Hierarchy of hazard controls