Applying the Hierarchy of Controls to Software Engineering

A mechanical engineer introduced the author to the Hierarchy of Controls (HoC), a crucial concept in workplace safety. The author applies HoC to software engineering, analyzing a production database incident caused by a wrong query ten years ago. The article explores applying elimination, substitution, engineering controls, administrative controls, and personal protective equipment (PPE) to mitigate risks in software development. Each level's advantages, disadvantages, and limitations are discussed – for example, overly strict access policies might slow down problem resolution. The author emphasizes holistically considering the impact of controls on system safety, preventing the introduction of new risks.