The three main types of control measures used to protect workers from hazards are engineering controls, administrative controls, and personal protective equipment (PPE). These categories come from the hierarchy of controls, a framework widely used in occupational safety that ranks protection strategies from most effective to least effective. Engineering controls sit near the top because they physically change the work environment. Administrative controls change how people work. PPE is the last line of defense, worn on the body to reduce exposure.
Engineering Controls: Changing the Environment
Engineering controls involve physically modifying the workspace, equipment, or processes to reduce or eliminate a hazard at its source. They’re considered the most effective of the three main types because they don’t depend on anyone remembering to follow a rule or wear a piece of equipment. Once an engineering control is in place, it works continuously.
Common examples include ventilation systems that pull contaminated air away from workers, machine guards that prevent contact with moving parts, sound-dampening enclosures around loud equipment, and chemical fume hoods that contain toxic vapors inside a sealed workspace. In laboratories, biological safety cabinets serve a similar purpose by keeping dangerous microorganisms contained during procedures that could generate airborne particles. Even something as straightforward as installing a physical barrier between a worker and a hazard counts as an engineering control.
The reason these controls rank so highly is cost-effectiveness over time. While the upfront investment can be significant, engineering controls make permanent changes to the work environment. A ventilation system doesn’t need daily motivation or supervision to do its job. It just runs.
Administrative Controls: Changing How People Work
Administrative controls are policies, procedures, and scheduling decisions that reduce how much exposure a worker has to a hazard. Unlike engineering controls, they don’t remove the hazard itself. Instead, they limit the time or circumstances under which workers encounter it.
Practical examples include rotating workers through tasks so no single person spends all day in a high-risk area, adjusting work schedules to prevent fatigue and burnout, restricting access to hazardous zones during certain operations, and establishing standard procedures for handling dangerous materials. Training is also an administrative control. Workers are typically trained on job-related hazards when they’re first assigned a task, whenever a procedure is updated, and whenever new equipment or processes are introduced.
Administrative controls are less reliable than engineering controls because they depend on human behavior. A policy only works if people follow it, and following it consistently requires ongoing training, supervision, and reinforcement. Schedules can be ignored under deadline pressure. Procedures can be skipped when workers are rushed. This human element is why administrative controls sit lower on the hierarchy.
Personal Protective Equipment: The Last Line of Defense
PPE includes gloves, respirators, hard hats, hearing protection, safety goggles, face shields, and any other gear worn on the body to block exposure to a hazard. It’s the most visible type of control measure and often the first thing people think of when they picture workplace safety. But in the hierarchy, PPE is ranked last, meant to be used alongside other controls or as a last resort when engineering and administrative measures aren’t enough on their own.
The core problem with PPE is that it places the entire burden of protection on the individual worker. If a respirator doesn’t fit properly, it doesn’t protect. If hearing protection isn’t inserted correctly, noise exposure continues unchecked. If gloves are made from the wrong material for the chemical being handled, they provide a false sense of security. Every piece of PPE requires proper selection, fitting, training, and ongoing supervision to be effective.
PPE can also create new problems. Depending on the type, it may restrict movement and breathing, cause fatigue, impair vision and communication, or increase the risk of heat stress. These side effects can reduce a worker’s productivity and even introduce new safety hazards. A worker who can’t hear a warning alarm because of bulky hearing protection, or who can’t see clearly through fogged safety goggles, faces risks that the PPE itself created.
There are also significant practical costs that employers sometimes underestimate. PPE needs to be purchased, maintained, replaced, and properly fitted for each individual worker. Tight-fitting respirators, for example, require formal fit testing to confirm that the specific respirator model actually seals against the wearer’s face. Gloves must be selected based on the specific chemicals listed in a product’s safety data sheet, because a nitrile glove that protects against one substance may be useless against another. Employers who skip straight to PPE because it seems simpler often find it’s more expensive and less effective over time than investing in engineering or administrative solutions.
How the Three Types Work Together
In practice, workplaces rarely rely on a single type of control. The most effective safety programs layer all three. An engineering control reduces the hazard at its source, an administrative control limits who is exposed and for how long, and PPE covers whatever residual risk remains.
Biosafety laboratories offer a clear example of this layered approach. At the lowest risk level (BSL-1), workers follow standard microbiological practices on open benches and wear lab coats, gloves, and eye protection as needed. At BSL-2, where moderate hazards are present, laboratory access is restricted during work (an administrative control), procedures that could generate infectious aerosols are performed inside biological safety cabinets (an engineering control), and workers wear appropriate PPE. By BSL-3, where agents can cause serious or lethal disease through respiratory transmission, all three types of controls are intensified: exhaust air cannot be recirculated and airflow is engineered to move from clean areas toward contaminated ones, workers may be under medical surveillance and receive immunizations, access is restricted and controlled at all times, and respirators may be required. At BSL-4, the highest level, workers enter through airlocks, wear full-body air-supplied suits, and shower upon exiting a facility that exists in a completely isolated zone with dedicated ventilation and decontamination systems.
This progression illustrates the core principle: as hazards become more dangerous, you don’t just add more PPE. You strengthen all three types of controls simultaneously, with engineering controls doing the heaviest lifting and PPE serving as the final layer of protection.
Why the Ranking Matters
The hierarchy exists because not all controls are equally dependable. Engineering controls work passively and continuously. Administrative controls require consistent human compliance. PPE demands correct selection, proper fit, adequate training, and constant vigilance from every individual worker, every single shift. Each step down the hierarchy introduces more opportunities for failure.
When evaluating workplace hazards, the most protective approach is to start at the top: can this hazard be engineered out? If not entirely, can administrative procedures reduce exposure? And for whatever risk remains, what PPE will cover the gap? Working through this sequence, rather than jumping straight to handing out safety gear, is what separates a genuinely protective safety program from one that just looks like one.