Why Many HSE Learners Get Confused by These Risk Assessment Fields
When completing a risk assessment, one of the most common areas of confusion is the difference between existing controls and further controls.
Many new HSE learners struggle to decide what information belongs in each section. Some repeat the same controls in both fields, while others leave the further controls section blank without considering whether additional action is needed.
Understanding the difference is important because these fields help organizations evaluate how well risks are currently managed and identify opportunities for improvement.
This guide explains existing controls and further controls using simple workplace examples and practical risk assessment scenarios.
What Are Existing Controls?
Existing controls are the measures that are already in place to reduce risk at the time the assessment is conducted.
These controls may include:
- Physical safeguards
- Procedures
- Training
- Supervision
- Signage
- PPE
- Maintenance programs
- Inspection processes
In simple terms:
Existing controls describe what is already being done to manage the hazard.
Existing Controls: Simple Example
Hazard
Wet floor in warehouse walkway.
Existing Controls
- Warning signs displayed.
- Housekeeping procedures in place.
- Staff instructed to report spills.
These are controls that currently exist and are actively being used.
What Are Further Controls?
Further controls are additional actions recommended to further reduce risk.
These controls may be necessary when:
- Existing controls are not fully effective.
- Risk remains too high.
- Workplace conditions have changed.
- Additional improvements are reasonably achievable.
In simple terms:
Further controls describe what should be done next to improve risk management.
Further Controls: Simple Example
Hazard
Wet floor in warehouse walkway.
Existing Controls
- Warning signs displayed.
- Housekeeping procedures implemented.
Further Controls
- Install slip-resistant flooring.
- Increase inspection frequency during busy periods.
- Introduce spill response training refreshers.
These actions are improvements rather than controls already in place.
Understanding the Difference
A useful way to remember the distinction is:
| Question | Existing Controls | Further Controls |
| What is already being done? | ✔ | ✘ |
| What additional action is needed? | ✘ | ✔ |
| Current risk management measures | ✔ | ✘ |
| Future improvements | ✘ | ✔ |
Existing controls reflect the present situation.
Further controls focus on future risk reduction.
Why Risk Assessments Need Both Sections
A risk assessment should not simply identify hazards.
It should also evaluate:
- How risks are currently controlled.
- Whether those controls are sufficient.
- What additional improvements may be required.
Without this evaluation, opportunities to reduce risk further may be missed.
Example 1: Warehouse Operations
Hazard
Moving forklifts operating near pedestrian walkways.
Existing Controls
- Designated pedestrian routes.
- Forklift operator training.
- Speed limits displayed.
- High-visibility clothing required.
Further Controls
- Install physical barriers between vehicles and pedestrians.
- Introduce additional traffic monitoring.
- Review traffic management plan annually.
Why These Are Further Controls
The current measures already exist.
The proposed actions strengthen risk management and further reduce exposure.
Example 2: Office Environment
Hazard
Electrical cables crossing walkways.
Existing Controls
- Employees advised to keep walkways clear.
- Periodic workplace inspections conducted.
Further Controls
- Install cable management systems.
- Relocate workstations to eliminate exposed cables.
- Include housekeeping checks in daily inspections.
The further controls address the root cause more effectively.
Example 3: Construction Activities
Hazard
Workers exposed to unprotected edges during roof maintenance.
Existing Controls
- Working-at-height procedures.
- Supervisor oversight.
- PPE provided.
Further Controls
- Install temporary guardrails.
- Improve access arrangements.
- Review work planning process before task commencement.
These improvements reduce reliance on administrative controls and PPE alone.
How Existing Controls Relate to Residual Risk
Residual risk refers to the level of risk that remains after existing controls have been applied.
For example:
Hazard
Exposure to airborne dust.
Existing Controls
- Dust suppression system.
- Worker training.
- Respiratory protection.
Although risk has been reduced, some exposure may remain.
This remaining risk is known as residual risk.
The purpose of further controls is often to reduce residual risk even further where practical.
Using the Hierarchy of Controls
When recommending further controls, it is helpful to follow the principles of the Hierarchy of Controls.
Higher-level controls generally provide more effective risk reduction than lower-level controls.
Example
Hazard:
Excessive workplace noise.
Existing Control:
Hearing protection.
Possible Further Controls:
- Replace noisy equipment.
- Install noise barriers.
- Modify work processes.
These options target the hazard more directly than relying solely on PPE.
For more information, see our Hierarchy of Controls guide.
Common Mistakes New Learners Make
Repeating Controls in Both Sections
Incorrect Example:
Existing Controls
- Safety helmet required.
Further Controls
- Safety helmet required.
If the control already exists, it should not appear as a future action.
Listing General Statements
Weak Example:
“Be careful.”
This does not identify a meaningful control measure.
Controls should be specific and measurable where possible.
Ignoring Residual Risk
Even when controls exist, additional improvements may still be beneficial.
Risk assessments should evaluate whether current measures are adequate.
Adding Unrealistic Further Controls
Further controls should be practical and relevant to the workplace.
Recommendations should focus on achievable risk reduction measures.
Questions to Ask When Completing These Sections
For Existing Controls
Ask:
- What measures are currently in place?
- Are workers following them?
- Are they functioning effectively?
For Further Controls
Ask:
- Can risk be reduced further?
- Are there gaps in current controls?
- Are higher-level controls available?
- Is additional training, supervision, or engineering control needed?
These questions help improve the quality of risk assessments.
Example Risk Assessment Entry
Hazard
Forklift and pedestrian interaction in warehouse.
Who May Be Harmed
Warehouse staff, contractors, visitors.
Existing Controls
- Marked pedestrian walkways.
- Operator training.
- Speed restrictions.
- High-visibility clothing.
Further Controls
- Install physical separation barriers.
- Review traffic routes.
- Conduct monthly traffic audits.
This example demonstrates how the two fields work together.
How This Improves Risk Assessments
Understanding existing and further controls helps organizations:
- Evaluate current safety measures
- Identify weaknesses
- Prioritize improvements
- Reduce residual risk
- Develop effective action plans
It also helps learners complete risk assessment forms more accurately and confidently.
For a complete overview of the risk assessment process, explore our Risk Assessment Guide.
Building Stronger Risk Management Skills
One of the key objectives of risk assessment is continuous improvement.
Existing controls show how risk is currently managed, while further controls identify opportunities to strengthen protection and reduce exposure.
When learners understand the difference between these two fields, risk assessments become more practical, useful, and effective.
If you’re developing your risk assessment skills, our Risk Assessment Template provides a structured format for documenting hazards, controls, and recommended actions.
Continue Your HSE Learning Journey
Understanding existing controls and further controls is an important step toward effective workplace risk management.
SFAST provides practical learning resources that help students, supervisors, managers, and aspiring safety professionals improve their understanding of hazard identification, risk assessment, and workplace safety practices.
If you’re exploring NEBOSH, IOSH, or other professional HSE qualifications, the SFAST advisory team can help you identify a suitable learning pathway for your goals.
Frequently Asked Questions
What are existing controls in a risk assessment?
Existing controls are the measures already in place to reduce workplace risk at the time of the assessment.
What are further controls?
Further controls are additional actions recommended to reduce risk beyond the measures already in place.
Why are further controls important?
They help reduce residual risk and support continuous improvement in workplace safety.
Can PPE be an existing control?
Yes. PPE may be listed as an existing control if it is already provided and used correctly.
Should existing controls and further controls be different?
Yes. Existing controls describe current measures, while further controls identify future improvements or additional actions.