PPE Exposure Case: 4 Moves Upstream
A field case from 250+ safety projects showing how PPE checks become stronger when EHS moves decisions toward exposure control and task redesign.

Key takeaways
- 01Diagnose PPE findings as exposure signals, because repeated non-use often reveals weak task design, poor fit, heat load, procurement gaps or missing upstream controls.
- 02Map each PPE item to the hazard, exposure route and failure mode, then ask whether elimination, substitution, engineering control or sequencing can reduce dependency.
- 03Train supervisors to ask why the task still needs so much PPE, since that question turns coaching from discipline into exposure-control verification.
- 04Report repeated PPE dependencies to management beside incident precursors and control backlog, so executives see design risk instead of only frontline compliance.
- 05Use Andreza Araujo's safety culture diagnosis work when PPE compliance looks clean but field exposure still depends on perfect worker behavior.
In more than 250 cultural transformation projects supported by Andreza Araujo, one pattern appears with uncomfortable frequency. The company can have clean PPE rules, signed training records, good stock control and visible enforcement, while the work still exposes people to hazards that should have been reduced earlier.
The case is not about rejecting PPE. It is about refusing to let PPE become the place where engineering, planning and supervision stop thinking. When glasses, gloves, hearing protection or respirators are treated as the main answer, the organization often proves only that the worker was given equipment, not that the exposure was controlled.
This article uses an aggregate case from Andreza Araujo's work across 250+ companies, not a fictional plant story. The lesson is blunt: PPE performance improves when leaders move the decision upstream, toward hazard elimination, substitution, isolation, ventilation, work sequencing and field verification.
Initial scenario
The starting point in many operations looked respectable on paper. PPE matrices existed, training was refreshed, supervisors corrected visible non-use and purchasing maintained approved suppliers. The audit file could show compliance with the rule, especially when the auditor asked whether each role had defined equipment.
The field evidence told a different story. Workers changed gloves because tasks changed faster than the matrix, respirators were selected from habit rather than exposure data, and face shields appeared after splash events rather than before task redesign. In those conditions, PPE became a symbol of discipline while the source of exposure stayed intact.
As Andreza Araujo argues in *A Ilusao da Conformidade* (The Illusion of Compliance), the true measure of a safety system is what happens when no one is watching. A PPE program passes that test only when the worker can make the right protection decision under real pressure, with supervisors who understand the exposure and managers who are willing to change the work.
The first trap was cultural. Leaders saw PPE non-use as a behavior problem before they asked whether the prescribed equipment fit the task, the pace, the heat load, the dexterity needed or the chemical exposure. That interpretation produced more reminders, although the weakness often sat in the design of the job.
Decision
The turning point came when the EHS teams stopped asking only, Did the worker wear the required PPE? The better question was, Why does this task still depend so heavily on PPE? That question changed the review from enforcement to exposure control.
Across 25+ years leading EHS in multinational environments, Andreza Araujo has seen that compliance language can protect the organization from embarrassment while leaving the worker alone with the hazard. PPE must remain mandatory where exposure exists, yet the leadership decision must keep moving up the control hierarchy rather than settling at the last barrier.
The practical decision was to split PPE governance into four layers. The first layer defined non-negotiable equipment. The second linked each item to the exposure it was meant to reduce. The third tested whether an upstream control could reduce dependency on that item. The fourth verified whether the worker could use the equipment correctly during actual work.
This mattered because many PPE conversations hide SIF exposure behind routine language. A glove discussion may really be a line-of-fire problem. A respirator discussion may reveal weak ventilation or poor chemical substitution. A hearing-protection discussion may point to equipment maintenance, layout or task duration.
Execution
The execution began with field mapping, not a document rewrite. EHS teams walked through high-exposure tasks and recorded the specific hazard, the existing upstream controls, the required PPE, the failure mode and the supervisor verification point. That produced a different map from the usual PPE matrix, because it connected the equipment to the work as performed.
One site discovered that cut-resistant gloves were being discussed as a behavior issue, although the sharp-edge exposure came from poor fixture design and hurried maintenance preparation. Another found that respirator compliance was high, while cartridge change-out depended on memory and informal estimates. The visible behavior looked acceptable, but the control logic was weak.
That is why internal links between PPE, task design and control hierarchy matter. A PPE program should be reviewed with the same discipline used in hierarchy of controls decisions, because equipment is a barrier, not a substitute for reducing exposure at the source. The same logic applies when hand injuries are treated through task redesign and hand-injury prevention rather than through glove reminders alone.
The review also changed the role of the supervisor. Instead of asking, Are you wearing your PPE, the supervisor asked what exposure was present, what could fail in the protection, and what upstream control would make the task less dependent on perfect behavior. That shift made coaching more technical and less moralistic.
Measured result
The measured result across the project portfolio was not a single invented percentage, because the 250+ companies did not share one identical exposure profile. The defensible result was a governance change: PPE observations stopped being counted as isolated corrections and began feeding a control-improvement backlog.
That backlog showed where the same PPE dependency repeated. Repeated glove exceptions pointed to tooling and handling design. Repeated eye-protection corrections pointed to splash potential, compressed air use or cleaning method. Repeated respirator doubts pointed to exposure assessment, cartridge rules and storage control. Repeated hearing-protection deviations pointed to noise mapping, maintenance and task scheduling.
OSHA and NIOSH guidance both place PPE below elimination, substitution, engineering controls and administrative controls in the hierarchy of controls. That named hierarchy matters because it prevents a company from treating PPE issuance as proof of risk reduction. The equipment is necessary, but it is usually the least reliable layer when pressure, fatigue, heat and production speed enter the task.
The better metric was not the number of PPE corrections closed. It was the share of repeated PPE findings that produced an upstream action, such as a fixture change, ventilation review, chemical substitution review, barricade, task sequencing change, or supervision standard. That measure gave executives a cleaner view of whether PPE was revealing weak design or only generating disciplinary noise.
Generalizable lessons
The first lesson is that PPE compliance is a weak proxy for exposure control. A worker can wear everything correctly and still be overexposed if the cartridge is wrong, the glove does not match the chemical, the face shield does not cover the splash path, or the noise dose exceeds what the program assumes.
The second lesson is that PPE selection must be owned by someone who understands the task, not only the catalog. EHS can define criteria, but maintenance, operations, procurement and supervisors decide whether the protection survives real work. When those functions are absent, the program becomes a purchasing table with a training file attached.
The third lesson is that discipline still matters, although discipline is not the whole answer. If a worker bypasses required PPE, leaders must intervene. If the same bypass appears repeatedly, the next question must move from individual correction to system diagnosis, which is exactly where James Reason's work on latent failures remains useful.
The fourth lesson is that PPE findings belong in the same management rhythm as other controls. They should appear in the monthly review beside maintenance backlog, exposure assessment, incident precursors and control verification. If the only audience for PPE findings is the frontline supervisor, the organization has already reduced the issue to behavior.
| Old PPE review | Upstream exposure review |
|---|---|
| Counts missing equipment | Tests why the task still depends on equipment |
| Corrects the worker | Corrects the worker and reviews task design |
| Uses a generic PPE matrix | Links PPE to hazard, exposure route and failure mode |
| Closes the finding after coaching | Closes only after field verification or upstream action |
| Reports compliance rate | Reports repeated dependencies and control backlog |
What to apply in your operation
Start with the ten tasks where PPE failure would create the highest consequence, not the ten areas with the most visible non-use. That priority prevents the review from chasing easy observations while missing exposure paths that could produce serious injury, illness or fatality.
For each task, write one sentence that connects the PPE item to the exposure. Chemical splash to eyes during line opening requires goggles and face shield until the line-break method removes residual pressure. Noise above the action level requires hearing protection until engineering or task-duration changes reduce dose. Cut-resistant gloves protect hands during handling only after sharp-edge sources have been removed where feasible.
Then ask whether the current control would survive fatigue, heat, time pressure, language barriers and a new worker. This is where procedure usability and respirator fit-testing discipline become part of the same conversation, because PPE only works when the surrounding system allows correct use.
Andreza Araujo's position in *Cultura de Seguranca: Da Teoria a Pratica* (Safety Culture: From Theory to Practice) is that safety is a value, not a priority that bends under pressure. In PPE governance, that means leaders cannot accept a clean training record as the end of the discussion when field exposure still depends on perfect human performance.
Leadership cadence after the change
The cadence after the change was simple enough to survive operations. Weekly field reviews identified repeated PPE dependencies. Monthly management meetings selected two or three upstream actions. Quarterly reviews checked whether exposure had fallen or whether the same PPE findings kept returning under a new label.
This cadence also changed the language of executive review. Instead of asking why workers still failed to comply, directors asked which hazards remained too dependent on PPE, which upstream controls were delayed, and whether procurement decisions were making protection easier or harder. That made PPE a management-system signal rather than a frontline argument.
The strongest signal came when supervisors began escalating design issues without waiting for an injury. In Andreza Araujo's project work, that movement is often the difference between a campaign and a culture shift. Campaigns tell people to wear the equipment. Culture changes the work so the equipment is one layer in a stronger control set.
The trap to avoid is cosmetic maturity. A site can have clean PPE boards, good photographs and a full training roster while still tolerating work that should be redesigned. The exposed worker feels that contradiction immediately, which is why PPE credibility depends on what leaders do after the observation.
Final operating lesson
PPE is the last visible layer, which makes it emotionally attractive to manage. Leaders can see a helmet, a glove or a face shield. They cannot see a weak purchasing specification, an unreviewed chemical substitution, a rushed task sequence or a ventilation gap with the same ease.
That visibility explains why PPE programs drift toward enforcement. The correction is faster than the redesign, and the photograph looks cleaner than the exposure map. Yet the case across 250+ projects shows that the strongest PPE programs are not softer on compliance. They are tougher on the upstream conditions that force the worker to carry too much of the risk.
For EHS managers, the practical test is direct. If the next PPE observation produces only a coaching note, the system has learned very little. If it produces a question about exposure source, control hierarchy, task design and supervisor verification, the organization has started to move from rule enforcement toward real protection.
Frequently asked questions
How do you turn PPE observations into exposure control?
Why is PPE considered the last barrier in safety?
What should EHS measure in a PPE program?
What is the difference between PPE compliance and hierarchy of controls?
How does procedure usability affect PPE use?
About the author
Andreza Araújo
Safety Culture Expert | Senior EHS Executive
Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.
- Civil & Safety Engineer (Unicamp)
- M.A. Environmental Diplomacy (University of Geneva)
- Sustainability Cert (IMD Switzerland)
- People Management & Coaching (Ohio University)
- UN Paris speaker representative for Brazil
- ILO Turin speaker
- LinkedIn Top Voice
- Indra Nooyi PepsiCo CEO recognition (2x)
Documentaries
Watch Andreza's documentaries
Three productions on safety culture, organizational failure and the human lessons behind major disasters.
Podcasts
Listen to Andreza's podcasts
She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.