Fall Protection for Second-Story and Roof Work
Purpose
This standard guarantees that on the rare visit where a tech's feet actually leave the ladder and land on a roof or platform, that tech is tied into a rated system before the first step, not observed carefully while free-walking a wet slope. Most pressure-washing roof and gutter work never reaches this point, because the Ladder Work and Roof Access Safety Standard's ground-and-ladder default handles it. This SOP exists for the case that default cannot: a clogged valley that needs hand scraping, a dormer a wand cannot reach past an overhanging tree, a low-slope commercial section with a genuine walkable deck. Treat that case like routine ladder work and the roof surface the wash just soaped or algae-loosened does exactly what an untied slope does.
Scope
Covers only the escalation SOP #1 hands off: real foot traffic on a roof surface or any elevated platform above the ladder's own working height, on residential steep and low-slope roofs and light-commercial flat roofs. It does not cover ladder setup or use, which SOP #1 owns, the general mechanics of what makes a wet surface slick, which the Wet Surface Slip Hazard reference owns, or clearance from overhead lines while working on a roof near one, which the Working Near Overhead Power Lines Standard owns and this SOP does not restate.
Roles and the handoff between them
| Role | What they own | What they hand off |
|---|---|---|
| Technician on site | Confirming the escalation is real, sizing and rigging the system, the actual roof work | A signed-off reason for access and a completed, logged pass |
| Lead tech or owner | Sign-off before any foot leaves the ladder | Approval or a refusal, with an alternative access plan named |
| Whoever installed or last certified the anchor | The anchor's rated capacity and fastening into structural framing | A confirmed anchor a tech can trust without re-engineering it on the roof |
Fall-protection triggers and system types
OSHA's general industry walking-working-surfaces rule (29 CFR 1910.28(b)(1)) sets a 4-foot unprotected-edge trigger for fall protection generally; the roof-specific provision at 1910.28(b)(13) narrows that for roof work itself, requiring protection at 4 feet on a low-slope roof and at 6 feet on a steep roof (slope over 4-in-12). This is the general-industry standard, which is the one that applies to a service company washing an existing, occupied structure; the construction standard at 1926.501 is written for a roof under active construction and is a different Part, confirm which one governs before assuming either applies to a specific job.
Three system types cover the trigger: a guardrail (rarely practical to rig for a single wash visit), a travel-restraint system (a fixed-length lanyard that physically keeps the tech from reaching the edge at all, the right default when the task itself does not require working at the edge), and a personal fall-arrest system, or PFAS (required when the task genuinely puts the tech within fall distance of an edge, with a full free-fall clearance calculation). Pick restraint over arrest whenever the task allows it: restraint prevents the fall outright, arrest only stops one already in progress.
The procedure
Confirm the escalation is real and get sign-off before anyone steps off the ladder. Document why the ground-and-ladder default cannot complete the scope: an obstruction, hand-tool work required in a valley, or a genuinely walkable low-slope deck. Get lead or owner approval on that reason. Acceptance: a written reason on the ticket plus a named sign-off, both in place before the climb. Wrong looks like "it's faster from up here" standing in as the reason. Stop rule: no documented reason and no sign-off means the tech stays on the ladder, and the section gets a different access plan for another visit. Hazard: this decision is made at the truck.
Select and size the system to this roof's actual geometry. For restraint, measure or pace the anchor-to-edge distance and pick a lanyard shorter than that distance minus the tech's own tool reach, so the system stops the body short of the edge with real margin. For arrest, verify full fall clearance for the anchor height and lanyard type. Acceptance: a written lanyard or SRL length matched to a measured distance, not a length grabbed because it was already on the truck. Wrong looks like using whichever lanyard is in the bin without measuring this roof's specific geometry. Stop rule: if the anchor-to-edge distance cannot be measured with confidence, default to a full PFAS with clearance math rather than trusting an estimated restraint length. Hazard: none yet, this is ground-level planning.
Set and rate the anchor before it takes a single climb. Locate a rafter or truss, from inside an attic access or by sounding through the decking, and set a roof anchor plate per its manufacturer's fastener spacing into that structural member, never a vent stack, satellite mount, ridge cap, or gutter. Acceptance: the anchor rates at least 5,000 pounds of force per attached worker, the recognized engineering figure for a personal fall-arrest anchor under 29 CFR 1926.502(d)(15) and used here as the trade benchmark, or carries a manufacturer's own documented rating, with fasteners confirmed into framing rather than decking alone. Wrong looks like an anchor screwed into half-inch sheathing with nothing behind it, which holds standing body weight but not a dynamic arrest load. Stop rule: any anchor that cannot be confirmed into framing does not get used; find the structural member first. Hazard: locate the anchor from inside or from the ladder, not by standing on the unprotected slope to eyeball it.
Don and inspect the harness, and connect it before your feet leave the ladder. Fit the full-body harness (leg straps snug, chest strap at mid-chest, D-ring centered between the shoulder blades), inspect the lanyard or SRL for cuts and UV damage, connect to the anchor, and pull-test the connection while still on the ladder. Acceptance: locked connection confirmed, tug test holds, two fingers fit under each strap. Wrong looks like connecting after already stepping onto the roof "just to get set." Stop rule: any inspection failure, frayed webbing, a shock pack already deployed, a snap hook that will not lock, retires that piece on the spot; nothing improvised from a ratchet strap or rope substitutes for it. Hazard: do this at the top of the ladder, braced against the rails, both hands free, before any weight shifts onto the roof.
Move onto the roof only inside the system's rated reach, and physically test the limit before trusting it. Step on, shift weight gradually, then deliberately lean to the restraint's stated limit at low commitment to confirm by sight that it stops short of the edge, before doing any real work. Acceptance: a visible margin between the system's limit and the edge, confirmed by looking, not by feel. Wrong looks like trusting the rated length on paper when the anchor ended up a few feet from where it was measured in step 2. Stop rule: any lean that reaches closer to the edge than expected stops work immediately for a re-measure or a re-anchor. Hazard: wet or moss-covered decking under the first weight shift is a slip risk even while restrained, and a restrained slip can still swing the body hard into a vent pipe or the anchor structure.
Finish the task, retreat to the ladder, and disconnect only once a hand is already on the rail. Complete the work, climb back to the ladder top, grip the rail, and only then unclip the lanyard. Acceptance: disconnect happens after at least one hand already has the rail. Wrong looks like unclipping while still standing on the roof to save a step on the way down. Stop rule: none if the sequence is followed; a tech found to have disconnected early gets retrained before the next roof access. Hazard: none when sequenced correctly; the entire hazard sits in reversing this order.
Remove the anchor plate and seal every fastener penetration before the ladder comes down for good. The anchor from step 3 was lag-bolted for this one visit, not left permanent; back the fasteners out, then seal each hole per the roofing material's own repair method (cement and a lifted shingle tab for asphalt, matched sealant for metal or tile), not a generic caulk bead. Acceptance: anchor removed, every fastener hole sealed and photographed. Wrong looks like leaving the anchor "in case the next visit needs it," an unrated point the next tech has no reason to trust. Stop rule: a hole that cannot be confidently sealed with material on hand gets a documented follow-up visit, not a guess that it holds through the next rain. Hazard: complacency here is real, since the harness can feel unnecessary once the wash is done; the same connected system from steps 4 and 5 stays on for this step too, disconnected only per step 6's sequence once it is also complete.
The record this produces
The ticket carries the documented reason for escalation and who signed off, the anchor's location and rated capacity, the system type and length used, the specific task performed on the roof, confirmation the anchor was removed and its penetrations sealed, and time on the roof. This is what lets a lead confirm, months later, that a given roof visit was a genuine escalation, not a habit forming, and that no lag-bolted anchor was ever left live on a customer's roof.
Worked pass: a moss-packed dormer valley under an oak canopy
A two-story colonial has a 7-in-12 dormer valley packed with moss that an overhanging oak blocks from any ground wand angle. Step 1: the obstruction is documented and the owner signs off by phone before the tech climbs.
Step 2 fails first: the tech grabs a 15-foot self-retracting lanyard off the truck without measuring. The planned anchor point, a ridge strap, sits only about 10 feet from the valley edge along the slope, and a tool reach of about 3 feet means anything longer than about 7 feet would let the tech's tool reach the edge itself. The 15-foot line fails the sizing check before any climb happens, and the stop rule swaps it for a fixed 6-foot restraint lanyard, leaving roughly a foot of margin (10 feet minus 6 feet of lanyard minus 3 feet of tool reach).
Step 3: the rafter under the dormer is located from the attic access below it, and an engineered roof anchor plate is lag-bolted per its label's fastener spacing into that confirmed rafter.
Step 4: the harness is donned and the tug test on the ladder holds solid.
Step 5: the tech steps onto the valley, shifts weight, and the intentional lean confirms the 6-foot restraint stops about a foot short of the edge, matching the step-2 math. The moss is scraped by hand from within that margin.
Step 6: the tech retreats to the ladder, takes the rail with one hand, and disconnects.
Step 7: the fastener heads are stripped from the earlier tug test, no clean removal from the ladder alone. The tech re-harnesses, reconnects per steps 4 and 5, backs the fasteners out with a bit that grips the damaged heads, and seals the four resulting holes with roofing cement lifted under the adjacent shingle tabs, photographed, before disconnecting again.
The ticket records the task, the corrected system (6-foot restraint after the 15-foot SRL was rejected at sizing), the confirmed rafter anchor, the anchor removal and four sealed penetrations, and the owner's phone sign-off.
References
- See related: Ladder Work and Roof Access Safety Standard (the ground-and-ladder default this SOP escalates from)
- See related: Working Near Overhead Power Lines Standard
- See related: Wet Surface Slip Hazard Reference
- OSHA 29 CFR 1910.28(b)(1) and (b)(13), fall protection on walking-working surfaces and roofs, general industry
- OSHA 29 CFR 1926.502(d)(15), personal fall-arrest anchor capacity, used here as the recognized engineering benchmark
- Roof anchor manufacturer's installation instructions for fastener spacing and rated capacity