Picture a packaging line supervisor handing you the job hazard analysis for the case sealer. Eleven steps, eleven hazards, and down the control column the same two entries repeat: gloves, safety glasses, gloves, safety glasses. The document is current and signed, the hazards on it are real, and every control it names depends on one worker putting something on and keeping it on for a full shift.
This is a common failure mode in an otherwise healthy JHA program. The hazard identification is usually done carefully, and then the control column collapses into the one layer that costs nothing to write down.
What a job hazard analysis is supposed to produce
OSHA’s job hazard analysis worksheet describes the exercise as identifying what can go wrong during a job, and it sets five things the analysis has to discover: the potential consequences and worst-case scenarios, how an incident could happen, what other contributing factors exist, how likely an incident is, and how the hazards can be controlled. Step five of its sample plan is explicit about sequence. Consider how to change the job step to eliminate the hazard. If the step cannot be changed, then determine how to protect workers from it.
The JHA is also not always voluntary. OSHA’s guidance states that some of its standards require one, naming the Bloodborne Pathogens and Personal Protective Equipment standards, and adds that many JHAs are used by employers voluntarily as part of their safety and health program.
WHAT OSHA’S WORKSHEET SAYS A HAZARD DESCRIPTION SHOULD INCLUDE
| Element | The question it answers |
|---|---|
| Environment | Where does the operation occur? |
| Exposure | Who or what does it affect? |
| Trigger | What causes the hazard? |
| Consequence | What could happen? |
| Other contributing factors | What else made it possible? OSHA leaves this one open. |
Source: OSHA, Identifying Hazard Control Options: Job Hazard Analysis, step 4. OSHA presents these as what a description should include, not as a compliance test.
Why the control column fills up with PPE
Personal protective equipment is usually the fastest control to put in place, because it needs nobody’s approval but yours. The three levels above it belong to other people. Changing a process, qualifying a substitute material through purchasing and quality, installing a guard or a ventilation hood: each one needs a budget line, an owner in engineering or operations, and in most plants a shutdown window. A standard JHA form has no column for any of that, so the analysis narrows to the controls the analyst can authorize alone, and nobody ever decides that it should.
NIOSH is direct about the cost of that narrowing. Elimination, substitution and engineering controls are more effective, it says, because they control exposures without significant human interaction, while administrative controls and PPE require significant and ongoing effort by workers and their supervisors. Its guidance adds that employers should not rely on PPE alone to control hazards when other effective control options are available.
The bottom layer draws enforcement attention too. Eye and face protection in construction sits ninth on OSHA’s ten most frequently cited standards for fiscal year 2025, covering federal OSHA inspections across all industries.
One hazard, written at all five levels
The exercise that changes a JHA is narrower than a program overhaul. Take a single hazard and force a line at every level before you allow yourself to write PPE. The example below uses OSHA’s bakery scenario, where a worker manually pours 40-pound flour bags into a mixer and generates a dust plume in their own breathing zone.
FLOUR DUST AT THE MIXER, CONTROLLED AT EACH LEVEL
| Level | Control | What has to happen every shift |
|---|---|---|
| Elimination | Change the process so bags are not opened and poured by hand at the mixer opening. (Ours. OSHA’s example names none.) | Nothing. |
| Substitution | None available; the flour is the product. (Ours. OSHA’s example names none.) | Record that you checked, and why it does not apply. |
| Engineering | Lid for mixer; local exhaust ventilation system. | Ventilation runs and stays maintained. |
| Administrative | Remove any accumulations of dust; waste container near worker; reposition process so the pallet is near the mixer and not blocking the path to the waste receptacle; routine housekeeping inspection. | Someone sets the pallet correctly, and someone inspects. |
| PPE | Appropriate respirator protection; gloves; long sleeve clothing (tight fitting). | The worker wears all of it, correctly, for the whole shift. |
Engineering, administrative and PPE controls quoted from OSHA, Identifying Hazard Control Options: Job Hazard Analysis, bakery example, which OSHA states is not meant to be a complete list of hazards and controls. The elimination and substitution rows are ours. Ordering per NIOSH, Hierarchy of Controls. Third column is our summary of what each control asks of the worker.
Read the third column down the page and the ranking stops being an abstraction. A mixer lid keeps working at 3 a.m. on a short-staffed Sunday. A respirator works for exactly as long as someone chooses to keep it on, including after it fogs up in a warm room.
How to rebuild one JHA this week
Start with one job rather than the whole binder, work it properly, and use it as the pattern for the rest. OSHA’s sample plan gives the frame.
OSHA’s sample six-step job hazard analysis
Start with a job that frequently results in injuries, or one where the potential injury could be severe. Ask workers which jobs are the most dangerous.
Watch several different workers do the activity, including procedures outside the normal routine, and break it into smaller steps.
Consider previous injuries and illnesses, what could happen if things go wrong, and the worst-case scenarios.
Environment, exposure, trigger, consequence, and any other contributing factors.
Change the job step to remove the hazard where you can. Use the hierarchy of controls to pick the control, or combination, that most effectively prevents injury. Then have workers try the step with the control in place and gather their feedback.
Review it when the job changes or an injury occurs, and periodically otherwise.
Source: OSHA, Identifying Hazard Control Options: Job Hazard Analysis. OSHA offers this as a sample plan, noting there are many ways to complete a JHA.
Inside that frame, five habits are what move a JHA off PPE:
- Rewrite the hazard line before you touch the control line. A hazard written as “dust” invites a respirator. The same hazard written with its environment, exposure, trigger and consequence points at the mixer opening.
- Write a candidate control at elimination, substitution and engineering before you are allowed to write PPE. Where a level does not apply, say so on the form: “no substitute, flour is the product” is an answer that survives review a year later.
- Route the engineering lines somewhere they can be funded. A control that never becomes a work order with an owner and a date is not a control, it is a wish recorded on a safety form.
- Keep the PPE and label it as the interim measure it is. Give it the date the engineering control is due, so there is a reason to come back to it.
- Rescore the job after the control goes in, and keep the old score beside the new one. That before-and-after pair is your evidence that the analysis changed something on the floor.
Four of the five are about what happens after the form is filled in. The analysis is usually the part that already works.
How Q-Risk Can Help
Quantum’s Risk Assessment module was built on the JHA structure. A risk point, which can be a machine, a location, a task or a workflow, holds its hazard sources, and each hazard source carries a control field at every one of the five hierarchy levels, so a row with nothing above PPE leaves a visible blank on the record. Scoring runs on a risk matrix your team configures, including which bands require a corrective action before an assessment task can close. Reassessment can be scheduled to recur, so the review in step six arrives on its own rather than waiting on someone’s calendar.
That gives habit two a place to live and habit five a mechanism: the assessment records the risk level before the corrective action and the level after it, on the same record. Habits one, three and four sit outside the software. Deciding that a guard can physically be fitted to this machine, and finding the capital for it, is engineering and budget work that no platform performs, and judging whether a hazard has genuinely been eliminated is a person standing at the equipment. The contribution is narrower than a fix: judgements get recorded at the level they belong to, and the reassessment shows up whether or not anyone remembers it. If you are mapping how assessments, inspections and corrective actions sit alongside each other, the EHS platform overview is the place to start.
