OSHA 3071 describes a job hazard analysis as a technique focused on the relationship between the worker, the task, the tools and the work environment. The method is a decomposition: list the steps of the job in the order they happen, identify the hazards of each step, then determine a preventive measure for each hazard. Almost every free JSA template on the internet skips the first part. They hand you a three-column grid — hazard, control, PPE — and call the left-hand column "job steps", which produces a hazard register with a misleading header. This builder is structured the way the method is: you add a step, and the hazards live inside it.
That structure changes what the document can tell you. An HVAC changeout is not hazardous in the abstract; it is hazardous at specific moments — getting the recovery machine up the ladder, working the roof edge before the guard goes up, breaking the braze on a charged system, and setting the new unit off the rigging with people below. Those are four different steps with four different controls, and a flat register cannot hold them apart. It also cannot show you the step where the control is missing, which is the finding you actually want out of a JHA.
The second thing this builder does differently is treat the hierarchy of controls as a ranking rather than a dropdown. NIOSH publishes the five tiers in order — elimination, substitution, engineering controls, administrative controls, PPE — and is explicit that PPE is the least effective. Most JSA templates offer a "PPE required" column, which quietly encourages the weakest tier as the default answer. This one asks which tier each control sits at, and when every control on a step is PPE it says so on the form and prints it in the export. That is not a failing grade. Sometimes PPE genuinely is the control. It is a prompt to check whether an engineering control was available and skipped, which is the question a JHA exists to force.
The third difference is the permit gate. Four hazards on this form cannot be closed out by writing a sentence in a control box — permit-required confined space entry, excavation, hot work and energized work each need a separate authorisation. Select one and the analysis will not report itself as ready until the permit reference is entered, and any missing reference prints above the letterhead on the PDF. The form is also honest about which of the four is genuinely an OSHA permit: only the confined space entry permit is (1910.146(e), or 1926.1205 in construction). Subpart P contains no excavation permit; hot work is "preferably in the form of a written permit" under 1910.252(a)(2)(iv); and the energized electrical work permit is NFPA 70E 130.2(B), a consensus standard OSHA does not adopt by reference. Templates that print all four as "OSHA required" are teaching something false, and contractors repeat it in front of inspectors.