🎉 Back To School Special Offer! Up To 30% off on Selected Courses. |

Hierarchy of Controls Guide

The hierarchy of controls is a ranked framework for choosing safety controls from strongest to weakest. It helps learners avoid jumping straight to PPE and instead think about whether the hazard can be removed, replaced, isolated or controlled through better systems before relying on individual behaviour.

Use this page to understand the five control levels, why higher controls are usually more reliable, why PPE is normally the last line of defence, and how this concept connects to risk assessment, NEBOSH practical learning and IOSH manager awareness.

This guide helps you
understand

GIC1

Open book examination

GIC2

Practical risk assessment

45%

GIC1 provisional pass mark

60%

GIC2 pass mark

Before reading this guide

Students usually meet this concept after learning hazard, risk and risk assessment. They often understand that controls are needed,
but they may not know which controls are strongest.

What are the 5 levels?

Understand elimination, substitution, engineering controls, administrative controls and PPE.

Why is PPE last?

Learn why PPE is important but usually weaker than controls that remove or isolate hazards.

How do I choose controls?

Use control strength, exposure reduction and workerdependence to improve riskcontrol decisions.

What is the hierarchy of controls?

The hierarchy of controls is a ranked method for choosing how to control hazards and reduce risk. The strongest controls try to remove the hazard or prevent exposure at the source. The weaker controls depend more on people following instructions, remembering rules or wearing protective equipment correctly.

Key terms explained simply

Hierarchy of controls =a ranked framework for choosing hazard and risk controls from most effective to least effective.

Substitution = replacing the hazard with something safer.

Administrative controls = changing how people work through procedures, training, scheduling, signs or supervision.

Control measure =an action used to eliminate a hazard or reduce risk.

Worker-dependence = how much a control relies on people remembering, behaving correctly or using equipment properly.

Elimination= physically removing the hazard.

Engineering controls = isolating people from the hazard or changing the physical work environment.

PPE = personal protective equipment used to protect the worker when other controls cannot fully remove risk.

Residual risk=the risk remaining after controls are applied. .

The 5 levels of control

Elimination

Elimination removes the hazard. Examples include doing work from ground level instead of working at height, rerouting cables to remove a trip hazard, or redesigning delivery to remove manual lifting.

Substitution

Substitution replaces the hazard with something safer, such as using a less hazardous chemical, quieter equipment, lighter materials or a safer access method.

Engineering controls

Engineering controls change the workplace, equipment or physical environment. Examples include machine guarding, local exhaust ventilation, barriers, interlocks, edge protection and mechanical lifting aids.

Administrative controls

Administrative controls change how people work through procedures, permits, training, supervision, warning signs, job rotation, inspections and toolbox talks.

Personal protective equipment

PPE includes helmets, gloves, safety footwear, eye protection, hearing protection, respirators. high-visibility clothing and fall-arrest equipment.

Use more than one control

The hierarchy does not always mean only one control is used. Real workplaces often combine controls to reduce residual risk.

Why PPE is the last line of defence

Why PPE is lower in the hierarchy

  • It does not remove the hazard.
  • It depends on people wearing it correctly.
  • It may fail if damaged, unsuitable or uncomfortable.
  • It protects only the person wearing it
  • It needs training, fit, maintenance and supervision. .

Better thinking

Instead of writing only wear gloves, ask whether the hazardous substance can be removed. substituted, contained, ventilated or managed through safer work systems before deciding what PPE is still needed

PPE is important, but it should not be the first answer

PPE can be essential where risks remain. The problem is when learners or workplaces jump straight to PPE without considering stronger controls first.

Before/after example: improving weak controls

This is where SFAST can teach more than memorisation: learners should know how to upgrade weak
controls into stronger controls.

Forklift and pedestrian risk

Tell workers to be careful. Wear hi-vis. Put up warning signs

These controls may help, but they rely heavily on behaviou

Improved control mix

Separate pedestrians and forklifts using physical barriers, create marked pedestrian walkways. improve lighting, use mirrors at blind corners, set speed limits, train drivers, brief pedestrians and monitor compliance.

This reduces exposure and uses engineering controls before relying only on behaviour

How hierarchy of controls connects to risk assessment

Hazard identified

What can cause harm?

Risk assessed

Who may be harmed?

Controls reviewed

What exists now

Hierarchy applied

Can controls be stronger?

Residual risk reduced

Review again later

Example: chemical fumes

Hazard: chemical fumes. Risk inhalation harm from repeated exposure. Weak control: mask only. Stronger control: substitute chemical, use ventilation, reduce exposure time, train workers, then use suitable respiratory protection if needed.

This page supports the Risk Assessment Guide, but it does not replace it.

How hierarchy of controls connects to NEBOSH

NEBOSH learners need to understand controls because risk assessment is not only about identifying hazards. It also involves judging whether existing controls are enough and recommending further controls that reduce risk.

How hierarchy of controls connects to IOSH

Managers and supervisors should understand that telling workers to be careful is usually not enough, PPE should not be the first or only control, and physical separation may be stronger than a sign..

This page supports IOSH learners, but the detailed manager pathway belongs in the IOSH Managing Safely Learner Guide.

Common mistakes when choosing controls

Starting with PPE

PPE may be required, but first ask whether the hazard can be removed, replaced or controlled more strongly.

Training as the only control

Training is useful, but it depends on memory, behaviour and supervision.

Ignoring exposure

A control should reduce how often, how long or how directly people are exposed to the hazard.

Controls that do not match risk

A high-risk activity usually needs stronger controls than a low-risk activity.

Forgetting maintenance

Engineering controls, PPE and safety systems can fail if they are not checked and maintained

Copying generic controls

Controls should match the real hazard, task, people and workplace.

What this page does not cover

This page explains how to choose stronger controls. It does not cover course fees, batch dates, registration, full risk assessment method, full NEBOSH GIC2 submission instructions, downloadable templates, legal advice, salary claims or PPE training in detail. ..

The correct learning path is:

Hazard vs Risk - Risk Assessment Guide - Hierarchy of Controls - Risk Assessment Template - NEBOSH Risk Assessment Practical.

What to read next

Open the Risk Assessment Guide

Understand how hazards, risks and controls fit into the full assessment process.

Read Hazard vs Risk

Separate source of harm from chance of harm before selecting controls.

Open the NEBOSH Risk Assessment Practical Guide

Connect control thinking with NEBOSH GIC2-style practical learning.

Download the Risk Assessment Template

Record hazards, risks, existing controls, further controls and review dates.

Read IOSH Managing Safely Learner Guide

Understand how managers and supervisors support risk control.

Return to the NEBOSH & IOSH Learning Hub

Use the full learning journey and all related guides.

Learning controls for NEBOSH, IOSH or HSE work?

If you are learning the hierarchy of controls because you want to choose NEBOSH, IOSH or an HSE learning route,
use the NEBOSH & IOSH Hub or speak with a SFAST advisor before checking course dates.

FAQs Questions

What is the hierarchy of controls?
The hierarchy of controls is a ranked framework for choosing hazard and risk controls from most effective to least effective.
What are the 5 levels of hierarchy of controls?

A simple template should include the activity or task, hazard, who may be harmed and how, existing controls, further controls, responsible person, target date and review data.

Which control is most effective?

Write the specific source or situation that can cause harm, such as “moving forklift traffic near pedestrian walkway,” not vague phrases like “unsafe area.”

Why is PPE the last control?

It means identifying the people exposed to the hazard and explaining the possible harm, such as “warehouse staff and contractors may be struck by moving forklifts.”

What is an example of elimination?

Existing controls are the control measures already in place, such as training, guarding, barriers, signs, procedures or ventilation.

What is an example of substitution?

Further controls are additional actions needed to reduce the risk, such as installing barriers, improving ventilation, replacing equipment or updating procedures.

What are engineering controls?

NEBOSH states that the International General Certificate is accredited and credit-rated by Qualifications
Scotland Accreditation at SCQF Level 6 with 11 SCQF credit points.

What are administrative controls?

No. Examples can help you understand structure, but your risk assessment should match your own workplace, task, hazards and controls.

How does the hierarchy of controls help risk assessment?

It can help learners understand how to record hazards, controls and action plans, but it should not be used as a copied NEBOSH GIC2 report.

How does this connect to NEBOSH and IOSH?

It can help learners understand how to record hazards, controls and action plans, but it should not be used as a copied NEBOSH GIC2 report.

Source basis and review note

How this guide is researched

This guide is based on NIOSH hierarchy of controls guidance, OSHA hierarchy of controls explanation, HSE PPE and risk-control guidance, IOSH Managing Safely positioning and SFAST'S NEBOSH & IOSH learning-hub structure.

This page should be reviewed whenever official hierarchy of controls, PPE, risk assessment, NEBOSH or IOSH guidance is updated.

Source basis

NIOSH hierarchy of controls guidance is used for the preferred order of controls and worker-dependence explanation

OSHA hierarchy of controls is used for the five-level ranking.

HSE PPE guidance is used for the PPE-last-resort explanation.

IOSH Managing Safely iis referenced only for manager/supervisor learning context.

Student-first NEBOSH & IOSH learning ecosystem for learners who want to understand safety qualifications before choosing structured training.

Learning links

SFAST NEBOSH & IOSH Learning Hub Guide page only. Course fees, schedules and registration belong on commercial course pages.

Enquire Now

Fill the *required fields below in order to submit the form.

Enquire Now

Fill the *required fields below in order to submit the form.

Enquire Now

Fill the *required fields below in order to submit the form.