Professional Documents
Culture Documents
Chapter 13 Instrumentation and Control: 13.1 Scope
Chapter 13 Instrumentation and Control: 13.1 Scope
13.1 Scope
The new tanks shall be controlled and monitored from Control Center located in PS at YANBU
city feeder line-3 as described in chapter 5.3 of this document. In addition, the system shall be
monitored from Dispatch Center Riyadh as described in section 13.7.
The dominating overall function of the instrumentation and control equipment is to guarantee a
continuous water flow throughout the water transmission system.
This means that the technological process for operating the pipelines shall be considered each
as an entire unit from the related supply tanks up to the endpoints including the various
stations in-between.
Therefore, the objective of the control system is not reduced to monitoring and control of the
several stations, it has also to handle following overall functions:
• Start-up and shutdown of the pipeline system as a result of start-up and shutdown
according to the operation scenarios.
• Monitoring and control of the pipeline flow rate according to the system conditions
(e.g., levels of tanks and reservoirs).
• Emergency and safety functions.
• Operation optimization (e.g., pump scheduler).
• Monitoring of cathodic protection.
• Monitoring of power consumption.
• Leak detection and leak location detection for pipeline system.
• Time synchronization between all control system equipment (hierarchical principle).
• Continuous alarm management.
The contractor scope of work shall include to modification, upgrading and/or replace the
existing control systems which may be used for the new required system (e.g., DCS/SCADA
software/hardware, LDS, GPS, …etc.).
The control system of the new WTSs shall include the following main components:
a) CC - Control Centre
• Monitoring and control of the main process, the CC itself and all relevant systems
at any station, including monitoring of the communication system
• Pipeline control for monitoring and control of the process of the pipeline (e.g.,
SYSCON)
• Optimization, pipeline management and leak detection
• Pipeline Safety Functions
• Central and local components of a third-party intervention system
• Dispatch Center interface
YANBU STRATEGIC TANKS
The “SWCC Cyber security requirements in projects, agreements and change management
for industrial control systems and its devices” shall be followed (see volume XIII of the tender
documents) as well as HCIS security directives listed in SEC-12 (latest version).
A control and communication system cyber security risk evaluation, as per NCA rules and
regulations, shall be performed in coordination with SWCC during detail design to verify and
validate cyber security requirements/measures at hardware and software levels. All required
work, equipment and accessories as per the risk evaluation and corrective measures are part
of scope.
Software and configuration of all control levels shall be protected against unauthorized
modifications, the possibility of loss of data integrity shall be minimized by sensor protection
against recalibration. Wireless communication in control loop is prohibited.
A verification of the software integrity shall be also included (operation system, control
software packages, engineering tools, etc.), e.g., by using of anti-virus software modules,
whitelisting, hardened operating systems or other methods.
A project related cyber security specification based on measures foreseen to protect the
system shall be prepared by Contractor. The specification is subject to final design and
approval by SWCC.
Furniture (e.g., desks, chairs, tables, cupboard, garbage cans, working place lighting) required
for the operation of the control system is part of the scope.
It is the responsibility of the Contractor to inform himself about the actual situation on site and
to make all necessary checks and investigations in order to verify the actual as-build status
and the configuration of the control systems as well as the available space/system capacity for
extensions and interfaces. Further the Contractor has to obtain and verify all information which
is required to implement the specified functionality and to perform all coordination works for
internal and external interfaces with SWCC (e.g., MEWA), other contractors and authorities.
During modification, extension or replacement works at any station it is mandatory not to
disturb safe operation of existing systems in operation. Necessary shut down period, if
required, must be limited to the absolute minimum and must be coordinated with the
responsible O&M department of SWCC respectively NWC. If necessary, suitable temporary
provisions must be foreseen to allow continuation of operation.
Two (2) independent Water Metering Systems and an (1) Online Monitoring System forms the
boundary limit between water transmission and distribution system. The systems, except
water meters, shall be installed in the Water Metering and Online Monitoring Building.
Water Meter and Online Monitoring Systems and associated communication equipment shall
be located in secured cabinets, dedicate for each system, lockable with dedicated keys and
capable of being sealed to prevent unauthorized access.
The communication system providing data to the central control system at AWTS Control
Center shall be independent of the operational process network to avoid potential conflicts of
interfacing and protocols.
Data provision to downstream water distributor has to be implemented as per “Seawater
Desalination Code”.
It is in the Contractor’s responsibility to obtain and verify all information which is required to
implement the specified functionality and to perform all coordination works for internal and
external interfaces with system owners, other Contractors and authorities.
YANBU STRATEGIC TANKS
To reduce maintenance effort and provide uniformity instrument and control system equipment
shall, as far as possible and under consideration of contract requirements, be of same make
and type as already installed at the local station.
The clarification of all software functions shall be supported by a virtual environment. This
virtual software environment shall cover the entire or at least several typical stations. Any
verification/clarification of the individual software functions as well as of the individual screens
shall be based on the approval of the relevant specifications as well as on the presentations of
the control software implementation, using this virtual environment. These presentations shall
be part of the engineering meetings or other regular meetings.
An integrated FAT (IFAT) shall be performed to demonstrate that the implemented control and
communication system functionality is as per project requirements.
YANBU STRATEGIC TANKS
Chapter 14 COMMUNICATION
14.1 General
A communication system shall be installed that ensures and secures the reliable
communication between all stations along the pipeline system.
For detailed technical requirements reference is made to the following specifications:
• QC10-H-127 S07 “Fiber Optic Cable for Pipelines”
• QC10-H-128 S08 “Fiber Optic Cable Conduit and FOC Installation”
• QC10-H-129 S09 “Communication System”
• QC10-H-131 S11 “Cyber Security System”
• Volume XIII Item 10 “Network Communication Technical Specification”
It is the responsibility of the Contractor to inform himself about the actual situation on site and
to make all necessary checks and investigations in order to verify the actual as-built status and
the configuration of the communication system as well as the available space/system capacity
for extensions and interfaces. Further the Contractor has to obtain and verify all information
which is required to implement the specified functionality and to perform all coordination works
for internal and external interfaces with SWCC O&M, other Contractors and responsible
Authorities.
During modification, extension or replacement works it is mandatory not to disturb the safe
operation of the existing pipelines. Necessary shut down period, if required, must be limited to
the absolute minimum and must be coordinated with SWCC O&M. If necessary, suitable
temporary provisions must be foreseen to allow continuation of operation.
New FOC shall be installed along the new pipelines to interconnect all stations of the new
systems and arrange interconnection between different systems and selected stations of the
existing system, including the relevant accessories and termination at the optical distribution
boards.
Communication includes the following independent networks:
a) Process Networks
• A fully redundant optical communication system, based on industrial Ethernet
switches, and routing functions shall be set-up including interconnections between
the systems for process data exchange in a redundant ring configuration.
• Back-up communication link including necessary routing functions shall ensure
continuous connectivity for process data exchange.
b) Telephone System/ Office WAN Networks
• An optical communication system, based on industrial Ethernet switches, shall be
set up for pipeline system in a single ring configuration in compliance with HCIS
SEC requirements.
c) Security Networks
• A dedicate communication system, based on industrial Ethernet switches, shall be
set up individually for each pipeline system for out-of-band security management.
d) Network Management System
• Monitoring and engineering system for all communication system components
within the three independent networks, including data transfer monitoring to
identify and/or to avoid cyber-attacks.
Final set-up and configuration of communication network is subject to SWCC/Engineer
approval.
YANBU STRATEGIC TANKS
If network protocols are required to build a logical loop-free topology for different Ethernet
networks only non-proprietary routing protocols shall be applied. In light of this a Rapid
Spanning Tree Protocol or Multiple Spanning Tree Protocol or equivalent is required. It is
essential that the Spanning Tree for each network or for each VLAN group and blocks are
independent. Also, the usage of MPLS (Multiprotocol Label Switching) or only MPLS-TP will
be acceptable. Shall routing between different networks be required routing protocol like
OSPF (Open Shortest Path First) shall be used.
Therefore, security measures shall be implemented to protect the integrity of networks and
end devices, detect malicious activities, quickly respond to attacks and recover the system to
a known good state before any serious damage can be done to the technological process as
specified in S11, “Cyber Security System”.
Contractor shall provide a dedicate cyber security specification document, based on the
measures foreseen to protect the system, for SWCC approval.
A control and communication system cyber security risk evaluation, as per NCA rules and
regulations, shall be performed in coordination with SWCC during detail design to verify and
validate cyber security requirements/measures at hardware and software levels. All required
work, equipment and accessories as per the risk evaluation and corrective measures are part
of scope.
14.2 Network Topology
Existing and new FOCs shall be used to establish the required networks and shall be used for
redundancy and backup purposes as well as to establish the communication link to PSTN.
For process data exchange the control center and the stations along the pipelines shall be
connected with redundant process networks (A and B) – ring topology. Each station, including
the control center shall be equipped with at least two industrial Ethernet switches. One of
these switches is being part of one of the redundant communication networks.
A telephone and office network, independent and non-redundant, shall interconnect all
stations along the pipeline system.
14.3 FOC Network
One (1) FOC with 72 fibers shall be installed along the new laid pipeline for transmission
system from the pumping station till tie-in station. The FOC shall be dedicated to process,
security, telephone and office networks.
The FOC shall be installed inside a protection twin-conduit which shall be laid at 2 or 10
o’clock position within the pipeline trench on the side (not in-between the pipelines). For the
single line sections, the FOC shall be installed inside a protection twin-conduit which shall be
laid at 2 or 10 o’clock position within the pipeline trench.
The conduits shall be laid such as to reach the respective control room, preferably by looping
in and out without increasing the number of pits.
The FOC network shall be terminated at each location at FODFs, which shall be either wall
mounted or standalone. All FODFs shall have LSH connectors only. At stations with existing
installations shall the connectors be used as already in use.
For the interconnections within the various stations or extra connections between buildings,
control rooms, pump stations, old reservoirs with new reservoirs, etc. or any other
interconnections needed inside one site or more, all required FOCs shall be supplied and
installed in compliance with the technical requirements as defined in the Specifications S07.
Cable lying within stations shall be performed within cable cellars on cable trays, in cable
ducts or within cable conduits, depending on location.
All FOCs, FOC related accessories and work required forming a proper communication FOC
network along the pipeline is part of the scope.
YANBU STRATEGIC TANKS
The telephone system and the relevant network components system shall be designed such
that maximum half of the telephones in one room fail due to a single component’s failure. In
addition, it shall be ensured also that in case of a single component failure and in rooms with
only a single telephone at least the neighboring room’s telephone is still working.
PABXs shall be able to work in redundant mode and thus manage all telephones in a
redundant primary/secondary call server configuration.
Standard features such as conference call, missed call list, call diversion, group call, calling
party identification, etc. shall be provided.
The central management system for the complete VoIP telephone system shall be located at
Control Center. Alarms shall be forwarded to the control system at the Control Center.
It is the Contractor’s responsibility to gather all as-built documents and to perform the required
site investigations and coordination. All modification/necessary extension to existing
installations is also within scope of the Station Contractor.
14.6.2 Hotline System
A hotline system shall allow a direct connection to Control Center.
The hotline telephone system shall be a part of the telephone system.
Red colored hotline VoIP telephones with audio-visual ringers and alphanumeric display shall
be installed at each pumping station and terminal station. The Control Center shall be
equipped with at least two (2) hotline phones.
Calls initiated from those phones shall have pre-emption rights to standard VoIP phones and
public telephone system gateways. All hotline phones shall have direct dial buttons
preconfigured with the numbers of all other hotline phones of the new system.
14.6.3 Office WAN
The Office WAN shall be implemented as part of the telephone and office network. The
minimum data rate along the pipeline shall be 200 Mbps. No redundancy or backup links shall
be implemented.
Office Ethernet switches with at least 48 ports shall be provided at those stations with offices.
These office Ethernet switches shall be connected to the station UPS as well.
In offices, meeting rooms, instrumentation room and control rooms Office WAN outlets shall
be provided beside each telephone outlet. This is also applicable for workshops, safety and
security buildings and guard houses.
Coordination with SWCC IT department for all stations and interfacing with existing Office
WAN shall be part of scope.
All active components of the communication system shall be permanently monitored and
controlled via a network management system.
The network management system (NMS) shall be redundant and located at Control Center.
Alarms indicating equipment faults, loss of connectivity or unavailability of e.g., backup links
shall be forwarded to the control system at the Control Center.
The NMS shall also monitor the entire data traffic for online analysis and to detect any
unauthorized data access or unusual data transfer within one of the networks. In case of
identification of an event an appropriate alarm shall be initiated to the operator.
YANBU STRATEGIC TANKS