Control Measures

A control measure — a risk action — is something decided at the control step to bring a risk's score down. Each measure belongs to exactly one risk and has its own state machine, so it can be assigned and tracked while the parent risk waits.

Measure states

State	Meaning
Draft	Being defined.
Open approval	Waiting for the measure to be authorized.
In progress	Approved and being carried out.
In progress approval	The performer has reported completion; it is being verified.
Closed	Done.

note

A measure is created and advanced in one action — creation goes through the state action, not a plain save. This is why a measure cannot be created by an ordinary OK button on a modal; the create step and the first transition happen together.

Fields

• Code / Name — the measure's identity.
• Description — what is to be done.
• Definition — the measure itself, in detail.
• Control hierarchy level — where this measure sits in the hierarchy of controls. See below.
• Responsible user — who owns the measure.
• Assignees — the people carrying it out.
• Planned start date / planned end date — the commitment.
• Actual end date — when it was really finished.
• Perform information — what was actually done.
• Attachments — planning material.
• Perform attachments — the evidence of completion.

The hierarchy of controls

The control hierarchy level records what kind of control this is. The conventional hierarchy, from most to least effective, is:

Level	Approach
Elimination	Remove the hazard entirely.
Substitution	Replace it with something less hazardous.
Engineering controls	Isolate people from the hazard.
Administrative controls	Change how people work — procedures, training, signage.
Personal protective equipment	Protect the individual.

Recording the level is what allows an auditor — or a manager reviewing a register — to see at a glance whether an organization solves its safety problems by removing hazards or by issuing gloves.

tip

A risk whose measures are all administrative controls and PPE has not really been reduced; it has been transferred to the people exposed to it. The final scoring should reflect that.

When measures are not required

The assessment can conclude that no control measure is warranted. Setting measure not required on the risk lets the record proceed through the control stage without opening any measures.

Use it honestly — it is the correct answer for a genuinely low risk, and a visible one, which is exactly why it should not be used to avoid work.

If the measures were not enough

At the verification stage the verifier judges whether the measures achieved the intended reduction. If they did not, require new measure sends the record back to the control stage — where new measures can actually be opened — carrying the rejection reason.