This protocol does not replace an entry permit

Equipment such as tanks, reactors, ancillary smelting-furnace equipment, dust collectors, ducts, silos, pits, manholes, and boilers—where people do not remain routinely, access is restricted, and natural ventilation is inadequate—creates similar fatal hazards across industries. Oxygen deficiency, flammable mixtures, and toxic gases may coexist with the unexpected startup of agitators or screws, residual pressure, hot surfaces, incoming material, engulfment, falls, and electric shock. Entry therefore cannot be authorized on the single basis that “the gas detector readings are normal.”

The procedure below provides a minimum framework that can be used across industries. In actual work, the latest occupational safety and health laws, the site confined-space program, the work permit, the risk assessment, equipment manufacturer instructions, and the standards set by the person in charge at the site take precedence over this article. The U.S. OSHA general industry standard also states that it does not apply unchanged to agriculture, construction, or shipyard work. Definitions and acceptable limits vary by country and industry, so overseas figures must not be copied as though they were domestic statutory limits.

Step 1: First assess whether entry is necessary and identify equipment hazards

The first question is not “How will we enter?” but “Do we really need to enter?” If the job can be completed with a camera, borescope, remote cleaning, or an externally operated device, eliminate the entry itself. If entry is unavoidable, use equipment drawings and previous work records to verify the space geometry, access openings, internal partitions, blind spots, vertical depth, and worker travel routes. Even in the same tank, the atmosphere can differ before and after agitation or cleaning and with the shutdown duration and ambient temperature.

The pre-job risk assessment must include, at a minimum:

  • Safety data sheets for recently stored or processed substances, residues, deposits, scale, and cleaning agents

  • Processes that consume oxygen or generate gases, such as decomposition, fermentation, oxidation, corrosion, welding, painting, solvent cleaning, and nitrogen purging

  • The possibility that substances, vapors, or energy may enter from connected piping, valves, bypasses, jackets, feed openings, and adjacent processes

  • Hazards involving electricity, pressure, hydraulics, pneumatics, gravity, rotating components, high or low temperatures, radiation, falls, flooding, and engulfment

  • Worst-case conditions that can arise not only during normal work but also during power failure, ventilation failure, valve leakage, sludge disturbance, and hot work

  • Acceptable limits for each target substance, alarm setpoints, required sensor technologies, personal protective equipment, and emergency-response conditions

The U.S. OSHA appendix on atmospheric testing distinguishes between “evaluation testing” and “verification testing.” First, hazards are evaluated by methods sensitive and selective enough to identify every significant hazardous atmosphere that is present or may arise; the results are then used to determine permit conditions and what must be measured. Immediately before actual entry, the equipment specified on the permit is used to verify residual contaminants and compliance with acceptable conditions. This is why a common 4-gas instrument cannot replace a risk assessment. If chlorine, ammonia, sulfur dioxide, carbon dioxide, or a particular solvent is expected but the instrument lacks the corresponding sensor or a suitable analytical method, the result is not “0”; it is “not measured.”

Step 2: Isolate sources of ingress and all forms of energy

Before measurement, separate the equipment from its operating system. Stop feeds and discharges, relieve pressure, and drain, clean, and purge the contents as far as practicable. Isolate rotating machinery, heaters, electrical power, hydraulic power, and pneumatic power under the site lockout/tagout procedure. Where closing a valve alone cannot adequately control the possibility of leakage, consider reliable methods under site standards, such as installing blinds, double block and bleed, or physical disconnection. Mechanically secure agitator shafts and internal components that could move under gravity.

Cross-check the isolation status against both drawings and field conditions, and record the identification number and verifier for each isolation point on the permit. When contractors enter, the host employer must communicate the equipment history and hazard information and coordinate the two parties’ lockout systems so that they do not conflict. A ventilation fan only lowers concentrations inside the space; it does not isolate piping through which new gas or liquid continues to enter. Conversely, nitrogen purging does not make the space safe. Nitrogen can reduce fire risk, but it creates oxygen deficiency, so entry is prohibited until the atmosphere has been restored and verified as suitable for human occupancy.

Step 3: Prepare the instrument and sampling system

Pre-entry testing is performed by a trained person from a safe location outside the space. The instrument must have sensors, measurement ranges, and resolution appropriate for the gases expected. In accordance with the manufacturer’s instructions and site procedures, check calibration validity, sensor service life, the battery, filters, pump, alarm settings, and the condition of hoses and probes. A functional test using test gas of known concentration—a bump test—confirms that the sensors and alarms actually respond and that the flow path is not blocked. If the instrument does not respond or is outside the acceptable range, do not merely readjust zero in the field and continue using it; calibrate or service it under the manufacturer’s procedure, or replace it with a properly functioning instrument.

OSHA requires the internal atmosphere to be tested before entry with a “calibrated direct-reading instrument.” Calibration intervals and bump-test methods, however, vary with sensor technology and the manufacturer’s instructions. The facts that the instrument powers on, displays numbers, or worked properly yesterday do not verify its performance today. Also check the calibration gas expiration date and concentration, regulator flow rate, ambient temperature and humidity, and the potential for sensor poisoning or cross-sensitivity.

When a pump and hose are used for remote measurement, the delay time must be calculated. First prepare the instrument in clean air, place the probe at the target location, and wait until the internal volume of the hose has been adequately displaced by the sample. Add the minimum sensor response time specified by the manufacturer and record the reading only after it stabilizes. A long hose, bends, water droplets, dust, and adsorptive substances can slow the response or produce low readings. Sweeping one location for only a few seconds and moving to the next may appear to check the depth while failing to bring the actual air to the sensor.

Step 4: Remotely test the top, middle, and bottom from outside the space

Before opening a door or manhole cover, eliminate hazards arising from opening itself, such as residual pressure, high temperature, or falling material. Once the opening is exposed, immediately install protection against falls and dropped objects, and take readings with a remote probe before a worker places their head or body across the opening. Briefly descending while wearing respiratory protection to take a reading is not “pre-entry testing.” Once the face or body enters the space, exposure to a hazardous atmosphere may already have occurred.

Do not assume that the atmosphere in a confined space is uniform. Gas density, temperature, the point of generation, equipment geometry, and ventilation flow can produce stratification and localized pockets. Do not measure only just below the opening; test multiple locations at the top, middle, and bottom, on both sides of internal partitions, in floor pits, near residues, in workers’ breathing zones, and along actual travel routes. For descending entry, move the probe stepwise in the direction of travel and around it, allowing for hose transport time and sensor response time at every stage. The OSHA appendix describes testing the atmospheric area in the direction of travel and to either side at intervals of approximately 1.22 m along a descent path where stratification is expected. This figure is an example from that U.S. appendix, not a universal statutory interval in Korea; if the site standard is stricter, follow the site standard.

For every location, record the position, depth, time, ventilation status, instrument identification number, actual concentration, and person taking the measurement. Recording only “normal” or “no abnormality” prevents assessment of trends and reproducibility. The Korea Occupational Safety and Health Agency guide for safe work in confined spaces also emphasizes measurement at multiple points considering area and depth and determination of whether the air is acceptable. Do not omit a level solely because a particular gas is lighter or heavier. Hot vapor, gas mixtures, and mechanical ventilation create distributions that can differ from simple predictions based on relative density.

Step 5: Check oxygen, flammables, and toxics in that order

The basic OSHA sequence is oxygen, flammable gases and vapors, and toxic gases and vapors. Oxygen is checked first because some catalytic-combustion flammable-gas sensors can give unreliable readings in oxygen-deficient conditions. The immediate fire and explosion hazard is checked next, followed by the toxic substances selected in the assessment. Measurement is not limited to common substances such as carbon monoxide and hydrogen sulfide. Every significant toxic substance expected from the process or residues must be evaluated with a sensor, detector tube, or analytical method suitable for that substance.

A multi-gas instrument may display several channels simultaneously. This does not mean that the operator must force sequential readings by pressing buttons; it means that, while observing the required warm-up, oxygen dependence, sample path, and response time, the results are reviewed and judged in the order of oxygen, flammable, and toxic hazards. Some flammable-gas sensors, such as infrared sensors, have low oxygen dependence, so the instrument-specific operating manual takes precedence. A sensor exposed to a high concentration of flammable gas may saturate or show an unexpectedly low reading; an abnormally low or unstable indication must not be assumed to mean safety.

Write the entry acceptance values on the work permit in advance. Distinguish the upper and lower oxygen limits, the acceptable level for flammable gases, instantaneous, short-term, and time-weighted limits for each toxic substance, sensor alarm setpoints, and evacuation thresholds. Do not select convenient figures from different countries and mix them. Korean workplaces must check the current Rules on Occupational Safety and Health Standards, Ministry of Employment and Labor notices, and site management standards. If a substance has no exposure limit or combined exposure is expected, obtain review by a qualified occupational hygiene professional.

Step 6: Ventilate and retest under the same conditions

Do not enter if acceptable conditions are not met. Where practicable, use mechanical ventilation to deliver clean outside air through ducting to the work location, and ensure that the point where contaminated air is discharged does not endanger other workers, ignition sources, or air intakes. Ventilation equipment and electrical devices must be suitable for the expected flammable atmosphere. Do not introduce pure oxygen to raise the oxygen concentration, because oxygen enrichment can increase the combustion hazard.

Ventilation must reach the entire space and its blind spots for sufficient time. Do not infer effectiveness from fan capacity alone; under actual work conditions, retest the top, middle, bottom, and work locations to verify that acceptable conditions are maintained. Conditions may be normal only while the fan is stopped, whereas operation may disturb residues or draw in exhaust from an adjacent process. Conversely, if ventilation is used only during testing and switched off after entry, concentrations may rise again. The permit must specify the ventilation method, duct position, start time, whether operation is continuous, and the evacuation method in the event of failure.

Lower readings after ventilation do not mean that the source of the hazard has been removed. Welding, painting, cleaning, or sludge removal during the work may create new contaminants, and worker movement may disturb deposits on the floor. If readings are close to a limit or change rapidly, do not authorize entry until the cause has been resolved. An atmosphere that cannot be maintained within acceptable conditions by ventilation alone constitutes a high-risk entry requiring a separate permit, respiratory protection, monitoring, and rescue system; transition to the specialized procedures prescribed by the site and applicable law.

Step 7: Integrate the permit, continuous monitoring, attendant, and rescue preparations

The entry supervisor authorizes entry only after the risk assessment, isolation verification, actual readings, ventilation, worker training, personal protective equipment, communications, number of entrants and work duration, emergency contacts, and rescue plan are all ready. Make the readings available to workers and the attendant. If any condition changes, suspend the permit and reassess. Shift changes, re-entry after a break, interrupted ventilation, process changes, alarms, worker symptoms, and equipment abnormalities are typical triggers for retesting.

During entry, the default design approach is continuous monitoring of workers’ actual breathing zones and locations where hazards arise. NIOSH recommends pre-entry testing and continuous monitoring throughout entry, adequate ventilation, an outside attendant and reliable communications, and immediately available retrieval and rescue methods. Workers should wear portable instruments themselves, taking care that clothing or protective equipment does not obstruct the inlet. In a large space, or where multiple workers are separated, consider combining personal instruments with fixed-area or extractive monitoring. If an alarm sounds or communications, ventilation, or monitoring is lost, do not search for the cause from inside; evacuate immediately and reassess from outside the space.

The attendant must continuously account for entrants from outside the opening and must not lose observation or communication because of other duties. Rescue is not something to consider after an accident. Before entry, confirm how to contact the rescue team, its arrival time, equipment suited to the space geometry and hazards, the possibility of non-entry retrieval using a tripod, winch, and full-body harness, and records of first aid and training. Following an unconscious coworker inside without protection turns the rescuer into a second casualty. The latest NIOSH training material also emphasizes never entering without an attendant, exiting immediately when hazardous conditions appear, and preparing rescue training and an emergency plan in advance.

Final pre-entry field check

  1. Have methods of performing the work from outside been considered, and has the need for entry been approved?

  2. Have residues, expected gases, physical hazards, and hazards newly created during the work been assessed?

  3. Have all piping, pressure, electrical, mechanical, hydraulic, pneumatic, and gravitational energy sources been identified and isolated?

  4. Have the calibration status, functional test, pump, hose, and alarms of an instrument suitable for the expected substances been checked?

  5. Without inserting any part of the body, have the top, middle, bottom, blind spots, and travel routes been tested adequately by remote means?

  6. Have oxygen, flammable, and toxic hazards been checked according to the instrument’s characteristics, and have the actual values been recorded?

  7. Have the same locations been retested after ventilation, and is there a method for maintaining acceptable conditions during the work?

  8. Have the work permit, access control, attendant, communications, continuous monitoring, and immediate evacuation criteria been established?

  9. Are a practicable rescue and retrieval plan and training in place to prevent impulsive entry rescue?

  10. Has everyone confirmed that current laws, site procedures, and equipment-specific standards take precedence over this common protocol?

Confined-equipment safety comes not from a single measurement but from an unbroken management chain of hazard identification, isolation, correct sampling, ventilation, retesting, monitoring during work, and rescue preparations. If any one step cannot be verified, the principle is to postpone entry even when the readings appear favorable.

References

Cover photo

Original photo on Pexels