Governing HMI Design

Governing document Classification: Open
SAS Operator Station HMI
Plant operation, maintenance and modification (OMM)

Technical and professional requirement, TR, Final Ver. 2.01, valid from 2009-12-17
Owner:
Validity area: Statoil/All locations/All value chains/On- and offshore

Governing document Classification:
SAS Operator Station HMI Open
1 Objective, target group and provision .................................................................................................................... 3

1.1 Objective ............................................................................................................................. 3
1.2 Target group ....................................................................................................................... 3
1.3 Provision ............................................................................................................................. 3
2 The design process .......................................................................................................................................................... 3

3 Goals and principles for interaction design ......................................................................................................... 4
4 HMI setup, layout and interaction ............................................................................................................................. 5
4.1 Physical layout and number of screens ................................................................................. 5
4.2 Page hierarchy and navigation.............................................................................................. 6
4.3 HMI interaction .................................................................................................................... 8
5 Requirements for presentation and interaction in the main area .............................................................. 9
5.1 Page design rules................................................................................................................. 9
5.2 Use and design of dialogue windows.................................................................................. 10
5.3 The trend system ............................................................................................................... 11
5.4 Alarm list and other lists .................................................................................................... 11
6 Detailed HMI requirements.........................................................................................................................................13
6.1 Introduction....................................................................................................................... 13
6.2 General information formats and elements......................................................................... 13
6.3 Information formats and elements for the process pages.................................................... 18
6.4 Dialogue windows.............................................................................................................. 41
6.5 Additional elements in ESD/PSD safety pages ..................................................................... 41
6.6 Additional elements in fire and gas safety pages ................................................................ 43
6.7 Additional elements in electro (HVAC) pages ...................................................................... 47
6.8 Alarm line format............................................................................................................... 49
6.9 Trend elements.................................................................................................................. 50
7 Additional information .................................................................................................................................................52

7.1 Definitions and abbreviations............................................................................................. 52
7.2 Changes from previous version .......................................................................................... 53
7.3 References......................................................................................................................... 54
App A Specification of the reference monitor used for developing the TR (informative)...........................55
Plant operation, maintenance and modification (OMM), Technical and professional requirement, TR, Final Ver.
2.01, valid from 2009-12-17
Page 2 of 55
1 Objective, target group and provision
1.1 Objective
The objective of this document is to provide requirements for the human machine interfaces on operator
stations for safety and automation systems (SAS). It will give the framework, general principles and the
philosophy to be applied when designing and evaluating the HMI in the SAS projects. Further, the design
rationale is provided and detailed requirements for the graphical formats and elements to be used are
presented.
SAS performs monitoring, logic control, safeguarding and information presentation in a plant. The HMI
requirements herein shall be common for all equipment that is connected to the SAS or have HMI
presentation in the CCR. The intention is to create a uniform user interface across all systems the CCR
operator will use.
The specification shall be used when designing graphical displays for new SAS operator stations for new
plants and SAS upgrade projects.
1.2 Target group

Personnel involved in project planning, project execution and operation of plants/installations.
1.3 Provision
This document is provided for in “Automation, Technical Requirements and Standards” (TR3030).
2 The design process

This standard introduces a set of requirements for the visual appearance of the SAS interface and some
interaction requirements. In order to design an efficient and user-friendly interface, there are specific
requirements to the design process.
TR1212 defines a set of "building bricks" (symbols, colours etc). The design process shall identify how the
building bricks shall be put together to pages in a hierarchy. During the design process, the structure of
the displays and pages shall be established, and the pages will be filled with symbols and elements like
separators, pipes, valves and pumps.
The design process shall be based on Human Factors principles and a recognized standard (e.g. ISO
11064), see GL1212 and TR0926 Annex B and C for more information.
2.01, valid from 2009-12-17
Page 3 of 55
3 Goals and principles for interaction design

In order to meet the Company´s HSE goals, the interface must be designed to be:
 Easy to learn, use and remember
 Error tolerant
 Efficient
 Motivating and comfortable to use
In order to meet these goals, the design shall be based on the following principles:
1. Based on operator tasks and logic rather than system logic/SCDs and P&IDs
2. Good visual order/structure; through correct use of colours, organising information in rows and
columns were possible, clear and concise graphics, and a good and representative illustation of the
process flow
3. No visual noise (clutter)
4. Making important objects and information easy to detect/identify, i.e. important information shall
catch the eye compared to less important information
5. Be consistent in structure and appearance
6. Based on operator competency
7. Be controllable, i.e. operators must be able to start and stop a process/the system, control its
direction and progress
8. Provide input/output flexibility, i.e. several ways of interacting e.g. via keyboard, mouse, and
functional keys
9. Provide feedback and status information
10. Be error tolerant, detect and correct errors and provide sufficient time for operator error correction
11. Meet operator expectations and conventions
12. Operator participation during design
2.01, valid from 2009-12-17
Page 4 of 55
4 HMI setup, layout and interaction
4.1 Physical layout and number of screens
4.1.1 Physical screen setup and layout
An operator station shall consist of two screens, one keyboard and one mouse connected to the operator
station computer. This also applies for normally unmanned workstations.
An operator workplace should consist of two or three operator stations.
4.1.2 Physical screen size

Traditional 4:3 screens or wide 16:9 (16:10) screens should be used.
 The smallest 4:3 screen should be 20 inches with at least 1280 x 1024 pixels resolution.
 The smallest 16:9 (16:10) screen should be 23 inches with at least 1920 x 1080 pixels resolution.
4.1.3 Screen layout with its various areas
4.1.3.1 General
In the two-screen operator station, pages shall be organised in areas as shown below:
Figure 1: Principal organisation of pages in the two-screen solution
4.1.3.2 Navigation button area

From this area, the user shall be able to:
 Navigate directly to all level 2 pages and indirectly to all level 3 pages.
 See status summary for alarm, suppression, blocking and hiding for underlying pages.
The navigation buttons for level 2 pages shall have fixed locations throughout all pages.
2.01, valid from 2009-12-17
Page 5 of 55
The navigation tabs for level 3 pages shall change according to latest selected level 2 page. These tabs
shall have a fixed location for each level 2 page.
When pressing a navigation button or a navigation tab, the corresponding process window shall appear in
the main area on one of the two screens. It shall be easy to select on which screen (left or right) the
window shall appear.
Two fields reflecting status of underlying pages shall be shown to the right of the navigation button and
the navigation tab:
 Field one: Alarm status, where the colour of the highest priority alarm shall be shown.
 Field two: In priority; either suppression, blocking or hiding status. Status for hidden alarms should
not be shown in the navigation tabs.
See GL1212 for recommended solution.
4.1.3.3 Alarm lines area

The last five alarm lines (both acknowledged and unacknowledged) of priority 1, 2, 3 and 4 shall be
displayed.
4.1.3.4 Main area

All windows for process, utility, alarm lists, trends, etc. shall be displayed here.
4.1.3.5 System button area

A row with system buttons shall be located at the bottom of each page, including vendor-specific system
buttons.
4.1.3.6 Find function area

An area for buttons and fields for searching and finding, see section 4.3.2. The find function can be
included in the system button area, releasing the find function area for other use.
4.2 Page hierarchy and navigation
4.2.1 Page hierarchy and page identification

The page hierarchy shall support flexible navigation via process flow/layout, via navigation button area
and via direct navigation keys.
For displaying process information, the following levels are defined:

 Level 1: Overview pages, typically shown permanently on a large screen display. No process control or
system interaction is available here. No requirements for large screen displays are (at present)
specified in TR1212.
 Level 2: System or sub-plant overview pages showing selected and most important information about
the process. Here, the user shall be able to interact with the process. These pages should give a quick
overview and function as a road map to the underlying sub-processes where equipment details are
given. Typically, it should be possible to start and stop major systems and equipment (e.g. pumps and
compressors) and interact with important controllers from these pages. The pages should show
important pre-alarms/warnings and relevant group alarms. The PSD hierarchy is found on this level.
 Level 3: Detailed process pages, where the complete process control shall be available. PSD levels are
on this level.
2.01, valid from 2009-12-17
Page 6 of 55
 Level 4: Detailed auxiliary and support pages. Also detailed pump control, lubrication and compressor
control pages are found on this level. Further, PSD equipment protection pages are on this level.
All predefined pages shall have a unique and unambiguous identifying title to be located at the top of the
page. It shall be consistently positioned and express the display content (e.g. a specific compressor
stage). The title used on a page and its linked/associated navigation buttons or labels should be identical
(although consistent truncations are allowed).
All predefined pages should have a page number of the format xx.yy.zz, where x, y and z are digits from
0 - 9. The page on level 1 has page number 00.00.00. The pages on level 2 should be numbered
according to their system (sub-process) numbers using the xx digits, e.g. the overview display for system
20 is called 20.00.00. The pages on level 3 are numbered consecutively using the yy digits, e.g. the first
detailed process page in system 20 is called 20.01.00. Correspondingly, the pages on level 4 use the zz
digits.
If several systems appear on a single page, then the page number should identify the most important
system.
The page number should have a less prominent position than the page title and be located consistently
throughout the pages. A smaller font can be used.
The plant name should be shown on a less prominent position, e.g. together with the page number (using
the same font).
00.00.00
Level 1: Large screen display, wall‐mounted.
Large screen display
Permanent, not manipulative
Process overview, safety overview, CCTV, alarm overview, etc.
Work stations
Level 2: System overview pages (sub‐processes). 20.00.00 21.00.00 23.00.00

PSD‐hierarchy. Oil separation train
(…) Gas compression (…) (…)
A
20.01.00 20.02.00 23.01.00 23.02.00

1. tr. A 2. tr. A 1. tr. 2. tr.
Level 3: Detailed process pages: Working windows (and
information windows).
PSD‐levels. E/S‐filt Ex‐
(…) (…)
A port
20.01.01
Level 4: Detailed aux.pages and additonal pages (object Lubri‐
(…)
windows) cating
PSD equipment protection
Figure 2: An example of a page hierarchy
4.2.2 Navigation in the page hierarchy

The system shall have the following navigation techniques available:
 Navigation buttons in the uppermost part of the page (menu and tabs), see section 4.1.3.2.
 Navigation keys for direct access to the overview pages, see section 4.3.1.
2.01, valid from 2009-12-17
Page 7 of 55
 Links (buttons) in the process flow lines for jumps between pages following the process flow. Both
forward and backward links shall be present. The new page should identify the process flow line from
the previously active page.
 Move forward and backward in a pre-defined order between pages in the hierarchy by using the arrow
keys. A pre-defined order could be the various stages in an oil separation train, or a defined process
order in a refinery.
 “Previous” and “next” keys and buttons. Navigation memory should keep track of at least five pages.
 Directly from alarm list, other lists, and trend pages.
 By searching for a page title or page number using techniques as described in section 4.3.2.
4.3 HMI interaction
4.3.1 Keyboard and special keys

To minimize the amount of mouse clicks, frequently used actions shall be available by keys or key
combinations. For this purpose, a special purpose keyboard should be applied.
Figure 3: A principal sketch of a special purpose keyboard
All “direct navigation keys” and “control keys” shall be programmable.
The direct navigation keys should be used for navigation to all level 2 pages. If required, due to a high
number of pages, a shift-key can be applied. All keys shall be robust and the keyboard should be one
unity. Frequently used keys should be located in the lower area.
4.3.2 Search and find for tags, pages and other information
A flexible, effective and user-friendly search and find facility shall be available. The function should be
available in a dedicated field in the pages, by pressing a key or a combination of keys (e.g. Ctrl-F).
The page number search shall be flexible and efficient.
4.3.3 Tag information

By pressing a dedicated key, a combination of keys (e.g. Ctrl-T) or using a system button the tag names
for all devices, controllers and indicators in the present page shall appear.
The tag names shall automatically disappear from the page after 60 seconds or by re-pressing the
dedicated key, combination of keys (e.g. Ctrl-T) or using the system system button.
2.01, valid from 2009-12-17
Page 8 of 55
5 Requirements for presentation and interaction in the main area
5.1 Page design rules
5.1.1 General rules for all page types

Use of static text should be minimized. The text should be located adjacent to its corresponding object.
Static text shall not be eye-catching.
5.1.2 Rules for designing process lines and devices

1. The main process lines shall be clearly marked.
1. The main process should flow from the left to the right. Vertical flow should follow the physical
properties (follow gravity).
2. Directional shifts shall be minimized; straight lines shall be preferred.
3. All lines shall be as short as possible.
4. Crossing of lines shall be minimized. Line breaks shall only be used when crossing is necessary. In
such cases, apply these prioritized rules: a) a minor line shall be split when crossing a major (thicker)
line; b) the vertical line shall be split while the horizontal is solid.
5. Control devices (e.g. the control valve or pump) should be located in the same window as the
corresponding controller.
6. Important devices (e.g. main tanks) shall be visualized by a commonly recognized symbol indicating
its function. No 3D-effect shall be used.
5.1.3 Rules for designing electro pages

1. When more than one voltage level is present in a common page, the higher voltage level should be
located above the lower voltage level.
2. Switchboards, bus bars and collecting bars should be drawn horizontally.
3. Circuit breakers, disconnectors and switches should normally be drawn vertically; however, bus-tie
breakers should be drawn horizontally.
4. On boards with more than one section, the A-section should be located to the left and the B-section
to the right (with the C-section rightmost).
5. On boards with double (or triple) bus bars, the A-bus should be above the B-bus (which again should
be above the C-bus).
6. On boards with double (or triple) switches, the A-switch should be to the left and the B-switch to the
right (with the C-switch rightmost).
7. Measurements should be in this sequence from top to bottom on a page: Voltage, current, active
effect, reactive effect, cos j (as applicable).
8. Circuit breakers and disconnectors should be drawn in same order from left to right as the physical
order.
5.1.4 Rules for designing shutdown (ESD & PSD) pages

 Pages presenting shutdown hierarchy should be made.
 Pages presenting shutdown levels should be made.
 If no shutdown hierarchy or shutdown levels are established for the plant, cause and effect (C&E) and
interlock pages shall be made.
5.1.5 Rules for designing fire and gas pages including meteorological information
 One fire and gas overview page illustrating the physical plant layout shall be made.
2.01, valid from 2009-12-17
Page 9 of 55
 Pages for fire and gas testing and maintenance shall be made.
 Navigation in the hierarchy of fire and gas areas shall be user-friendly and efficient.
 Maximum two clicks for navigation to the desired page should be necessary.
 Navigation in the fire and gas hierarchy shall be possible by pointing and clicking in the desired
area.
 Detail pages shall display main equipment and static text as necessary to understand the purpose.
 Escape routes shall be displayed.
 All fire and gas areas shall have the same orientation.
 If "installation-north" differs from true north, then “installation-north” shall point straight
upwards, if not, (true) north shall point straight upwards.
 True north shall be illustrated. If different from “installation-north” then “installation-north” and
the deviation shall be illustrated.
 Wind, wave and current direction shall be presented on an overview page.
 On all pages in the plant area hierarchy, the wind direction and wind speed should be displayed. The
wind direction arrow shall follow the international meteorological standard (actual wind direction).
 Emergency equipment with feedback to CCR (e.g. emergency showers) should be displayed.
5.1.6 Rules for designing control sequences on process pages

The control sequences shall give a clear and unambiguous visualization of following:
1. Current status of the sequence (running, stopped, automatic/manual, etc.)

2. Current step
3. Actions in the current step
4. Logical condition for proceeding to the next step
5. Permissions to start
6. The next step which will be entered upon expiry of the current step
7. All timeout timers
5.2 Use and design of dialogue windows1[1]

The need for mouse clicking (e.g. for controlling and changing controller status) shall be minimized.
Dialogue windows shall cover as little as possible of other information on the pages. Therefore, the most
frequently used control functions shall be available from a compact dialogue window, offering only the
relevant buttons for control.
Unnecessary graphics like standard buttons and unnecessary frames shall be avoided. The focus in the
design shall be on compactness and user-friendliness.
The dialogue window shall appear (open) when left-clicking the desired object and result in a selected
object marked selected as shown in section 6.2.8.
The dialogue window shall disappear (close) when clicking outside the dialogue window, except if it is
pinned.
Use of confirmation (e.g. pressing an ‘OK’ button after entering a new set-point) should be reduced to a
minimum.
Vendor-specific dialogue windows (often large and extensive) should be available from the compact
dialogue windows.
1[1]
These are also called control windows, object windows or faceplates.
2.01, valid from 2009-12-17
Page 10 of 55
5.3 The trend system

The trend system shall be integrated with the process windows so that navigation between the process
and the trends is efficient and easy. Configuration of variables for trending shall be easy and intuitive.
Trend windows shall be presented in the main area (Figure 1 on page 7).
It shall be possible to place small trend objects in the process windows.
A pre-defined set of trend windows shall be made for all level 2 and level 3 process pages.
It shall be possible to navigate directly (with only one mouse-click or key) from a process window to the
corresponding trend window.
In the main area (see Figure 1 on page 7), it shall be possible to create from one to six trend windows
covering the whole area. In each trend window, a maximum of eight trend variables shall be shown
Each trend window shall be designed with efficient use of space in mind. Unnecessary frames, lines,
buttons, etc. shall be avoided.
Common requirements for all trend windows:

 user-friendly pan and zoom function,
 movable vertical ruler for reading the trend values for a specific time,
 tooltip on the trend line for showing tag and value.
The trend pages shall be capable of showing all types of values; analogue and digital, including
parameters (e.g. alarm limits). The update time shall be adapted to the actual process and have a
minimium limit of 1.0 second.
See section 6.9 for the specification for the trend formats.
5.4 Alarm list and other lists

TR1494 defines lists that shall be available.
Flexible and effective sorting, searching and filtering functionality shall be available for the various lists.
A standard alarm line shall comprise the following fields in the following order from left to right:
 Priority
 Acknowledged/unacknowledged status (coded in the priority field)
 Alarm status (i.e. active/passive) (coded in the priority field)
 Tag name
 Description (shall be complete and concise, including relevant area and alarm service information)
 Alarm category (state/class)
 Date showing day and month (normally regarded as sufficient). Format to follow local nomenclature.
 Timestamp (time for alarm generation, see TR1494) on the format tt:mm:ss. Use local nomenclature
for formatting. Milliseconds shall normally not be shown, but be available on demand, e.g. by mouse-
over in the time field.
 Actual value of the alarm tag (analogue or digital) compared to the alarm limit. Use an appropriate
symbol for comparison (e.g. <, >, ≠).
 Engineering unit (if relevant)
See TR1494 for a specification of alarm description, categories, etc.
2.01, valid from 2009-12-17
Page 11 of 55
By clicking on the alarm line, the corresponding page where the alarm originates shall appear. It should be
possible to select which screen this page appears on, either directly or by a configurable system
parameter.
Downmost on the alarm page the following summary information shall be displayed:
 Page number and total number of pages, e.g. Page 2 of 5
 Total number of alarms
 Total number of active alarms for each priority
 Total number of unacknowledged alarms
See section 6.8 for the specification of an alarm line.
2.01, valid from 2009-12-17
Page 12 of 55
6 Detailed HMI requirements
6.1 Introduction
6.1.1 How to use the specified colours and sizes

All colours defined in this TR shall be given logical names for easy implementation and maintenance.
All sizes (e.g. height of letters) are specified in mm based on a viewing distance of 600 mm from the
specified display. For information, letter sizes are also given in points.
The symbols (colours and sizes) are specified for a 23-inch TFT active-matrix liquid crystal display
(AMLCD). See App A for specifications.
The project shall verify that the colour set is suitable on the specific display screens to be used. The
colours are relative to each other and specified by the device-dependant colour models HSL (hue,
saturation, lightness) and RGB (red, green, blue). This means that adjusting one colour might require
adjusting all colours. The adjustment shall be done on the colours as a set so that the relative differences
between the colours are maintained. The colours are tested on the specified display.
6.1.2 Main area types

The following main area types (see Figure 1 on page 7) are defined:
 Process/utility
 ESD/PSD
 Fire and gas
 Electro/HVAC
 Alarm list
 Trend
6.2 General information formats and elements
6.2.1 Background colour

The background colour shall be grey.
Table 1: Specification of the background colour
HSL RGB Example

Background 0o, 0 %, 60 % 153, 153, 153
colour
To give a feeling of how the suggested colours are perceived, the colours in the following pages are
illustrated on this background colour2[2].
6.2.2 Text fonts and sizes

The text font used on all pages shall be Calibri (OpenType).
2[2]
NB: how colours will appear in the real operating context will depend on the ambient lighting (“colour rendering”)
and the RGB characteristics of the hardware, see section 6.1.1 and GL1212).
2.01, valid from 2009-12-17
Page 13 of 55
Table 2: Text sizes

Type Size (height) Additional Typ. size in Example(s)
info. points *
Page headings 4.0 mm Bold 18 pt
Major or important static labels in 2.8 mm 11 pt

process pages. Tooltip text.
Labels/tag names in safety pages
Major labels or headings in safety 3.2 mm Bold 13 pt

pages
Minor or less important static 2.3 mm 9 pt
labels
Single letter inside dynamic 2.5 mm 10 pt
changing symbol (alarm, etc)
Double letter inside dynamic 2.3 mm 9 pt
changing symbol (alarm, etc)
Status letter (function code, 2.5 mm Bold 10 pt
controller mode)
Operational mode (for pumps, 2.8 mm Bold 11 pt
valves, etc)
Dynamic measurements 2.8 mm Bold 11 pt
Other dynamic numbers 2.8 mm 11 pt
Letter indicating type of status 3.0 mm Bold 12 pt
symbol (motor/generator)
Numbers indicating status switch 2.8 mm Bold 11 pt
(e.g. for the generic element)
Alarm line text 3.2 mm Bold 13 pt
Detector code letters 2.5 mm 10 pt
ESD/PSD level letters 2.8 mm 11 pt
* The typical size in points is given for the example screen.
6.2.3 Static text colours

Table 3: Static text colours
Type HSL RGB Example
Page headings 0o, 0 %, 20 % 51, 51, 51
Static labels 0o, 0 %, 40 % 102, 102, 102

Major labels or headings 0o, 0 %, 30 % 77, 77, 77
in safety pages
Text should be written in the local language and follow national rules of orthography. In order to promote
readability, sentence case text shall be used, i.e., the first letter shall be upper case and the following
letters small case. Upper-case letters can be used in abbreviations.
2.01, valid from 2009-12-17
Page 14 of 55
6.2.4 Colours for static elements

Table 4: Colours for static elements (devices)
HSL RGB Example
Fill of devices 0o, 0 %, 55 % 140, 140, 140
Device contour and less 0o, 0 %, 50 % 128, 128, 128
important internal lines
Dividing line inside tank 0o, 0 %, 32,5 % 83, 83, 83
(e.g. between a HP and LP
column)
Fill of rooms in HVAC pages 0o, 0 %, 55 % 140, 140, 140

Frame around room in 0o, 0 %, 50 % 128, 128, 128
HVAC pages
Fill inside fire & gas areas 0o, 0 %, 67 % 170, 170, 170
Frame around fire & gas 0o, 0 %, 50 % 128, 128, 128
areas
Fill of ESD & PSD blocks 0 o, 0 %, 62 % 157, 157, 157
Frame around ESD & PSD 0 o, 0 %, 50 % 128, 128, 128
blocks
Tanks/vessels should be drawn schematically and similar to their physical shapes. Unnecessary details
should not be shown, but it should be possible to identify various tank types, e.g. an atmospheric tank
should be different from a pressure vessel. The size should reflect importance and/or physical size.
An identifying text should be located close to or inside the static element. Dynamic objects can be located
inside the static symbol (e.g. small trends).
 Line thickness frames and internal lines: 0.2 mm

 Line thickness (important) dividing lines and contour lines: 0.4 mm
Table 5: Additional specification for static elements in PSD & ESD safety pages
Symbol Type HSL RGB Example
Connection from Solid line 0 o, 0 %, 41 % 105, 105, 105
status field to ESD- 0.5 mm
block or similar
Connection point Circle 0 o, 0 %, 41 % 105, 105, 105
Diameter: 1
mm
Static logic symbols 4 mm x 4 0 o, 0 %, 41 % 105, 105, 105
mm
Line Weight:
0.4 mm
6.2.5 Digits and number of decimals

For numbers (measurement values, set-points, controller outputs, etc.) three digits should normally be
used. However, some systems/parameters may require more digits (fiscal meters, accumulators etc). The
number of decimals (depending on normal value ranges) should be:
 0.00 – 9.99: Two decimals

 10.0 – 99.9: One decimal
2.01, valid from 2009-12-17
Page 15 of 55
 Greater than or equal to 100: Zero decimals
The symbols shall be configurable for showing appropriate number of digits.
Controller output values should be located next to the control element (valve, pump, etc.).
6.2.6 Tooltip function

A tooltip function shall be available in order to get more information about the element (controller,
indicator, pump, valve, etc.). When keeping the mouse in position for more than one second, a little field
showing additional information (normally shown in the element itself) should appear next to the element.
For all types of formats, the tag name and the description should be shown in the tooltip. In addition,
dynamic values like controller set-point (including the static engineering unit) can be shown.
6.2.7 Navigational elements
6.2.7.1 Page jump

The next or previous page in the process flow shall appear after pressing a page jump button. The button
shall be located at the end or at the beginning of a process flow line, and it should have a describing text
next to it. A next page in process flow shall appear after pressing a page jump button. The button shall be
placed at the end or at the beginning of a process flow line and should have a describing text next to it.
The arrow should point in the process flow direction.
A B
Figure 4: Page jump buttons

Sizes should be:
 Total size: 4 mm x 4 mm
 Size of inner arrow: 2.5 mm x 1.5 mm
The appearances:
A: Normal
B: Referring to the previously active page (i.e. on the current page, the arrow pointing back to the
previously active page becomes dark).
Table 6: Colours for the page jump button

HSL RGB
Button frame 0o, 0 %, 75 % 191, 191, 191
Button fill 0o, 0 %, 67 % 170, 170, 170
Frame around inner arrow in state A 0o, 0 %, 47 % 119, 119, 119
Fill of inner arrow in state A 0o, 0 %, 50 % 128, 128, 128
Fill of inner arrow in state B 0o, 0 %, 20 % 51, 51, 51
In state B, the inner arrow shall not have a frame.
 Line thickness for frame around inner arrow (in state A): 0.2 mm
2.01, valid from 2009-12-17
Page 16 of 55
6.2.7.2 Labelled navigation buttons

When no process flow is present, buttons with text can be used for navigational purposes.
Figure 5: Labelled navigation button

A: Normal
B: Referring to the page previously used (i.e. on the current page, the arrow pointing back to the
previously used page becomes dark).
Table 7: Colours for the labelled navigation format

HSL RGB
Button frame 0o, 0 %, 75 % 191, 191, 191
Button fill 0o, 0 %, 67 % 170, 170, 170
Text colour in state A 0o, 0 %, 40 % 102, 102, 102
Text colour in state B 0o, 0 %, 20 % 51, 51, 51
Line thickness for frame around button: 0.2 mm.
Text font and size shall be as for static text. The actual size of the button should be adapted to the length
of the text label.
6.2.8 Selecting objects

A selected object should be highlighted by using small white corners.
Figure 6: Selected object highlighted using small white corners
All instances of the same object should be marked, even if they appear on several pages and/or for
different users.
Element details:
 Colour: White, RGB 255, 255, 255
 Line thickness: 0.4 mm
2.01, valid from 2009-12-17
Page 17 of 55
6.3 Information formats and elements for the process pages

These elements should be used for all level 2, level 3 and level 4 pages showing process graphics. Some
formats and elements for HVAC pages are also included.
(Note: the magenta text underneath or above some formats or elements, as shown below, are for
descriptive purposes only, and not part of the formats/elements).
6.3.1 Static devices
6.3.1.1 Heat exchanger

A line indicating flow media should be applied through the symbol.
Figure 7: Examples of heat exchangers with flow media indicated

Each project should define specific sizes to be used. The internal flow lines should have the actual media
colour and the same line thickness as the external flow line.
6.3.1.2 Examples of static tanks

Only main process devices are shown. Other symbols and actual sizes should be defined in each project.
Figure 8: Examples of static tanks
6.3.2 Process flow lines
6.3.2.1 Line types

In process and HVAC pages, these elements should be used:
Table 8: Process flow line elements
2.01, valid from 2009-12-17
Page 18 of 55
Line Line Colour Example

Weight Pattern
Main process pipes 0.7 mm Solid Medium
Less important 0.5 mm Solid Medium

process flow
Small pipes/tubing 0.3 mm Solid Medium
into more important
pipes, chemical
injection, etc.
Instrumentation 0.3 mm Stippled HSL: 0o, 0 %, 41 %
lines, controller/ RGB: 105, 105, 105
transmitter input
and output lines
Bends/rounded corners shall be used when process lines turn +/- 90o on a page, see Figure 9.
Figure 9: Example of a bend for a main process line

Rounding shall be 2 mm.
Instrumentation lines shall not have rounded corners.
6.3.2.2 Process media colours for oil & gas (offshore) plants
For plants using only a few various media, colours defined in Table 9 should be used.
Table 9: Process media colours for oil & gas plants

HSL RGB Example
Oil 31.5 o, 146, 116, 82
Including diesel, crude, lubricating, 28 %,
sealing and hydraulic oil, and drilling 45 %
fluid/mud
Gas 60 o, 183, 183, 81
Including fuel, HP, LP, injection, 42 %,
pressure relief, and flare gas. 52 %
Water 0 o, 192, 192, 192
Including waste, ballast, drilling, 0 %,
produced, cooling and injection 75 %
water. Includes steam
Air 203 o, 70, 130, 165
Including instrument and plant air, 40 %,
and neutral gas 46 %
Fire fighting 0 o, 192, 192, 192
Including fire water and AFFF 0 %,
75 %
Chemicals 301 o, 134, 80, 134
Including glycol, anti-scaling, 25 %,
defoamer, and drilling 42 %
2.01, valid from 2009-12-17
Page 19 of 55
6.3.2.3 Process media colours for onshore plants (refineries, gas treatment, LNG)
Colours defined in Table 10 should be used. For each plant project relevant and good colours, defining
the unique media should be selected from this list.
Table 10: Process media colours for onshore plants

HSL RGB Example
Hydro carbon liquid 1 (main 31.5 o, 107, 96, 84
medium, e.g. LNG product) 12 %, 37.5 %
Hydro carbon liquid 2 (e.g. oil) 31.5 o, 146, 116,
28 %, 45 % 82
Hydro carbon liquid 3 31.5 o, 179, 137,
37 %, 53 % 91
Hydro carbon liquid 4 31.5 o, 131, 98, 61
37 %, 37.5 %
Hydro carbon liquid 5 39 o, 160, 130,
37.5 %, 46 % 73
22 %, 51 % 102
32 %, 48 % 83
Hydro carbon liquid 8 (or gas) 60 o, 126, 126,
11 %, 45 % 101
Hydro carbon gas 1 (main gas) 60 o, 183, 183,
42 %, 52 % 81
Hydro carbon gas 2 60 o, 133, 133,
42 %, 37 % 54
30 %, 60 % 124
42 %, 60 % 112
Hydro carbon gas 5 64.5 o, 169, 176,
42 %, 49 % 72
42 %, 40 % 60
32 %, 67 % 143
Methane 81 o, 182, 205,
40 %, 67.5 % 139
Ethane 49.5 o, 184, 166,
42 %, 52 % 82
Propane 43.5 o, 124, 107,
32.5 %, 37 % 63
Gas cooling 1 190.5 o, 102, 175,
41 %, 57.5 % 191
Gas cooling 2 187.5 o, 68, 135,
36 %, 42 % 145
Gas cooling 3 145.5 o, 83, 119, 98
18 %, 40 %
Gas cooling 4 127.5 o, 117, 202,
45 %, 62.5 % 128
Gas cooling 5 189 o, 79, 116,
22 %, 40 % 123
2.01, valid from 2009-12-17
Page 20 of 55
HSL RGB Example

Chemicals 1 300 o, 134, 80,
25 %, 42 % 134
Chemicals 2 300 o, 152, 90,
25 %, 47.5 % 152
Chemicals 3 330 o, 141, 82,
26 %, 44 % 112
Chemicals 4 285 o, 151, 114,
21 %, 54 % 163
Chemicals 5 300 o, 113, 68,
25 %, 35 % 113
Chemicals 6 262.5 o, 115, 91,
25 %, 48 % 153
Air 1 203 o, 70, 130,
40 %, 46 % 165
Air 2 210 o, 57, 106,
46 %, 42 % 155
Air 3 210 o, 97, 143,
42 %, 56 % 190
Air 4 201 o, 58, 99, 122
35 %, 35 %
Air 5 210 o, 73, 106,
31 %, 42 % 139
Water 1 0 o, 192, 192,
0 %, 75 % 192
Water 2 192 o, 208, 223,
25 %, 85 % 227
Water 3 108 o, 201, 221,
27 %, 82 % 196
Water 4 193.5 o, 114, 135,
10 %, 50 % 141
Water 5 0 o, 223, 223,
0 %, 87.5 % 223
6.3.3 Elements and formats for alarms and alarm-like states
6.3.3.1 Alarm colours

Alarm colours shall only be used for alarms, so that they can succeed in their design purpose: to attract
attention even when an operator is not looking for, or directly at them.
Alarm colours shall indicate alarm priority and be used as fill colours in rectangular fields, see table in
section 6.3.3.2. Colours defined in Table 11 should be used.
Table 11: Alarm colours

HSL RGB Ex.
Priority 1: Red 0 o, 255,
100 %, 0,
Highest priority 50 % 0
2.01, valid from 2009-12-17
Page 21 of 55
HSL RGB Ex.

Priority 2: Yellow 60 o, 255,
100 %, 255,
50 % 0
Priority 3: Dim magenta 300 o, 213,

66 %, 43,
50 % 213
Priority 4: Dim cyan 180 o, 99,

73 %, 231,
Lowest priority in use in the process pages 65 % 231
Priority 5: Highest priority in maintenance pages 9 o, 185,

37 %, 116,
57 % 104
Priority 6 52.5 o, 190,
41 % 179,
57 % 99
Priority 7: Lowest priority in maintenance pages 300 o, 158,
17 %, 118,
54 % 158
See TR1494 for definition of alarms regarding alarm priority.
Where flashing of alarms is required, the coloured area shall alternate with dimmed alarm colours as
defined in Table 12.
Table 12: Dimmed alarm colours
HSL RGB Ex.
Priority 1 0 o, 24 %, 62.5 % 182, 137, 137
Priority 2 60 o, 30 %, 57.5 % 179, 179, 115
Priority 3 300 , 11 %, 59 %
o
162, 138, 162
Priority 4 180 o, 17 %, 61 % 140, 173, 173
Priority 5 9 , 14 %, 59 %
o
165, 140, 136
Priority 6 52.5 o, 15 %, 59 % 166, 162, 135
Priority 7 300 o, 7 %, 58 % 155, 141, 155
6.3.3.2 Alarm status fields

Status fields showing alarm category shall be as defined in Table 13.
Table 13: Alarm status fields showing alarm category

Code Description Examples
High-high alarm
Low-low alarm
2.01, valid from 2009-12-17
Page 22 of 55
Code Description Examples

High alarm / warning
Low alarm / warning
Conflict alarm / warning
Deviation alarm
Fault
Simulated / disabled
Please note:
 The special symbols “double-H” and “double-L” shall be used for HH alarm and LL alarm, respectively.
 White colour shall be used for symbols/letters on red and dim magenta, and black colour shall be
used for symbols/letters on yellow and dim cyan.
6.3.3.3 Alarm states

As defined in TR1494, there are three alarm state indication fields. The alarm priority and category field
shall be used for alarm status. The states are:
1. Unacknowledged (raised alarm): Flashing between alarm priority colour and reduced alarm priority
colour.
 Duty cycle: 50 %
 Frequency: 2.5 Hz
2. Acknowledged: Steady alarm priority colour.
3. Return to normal and unacknowledged: Frame flashing between alarm priority colour and reduced
alarm priority colour.
 Duty cycle: 50 %
 Frequency: 2.5 Hz
The symbol/letter inside the alarm field shall not flash.
Priority 1 Priority 2
Process Process
Alarmlists Alarmlists
pages pages
”on” H 1 H 2
”off” H 1 H 2
Figure 10: Example of unacknowledged alarm for priority 1 and 2 alarms where the alarm formats shall
flash between the two formats “on” and “off
2.01, valid from 2009-12-17
Page 23 of 55
Figure 11: Example of acknowledged alarm for priority 1 and 2 alarms where there shall be no flashing
Priority 1 Priority 2
Process Process
Alarmlists Alarmlists
pages pages
”on” H 1 H 2
”off” H 1 H 2
Figure 12: Example of “return to normal” and unacknowledged alarm for priority 1 and 2 alarms where the
alarm formats shall flash between the two formats “on” and “off
The letter/number inside the alarm frame in “return to normal” and unacknowledged alarm (state 3) shall
be black for all alarm priorities.
 Alarm frame line thickness for use in alarm lists: 0.5 mm

 Alarm frame line thickness for use in process pages: 0.3 mm
6.3.3.4 Blocked/suppressed/hidden/shelved status

Table 14: Colour used for the blocked/suppressed/hidden/shelved state
Blue colour shall be used to indicate that an instrument 240 o, 0,
or equipment is in a mode where safety, control and 100 %, 0,
alarming functions are disabled. 50 % 255
Letters on blue colour shall be white. See Table 15 with status fields.
Table 15: Status fields for suppressed/blocked/shelved/hidden alarms included including an example of a
hidden alarm
Suppressed. See definition in section 7.1.
Blocked. See definition in section 7.1.

Manual hiding (shelved). See definition in section 7.1.
Line thickness: 0.3 mm
Automatic hiding. See definition in section 7.1.
Line thickness: 0.3 mm
2.01, valid from 2009-12-17
Page 24 of 55
When an active alarm is hidden, the alarm category code

shall appear on the background colour inside the blue
frame. No alarm colour shall appear.
The example to left shows that a low alarm is manually

hidden (shelved).
6.3.4 Pump symbol
Figure 13: The pump symbol showing running and not running
Status indication should be located in three fields in parallel with the flow direction (above upon
horizontal flow, to the left upon vertical flow). The fields (internally listed according to priority) are:
1: a) Blocked (white B on blue rectangle)
b) Conflict alarms (blocked and shutdown signal) (C on alarm priority colour)
2: a) Manual mode (M)
b) Priority start sequence (1, 2, 3) in auto mode
3: a) Suppressed (white U on blue rectangle)
b) Fault (F on alarm priority colour)
c) Manual hidden alarm (shelved)
d) Automatic hidden alarm
Appearances of the alarm states and alarm-like states shall be as defined in section 6.3.3.
Figure 14: Pump status indication for horizontal flow (not complete with all combinations)
Symbol details should be:

 Size: 7.5 mm x 7.5 mm
 Line colour: Dim green. HSL: 98 o, 25 %, 31 %. RGB: 75, 100, 60.
 Line thickness outer line: 0.5 mm
 Line thickness inner horizontal line and arrow: 0.8 mm
 Line thickness inner vertical line (not running): 0.6 mm
 Fill colour when running: Light green. HSL: 95 o, 16 %, 46 %, RGB 114, 136, 98.
 Fill colour when not running: Background colour.
 The letter/digit in field 2: Colour: Dim green: HSL: 98 o, 25 %, 31 %. RGB: 75, 100, 60.
The pump symbol should blink when changing state, i.e. starting or stopping. When the pump is stopping
(i.e. it has been in operation), it should blink between the two formats in Figure 15.
2.01, valid from 2009-12-17
Page 25 of 55
Figure 15: The two different appearances of the pump symbol when in a transition state from “running” to
“not running”
When stopped position is confirmed, the symbol shall change to the “not running” symbol.
When the pump is starting (i.e. it has been “not running”), it should blink, i.e. alternate between the two
formats in Figure 16.
Figure 16: The two different appearances of the pump symbol when in a transition state from "running" to
"not running"
When running is confirmed, the symbol shall change to the running symbol.
 Line colour of “off-symbol”: HSL: 96 o, 9 %, 46 %. RGB: 119, 132, 110

 Fill colour of “off-symbol”: HSL: 91.5 o, 6 %, 54 %. RGB: 138, 146, 131
 Duty rate 50 %
 Blink frequency: 2.5 Hz
Figure 17: Pump safety and abnormal states – see descriptions below (combinations are not shown)
1. When PSD is active (LSL/FSL in ST012), a white triangle shall appear on top of the symbol.
2. When interlock is active (FDL/FDH in ST012), the format shall become white.
3. When not available (from the electric control unit MCC, XE in ST012), a cross shall appear in the center
of the symbol.
6.3.5 Compressor symbol
Figure 18: The compressor symbol showing “running” and “not running”

 Height: 8.0 mm
 Width: 7.5 mm
2.01, valid from 2009-12-17
Page 26 of 55

The functionality (including transition state) should be similar as for the pump symbol.
6.3.6 Turbo expander symbol
Figure 19: The turbo expander symbol showing “running” and “not running”

 Height: 8.0 mm
 Width: 5 mm
 Line thickness inner horizontal lines when not running: 0.2 mm
6.3.7 Fan/blower symbol
Figure 20: The fan/blower symbol showing “running” and “not running”

 Height: 7.5 mm
 Width: 10 mm
6.3.8 Valve symbol

Five types of valves shall be defined:
2.01, valid from 2009-12-17
Page 27 of 55
 Control valves
 Normal on/off valves (block valves)
 On/off valves with manual reset from field (ESD-valves typically)
 On/off valves with reset from the CAP
 Manual valves
Figure 21: The five valve symbol types showing open and closed position

 Size “loop”: 5 mm x 3.5 mm.
 Fill colour when open: Dim green: HSL: 97.5 o, 25 %, 31 %. RGB: 75, 100, 60. No line around “filled
loop” is used when open.
 Line colour when closed: Dim green: HSL: 97.5 o, 25 %, 31 %. RGB: 75, 100, 60.
 Fill colour when closed: Background colour
 Size semi-circle for control valve actuator: 3.0 mm x 1.0 mm
 Size rectangle for on/ off-valve actuator: 2.0 mm x 2.0 mm
 Line thickness “triangles” when closed: 0.5 mm. Rounded corners.
 Line thickness “ball” when closed: 0.3 mm.
 Fill colour “ball” when closed: Background colour
 Size upper triangle for reset: 2.0 mm x 2.0 mm
 Colour upper triangle for reset: HSL: 0 o, 0 %, 47 %. RGB: 119, 119, 119
Status should be indicated in three fields in parallel with the flow direction (above upon horizontal flow, to
the left upon vertical flow). See Figure 22 for vertical flow.
Figure 22: Location of status indication for valves – see description below
The fields listed according to priority are:

1: a) Blocked (white B on blue rectangle).
b) Conflict alarms (blocked and shutdown signal) (C on a rectangle with alarm priority colour)
2: a) Manual mode (M)
b) Priority open sequence (1, 2, 3) in auto
3: a) Suppressed (white U on blue rectangle).
2.01, valid from 2009-12-17
Page 28 of 55
Figure 23: Different statuses for controller valve (combinations are not shown)
Figure 24: Different statuses for on/off-valve (combinations are not shown)
The valve symbol should blink when moving, i.e. opening or closing.
When the on/ off-valve is closing (it has been open), it should blink, i.e. alternate between the two
formats shown in Figure 25.
Figure 25: The two different appearances of the on/off-valve symbol when in a transition state from open
to closed
When closed position is confirmed, the symbol shall change to the closed symbol.
Figure 26 shows the alternating formats when the on/ off-valve is opening.
Figure 26: The two different appearances of the on/off-valve symbol when in a transition state from
closed to open
When open position is confirmed, the symbol shall change to the open symbol.
 Colour of “off-symbol”: HSL: 97.5 o, 6 %, 49 %. RGB: 122, 132, 116

 Duty rate 50 %
 Blink frequency: 2.5 Hz
Safety and abnormal states are illustrated and described as follows (combinations are not included):
Figure 27: Valve safety and abnormal states – see description below (combinations are not shown)
1. When PSD is active (LSL/FSL in ST012), a white triangle shall appear on top of the symbol.
2. When interlock is active (FDL/FDH in ST012), the symbol shall become white.
2.01, valid from 2009-12-17
Page 29 of 55
3. When not available (from the electric control unit MCC, XE in ST012), a cross shall appear underneath
the actuatorsymbol.
Symbol details for the cross when not available:

 Length of cross lines: 1.8 mm
 Line thickness of cross lines: 1.8 mm. Rounded line ends.
Figure 28: Three-way and four-way valves

The symbol for three-way and four-way valves should be:
 Size filled triangles: 3.5 mm x 3.5 mm. No line around fill.
 Size open triangles: 3.0 mm x 3.1 mm. Rounded corners.
 Other details are identical to the other valve formats.
Controller output or valve feedback should be shown. The control output should be located close to the
actuator and the valve feedback close to the valve body. These numbers are not part of the valve symbol
itself, and shall be located independently as separate objects. See examples in Figure 29.
Figure 29: Location of controller output and valve feedback numbers (normally only one of the
numbers are shown)
Colour for controller output value should be:

 HSL: 345 o, 28 %, 22.5 %. RGB: 73, 41, 49
Colour for valve output value should be:

 HSL: 270 o, 41 %, 25 %. RGB: 62, 37, 88
Additional valve identifiers can be located near the valve symbol if required for identification of EV, XV,
HV, etc.,.These letters are not part of the valve symbol itself, and should be located separately. They are
similar to small static labels and have the same colour and size (2.3 mm).
Figure 30: Example of static text identifying the valve type
2.01, valid from 2009-12-17
Page 30 of 55
6.3.9 Damper symbol
Figure 31: The damper symbol showing open and closed

 Size: 5 mm x 5 mm
 Fill colour when open: Light green. HSL: 95 o, 16 %, 46 %, RGB 114, 136, 98.
 Line colour: Dim green: HSL: 97.5 o, 25 %, 31 %. RGB: 75, 100, 60.
 Line thickness inner line: 0.7 mm
 Line colour inner line when closed: HSL: 97 o, 25 %, 31 %. RGB: 75, 100, 60.
The functionality (including transition state) should be similar as for the valve symbol.
6.3.10 Electrical heater symbol
Figure 32: The electrical heater symbol showing “in operation” and “not in operation”

 Size: 11.5 mm x 5.0 mm
 Line thickness outer and inner lines: 0.5 mm
 Fill colour in square when in operation: Light green. HSL: 95 o, 16 %, 46 %, RGB 114, 136, 98.
 Fill colour when not in operation: Background colour.
6.3.11 Motor and generator symbol
Figure 33: The motor and generator symbol showing “in operation” and “not in operation”

 Size: 7.5 mm x 7.5 mm
2.01, valid from 2009-12-17
Page 31 of 55

 Line thickness outer and inner lines: 0.5 mm
 Fill colour in circle when in operation: Light green. HSL: 95 o, 16 %, 46 %, RGB 114, 136, 98.
 Fill colour when not in operation: Background colour.
 Letter colour: Dim green. HSL: 98 o, 25 %, 31 %. RGB: 75, 100, 60.
6.3.12 Generic symbols

These symbols can be used for other objects than those described in detail above, e.g. switches. A square
symbol shall be used for objects that can be operated interactively (from the CCR operator using a
workstation). A circle symbol shall be used for objects that cannot be operated.
Figure 34: The generic symbol showing “on” and “off” for operatable and non-operatable objects
 Size: 5 mm x 5 mm
 Fill colour when on/running: Light green. HSL: 95 o, 16 %, 46 %, RGB 114, 136, 98.
 Fill colour when off/not running: Background colour.
 Numbers: Black RGB 0, 0, 0. Bold
For special purposes: Instead of using ‘1’ or ‘0’ inside the symbol, one or more letters indicating a special
function can be used. The size should then be adapted to the label size. The label should normally not be
in bold font. It should be possible to control text colour and fill colour individually.
See example with the label “MPC” below:
Figure 35: The generic symbol with letters. Colour of text and fill is independent.
 Colour of label when inactive: Grey HSL: 0 o, 0 %, 47 %. RGB 119, 119, 119
 Colour of label when active: Black RGB 0, 0, 0.
6.3.13 Indicator element

Indicators shall be shown with the following fields:
1. A rectangular instrument field showing function code and status information
2. The measurement value
Such fields can be located in various positions relative to each other. The engineering unit can be shown
in the measurement value field, omitting the instrument function code in the instrument field. See Figure
36.
2.01, valid from 2009-12-17
Page 32 of 55
There should be no space between the instrument field and the measurement value.
Figure 36: Alternative symbols for the indicator element
Table 16: Details for the indicator element

Element Size / height Colour Example
Measurement value Black. RGB 0,0,0
Rectangular 10 mm x 3.5 mm (type A and B) Grey.

instrument field 7 mm x 3.5 mm (type C) HSL: 120 o, 3 %, 58 %.
RGB: 145, 151, 145
Letters for function Grey.
code inside the HSL: 0 o, 0 %, 30 %.
rectangular instrument RGB 77, 77, 77
field
Function code letters according to the Engineering Number System (ENS), e.g. F, L, P, T (see TR0052), shall
be used.
Status indications shall be located in two fields as shown in Figure 37.
Figure 37: Status indication for the indicator element (see descriptions below)

1: a) Alarm (code/category on alarm priority colour)
c) Suppressed (white U on blue rectangle)
d) Manually hidden alarm
e) Automatic hidden alarm
2: a) Blocking (white B on blue rectangle)
b) Conflict (C on priority colour)
A thin line above the rectangular instrument field should be visible if there is an upper action limit (upper
trip or HH alarm) on the indicator, and underneath if there is a lower action limit (lower trip or LL alarm)
on the indicator. This line should be coloured blue if the actual limit is blocked, together with a field
showing a white B on blue background. The example in Figure 38 shows blocking of the LL trip limit.
2.01, valid from 2009-12-17
Page 33 of 55
Figure 38: Example illustrating existence and blocking of trip limits on an indicator
Details for the action limit lines and alarm and status fields:
 Line weight: 0.4 mm.
 Line colour when not active: Light grey: HSL: 0 o, 0 %, 75 %. RGB: 191, 191, 191.
 When blocked, line becomes blue: HSL: 240o, 100 %, 50 %. RGB: 0, 0, 255.
 Single alarm field: Width: 3.5 mm. Height: 3.5 mm.
 Field for blocked: Width: 3.5 mm. Height: 3.5 mm.
Figure 39: Examples of status indications for indicators
When a fault occurs, the measurement value colour shall change from black to grey.
Figure 40: Illustration of fault of indicators

Details should be:
 Colour of measurement value: HSL: 0o, 0 %, 37 %. RGB: 95, 95, 95.
6.3.14 Controller element
6.3.14.1 General
For controllers there are two main variants:
1. A large variant showing measuring value, controller type, and different status (including alarm)
2.01, valid from 2009-12-17
Page 34 of 55
2. A compact variant showing controller type and alarm status
6.3.14.2 Large variant

The element includes function code, measuring value, controller mode (auto, manual, and cascade), and
alarm and alarm-like states. This is the normal type, which should be used as default.
Figure 41: The normal controller element for alarm status
Figure 42: The normal controller element in three different controller modes
The two fields indicating alarm and alarm-like states listed in priority are:
c) Fault (F on alarm priority colour)
d) Suppressed (white U on blue rectangle)
e) Manual hidden alarm
f) Automatic hidden alarm
Appearance of alarm states and alarm-like states shall be as defined in section 6.3.3.
A A A A A A A A
L 78,4 F 6 L 78,4 L 78,4 L 78,4 L 78,4 L 78,4 L 78,4
H H H H BH UH B HH B LL
Figure 43: Examples showing alarm states and alarm-like states for the controller element
Figure 44: Examples showing hiding for controller element
2.01, valid from 2009-12-17
Page 35 of 55
An extension of this first variant can be used when greater accuracy is relevant and desired (e.g. for fiscal
measurements):
Figure 45: An extended type of the large controller element
Details should be:

 Width normal type: 12 mm (values up to 999). The normal type.
 Width extended type: 15 mm (values from 1000). For special purposes.
 Height: 8.5 mm
 Line weight frame: 0.3 mm
If showing the set-point value is desired (e.g. for the pressure controller connected to the PV-valve to
flare for monitoring the opening of the pressure relief valve), the set-point value should be shown close to
the controller element. This value shall be an independent object and shall not be part of the controller
symbol.
Figure 46: The controller element with a set-point value (optional)
6.3.14.3 Compact variant
T L F P T P
Figure 47: An alternative (secondary) variant of the controller element

 Width: 6 mm
 Height: 4 mm
The fill is coloured according to the alarm priority colour, or blue if blocked or suppressed. The measuring
value can be located next to this element. However, the compactness of the page is reduced as more
numbers are used.
Figure 48: The compact and alternative controller element with a measurement value
6.3.14.4 Details for both variants

Table 17: Details for the controller element
Measuring value Black. RGB 0,0,0 44,4
2.01, valid from 2009-12-17
Page 36 of 55

Letters for function Grey. L
code and modes (A, M, HSL: 0 o, 0 %, 30 %.
C, L, T, F, P, Q, etc.) RGB 77, 77, 77
Background/fill inside 12/15 mm x Grey-green.
symbol 8 mm HSL: 120 o, 3 %, 58 %.
RGB: 145, 151, 145
Frame Weight: 0.3 mm Grey
HSL: 0 o, 0 %, 41 %
RGB 105, 105, 105
Alarm field 3.0 mm x 2.5 Alarm priority colour /
mm blue
Alarm symbol/letter 2.3 mm (HH, LL) White/black
2.5 mm (H, L, B)
Alarm hiding frame 2.5 mm x 2.5 Blue
mm
Weight: 0.3 mm
Set-point value Dim blue. 16,5
HSL: 213 o, 46 %, 30 %
RGB: 41, 73, 112
Function code letters according to the Engineering Number System (ENS), e.g. F, L, P, T, see TR0052, shall
be used.
6.3.14.5 Element for controlling an advanced process control function

When the controller is operated in combination with advanced process control functions like MPC this
should be shown by using a button and a line as illustrated in Figure 49. Formatting of the text “MPC” on
the button is based on the status of the MPC application switch tag: grey if the switch is off, black if the
switch is on. The fill colour of the button is dependent on how the MPC uses this controller; grey (no) fill if
not in active use, green fill if in active use. The MPC button activates the dialogue window of the MPC
application switch tag.
Figure 49: The controller element with advanced process control function (see descriptions below)
A: MPC switch off. The controller is in non-MPC mode (actual mode here is auto, local set-point, other
connections are not shown).
B: MPC switch on. The controller is in non-MPC mode (actual mode here is auto, local set-point, other
connections are not shown).
C: MPC switch on. Controller is getting the set-point from MPC, but the MPC application is not active on
this controller.
D: MPC switch on. Controller is getting the set-point from MPC, and the MPC application is active on this
controller.
For specification of the MPC button, see section The functionality (including transition state) should be
similar as for the valve symbol.
2.01, valid from 2009-12-17
Page 37 of 55
Generic . Note that the label should not be bold, and that the width of the button should be adapted to
the text. If another name than “MPC” is used (e.g. “APC”), this should be applied.
See also example 4 in section 6.3.16.
6.3.15 Bar-graph element

A bar-graph element can be integrated with process mimics and numbers. The element is an option
normally used for showing tank levels.
Figure 50: The bar-graph element with alternatives (see descriptions below)
The figure shows three possible usages:

A: Level indicator. Alarm limits with LL limit marked as an action (trip) limit. Measurement with
engineering unit.
B: Level controller. Alarm limits with LL limit marked as an action (trip) limit. Measurement with function
code. Set-point arrow.
C: Level indicator with H alarm active. No value. Engineering unit.
The bar-graph shows existing alarm limits. The vertical axis is normally selected to be within the
measurement range, but if appropriate, a different range should be possible to select.
The size of the bar-graph element is flexible and should be adapted to the process. Recommended size
is:
 Width: 3 mm
 Height: 15 -20 mm
Examples are in accordance with this. If a different size of the total bar-graph is used, the other sizes
shall be adjusted accordingly.
The background area should be:

 Fill colour: Grey. HSL: 0 o, 0 %, 67 %. RGB 170, 170, 170
 Contour line colour: Grey. HSL: 0 o, 0 %, 67.5 %. RGB 172, 172, 172
 Contour line thickness: 0.3 mm
The vertical increasing/decreasing bar indicating measurement value should be:

 Colour: Dark grey. HSL: 0 o, 0 %, 30 %. RGB 77, 77 ,77
 Width: 2.75 mm (used in examples)
Set-point arrow when using the recommended bar-graph element size should be:
 Width: 2 mm
 Height: 3 mm
 Fill colour: Dim blue. HSL: 213 o, 46 %, 30 %. RGB: 41, 73, 112
The area where the set-point arrow moves vertically:

 Width: 2 mm
2.01, valid from 2009-12-17
Page 38 of 55
 Height: 15 mm
 Fill colour: Grey. HSL: 0 o, 0 %, 64.5 %. RGB 165, 165, 165
Alarm lines only indicate existing alarm limits. If the alarm limit is an action limit (trip limit) it is coloured
light grey. Sizes and colours should be:
 Line thickness: 0.4 mm
 Colour if not action limit: Grey. HSL: 0 o, 0 %, 52 %. RGB 133, 133, 133
 Colour if action limit: Light grey. HSL: 0 o, 0 %, 82.5 %. RGB: 210, 210, 210.
All numbers, letters and alarm indications should have the same size and font as used for controllers and
indicators. Appearances of the alarm states and alarm-like states shall be as defined in section 6.3.3.
An active alarm should be shown by using coloured rectangles with a letter code for alarm category on the
right side of the symbol. It should be located such that the upper edge of HH and H alarms matches the
alarm limit lines. For LL and L alarms, the rectangle is located such that lower edge matches the
corresponding alarm limit lines.
Figure 51: Examples showing alarms and blocking for the bar-graph element
6.3.16 Controller lines

These rules should be applied:
 The measurement value is shown where it is measured.
 The controller output to valves and valve feedback should be shown at the valve according to the
layout in Figure 29 on page 34.
 All lines to and from controllers should be stippled.
 When a signal is active, an arrow should appear at the end of the stippled line to the controller and to
the control element (e.g. valve). This is valid for both simple single-loop controllers, cascade
controllers and other control algorithms.
Examples showing cascade controllers with MPC:
Figure 52: Controller lines where both controllers are in auto mode, i.e. the slave controller is not
receiving an external set-point
2.01, valid from 2009-12-17
Page 39 of 55
Figure 53: Controller lines where the salve controller is in cascade mode
Figure 54: Controller lines where the slave controller is in manual mode
Figure 55: Controller lines where the slave controller is in advanced process control mode (APC, MPC),
receiving the set-point from the MPC-application
6.3.17 Logic and static elements for controller lines

Logic and arithmetic symbols shall follow ST012. The graphical appearance shall be as in Figure 56.
Figure 56: Examples of logic and arithmetic symbols
2.01, valid from 2009-12-17
Page 40 of 55
Figure 57: A connector between two controller lines
Details should be:

 Circle radius: 4 mm
 Circle fill colour: HSL: 0o, 0 %, 50 %. RGB: 128, 128, 128
 Circle line colour: HSL: 0o, 0 %, 41 %. RGB: 105, 105, 105
 Circle line thickness: 0.3 mm
 Symbol colour: HSL: 0o, 0 %, 30 %. RGB 77, 77, 77
 Connector radius: 1.5 mm
 Connector fill colour: HSL: 0o, 0 %, 41 %. RGB: 105, 105, 105
 No contour line
Figure 58: Example of use of logic and static elements for controller lines
6.4 Dialogue windows3[3]
See GL1212 for a solution sketch and specification for the compact dialogue window.
6.5 Additional elements in ESD/PSD safety pages
6.5.1 Input element on ESD/PSD detail pages

Status indications shall be located in two fields as shown below.
Figure 59: Status indication for the input ESD/PSD element (see descriptions below)
c) Suppressed (white U on blue rectangle)
d) Manually hidden alarm
e) Automatic hidden alarm
3[3]
These are also called control windows, object windows or faceplates.
2.01, valid from 2009-12-17
Page 41 of 55
The appearance and functionality shall be the same as for indicators on process pages. See 6.3.13 on
page 36.
6.5.2 Output element on ESD/PSD detail pages
Figure 60: The three fields of the output element on ESD & PSD detail pages (see description below)
1: a) Blocked
b) Conflict
2: a) Device status (valve open, closed, etc.)
3: a) Fault
Figure 61: Examples of use of fields in the output element on ESD & PSD detail pages
6.5.3 Element for ESD/PSD levels

The field indicating shutdown level should have black text on white background when level is released by
a direct cause. When the shutdown level is released by a higher level, the field should have black text on
orange background:
 HSL: 30 o, 100 %, 84 %. RGB: 255, 215, 174.
Figure 62: The shutdown level element
See GL1212 for an example of an ESD page.
2.01, valid from 2009-12-17
Page 42 of 55
6.6 Additional elements in fire and gas safety pages
6.6.1 Fire and gas detector symbols

Detectors defined in Figure 63 shall be used.
Gas detectors:
Line detector
Single point detector
Canal/duct
Acoustic leakage A A
Kryogen temperature
measurement K K
H2S H2S H2S

Poisonous gas CO2 CO2 CO2
No specific ! !
Flame detector with direction
Heat detector
Smoke detector
Figure 63: Symbols for fire and gas detectors

The figure shows normal and alarm state (according to priority colour, here red for illustration).
For poisonous gas, letters indicating type of gas should be used. In Figure 63 H2S and CO2 is used as
examples. An ‘!’ should be used where a specific poisonous gas cannot be confirmed.
Between the transmitter and receiver on the line gas detector, a thin, static and stippled line should be
shown.
Gas concentration (% LEL) should be displayed with numbers close to the detector symbol.
 Colour of dynamic number: Black, RGB 0, 0, 0.
 Colour of static text (e.g. %) should follow the static colour specification.
6.6.2 Fire and gas push button symbols

Symbols defined in Figure 64 shall be used.
2.01, valid from 2009-12-17
Page 43 of 55
Figure 64: Symbols for manual call point and emergency shower in normal and alarm state
Emergency showers with feedback should be displayed using the alarm priority colour when released and
with dim green coloured when not released.
Common symbol details for the single detectors:

 Total size: 5 mm x 5 mm
 Colour: Dim green. HSL 98 o, 25 %, 31 %. RGB 75, 100, 60.
 Line weight for frames around and lines outside the symbols: 0.4 mm.
 Colour for letters ‘A’, ‘K’, etc. while in normal state: HSL 102 o, 25 %, 19 %. RGB 43, 60, 36.
 Colour for letters ‘A’, ‘K’, etc. while in alarm state: Black HSL 0 o, 0 %, 0 %. RGB 0, 0, 0.
 Size of letters ‘A’, ‘K’, etc.: 2.8 mm (11 pt).
 Size of letter ‘!’: 3.2 mm (13 pt).
Additional details for some symbols:

 Flame detector: Inside line thickness: 0.4 mm.
 Heat detector: Circle diameter inside: 1.5 mm.
 Manual call point: Circle thickness inside: 1 mm.
 Emergency shower: Shower line thickness: 0.4 mm. End line thickness: 0.6 mm.
Release button
Release deluge Del Del
Release CO2 CO2 CO2
Release foam Fo Fo
Figure 65: Symbols for push buttons for control panels
Common details:
 Size: 5 mm x 5 mm.
 Line weight for frames: 0.4 mm.
 Colour for letters while in normal state: HSL 102 o, 25 %, 19 %. RGB 43, 60, 36.
 Colour for letters while in alarm state: Black, HSL 0 o, 0 %, 0 %. RGB 0, 0, 0.
 Size of letters: 2.5 mm (10 pt).
Failure or block status fields shall be located next to the detector symbols as shown for an acoustic gas
detector in Figure 66.
2.01, valid from 2009-12-17
Page 44 of 55
Figure 66: Placements of status fields together with the acoustic gas detector symbol
Detector codes or tags should not be permanently visible. A tooltip should include detector code or tag.
6.6.3 Fire extinguishing system symbols
Figure 67: Fire-extinguishing system symbols

When fire-extinguishing systems are activated/released, the symbol becomes white because this indicates
that a safety function is active, see Figure 67. Released fire fighting equipment should be displayed using
the symbol for water mist. Measured water pressure should not be displayed.
Common symbol details:

 Size of the square (slanted 45 o): 5 mm x 5 mm.
 Line thickness for frames around and inside the symbols: 0.4 mm.
 Colour for letters while in normal state: HSL 102 o, 25 %, 19 %. RGB 43, 60, 36.
 Colour for letters while in alarm state: Black HSL 0 o, 0 %, 0 %. RGB 0, 0, 0.
 Size of letters outside the symbols: 2.8 mm (11 pt).
Additional details for some symbols:

 Deluge: Diameter of circle: 3 mm x 3 mm.
 Water mist: Thickness of lines inside: 0.2 mm.
 Foam: Thickness of circular frames: 0.2 mm
 CO2 and Inergen gas: Width of triangle: 3 mm. Height of triangle: 3.1 mm.
2.01, valid from 2009-12-17
Page 45 of 55
6.6.4 Elements used in fire and gas overview pages

An acknowledged fire or gas alarm shall be displayed by using a thick frame around the actual
area/module in the overview page.
Figure 68: Example of acknowledged alarm in a fire and gas overview page
Details for the alarm frame should be:

 Alarm frame thickness: 0.5 mm.
 Alarm frame colour: According to the alarm priority colour.
 Area code letter colour when alarm: Black. RGB 0, 0, 0.
 Area code letter colour when not alarm: Grey. HSL 0 o, 0 %, 40 %. RGB 102, 102, 102.
 Area code letter size: 3.2 mm (13 pt). Bold.
Emergency routes should be marked using a dim yellow-grey colour:

 HSL 60 o, 9 %, 75 %. RGB 197, 197, 186.
Figure 69: Colour used for emergency routes on fire and gas overview pages
See fire & gas example pages in GL1212.
6.6.5 Released deluge skid

Released deluge should be displayed with the skid element becoming coloured according to the alarm
priority colour. If locally released, this should be displayed with text (e.g. ‘Local’). Released deluge should
also be displayed by hatching in the actual area. The hatching should be such that the text behind the
hatching is clearly readable. Other dynamic symbols should be on top of the hatching.
2.01, valid from 2009-12-17
Page 46 of 55
6.6.6 Element for wind direction

The symbol for showing wind direction should be as illustrated in Figure 70.
Figure 70: Element for wind direction. To the left, the plant north and the magnetic north match. To the
right, they diverge.
The dynamic (moving) dark arrow should show the wind direction. The rest of the element is static.
Table 18: Details for the wind direction element
Element Line thickness / HSL RGB
size
Static lines showing 0.3 mm 0 o, 0 %, 55 % 140, 140, 140
direction
Static circle frame line 0.3 mm 0 o, 0 %, 55 % 140, 140, 140
Static circle fill 14 mm x 14 mm 0 o, 0 %, 63 % 162, 162, 162
Static line showing 0.3 mm 0 o, 0 %, 50 % 128, 128, 128
“plant north”
Dynamic wind arrow 0.3 mm 0 o, 0 %, 30 % 77, 77, 77
frame line
Dynamic wind arrow Length: 3.0 mm 0 o, 0 %, 30 % 77, 77, 77
head fill Width (back): 3.0
mm
Dynamic wind arrow fill Length: 13.5 mm 0 o, 0 %, 47 % 119, 119, 119
(back) Width: 1.0 mm
The letters (N, S, W, E) follow the requirements for “major headings in safety pages” (section 6.2.2).
However, only the ‘N’ should be bold.
6.7 Additional elements in electro (HVAC) pages
6.7.1 Lines
 Line thickness primary line: 0.7 mm
 Line thickness secondary lines: 0.5 mm
 Line pattern: Solid
Busbars shall be drawn with primary line thickness. Cables, overhead lines, etc. shall be drawn with
secondary line thickness.
Table 19: Colours for voltage lines in electro pages

HSL RGB Example
High voltage levels Highest voltage 240 o, 46 %, 50 % 69, 69, 186
2.01, valid from 2009-12-17
Page 47 of 55
HSL RGB Example

(13.81 - 420 kV) Lowest voltage 210 o, 51 %, 73 % 151, 186, 221
Medium voltage levels Highest voltage 300 o, 46 %, 33 % 124, 46, 124
(1.01 - 13.80 kV) Lowest voltage 300 o, 45 %, 46 % 170, 64, 170
Low voltage levels Highest voltage 120 o, 42 %, 27 % 40, 98, 40
(up to 1000 V) Lowest voltage 127.5 o, 45 %, 56 % 92, 194, 105
DC voltages 0 o, 0 %, 92 % 234, 234, 234
UPS 60 o, 50 %, 67 % 213, 213, 128
 If the plant has only one voltage in the same voltage level, then the voltage line shall apply the darkest
colour.
 If the plant has two voltages in the same voltage level, then the highest voltage line shall apply the
darkest colour (as indicated in the table).
 If the plant has three voltages in the same voltage level, then a third colour shall be chosen.
6.7.2 Electrical switch symbols
Figure 71: Circuit breaker symbol, open and closed.
Figure 72: Disconnector symbol, normal type (two-position).
Figure 73: Disconnector symbol, variant (three-position).

Table 20: Details for the circuit breaker and disconnector symbols
Element Line thickness / size HSL RGB
Frame (grey) 0.4 mm / 0 o, 0 %, 50 % 128, 128, 128
10 mm x 7.5 mm (10 mm)
Symbol lines (dim green) 0.5 mm 98 o, 25 %, 31 % 75, 100, 60
Circle-diameter and 1 mm
cross-diameter
2.01, valid from 2009-12-17
Page 48 of 55
6.8 Alarm line format

The appearance of alarm list headings in the main alarm list and the graphical presentation of each field
in the alarm lists should be as illustrated:
Figure 74: The alarm lines with headings
Details should be:

 Text font: Calibri
 Text height: 3.1 mm (13 pt)
 Text colour: Black, RGB 0, 0, 0
 Line background colour 1: 0 o, 0 %, 70 %. RGB: 178, 178, 178
 Line background colour 2: 0 o, 0 %, 65 %. RGB: 166, 166, 166
 Line height: 5 mm
 Header font: Calibri
 Header height: 2.8 mm (12 pt)
 Header background colour: 0 o, 0 %, 75 %. RGB: 192, 192, 192
 Header line colour: 0 o, 0 %, 47 %. RGB: 119, 119, 119
Priority number should be:

 Font: Calibri Bold 3.1 mm (13 pt)
 Black when priority 2 (yellow) and 3 (magenta)
 White when priority 1 (red) and 4 (cyan)
 Width of the background field: 15 mm
 The priority number shall not flash.
2.01, valid from 2009-12-17
Page 49 of 55
6.9 Trend elements

The elements defined here should be used. Additional elements to be used in trend pages should be
based on these and other requirements in TR1212 using the same philosophy.
Figure 75: Example of a trend window inside a trend page
Table 21: Details of elements of the trend windows

Element Weight Colour Example
Background / fill HSL: 0 o, 0 %, 62.5 %.
RGB: 159, 159, 159
Contour line 0.4 mm HSL: 0 o, 0 %, 42 %.
RGB: 106, 106, 106
Internal stippled lines 0.3 mm HSL: 0 o, 0 %, 42 %.
(for grid) RGB: 106, 106, 106
Trend lines 0.5 mm See table below for
available colours
Available colours for trend lines are listed in two sections, colours for process media (Table 22), and other
colours (Table 23).
Table 22: Process media colours for trend lines

No. HSL RGB Example
1 31.5 o, 12 %, 37.5 % 107, 96, 84
2 31.5 o, 28 %, 45 % 146, 116, 82
3 31.5 o, 37 %, 37.5 % 131, 98, 61
4 22.5 o, 32 %, 48 % 162, 113, 83
5 60 o, 42 %, 52 % 183, 183, 81
6 60 o, 42 %, 37 % 133, 133, 54
7 49.5 o, 32 %, 67 % 197, 187, 143
2.01, valid from 2009-12-17
Page 50 of 55
No. HSL RGB Example

8 81 o, 40 %, 67.5 % 182, 205, 139
9 49.5 o, 42 %, 52 % 184, 166, 82
10 43.5 o, 32.5 %, 37 % 124, 107, 63
11 187.5 o, 36 %, 42 % 68, 135, 145
12 145.5 o, 18 %, 40 % 83, 119, 98
13 300 o, 25 %, 42 % 134, 80, 134
14 285 o, 21 %, 54 % 151, 114, 163
15 262.5 o, 25 %, 48 % 115, 91, 153
16 203 o, 40 %, 46 % 70, 130, 165
17 201 o, 35 %, 35 % 58, 99, 122
18 0 o, 0 %, 75 % 192, 192, 192
19 192 o, 25 %, 85 % 208, 223, 227
20 108 o, 27 %, 82 % 201, 221, 196
21 193.5 o, 10 %, 50 % 114, 135, 141
22 0 o, 0 %, 87.5 % 223, 223, 223
Table 23: Other colours for trend lines

No. HSL RGB Example
23 0 o, 0 %, 0 % 0, 0, 0
24 0 o, 0 %, 30 % 77, 77, 77
25 0 o, 0 %, 100 % 255, 255, 255
26 0 o, 74 %, 46 % 204, 30, 30
27 240 o, 77 %, 35 % 20, 20, 156
28 19.5 o, 69 %, 30 % 131, 60, 24
29 60 o, 64 %, 65 % 223, 223, 111
30 180 o, 69 %, 50 % 41, 216, 216
31 270 o, 80 %, 53 % 136, 41, 231
32 120 o, 65 %, 25 % 22, 105, 22
33 340 o, 65 %, 56 % 215, 70, 117
34 65 o, 80 %, 50 % 215, 230, 28
35 300 o, 61 %, 75 % 230, 153, 230
36 36 o, 79 %, 50 % 228, 148, 27
2.01, valid from 2009-12-17
Page 51 of 55
7 Additional information
7.1 Definitions and abbreviations
7.1.1 Definitions
Display: Device for presenting information that can change with the aim of making things visible, audible
or discriminable by tactile or proprioceptive perception (Source: ISO 11064-5).
Element: Basic component used to make up formats such as abbreviations, labels, items, symbols, coding
and highlighting (source: ISO 11064-5 and NUREG-0700), see Figure 76.
Format: Pictorial display of information on a visual display unit (VDU) such as message text, digital
presentation, symbols, mimics, bar chart, trend graphics, pointers (source: ISO 11064-5), see Figure 76.
HMI: Human-Machine Interface or Human-System Interface (HSI) comprises all matters and procedures of
a machine (or system) available for interaction with its (human) users (Source: ISO 11064-5). Some issues
in the HMI concept:
 Everything from the basic information elements (lines, symbols, etc.) to the system of many displays.
 Controls used together with the screen displays.
 Alarm system, safety and parameter monitoring system, group-view displays, communication
systems, and computerized operator support system.
 Operator station and workplace design.
 The maintainability of digital systems.
Operator station: A unit where the operator can perform control and monitoring. One or more operator
stations will form an operator workplace.
Operator workplace: All equipment the operator has for his/her disposal to do the monitoring and
control of his plant area. Consist of one or more operator stations.
Page: Defined set of information that is intended to be displayed on a single display screen (Source: ISO
11064-5 and NUREG-0700), see Figure 76.
Note: A window may form an entire page where it fills a single display screen.
Window: Independently controllable area on the display screen used to present objects and/or conduct a
dialogue with a user (Source: ISO 11064-5), see Figure 76.
2.01, valid from 2009-12-17
Page 52 of 55
Figure 76: Relationship between display screen, display, page, windows, formats and elements. From ISO
11064-5.
7.1.2 Abbreviations
CCR Central control room
EEMUA Engineering Equipment and Materials Users’ Association
ENS Engineering Number System
ESD Emergency Shutdown
HMI Human Machine Interface
Identical with HIS – Human System Interface
HSL
HVAC Heating, Ventilation and Air Condition
IMS Information Management System
MPC Model Predictive Control
LSD Large screen display
PSD Process Shutdown
SAS Safety and Automation System
7.2 Changes from previous version

This is the first Statoil-version of TR1212. Some content in earlier NHT (Norsk Hydro requirements) is
included.
2.01, valid from 2009-12-17
Page 53 of 55
7.3 References4[4]
EEMUA Publication No. 191, Second edition (2007), Alarm Systems: A Guide to Design, Management and
Procurement. The Engineering Equipment and Materials Users’ Association.
EN 614-2 (2000), Safety of machinery, Ergonomic design principles – Part 2: Interactions between the
design of machinery and work tasks.
GL1212 (2009), SAS Operator Station HMI Guideline
ISO 11064-5 (2008), Ergonomic design of control centres – Part 5: Displays and controls. The
International Organization for Standardization.
NUREG-0700 Rev. 2 (2002), Human-System Interface Design Review Guidelines, US Nuclear Regulatory
Commission, Office of Nuclear Regulatory Research, available from Internet via http://www.nrc.gov/
ST012 (1999), NORSOK I-005 System Control Diagram, Rev. 1, October 1999, available from Internet via
http://www.standard.no/no/Fagomrader/Petroleum/NORSOK-Standard-Categories/I-SCD-Syst-Contr-
Diag/
YA-711 (2001), Principles for alarm system design, Norwegian Petroleum Directorate/Norwegian
Petroleum Authority, available from Internet via http://www.ptil.no/. Norwegian version: YA-710.
TR0052, Statoil Engineering Number System Oil and Gas Production Facilities
TR0926, Working environment
TR1494, Alarm System
TR3030, Automation, Technical Requirements and Standards
4[4]
References are mainly given as sources for information in this document, not as documents that must be read in
order to use this document.
2.01, valid from 2009-12-17
Page 54 of 55
App A Specification of the reference monitor used for developing the TR

(informative)
The symbols (colours and sizes) were informally tested and specified on an Apple HD Cinema 23 inch
monitor that is a TFT (thin film transistor) active-matrix liquid crystal display (AMLCD) with the following
specifications:
 Display resolution: 1920 x 1200 pixels

 Display colours: 16.7 million (true colour)
 Luminance (typical): 400 cd/m2
 Contrast ratio: 700:1
 Response time (typical): 14 ms
 Pixel pitch: 0.258 mm
 Screen treatment: Antiglare hard coat
Before applying a specific monitor, special considerations should be made. The monitor used for testing
might not be suitable for control room use (24/7 service) because of burn-in problems.
2.01, valid from 2009-12-17
Page 55 of 55

Governing HMI Design

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Governing HMI Design

Uploaded by

Copyright:

Available Formats

Governing document Classification: Open

SAS Operator Station HMI

Plant operation, maintenance and modification (OMM)

Validity area: Statoil/All locations/All value chains/On- and offshore

1 Objective, target group and provision .................................................................................................................... 3

2 The design process .......................................................................................................................................................... 3

7 Additional information .................................................................................................................................................52

1 Objective, target group and provision

1.2 Target group

2 The design process

3 Goals and principles for interaction design

4 HMI setup, layout and interaction

4.1 Physical layout and number of screens

4.1.1 Physical screen setup and layout

An operator workplace should consist of two or three operator stations.

4.1.2 Physical screen size

4.1.3 Screen layout with its various areas

Figure 1: Principal organisation of pages in the two-screen solution

4.1.3.2 Navigation button area

See GL1212 for recommended solution.

4.1.3.3 Alarm lines area

4.1.3.4 Main area

4.1.3.5 System button area

4.1.3.6 Find function area

4.2 Page hierarchy and navigation

4.2.1 Page hierarchy and page identification

For displaying process information, the following levels are defined:

Level 2: System overview pages (sub‐processes). 20.00.00 21.00.00 23.00.00

20.01.00 20.02.00 23.01.00 23.02.00

Figure 2: An example of a page hierarchy

4.2.2 Navigation in the page hierarchy

4.3 HMI interaction

4.3.1 Keyboard and special keys

Figure 3: A principal sketch of a special purpose keyboard

All “direct navigation keys” and “control keys” shall be programmable.

The page number search shall be flexible and efficient.

4.3.3 Tag information

5 Requirements for presentation and interaction in the main area

5.1 Page design rules

5.1.1 General rules for all page types

5.1.2 Rules for designing process lines and devices

5.1.3 Rules for designing electro pages

5.1.4 Rules for designing shutdown (ESD & PSD) pages

5.1.6 Rules for designing control sequences on process pages

1. Current status of the sequence (running, stopped, automatic/manual, etc.)

5.2 Use and design of dialogue windows1[1]

5.3 The trend system

It shall be possible to place small trend objects in the process windows.

Common requirements for all trend windows:

5.4 Alarm list and other lists

See TR1494 for a specification of alarm description, categories, etc.

See section 6.8 for the specification of an alarm line.

6 Detailed HMI requirements

6.1.1 How to use the specified colours and sizes

6.1.2 Main area types

6.2 General information formats and elements

6.2.1 Background colour

HSL RGB Example

6.2.2 Text fonts and sizes

Table 2: Text sizes

Major or important static labels in 2.8 mm 11 pt

Major labels or headings in safety 3.2 mm Bold 13 pt