{"id":51718,"date":"2026-04-17T23:32:10","date_gmt":"2026-04-17T22:32:10","guid":{"rendered":"https:\/\/maritimehub.co.uk\/?p=51718"},"modified":"2026-04-17T23:32:10","modified_gmt":"2026-04-17T22:32:10","slug":"enclosed-space-entry-the-procedure-and-the-philosophy","status":"publish","type":"post","link":"https:\/\/maritimehub.co.uk\/enclosed-space-entry-the-procedure-and-the-philosophy\/","title":{"rendered":"Enclosed Space Entry – The Procedure and the Philosophy"},"content":{"rendered":"
\n

ON DECK -> Working at Height & Enclosed Spaces<\/p>\n

Position on Deck<\/strong><\/p>\n

Operation Group:<\/strong> Safety \/ Enclosed Space Operations<\/p>\n

Primary Role:<\/strong> Control of entry into oxygen-depleted, toxic, or flammable atmospheres aboard ship<\/p>\n

Interfaces:<\/strong> Deck department, engine department, safety officer, master, shore contractors, port state control, ISM system, SOLAS Ch. XI-1<\/p>\n

Operational Criticality:<\/strong> Absolute \u2014 no enclosed space entry is routine, regardless of how many times the same tank has been entered before<\/p>\n

Failure Consequence:<\/strong> Incapacitation within seconds. Single casualty becomes multiple casualty as untrained rescuers enter without breathing apparatus. Fatal outcome in under four minutes. Investigation reveals permit was signed but checks were not done.<\/p>\n<\/div>\n

The atmosphere does not care about rank, experience, or intentions. It simply replaces consciousness with nothing.<\/em><\/p>\n

Introduction<\/h2>\n

Every year, the same accident report is published with different names. A seafarer enters a space. The atmosphere is wrong. They collapse. A shipmate sees them fall and climbs in after them. Now there are two bodies instead of one. Sometimes three. The investigation finds a permit to enter that was signed at the mess-room table. It finds an atmospheric testing instrument that was last calibrated six months ago, or that was never taken to the space at all. It finds a crew that had done the drill but never truly believed the space could kill them.<\/p>\n

Enclosed space entry is not a procedure problem. It is a belief problem. The procedure is well established, internationally mandated, and understood in theory by virtually every serving officer. Yet the deaths continue, and their pattern is so consistent it amounts to a signature: invisible hazard, false confidence, collapse, impulsive rescue, multiple fatalities.<\/p>\n

This article addresses both the procedure and the philosophy behind it. The procedure is the scaffolding. The philosophy is the reason the scaffolding must never be dismantled, not even for a moment, not even for the most apparently benign space on board.<\/p>\n

Contents<\/h2>\n
    \n
  • 1. What Counts as an Enclosed Space<\/li>\n
  • 2. Why the Danger Is Invisible<\/li>\n
  • 3. The Procedure: Permit, Isolate, Ventilate, Test, Sign, Enter, Monitor, Communicate<\/li>\n
  • 4. Atmosphere Testing \u2014 The Four-Gas Minimum and Why Each One Matters<\/li>\n
  • 5. Pre-Entry as a Period Measured in Hours<\/li>\n
  • 6. The Sentry: Not a Spectator<\/li>\n
  • 7. The Rescue Plan \u2014 Written Before Entry, Not Improvised After Collapse<\/li>\n
  • 8. The Casualty Record: Why Rescuers Die<\/li>\n
  • 9. Closing Reality<\/li>\n<\/ul>\n

    1. What Counts as an Enclosed Space<\/h2>\n

    The definition matters because it is routinely underestimated. An enclosed space is not only a cargo tank or a ballast tank. It is any space that has limited openings for entry and exit, is not designed for continuous worker occupancy, and may have an atmosphere that is oxygen-deficient, oxygen-enriched, toxic, or flammable.<\/p>\n

    That definition covers far more of the ship than most people instinctively think.<\/p>\n

    Forecastle stores. Chain lockers. Duct keels. Void spaces beneath tank tops. Pump rooms. Cofferdams. Cargo compressor rooms. Pipe tunnels. The space beneath a raised fo’c’sle deck where the windlass motor sits. CO2 rooms. Battery lockers on vessels with hybrid systems. Double-bottom tanks that have been left sealed since the last drydock. Spaces adjacent to tanks that have been inerted or that contained fumigated cargo.<\/p>\n

    The error is to associate enclosed space risk only with large tanks entered via manholes. Many of the spaces on the casualty record are small, awkward, and unremarkable \u2014 the kind a bosun might enter on a quiet afternoon to retrieve a shackle or check a pipe. They do not look dangerous. That is precisely the point.<\/p>\n

    If a space can trap a bad atmosphere, it is an enclosed space. The size of the opening is irrelevant if the air inside is wrong.<\/em><\/p>\n

    2. Why the Danger Is Invisible<\/h2>\n

    Oxygen depletion has no smell, no colour, no taste, and no warning. A space containing 16% oxygen looks identical to one containing 21%. The human body cannot distinguish between them by any sensory means. At 16%, judgement is impaired. At 12%, collapse occurs without warning. At 6%, death follows in minutes.<\/p>\n

    This is what makes enclosed spaces the deck’s most lethal environment. Fire gives heat and light. A fall gives height. A parting line gives noise. An oxygen-depleted void space gives nothing at all. A person steps through the manhole, takes two breaths, and is unconscious before they understand what has happened.<\/p>\n

    Toxic gases compound this. Hydrogen sulphide is detectable by smell at very low concentrations \u2014 the rotten-egg odour \u2014 but at higher concentrations it paralyses the olfactory nerve. The last thing a person smells is nothing. Carbon monoxide is odourless at any concentration. Hydrocarbon vapours may or may not have a detectable smell depending on the cargo, and LEL concentrations sufficient to cause flash ignition may be present without any obvious sensory clue.<\/p>\n

    The invisibility of the hazard is the philosophical foundation of the entire procedure. Every step exists because human senses cannot be trusted in this environment. The instruments are not optional aids. They are the only means of knowing whether the space is survivable.<\/p>\n

    3. The Procedure: Permit, Isolate, Ventilate, Test, Sign, Enter, Monitor, Communicate<\/h2>\n

    The sequence is fixed and non-negotiable. Each step depends on the one before it.<\/p>\n

    Permit<\/h3>\n

    The enclosed space entry permit is a formal document authorised by the master or a designated competent officer. It specifies the space, the reason for entry, the persons involved, the hazards identified, the precautions taken, and the time window during which entry is authorised. It is not a form to be completed retrospectively. It is a decision gate. If the hazards cannot be controlled, the permit is not issued and the entry does not happen.<\/p>\n

    Isolate<\/h3>\n

    All piping, valves, and connections that could allow the ingress of gas, liquid, cargo residue, or inert gas into the space must be physically isolated. Closing a valve is not isolation. Blanking, disconnecting, or removing spool pieces is isolation. Electrical isolation of any equipment within the space is included. If a pump can push product into that tank, the line is blanked or the entry does not proceed.<\/p>\n

    Ventilate<\/h3>\n

    Mechanical ventilation must be established and confirmed effective. The purpose is to displace any residual hazardous atmosphere and to introduce fresh air throughout the entire volume of the space, including corners, lower levels, and areas behind structural members where pockets of heavier-than-air gas may collect. Ventilation must continue throughout the entry, not just beforehand.<\/p>\n

    Test<\/h3>\n

    Atmosphere testing is conducted after ventilation, at multiple levels within the space, and before any person enters. This is addressed in detail in the following section.<\/p>\n

    Sign<\/h3>\n

    The permit is signed by the master and the responsible officer only after all precautions are confirmed in place. The signatures mean the checks have been done. A signed permit without the checks done is worse than no permit at all \u2014 it creates a false record of a safe entry that was never safe.<\/p>\n

    Enter<\/h3>\n

    Entry is made by designated persons only, wearing appropriate PPE, carrying personal gas monitors where available, and maintaining communication with the sentry at the entrance.<\/p>\n

    Monitor<\/h3>\n

    Continuous atmospheric monitoring during the entry is essential. Conditions can change. Residues disturbed during work can release gas. Ventilation can fail. Rust scale knocked from a bulkhead can expose a pocket of depleted atmosphere behind it. Testing at entry is not testing throughout.<\/p>\n

    Communicate<\/h3>\n

    A communication system \u2014 radio, line-of-sight, tethered line with agreed signals \u2014 must be established and tested before entry. The sentry must be able to contact the bridge or the duty officer immediately. The person inside the space must be able to raise the alarm without leaving the space.<\/p>\n

    Skip one step and the chain is broken. The atmosphere does not offer second chances.<\/em><\/p>\n

    4. Atmosphere Testing \u2014 The Four-Gas Minimum and Why Each One Matters<\/h2>\n

    A single-gas oxygen meter is not adequate. The minimum standard is a four-gas instrument covering oxygen, lower explosive limit, hydrogen sulphide, and carbon monoxide. Each parameter tells a different story about the space.<\/p>\n

    Oxygen (O2)<\/h3>\n

    Normal atmospheric oxygen is 20.9%. The safe working range is 19.5% to 23.5%. Below 19.5%, human physiology begins to fail \u2014 initially with impaired judgement and coordination, progressing rapidly to unconsciousness and death. Above 23.5%, materials that would not normally ignite become flammable, clothing can catch fire with minimal ignition energy, and grease on tools or fittings becomes a fire hazard. Oxygen can be depleted by rusting of bare steel, by bacterial action on organic residue, by absorption into certain cargoes, or by displacement with inert gas or heavier-than-air vapours.<\/p>\n

    Lower Explosive Limit (LEL)<\/h3>\n

    LEL indicates the concentration of flammable gas or vapour as a percentage of the minimum concentration required for ignition. Any reading above 1% LEL warrants investigation. Entry should not proceed above 1% LEL in most operational protocols. Ignition inside a confined steel space produces an overpressure event with no survivable outcome for anyone inside.<\/p>\n

    Hydrogen Sulphide (H2S)<\/h3>\n

    H2S is produced by the decomposition of organic matter, by certain cargo residues, and by bacterial action in ballast tanks carrying sediment or biological material. It is acutely toxic. At 10 ppm, it causes irritation. At 100 ppm, it paralyses the sense of smell. At 300 ppm, it can kill within minutes. It is heavier than air and accumulates at lower levels \u2014 exactly where a person’s head would be when climbing down a vertical ladder into a tank.<\/p>\n

    Carbon Monoxide (CO)<\/h3>\n

    CO is a product of incomplete combustion and can accumulate in spaces near engine exhausts, boiler uptakes, or areas where hot work has recently been carried out. It binds to haemoglobin with an affinity roughly 250 times greater than oxygen. A person breathing CO-contaminated air does not feel breathless \u2014 the haemoglobin is fully loaded, just loaded with the wrong gas. Collapse and death follow without the characteristic air hunger that would normally prompt escape.<\/p>\n

    Testing must be done at multiple levels: top, middle, and bottom of the space as a minimum. Gases stratify. A reading taken at the manhole tells nothing about conditions at the tank bottom. The instrument must be recently calibrated and bump-tested on the day of use. An instrument that reads normal because it is faulty is not a safety device \u2014 it is a liability.<\/p>\n

    Four gases. Three levels. Every time. No exceptions.<\/em><\/p>\n

    5. Pre-Entry as a Period Measured in Hours<\/h2>\n

    Proper enclosed space entry preparation cannot be compressed into a ten-minute toolbox talk and a quick look at the meter. Ventilation of a large ballast tank or cargo hold may require hours to achieve adequate air exchange throughout the full volume. A double-bottom tank with internal structural members, lightening holes, and limited airflow paths may need sustained forced ventilation for half a day before atmospheric readings stabilise at safe levels.<\/p>\n

    Even after ventilation, the atmosphere must be tested and confirmed stable over a period, not merely at a single point in time. A reading of 20.9% oxygen taken immediately after shutting down the fan is meaningless if the space reverts to 18% within twenty minutes once ventilation stops. Stability must be demonstrated.<\/p>\n

    Isolation of connected systems takes time. Confirming blanks are in place, valves are locked, and the space is genuinely separated from any source of hazardous atmosphere is not a clipboard exercise \u2014 it requires physical verification at every point of potential ingress.<\/p>\n

    The permit paperwork, the risk assessment, the toolbox talk, the assignment of the sentry, the preparation and testing of rescue equipment, the confirmation that the ship’s hospital or medical facilities are ready, the notification to the bridge \u2014 all of this takes time. And it should.<\/p>\n

    Any culture that treats enclosed space entry preparation as something that can be rushed is a culture that has not yet had its casualties.<\/p>\n

    6. The Sentry: Not a Spectator<\/h2>\n

    The sentry \u2014 sometimes called the standby person or attendant \u2014 is stationed at the entrance to the space for the entire duration of the entry. Their role is not passive observation. They are an active safety barrier with specific authorities and responsibilities.<\/p>\n

    The sentry maintains continuous awareness of the personnel inside the space and their condition. They monitor communications. They track time. They are the first point of contact for any change in conditions \u2014 a ventilation failure, a gas alarm, a radio call from the bridge, a change in the ship’s operational status.<\/p>\n

    Critically, the sentry has the authority to order immediate evacuation of the space. They do not need to consult the officer in charge or the master. If something is wrong, the sentry calls people out. That authority must be established in the pre-entry brief and must be respected absolutely, regardless of rank.<\/p>\n

    The sentry does not enter the space. Under any circumstances. If the person inside collapses, the sentry raises the alarm, activates the rescue plan, and ensures rescue personnel with breathing apparatus are summoned. The sentry does not become the second casualty.<\/p>\n

    A sentry who enters the space is not performing a rescue. They are joining the casualty list.<\/em><\/p>\n

    The sentry must be trained, alert, and equipped with a means of raising the alarm that does not require leaving the entrance. Assigning the role to the most junior person on board because nobody else wants to stand around waiting is a failure of leadership, not resource allocation.<\/p>\n

    7. The Rescue Plan \u2014 Written Before Entry, Not Improvised After Collapse<\/h2>\n

    The rescue plan must exist in writing, in specific terms, before the permit is signed. It must identify the rescue team, confirm they are trained, confirm they have serviceable SCBA or EEBD units, confirm that a means of extracting an incapacitated person from the space is available and rigged, and confirm that medical response is prepared.<\/p>\n

    A rescue plan that says ‘raise the alarm and call for help’ is not a plan. It is a hope.<\/p>\n

    The practical realities of rescue from an enclosed space are severe. The casualty may be unconscious at the bottom of a vertical ladder, in a space too confined for two people to stand side by side. A rescue harness and a retrieval line rigged before entry can mean the difference between a ten-minute extraction and a forty-minute struggle that nobody survives.<\/p>\n

    Rescue drills conducted under the SOLAS requirements for enclosed space entry must be realistic. Dragging a dummy across a flat deck and calling it a rescue drill teaches nothing about extracting dead weight up a vertical trunk through a 600mm manhole. The drill must replicate the actual geometry of the spaces on that ship, with the actual equipment that would be used, by the actual people who would be tasked.<\/p>\n

    If the rescue plan cannot be executed with the resources on board, the entry should not proceed.<\/p>\n

    8. The Casualty Record: Why Rescuers Die<\/h2>\n

    The most consistent and damning feature of enclosed space fatality investigations is the proportion of deaths among would-be rescuers. In case after case, the initial casualty survived or might have survived. It was the second person in \u2014 the one who saw their shipmate fall and went in without breathing apparatus \u2014 who died. And sometimes the third.<\/p>\n

    The mechanism is always the same. A person sees a colleague collapse. Instinct overrides training. They enter the space immediately, without BA, without alerting anyone, without thinking about why the first person fell. They are exposed to the same atmosphere and collapse within seconds. A third person sees two bodies and the cycle repeats.<\/p>\n

    This is not cowardice overcome by bravery. It is trained procedure overcome by panic. And it is preventable, but only if the philosophy of enclosed space safety is genuinely internalised, not merely recited during drills.<\/p>\n

    The phrase that kills more seafarers than any technical failure is: ‘I’ll just pop in for a second.’<\/em><\/p>\n

    It appears in pre-accident witness statements with appalling regularity. The bosun who nips into the forepeak to check a sounding pipe. The AB who ducks into the chain locker to free a snag. The fitter who steps into the duct keel to check a valve \u2014 just for a second, no need for the permit, it’s only a quick look.<\/p>\n

    There is no such thing as a quick look in an enclosed space. The atmosphere does not differentiate between a planned two-hour tank inspection and a five-second glance through a manhole. If the oxygen is at 4%, five seconds is enough. The person is unconscious before they can turn around.<\/p>\n

    Every ‘quick look’ that succeeded taught the wrong lesson. Every one that failed ended in a body bag.<\/em><\/p>\n

    The cultural challenge is immense. On a ship with a demanding schedule, a small crew, and pressure to keep things moving, the temptation to skip the procedure for a brief, apparently low-risk entry is constant. It requires active, visible leadership from the master and senior officers to maintain the discipline. Not leadership by memo. Leadership by example, by refusal, by stopping the job when the procedure is not followed \u2014 every single time.<\/p>\n

    9. Closing Reality<\/h2>\n

    The enclosed space entry procedure is not bureaucracy. It is not paperwork for the sake of PSC. It is a sequence of physical actions, each one designed to prevent a specific mode of death in an environment where human senses are useless and human instincts are lethal.<\/p>\n

    The philosophy behind the procedure is simple and unforgiving: the atmosphere inside a closed steel space on a ship is unknown until it is proven safe by instrument, and it remains safe only as long as ventilation and monitoring continue. No experience, no familiarity with the space, no previous safe entries, and no operational pressure change this fact.<\/p>\n

    The permit is the decision gate. The testing is the proof. The sentry is the last barrier. The rescue plan is the acknowledgement that despite everything, things can still go wrong.<\/p>\n

    Every shortcut in this system has a name attached to it somewhere in the casualty record.<\/p>\n

    The space does not care about the schedule. It does not care about the cargo. It waits, and it does not warn.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

    Enclosed spaces kill more seafarers than fire. The danger is invisible, the failures are cultural, and the procedure exists because the alternative is body bags.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"fifu_image_url":"","fifu_image_alt":"","c2c-post-author-ip":"2a02:c7c:2ef8:2400:931:afb1:9971:4a62","footnotes":""},"categories":[1,14],"tags":[9370,9371,9180,9221,9366,9372,9373],"class_list":["post-51718","post","type-post","status-publish","format-standard","hentry","category-latest","category-on-deck","tag-atmosphere-testing","tag-confined-space","tag-deck-safety","tag-enclosed-space-entry","tag-permit-to-work","tag-rescue-plan","tag-working-at-height-and-enclosed-spaces"],"acf":[],"_links":{"self":[{"href":"https:\/\/maritimehub.co.uk\/?rest_route=\/wp\/v2\/posts\/51718","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/maritimehub.co.uk\/?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/maritimehub.co.uk\/?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/maritimehub.co.uk\/?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/maritimehub.co.uk\/?rest_route=%2Fwp%2Fv2%2Fcomments&post=51718"}],"version-history":[{"count":1,"href":"https:\/\/maritimehub.co.uk\/?rest_route=\/wp\/v2\/posts\/51718\/revisions"}],"predecessor-version":[{"id":51719,"href":"https:\/\/maritimehub.co.uk\/?rest_route=\/wp\/v2\/posts\/51718\/revisions\/51719"}],"wp:attachment":[{"href":"https:\/\/maritimehub.co.uk\/?rest_route=%2Fwp%2Fv2%2Fmedia&parent=51718"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/maritimehub.co.uk\/?rest_route=%2Fwp%2Fv2%2Fcategories&post=51718"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/maritimehub.co.uk\/?rest_route=%2Fwp%2Fv2%2Ftags&post=51718"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}