Enclosed Space Entry Fatal Errors
Enclosed space entries keep killing seafarers in the same handful of ways, and the pattern is so consistent it should shame the industry. A ballast tank or cargo hold is opened without testing. Someone collapses at the bottom of a ladder. A shipmate sees them fall, goes in after them with no breathing apparatus and no attendant, and collapses beside them. Sometimes a third person follows. The majority of enclosed space fatalities include would-be rescuers who died attempting to save a colleague with no equipment and no plan — the single most predictable, preventable feature of these accidents. This article walks through the fatal errors one by one: skipping or faking atmosphere testing, testing at one level only, no ventilation before entry, no trained attendant standing at the entrance, no rescue plan beyond "we will pull him out", and a permit signed by an officer who never saw the space. It then sets out the correct entry procedure in operational order — risk assessment, isolation, ventilation, calibrated multi-point gas testing (oxygen around 20.9 percent as the reference, flammable and toxic gases checked against your SMS limits), entry permit with a time limit, continuous attendant, communication checks, and rehearsed rescue with the right equipment staged at the entrance. It closes with what officers must actually enforce when the entry is inconvenient, the ship is short-handed, and the tank "only needs a quick look". There are no quick looks. Every level of the crew needs to read this one.
Enclosed space fatalities follow a script. The names and ships change; the errors do not. A person enters an untested space, collapses, and one or more shipmates die trying to pull them out. The rescuer deaths are the cruelest part: they are made by good people acting on instinct, and they are almost entirely preventable by procedure.
The fatal errors, in order of how often they kill
- Rescuer syndrome. Someone sees a shipmate down and enters immediately. No breathing apparatus, no attendant, no alarm raised first. The oxygen-deficient or toxic atmosphere that dropped the first person drops the second within a few breaths. A large share of enclosed space deaths are would-be rescuers.
- No atmosphere testing, or testing as theatre. The meter was never calibrated, the reading was taken from the top of the ladder, or the result was written down before anyone measured anything. Testing at one level only is a classic miss — gases stratify, and a tank can read fine at the hatch and be lethal at the bottom.
- No ventilation. A space sealed for weeks with ballast water residue, rusting steel, or cargo vapour cannot be made safe by opening the hatch for ten minutes.
- No attendant. The person inside is alone, or the "attendant" was sent to fetch something. When the entrant collapses silently, nobody knows for minutes.
- No rescue plan. "We will get him out" is not a plan. Who rigs the tripod or retrieval line, where is the breathing apparatus, who is the trained rescue team, and how long does extraction take?
The correct entry procedure
Your SMS permit-to-work system governs this; what follows is the operational spine that any sound procedure must contain:
- Challenge the entry itself. Can the job be done from outside? Inspection ports, sounding pipes, remote gauging, a camera on a pole. The safest entry is the one that never happens.
- Isolate the space. Blank or lock off connected lines, isolate machinery that could move or flood, lock out and tag. A valve that someone else can open is a weapon.
- Ventilate continuously. Force ventilation before testing and keep it running during the entry where the SMS requires it. Ventilate long enough to change the atmosphere, not just freshen the top two metres.
- Test properly, at multiple levels. Calibrated or bump-tested instrument, used by someone trained on it. Oxygen first — the reference is about 20.9 percent and your SMS sets the acceptable band — then flammable gas against your entry limit, then toxic gases relevant to the space's history. Sample top, middle, and bottom. Test again after any break in ventilation and continuously where required.
- Issue the permit with a time limit. Named entrant, named attendant, named responsible officer, expiry time, communication method, and the rescue arrangements written down.
- Station the attendant and hold communications. The attendant stays at the entrance, maintains contact at agreed intervals, and never enters. Their job is to raise the alarm and control the rescue, not to be the rescue.
- Stage rescue equipment before entry. Breathing apparatus charged and ready, retrieval harness and line rigged where the space geometry allows, resuscitation equipment accessible, and a crew that has actually drilled the extraction.
What officers must enforce
The pressure point is never the planned tank inspection with a full team and daylight. It is the quick job: a blocked sounding pipe before departure, a smell in a store, a dropped tool in a cofferdam, the ship short-handed and the cargo surveyor waiting. That is when "it will take two minutes" gets said. Your answer, every time, is that two-minute jobs are exactly the ones that kill, because they bypass every control.
Three non-negotiables for officers of any rank: nobody enters any space not certified safe without a permit, full stop; any crew member, including the most junior rating, has the authority and the obligation to stop an entry that looks wrong; and every crew member must know that an unprotected rescue attempt is prohibited even when a friend is dying in front of them — the drill for that moment is raise the alarm, don breathing apparatus, extract with equipment. Drill it until it is reflex, because in the real moment there is no time to think.
The permit system only fails one way: quietly, by habit. Audit your own entries. Watch one. If the meter never left the cargo office, you already know what to fix.