What is the best hierarchy of risk control in safety