Prevention through Design Principles

Introduction: Why Prevention through Design Matters

Prevention through Design (PtD) is one of the most powerful ideas in modern safety practice and a recurring theme on the BCSP Certified Safety Professional (CSP) exam within the Advanced Application of Safety Principles domain. The core premise is simple but transformative: the most effective and least expensive time to eliminate or control a hazard is before it ever exists, during the conceptual and design phases of a product, process, facility, or work system. Once equipment is purchased, a building is constructed, or a process is commissioned, options for controlling hazards narrow dramatically and costs rise steeply. PtD moves safety upstream, from reacting to hazards in the field to engineering them out at the drawing board.

For the CSP candidate, PtD matters for three reasons. First, it is the practical embodiment of the hierarchy of controls, which the exam tests heavily. Second, it is codified in a national consensus standard, ANSI/ASSP Z590.3, Prevention through Design: Guidelines for Addressing Occupational Hazards and Risks in Design and Redesign Processes, which the exam expects you to know. Third, PtD connects safety to the business case, lifecycle cost, and risk management systems, all of which are tested as integrated professional competencies rather than isolated facts.

What Is Prevention through Design?

NIOSH, which launched the national PtD initiative in 2007, defines Prevention through Design as addressing occupational safety and health needs in the design process to prevent or minimize the work-related hazards and risks associated with the construction, manufacture, use, maintenance, and disposal of facilities, materials, and equipment. ANSI/ASSP Z590.3 similarly frames PtD as the practice of anticipating and designing out hazards, or reducing risk to an acceptable level, through design and redesign decisions.

Several related terms appear on the exam and should be distinguished:

- Prevention through Design (PtD): The broad NIOSH and ANSI term for integrating hazard analysis and risk assessment into design and redesign.
- Safety through Design (StD): An earlier, essentially synonymous term promoted by the National Safety Council Institute for Safety through Design in the 1990s.
- Design for Safety (DfS) and Safe Design: Terms used internationally, notably in the UK Construction Design and Management (CDM) regulations and in Australian work health and safety law, which impose explicit duties on designers.
- Inherently Safer Design (ISD): A process-safety concept (Trevor Kletz) using the strategies of minimize, substitute, moderate, and simplify. ISD is a specialized application of PtD thinking to chemical process hazards.

PtD applies across the entire lifecycle of a system. ANSI/ASSP Z590.3 identifies lifecycle phases including conceptual design, preliminary and detailed design, build or construction, operation and maintenance, retrofit or redesign, and decommissioning or disposal. A true PtD program considers the workers who will build, install, operate, clean, maintain, repair, and ultimately demolish or dispose of the system, not just the end user.

How Prevention through Design Works

1. The Hierarchy of Controls as the Engine of PtD

PtD is the hierarchy of controls applied at the earliest possible moment. ANSI/ASSP Z590.3 presents the hierarchy as a design decision-making order of precedence:

1. Risk avoidance or elimination through design: remove the hazard entirely (eliminate the need for work at height by locating equipment at grade).
2. Substitution of less hazardous materials, processes, or energy sources (water-based solvents, lower voltage, lighter materials).
3. Engineering controls designed into the system: guarding, interlocks, ventilation, fail-safe design, ergonomic layout.
4. Warnings: signs, alarms, labels, visual and audible signals.
5. Administrative controls: procedures, training, work scheduling, job rotation.
6. Personal protective equipment: the last resort, relying entirely on human behavior.

The exam consistently rewards the answer that is highest on the hierarchy and applied earliest in the lifecycle. Elimination and substitution are design-level controls and therefore the heart of PtD. Warnings, administrative controls, and PPE are considered lower-order controls because they do not remove the hazard and depend on human behavior.

2. Risk Assessment as the Foundation

Z590.3 makes risk assessment the central activity of PtD. The standard describes a structured process:

- Establish the context and define the system, its boundaries, and its lifecycle phases.
- Identify hazards for each phase, including non-routine tasks such as maintenance, cleaning, startup, shutdown, and emergency response.
- Assess risk by estimating severity (consequence) and probability (likelihood) of harm, often using a risk matrix.
- Evaluate whether the risk is acceptable. Z590.3 uses the concept of acceptable risk, meaning risk reduced to a level the organization can tolerate given legal obligations, its policy, and the state of the art, aligned with the ALARP (as low as reasonably practicable) idea.
- Select and implement risk reduction measures following the hierarchy of controls.
- Assess residual risk and verify that it is acceptable. If not, iterate.
- Document the assessment, decisions, assumptions, and residual risks, and communicate them to downstream users and maintainers.

Common hazard analysis tools used within PtD include Preliminary Hazard Analysis (PHA), What-If analysis, Hazard and Operability Studies (HAZOP), Failure Mode and Effects Analysis (FMEA), Fault Tree Analysis (FTA), Job Safety Analysis for anticipated tasks, checklists, and design reviews at defined stage gates. The exam may ask which tool fits a given design stage: PHA is appropriate at the conceptual stage when little detail exists; FMEA and HAZOP are appropriate during detailed design when components and process parameters are defined.

3. The Design Review and Stage Gate Process

PtD is operationalized through formal design reviews at milestones such as 30 percent, 60 percent, and 90 percent design, with safety sign-off required before proceeding. Key practices include involving safety professionals, operators, and maintenance personnel on the design team; using design safety checklists and standards (NFPA, ASME, ANSI, ISO 12100 for machinery, OSHA requirements); conducting constructability and maintainability reviews; applying human factors and ergonomics criteria; and performing a pre-startup safety review (PSSR) before commissioning. Management of change (MOC) ensures that later modifications undergo the same scrutiny.

4. Design Principles Commonly Tested

- Fail-safe design: When a component fails, the system defaults to a safe state (a brake applied by spring and released by power).
- Redundancy: Duplicate critical components so a single failure does not cause harm.
- Interlocks and guarding: Prevent access to hazardous energy or motion.
- Inherently safer design strategies: Minimize inventories, substitute less hazardous materials, moderate conditions (lower temperature and pressure, dilution), and simplify to reduce error opportunities.
- Ergonomic and human-centered design: Design to fit the worker population (anthropometry), reduce force, repetition, awkward posture, and cognitive load; design controls and displays to be intuitive and error-tolerant.
- Design for maintainability and access: Permanent platforms, anchorage points, lifting points, lockout provisions, and isolation valves located for safe access.
- Design for constructability: Prefabrication at grade, embedded anchor points for fall protection, and sequencing that minimizes work at height or in confined spaces.
- Design for decommissioning: Selecting materials and layouts that permit safe disassembly and disposal.

5. The Business Case and Lifecycle Cost

A frequently tested concept is that the cost of design changes rises exponentially as a project progresses. A change that costs one unit at the concept stage may cost ten units in detailed design, one hundred during construction, and one thousand or more after commissioning. PtD lowers total lifecycle cost by reducing injuries, workers compensation, retrofits, downtime, maintenance expense, regulatory penalties, and liability exposure, while improving productivity and quality. Safety professionals should be prepared to present PtD proposals in business terms: return on investment, net present value, and avoided costs.

6. Roles, Responsibilities, and Barriers

PtD succeeds only when management commits to it, designers and engineers are trained in hazard recognition, and safety professionals are embedded in project teams early. Owners and clients hold significant influence because they set specifications and budgets. Barriers to PtD include lack of designer training in occupational safety, perceived liability for designers who address construction safety, fragmented contractual structures that separate design from construction, schedule pressure, and the misconception that safety is solely the contractor or employer responsibility. Z590.3 and NIOSH both advocate integrating PtD into engineering education and professional licensure.

7. Regulatory and Standards Context

In the United States, PtD is largely voluntary and consensus-based (ANSI/ASSP Z590.3, with support from ANSI/ASSP Z10 and ISO 45001 which require design and procurement controls as part of the management system). OSHA Process Safety Management (29 CFR 1910.119) and EPA Risk Management Program embed PtD-like requirements through process hazard analysis, PSSR, and MOC. Internationally, the UK CDM Regulations and Australian WHS laws impose explicit legal duties on designers. Knowing that Z10 and ISO 45001 contain design review and procurement clauses is useful for integrated management system questions.

How to Answer Exam Questions on Prevention through Design Principles

CSP questions on PtD are rarely pure recall. They are typically scenario-based, asking you to choose the best control, the best point of intervention, the correct standard, or the most appropriate analysis method. Use the following reasoning framework:

Step 1: Identify the lifecycle phase. Ask where the scenario sits: concept, design, construction, operation, maintenance, or decommissioning. The best answer usually pushes action to the earliest feasible phase.

Step 2: Apply the hierarchy of controls. Among the options, favor elimination, then substitution, then engineering controls. Reject answers that lead with PPE, training, or signage when a design solution is feasible.

Step 3: Look for the whole-lifecycle answer. The correct choice often accounts for maintenance, cleaning, and demolition workers, not just operators.

Step 4: Think risk assessment, then control, then verification. If a question asks what to do first, the answer is usually to identify hazards and assess risk, not to select a control. If it asks what to do last, it is usually to verify residual risk is acceptable and document.

Step 5: Recognize the standard. When asked which standard provides PtD guidance, the answer is ANSI/ASSP Z590.3. For machinery risk assessment, ISO 12100. For management systems requiring design review, ANSI/ASSP Z10 or ISO 45001.

Exam Tips: Answering Questions on Prevention through Design Principles

1. Earliest and highest wins. When two answers both reduce risk, pick the one applied earlier in the lifecycle and higher on the hierarchy. Relocating a valve to grade level beats installing a permanent ladder, which beats requiring fall protection training.

2. Know the Z590.3 hierarchy order exactly. Elimination or risk avoidance, substitution, engineering controls, warnings, administrative controls, PPE. Note that Z590.3 places warnings above administrative controls, which differs slightly from some NIOSH graphics that fold warnings into administrative controls. If a question references Z590.3, use its six-level order.

3. Watch for the word first. The first step in PtD is hazard identification and risk assessment, not control selection. Distractors will offer attractive engineering fixes as the first step.

4. Understand acceptable risk and residual risk. PtD does not promise zero risk. The goal is to reduce risk to an acceptable level, verify the residual risk, and communicate it. An answer claiming all risk is eliminated is usually a distractor unless the hazard is genuinely removed.

5. Match the analysis tool to the design stage. PHA and What-If for early concept; HAZOP, FMEA, and FTA for detailed design; JSA and PSSR near operation. Questions that describe limited design detail point to PHA.

6. Remember cost escalation. Questions on the business case expect you to know that the ability to influence safety is greatest and cost of change is lowest at the conceptual stage, and both reverse as the project proceeds.

7. Include non-routine tasks and all worker groups. Correct answers frequently reference maintenance access, lockout provisions, confined space avoidance, and demolition, because these are the groups most often overlooked by designers.

8. Distinguish inherently safer design strategies. Minimize, substitute, moderate, simplify. If a scenario reduces chemical inventory, that is minimize; lower temperature or dilution is moderate; fewer process steps or simpler controls is simplify.

9. Know the key organizations and dates. NIOSH launched the national PtD initiative in 2007; ANSI/ASSP Z590.3 was first published in 2011 and reaffirmed later. The National Safety Council promoted Safety through Design in the 1990s.

10. Connect PtD to management systems. Expect questions linking PtD to Z10 and ISO 45001 design and procurement clauses, to PSM elements such as PHA, PSSR, and MOC, and to Plan-Do-Check-Act continual improvement.

11. Beware of answers that shift responsibility. Distractors may suggest that safety is solely the contractor or end user problem. PtD philosophy holds that owners, designers, and engineers share responsibility and influence.

12. Read for the role of the safety professional. The exam tests your ability to act as an advisor who participates in design reviews, facilitates risk assessment, presents the business case, and documents decisions, not as someone who merely inspects after the fact.

Sample Question Walkthrough

A manufacturing company is designing a new production line. During a 30 percent design review, the safety professional notes that motor control panels are located on a mezzanine accessible only by a vertical fixed ladder. What is the most effective recommendation?

Option A: Specify a fall arrest system and harness for electricians. Option B: Install a self-closing gate and cage on the ladder. Option C: Relocate the control panels to grade level in a dedicated electrical room. Option D: Develop a written procedure and training program for mezzanine access.

The correct answer is C. The scenario is at an early design stage where relocation is feasible and inexpensive. Relocating the panels eliminates the fall hazard entirely for installation, operation, and maintenance personnel, placing the control at the top of the hierarchy. Option B is an engineering control that still leaves the hazard; Options A and D are PPE and administrative controls that rely on human behavior and should be considered only if elimination and engineering controls are infeasible.

Summary

Prevention through Design is the disciplined application of hazard identification, risk assessment, and the hierarchy of controls at the earliest stages of a system lifecycle, guided by ANSI/ASSP Z590.3 and supported by NIOSH. It reduces risk to an acceptable level, lowers total lifecycle cost, protects workers across construction, operation, maintenance, and decommissioning, and positions the safety professional as a strategic contributor to design decisions. On the CSP exam, consistently reason toward the earliest intervention, the highest-order control, the complete lifecycle, and a documented risk assessment process, and you will answer PtD questions with confidence.