4.3 Hierarchy of Risk Controls: From Elimination to Personal Protective Equipment

Key Takeaways

  • The Hierarchy of Controls is a statutory mandate under OHS Act Section 8(2)(b), requiring employers to eliminate or mitigate hazards before resorting to personal protective equipment.
  • The five hierarchical tiers in descending order of efficacy and reliability are: Elimination (physically remove), Substitution (replace), Engineering Controls (isolate people), Administrative Controls (change work methods), and PPE (protect individual wearer).
  • Higher-order controls (Elimination, Substitution, Engineering) provide collective protection independent of worker behavior, whereas lower-order controls (Administrative, PPE) rely entirely on individual human compliance and supervisory vigilance.
  • Construction Regulation 6 places a statutory duty on Designers to apply the hierarchy of controls during the design phase, eliminating foreseeable risks before site establishment.
  • Prescribing PPE as the primary or sole control for significant hazards is a criminal offense under Section 38 of the OHS Act and constitutes a failure of the employer's general duty of care.
Last updated: September 2026

4.3 Hierarchy of Risk Controls: From Elimination to Personal Protective Equipment

[!NOTE] The Statutory Mandate: In South African occupational safety jurisprudence, the Hierarchy of Controls is not a theoretical concept or optional industry guideline—it is a binding statutory mandate. Section 8(2)(b) of the Occupational Health and Safety Act 85 of 1993 requires the employer to take such steps as may be reasonably practicable to eliminate or mitigate any hazard to the safety or health of employees "...before resorting to personal protective equipment." Jumping straight to PPE while neglecting higher-order controls is a direct criminal breach of the employer's duty of care.


The Architecture of the Hierarchy of Controls

The Hierarchy of Controls organizes risk mitigation strategies into five descending tiers, ranked from the most effective and reliable to the least effective and least sustainable:

+════════════════════════════════════════════════════════════════════════════════+
|                      THE HIERARCHY OF RISK CONTROLS                            |
+════════════════════════════════════════════════════════════════════════════════+
|  1. ELIMINATION          │ Physically remove the hazard completely from the    |
|     [Most Effective]     │ workplace. Risk is reduced to absolute ZERO.        |
+──────────────────────────+─────────────────────────────────────────────────────+
|  2. SUBSTITUTION         │ Replace the hazard with a significantly less        |
|                          │ dangerous material, substance, machine, or process. |
+──────────────────────────+─────────────────────────────────────────────────────+
|  3. ENGINEERING CONTROLS │ Isolate people from the hazard through physical     |
|                          │ barriers, guards, ventilation, or structural means. |
+──────────────────────────+─────────────────────────────────────────────────────+
|  4. ADMINISTRATIVE       │ Change the way people work via procedures, permits, |
|     CONTROLS             │ training, scheduling, rotation, and safety signage. |
+──────────────────────────+─────────────────────────────────────────────────────+
|  5. PERSONAL PROTECTIVE  │ Protect the individual worker with physical gear.   |
|     EQUIPMENT (PPE)      │ LAST LINE OF DEFENSE. Non-collective; relies on    |
|     [Least Effective]    │ human behavior; failure results in direct exposure. |
+════════════════════════════════════════════════════════════════════════════════+

Collective Protection vs. Individual Protection

A central principle governing the hierarchy is the distinction between collective protection and individual protection:

  • Higher-Order Controls (Tiers 1, 2, and 3) provide collective protection. They physically eliminate, substitute, or enclose the hazard, protecting everyone on site simultaneously. They function automatically and passively, requiring no active decision-making, behavioral compliance, or specialized gear from individual workers.
  • Lower-Order Controls (Tiers 4 and 5) provide individual protection. They leave the physical hazard fully present in the workplace environment and attempt to manage risk by altering human behavior (procedures, training) or placing a personal barrier on the worker (PPE). They are highly vulnerable to human error, fatigue, complacency, and improper fitment.

Level 1: Elimination (The Supreme Control)

Elimination involves the complete physical eradication of the hazard from the construction environment. When a hazard is eliminated, the probability of harm drops to zero.

Design-Phase Elimination (Construction Regulation 6)

Under Construction Regulation 6(1), the statutory duty to eliminate hazards begins with the Designer. Designers must take health and safety into account during the conceptual, preliminary, and detailed design stages of a structure. Examples include:

  • Designing Parapet Walls: Specifying permanent 1.1-meter high solid concrete parapet walls along roof perimeters in the structural drawings, completely eliminating the need for temporary edge protection during roofing and permanent fall arrest systems during future window cleaning or roof maintenance.
  • Underground Utility Routing: Designing permanent underground cable routes away from proposed building footprints, eliminating the hazard of overhead power line electrocution during crane and piling operations.
  • Eliminating Dangerous Materials: Specifying asbestos-free roofing sheets and lead-free structural paints in the architectural specification, eliminating toxic chemical exposure.

Construction-Phase Elimination Examples

  • Ground-Level Prefabrication: Assembling structural steel roof trusses, precast concrete modular pods, or mechanical pipe racks on the ground, and hoisting them into place with a mobile crane. This eliminates hundreds of hours of dangerous work at height.
  • Trenchless Technology: Utilizing Horizontal Directional Drilling (HDD) or micro-tunneling to install underground stormwater pipes beneath a busy highway, eliminating the need for deep, open-trench excavations.
  • Permanent De-energizing: Coordinating with the municipal electrical supply authority to completely isolate, de-energize, and earth an overhead high-voltage power line traversing the site prior to establishing tower cranes.

Level 2: Substitution (Replacing the Hazard)

Substitution involves replacing a hazardous material, machine, or process with a significantly less hazardous alternative. While the operational activity continues, the intrinsic severity of the hazard is substantially lowered.

Construction Site Substitution Examples

  • Hazardous Chemical Agents (HCAR): Replacing solvent-based, volatile organic compound (VOC) epoxy paints, primers, and floor sealers with water-based acrylic equivalents, dramatically reducing toxic vapor inhalation, occupational asthma, and flammability risks in enclosed basements.
  • Respiratory Crystalline Silica: Replacing traditional silica sand with non-toxic garnet grit, crushed glass, or steel shot during abrasive abrasive blasting operations, eradicating the risk of silicosis.
  • Electrical Power Tools: Replacing 230V mains-powered handheld electric tools (angle grinders, circular saws) with 18V/54V cordless battery-powered tools, or operating corded tools through 110V center-tapped-to-earth transformers (reducing the maximum shock voltage to earth to 55V, which is non-lethal under normal conditions).
  • Heavy Manual Handling: Replacing manual 50kg cement bag offloading with bulk silo tankers and automated screw conveyors, substituting musculoskeletal injury hazards with mechanical automation.
  • Noise and Vibration: Replacing pneumatic percussive jackhammers with hydraulic breaker attachments mounted on an excavator, or using diamond core drilling instead of hammer-action rotary drilling.

Level 3: Engineering Controls (Collective Physical Barriers)

Engineering controls physically isolate workers from the hazard or place an impenetrable barrier between the person and the source of danger. They modify the physical working environment or equipment mechanically.

The Collective Protection Principle

Engineering controls are highly valued by health and safety inspectors because they protect all personnel in the vicinity without requiring active cooperation or conscious behavioral effort from the worker.

Key Engineering Controls in South African Construction

Operational HazardStatutory RequirementEngineering Control Implementation
Falls from HeightCR 10 / SANS 10085Rigid Perimeter Guardrails: Installing compliant steel scaffolding guardrails consisting of a main top rail at 1,000mm, an intermediate rail at 500mm, and a solid 150mm toe-board. Catch platforms and debris netting below working decks.
Excavation CollapseConstruction Reg 13Trench Shoring Systems: Installing pre-fabricated hydraulic aluminum shoring, trench boxes, or steel sheet piling with soldier beams to mechanically support trench sidewalls exceeding 1.5m depth.
Machinery & PlantDriven Machinery RegsMachine Guarding: Installing fixed mesh guards around concrete mixer flywheels, interlocked barrier gates on material hoists, pull-cord emergency stop switches on aggregate conveyor belts.
Airborne Dust / FumesHCAR RegulationsLocal Exhaust Ventilation (LEV): Attaching integrated dust extraction shrouds with HEPA vacuum filters to wall chasers and masonry angle grinders to capture silica dust at the point of generation.
Plant / Pedestrian StrikeCR 23 (Mobile Plant)Engineered Pedestrian Walkways: Installing rigid steel barriers, pedestrian turnstiles, and overhead covered gantries to physically separate walking personnel from haul roads and dump trucks.
Excessive NoiseNoise-Induced Hearing Loss RegsAcoustic Enclosures: Housing stationary diesel generators, air compressors, and concrete batch plants inside acoustic sound-damping canopies.

Level 4: Administrative Controls (Work Process Modification)

Administrative controls alter the way work is organized, scheduled, supervised, and conducted. They do not remove the physical hazard from the workplace; instead, they establish behavioral rules, procedures, and temporal limits to reduce human exposure.

Vulnerability of Administrative Controls

Administrative controls rely entirely on human compliance, continuous supervision, and memory. If a worker forgets a rule, takes a shortcut under production pressure, or misinterprets an instruction, the barrier vanishes and immediate injury occurs.

Primary Administrative Systems on Construction Sites

+--------------------------------------------------------------------------------+
|                 Core Administrative Safety Systems on Site                     |
+--------------------------------------------------------------------------------+
| 1. Safe Work Procedures (SWPs) & Safe Work Method Statements (SWMS):           |
|    Documented step-by-step instructions derived from Issue-Based Risk          |
|    Assessments specifying how high-risk work must be conducted.                |
+--------------------------------------------------------------------------------+
| 2. Permit-to-Work (PTW) Systems:                                               |
|    Formal written authorization protocols required before commencing           |
|    hazardous work: Hot Work, Confined Space Entry, Lock-Out/Tag-Out (LOTO),    |
|    and Deep Excavations.                                                       |
+--------------------------------------------------------------------------------+
| 3. Exposure Reduction & Job Scheduling:                                        |
|    Rotating artisans every 2 hours to limit daily exposure to hand-arm         |
|    vibration (compactors/breakers) or high noise (>85 dBA); scheduling loud    |
|    or dusty operations during night shifts when fewer workers are present.     |
+--------------------------------------------------------------------------------+
| 4. Statutory Safety Signage (SANS 1186):                                       |
|    Displaying standardized symbolic safety signs (prohibition, warning,        |
|    mandatory PPE, and emergency information) at access gates and high-risk     |
|    zones.                                                                      |
+--------------------------------------------------------------------------------+
| 5. Induction and Training (CR 7(1)(c)(vii) & CR 9(3)):                              |
|    Mandatory site-specific safety induction, task competency training, and     |
|    daily DSTI pre-start briefings.                                             |
+--------------------------------------------------------------------------------+

Level 5: Personal Protective Equipment (The Last Line of Defense)

Personal Protective Equipment (PPE) provides a personal physical barrier worn by the individual worker. It is the lowest, least effective, and least sustainable tier in the hierarchy of controls.

Why PPE is the Last Resort

  1. Does Not Remove Hazard: The hazard remains at 100% intensity in the surrounding air, floor, or machinery. If a worker removes a respirator to speak, or unclips a harness to climb, exposure is instantaneous.
  2. Protects Only the Wearer: Unlike a guardrail or LEV hood which protects everyone in the area, a safety harness or dust mask protects only that specific individual.
  3. Prone to Human Error and Discomfort: PPE is frequently worn incorrectly (loose straps, dust masks over beards, unclipped chin straps) or discarded due to heat stress and physical fatigue.
  4. Fitment and Sizing Limitations: Standard PPE often fails to fit female workers or individuals with non-standard body proportions properly, drastically compromising protection.

Statutory Provisions: General Safety Regulation 2 & OHS Act Section 23

Under South African legislation, the provision of PPE is governed by strict legal rules:

  • Mandatory Free Provision (Section 8(1) & GSR 2): The employer must provide all required PPE free of charge.
  • Absolute Ban on Deductions (Section 23): Section 23 of the OHS Act explicitly states that no employer shall levy any charge, or make any deduction from an employee's remuneration, in respect of anything which the employer is required to provide in the interests of health and safety. Charging workers for PPE, deducting money from wages, or holding refundable "boot deposits" is a criminal offense.
  • SANS / SABS Standards Compliance: All issued PPE must conform to South African National Standards (e.g., SANS 50361 for full-body harnesses, SANS 20345 for steel toe-cap safety footwear, SANS 1451 for hearing protectors, SANS 50166 for eye protection).
  • Maintenance and Inspection Registers: PPE must be inspected daily by the user and formally inspected monthly or quarterly by an appointed competent person, with records kept in the Health and Safety File.
  • Employee Statutory Duty (Section 14(c)): Every employee is legally required to wear and use prescribed PPE properly and report any loss or damage immediately to the employer.

Why Relying on PPE First is a Statutory Violation

The Fatal Practice of "Hierarchy Inversion"

Inexperienced contractors often commit Hierarchy Inversion: when confronted with a safety hazard, they immediately issue PPE (e.g., distributing safety harnesses or paper dust masks) because it appears cheap, fast, and shifts the burden of safety onto the worker.

   THE ILLEGAL SHORTCUT                    THE STATUTORY MANDATE
  (Hierarchy Inversion)                   (OHS Act Section 8(2)(b))

      [  P P E  ]  ◄── 1st Choice!          [ ELIMINATION ]      ◄── 1st Choice!
      ───────────                           ───────────────
      [ Admin   ]                           [ Substitution]      ◄── 2nd Choice
      ───────────                           ───────────────
      [ Engineer]                           [ Engineering ]      ◄── 3rd Choice
      ───────────                           ───────────────
      [ Substitute]                         [ Admin       ]      ◄── 4th Choice
      ───────────                           ───────────────
      [ Eliminate ]                         [  P P E      ]      ◄── LAST RESORT!

Legal Ramifications under Section 38

Under Section 8(2)(b), the employer is legally obligated to exhaust higher-order controls before resorting to PPE. When a Department of Employment and Labour (DEL) inspector conducts an audit and observes workers spraying toxic polyurethane coatings in an unventilated basement while wearing disposable dust masks, the inspector will not merely cite PPE non-compliance:

  1. The inspector will issue a Section 30 Prohibition Notice, immediately halting all painting operations on site.
  2. The employer will be cited for failure of general duties under Section 8(2)(b) and Hazardous Chemical Agents Regulations.
  3. If a worker suffers serious injury or illness as a result, the employer and directors face criminal prosecution under Section 38 of the OHS Act, punishable by substantial fines or imprisonment.

Comprehensive Comparison Matrix: The Five Control Tiers

Control LevelPrimary MechanismHuman Reliability FactorProtection ScopePractical Site ExampleRelative Cost ProfileStatutory Priority
1. EliminationPhysically eradicates the hazard100% Reliable (Hazard no longer exists)Collective (Entire site & public)Ground pre-assembly of roof trusses; trenchless drillingHigh upfront design cost; zero ongoing operational cost1st Priority (Mandatory first consideration)
2. SubstitutionReplaces hazard with safer alternativeVery High (Inherent danger reduced)Collective (Everyone in vicinity)Water-based paint replacing epoxy; 18V cordless battery toolsModerate initial procurement; low ongoing compliance cost2nd Priority (If elimination impracticable)
3. EngineeringPhysical barriers & mechanical isolationHigh (Passive protection; no worker action)Collective (All workers in work zone)SANS 10085 perimeter guardrails; trench boxes; machine guardsModerate-to-high capital cost; low maintenance cost3rd Priority (Must precede administrative/PPE)
4. AdministrativeChanges work practices & exposure timeLow-Moderate (Vulnerable to human error)Individual & ProceduralSafe Work Procedures; hot work permits; job rotationLow capital cost; very high ongoing supervisory cost4th Priority (Supports engineering controls)
5. PPEPersonal physical barrier on workerLowest (Fails if worn incorrectly or unclipped)Individual wearer onlyFull-body harness; hard hat; FFP3 particulate respiratorLow initial unit cost; continuous recurring replacement cost5th Priority (Strictly last line of defense)

Realistic Site Scenarios & Exam Traps

[!CAUTION] Exam Trap 1: The "Harness First" Fall Protection Fallacy Examination questions frequently present candidates with a scenario where workers are on an open elevated slab 6 meters above ground, offering choices between distributing fall arrest harnesses or installing SANS 10085 perimeter guardrails. Inexperienced candidates often mistakenly select fall arrest harnesses as the primary control. However, under OHS Act Section 8(2)(b) and Construction Regulation 10, perimeter guardrails are an Engineering Control offering collective, passive fall prevention to everyone on the slab. Full-body harnesses are PPE (the lowest tier), providing only individual fall arrest after a fall occurs, and may only be utilized where engineering edge protection is demonstrably impracticable.

[!CAUTION] Exam Trap 2: Charging Workers a "PPE Deposit" A construction firm issues safety boots and reflective vests but deducts a R200 deposit from each worker's first paycheck, refundable upon return of the gear when the project ends. Candidates are asked if this complies with COIDA and the OHS Act. This is a direct criminal offense under Section 23 of the OHS Act. The employer is strictly prohibited from deducting any sum, deposit, or charge for statutory health and safety gear.

[!CAUTION] Exam Trap 3: Warning Signs as a Substitute for Guarding An employer places a bright yellow sign reading "DANGER: UNGUARDED SHAFT OPENING" next to a 5-meter deep lift shaft penetration on a building slab instead of installing a secure, bolted timber cover or rigid handrail. In an inspection, the DEL inspector will issue an immediate Prohibition Notice. An administrative warning sign can never substitute for an engineering barrier where an immediate fall hazard exists.

Loading diagram...
The Statutory Hierarchy of Risk Controls and Operational Reliability Gradient
Test Your Knowledge

A principal contractor is formulating safety measures for work on an elevated concrete slab 8 meters above ground level. According to OHS Act Section 8(2)(b) and the statutory hierarchy of controls, which measure must be prioritized before providing workers with fall arrest harnesses?

A
B
C
D
Test Your Knowledge

Under General Safety Regulation 2 and Section 23 of the Occupational Health and Safety Act 85 of 1993, what is the employer's statutory legal obligation regarding the financial provision of personal protective equipment (PPE) to site workers?

A
B
C
D
Test Your Knowledge

A construction subcontractor is undertaking dry angle grinding of precast concrete panels, generating dense clouds of respirable crystalline silica dust. Match the following three proposed control measures to their correct hierarchical tier: (1) Fitting the angle grinder with a vacuum shroud and HEPA local exhaust ventilation; (2) Rotating grinding artisans across different tasks every two hours; (3) Equipping operators with FFP3 disposable particulate respirators.

A
B
C
D