Getting a Suspended Worker Down

Purpose

To get a worker whose fall has been arrested off suspension and onto a surface, using resources that are already on site, in a sequence that does not create a second casualty. This SOP owns the procedure and the decision authority. The physiology and the timing that make speed the governing constraint are covered in the related card on suspension trauma; this document assumes you have already accepted that the clock runs in minutes.

Scope

Applies to any work where a personal fall arrest system is in use and a worker can end up hanging: rooftop mechanical work, tank and vessel exteriors, elevated platforms, structural steel, tower and antenna work, and anywhere a boom or bucket puts a worker over an edge. It runs from the instant a fall is arrested until the worker is on a surface and handed to emergency medical services. It does not cover confined space entry rescue, which is a different standard and a different team.

Before anyone moves: three things that stop the rescue

These are not cautions to read once. Each one halts the procedure until it is answered.

Energized conductors. If the worker, the lifeline, or the route a rescuer would take is within reach of an overhead conductor or an energized bus, nobody touches the worker or the line. The circuit is de-energized and proven dead by a qualified person, and locked and tagged, under 29 CFR 1910.333(b)(2) for general industry work or 29 CFR 1926.417 for lockout and tagging of circuits on construction work, before any rescuer makes contact. A rescuer grabbing a lifeline that is leaning on a service drop turns one casualty into two in under a second.

The rescuer's own anchorage. Any rescuer who goes over the edge, leans past a guardrail, or works within a fall distance of the edge is on their own fall protection, connected to an anchorage that is not the one holding the suspended worker. Sharing the anchorage means one failure takes both people. The anchorage rating for a personal fall arrest system under 29 CFR 1926.502(d) is 5,000 lb per attached employee, or a system designed with a safety factor of at least two under the supervision of a qualified person, and "per employee attached" is the phrase that matters here.

The load on the connection. Never cut, unhook or release a lanyard, lifeline or connector that is holding the worker's weight. The worker goes onto a second, independent system first, that system takes the load, and only then does the arrest connection come off. Every route below is a way of satisfying that order.

Roles and responsibilities

Name the incident commander before the job starts, not during the event. The failure mode of an unplanned rescue is three people making three partial attempts.

Procedure

1. Call it. Shout the emergency, name the location on the structure. Everyone else on the crew stops what they are doing. Nobody approaches the edge yet.

2. Clear the three stoppers above. Look up for conductors. Confirm which anchorage the rescuer will use. Confirm the worker's line is loaded and nobody is about to touch it. This takes under thirty seconds and it is the only part of this procedure that is not a race.

3. Place the 911 call. Say the words "worker suspended in a fall arrest harness" and give the time of the fall. That phrase changes the resource dispatched and it changes the medical handover later. Place this call even when you intend to complete the rescue yourselves, because a worker who has been suspended needs medical assessment regardless of how they came down.

4. Make contact and establish consciousness. From a protected position, call to the worker by name. A responsive worker changes the route: prompt them to deploy suspension relief steps and to get a foot against structure if there is structure to reach. An unresponsive worker rules out every self-rescue option immediately, and that determination is a decision point you record rather than a thing you keep re-testing.

5. Pick the route and commit. The options, in the order they are usually available on service work, with what each requires:

   • Lower on a pre-rigged system. A rescue or descent device already rigged at the anchorage, controlled from the protected side. Fastest where it exists. Requires the device, two trained people and a landing area confirmed clear of obstructions before the descent starts.
   • Raise to the working level. A rescue haul system with mechanical advantage. Slower than lowering and harder on the rescuers, but correct where the ground below is obstructed or the drop exceeds the rope.
   • Aerial lift. Bring the platform under the worker, take their weight on the platform floor, then release the arrest connection. The lift operator wears a body harness with the lanyard attached to the boom or basket as required by 29 CFR 1926.453, and the platform is positioned so it never contacts the worker or the lifeline on the way in. Do not push a worker with the platform.
   • Outside rescue resource. The fire department or a contracted rescue team. This is a route, not a plan; the time gate below decides whether it is the right one.
   • A ladder is not on this list. Getting a limp adult off a lanyard and down a ladder is not achievable by one person, and it puts a second person on an unsecured ladder under an unbalanced load.

6. Execute the transfer in order. Second system attached and loaded, worker's weight visibly transferred, then the arrest connection released. Watch the worker's clothing and the two lines for entanglement before releasing anything.

7. Land clear. Confirm the landing area is free of obstructions, edges and equipment before the descent begins, not during it. A controlled lower onto a stack of material is a fall the arrest system already prevented once.

8. Hand over. Tell the arriving medical crew the time of the fall, the total minutes on suspension, whether the worker was responsive, and whether they struck anything. Positioning and treatment are theirs; do not apply a positioning rule you learned in a class.

9. Quarantine the equipment. Every component that took the fall comes out of service and does not go back in on a visual inspection. That is the requirement in 29 CFR 1926.502(d) for construction and 29 CFR 1910.140 for general industry, and it covers the harness, the connectors, the energy absorber and the anchorage connector, not just the obviously deformed one. Bag it, tag it, and keep it until the incident investigation is closed.

Time gates: choose the route before you need it

The only decision worth pre-computing is whether to wait for an outside resource. It is a comparison of two times, and both are knowable before the job.

Time A is your on-site capability: from the moment the incident commander says go, to the worker on a surface, measured in a drill on that site with that equipment. Time B is the outside resource, measured from your call to the worker off suspension, which is arrival plus their setup, not arrival alone.

Waiting is correct only when B is smaller than A. If A is 8 minutes and B is 15, waiting costs 7 minutes of suspension and the gate is immediate: execute on site, with the outside resource as backup and medical care. If you have no on-site capability, A does not exist and B is your only number, which means the job's rescue plan is whatever the fire department can do. Confirm that with them rather than assume it.

Worked example: a parapet fall on a rooftop change-out

Two techs replacing a rooftop unit on a commercial low-slope roof. One tech steps back past the parapet retrieving a lifting strap and is arrested on a shock-absorbing lanyard from a permanent roof anchor, hanging about 5 ft below the parapet against a masonry wall. He does not respond.

Every check the sections above impose gets its own line here, including the ones that came back clean.

Clock  Action                                    Note
0:00   Arrest. Partner hears it, calls it.       clock starts at arrest
0:20   Overhead conductor check: none within
       reach of worker, line or rescuer route stopper cleared, not skipped
0:35   Rescuer clips to the SECOND roof anchor,
       10 ft from the loaded one independent anchorage
1:10   911 placed: "worker suspended in a fall
       arrest harness, fell at 0:00"             placed even though rescuing
1:40   Voice contact from behind the parapet,
       no response self-rescue ruled out
1:50   Relief-step credit taken: none requires a conscious worker
2:00   Route decision. On-site lowering
       capability A = 8 min. Outside resource
       B = 15 min. A < B, so execute now.        gate computed before the job
2:30   Landing area below confirmed clear of
       material and the loading dock kerb confirmed before descent
3:40   Rescue line attached to worker's dorsal
       D-ring, tensioned, weight visibly
       transferred off the lanyard second system loaded FIRST
4:10   Lanyard released only after transfer
7:30   Worker on the ground, off suspension total suspension 7:30
9:00   Medical crew arrives, told: fell at 0:00,
       7:30 on suspension, unresponsive
       throughout, no observed impact
9:30   Harness, lanyard, both connectors and
       the anchorage strap bagged and tagged whole load path, not one part

Two lines are worth reading twice. The route decision at 2:00 took no deliberation because the comparison had been made in the pre-job briefing, which is the whole reason a gate is written down. And the transfer at 3:40 to 4:10 consumed 30 seconds of the 7:30, which is the cost of doing it in the right order and is never worth saving.

The failure version is short: the partner reaches over the parapet, unclips the lanyard to get some slack, and the worker drops the rest of the way to the loading dock. That is the most likely error under stress, and it is why the transfer order is stated three times in this document.

How to verify this SOP is real

Ask one question at a live job with an anchorage in use: point at the person who is incident commander for a fall right now, and point at the rescue equipment. Two fingers, no talking. If either finger has to travel to a truck, a phone or a name that is off site, A does not exist and your gate calculation is wrong.

Then run the drill on the site, not in the shop, with the equipment that is up there that day, and record the segments separately, because a single total hides which segment to fix. Re-run it when the crew changes: both trained people leaving on the same day silently deletes your on-site capability while the written plan still claims it.

References

• 29 CFR 1926.502(d), personal fall arrest systems for construction: anchorage strength of 5,000 lb per employee attached or a design with a safety factor of at least two under a qualified person's supervision, prompt rescue, and removal from service of components subjected to impact loading. General industry counterpart: 29 CFR 1910.140.
• 29 CFR 1910.333(b)(2) for general industry electrical work and 29 CFR 1926.417 for lockout and tagging of circuits on construction work, where a conductor is in reach of the worker, the line or the rescuer's route.
• 29 CFR 1926.453, aerial lifts, for the body harness and lanyard requirement on any lift used as a rescue platform.
• ANSI/ASSP Z359.4, assisted-rescue and self-rescue systems, in the edition adopted by your employer's fall protection program or your contract; it binds through that adoption.
• See related: universal-why-suspension-trauma-makes-rescue-a-timed-event for why the clock governs, and universal-what-fall-restraint-is-and-why-it-is-the-better-answer for the system that avoids this event.