ANSI/ASSP Z590.3 Explained: 4 Design Decisions That Keep Risk Out of the Blueprint

ANSI/ASSP Z590.3 is the Prevention through Design standard that helps teams move hazard reduction into the design and redesign stage, before the work system is locked in. It matters because a site can look organized while still buying exposure into the layout, the equipment, and the task sequence.

Across 25+ years leading EHS in multinationals, Andreza Araujo has seen that the safest decision is usually the one made before procurement, not after handoff. When the layout is already frozen, the team starts defending risk with procedures, training, and PPE, which is a late and expensive way to solve a problem that should have been smaller in the drawing room.

If you want the broader management-system angle, risk register explained shows how design assumptions should stay visible after the review ends. This explainer narrows the lens to the standard itself, so the reader can see where PtD belongs in the decision chain.

Definition

ANSI/ASSP Z590.3 describes how prevention through design should be used when organizations design or redesign work premises, tools, equipment, machinery, substances, and work processes. ASSP presents the standard as a way to bring PtD concepts into those decisions, while NIOSH explains that PtD can prevent or reduce injuries, illnesses, and fatalities by designing out or minimizing hazards early.

That timing is the key point. PtD is not a slogan about being safety-conscious. It is a design discipline that asks what exposure can disappear before the field has to live with it. James Reason's latent-failure logic fits here, because a bad decision can sit quietly in a design for months before it reaches the worker.

Andreza Araujo's Safety Culture: From Theory to Practice is relevant because culture shows up in repeated decisions. If a company keeps approving layouts that depend on workarounds, the design process is already teaching the culture what it values.

The 4 decision lines

Design intent

This is the safety goal that belongs in the brief before anyone buys equipment or signs the drawing. If the intent is vague, the rest of the review will drift toward convenience.

Hazard elimination

This is the first question PtD should ask. Can the hazard disappear instead of being controlled later by a person, a sign, or a permit?

Residual-risk ownership

This is the named person who accepts what remains after the safer options are tested. Without ownership, the team quietly leaves the consequence with the field.

Handoff evidence

This is the proof that the design decision survived installation, commissioning, and day-one use. If there is no evidence, the control may exist only on paper.

Those four lines are practical, not theoretical. They give the EHS manager a way to ask better questions before the work starts, and they make it harder for a project team to confuse a finished document with a safer system. For a deeper bridge into the control hierarchy, risk register vs control register vs decision log shows where the decision should live.

What the standard is not

PtD is not a late-stage safety review, because a late review usually comments on a decision that engineering and procurement already made. It is also not an engineering-only topic, because operations, maintenance, procurement, and EHS all shape the eventual exposure.

Across more than 250 cultural transformation projects supported by Andreza Araujo's team, one recurring failure is the same: the organization records the hazard but not the design choice that created it. That is why a clean risk register can still sit beside a risky layout. If the decision is missing, the record is incomplete, which is why risk register discipline matters so much in capital work and redesign work.

PtD is also not a substitute for verification. A guard, alarm, access platform, or isolation point may sound strong, but the control still needs evidence that it can be used, inspected, and maintained without hidden dependence on heroics. That is why a critical control handover belongs in the same conversation as the design review.

How to use it before procurement

Start with one high-risk decision, not the whole plant. Pick a new machine, a layout change, a chemical substitution, or a redesign that can still change the task. Then ask what safer option would disappear exposure instead of merely reducing it.

That is where the article on control restoration becomes operational. The design note should name the hazard, the safer alternative, the rejected alternative, the evidence expected at handoff, and the person who owns the residual risk. If the team cannot name those five items, the review is not ready for purchase.

One simple test helps. If the project team says the control can be added later, then PtD has already lost. By that point, the work is usually arguing over retrofit cost instead of safety logic, and the best options have become the most expensive ones.

How to differentiate in practice

This distinction matters because the organization can only remove exposure while the design still has room to move. Once the choice is locked, the team is usually managing residual risk, not designing it out. That is why stored energy verification belongs after PtD, not in place of it.

When to use Z590.3 vs a normal review

Use Z590.3 when the decision can still change the future task, the layout, or the equipment. Use a normal review when the design is fixed and the only remaining work is to verify the method, the handover, and the controls that remain.

Andreza Araujo's books make the same point from a culture angle. A Ilusão da Conformidade shows why neat approval can hide weak logic, and Safety Culture: From Theory to Practice shows why repeated decisions matter more than the language leaders use in a meeting.

If you want the field to feel that logic, PtD should be visible in procurement notes, redesign reviews, and handoff evidence. If it only appears in a policy manual, the organization is still treating safety as commentary.

Conclusion

ANSI/ASSP Z590.3 is useful when leaders want risk reduced before it reaches the worksite. It becomes weak when the organization waits until the layout is approved and then asks EHS to recover what engineering already fixed.

For operations that want PtD to change real decisions, Andreza Araujo and ACS Global Ventures can help connect design choices, risk ownership, and verification routines. Start with the next procurement or redesign, because that is where safety is still cheap enough to shape.