Occupational Health and the Hierarchy of Controls

Core Idea

Occupational health uses a control hierarchy—elimination, substitution, engineering controls, administrative controls, and personal protective equipment—to reduce workplace hazard exposure. The hierarchy prioritizes preventing hazard creation and system-level solutions over reliance on worker behavior and training. This evidence-based approach reduces worker injuries, illnesses, and deaths from occupational exposures.

Explainer

From your study of environmental health determinants and levels of disease prevention, you know that hazards can be addressed at multiple points — before they cause disease, during exposure, or after harm has occurred. The hierarchy of controls applies this logic specifically to workplace hazards. It ranks intervention strategies from most to least effective, based on how reliably they reduce exposure regardless of worker behavior. The hierarchy has five levels: elimination, substitution, engineering controls, administrative controls, and personal protective equipment (PPE). The key insight is that the higher you intervene in the hierarchy, the less you depend on individual workers consistently doing the right thing.

Elimination is the gold standard: remove the hazard entirely. If a chemical is toxic, stop using it. If a machine pinch-point causes crushing injuries, redesign the machine to have no pinch-points. Elimination is the most effective control because there is nothing left to manage. Substitution replaces one hazard with a lesser one: switching from a carcinogenic solvent to a less toxic alternative, or replacing asbestos insulation with mineral wool. Both elimination and substitution are permanent, system-level solutions — they protect every worker, on every shift, without any ongoing training or compliance effort.

Engineering controls come next: physical barriers or process changes that isolate workers from the hazard without eliminating it. Local exhaust ventilation that captures welding fumes before they reach the breathing zone, machine guards that prevent contact with moving parts, noise enclosures that dampen industrial machinery — these are all engineering controls. They are highly effective because they work passively; once installed, they do not require the worker to remember to use them. Administrative controls sit below engineering in effectiveness: work practices, scheduling, and procedures that reduce exposure by changing how and when work is done. Job rotation limits an individual's exposure time; lockout/tagout procedures prevent accidental energization during maintenance; training programs teach safe practices. Administrative controls are less reliable than engineering controls because they depend on human compliance, supervision, and memory.

PPE — respirators, gloves, hearing protection, hard hats — sits at the bottom of the hierarchy. It does not reduce the hazard itself; it simply places a barrier between the hazard and the worker. PPE fails silently: a respirator worn improperly, a glove with a small tear, hearing protection that is removed during a break — all represent full exposure. This is why public health practitioners resist the reflexive PPE-first response common in under-resourced workplaces. PPE is appropriate when the hazard cannot feasibly be controlled higher in the hierarchy, and as a supplemental layer on top of engineering controls. A practical framework: when evaluating any occupational hazard, always ask — can we eliminate or substitute first? If not, can we engineer out exposure? PPE is a last resort, not a first response.