHA Recordability Decision Tree
                           Work-Related Event?
                                   │
                       ┌───────────┴───────────┐
                      Yes                      No ──► Do NOT Record
                       │
                   New Case?
                       │
           ┌───────────┴───────────┐
          Yes                      No ──► Do NOT Record (Recurrence)
           │
   Meets Recording Criteria?
   - Death
   - Days away from work
   - Job restriction / transfer
   - Medical treatment beyond first aid
   - Loss of consciousness
   - Significant diagnosed condition
           │
   ┌───────┴───────┐
  Yes              No (First Aid only) ──► Do NOT Record
   │
Record on OSHA Forms 300, 301, 300A

General Recording Criteria

An injury or illness is considered work-related if an event or exposure in the work environment either caused or contributed to the resulting condition, or significantly aggravated a pre-existing condition. A work-related case must be recorded on OSHA forms if it results in any of the following outcomes:

1. Death (must be reported directly to OSHA within 8 hours; inpatient hospitalizations, amputations, or eye loss must be reported within 24 hours).
2. Days away from work (count begins the day after the injury occurred; calendar days are counted, capped at a maximum of 180 days).
3. Restricted work activity or transfer to another job (when the employer keeps the worker from performing one or more routine job functions).
4. Medical treatment beyond first aid.
5. Loss of consciousness (regardless of duration).
6. Significant diagnosed injury or illness by a physician or licensed healthcare professional (e.g., fractured bone, punctured eardrum, occupational cancer).

First Aid vs. Medical Treatment (Critical Exam Distinction)

NCEES exam questions frequently test candidates on whether an intervention constitutes "First Aid" (non-recordable) or "Medical Treatment" (recordable). Under 29 CFR 1904.7(b)(5)(ii), First Aid is strictly and exhaustively defined as:

• Using non-prescription medication at non-prescription strength (using prescription medication, or OTC medication at prescription dosages, is Medical Treatment!).
• Administering tetanus immunizations (other immunizations, like hepatitis B vaccines after exposure, are Medical Treatment).
• Cleaning, flushing, or soaking wounds on the surface of the skin.
• Using wound coverings such as bandages, Band-Aids, or gauze pads (using sutures, staples, or surgical glues is Medical Treatment!).
• Using hot or cold therapy.
• Using non-rigid means of support (elastic bandages, wraps; using rigid splints, casts, or orthopedic immobilization is Medical Treatment!).
• Using eye patches.
• Removing foreign bodies from the eye using only irrigation or a cotton swab.
• Removing splinters from the body using tweezers or simple swabs.
• Drinking fluids to relieve heat stress.

Official OSHA Recordkeeping Forms

• OSHA Form 301 (Injury and Illness Incident Report): Detailed case document capturing employee demographics, healthcare provider details, date of hire, equipment involved, and the precise physical narrative of each incident. Must be completed within 7 calendar days of receiving notice of an injury.
• OSHA Form 300 (Log of Work-Related Injuries and Illnesses): The ongoing, running master ledger listing case numbers, employee names, job descriptions, injury locations, and outcome classifications (death, days away, restricted work, other recordable).
• OSHA Form 300A (Summary of Work-Related Injuries and Illnesses): The certified annual summary page totaling the number of cases, lost days, restricted days, and total hours worked across the entire facility. Form 300A must be certified and signed by a corporate company executive (CEO, corporate officer, or plant general manager) and posted in an open, conspicuous location from February 1 through April 30 of the year following the logged calendar year. Records must be retained on site for at least 5 years.

---

3. Quantitative Safety Rates: TRIR, DART, and Severity Rate

To enable meaningful safety benchmarking across industrial facilities of differing sizes, OSHA and the Bureau of Labor Statistics (BLS) normalize incident frequencies against an empirical exposure baseline of $200,000\text{ employee-hours}$.

$\text{Exposure Base} = 100\text{ full-time equivalent (FTE) workers} \times 40\frac{\text{hours}}{\text{week}} \times 50\frac{\text{weeks}}{\text{year}} = 200,000\text{ hours/year}$

3.1 Total Recordable Incident Rate ($TRIR$)

The Total Recordable Incident Rate ($TRIR$) (also designated as the OSHA Recordable Rate) measures the total incidence of all recordable injuries and illnesses per 100 full-time workers per year:

$TRIR = \frac{\text{Total Number of Recordable Cases} \times 200,000}{\text{Total Employee Hours Worked}}$

Where the numerator includes all cases resulting in death, days away from work, job transfer/restriction, and medical treatment beyond first aid.

3.2 Days Away, Restricted, or Transferred Rate ($DART$)

The DART Rate isolates severe incidents that directly impair operational labor capacity by removing the employee from the workplace or restricting their primary work functions:

$DART = \frac{(\text{Cases with Days Away} + \text{Cases with Job Restriction or Transfer}) \times 200,000}{\text{Total Employee Hours Worked}}$

3.3 Severity Rate / Lost Workday Rate ($SR$)

The Severity Rate ($SR$) measures the average duration and organizational disruption of lost-time incidents by tracking the total number of actual lost workdays:

$SR = \frac{\text{Total Lost Workdays} \times 200,000}{\text{Total Employee Hours Worked}}$

---

4. Job Hazard Analysis (JHA / JSA)

A Job Hazard Analysis (JHA) (also known as a Job Safety Analysis, JSA) is a systematic, structured procedure that breaks down a specific job task into individual sequential operational steps, identifies potential health and safety hazards at each step, and formulates engineering and administrative controls to mitigate risk.

                      The 5-Step JHA Sequential Procedure
  ┌─────────────────────────────────────────────────────────────────────────┐
  │ Step 1: Select the Job to Analyze                                       │
  │         (Prioritize jobs with high injury frequency, catastrophic       │
  │          potential, newly introduced equipment, or modified workflows). │
  ├─────────────────────────────────────────────────────────────────────────┤
  │ Step 2: Break the Job Down into Sequential Operational Steps            │
  │         (Maintain chronological order; aim for 5 to 10 logical action   │
  │          steps; avoid being too broad or excessively granular).         │
  ├─────────────────────────────────────────────────────────────────────────┤
  │ Step 3: Identify Potential Hazards at Each Step                         │
  │         (Analyze mechanical, electrical, thermal, chemical, ergonomic,  │
  │          and environmental hazards).                                    │
  ├─────────────────────────────────────────────────────────────────────────┤
  │ Step 4: Formulate Preventive and Corrective Controls                     │
  │         (Apply the Hierarchy of Controls: Elimination, Substitution,     │
  │          Engineering Controls, Administrative Controls, and PPE).       │
  ├─────────────────────────────────────────────────────────────────────────┤
  │ Step 5: Review, Document, and Periodically Update the JHA               │
  │         (Train operating personnel; re-evaluate after any near-miss,     │
  │          accident, or equipment revision).                              │
  └─────────────────────────────────────────────────────────────────────────┘

JHA Exam Tips on Granularity

On the FE Industrial exam, a common question tests the proper granularity of JHA step breakdown:

• Too Broad: Steps like "operate milling machine" or "repair stamping press" are unacceptable because they conceal critical hazard points (such as mounting the workpiece or clearing chips).
• Too Detailed: Steps like "reach out right hand 14 inches" or "lift thumb off toggle switch" create unwieldy, unmanageable micro-motion logs that distract from meaningful hazard recognition.
• Optimal: A clear, chronological action statement describing what is done, such as: "Manually position 25-lb casting into hydraulic clamping fixture."

---

5. The NIOSH/OSHA Hierarchy of Controls

When mitigating an identified occupational hazard, industrial engineers must apply the Hierarchy of Controls. The controls are ranked in rigid descending order of effectiveness, reliability, and sustainability:

                       Hierarchy of Controls
   ▲  Most        ┌──────────────────────────────────────────────┐
   │  Effective   │ 1. ELIMINATION                               │
   │              │    Physically remove the hazard.             │
   │              ├──────────────────────────────────────────────┤
   │              │ 2. SUBSTITUTION                              │
   │              │    Replace the hazard with a safer one.      │
   │              ├──────────────────────────────────────────────┤
   │              │ 3. ENGINEERING CONTROLS                      │
   │              │    Isolate workers from the hazard.          │
   │              ├──────────────────────────────────────────────┤
   │              │ 4. ADMINISTRATIVE CONTROLS                   │
   │              │    Change the way people work.               │
   │  Least       ├──────────────────────────────────────────────┤
   ▼  Effective   │ 5. PERSONAL PROTECTIVE EQUIPMENT (PPE)       │
                  │    Protect worker with personal equipment.   │
                  └──────────────────────────────────────────────┘

1. Elimination (Most Effective): Physically remove the hazard completely from the environment. Examples include: automating a dangerous palletizing station to eliminate manual lifting; redesigning an assembly to snap together without requiring toxic hot solvent bonding.
2. Substitution: Replace a hazardous substance, equipment, or process with an inherently safer alternative. Examples include: replacing a carcinogenic solvent (e.g., benzene) with an aqueous citrus-based cleaner; substituting high-noise pneumatic impact wrenches with low-noise DC electric torque drivers.
3. Engineering Controls: Physical, structural modifications to the workplace or equipment that isolate the worker from the hazard without relying on human behavior. Examples include: machine guards, interlocks, local exhaust ventilation (fume hoods), acoustic enclosures around compressors, and mechanical lift-assist tables.
4. Administrative Controls: Policies, operating procedures, training, warning signs, and scheduling that alter work behavior to minimize exposure duration. Examples include: job rotation among line operators, mandatory stretching breaks, preventive maintenance schedules, and hazardous materials training. These rely entirely on human compliance and supervisory oversight.
5. Personal Protective Equipment (PPE) (Least Effective): Equipping the individual worker with protective gear (respirators, safety goggles, earplugs, steel-toed boots, cut-resistant gloves). PPE is the last line of defense because: it does not eliminate or attenuate the hazard in the environment; equipment can fail or fit improperly; and protection depends $100%$ on continuous, correct human behavior.

---

6. Machine Guarding Standards (OSHA 29 CFR 1910.212)

Under 29 CFR 1910.212 (General Requirements for all Machines), one or more methods of machine guarding must be provided to protect the machine operator and other employees in the machine area from hazards such as those created by the point of operation, inrunning nip points, rotating parts, and flying chips and sparks.

Machine Hazard Zones

• Point of Operation: The physical location on a machine where work is actually performed upon the material (e.g., cutting, shaping, punching, boring, forming, shearing, or stamping). If an operator's hands can enter the point of operation during cycle activation, guarding is mandatory.
• Power Transmission Apparatus (29 CFR 1910.219): Mechanical components that transmit power from the prime mover to the machine, including flywheels, pulleys, belts, connecting rods, couplings, cams, spindles, gears, chains, and sprockets. Any power transmission apparatus located $7\text{ feet}$ or less above the floor or working platform must be completely enclosed.
• Inrunning Nip Points: Hazard areas where two or more machine parts rotate toward each other (e.g., inrunning calendar rolls, gear meshes, conveyor belts running over drive pulleys). Rotating parts draw clothing, hair, or limbs inward with destructive crushing force.

                     Types of Machine Safeguards
   ┌──────────────────────┬──────────────────────────────────────────────────┐
   │ Safeguard Category   │ Operating Principles & Mechanical Design         │
   ├──────────────────────┼──────────────────────────────────────────────────┤
   │ Fixed Guard          │ Permanent, physical barrier attached by screws,  │
   │                      │ bolts, or welding; requires tools to remove.     │
   ├──────────────────────┼──────────────────────────────────────────────────┤
   │ Interlocked Guard    │ Guard wired directly to drive power; opening the │
   │                      │ guard trips a switch that cuts power and brakes. │
   ├──────────────────────┼──────────────────────────────────────────────────┤
   │ Adjustable Guard     │ Barrier manually adjusted to fit different stock │
   │                      │ thicknesses (introduces operator error risk).    │
   ├──────────────────────┼──────────────────────────────────────────────────┤
   │ Self-Adjusting Guard │ Barrier pushed open by incoming stock, returning │
   │                      │ automatically to closed position (e.g., saw).    │
   ├──────────────────────┼──────────────────────────────────────────────────┤
   │ Presence-Sensing     │ Light curtains or infrared grids that detect an  │
   │ Device               │ intruding hand and instantly brake the machine.  │
   ├──────────────────────┼──────────────────────────────────────────────────┤
   │ Two-Hand Control     │ Requires simultaneous, continuous depression of  │
   │                      │ two widely spaced buttons to activate stroke.    │
   └──────────────────────┴──────────────────────────────────────────────────┘

---

7. Control of Hazardous Energy / Lockout/Tagout (LOTO - 29 CFR 1910.147)

OSHA 29 CFR 1910.147 establishes minimum performance requirements for the control of hazardous energy during the servicing and maintenance of machines and equipment, where the unexpected energization, startup, or release of stored energy could cause catastrophic injury or fatality.

Forms of Hazardous Energy

Energy hazards extend far beyond high-voltage electricity: Electrical, Mechanical (rotating flywheels), Hydraulic (fluid under pressure), Pneumatic (compressed air in lines), Chemical (trapped toxic or corrosive fluids), Thermal (steam, hot oil), and Potential Stored Energy (compressed mechanical springs, elevated gravity-supported machine dies or counterweights).

Critical Definitions

• Energy Isolating Device: A physical, mechanical device that prevents the transmission or release of energy (e.g., a manually operated electrical circuit breaker, a disconnect switch, a pipeline ball valve, a blind flange, or a mechanical safety block). Crucial Exam Rule: Control circuit devices such as pushbuttons, selector switches, and software E-stops are NOT energy isolating devices!
• Authorized Employee: The qualified person who applies the lock or tag to equipment in order to perform servicing or maintenance. Only the authorized employee who placed the lock is legally permitted to remove it.
• Affected Employee: An employee whose job requires them to operate equipment undergoing servicing under LOTO, or whose job requires them to work in an area where servicing is being performed.

The 6-Step LOTO Isolation Sequence

                  The 6-Step Standard LOTO Sequence
  ┌────────────────────────────────────────────────────────────────────────┐
  │ 1. Preparation for Shutdown: Authorized employee identifies energy     │
  │    sources, hazards, and specific control procedures.                  │
  ├────────────────────────────────────────────────────────────────────────┤
  │ 2. Machine Shutdown: Turn off equipment using standard operational     │
  │    controls (stop pushbutton).                                         │
  ├────────────────────────────────────────────────────────────────────────┤
  │ 3. Machine Isolation: Disconnect all energy isolating devices          │
  │    (throw disconnect switch, close inline valves).                     │
  ├────────────────────────────────────────────────────────────────────────┤
  │ 4. Lockout/Tagout Application: Attach assigned standardized padlocks   │
  │    and tags to each isolating device in the "off" or "safe" position.  │
  ├────────────────────────────────────────────────────────────────────────┤
  │ 5. Stored Energy Control / Dissipation: Relieve, disconnect, or block  │
  │    residual energy (bleed air lines, vent pressure, ground capacitors, │
  │    insert mechanical safety blocks under raised dies).                 │
  ├────────────────────────────────────────────────────────────────────────┤
  │ 6. Verification of Isolation: Test the equipment operating controls to │
  │    verify zero energy state, confirm with a voltmeter, then return     │
  │    operating controls to "off" position.                               │
  └────────────────────────────────────────────────────────────────────────┘

Minor Servicing Exception

LOTO does not apply to routine, minor tool changes and adjustments during normal production operations if they are routine, repetitive, and integral to the use of the equipment for production, provided that alternative effective protection (such as specially designed interlocked tooling guards or remote tool changers) is utilized.