hazard prevention and control should contain both