The hierarchy of controls: how OSHA expects you to control a hazard

When you find a hazard, the obvious move is to hand out personal protective equipment and move on. It is also usually the weakest thing you can do. The hierarchy of controls — a concept OSHA and NIOSH both build on — ranks the ways of controlling a hazard from most to least effective, and it is the mental model that separates a mature safety program from a box-ticking one. This guide explains the five levels and how to apply them.

The five levels, most to least effective

1. Elimination. Physically remove the hazard. The most effective control, because a hazard that is not there cannot hurt anyone — for example, redesigning a task so work at height is no longer needed, or doing a job at ground level and lifting the finished assembly into place.

2. Substitution. Replace the hazard with something less dangerous — swapping a solvent-based product for a water-based one, or a louder machine for a quieter one.

3. Engineering controls. Isolate people from the hazard with physical means — machine guards, ventilation, guardrails, barriers, sound enclosures. These are highly effective because they work without relying on the worker to do anything.

4. Administrative controls. Change the way people work — safe work procedures, training, job rotation to limit exposure, warning signs, permits to work. These help, but they depend on people following them every time.

5. Personal protective equipment (PPE). Respirators, gloves, hearing protection, harnesses. Last on the list — not because it is unimportant, but because it protects only the individual wearing it, only when worn correctly, and it does nothing to reduce the hazard itself. If the strap slips or the filter is spent, the protection is gone.

Why the order matters

The higher up the hierarchy you go, the more the control does the work and the less it depends on human behavior. Elimination and engineering controls protect everyone, all the time, without anyone having to remember anything. PPE and administrative controls depend on a worker making the right choice, correctly, on every exposure — which is exactly where real workplaces fail. That is why a safety plan whose every control is "wear PPE and be careful" is a weak plan: it has skipped the more reliable options and pushed all the risk onto the worker's diligence.

Using it in practice

The hierarchy is not academic — it is the method OSHA expects behind your controls, and it is the backbone of a good Job Hazard Analysis. For each hazard you identify, work down the list in order: can we eliminate it? If not, substitute? Engineer a control? Only when the higher options are exhausted do you land on administrative controls and PPE — and often the best answer is a combination (a guard and a procedure and PPE) rather than any single layer. Applied consistently, the hierarchy turns hazard control from a reflex ("hand out gloves") into a discipline, and it is what an inspector, an insurer and a serious client all recognize as real safety management.

The bottom line

PPE is the last line of defense, not the first. Every time you catch yourself reaching for it as the answer, step back up the hierarchy and ask whether a more reliable control is available. Building that habit into your JHAs and your written safety program is one of the highest-leverage things you can do for both your injury rate and your compliance standing.