ON DECK -> Working at Height & Enclosed Spaces
Position on Deck
Operation Group: Safety / Enclosed Space Entry & Rescue
Primary Role: Recovery of incapacitated personnel from enclosed or confined spaces where the atmosphere is or may be irrespirable.
Interfaces: Bridge (alarm and coordination), engine room (isolation and ventilation), medical officer or person in charge of medical care, shore emergency services (secondary), designated rescue team, ISM safety management system.
Operational Criticality: Absolute — this is the last line of defence when atmospheric monitoring, ventilation, and permit controls have already failed.
Failure Consequence: First casualty becomes unconscious. Untrained rescuer enters without BA, collapses within seconds. A third follows. By the time the alarm reaches the bridge, three people are down. One event, multiple fatalities, and a crew that will never be the same.
The first person who dies in an enclosed space often walked in voluntarily.
The second person who dies ran in to save them.
Introduction
Every enclosed space fatality investigation reads the same way. A seafarer enters a space — a ballast tank, a cargo hold, a void, a duct keel, a CO2 room — and is overcome. A colleague sees them fall. Instinct takes over. The colleague enters without breathing apparatus, without a plan, without telling anyone, and within thirty seconds is lying next to the first casualty. Sometimes a third follows. Sometimes a fourth.
The maritime industry does not have an enclosed space entry problem. It has an enclosed space rescue problem. Entry procedures, permits, atmospheric testing — these are well documented, drilled, audited. They still get bypassed, but at least they exist in a form most seafarers recognise. The rescue plan, by contrast, is often a paragraph in the SMS, a box ticked on the permit, a vague understanding that someone will do something. It is not a plan. It is a hope.
This article addresses the rescue itself: what must be on deck, who must be trained, what the sequence looks like, and why the gap between the written procedure and the actual response is where people die.
Contents
- 1. The Paper Plan and the Real Event
- 2. Why Multiple Casualties Are the Norm
- 3. The Non-Negotiable: BA for Entry, No Exceptions
- 4. Rescue Equipment on Deck
- 5. Rescue Team Composition and Training
- 6. Communication During Rescue
- 7. The Sequence: From Identification to Casualty Reception
- 8. Why Shore Emergency Services Cannot Be the Primary Plan
- 9. Closing Reality
1. The Paper Plan and the Real Event
Open the SMS on any vessel. Find the enclosed space entry procedure. Somewhere in there will be a section on rescue arrangements. It will say something like: a rescue team shall be available at the entrance to the space at all times during entry, equipped with breathing apparatus and a means of retrieval.
Now walk out on deck during a routine tank inspection in port. Find the entrance to the space. Count the people standing by. Count the sets of BA. Look for the tripod. Look for the retrieval line. Look for anyone who has actually practised hauling a 90-kilogramme adult vertically through a 600mm manhole while wearing SCBA.
The gap between these two realities is where the deaths happen.
A permit to enter an enclosed space that lists rescue arrangements which do not physically exist at the point of entry is not a safety document. It is an administrative exercise. The master who signs it and the officer who countersigns it share responsibility for what follows.
A signed permit without the rescue team in place is worse than no permit at all. The permit creates the false confidence that someone has thought this through. Nobody has.
2. Why Multiple Casualties Are the Norm
Between 1998 and 2023, multiple-casualty enclosed space events at sea outnumber single-casualty events in virtually every major flag state database. The reason is not complicated. It is human.
A person sees a colleague collapse. The space looks normal. There is no smoke, no visible hazard, no fire. The atmosphere that has just incapacitated the first person is invisible and odourless — oxygen-depleted by rusting steel, displaced by inert gas, contaminated by hydrogen sulphide from rotting organic residue, or poisoned by cargo vapour. The would-be rescuer does not process the atmospheric hazard because there is nothing to see. They process only the emergency: a friend on the deck plates, not moving.
Training tells them to stop. Instinct tells them to go.
Instinct wins. Almost every time.
This is why the rescue arrangement must be physical, not procedural. A person standing at the top of a tank with a set of BA already on their back, a lifeline already rigged, and a colleague beside them holding the other end — that person has a chance of pausing long enough to do the right thing. A person standing at the top of a tank with nothing but good intentions will be inside the space in under ten seconds.
The second casualty is not reckless. They are brave, untrained, and unequipped. The system failed them before they moved a muscle.
3. The Non-Negotiable: BA for Entry, No Exceptions
If the atmosphere in a space has incapacitated a person, the atmosphere in that space will incapacitate the next person who enters without respiratory protection. This is not a risk assessment. It is physics.
BA is compulsory for any rescue entry into a space where the atmosphere is known or suspected to be hazardous. Known or suspected means: if someone has collapsed in there and the cause is not yet confirmed as mechanical injury, the atmosphere is suspect. Full stop.
EEBD sets are not BA. They are escape devices — fifteen minutes of air for a person who is conscious, mobile, and heading for the exit. They are not suitable for a rescuer who must enter, locate a casualty, attach a retrieval harness, and coordinate extraction. The rescuer needs SCBA with a minimum duration appropriate to the task. On most vessels this means a standard 6-litre, 300-bar cylinder giving roughly 30 to 40 minutes of working air depending on exertion.
No BA, no entry. If there is no serviceable BA set available, the rescue does not proceed into the space. The standby team ventilates, monitors, communicates, and waits for properly equipped responders. This is an agonising instruction to follow when a colleague is lying at the bottom of a tank. It is also the instruction that prevents the second fatality.
Anyone who enters a suspect atmosphere without BA becomes a casualty, not a rescuer. The crew now has two people to extract instead of one, and fewer hands to do it with.
4. Rescue Equipment on Deck
The following equipment must be physically present at the point of entry before the entry begins — not in the safety store, not on order, not on another deck. At the entrance. Checked. Ready.
Breathing apparatus sets. A minimum of two complete SCBA sets, tested and charged. One for the initial entry team member, one as immediate backup. Ideally a third set available within minutes. Cylinders must be within hydrostatic test date. Masks must seal. Demand valves must function. Sets that have sat unchecked in a locker for six months are not ready — they are ornaments.
Lifeline and safety harness. A full-body harness fitted to the entrant, with a lifeline of adequate length tended from outside the space. The lifeline must be attached before entry, not after. If the entrant collapses, the lifeline is the only means of locating and recovering them without sending another person in. A harness that is donned but not clipped to the lifeline serves no purpose.
Tripod or davit and mechanical advantage system. Vertical extraction of an unconscious adult through a manhole is not achievable by hand. A rescue tripod positioned over the access, fitted with a winch or a pulley-based mechanical advantage system (typically 4:1 or greater), converts a physically impossible lift into a controlled operation. The tripod must be rated for the load. The winch must be operable by a single person. The system must have been rigged and tested — not just carried to the location.
Stretcher or rescue sling. Once the casualty reaches deck level, a Neil Robertson stretcher or equivalent should be immediately available for horizontal transfer, particularly where the casualty may have spinal injuries from a fall.
Atmospheric monitoring equipment. A multi-gas detector — O2, LEL, CO, H2S at minimum — must be available for the rescue team to confirm conditions before and during entry. The detector must be in calibration and bump-tested before use.
Portable lighting and communication. Intrinsically safe torches. Intrinsically safe radios or a pre-agreed line-signal protocol. Both.
Every item above is standard inventory on a well-run vessel. The question is not whether the ship owns the equipment. The question is whether it is at the access point, functional, and in the hands of someone who knows how to use it.
5. Rescue Team Composition and Training
A rescue team is not a list of names on a muster card. It is a group of people who have physically practised the extraction of a casualty from a confined space while wearing BA, using the ship’s own equipment, through the ship’s own access points.
Minimum composition for a credible rescue team:
- Team leader — stationed at the entrance. Controls the operation. Does not enter unless absolutely necessary. Maintains communication with the bridge and the entry team.
- Primary rescuer — BA-equipped, harnessed, on the lifeline. Enters the space on order. Locates and secures the casualty for extraction.
- Backup rescuer — BA-equipped, harnessed, ready to enter if the primary rescuer becomes incapacitated or requires assistance. Waits at the entrance. Does not freelance.
- Topside operators — minimum two persons to operate the mechanical advantage system and tend lifelines. These personnel handle the physical extraction.
This is five people committed to the rescue function alone, before accounting for the bridge watch, the person raising the alarm, or the medical responder preparing casualty reception.
On a vessel with a crew of twenty, that is a quarter of the ship’s complement. On a vessel with a crew of twelve, it is nearly half. This is the manning reality that makes enclosed space rescue at sea fundamentally different from enclosed space rescue ashore, where a confined space rescue team arrives in a vehicle with eight trained technicians and a paramedic.
Training must be practical. Classroom sessions on the theory of atmospheric hazards are necessary but insufficient. The crew must rig the tripod over an actual access point. They must lower and recover a weighted dummy or a volunteer. They must do this in BA. They must do this under the pressure of a timed drill. They must learn what it feels like to haul a dead weight vertically while their mask fogs and their breathing rate doubles.
Drills that are conducted annually to satisfy an audit schedule produce familiarity with the equipment. Drills conducted quarterly produce competence. Only regular, realistic practice produces the reaction speed that an actual event demands.
6. Communication During Rescue
Communication failures kill in enclosed spaces just as reliably as oxygen depletion. The sequence of failures is predictable: the person at the entrance shouts into the space but gets no reply. They assume the worst and enter. Or: the bridge is not informed for several minutes because everyone on scene is focused on the hole in the deck and nobody picks up a radio.
A communication plan for enclosed space rescue must be established before the entry begins, not improvised during the emergency.
Between the entry team and the team leader at the entrance: Voice communication is unreliable through BA masks and across the acoustics of a steel tank. Intrinsically safe radios are the primary means. A secondary system of line signals — pre-agreed tugs on the lifeline — must be established as backup. One pull: okay. Two pulls: take up slack. Three pulls: emergency, haul out. These signals must be briefed, confirmed, and understood by every person involved before anyone descends.
Between the entrance and the bridge: The team leader or a designated communications runner must maintain contact with the bridge by radio. The bridge coordinates the wider response — sounding the general alarm, calling for medical assistance, contacting shore authorities if alongside, mustering additional personnel, ensuring the engine room is aware and can isolate relevant systems.
Between the bridge and external parties: If the vessel is at sea, the bridge initiates urgency or distress communications as the situation warrants. If alongside, the bridge contacts the port facility, terminal, and local emergency services. This is a parallel action, not a sequential one — it happens at the same time as the on-board rescue, not after it.
Silence from inside a space is not ambiguous. It is an alarm.
7. The Sequence: From Identification to Casualty Reception
The following sequence is not a suggestion. It is the difference between recovering one casualty and creating three.
Step 1: Identify. A person is observed to be unresponsive inside an enclosed space — collapsed, not moving, not answering hails, or exhibiting signs of distress (confusion, staggering, loss of coordination). The observer recognises this as an enclosed space casualty event.
Step 2: Raise the alarm. Immediately. Before anything else. Sound the designated alarm — whether that is the general alarm, a specific enclosed space emergency signal, or a radio call to the bridge. The alarm brings the rescue team, the BA sets, the medical responder, and the coordination of the bridge watch. Without the alarm, the response is one person standing at a hole making bad decisions alone.
Step 3: Do NOT enter. This is the hardest step. The observer does not enter the space. Does not lean in. Does not go halfway down the ladder to check. Does not hold their breath and dash in. The atmosphere that incapacitated the casualty is still present. It will incapacitate the observer just as quickly.
The urge to enter is overwhelming. Resisting it is the single most important act in the entire response.
Step 4: Isolate the source if possible. From outside the space, without entering, take any action that can improve conditions. Close valves that may be feeding inert gas into the space. Start ventilation fans if they can be activated from outside. Shut down processes that may be generating toxic atmosphere. These actions are taken only if they can be done safely and without entering the hazardous space.
Step 5: Deploy the BA team. The rescue team arrives at the entrance with SCBA, harnesses, lifelines, and the retrieval system. The team leader confirms: BA is donned and functioning, harnesses are on and lifelines attached, the mechanical advantage system is rigged over the access, atmospheric monitoring is active, communications are confirmed. Only then does the primary rescuer enter.
Step 6: Locate, secure, extract. The primary rescuer locates the casualty, attaches the rescue sling or harness attachment point, confirms readiness to the team leader, and the topside team begins extraction using the mechanical advantage system. The primary rescuer assists from below and exits the space as soon as the casualty is clear.
Step 7: Casualty reception. On deck, the casualty is received by personnel prepared for medical response — first aid, oxygen administration, CPR if required. The Neil Robertson stretcher is ready. The route to the ship’s hospital or a sheltered location is clear. If the vessel is alongside, shore medical services are already en route.
Every step in this sequence depends on the step before it. Skip step two, and step five never happens. Skip step three, and there are now two casualties at step six.
8. Why Shore Emergency Services Cannot Be the Primary Plan
A vessel at sea is on its own.
This is not a philosophical statement. It is an operational fact that every enclosed space rescue plan must be built around. The nearest coast guard helicopter may be two hours away. The nearest port with a confined space rescue team may be twelve hours steaming. Even alongside in a well-equipped port, the response time for a specialist confined space rescue unit is measured in tens of minutes — and an oxygen-deprived brain suffers irreversible damage in four to six.
Shore emergency services are a secondary resource. They are called. They are welcomed when they arrive. But they are not the plan. The plan is the crew on board, with the equipment on board, executing a procedure they have practised on board.
Any SMS that lists contact port emergency services as the primary rescue arrangement for enclosed space entry is an admission that no real rescue capability exists on the vessel. It transfers the responsibility to people who are not there, may not come in time, and may not be able to board even if they arrive.
The ship’s crew is the rescue team. There is no one else.
9. Closing Reality
Enclosed space rescue is not a competence that can be acquired from a poster on the changing room bulkhead. It is a physical skill that must be practised with real equipment, in real spaces, under conditions that approximate the stress and confusion of an actual event.
The written procedure will not save anyone. The equipment in the locker will not save anyone. Only the crew — trained, equipped, drilled, and disciplined enough to resist the instinct to rush in unprotected — will save anyone.
Every multiple-fatality enclosed space event follows the same pattern: the first casualty was unlucky; the second was brave; the third never had a chance. The system that was supposed to protect all of them existed on paper and nowhere else.
A rescue plan that has never been physically rehearsed is not a plan. It is a sentence in a manual, waiting to become a sentence in a casualty report.