Hierarchy of Hazard Controls

Why the Hierarchy of Hazard Controls Matters

The Hierarchy of Hazard Controls is one of the most heavily tested and practically important concepts in the entire BCSP Associate Safety Professional (ASP) body of knowledge. It appears directly in the Safety Programs and Concepts domain, but it also shows up indirectly in questions about risk assessment, industrial hygiene, ergonomics, fire protection, construction safety, and management systems such as ANSI/ASSP Z10 and ISO 45001.

Why does it matter so much? Because the hierarchy is the decision-making framework safety professionals use to choose how to control a hazard once it has been identified and assessed. It forces practitioners to think in terms of effectiveness and reliability rather than convenience or cost alone. A control that removes a hazard entirely protects every worker every time; a control that depends on each worker remembering to wear a respirator correctly protects only when human behavior cooperates. The hierarchy ranks controls from most to least effective based on exactly this logic, and exam writers love to test whether you truly understand that ranking or merely memorized a list.

Regulators and consensus standards reinforce its importance. OSHA expects employers to use feasible engineering and administrative controls before relying on personal protective equipment (PPE) under standards such as 29 CFR 1910.134 (Respiratory Protection), 1910.95 (Occupational Noise Exposure), and 1910.1000 (Air Contaminants). ANSI/ASSP Z10 and Z590.3 (Prevention through Design) make the hierarchy a required element of an occupational health and safety management system. NIOSH promotes it as the backbone of Prevention through Design. If you want to pass the ASP and practice safety competently, you must master it.

What the Hierarchy of Hazard Controls Is

The Hierarchy of Hazard Controls is a ranked system of methods for reducing or eliminating risk from workplace hazards. The controls at the top are most effective and most reliable because they address the hazard at its source and do not depend on worker behavior. The controls at the bottom are least effective because they only reduce the consequences of exposure and rely heavily on consistent human action.

The most widely cited version, published by NIOSH and used by BCSP, has five levels, listed here from most effective to least effective:

1. Elimination - physically remove the hazard.
2. Substitution - replace the hazard with something less hazardous.
3. Engineering Controls - isolate people from the hazard through physical means.
4. Administrative Controls - change the way people work through procedures, training, scheduling, and signage.
5. Personal Protective Equipment (PPE) - protect the worker with equipment worn on the body.

You will also encounter a condensed three-tier version used in many OSHA standards: engineering controls, administrative (work practice) controls, and PPE. In that model, elimination and substitution are folded into engineering controls. On the ASP exam, assume the five-level NIOSH model unless the question explicitly frames the OSHA three-tier version.

Some texts add a sixth category or describe warnings (signs, alarms, labels) as a separate tier between engineering and administrative controls, and ANSI Z10 explicitly lists warnings as its fourth step. If a question gives you warnings as an option, treat it as more effective than administrative controls and PPE but less effective than engineering controls.

How Each Level Works

1. Elimination
Elimination removes the hazard from the workplace entirely so that no exposure is possible. Examples include redesigning a process so a toxic chemical is no longer needed, removing a trip hazard by rerouting a cable through a conduit in the wall, performing work at ground level instead of at height, or discontinuing a hazardous task altogether. Elimination is most practical during the design or planning stage, which is why Prevention through Design (ANSI/ASSP Z590.3) emphasizes addressing hazards before a facility, process, or product is built. Once a hazard is eliminated, there is nothing left to control, and the protection does not degrade over time or depend on supervision.

2. Substitution
Substitution replaces a hazardous material, process, or piece of equipment with a less hazardous alternative. Classic examples are replacing a solvent-based cleaner with a water-based cleaner, replacing lead-based paint with non-lead paint, replacing silica sand in abrasive blasting with a less toxic abrasive, or replacing a 240-volt tool with a battery-powered low-voltage tool. The hazard still exists in some form, but its severity or likelihood is reduced. A critical caution for exam questions: substitution can introduce new hazards, so a proper risk assessment of the substitute is required. A substitute solvent that is less toxic but more flammable has shifted the risk, not necessarily reduced it.

3. Engineering Controls
Engineering controls are physical changes to the workplace, equipment, or process that isolate workers from the hazard or reduce its intensity at the source or along the path of transmission. They do not require the worker to do anything to be protected. Examples include machine guards, interlocks, local exhaust ventilation, enclosures around noisy equipment, guardrails, sound-dampening materials, wet methods for dust suppression, glove boxes, remote handling, light curtains, and ergonomic workstation redesign such as adjustable-height tables. Engineering controls are the preferred approach whenever elimination and substitution are not feasible because they provide consistent protection regardless of worker training or attention. However, they must be maintained, inspected, and not defeated or bypassed.

4. Administrative Controls
Administrative controls change how work is performed or how long workers are exposed. They include written safe work procedures, training, job rotation to limit exposure duration, scheduling hazardous work during off-hours when fewer people are present, permit systems such as confined space entry and hot work permits, lockout/tagout procedures, housekeeping programs, warning signs and labels, inspections, and exposure monitoring programs. Administrative controls do not remove the hazard or reduce its intensity; they reduce the probability or duration of exposure. Their weakness is that they depend on management enforcement and worker compliance, so protection can fail when procedures are skipped, training is forgotten, or supervision lapses. Note that lockout/tagout is an interesting case: the lock itself is a physical device, but LOTO is classified as an administrative or work-practice control because its effectiveness depends on workers following the procedure.

5. Personal Protective Equipment
PPE places a barrier between the worker and the hazard at the point of the worker. Examples include respirators, hearing protection, safety glasses and face shields, hard hats, gloves, chemical-resistant clothing, fall arrest harnesses, and safety footwear. PPE is the last line of defense because it does nothing to the hazard itself, it must be correctly selected, fitted, worn, inspected, maintained, and replaced, and any failure in that chain leaves the worker fully exposed. PPE also can create its own problems such as heat stress, reduced vision, and communication difficulty. OSHA permits PPE as the primary control only when higher-level controls are infeasible, are being implemented, or are insufficient to reduce exposure below permissible limits. Under 29 CFR 1910.132, employers must perform a hazard assessment to select PPE and must provide most required PPE at no cost to employees.

The Logic Behind the Ranking

Three principles explain why the hierarchy is ordered the way it is, and understanding them will help you reason through unfamiliar exam scenarios:

Proximity to the source. Controls applied at the source (elimination, substitution) are more effective than controls applied along the path (engineering controls such as ventilation and enclosures), which are more effective than controls applied at the receiver, meaning the worker (administrative controls and PPE). This source-path-receiver model is also fundamental to industrial hygiene and noise control.

Dependence on human behavior. The higher the control, the less it depends on workers doing something right. Elimination requires nothing of the worker. PPE requires the worker to do everything right every time.

Reliability and durability. Higher-level controls are passive and permanent. Lower-level controls are active and degrade with time, turnover, complacency, and production pressure.

Keep in mind that the hierarchy is not an either-or choice. In real workplaces and in exam scenarios, controls are usually layered. A grinding operation might use local exhaust ventilation (engineering), a written procedure and training (administrative), and safety glasses and a respirator (PPE) simultaneously. The hierarchy tells you where to start and what to prioritize, not that you must use only one method.

Feasibility and Risk Assessment

The hierarchy is applied in the context of feasibility. OSHA uses two concepts: technological feasibility (can it be done with existing technology?) and economic feasibility (can the industry afford it without being driven out of business?). An employer is expected to implement the highest feasible level of control. If an engineering control reduces exposure but not below the permissible exposure limit, the employer must still install it and then supplement with PPE to close the remaining gap.

The hierarchy is also tied to the risk assessment process. After hazards are identified and risk is assessed using a risk matrix (severity times probability), the hierarchy guides control selection. After controls are chosen, residual risk is reassessed to confirm it is acceptable or as low as reasonably practicable (ALARP). ANSI/ASSP Z10 and Z590.3 both describe this cycle: identify, assess, apply the hierarchy, verify, and reassess.

Common Classification Examples You Must Know

Exam questions frequently describe a control and ask you to classify it. Memorize these:

Elimination: removing a hazardous task, designing out a hazard, automating a process so no worker is present, performing work at ground level instead of at height.

Substitution: less toxic chemical, less flammable solvent, lighter material to reduce lifting hazard, lower-voltage equipment, quieter equipment model (note: some sources classify quieter equipment as engineering, so read the answer choices carefully).

Engineering: machine guarding, interlocks, local exhaust ventilation, dilution ventilation, enclosures, barriers, guardrails, isolation, mufflers, vibration dampening, ergonomic redesign, wet methods, remote operation, automatic shutoffs, ground fault circuit interrupters.

Administrative: training, written procedures, job rotation, work scheduling, exposure time limits, housekeeping, permits, lockout/tagout, signs and labels, preventive maintenance programs, medical surveillance, buddy systems, audits.

PPE: respirators, hearing protectors, gloves, eye and face protection, head protection, protective clothing, fall arrest systems, safety footwear.

How to Answer Exam Questions on the Hierarchy of Hazard Controls

ASP questions on this topic generally fall into five patterns.

Pattern 1: Direct ordering. The question asks which control is most effective, least effective, or asks you to arrange controls in order. Always recall the sequence: Elimination, Substitution, Engineering, Administrative, PPE. A useful mnemonic is Every Safety Expert Avoids PPE. Another is ESEAP.

Pattern 2: Classification. The question describes a specific control and asks which level it belongs to. Ask yourself: Does the control remove the hazard (elimination)? Replace it with something less hazardous (substitution)? Physically change equipment or the environment so the worker is protected without doing anything (engineering)? Change how or when people work (administrative)? Or is it worn on the body (PPE)?

Pattern 3: Best first choice. A scenario describes a hazard and lists several controls. You are asked which should be implemented first or which is preferred. Choose the highest level on the hierarchy that is feasible in the scenario. If the question says elimination is not possible, move to substitution, and so on. Watch for the word feasible; the correct answer is the highest feasible option, not simply elimination every time.

Pattern 4: Applied regulatory context. The question asks when PPE may be used as a primary control, or what an employer must do when engineering controls cannot achieve the PEL. The answer is that engineering and administrative controls must be implemented first to the extent feasible, and PPE supplements the remaining exposure. PPE alone is acceptable only when higher controls are infeasible, during installation of higher controls, in emergencies, or during short-duration tasks such as maintenance where engineering controls are impractical.

Pattern 5: Conceptual reasoning. The question asks why the hierarchy is ordered as it is or why PPE is the last resort. The answers center on reliability, dependence on human behavior, proximity to the source, and the fact that PPE does not reduce the hazard itself.

Exam Tips: Answering Questions on Hierarchy of Hazard Controls

Tip 1: Memorize the five NIOSH levels in order and be able to recite them instantly. Elimination, Substitution, Engineering, Administrative, PPE. Many questions are solved in seconds once you have this locked in.

Tip 2: Default to the five-level model unless the question signals the OSHA three-tier version. If answer choices only include engineering, administrative, and PPE, think in the three-tier framework and remember elimination and substitution are considered part of engineering in that model.

Tip 3: Use the worker-behavior test to separate engineering from administrative controls. If the protection works even when the worker does nothing, it is engineering. If the worker must follow a rule, read a sign, take training, or rotate out of a job, it is administrative. Ventilation is engineering. Job rotation is administrative. A guard is engineering. A procedure for using the guard is administrative.

Tip 4: Do not confuse elimination with substitution. Elimination means the hazard is gone. Substitution means the hazard is replaced by a lesser one. Replacing a toxic solvent with a less toxic one is substitution, not elimination. Removing the need for the solvent altogether is elimination.

Tip 5: Lockout/tagout, permits, and signage are administrative. Students often mislabel these as engineering because they involve physical objects such as locks and signs. The exam treats them as administrative or warning controls because their effectiveness depends on human compliance.

Tip 6: Look for the word feasible and words like first, preferred, most effective, or best. These signal that you should pick the highest practical level on the hierarchy. Read the scenario for clues that rule out the higher levels, such as a statement that the process cannot be changed or the chemical has no safer alternative.

Tip 7: PPE is correct when the question emphasizes last resort, interim measure, emergency, short-duration maintenance, or infeasibility of higher controls. Otherwise, PPE is usually a distractor placed to catch test-takers who reach for the familiar.

Tip 8: Remember that substitution can create new hazards. If a question asks about a potential drawback of substitution, the answer involves introducing or shifting risk and the need to reassess the substitute.

Tip 9: Connect the hierarchy to Prevention through Design and ANSI/ASSP Z10 and Z590.3. Questions may ask at what stage the hierarchy is most effectively applied; the answer is during design or planning, when elimination and substitution are cheapest and most practical.

Tip 10: Think in layers, not absolutes. If a question asks for a comprehensive control strategy, the best answer usually combines controls from multiple levels while prioritizing the highest feasible level. The hierarchy prioritizes; it does not forbid using lower controls in addition.

Tip 11: Watch for the source-path-receiver framing. Industrial hygiene and noise questions may describe controls at the source, along the path, or at the receiver. Map these to the hierarchy: source controls are elimination, substitution, and some engineering; path controls are engineering such as enclosures and barriers; receiver controls are administrative and PPE.

Tip 12: Eliminate obviously wrong answers first. If a question asks for the most effective control and PPE is an option, strike it immediately. If it asks for the least effective and elimination is an option, strike that. This narrows your choices and improves your odds on difficult scenarios.

Sample Practice Questions

Question 1. A maintenance crew is exposed to hazardous noise from an air compressor. Which control is the most effective option according to the hierarchy of controls?
A. Provide earplugs and earmuffs
B. Rotate workers so no one is exposed more than two hours per shift
C. Enclose the compressor in a sound-attenuating housing
D. Post hearing protection required signs

Answer: C. Enclosing the compressor is an engineering control, which ranks above the administrative controls in B and D and the PPE in A. Elimination and substitution are not offered.

Question 2. Replacing a chlorinated degreaser with an aqueous cleaning solution is an example of which level of the hierarchy?
A. Elimination
B. Substitution
C. Engineering control
D. Administrative control

Answer: B. The hazardous material is replaced with a less hazardous one; the cleaning task still exists, so it is not elimination.

Question 3. Under OSHA standards, when is PPE acceptable as the primary means of controlling an airborne contaminant?
A. Whenever PPE is cheaper than engineering controls
B. When workers prefer PPE over other controls
C. When feasible engineering and administrative controls are insufficient to reduce exposure below the PEL
D. PPE is never acceptable as a primary control

Answer: C. OSHA requires feasible engineering and administrative controls first; PPE supplements remaining exposure or serves as an interim measure.

Question 4. Which of the following is an administrative control?
A. Installing an interlocked guard on a press brake
B. Implementing a confined space entry permit program
C. Substituting a low-VOC paint
D. Issuing nitrile gloves to chemical handlers

Answer: B. A permit program changes how work is authorized and performed and depends on compliance, making it administrative.

Summary

The Hierarchy of Hazard Controls ranks risk reduction methods from most to least effective: Elimination, Substitution, Engineering Controls, Administrative Controls, and PPE. The ranking is based on how close the control is to the hazard source, how little it depends on worker behavior, and how reliably it performs over time. Safety professionals are expected to implement the highest feasible level of control first and to use lower-level controls to supplement, not replace, higher-level ones. On the ASP exam, success depends on knowing the order, classifying controls correctly, recognizing feasibility language, and understanding why PPE is always the last line of defense. Master these points and the hierarchy questions will become some of the most reliable points you earn on test day.