Write a risk assessment for Work at a petroleum storage terminal. Sampling of liquid fuels from storage tanks and road tankers. The task involves climbing onto the roof of a storage tank, opening the hatch, and collecting a fuel sample. It also includes determining the quantity of fuel stored in the tank. Some of the tanks do not have flat roofs; instead, their roofs are curved in a dome-like shape. The hatch opening is very small, approximately 5 cm in diameter. During sampling, the employee must carry sampling equipment, a rope, and several sample containers. This makes it difficult to maintain stable footing and balance while performing the sampling operation, particularly when working on the curved tank roof.

Sampling liquid fuels from storage tanks and road tankers at a petroleum terminal is a high-hazard task because it can combine work at height, flammable atmospheres, manual handling, vehicle movement, and potential confined-space conditions. The safe approach is to complete a task-specific risk assessment, use a permit-to-work system, eliminate or reduce the need to climb where possible, control ignition sources, verify hazardous-area requirements, and ensure workers are trained, supervised, and equipped for both fall protection and emergency rescue. A written fall protection work plan and rescue arrangements should be in place before work starts, and any activity that could become confined-space entry must be separately assessed and controlled under a confined-space permit system. [2] [12] [7]

A practical risk assessment for this work should cover the following task stages: access to tank or tanker, climbing ladders or stairs, movement on fixed-roof or dome-roof surfaces, opening hatches, sampling and gauging, handling and transporting samples, descent, and departure from the area.

• Falls from ladders, stairs, platforms, tanker top walkways, tank roofs, and through openings
• Loss of balance on curved or sloped dome roofs, especially in rain, ice, wind, poor lighting, or while carrying equipment
• Slip and trip hazards from wet/oily surfaces, hoses, sample lines, uneven roof plates, and poor housekeeping
• Exposure to flammable vapours at hatch openings during sampling, gauging, and quantity measurement
• Ignition from static electricity, non-rated electrical equipment, vehicles, phones, torches, metal impact, or smoking materials
• Manual-handling strain from sample thieves, tapes, water-finding paste, bonding leads, and filled sample containers
• Vehicle hazards around road tankers, including movement, reversing, and struck-by risk
• Potential confined-space escalation if any part of the body enters a tank opening beyond normal external sampling/gauging, or if rescue/retrieval from an opening is required
• Weather and environmental hazards such as heat stress, cold stress, lightning, and reduced grip on curved roofs

[2] [10] [15] For storage tanks and road tankers, the preferred control is to avoid climbing and opening hatches whenever reasonably practicable. Use closed or lower-risk systems first, such as fixed sampling points, closed-loop sampling, automatic gauging, remote level measurement, or sampling from grade-level cabinets. If the task cannot be eliminated, use the hierarchy of controls: engineered access platforms and guarded walkways before ladders; fixed guardrails before personal fall arrest; and administrative controls and PPE only as supporting measures. [2]

Safe work procedure for routine sampling and gauging:

1. Confirm the task scope, product, tank/tanker identity, sampling point, and whether hatch opening is actually necessary.
2. Review the task-specific risk assessment, hazardous-area classification, weather, lighting, and nearby operations such as loading, venting, hot work, or vehicle movement.
3. Issue the required permit to work. At minimum this is typically a general/task permit for petroleum operations; add confined-space, hot-work, isolation, or line-breaking permits if conditions require them.
4. Verify the tank or tanker is stable and safe to access. For road tankers, immobilize the vehicle, apply brakes/chocks as required by site rules, and control traffic around the work area.
5. Inspect access systems before use: stairs, ladders, cages, platforms, handrails, tanker top gantries, and anchor points. Do not use damaged or contaminated access equipment.
6. Inspect fall-protection equipment before use and ensure the selected system matches the task: travel restraint is preferred where possible; fall arrest only where a fall cannot be prevented and rescue is assured.
7. Use intrinsically safe or otherwise area-approved equipment only. Bond/earth equipment where required by site procedures, and control static-generating clothing or tools.
8. Test the atmosphere if required by site rules or if there is any doubt about vapour accumulation, especially near hatch openings, floating roofs, domes, sumps, or partially enclosed areas.
9. Ascend maintaining three points of contact and keep hands free by using tool bags, hoists, or shoulder straps rather than carrying loose items while climbing.
10. Before stepping onto a roof, confirm the walking surface, route, edge protection, and anchor/tie-off arrangement. Avoid stepping onto curved or wet surfaces unless the route and footing are controlled.
11. Position yourself upwind where possible before cracking open a hatch. Open slowly to relieve pressure and avoid standing directly over the opening.
12. Keep face and breathing zone away from the hatch. Minimize opening size and opening time. Never lean into the opening or place any part of the body inside unless the job has been reclassified and controlled as confined-space entry.
13. Take the sample using non-sparking, compatible, clean equipment. Avoid overfilling containers. Cap and label samples immediately.
14. Carry out gauging/quantity measurement using approved tapes, gauges, and procedures that minimize splash, vapour release, and static generation.
15. Close and secure the hatch promptly after sampling/gauging. Confirm seals, caps, and locks are reinstated.
16. Descend carefully, maintaining three points of contact, and transport samples in suitable carriers or secondary containment to the designated sample handling area.
17. Record the sample, any abnormal conditions, gas-test results if taken, and any defects in access, fall protection, or tank condition.

[8] [10] [4] Working on fixed-roof and dome-roof tanks requires special controls because curved surfaces increase the chance of slipping and losing balance, and hatch work often places the worker near an unprotected opening. Use permanent stairs, platforms, and guardrails where installed. Where workers must move beyond guarded areas, a site-specific fall protection plan should define the route, anchor points, tie-off method, exclusion zones, and rescue method. On curved roofs, travel restraint is generally safer than allowing exposure to a fall edge or hatch opening. Workers should not carry bulky items by hand across the roof; use lifting lines or mechanical means. [12] [11] [9]

Fall protection should be selected and used systematically. A personal fall arrest system consists of a body harness, anchorage, and connector; anchors must be suitable for the intended loads and located to minimize swing fall and free fall. Keep lanyards as short as practicable, inspect harnesses, lanyards, connectors, and labels before use, and remove damaged equipment from service. Do not improvise anchor points on vents, pipework, handrails, or weak roof appurtenances. Where tanker top access is needed, use fixed gantries, guarded platforms, or engineered overhead lifeline systems rather than relying on ad hoc tie-off. [11] [13] [14]

The fatality record shows why strict fall controls are necessary. Workers have died after removing harnesses on tank roofs, working near roof openings, or using poorly rigged systems with excessive slack. For sampling and gauging, this means no one should access a tank roof or tanker top without the required fall controls in place, and hatch/opening areas must be treated as fall hazards as well as vapour-release points. [9] [15]

Flammable vapour and ignition control are critical during hatch opening, sampling, and gauging. Petroleum vapours may be released suddenly and can ignite from unsuitable blowers, extension leads, static discharge, or other non-approved equipment. Control measures should include hazardous-area classification of the task location, use of ATEX/DSEAR-compliant equipment in zoned areas, prohibition of smoking and hot work unless separately permitted, control of vehicles and portable electronics, bonding/earthing where required, and stopping work if vapour conditions become abnormal. If forced ventilation is used near petroleum tanks, the equipment must be suitable for flammable atmospheres and arranged so it does not create an ignition hazard. [4] [4] [3]

For ATEX/DSEAR compliance, the employer should classify hazardous places where explosive atmospheres may occur, assess ignition risks from equipment and work activities, select appropriately certified equipment, and implement controls to prevent explosive atmospheres from being ignited. In practice for petroleum sampling, this means treating hatch openings, vents, tanker top compartments, and nearby low points as potentially hazardous zones; using only approved portable gas detectors, torches, radios, and sampling devices; and ensuring permits, signage, and worker instructions reflect the zone controls. Even where local law differs, the underlying requirement is the same: identify explosive atmosphere risk and use equipment and procedures suitable for that risk.

Confined-space considerations are especially important. Routine external sampling from outside a hatch is not automatically confined-space entry, but the risk assessment must prevent the task from drifting into entry conditions. If a worker must break the plane of the opening with the head or torso, descend into the tank, or perform rescue/retrieval involving entry, then a confined-space program, permit, atmospheric testing, isolation, attendant, communications, and rescue capability are required. Tanks can contain oxygen-deficient, toxic, or flammable atmospheres even after draining. [10] [10] [1]

If confined-space controls are triggered, key requirements include hazard assessment, isolation/lockout, purging or ventilation as needed, calibrated gas monitoring, trained entrants and attendants, communications, rescue notification, and suitable retrieval/fall-arrest equipment. The surrounding area should also be checked for drifting vapours and other external hazards before entry. [1] [1] [1]

Manual-handling controls should address the weight and awkwardness of sampling devices, tapes, bonding cables, and filled sample bottles. Use the smallest practical sample volume, lightweight equipment, shoulder bags or holsters that keep hands free, and mechanical lifting aids or tag lines for raising/lowering equipment to roofs. Avoid twisting while standing on ladders or curved roofs, and never climb while carrying open containers. Plan the route so samples can be transferred promptly to a secure container rack or transport case.

PPE for this work should be selected from the risk assessment and site rules.

• Flame-resistant or anti-static clothing suitable for petroleum terminal operations
• Chemical-resistant gloves compatible with the fuel handled
• Safety glasses or goggles; face shield if splash risk is significant
• Hard hat where overhead or access hazards exist
• Slip-resistant safety footwear suitable for oily metal surfaces
• Portable gas detector where required by the risk assessment or permit
• Fall-protection equipment appropriate to the access system: full body harness, suitable lanyard/SRL, rope grab, and approved anchors
• Respiratory protective equipment only where justified by assessment and within a proper respiratory protection program; it is not a substitute for controlling vapours at source

[1] [5] [13] Emergency arrangements must cover both fall rescue and petroleum/fire emergencies. A written rescue plan should identify who rescues, how rescue is initiated, what equipment is on site, communication methods, access routes, first-aid arrangements, and transport to hospital. Relying only on public emergency services is not enough for a suspended worker. If fall arrest is used, the team must be able to recover the worker immediately because suspension trauma can develop within minutes. Rescue planning must also consider that the same vapour, fire, structural, or weather hazards that caused the incident may endanger rescuers. [7] [7] [7]

The rescue plan should be job-specific and reviewed before each shift or whenever conditions change. It should include rescue methods such as self-rescue, ladder rescue, retrieval lines, rope rescue, or use of mobile equipment where appropriate; backup communications; emergency exits and access routes; and procedures to secure the area so rescue is not obstructed. [6] [6] [5]

Regulatory requirements vary by jurisdiction, but petroleum terminal sampling operations are typically governed by occupational safety law, work-at-height rules, hazardous-area/electrical rules, dangerous substances/fire and explosion rules, PPE requirements, and site major-hazard or petroleum licensing requirements. At a minimum, employers should ensure: documented hazard assessment; permit-to-work; worker training and competency; inspection and maintenance of access/fall-protection/gas-testing equipment; emergency response planning; hazardous energy isolation where relevant; and compliance with hazardous-product labeling and sample container requirements. For UK-style regimes, this aligns with HSWA, Management Regulations, Work at Height Regulations, PPE at Work, PUWER, LOLER where lifting is used, DSEAR, and ATEX equipment obligations. For US/Canadian regimes, equivalent OSHA/OHS and fire-code duties apply.

In summary, a defensible safe system for petroleum fuel sampling is: avoid roof access where possible; use engineered access and closed sampling systems; control falls with a written plan and rescue capability; treat hatch opening as both a fall and vapour hazard; use only area-approved equipment; prevent ignition and static; escalate to confined-space controls if entry conditions arise; and train, supervise, and audit the task rigorously. [4] [12] [3]