Health, Safety, and Security
What to know
This domain covers workplace safety, health, and the protection of people, property, and information. Understand the hierarchy of controls: elimination, substitution, engineering controls, administrative controls, and personal protective equipment (PPE)-in that order of preference. Know the core elements of a safety program: hazard identification, risk assessment, incident reporting and investigation, training, and emergency preparedness. Understand the difference between an incident (event that occurred) and a near miss (event that could have caused harm). Recognize the role of safety committees and the principle that safety is a shared responsibility, with employers providing a safe workplace and employees following procedures and reporting hazards. On security, know physical controls (access, badges) and information controls (confidentiality, least-privilege access).
Traps
Questions often place PPE first when the hierarchy of controls puts it last-PPE is the least effective control because it depends on human behavior. Another trap is treating near misses as unimportant; they are leading indicators and should be reported and investigated. Watch for questions that assign safety solely to HR-line managers and employees share the responsibility. Also distinguish incident investigation (find root cause) from blame assignment.
Worked example
Workers report slipping near a spill-prone area. The strongest control is elimination or engineering (redesign drainage, relocate the process), not simply posting a "wet floor" sign (administrative) or issuing non-slip shoes (PPE). If the question asks for the most effective control, choose the highest available on the hierarchy.
Rule of thumb
Hierarchy of controls: eliminate first, PPE last-and always investigate near misses, not just injuries.