Hierarchy of control: fix a hazard, do not just warn about it

On most residential sites the first response to a hazard is a warning. A sign goes up, the crew is told at the morning talk, the sheet is signed, and the job carries on. A warning is cheap and it feels like action, but it does not change the hazard. The saw still throws dust, the edge is still unprotected and the cable is still live. The person who is standing next to the hazard is the only thing standing between it and an injury, and that person will eventually be tired, rushed or new to the site.

The hierarchy of control is the reasoning that stops that pattern. It ranks the ways of dealing with a hazard from the most effective to the least, and it asks you to start at the top and move down only as far as you must. This article is about the reasoning, not a template for any particular task. Task-specific safe work method statements and the detail of each trade belong elsewhere. What a builder needs is a way of choosing controls that holds up on a job the article never anticipated.

The commercial stake is direct. An injury on a residential site stops the job, brings in SafeWork NSW, puts the business under investigation and usually ends with the question every regulator asks: what did you do to remove the hazard, and what did you rely on instead? A record that shows a considered choice of control is a defence. A record that shows a warning and a signature is an admission that the risk was known and left in place.

Why the order of controls matters

The controls are ranked for a reason. A control that removes a hazard does not depend on anyone doing the right thing at the right moment. A control that relies on a person behaving correctly depends on that person every time the task is done, including the times they are tired, distracted or under pressure to finish. The higher up the ranking a control sits, the less it asks of the people doing the work, and the more reliably it protects them.

The ranking is set out in the work health and safety legislation and in the guidance SafeWork NSW publishes for businesses. The sources this article relies on do not reproduce the ranking in full, so check the current wording of the Regulation and the guidance before you put the order into a site procedure. The reasoning below explains why the order runs the way it does, so you can apply it to a hazard the guidance does not name.

A useful way to think about it is to ask what each control depends on. Removing the hazard depends on the design. Changing the method depends on the plan. Engineering controls depend on the equipment being fitted and maintained. Administrative controls depend on people remembering. Personal protective equipment depends on people wearing it correctly, and on it working. Each step down the list adds dependence on human behaviour, and human behaviour is the least predictable part of any site.

Eliminate the hazard before anything else

Elimination is the most effective control, and it is the one most often overlooked because it happens before the job starts. The question to ask at the design stage is whether the hazardous work needs to happen at all. A material that does not need cutting on site does not produce dust on site. A detail that avoids working at a height does not need a fall control. A fixing that is installed from the ground does not need a person on a ladder. These decisions are made by the designer, the estimator and the builder together, and they cost little when they are made early.

Elimination is a builder’s decision more often than it appears. Choosing a prefabricated component over a site-built one, a pre-finished wall panel over a field-applied finish, or a fixing system that can be installed from below all remove work from the most dangerous part of the site. The builder does not need to be the designer to make these choices. They need to ask, at the point where the detail is selected, whether the hazard can be left out.

Substitute, and isolate what cannot be removed

Where a hazard cannot be removed, the next question is whether a less hazardous method or material can do the same job. Substitution changes what the work involves. A water-based product in place of a solvent-based one, a mechanical fixing in place of a cut-and-fit process that produces fine dust, or a lower-energy tool in place of a higher-energy one can each reduce the risk without changing the outcome for the client. The test is whether the substitute achieves the same result, and whether it introduces a new hazard of its own.

Isolation separates the people from the hazard. A barrier around an excavation, a restricted area for a crane lift, or a segregated work zone for a concrete pour keeps people out of the reach of the hazard without relying on each person to avoid it. Isolation is often cheap, and it works best when it is designed into the site layout from the start rather than added after someone has already been close to the danger.

Engineering controls that do not depend on memory

Engineering controls are physical features of the equipment, the workplace or the process that reduce the hazard. A guard on a saw, a dust extraction unit that is connected to the tool, a residual current device on a power circuit, and a scaffold with a fitted edge protection system are all engineering controls. They work whether or not the person using them is thinking about safety at that moment, which is the defining feature of this level.

The weakness of engineering controls is that they can be removed, bypassed or left unmaintained. A guard that has been taken off because it slows the cut is a control that no longer exists, and an extraction unit with a blocked filter is an extraction unit in name only. The builder’s responsibility is to choose the control, fit it correctly, keep it in service and check that it is still doing its job. Make the checks part of the routine, and record them.

Administrative controls: useful, and the weakest on their own

Administrative controls are the procedures, rules and training that shape how work is done. Site inductions, permits to work, rotation of tasks to limit exposure, signage, supervision and the safe work method statement all belong here. They are necessary. A site with no procedures is a site where people make up their own rules. But on their own, administrative controls are the weakest part of the hierarchy, because they depend on every person remembering every rule every time.

The useful way to treat administrative controls is as support for the higher controls, not as a replacement for them. A procedure that says to keep the work area clear of cables works best when the cables have been routed away from the work in the first place. A training session on manual handling works best when the heavy item has been designed out or fitted with a mechanical aid. Use administrative controls to make the higher controls work, and do not use them to justify leaving a hazard in place.

Personal protective equipment is the last line, not the first

Personal protective equipment is at the bottom of the hierarchy for a reason. Gloves, eye protection, hearing protection, respiratory protection and a helmet all matter, and they are required on most sites. But they protect only the person wearing them, they depend on being worn correctly and fitted properly, and they do nothing to stop the hazard from existing. A dust mask that does not seal against the face is a control in name only, and a helmet does not stop a fall from height.

The mistake that costs most is treating personal protective equipment as the main control. A crew that is handed a respirator and told to keep working in a dusty space has not controlled the dust. The respirator should be the final layer after the dust has been reduced at source, extracted and contained as far as practicable. When the list of controls for a task reads like a list of things to wear, the hierarchy has been inverted, and the job needs to be re-planned before it starts.

Choosing controls on a residential job

Residential work changes constantly, and the hazards change with it. A kitchen renovation in an occupied house has different hazards from a new build on an empty lot, and a roof space has different hazards again. The discipline is to walk the task, identify each hazard, and choose controls from the top of the hierarchy down before settling on the one that is practical. The comparison below shows the difference between controls that remove a hazard and controls that rely on the crew.

Written reasons matter here, because the choice of control is the decision a regulator or a court will examine. For each hazard, the record should show the controls considered, the reason the higher ones were rejected, and the control that was adopted and how it will be checked. A single sentence that explains why a hazard could not be eliminated is worth more than a page of generic procedure.

Worked example: a bathroom renovation and a roof space

A builder in western Sydney is renovating a bathroom in a two-storey home, and the job includes a new window opening that needs the roof space checked for the framing. The bathroom involves cutting floor and wall tiles, which produces fine crystalline dust. The roof space involves working on joists in a confined area with a cable run that is not labelled on the drawings.

The builder starts with elimination. The window is changed to a prefabricated frame so that the opening is cut only once and the framing is checked before the tiles go in. The tiles are ordered as pre-scored sheets where the design allows, which removes most of the cutting that would otherwise happen in the bathroom. That is a design decision made before the crew arrives, and it removes a large share of the dust.

For the cutting that remains, the builder substitutes a wet-cutting method in place of dry cutting, and isolates the work area with a plastic barrier and a closed door so that the dust does not reach the rest of the house. Dust extraction is fitted to the tile saw, and the cleaning routine is written into the job plan. The crew wears a respirator as the last layer, fitted and checked, rather than as the only control.

In the roof space the builder isolates the circuit that serves the cable run before anyone goes up, and proves it is dead with a tester rather than assuming it. The roof access is fitted with a secure ladder and a clear landing, and a rule is written that no one works in the roof space alone. The electrician is asked to label the cable run on the as-built drawing. Each decision is recorded in the job file with the reason it was made, so that if a question is asked later, the answer is already written down.

Electrical hazards as an illustration

Electrical work shows the hierarchy clearly, because the controls are well developed. Safe Work Australia’s guidance on electrical safety sets out the hazards that matter on a building site: contact with live parts, faulty equipment, cables damaged during construction and work near overhead lines. The controls at the top of the hierarchy include removing the supply where that is possible, and designing circuits and cable routes that keep cables out of the path of the work. Those are design and planning decisions.

Further down the list sit the engineering controls, such as residual current protection on the circuits and insulated tools, and the administrative controls, such as isolation procedures, permits and the rule that only a licensed person works on live equipment. Personal protective equipment is the last layer. An insulated glove is a useful backup, but it is not a substitute for isolating the supply and testing that the circuit is dead.

The safe distance from overhead lines is set in the guidance rather than repeated here, and the rule that matters on site is to plan the crane, the scaffold and the delivery route so that the work never comes close to the line. Where that cannot be done, the controls must be decided with the network operator before the work starts, not improvised when the crane is already on the lot.

Recording the decision so it can be defended

A record of the hierarchy is a record of thinking. It does not need to be long, but it needs to show the hazard, the controls considered from the top down, the control adopted and the reason for any choice lower on the list. The people doing the work should be able to see it, understand it and raise a concern if something changes. A procedure that exists only in the head of the supervisor is not a control at all.

When the controls are reviewed after an incident or a change in the work, the record should be updated and the change explained. A safe work method statement that is never revised as the job changes becomes a document about the job the business planned, not the job it did. The discipline of recording is covered in more depth in the guide to work health and safety records in a defended claim, and the risk assessment itself is set out in the free template linked below.

Keep the template in use on every job, not only the large ones. The template to start from is the free risk assessment template. A residential renovation can carry a hazard that is serious for a small crew, and the discipline that catches it does not depend on the size of the contract. The first thing a regulator will ask is whether the business thought about the hazard before the injury, and a dated record is the honest answer.

For builders who want a structured refresher on how the safety duties of a licensed business fit with the wider CPD framework, the guide to how NSW builder CPD works sets out the basics.

Questions builders ask

• Risk
• Site Safety
• Work Health Safety

Published 25 October 2026. General information for builders, not legal, financial or engineering advice for a specific job. Check current requirements with the relevant regulator or standard before relying on them.