The Hierarchy of Hazard Controls, Explained

Ask any experienced safety officer what single idea has done the most to reduce workplace injuries over the last century, and many will point to the same thing: the hierarchy of hazard controls. It's a simple ranking of methods for dealing with a hazard, ordered from most effective to least effective. Understanding it — and actually applying it in that order — is one of the fastest ways to make a workplace genuinely safer, rather than just appearing safer on paper.

Why order matters

When a hazard is identified, there's often a temptation to reach for the easiest fix: hand out some gloves, put up a warning sign, tell people to be careful. These aren't wrong, exactly, but they sit at the bottom of the hierarchy for a reason — they rely on a person doing the right thing, every time, without fail. Higher up the hierarchy, controls remove the reliance on human behaviour altogether. A hazard that's been eliminated can't hurt anyone, no matter how tired, rushed, or distracted a worker is that day.

The five levels

1. EliminationPhysically remove the hazard entirely. If a task requires working at height, can the work instead be done at ground level? If a chemical is hazardous, can the process be redesigned so it's never needed? This is the only control that removes risk completely, which is exactly why it's listed first.
2. SubstitutionReplace the hazard with something less dangerous. Swapping a solvent-based adhesive for a water-based one, or a petrol-powered tool for an electric one, doesn't remove the risk but meaningfully reduces it.
3. Engineering controlsIsolate people from the hazard through design. Machine guarding, local exhaust ventilation, and fall-arrest anchor points all fall here — the hazard still exists, but a physical barrier or system stands between it and the worker.
4. Administrative controlsChange the way people work. Job rotation to limit exposure time, permit-to-work systems, signage, and training all belong to this level. These are valuable, but they depend on consistent human compliance, which makes them inherently less reliable than the levels above.
5. Personal protective equipment (PPE)The last line of defence, not the first. Hard hats, respirators, and safety glasses protect the individual wearing them once every other control has been applied — they do nothing to reduce the hazard itself, and they fail if worn incorrectly, damaged, or simply forgotten.

A common mistake

The most frequent error isn't ignoring the hierarchy — it's starting at the bottom instead of the top. PPE is cheap, fast to implement, and highly visible, which makes it tempting to treat as the primary control rather than the fallback it's meant to be. A genuinely effective risk assessment asks, in order: can we eliminate this? If not, can we substitute it? If not, what engineering control isolates the hazard? Only once those options are exhausted should administrative controls and PPE fill the remaining gap.

Combining controls

In practice, most real-world situations use a combination of several levels at once — an engineering control paired with an administrative procedure and PPE as backup, for example. That's not a failure of the hierarchy; it's how it's meant to work. The goal isn't to pick exactly one level and stop there, but to push as high up the hierarchy as is reasonably practicable before layering in the lower levels as additional protection.

Applying it to a real assessment

Next time you're assessing a task, try writing out all five levels and forcing yourself to consider each one before moving to the next — even if the answer at the top levels is "not practicable in this case." That discipline alone tends to surface options that a quicker, PPE-first instinct would have missed entirely.