IOSH
Risk management fundamentals
Effective ways of making workplaces safer
This resource gives you the essentials for selecting effective risk controls and creating safer, more resilient working environments.
Workplace safety principles
Creating safer workplaces is essential to protect employees from harm and ensure their physical and mental wellbeing.
A strong safety culture not only reduces accidents and health risks, but also improves productivity, morale and organisational resilience.
Competent occupational safety and health (OSH) professionals should make recommendations for controlling the core health and safety risks within a business. Collaboration may be necessary in more complex situations.
To work effectively, these recommendations need to be practical and based on operational knowledge.
Before you think about how to make your workplace safer
It's important to understand what hazards you need to identify and the risks that need to be managed. Your actions won’t have impact if you base them on hazards that don’t exist.
Using the hierarchy of control
The term hierarchy of control is used in many occupational safety and health (OSH) health guidance and courses. It’s a model of five levels of control that can be put in place to make workplaces safer.
All five levels can be applied to any industry. It is called a hierarchy and displayed as a triangle because the methods at the top are more effective at controlling the hazard than those at the bottom. However, those at the top are not always possible or practical.
It's important to consider all possible controls and to then make informed decisions on which can be put in place in your organisation.
Practical examples for each control level
-
Elimination
Completely remove the hazard
This is the most effective control of hazards because it physically removes the hazard from the workplace at the source. Some hazards don’t need to be there, and when you remove it, there’s no longer any risk that it will cause harm.
This can include:
- banning the manufacture and use of asbestos
- discontinuing the use of a hazardous process or chemical
- removing gas-powered to battery powered to remove fumes
- performing tasks on the ground rather than at heights.
In general, removing or eliminating a hazard is the most effective control because it protects all workers.
Although removing a hazard is the most effective way to stop it causing harm, it's not always possible. Many types of work must be done at height, or in extreme weather conditions. Some hazards aren’t avoidable.
Removing a hazard can also lead to other risks. For example, equipment such as forklift trucks, cherry pickers and conveyor belts are common ways to eliminate manual handling, but they can create other risks albeit lower risk, for workers.
-
Substitution
Replacing a hazard with a less harmful one
This is not always possible and needs informed consideration, as the safer alternative may not be effective.
For example:
- use pellet forms of chemicals instead of powders, as they create less dust
- replace solvent based paint with water-based paints
- replace manual handling with mechanical lifting equipment
- replace noisy machinery with quieter versions.
-
Engineering controls
Changing equipment or the work environment
Engineering controls are ways of changing equipment or the work environment to physically keep workers away from the hazard at source. These controls are more reliable as they do not rely heavily on human behaviour.
For example:
- isolation or enclosure creates a physical barrier between the hazard and the worker, such as soundproof rooms or spray booths
- guarding prevents access to moving parts and can be fixed (permanent barriers), interlocking (when opened or removed the machinery stops) or adjustable (set to meet the needs of the task)
- ventilation removes or filters airborne contaminants at source or dilutes them throughout a space. Local exhaust ventilation, such as fume hoods and welding extractors, captures hazards at the point they are produced. Natural ventilation uses open doors and windows to create a natural air flow
- automation removes the need to have a worker operate the machinery, such as robotics in car manufacturing.
-
Administrative controls
Changing the way people work
These controls change the way people work to reduce exposure to hazards. It uses work practices to make the workplace safer, but relies on workers and the workplace culture for their effectiveness. They are often used together with higher levels of control.
For example:
- written safe work procedures for all tasks
- regular training to ensure workers understand the procedures
- safety signs to alert workers to hazards
- task or worker rotation to limit individual exposure to hazards
- housekeeping to limit trip hazards
- clear emergency protocols with regular testing
- health surveillance to review effects of exposure
- procedures such as inspection checks
- planned maintenance to reduce breakdowns
- warning devices such as signs, backup alarms, smoke detectors or mirrors.
-
Personal protective equipment (PPE)
PPE is the last line of defence when controlling hazards, as it only protects the person. It does not remove or reduce the hazard. If a worker does not use their PPE correctly, there will be little to no protection.
Suitability includes:
- being appropriate for the hazard, such as chemical resistant gloves when using acids or leather gloves for manual handling
- fitting correctly and being comfortable.
If PPE is too hot or too heavy, reduces visibility or creates other discomfort, it is less likely to be worn consistently.
Guidance on PPE selection and use
The table shows what equipment can be used to protect different body parts.
| Body part | Examples of PPE |
|---|---|
| Lungs (inhalation of dust, mists, gases and fumes) | Masks Respirators Self-contained breathing apparatus (SCBA) |
| Eyes (debris and chemicals) | Safety glasses Goggles Face shields |
| Hands (physical harm and chemical absorption) | Latex gloves for biological hazards Chemical-resistant gloves Electrical‑insulating gloves |
|
Feet (physical injury) |
Slip‑resistant soles for wet or oily surfaces Steel‑toe or composite‑toe boots to protect against crushing injuries Chemical‑resistant footwear for corrosive substances |
PPE is often required by law
An example is the use of thermal wear (insulated jacket, trousers, boots and gloves) in cold work environments such as freezers.
The worker is responsible for using their PPE as instructed, but it is the employer’s role to consider workers needs when buying PPE.
Summary
- Eliminating hazards is the most effective control.
- Substitution and engineering controls reduce risk significantly.
- Administrative controls and PPE are important but less reliable.
- Safety culture and collaboration are essential for success.
- Always base actions on real hazards identified in your workplace.
Make safety work for everyone
Creating a safer workplace is not a one-time task, but an ongoing commitment. By applying controls, engaging workers and creating a strong safety culture, organisations can reduce risks, protect health and improve overall performance. The benefits of a safe workplace not only meet compliance but also maintain productivity and wellbeing
-
Checklist
You should:
- identify hazards and assess risks
- apply elimination or substitution where possible
- implement engineering controls
- establish administrative procedures and training
- provide and maintain suitable PPE
- review and update controls regularly.
Frequently asked questions
-
How do I decide which level of control to use for a particular hazard?
Start by considering elimination and substitution first, then work down the hierarchy. The best option is the one that effectively reduces the risk while being practical, sustainable and suited to the workplace.
-
What should I do if eliminating or substituting a hazard isn’t possible?
Use the strongest remaining controls – typically engineering measures – before relying on administrative controls or PPE, which are less reliable because they depend on people’s behaviour.
-
How can I tell whether the controls we’ve chosen are actually working?
Monitor performance through inspections, feedback, incident data, exposure measurements or maintenance checks. Controls should be reviewed regularly and updated if risks change.
-
Who is responsible for choosing the right controls in my organisation?
A competent OSH professional should advise on control options, but effective decision‑making usually involves collaboration between managers, workers and specialists who understand the tasks and environment.
-
How do I make sure workers use PPE correctly and consistently?
Choose PPE that fits well and is comfortable, train workers clearly, explain why it’s needed and make it easy to maintain or replace. Regular checks and positive reinforcement also help build consistent use.
