Skip to content

Risk management fundamentals

Effective ways of making workplaces safer

This resource gives you the essentials for selecting effective risk controls and creating safer, more resilient working environments.

In this resource

Making workplaces safer

Creating safer workplaces is essential to protect employees from harm and ensure their physical and mental wellbeing. A strong safety culture not only reduces accidents and health risks, but also improves productivity, morale, and organisational resilience.

Five ways to make workplaces safer

The term hierarchy of control is used in many occupational safety and health (OSH) health guidance and courses, and it’s a model of five levels of control that can be put in place to make workplaces safer. 

All five levels can be applied to any industry; it is called a hierarchy and displayed as a triangle because the methods at the top are more effective at controlling the hazard than those at the bottom. However, those at the top are not always possible or practical. 

It's important to consider all possible controls, and to then make informed decisions on which can be put in place in your organisation.

Inverted hierarchy showing five levels of risk control, from elimination at the top to PPE at the bottom.
Diagram of the hierarchy of control

It's important to understand what hazards you need to identify and the risks that need to be managed. This hierarchy can be applied to any hazard in any workplace, but your actions won’t have impact if you base them on hazards that don’t exist.

Levels of control

Elimination - completely remove the hazard

This is the most effective control of hazards because it physically removes the hazard from the workplace at the source. Some hazards don’t need to be there, and when you remove it, there’s no longer any risk that it will cause harm.

This can include:

  • banning the manufacture and use of asbestos 
  • discontinuing the use of a hazardous process or chemical 
  • removing gas-powered to battery powered to remove fumes 
  • performing tasks on the ground rather than at heights.

In general, removing or eliminating a hazard is the most effective control because it protects all workers.  

Although removing a hazard is the most effective way to stop it causing harm, it's not always possible. Many types of work must be done at height, or in extreme weather conditions. Some hazards aren’t avoidable.  

Removing a hazard can also lead to other risks. For example, equipment such as forklift trucks, cherry pickers and conveyor belts are common ways to eliminate manual handling, but they can create other risks albeit lower risk, for workers.

Substitution - replacing a hazard with a less harmful one

This is not always possible and needs informed consideration, as the safer alternative may not be effective.

For example:

  • use pellet forms of chemicals instead of powders, as they create less dust
  • replace solvent based paint with water-based paints 
  • replace manual handling with mechanical lifting equipment 
  • replace noisy machinery with quieter versions.

Engineering controls - changing equipment or the work environment

Engineering controls are ways of changing equipment or the work environment to physically keep workers away from the hazard at source. These controls are more reliable as they do not rely heavily on human behaviour.

Examples include:

  • isolation or enclosure creates a physical barrier between the hazard and the worker, e.g. soundproof rooms, spray booths
  • guarding prevent access to moving parts and can be fixed (permanent barriers), interlocking (when opened or removed the machinery stops) or adjustable (can be set to meet the needs of the task) 
  • ventilation removes or filters airborne contaminants at the source or dilutes them throughout a space; e.g. local exhaust ventilation like fume hoods and welding extractors, which collect the hazard at point of origin; and natural ventilation which uses open doors and windows to create a natural air flow
  • automation which removes the need to have a worker operate the machinery e.g. robotics in car manufacturing.

Administrative controls - changing the way people work

These controls change the way people work to reduce exposure to hazards. It uses work practices to make the workplace safer, but relies on workers and the workplace culture for their effectiveness. They are often used together with higher levels of control.

Examples include:

  • written safe work procedures for all tasks 
  • regular training to ensure workers understand the procedures  
  • safety signs to alert workers to hazards   
  • task or worker rotation to limit individual exposure to hazards  
  • housekeeping to limit trip hazards  
  • clear emergency protocols with regular testing 
  • health surveillance to review effects of exposure 
  • procedures such as inspection checks 
  • planned maintenance to reduce breakdowns 
  • warning devices such as signs, backup alarms, smoke detectors, mirrors.

Personal Protective Equipment (PPE)

PPE is the last line of defence when controlling hazards, as it only protects the person. It does not remove or reduce the hazard. If a worker does not use their PPE correctly, there will be little to no protection.

Suitability includes:

  • being appropriate for the hazard, such as chemical resistant gloves when using acids or leather gloves for manual handling.  
  • fitting correctly and being comfortable. If PPE is too hot or too heavy, reduces visibility, or otherwise creates discomfort, it is less likely to be worn consistently

The table shows what equipment can be used to protect different body parts.

Body Part Examples of PPE
Lungs
(Inhalation of dust, mists, gases and fumes)		 Masks
Respirators
Self-contained breathing apparatus (SCBA)
Eyes
(Prevent debris and chemicals from damaging the eyes)		 Safety glasses
Goggles
Face shields
Hands
(Protect from physical harm and chemical absorption)		 Latex gloves for biological hazards
Chemical-resistant gloves
Electrical‑insulating gloves
Feet
(Protect the feet from physical injury)		 Slip‑resistant soles – reduce slips and falls on wet or oily surfaces
Steel‑toe or composite‑toe boots – protect against crushing injuries
Chemical‑resistant footwear – protect against corrosive substances

PPE is often subject to legal requirements. An example is the use of thermal wear (insulated jacket, trousers, boots and gloves) in cold work environments such as freezers.

The worker is responsible for using their PPE as instructed, but it is the employer's role to consider workers needs when buying PPE.

Making informed decisions

Competent OSH professionals should make recommendations for controlling the core OSH risks within a business. Collaboration may be necessary in more complex situations. To work effectively, these recommendations need to be practical and based on operational knowledge.

Key takeaways

  • Eliminating hazards is the most effective control. 
  • Substitution and engineering controls reduce risk significantly. 
  • Administrative controls and PPE are important but less reliable. 
  • Safety culture and collaboration are essential for success. 
  • Always base actions on real hazards identified in your workplace.

Checklist

  • Identify hazards and assess risks 
  • Apply elimination or substitution where possible 
  • Implement engineering controls 
  • Establish administrative procedures and training 
  • Provide and maintain suitable PPE 
  • Review and update controls regularly

Creating a safer workplace is not a one-time task, but an ongoing commitment. By applying controls, engaging workers and fostering a strong safety culture, organisations can reduce risks, protect health and improve overall performance. The benefits of a safe workplace not only meet compliance but also maintain productivity and wellbeing.

Related IOSH courses and qualifications

Working Safely

Essential foundation course covering hazard identification and risk assessment basics for all workers. Perfect starting point for understanding your role in risk management.

Managing Safely

Comprehensive course for supervisors and managers covering risk assessment, legal responsibilities and implementing controls effectively.

Level 3 Certificate in Occupational Health and Safety

In-depth qualification covering risk management principles, legal frameworks and practical implementation techniques.

Level 6 Diploma in Occupational Health and Safety

Advanced qualification for experienced professionals, covering strategic risk management and complex control systems.

Further reading and resources

IOSH member resources

  • Risk assessment templates and guidance
  • Industry-specific risk management guidance
  • Case studies of effective risk management
  • Legal updates and regulatory changes
  • Networking with risk management professionals

Regulatory guidance

  • HSE guidance on risk assessment and control
  • Industry codes of practice and standards
  • Legal requirements by sector and location
  • Best practice guidance from professional bodies

Professional development

  • IOSH branch events on risk management topics
  • Webinars on emerging risks and control technologies
  • Conferences featuring latest research and practice
  • Networking opportunities with experienced practitioners

Practical tools

  • Risk assessment software and mobile apps
  • Inspection checklists for different industries
  • Cost-benefit analysis tools for control measures
  • Performance monitoring templates and dashboards

Take action today

Build your knowledge

  • Join IOSH to access expert guidance and templates
  • Take a risk management course to develop systematic skills
  • Connect with other professionals facing similar challenges
  • Stay updated with latest developments in risk control

Make it sustainable

  • Involve your workers in identifying hazards and solutions
  • Create simple systems you can maintain long-term
  • Focus on practical improvements that make a real difference
  • Celebrate successes and learn from setbacks

Ready to advance your health and safety career?

Ready to master risk management? Start with IOSH Working Safely to build your foundation, or explore our Managing Safely course if you need to implement risk management in your organisation.

Frequently asked questions

    Start by considering elimination and substitution first, then work down the hierarchy. The best option is the one that effectively reduces the risk while being practical, sustainable and suited to the workplace.

    Use the strongest remaining controls – typically engineering measures – before relying on administrative controls or PPE, which are less reliable because they depend on people’s behaviour.

    Monitor performance through inspections, feedback, incident data, exposure measurements or maintenance checks. Controls should be reviewed regularly and updated if risks change.

    A competent OSH professional should advise on control options, but effective decision‑making usually involves collaboration between managers, workers and specialists who understand the tasks and environment.

    Choose PPE that fits well and is comfortable, train workers clearly, explain why it’s needed and make it easy to maintain or replace. Regular checks and positive reinforcement also help build consistent use.