ExamRoo
Home/Cheat Sheets/WHS Hierarchy of Controls & White Card Reference Sheet
Workplace Health & SafetyExamRoo practice revision sheet

WHS Hierarchy of Controls & White Card Reference Sheet

The order of risk controls under work health and safety laws, plus what the White Card unit (CPCWHS1001) assesses

Based on: Work Health and Safety Regulation 2011 (Qld) s 36, WorkSafe ACT, WorkSafe Victoria, training.gov.au•3 min read (Printable)•Sources checked 14 October 2026

The Hierarchy of Control Measures (Highest to Lowest Protection)

Eliminate the risk where reasonably practicable. If that is not reasonably practicable, minimise the risk by working down the hierarchy.

StepControl measureWhat it meansRegulator examples
1 (highest protection)EliminationRemove the hazard so the risk no longer exists.Doing work at ground level instead of at height; removing an unnecessary hazardous chemical.
2SubstitutionReplace the hazard, wholly or partly, with something that gives rise to a lesser risk.Replacing solvent-based products with water-based ones; using a quieter machine.
2IsolationSeparate the hazard from the people exposed to it.Barriers around hazardous areas; separating pedestrians from mobile plant.
2Engineering controlsPhysical or mechanical measures that reduce the risk.Machine guarding; local exhaust ventilation; mechanical lifting devices.
3Administrative controlsChange how work is organised or carried out. Used if a risk remains after the higher controls.Safe work procedures; training and instruction; warning signs; task rotation.
4 (lowest protection)Personal protective equipment (PPE)Used to minimise any risk that still remains after the other controls.Safety glasses, gloves, hearing protection, respirators, hard hats.
Note: Administrative controls and PPE are only for the risk that remains after higher-level controls, and a combination of controls may be needed. Victoria uses the same order under its own Occupational Health and Safety Act 2004 rather than the WHS laws.

What the White Card Unit (CPCWHS1001) Assesses

  • Basic duty of care, and the roles, rights and responsibilities of business owners and workers when doing construction work.
  • The basic meaning of the terms "hazard" and "risk".
  • The five risk-management steps, in order: identify hazard, assess risk, consult and report, control hazard, review.
  • Identifying and orally reporting two construction hazards, and explaining how the risk could be reduced or removed.
  • Explaining the purpose of job safety analyses (JSAs), safe work method statements (SWMS) and safety data sheets (SDS).
  • Correctly fitting eye protection, hearing protection, a hard hat and a high-visibility vest, shirt or jacket.

Sources