Hierarchy of Controls Explained: 5 Protection Choices From Elimination to PPE

A supervisor sees the same exposed hand position during every maintenance cycle. The team receives another reminder, signs the briefing sheet, and returns to the task with the pinch point unchanged.

The hierarchy of controls helps answer a harder question than “Did we tell people to be careful?” It asks which protection choice can reduce the hazard or separate people from it before attention becomes the main barrier.

The hierarchy of controls is a structured way to compare protection choices from the strongest change to the most behavior-dependent measure. It starts with removing the hazard, then considers changing the material or process, separating people from danger, improving work instructions, and using personal protective equipment when exposure remains.

Definition

The hierarchy is not a promise that every hazard can be eliminated. It is a decision discipline that prevents teams from treating a new procedure as the only available answer. NIOSH presents the levels as a preferred order, while ISO 45001:2018 expects organizations to apply the hierarchy of controls when determining controls for occupational health and safety risks.

The practical issue is dependence. A guard that prevents access usually depends less on perfect timing than a warning sign. A warning sign may still be needed, although it should not end the search for a design change that addresses the exposure more directly.

Five protection choices in the hierarchy

1. Elimination

Elimination removes the hazard from the task, process, or environment. A team might eliminate work at height by assembling a component at ground level, or remove manual entry by redesigning a cleaning sequence.

Ask whether the work can be changed so that people no longer encounter the hazard. If the answer is yes, the decision can improve safety and productivity at the same time because it removes a recurring exposure instead of asking workers to manage it repeatedly.

2. Substitution

Substitution replaces a hazardous material, energy source, tool, or process with a less hazardous alternative. The replacement must be assessed in the real task, since a product with lower toxicity can introduce flammability, ergonomic, compatibility, or waste risks.

Do not call a change substitution merely because a new product has a different label. Compare the hazard, the route of exposure, the operating conditions, and the controls required after the change.

3. Engineering controls

Engineering controls isolate people from the hazard through design. Examples include machine guards, enclosure, local exhaust ventilation, interlocks, barriers, and remote operation.

A useful engineering control has a defined function and a way to verify that it remains available. If a guard is routinely removed for access, the design and the work interface need review. A training reminder cannot compensate for a barrier that the task makes impractical.

4. Administrative controls

Administrative controls change how work is organized. They include procedures, permits, scheduling, supervision, competency requirements, rotation, exclusion rules, and warning systems.

These measures matter when stronger controls cannot fully remove the exposure, but their limits should be visible. OSHA describes administrative controls as work practices and policies that reduce exposure through how the job is performed. That approach requires clear ownership, usable instructions, and verification in the field.

5. Personal protective equipment

PPE places a protective device between the worker and the hazard. Gloves, eye protection, respiratory protection, hearing protection, and fall-arrest equipment can be essential when residual exposure remains.

PPE needs selection, fit, compatibility, maintenance, storage, training, and a response to failure. It is not a substitute for examining the process. Andreza Araujo makes a related point in The Illusion of Compliance, because a signed rule can look complete while the conditions for using it are absent.

How to differentiate the five choices in practice

When to use the hierarchy instead of adding another rule

Use the hierarchy whenever a risk assessment proposes training, signage, or a procedure as the main control. Ask what would happen if the worker were distracted, the shift changed, the equipment degraded, or simultaneous work altered access. That test does not dismiss human responsibility. It reveals whether the system has made safe action possible.

The strongest decision is often a combination. A redesigned process may still need an inspection, a barrier may still need a permit, and PPE may remain necessary for residual risk. The hierarchy is valuable because it makes the reasoning visible and gives leaders a basis for funding better protection.