A risk assessment does not end when you identify a hazard.
Once you have described the hazard, considered who may be harmed and assessed the risk, you need to look at the controls already in place and decide what further action may be needed.
For learners preparing for NEBOSH GIC2, this distinction is important. NEBOSH describes GIC2 as a practical risk assessment in which learners assess a workplace and develop an action plan. Its current 2025-specification guidance specifically asks learners to identify existing controls and describe further control measures needed to reduce or eliminate the risk.
The challenge is making those further controls practical.
Writing:
“Provide more training.”
or:
“Use PPE.”
may sound like a safety recommendation, but it does not always explain what should actually change in the workplace.
A stronger further control tells the reader what should be done, where it should happen, who should take responsibility, and how the action will reduce the risk.
This article explains how to develop that kind of control without turning your GIC2 preparation into a copy-and-paste exercise.
What Are Further Controls?
Further controls are additional measures proposed after considering the controls that are already in place.
For example, imagine a warehouse where pedestrians and forklifts operate in the same area.
The existing controls might include:
- Warning signs
- A marked pedestrian walkway
- Forklift operator training
A further control could involve improving physical segregation between pedestrians and vehicles if the current arrangement still allows unnecessary interaction.
The important point is that the further control should respond to the actual risk identified, rather than being a generic safety statement.
NEBOSH’s current GIC2 guidance explains that existing and further controls should be considered together. It also states that further control measures should take account of the hierarchy of control and principles of prevention.
Existing Controls vs Further Controls
These two parts of a risk assessment are related, but they are not the same.
Existing controls
These describe what the workplace is already doing to manage the risk.
For example:
Workers are provided with safety footwear and receive information on safe movement around the loading area.
Further controls
These describe what additional measures could be introduced to improve control.
For example:
Install physical barriers to separate the pedestrian route from the vehicle operating area and review the traffic arrangement after implementation.
Further control should not simply repeat what already exists.
Instead, ask:
What is still missing?
What could make the control stronger?
What practical change would reduce the exposure?
That is where useful further-control writing begins.
Start With the Actual Hazard
A good further control depends on a good hazard description.
If the hazard is:
“Forklift hazard”
it is difficult to develop a meaningful action.
But if the workplace observation is:
Forklifts and pedestrians use the same loading area during delivery activities.
You can identify the specific exposure and consider appropriate improvements.
This is why hazard wording and control wording should work together.
For a broader explanation of the risk assessment process, see the SFAST NEBOSH Risk Assessment Practical Guide.
Use the Hierarchy of Controls
One of the most useful ways to improve further-control recommendations is to consider the hierarchy of controls.
The general principle is to consider stronger ways of controlling hazards before relying primarily on measures that depend on individual behaviour or PPE. The ILO describes the hierarchy from eliminating or substituting hazards through engineering and organisational controls to PPE.
A simple progression is:
- Eliminate the hazard
- Substitute it with something less hazardous
- Use engineering or physical controls
- Improve administrative or organisational controls
- Use PPE where appropriate
This does not mean every risk assessment must contain an elimination measure.
Some hazards cannot realistically be eliminated.
The point is to think about whether a stronger control is reasonably possible before immediately choosing training, signage or PPE.
Example: Working at Height
Imagine an office worker is observed climbing a ladder to clean windows.
A weak further control might be:
Provide additional PPE.
A more practical approach would consider whether the work can be avoided or changed.
For example:
Arrange for the windows to be cleaned using suitable equipment from ground level or by a competent specialist contractor where appropriate.
This type of recommendation changes the way the task is carried out rather than simply telling the worker to be more careful.
NEBOSH’s own GIC2 guidance uses a ladder-cleaning scenario to illustrate further actions, including avoiding the work at height through alternative cleaning equipment and changing when the work is carried out.
Example: Manual Handling
Consider a warehouse worker repeatedly lifting boxes from floor-level pallets to storage shelves.
A generic control might say:
Provide manual handling training.
Training may have a role, but it may not address the physical demand of the task by itself.
Further controls could instead consider:
- Changing the storage arrangement
- Reducing unnecessary carrying distances
- Using suitable mechanical handling equipment
- Placing frequently handled items in more accessible locations
- Reviewing the size or weight of loads where practicable
A practical recommendation might be:
Review the storage layout so frequently handled boxes can be positioned between suitable working heights, reducing repeated bending and lifting from floor level.
The recommendation is specific to the observed task.
Example: Slips and Trips
Suppose a pedestrian route regularly becomes obstructed by packaging during stock handling.
A weak recommendation would be:
Remind workers to keep the area clean.
This depends heavily on people remembering to act.
A stronger recommendation could be:
Provide a designated waste collection point beside the stock-handling area and introduce scheduled removal of packaging during the shift.
This addresses the condition that is creating the hazard.
It also gives the organisation something concrete to implement and monitor.
Example: Chemical Cleaning
Suppose workers manually transfer cleaning chemicals between containers.
Instead of simply recommending:
Wear gloves and goggles.
Consider the source of the exposure.
Further controls might include:
- Reviewing whether a less hazardous product can be used
- Improving the method of transfer
- Providing suitable ventilation
- Using a safer dispensing system
- Improving storage and labelling
- Providing appropriate PPE where exposure remains possible
A practical recommendation could be:
Review the cleaning product and dispensing method to determine whether a less hazardous product or closed dispensing arrangement can reduce worker exposure during transfer.
The actual control should depend on the substance, task, and workplace circumstances.
Example: Forklifts and Pedestrians
Vehicle movement is another situation where generic controls can become weak.
A recommendation such as:
Give drivers more training.
may not address the underlying interaction between vehicles and pedestrians.
If your observation shows that both groups regularly use the same space, consider physical or organisational improvements.
For example:
Review the loading-area layout and introduce physical pedestrian segregation where reasonably practicable, with clearly defined crossing points for necessary interaction.
The recommendation is stronger because it addresses the source of the exposure.
The ILO similarly emphasises controlling risks at source and prioritising collective protective measures over individual protection where appropriate.
Make Controls Specific Enough to Act On
A useful test is:
Could a supervisor read this recommendation and understand what needs to happen?
Compare:
Improve housekeeping.
with:
Introduce a designated storage area for temporary materials and include the pedestrian route in routine housekeeping inspections.
The second recommendation gives the organisation something more concrete to implement.
The same principle applies to training.
Instead of:
Provide training.
consider:
Provide task-specific training on the safe operation of the equipment before affected workers undertake the task, with refresher training based on the organisation’s arrangements.
The exact requirement will depend on the workplace and its existing training system.
Include the Location or Activity
A further control becomes more useful when it is connected to the hazard location or activity.
For example:
Install additional lighting.
is broad.
Instead:
Improve lighting around the loading-bay pedestrian route where poor visibility makes it difficult for workers to see approaching vehicles.
Now the action is connected to the observed problem.
This also makes it easier to determine whether the action has actually addressed the identified risk later.
Consider Who Should Take the Action
A practical action plan needs ownership.
The person responsible does not have to be the person who identified the hazard.
Depending on the organisation, responsibility might sit with:
- Facilities management
- Operations management
- Maintenance
- Warehouse management
- A supervisor
- Procurement
- A competent specialist
For example:
Facilities Manager to arrange repair of damaged floor covering in the main pedestrian corridor.
is much more actionable than:
Fix the floor.
The first identifies both the required action and a potential owner.
Give Actions a Realistic Timeframe
Further controls also need prioritisation.
A dangerous condition requiring immediate attention should not be treated in the same way as a longer-term improvement.
When planning actions, consider:
- How serious the potential harm could be
- How likely exposure is
- How frequently the activity occurs
- How many people may be exposed
- Whether the current controls are reliable
- Whether the action can be implemented quickly
- Whether temporary measures are needed while permanent controls are arranged
The ILO’s risk assessment process similarly includes identifying responsibility and a timeframe for implementing controls, followed by monitoring and review.
Do Not Automatically Add Five Controls to Every Hazard
More controls do not automatically mean a better assessment.
The number of further actions should reflect the actual workplace situation.
If an activity is already adequately controlled, the appropriate action may involve monitoring and reviewing the effectiveness of those controls rather than inventing unnecessary additional measures. NEBOSH’s GIC2 guidance specifically notes that realistic assessments may have few further actions for adequately controlled hazards and more actions where existing controls are limited.
This is an important principle:
Make the assessment realistic, not artificially busy.
Avoid “PPE for Everything”
PPE is important in many workplaces, but it should not become the automatic answer to every hazard.
Imagine a worker exposed to excessive noise from a machine.
A weak approach might be:
Provide hearing protection.
A broader control review could consider:
- Whether the noisy process can be eliminated
- Whether quieter equipment or a different process is possible
- Whether engineering controls can reduce noise at source
- Whether worker exposure can be reduced through work organisation
- Whether suitable hearing protection is still required
The hierarchy of controls encourages consideration of measures higher up the hierarchy before relying on PPE as the primary solution.
Connect the Control to Risk Reduction
When writing a recommendation, ask:
How will this action reduce the risk?
For example:
Hazard:
Pedestrians and forklifts share a loading area.
Weak control:
Tell workers to be careful.
Practical further control:
Introduce physical segregation between pedestrian and forklift routes where reasonably practicable.
Why it helps:
It reduces direct interaction between pedestrians and moving vehicles.
This simple connection helps prevent controls from becoming a random list of safety ideas.
Check Whether the Control Could Create a New Hazard
A proposed control should not be considered in isolation.
For example, moving a heavy storage rack may reduce one manual handling problem but create another risk if the new position blocks an emergency route.
Before recommending an action, consider:
- Could it create another hazard?
- Does it interfere with another safety control?
- Can workers use it safely?
- Is it suitable for the task?
- Does it require maintenance?
- Does it require training or supervision?
- Can its effectiveness be monitored?
The ILO notes the importance of involving workers so proposed controls work in practice and do not introduce new hazards.
A Simple Method for Writing Further Controls
When practising, use this sequence:
Step 1: Re-read the hazard
Make sure you understand exactly what is creating the exposure.
Step 2: Check the existing controls
What is already being done?
Step 3: Identify the remaining problem
Why might the existing arrangements not completely control the risk?
Step 4: Look higher in the hierarchy
Could the hazard be eliminated, substituted, isolated or controlled through engineering or organisational measures?
Step 5: Write the practical action
State what should change.
Step 6: Consider responsibility
Who is best placed to implement it?
Step 7: Consider the timeframe
How quickly should the action reasonably be addressed?
Step 8: Consider monitoring
How will the organisation know that the control remains effective?
This approach keeps the process focused on risk reduction rather than simply filling in a table.
A Useful Further-Control Formula
For practice, you can think about a further control as:
Action + specific location/activity + purpose
For example:
Review the pedestrian route in the loading area and install physical segregation where reasonably practicable to reduce interaction with moving forklifts.
Or:
Replace the damaged floor covering in the main office corridor to remove the uneven surface that could cause workers to trip.
Or:
Review the chemical dispensing method and introduce a safer dispensing arrangement where practicable to reduce the likelihood of splashes during transfer.
These are learning examples, not ready-made entries for a learner’s assessment.
Common Further-Control Mistakes
1. Using generic language
Improve safety.
There is no clear action.
2. Repeating the existing control
If workers already receive induction training, writing “provide induction training” does not represent a further action unless there is a specific gap to address.
3. Choosing PPE automatically
Consider whether the risk can be reduced closer to the source first.
4. Giving unrealistic recommendations
A control should make sense for the organisation, activity and circumstances.
5. Ignoring the workplace
Do not copy a control simply because it appears in an online example.
6. Giving too many actions
Prioritise meaningful improvements instead of creating a long list of unnecessary recommendations.
7. Forgetting monitoring
Some controls need to be checked after implementation to confirm that they remain effective.
Practical Further-Control Examples
Here is a quick learning comparison:
| Hazard situation | Weak further control | More practical approach |
| Pedestrians and forklifts share an area | Tell workers to be careful | Review traffic routes and introduce physical segregation where practicable |
| Boxes repeatedly lifted from floor level | Give manual handling training | Review storage layout and handling arrangements to reduce repeated awkward lifting |
| Packaging obstructs walkway | Remind workers about housekeeping | Provide a designated waste point and routine removal arrangements |
| Worker climbs ladder to clean windows | Tell worker to use PPE | Consider ground-level cleaning equipment or specialist arrangements to avoid unnecessary work at height |
| Chemical transfer creates splash exposure | Provide more PPE | Review the product and transfer method to reduce exposure at source |
| Damaged floor creates trip potential | Tell workers to watch their step | Repair or replace the damaged flooring and verify the route is safe |
The best recommendation will always depend on what is actually present in the workplace.
Further Controls Should Lead to an Action Plan
A control recommendation becomes much more useful when it can be converted into an action.
For example:
Hazard:
Forklifts and pedestrians interact in a loading area.
Further control:
Review the traffic layout and introduce physical segregation where reasonably practicable.
Responsible person:
Relevant operations or facilities manager.
Timeframe:
Prioritised according to the assessed risk and practical implementation requirements.
Follow-up:
Check that the segregation is being maintained and that pedestrian-vehicle interaction has been reduced.
This is the connection between risk assessment and action planning.
NEBOSH identifies the ability to develop and implement a detailed action plan as one of the outcomes of the International General Certificate, while its GIC2 guidance requires further actions to be planned alongside the risk assessment.
Use Your Own Workplace Observations
The safest way to practise writing GIC2 further controls is to work from observations rather than from pre-written answers.
Look at a workplace and ask:
What is the hazard?
Then:
What controls are already there?
Then:
What is still allowing exposure?
Finally:
What realistic change could reduce that exposure?
This produces recommendations that are connected to the workplace.
It also helps you develop the practical skill NEBOSH is looking for: applying health and safety knowledge to an actual workplace situation. NEBOSH describes GIC2 as a practical assessment where learners complete a workplace risk assessment and develop an action plan.
Final Thoughts
Writing practical further controls is not about filling your risk assessment with impressive-sounding safety language.
It is about identifying what can realistically be improved.
Start with the actual hazard. Understand the existing controls. Identify the remaining exposure. Consider the hierarchy of controls, then recommend a specific action that addresses the problem.
A strong further control should be:
- Specific
- Relevant to the hazard
- Realistic for the workplace
- Focused on risk reduction
- Consistent with the hierarchy of controls
- Clear enough to become an action
- Capable of being monitored or reviewed
If you are developing your wider GIC2 preparation, SFAST’s NEBOSH Risk Assessment Practical Guide can help you understand how hazard identification, controls and action planning fit together.
The goal is simple: don’t write a control because it sounds like a safety control. Write it because it solves a problem you have identified.
Frequently Asked Questions
What are further controls in NEBOSH GIC2?
Further controls are additional measures proposed to further reduce or eliminate a workplace risk after considering the controls that are already in place.
How do I make a GIC2 further control practical?
Describe a realistic action that directly addresses the hazard you observed. Include the relevant activity or location where useful, and consider who should implement it and when.
Should further controls always follow the hierarchy of controls?
The hierarchy of controls should guide your consideration of control measures. NEBOSH’s GIC2 guidance specifically asks learners to take the hierarchy of control and principles of prevention into account when suggesting further measures.
Is PPE enough as a further control?
PPE can be an appropriate control, but it should not automatically be the first or only recommendation. Consider whether the hazard can be eliminated, substituted, isolated or controlled through engineering or organisational measures.
Should I include many further controls for every hazard?
No. The controls should reflect the actual risk and workplace circumstances. Some hazards may already be adequately controlled, while others may require several further actions. NEBOSH’s guidance explicitly allows for this difference.
Can I copy further-control examples from online resources?
Use examples to learn how controls are written, but do not copy them as substitutes for your own workplace observations. Your recommendations should be based on the specific hazard and circumstances you are assessing.
Where can I learn more about the NEBOSH GIC2 risk assessment?
SFAST’s NEBOSH Risk Assessment Practical Guide provides broader guidance on the practical risk assessment process, while its risk assessment and hierarchy of controls resources can help you understand the concepts behind your control decisions.