The basic idea
When a workplace has a hazard, there are many possible responses. The hierarchy of controls is a widely used way of ranking them. Its central idea is that some measures are generally more dependable than others, so people should consider the stronger ones first.
The ranking runs roughly from the most effective at the top to the least effective at the bottom:
- Elimination
- Substitution
- Engineering controls
- Administrative controls
- Personal protective equipment
Different organizations draw it slightly differently. Some versions add a separate level for “isolation” or “redesign,” and some merge steps. The overall logic is consistent: protection that does not depend on people remembering or behaving perfectly beats protection that does. This article is general information and does not replace the guidance of your workplace or regulator.
Why the order matters
The ranking reflects a simple observation about human reliability. Everyone makes mistakes, particularly when tired, rushed or distracted. Controls at the top change the situation so that mistakes are less likely or less harmful. Controls at the bottom ask the individual to stay vigilant, which works only as long as attention holds.
Higher-level controls also tend to protect everyone nearby at once, while lower-level controls often protect only the person following them. Note that “most effective” is a general tendency, not an absolute law. In practice, a mix of controls is almost always used, and a well-maintained lower-level control may outperform a poorly implemented higher-level one.
The five levels
1. Elimination
Remove the hazard entirely. If a task at height can be avoided, nobody can fall from it. Examples include:
- designing equipment so that routine inspection can be done from the ground
- using a remote camera instead of sending a person into a hazardous area
- scrapping an unnecessary step that exposes workers to risk
Elimination is the most effective option but is often easiest to apply at the planning or design stage, before a facility is built. Once an installation exists, it can be much harder.
2. Substitution
Replace the hazard with a less dangerous one. Examples include:
- using a less hazardous cleaning chemical
- switching to a lower-voltage tool where suitable
- using a water-based product instead of a solvent-based one
- using a lighter component that is easier to lift
Substitution requires care. A replacement should be checked so that it does not create a different problem, such as lower performance or a new hazard.
3. Engineering controls
Isolate people from the hazard through physical design, without relying on their behavior. Examples include:
- machine guards and barriers
- ventilation that removes fumes
- noise enclosures
- guardrails and covers on openings
- interlocks that prevent equipment from running when a guard is open
- gas detection and automatic shutdown systems
Engineering controls are widely used in plants and are a major part of process safety. They need inspection and maintenance, and they can be defeated if workers bypass them, so a good culture treats a disabled safeguard as a serious matter.
4. Administrative controls
Change how people work. These include:
- written procedures and safe systems of work
- formal approvals such as a permit to work
- job rotation to limit exposure, and limits on working hours
- signage, warnings and floor markings
- training and supervision
- scheduling hazardous work when fewer people are present
Administrative controls are valuable and often necessary, but they depend on people following them. They are susceptible to fatigue, pressure, forgetfulness and workarounds. This is why they are placed lower than physical measures.
Procedures such as lockout tagout sit in this category in part, because they depend on trained people applying them consistently. But they are intended to hold physical energy isolation in place, so they are used where the hazard cannot be eliminated and are treated with great strictness.
5. Personal protective equipment
Provide gear to the worker: helmets, gloves, eye protection, hearing protection, respirators, insulated or arc-rated clothing, harnesses. This is the last resort in the ranking because it leaves the hazard in place and relies on correct selection, fit, use and condition. The topic is covered in more detail in the article on protective equipment.
PPE is not unimportant. It is often essential for residual risks and for tasks where nothing else is practical. The point of the hierarchy is that it should not be the first thing reached for or the only barrier.
A worked example in plain terms
Consider a noisy pump in a plant.
- Elimination: Could the pump be removed or the process redesigned so it is not needed?
- Substitution: Could a quieter model be installed?
- Engineering: Could an acoustic enclosure be added, or could the pump be moved away from where people work?
- Administrative: Could time spent near it be limited, with warning signs and training in place?
- PPE: Hearing protection for anyone who still has to be near it.
In reality, several levels would be combined, and the choice depends on feasibility, cost, time and effect. Cost matters, but a reasonable approach does not simply choose the cheapest option when a hazard is serious. Many legal frameworks use phrases such as “so far as is reasonably practicable,” meaning risk reduction should be pursued unless the cost or difficulty is grossly out of proportion to the benefit. The precise wording differs by country.
Key points
- The hierarchy ranks controls from elimination and substitution, through engineering and administrative measures, to protective equipment.
- Controls that do not rely on human behavior are generally more dependable.
- Real solutions usually combine several levels.
- PPE is the last layer, not the first response.
- Specific controls for any job should be decided by trained, competent people following local rules.