What is the hierarchy of control?

    Short answer

    The hierarchy of control is a ranking of ways to manage a workplace hazard from the most effective to the least: eliminate the hazard, substitute it with something safer, isolate people from it, use engineering controls, use administrative controls, and finally personal protective equipment (PPE). Australian WHS law requires the highest practicable level to be used.

    Last updated · TeamAssurance

    The six levels

    LevelControlExample
    1Eliminate the hazardRemove the need to work at height by assembling at ground level
    2Substitute with something saferReplace a solvent-based cleaner with a water-based one
    3Isolate people from the hazardGuard the conveyor; fence the robot cell; remote operation
    4Engineering controlsLocal exhaust ventilation; interlocks; lifting aids
    5Administrative controlsProcedures, training, signage, job rotation, permits
    6PPEGloves, hearing protection, harnesses, respirators

    Levels 1 and 2 remove the hazard; 3 and 4 reduce the risk through physical means; 5 and 6 rely on people doing the right thing every time, which is why they sit at the bottom.

    What the law requires in Australia

    The model Work Health and Safety Regulations (reg. 36) require a duty holder to eliminate risks so far as is reasonably practicable and, where that is not possible, to minimise them by working down the hierarchy in order, using a combination of controls where one is not enough. Safe Work Australia's Code of Practice "How to manage work health and safety risks" sets out the method. PPE and administrative controls on their own are acceptable only when higher controls are not reasonably practicable.

    How to apply it

    1. Identify the hazard and who is exposed.
    2. Start at the top: can the hazard be removed from the task entirely?
    3. Work down one level at a time, asking what is reasonably practicable, not what is quickest.
    4. Combine controls: a guard (isolation) plus an interlock (engineering) plus training (administrative).
    5. Record the control chosen, the residual risk and who maintains the control.
    6. Review when the task, equipment or incident history changes.

    Common mistakes

    • Jumping to PPE because it is quick.
    • Treating a procedure as a control that holds without checking it is followed.
    • Choosing a control once and never auditing whether it is still in place.

    The hierarchy inside daily management

    The hierarchy is also the test applied to every corrective action from an incident or near miss: a countermeasure that is only "retrain the operator" sits at level 5 and will not hold. In an A3 or 5 whys, the team is asked which level the proposed action reaches; actions at levels 1–4 are preferred, and the control is then written into standard work and checked on layered audits and safety walks.

    How TeamAssurance helps

    In TeamAssurance, hazards and near misses raised from the floor become actions on the tier board, corrective actions record which level of the hierarchy they reach, and the controls chosen become checklist items and audit questions so that their presence is verified rather than assumed.

    Frequently asked questions

    Why is PPE the last resort?

    Because it does nothing to the hazard, protects only the wearer, and fails when it is not worn, not fitted or not maintained. It is used when higher controls are not reasonably practicable or as an addition to them.

    What does reasonably practicable mean?

    What could reasonably be done, weighing the likelihood and severity of harm, what is known about the hazard and controls, their availability and suitability, and only then the cost.

    Is the hierarchy of control the same everywhere?

    The order is the same worldwide. Australia's model regulations and the US NIOSH model both use it; some versions merge isolation into engineering controls, giving five levels.