What is the hierarchy of controls concept in risk management?

• A. PPE first, then others.
• B. Eliminate hazards, substitute or redesign, use engineering controls, implement administrative controls, and provide PPE as last line of defense.
• C. Administrative controls only.
• D. Ignore hazard controls.

Answer: (C)

The concept being tested is how risk controls are prioritized, moving from removing the hazard to protecting people with PPE. The best approach starts by getting rid of the hazard or reducing it at the source—eliminating it, substituting it with something safer, or redesigning the task to remove the risk. If removing or redesigning isn’t possible, you add engineering controls to create physical barriers between people and the hazard. If those still don’t fully reduce risk, you implement administrative controls that change how the work is done, such as procedures, training, or supervision. PPE is used only as a last line of defense when there’s residual risk after the higher levels have been applied. In practical terms, this means fixing the process or environment first, then adding barriers, then managing how people work, and finally using protective equipment. The other options aren’t aligned with this sequence: PPE-first relies on personal gear rather than addressing the hazard itself; administrative controls alone can be insufficient without addressing the hazard at the source; ignoring hazard controls is unsafe.