Hierarchy of Controls — NIOSH Pyramid Explained

The five tiers with real examples

1) Elimination — remove diesel forklifts from an indoor warehouse (eliminates exhaust exposure). 2) Substitution — replace a chlorinated solvent with a water-based cleaner. 3) Engineering — install a local exhaust ventilation (LEV) hood on a grinding station. 4) Administrative — rotate workers through a noise-exposed area to limit dose; add a permit-to-work for hot work. 5) PPE — hearing protection, safety glasses, respirators. Tiers 1–3 protect everyone in the workspace by default; tiers 4–5 depend on individual compliance every day.

Why PPE is at the bottom (and often over-relied on)

PPE is the last line of defence — it does nothing to reduce the hazard, only to protect one worker if the hazard reaches them. It fails whenever it is not worn correctly, is defective, or its required use is not enforced. Studies from NIOSH, HSE and the ILO all show that programmes over-reliant on PPE have worse outcomes than programmes that push the mitigation up the hierarchy. If your incident CAPAs consistently end in 'reinforce PPE compliance', you have a hierarchy problem, not a compliance problem.

Integration with Tripod Beta and BowTie

In a BowTie diagram, each barrier is a control. Best practice is to tag every barrier with its Hierarchy of Controls tier — so a review can flag Top Events where the entire barrier stack is tiers 4–5. In Tripod Beta, when a barrier failed, the corrective action should target a higher-tier replacement wherever technically feasible, not just a stricter version of the same low-tier control.

Preguntas frecuentes