Occupational Safety

PPE Programs: 5 Decisions That Stop the Last Barrier From Becoming the Only Barrier

Personal protective equipment matters, but a PPE program becomes fragile when it carries a hazard that should have been removed, engineered out, or controlled through work design. This diagnostic gives EHS and operations leaders five decisions that keep PPE in its proper role while exposing the gaps that make the last barrier carry the whole system.

By 6 min read
Worker and supervisor reviewing personal protective equipment against workplace hazards

Key takeaways

  1. 01PPE is often necessary, but it should not become the organization’s only serious response to a persistent hazard.
  2. 02A defensible PPE program begins with a hazard assessment that explains the exposure, the required performance, and the limits of the equipment.
  3. 03Fit, compatibility, communication, maintenance, and replacement determine whether selected PPE can protect people in the actual task.
  4. 04Repeated PPE non-use is often evidence of poor work design, conflicting requirements, or weak control ownership rather than a simple attitude problem.
  5. 05Leaders should verify what PPE prevents, what it cannot prevent, and which higher-order control must be improved next.

F1 critical diagnostic for EHS leaders, plant managers, and supervisors

A worker can wear every item listed on a PPE poster and still be exposed to the hazard that matters most. That happens when the organization treats equipment as the control instead of treating it as one layer within a control strategy.

The question we keep returning to on Headline is not whether PPE matters. It does. The harder question is whether the program makes the remaining exposure visible, controlled, and owned, or whether it allows the last barrier to carry the whole safety case.

A reliable PPE program defines the residual exposure, selects equipment that can manage it in the real task, and triggers improvement of the controls that should make the equipment less necessary over time.

Why PPE becomes a weak safety strategy

The hierarchy of controls published by OSHA and NIOSH places elimination, substitution, and engineering controls ahead of administrative controls and personal protective equipment. That ordering is not a criticism of PPE. It recognizes that equipment worn by a person is more exposed to fit, fatigue, damage, compatibility, communication, and human attention than a control built into the process.

When leaders skip that distinction, the program becomes easy to audit and difficult to trust. The organization can show a distribution record, a training attendance sheet, and a signed policy while the task still depends on a worker noticing the hazard, selecting the right item, wearing it correctly, and keeping it functional through the shift.

Across the safety conversations that Headline develops with senior leaders, the recurring trap is simple. PPE is visible, so it receives ownership. The engineering change, ventilation improvement, enclosure, automation, or redesign that would reduce exposure remains between departments.

1. Decide what exposure PPE is actually controlling

A PPE program should begin with the exposure, not with a catalogue of equipment. Leaders need to know what can reach the worker, through which route, during which task, and under which credible change in conditions. A generic instruction to wear gloves or eye protection does not answer those questions.

The hazard assessment should distinguish contact, impact, penetration, inhalation, noise, heat, arc flash, fall exposure, and other pathways that require different performance characteristics. It should also explain what the equipment cannot control. That limitation matters because a respirator does not remove a leak, and a face shield does not make an unstable process safe.

OSHA’s PPE guidance treats hazard assessment and selection as core program elements. The practical implication is that a leader should be able to trace each required item to a defined exposure and a performance need, rather than to a tradition that nobody has revisited.

Ask for the decision record. If the answer is only “that is what this area always wears,” the program is relying on inheritance instead of risk control.

2. Decide which higher-order control is still missing

The most important PPE decision may be the one that identifies what PPE should not have to carry. A recurring glove requirement may point to a material-handling redesign. Repeated respirator use may reveal that containment or local exhaust ventilation is incomplete. Cut-resistant sleeves may be compensating for a sharp edge that should have been removed from the process.

This is where a PPE review becomes a leadership review. The question is not whether workers are complying with the equipment requirement. The question is whether the organization has accepted a residual exposure without naming the owner of the next reduction.

ISO 45001:2018 frames OH&S risk management around eliminating hazards and reducing risks through a managed system. A PPE register that has no link to engineering priorities, maintenance work, procurement decisions, or management of change is therefore incomplete, even if every worker has received the equipment.

Use a simple distinction in the review. Mark each PPE requirement as permanent residual protection, temporary protection during an improvement, or protection for an unusual task. The second and third groups need a clear review date and an accountable owner.

3. Decide whether the equipment fits the work, not only the worker

Fit is usually discussed as a personal characteristic, but the work also has to fit the equipment. A harness, respirator, glove, hearing protector, or face shield interacts with tools, clothing, temperature, visibility, communication, mobility, and the sequence of the task.

That interaction explains why equipment can be technically approved and operationally unusable. A glove that reduces dexterity may encourage a worker to remove it for a fine adjustment. A face protection combination that fogs during a hot task may turn a visibility problem into a selection problem. Hearing protection that blocks the alarm or radio may create a communication workaround.

Testing should happen at the point of work, with the combinations people actually use. NIOSH describes PPE as the fifth level of the hierarchy, and its respiratory protection guidance emphasizes selection for the specific hazard and use conditions. The same logic applies beyond respirators. Compatibility is a control property.

Do not treat an observed workaround as proof that the worker does not care. Treat it as evidence that the design needs examination, especially when several people make the same choice under similar conditions.

4. Decide who owns readiness between issue and use

Issuing PPE is an event. Keeping it ready is a process. The program needs ownership for inspection, cleaning, storage, replacement, fit testing where required, and the removal of damaged or expired equipment.

Those responsibilities often become fragmented. Procurement selects a model, the warehouse distributes it, the supervisor expects the worker to inspect it, maintenance controls a related tool, and EHS owns the procedure. When a failure appears, each function can point to a different part of the chain.

A practical review maps the readiness path from purchase to disposal. It should show who decides the specification, who checks condition, who replaces the item, who confirms that a new model remains compatible, and who pauses work when protection is unavailable. The map matters most for equipment whose failure is not obvious until exposure has already occurred.

Headline’s leadership lens is useful here because visible ownership is not the same as a named owner. The executive who approves the budget, the manager who controls the process, and the supervisor who can stop the task need compatible decision rights.

5. Decide what evidence proves the program works

PPE compliance percentages can be useful, but they are not enough to prove protection. A high observed-wear rate may coexist with poor selection, bad fit, expired cartridges, damaged equipment, or a hazard assessment that no longer matches the process.

Evidence should therefore include several layers. Can workers explain the exposure and the reason for the selected equipment? Can they put it on correctly under realistic conditions? Can they communicate, move, and complete the critical task without removing it? Can supervisors identify when the protection is no longer adequate? Does the organization respond when the same problem appears twice?

The strongest evidence connects equipment to the barrier it is meant to support. A record should make it possible to see the exposure, the expected protection, the verification method, the observed weakness, and the next decision. That is more useful than counting how many people attended training.

James Reason’s work on active and latent failures offers a helpful discipline for the review. The visible act of not wearing PPE may be the final event in a chain that includes poor selection, weak supervision, conflicting production signals, and an uncorrected design problem.

What a senior leader should challenge in the next review

A senior leader does not need to ask for another presentation about PPE awareness. The better review is uncomfortable and specific.

  • Which exposures still depend on perfect human attention?
  • Which PPE requirements have no higher-order control improvement attached to them?
  • Where do fit, heat, dexterity, visibility, or communication make correct use difficult?
  • Who can stop work when the correct equipment is unavailable or incompatible?
  • What repeated workaround has been treated as noncompliance instead of design evidence?

The answers should lead to decisions in engineering, maintenance, procurement, supervision, and work planning. If the review ends with another poster campaign, the organization has inspected the symptom while leaving the system unchanged.

How to keep the last barrier in its proper role

PPE is not a ceremonial layer, and it is not a substitute for serious hazard control. It becomes reliable when the organization understands the residual exposure, selects equipment for the real task, protects readiness, and tests whether workers can use it without creating a new conflict.

The next step is not to ask whether the workforce is more compliant. Ask whether the work now presents fewer uncontrolled choices, whether higher-order controls have owners, and whether the evidence would persuade a skeptical investigator after an exposure event.

For the Headline Podcast audience, that is the central leadership test. A strong PPE program protects people today while making the next engineering or work-design decision impossible to ignore.

Explore more Headline Podcast safety and leadership conversations.

Read the latest Headline Podcast editorial analysis.

Topics headline-podcast occupational-safety ppe hierarchy-of-controls risk-control field-verification safety-leadership work-design

Frequently asked questions

Why is PPE called the last line of defense?
PPE is called the last line of defense because it protects the worker without removing the hazard from the process. OSHA and NIOSH place elimination, substitution, and engineering controls above administrative measures and PPE in the hierarchy of controls.
Does a PPE program replace engineering controls?
No. PPE may be required while higher-order controls are being designed, implemented, or maintained, and it may remain necessary for residual exposure. It does not replace feasible engineering controls that can reduce the hazard more reliably.
What should a PPE hazard assessment include?
It should identify the task and exposure, explain the possible route and consequence of harm, specify the performance required from the equipment, account for fit and compatibility, and define how selection, training, maintenance, and replacement will be verified.
What does repeated PPE non-use usually indicate?
Repeated non-use can indicate discomfort, poor fit, incompatible equipment, communication barriers, heat stress, time pressure, unclear ownership, or a control that does not match the task. Leaders should investigate the work system before defaulting to discipline or refresher training.
How can leaders test whether a PPE program is working?
Leaders can compare the hazard assessment with field conditions, observe whether workers can select and use the equipment correctly, test fit and compatibility, review replacement and maintenance records, and confirm that higher-order controls have an owner and a next action.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI