Introduction
In the field of process safety, preventing incidents in high-risk industries like oil & gas, chemical manufacturing, and pharmaceuticals requires more than just compliance checklists. It demands a structured approach to identify, evaluate, and control hazards at their source. This is where the Hierarchy of Controls becomes a cornerstone in risk management frameworks.
Originally developed by the National Institute for Occupational Safety and Health (NIOSH), the hierarchy provides a prioritization model that ranks risk control measures from most effective to least effective. Understanding and applying this hierarchy in the context of process safety helps in building inherently safer systems and ensuring long-term operational resilience.
What is the Hierarchy of Controls?
The hierarchy is a tiered system comprising five levels of control measures:
- Elimination
- Substitution
- Engineering Controls
- Administrative Controls
- Personal Protective Equipment (PPE)
The system works top-down: starting with the most effective (Elimination) and moving toward the least effective (PPE). Each level aims to either remove the hazard, reduce the risk, or manage human exposure.
1. Elimination: Removing the Hazard Completely
Definition
Elimination involves physically removing the hazard from the process. It is the most effective control but also the most difficult to implement, especially in existing systems.
Examples in Process Safety:
- Designing processes that don’t require toxic solvents.
- Removing pressurized vessels if gravity-fed systems suffice.
- Avoiding confined space entries by redesigning access requirements.
Best Practices:
- Integrate elimination during the process design phase (FEED or conceptual design).
- Conduct inherent safety reviews early in the lifecycle.
- Use Process Hazard Analysis (PHA) techniques like What-If and HAZOP.
2. Substitution: Replace the Hazard
Definition
Substitution refers to replacing hazardous substances or processes with less hazardous alternatives.
Examples in Process Safety:
- Using water-based paints instead of solvent-based ones.
- Replacing hydrogen sulfide with a less toxic scavenger.
- Using non-flammable refrigerants.
Challenges:
- Substitutes may introduce new risks.
- May impact process efficiency or product quality.
Best Practices:
- Perform risk-benefit analysis of the substitution.
- Use chemical compatibility tools.
- Validate changes through Management of Change (MoC) process.
3. Engineering Controls: Isolate People from Hazards
Definition
Engineering controls involve physical modifications to equipment, processes, or facilities to reduce exposure to hazards.
Types:
- Passive Controls: Built-in features that work without human intervention.
- Active Controls: Require detection and response systems (can fail or require power).
A. Passive Engineering Controls:
- Blast walls
- Dikes and bunds for containment
- Double-walled vessels
- Flame arrestors
B. Active Engineering Controls:
- Pressure relief valves (PRVs)
- Gas detection and alarm systems
- Emergency shutdown systems (ESD)
- Interlocks in DCS/PLC systems
Best Practices:
- Conduct Layers of Protection Analysis (LOPA).
- Ensure redundancy and diversity in active systems.
- Validate functionality with FAT/SAT and proof testing.
4. Administrative Controls: Change the Way People Work
Definition
Administrative controls aim to influence behavior and procedures through rules, training, and documentation.
Examples:
- Standard Operating Procedures (SOPs)
- Permit-to-Work (PTW) systems
- Safety signage
- Operator shift rotations
- Toolbox talks and job safety analysis (JSA)
Limitations:
- Relies heavily on human consistency.
- Not fail-proof against fatigue, stress, or miscommunication.
Best Practices:
- Maintain up-to-date documentation.
- Conduct periodic refresher training.
- Perform behavioral safety audits.
5. Personal Protective Equipment (PPE): Last Line of Defense
Definition
PPE is worn by workers to protect against residual hazards that couldn’t be controlled by higher-level strategies.
Examples:
- Flame-resistant clothing (FRC)
- Respirators and SCBA kits
- Safety goggles, gloves, and earplugs
- Arc-flash suits
Limitations:
- Least reliable form of control.
- Provides no control over the hazard itself.
- Effectiveness depends on proper fit, use, and maintenance.
Best Practices:
- Conduct PPE hazard assessments.
- Train staff in correct donning/doffing procedures.
- Inspect and replace PPE regularly.
Hierarchy in Action: Real-World Example
Scenario: Hydrogen Sulfide Handling in a Refinery
- Elimination: Avoid H2S formation by changing feedstocks.
- Substitution: Use additives to convert H2S into less toxic compounds.
- Engineering Controls: Install scrubbers, H2S detectors, and ESD valves.
- Administrative Controls: Implement gas test permits, area access restrictions.
- PPE: Provide SCBA kits and personal H2S monitors.
This layered approach ensures multiple safeguards in case one layer fails.
Integrating the Hierarchy into Safety Management Systems
Tools and Standards:
- OSHA PSM (29 CFR 1910.119)
- ISO 45001 Occupational Health and Safety
- CCPS Guidelines for Inherently Safer Chemical Processes
- IEC 61511 for Safety Instrumented Systems
Recommendations:
- Use hierarchy during PHA studies.
- Evaluate each recommendation by its position in the hierarchy.
- Promote a “safety by design” culture.
Conclusion
The Hierarchy of Controls is more than a theoretical model—it is a practical decision-making framework that prioritizes hazard control strategies. From eliminating hazards at the design stage to relying on PPE only when necessary, the goal is always the same: reduce risk to ALARP (As Low As Reasonably Practicable).
By embracing this hierarchy and combining both passive and active engineering with robust administrative systems and effective PPE usage, organizations can drastically improve their process safety performance and protect both workers and assets.
Safety is not just about ticking boxes—it’s about making informed, layered decisions that stand the test of real-world operations.