1.4 Hierarchy of Hazard Controls

Key Takeaways

  • The Hierarchy of Controls prioritizes risk controls in order of effectiveness: Elimination, Substitution, Engineering Controls, Administrative Controls, and Personal Protective Equipment (PPE).
  • Elimination and Substitution are physical design-stage controls that provide the highest level of protection by removing or replacing the hazard.
  • Engineering Controls isolate workers from hazards through physical barriers, enclosures, ventilation, and automated safety interlocks.
  • PPE is the least effective level of control and serves strictly as the last line of defense because it does not alter or remove the hazard.
Last updated: July 2026

1.4 Hierarchy of Hazard Controls

Core Framework: The Hierarchy of Hazard Controls is a standardized system used across occupational safety frameworks (such as ISO 45001 and OSHA) to control workplace hazards. Controls are arranged in order of decreasing effectiveness, requiring safety professionals to prioritize higher-tier solutions over lower-tier reliance on human behavior.

When risk assessments identify acceptable or unacceptable risks, organizations must select appropriate control measures. Simply assigning personal protective equipment (PPE) is an inadequate safety strategy. The Hierarchy of Controls mandates that hazards be systematically controlled at their source whenever possible.


The 5 Levels of Hazard Control

The hierarchy consists of five distinct control tiers, ranked from most effective to least effective:

[1. ELIMINATION] ➔ [2. SUBSTITUTION] ➔ [3. ENGINEERING CONTROLS] ➔ [4. ADMINISTRATIVE CONTROLS] ➔ [5. PPE]

Level 1: Elimination (Most Effective)

Elimination completely removes the hazard from the workplace or design. Because the hazard no longer exists, the risk is reduced to absolute zero.

  • Mechanism: Design out hazardous steps or avoid dangerous materials altogether.
  • Industrial Examples:
    • Eliminating high-altitude working requirements by assembling equipment at ground level before hoisting.
    • Eliminating high-pressure hydraulic lines by switching to low-voltage electric actuators.
    • Discontinuing the use of toxic solvents in favor of mechanical cleaning.
  • Challenge: Often requires significant design changes or capital expenditure during initial project stages.

Level 2: Substitution

Substitution replaces a high-hazard material, process, or piece of equipment with a lower-hazard alternative. While the hazard is not entirely eliminated, the severity or likelihood of harm is dramatically reduced.

  • Mechanism: Swap dangerous inputs for safer materials.
  • Industrial Examples:
    • Replacing benzene-based industrial solvents with water-based biodegradable cleaning agents.
    • Replacing lead-based paints with non-toxic acrylic coatings.
    • Replacing pneumatic high-noise tools with quiet hydraulic machinery.
  • Caution: Must be evaluated carefully to ensure the substitute material does not introduce unexpected new hazards (e.g., swapping a toxic non-flammable chemical for a highly flammable non-toxic chemical).

Level 3: Engineering Controls

Engineering Controls physically isolate workers from the hazard or install automated safety barriers. They control the hazard at the source without relying on human intervention or behavior.

  • Mechanism: Enclose, guard, ventilate, or isolate the hazard physically.
  • Industrial Examples:
    • Isolation & Enclosure: Acoustic baffles around generators, blast walls around high-pressure reactors.
    • Ventilation: Local Exhaust Ventilation (LEV) hoods extracting welding fumes at the source.
    • Machine Guarding: Fixed interlocked guards over rotating lathe chucks and conveyor belts.
    • Automated Interlocks: Pressure-relief valves and emergency automated shutdown switches (ESD).
  • Advantage: Functions automatically regardless of worker fatigue or human error.

Level 4: Administrative Controls

Administrative Controls alter the way work is organized, performed, and scheduled. They do not remove hazards; instead, they limit worker exposure through rules, procedures, and training.

  • Mechanism: Management procedures, training, scheduling, and signages.
  • Industrial Examples:
    • Implementing formal Permit to Work (PTW) and Lockout/Tagout (LOTO) systems.
    • Conducting mandatory Job Safety Analyses (JSA) and pre-shift Toolbox Talks (TBT).
    • Implementing job rotation schedules to reduce worker heat stress or noise exposure hours.
    • Installing safety warning signs, line markings, and restricted access zone barriers.
  • Limitation: Highly dependent on human compliance, supervision, discipline, and ongoing memory.

Level 5: Personal Protective Equipment (PPE - Least Effective)

PPE places a physical barrier directly on the worker's body (e.g., hard hats, safety boots, safety goggles, respirators, full-body harnesses). PPE is universally recognized as the last line of defense.

  • Mechanism: Protects individual workers from contact with hazards.
  • Industrial Examples: Safety helmets, steel-toe safety boots, chemical splash goggles, ear defenders, fall-arrest harnesses.
  • Why PPE is Least Effective:
    1. Does not remove or alter the hazard in the environment; the hazard remains fully present.
    2. Protection fails completely if PPE is damaged, ill-fitting, improperly worn, or neglected.
    3. Can create secondary hazards (e.g., reduced mobility, heat strain, restricted field of vision).
    4. Requires continuous human compliance and active maintenance.

Hierarchy of Controls Summary & Comparison

LevelControl CategoryEffectivenessReliance on Human BehaviorPrimary Objective
1EliminationHighestZeroPhysically remove the hazard completely
2SubstitutionHighLowReplace hazard with a safer alternative
3EngineeringModerate-HighLowIsolate workers from the hazard physically
4AdministrativeModerate-LowHighEstablish safe operating procedures & limits
5PPELowestMaximumProtect worker body against remaining exposure

Defense-in-Depth Control Strategy

Effective safety engineering rarely relies on a single control tier. Instead, safety management systems implement a defense-in-depth model combining multiple layers. For example, when working inside a chemical storage tank, a robust strategy includes:

  • Substitution (Level 2): Washing the tank with low-toxicity cleaning agents.
  • Engineering (Level 3): Operating forced-air mechanical ventilation fans.
  • Administrative (Level 4): Issuing a Confined Space Entry Permit and assigning a standby watchman.
  • PPE (Level 5): Equipping entry personnel with supplied-air respirators and chemical splash suits.
Loading diagram...
The Inverted Pyramid Hierarchy of Hazard Controls
Test Your Knowledge

Which control measure represents the most effective level within the Hierarchy of Hazard Controls?

A
B
C
D
Test Your Knowledge

Installing local exhaust ventilation (LEV) to remove toxic fumes at a welding station is an example of which control level?

A
B
C
D
Test Your Knowledge

Why is Personal Protective Equipment (PPE) categorized as the last line of defense in hazard control?

A
B
C
D