You are on page 1of 23

KINGDOM OF

KINGDOM SAUDI ARABIA


OF SAUDI ARABIA
MINISTRY OF
MINISTRY INTERIOR
OF INTERIOR
HIGH
HIGH COMMISSION FOR INDUSTRIAL
COMMISSION FOR SECURITY
INDUSTRIAL SECURITY

SECURITY DIRECTIVES
SECURITY DIRECTIVES
FOR INDUSTRIAL FACILITIES
FOR INDUSTRIAL FACILITES

SEC-01
SEC-01

Application of
Application Security Directives
of Security Directives

EC
T
@

Issue
h u e Date: 12161143 I H 1
Date: IU6/1431H 261115120} 9
I 26/05/2010

RESTRICTED
RESTRICTED
Ail Rights reserved
All Rights resemed m Copying or
HCIS. Copying
to HCIS. or disuibntion prohibited without
dislribmion prohibited without written permission from
written pcrmission HCIS
frma HCIS
I
Kingdomof
Kingdom SaudiArabia
ofSaudi Arabia
T *f~7‘="-’" Ffjj-Jiiéifl
ha‘ in

MinistryofofInterior
Ministry Interior X 'L—‘——_1-+1-U1 33");
HighCommission
High Commissionfor forIndustrial
IndustrialSecurity
Security E gt‘--:3‘ _-,~‘:U \.J-~1* 11%‘
SecretariatGeneral
Secretariat General U-55 7v'l«-‘J1
SEC-01
SEC-01 SecurityDirectives
ApplicationofofSecurity
Application Directives

Tableof
Table ofContents
Contents

1.0.
1.0. ADMINISTRATION
ADMINISTRATION ..........................................................................................
....................................3
1.1.
1.1. SCOPE ..................................................................................................................................................
SCOPE............................................................................... .. 3
1.2.
1.2. APPLICATION
APPLICATION ..........................................................................................................................................
...... .. 3
1.3.
1.3. CONFLICTS&&DEvIATIoNs
CONFUCTS DEVIATIONS .......................................................................................................................... 3
' i
2.0. DEFINITIONS
3.0.
3.0. REFERENCES
REFERENCES ....
...................... .................................................. ..............................................5
...............

4.0. GENERAL REQUIREMENTS............................................................................................................ -6

4.1.
4.1. MINIMUM
MINIMUM REQUIREMENTS THAT APPLYTO
REQUIREMENTSTHATAPPLY THISDIRECTIVE:
TOTHIS DIRECTIVE: .............................................................................. 6
................................................. ..
4.2.
4.2. FACILITY CLASSIFICATION
FACILIT~ CWSIFICATION
* . .....................................................................................................................
.. . . . . . .. . . . .. . . . .. .. 7
4.2.1.
4.2.1. Class 1 Facility
Class 1 Facrlrty .
...
.....
..........
...........
..........
.......... . . . . . .. . . . .. . .. . . . . . . .. .. . .. 77
4.2.2.
..
Facilrty ...................... ..
Ciaxs22Facih'ty.........
4.2.2. Class ....... .. .. .
......................................................................................................... ..... .. 88
4.2.3. Class
4.2.3. Clrrss33Facility ....................................................... . . . ..
............................................................ 9
Facility............................................................................................
4.2.4. Chss44Facility
4.2.4. Class
..
Fat/!tty...............................................................................................................................
. . . .. . . . .. . .. 10
4.3.
4.3. ENVIRONMENTAL
ENVIRONMENTAL REQUIREMENTS
REQUIREMENTS ............................................................................................................
.................. .. 10
4.3.1.
4.3.1. Indoor/lir Conditioned
Indoor Air Conditioned Enw'ronment....
Environment ......................................................................................... 1 0
4.3.2. Environment ...........................................................................................................
OutdoorEnvironment...............................
4.3.2. Outdoor ...................................................................... ..1.. 111
4.4.
4.4. CONTRACFOR
CONTRACTOR PREREQUISITES
PREREQU~SITES FOR
FORSECURITY
SECURITY PROJECT
PROJECT EXECUTION
EXECUTION ..................................................................... 1212
.................................................................

5.0.
5.0. GENERAI. REQUIREMENTSFOR
GENERALREQUIREMENTS PROJEtTS....................
SECURITYPROJECTS
EXECUTINGSECURITY
FOREXECUTING ..................................................... 14
5.1. PROJECT
PROJEO WORKFLOW
WORKFLOW OvERvIEw
OVERVIEW .....................................................................................................
..................................................................................................... .....14
DESIGN ..............................................................................................................................
...................................................................................................................... .. 15
5.2. CONCEPTUAL
CONCEPTUAL DESIGN I5
DESIGN - . . . . . . . . . . . . . . . . . . . . . . .. . . . . .. .
............................................................................................................................. . .. ..16
5.3. PRELIMINARY
PREUMLNARY DESIGN 16
..
.....................................................................................................................................
DESIGN ................................................................................................ .17
5.4. DETAIL
DETAILDESIGN 17
5.5. CONSTRUCTION
C~NSTR~ RELEASE
~DN .§.;...................
.....................................................
RELEASE................................................... ..
................................................................... 18
5.6. INSTALLATION
INSTAL~TION CONTRACTOR
CONTRACTOR .......... .. . . . . ..
..................................................................................................................... 18
5.‘). PERFORMANCE
PERFORMANCE REQUIREMENTS
REQUIREMENTS ............................~......................................................................... . . .
. 18
5.8. PERFORMANCE
PERFORMANCE VAUDATION
VAUDATION .....................................................................................................................
...... .. 19
5.9. MAlNTENANCE&SUPPORT
MAINTENANCE & SUPPOAT ..................................................................................................................
.... .. 20
5.10. ..............................................................................................................................................
TRA1NlNG............
TRAINING . ................................................................. .. 21
21
.. 22
............................................................................................................
..........................................................................................................
5.11. RESPONSE TO EMERGENCY EVENTS
RESPONSE TO EMERGENCY EVENTS 22

6.0.
6.0. APPLICATIONOF
APPLICATION OF REQUIREMENTS
REQUIREMENTS ....................................................................................................23

Date: I2/6114311"!
Issue Date:
Issue 16l05fl010
12151143IHI136105/2010
RESTRICTED
RESTRICTED
Ail Rights reserved
AII Rights to HCIS.
reserved to .
Copying or distribution
HCiS Copying profiibited without
dhibulioo prohibited winen permission
without written from I-ICES
pamission from HCIS
Page of23
Page 22 of 23
Kingdom of Saudi Arabia ‘T?
if
Ministry of Interior X. i%.i=*l4J' 53'3":
High Commission for Industrial Security gel.-.45! _-,-5U wt i=.-$1
Secretariat General ‘vb-J1 ESWI
SEC-01
SEC-01 ApplicationofofSecurity
Application SecurityDirectives
Directives

1.0.
1.0. Administration
Administration
l.l. Scope

This
ThisDirective providesthe
Directiveprovides theminimum companiesand
forcompanies
requirementsfor
minimumrequirements andestablishments
establishments
that
that are
are subject
subjecttoto the supervisionof
the supervision ofthe Commission for
High Commission
theHigh Industrid Security
for Industrial Security
(HCIS), Ministry of Interior, for application
(HCIS), Ministry of Interior, for applicationof
ofsecurity
securitydirectives.
directives.

1.2. Application

This
This Directive applicabletotoall
Directive isis applicable all facilities, includingnew
facilities, including newprojects, expansionof
theexpansion
projects,the of
existing
existing facilities,
facilities, and
and upgrades.
upgrades. For
For application
application to
to existing
existing facilities,
facilities, the
the Operator
Operator
shall assess his
shallassess his facilities against the
facilitiesagainst requirementsof
the requirements ofthese Directivesand
these Directives and coordinate
coordinate
with
withthe Secretariatof
GeneralSecretariat
theGeneral theHigh
ofthe Commissionfor
HighCommission for Industrial Security (HCIS)toto
Industrial Security (HCIS)
comply withthe
complywith Safety,and
Security,Safety,
the Security, and Fire
FireProtection accordingtoto these
requirementsaccording
Protectionrequirements these
Directives and
Directives and add
add toto or modify the
or modify existing facilities
the existing as required.
facilities as Where the
required. Where the HCIS
HCIS
has
has assessed
assessed deficiencies existingfacilities
deficienciesininexisting comparingthe
survey, comparing
duringaa survey,
facilitiesduring thecurrent
current
state of the facilities
state of the facilities to
to the
the requirements
requirements of
of these
these Directives,
Directives, those
those identified
identified
deficienciesshall
deficiencies shallbe corrected by
becorrected theOperator.
bythe Operator.

1.3.
1.3. Conflicts&&Deviations
Conflicts Deviations

implementation of
Where implementation
Where of aa requirement unsuitable or
requirement isis unsuitable or impractical, where other
impractical, where other
equivalent
equivalent company
company or
or industry
industry Standards
Standards and
and Codes
Codes are
are followed,
followed, or
or where
where any
any
conflict exists between
conflict exists between this
this Directive
Directive and
and other
other company
company standards
standards and
and Codes,
Codes, the
the
shall be
deviations shall
deviations resolved by
be resolved by the HCIS. Deviation lower than the requirements of
the HCIS. Deviation lower than the requirements of
this shall be
directive shall
this directive be listed
listed and submitted in
and submitted report of
in aa report compliance or
of compliance or non-
non-
compliance, with
compliance, justification and
with justification reason, for
and reason, each applicable
for each requirement of
applicable requirement of these
these
directives, and
security directives,
security and approval shall be
approval shall received from
be received from the prior to
HCIS prior
the HCIS to
implementation.
implementation. The
The documents
documents shall
shall be
be retained
retained by
by the
the company
company in
in its
its permanent
permanent
engineering files.
engineering files.

2.0.
2.0. Definitions
Definitions

HCIS
HCIS High Commission for
High Commission for Industrial The HCIS
Security. The
Industrial Security. of the
part of
HCIS isis part the
Ministry of
Ministry Interior. ItIt is
the Interior.
of the is responsible for the
responsible for development, and
the development, and
implementation, of
implementation, security, safety
of security, and fire
safety and protection strategies
fire protection strategies

Issue Date: 121611431!-lI26l05f20l0


Issue Date: 12/6/143ltll26/05/2010

RESTRICTED
RESTRICTED
All reserved to
Rights reserved
A11 Rights Copying or
HCIS. Copying
to HCIS. dislribution prohibited
or distribution without written
pmhiitad without from HCIS
petmission from
written permission HCfS
Page 33 of23
Page of 23
Kingdomof
Kingdom SaudiArabia
ofSaudi Arabia
T * [$Git/gem
'y,{u ire»-2
;r~r.4a
»-* , -- »
$;/
t,

Ministryof
Ministry ofInterior
Interior Y _ -Lu: ;:,r’,~,
z_.Is.'
High Commissionfor
HighCommission IndustrialSecurity
forIndustrial Security W ‘Sakai!
4 ~ .1 24:1.»
3% L,L.Jn
Q-pin q1$ &$

SecretariatGeneral
Secretariat General t t J lawn
2.4..» ELLI
SEC-01
SEC-01 Applicationof
Application SecurityDirectives
ofSecurity Directives

Kingdom-wide.
Opefafofi
Operator: Company ownerof
Companyororowner ofaafacility.
facility.
SD
SD SecurityDirectives.
Security Directives.
Shall:
Shall: mandatoryrequirement.
Indicatesaamandatory
Indicates requirement.
Should:
Should: recommendation or
Indicates aa recommendation
Indicates or that which isis advised
that which but not
advised but not
required.
required.
ACS
ACS AccessControl
Access System: Manages
ControlSystem: accesstoto facilities.
Managesaccess facilities.
API
API American
American Petroleum Institute: An
Petroleum Institute: An organization that defines
organization that defines
requirementsfor
requirements forpetroleum facilities. w'Ww.api.org
petroleum facilities. wiivw.api.org
ETD
ETD ExplosiveTrace
Explosive presenceof
Detectspresence
Detector: Detects
TraceDetector: ofexplosives.
explosives.
FAT
FAT Factory Acceptance Test:
Factory Acceptance conducted atat contractor
Test conducted
Test: Test facility to
contractor facility to
verify compliance with
verify compliance with requirements.
requirements.
SAT
SAT Acceptance Test:
Site Acceptance
Site conducted afier
Test conducted
Test: Test equipment installation
after equipment inspillation
at
at its locationto
finallocation
its final verify compliance
to verify with requirements.
compliancewith requirements.
IDAS
IDAS Detection &
Intruder Detection
Intruder Assessment System:
& Assessment Detects intrusion
System: Detects intrusion
attempt at
attempt perimeter, allows
at perimeter, and annunciates an
surveillanceand
video surveillance
allows video annunciates an
alarm.
alarm.
IMO Organization: The
Maritime Organization:
International Maritime
International The United Nations agency
United Nations agency
concernedwith
concerned international maritime
with international activities.
maritime activities.
i5PS International Ship &
International Ship & Port Security: A
Port Security: A set regulations that
of regulations
set of that
defines security
defines security of
of ships
ships and
and port
port facilities.
facilities. ISPS
ISPS is
is part
part of
of the
the
IMO.
IMO.
[85
ISS Security System:
Integrated Security
Integrated Provides an
System: Provides an integrated environment to
integrated environment to
and delay
detect and
detect delay intruders, monitor security
intruders, monitor environment and
security environment and
annunciate alarms generated
annunciate aiarms from facility
generated from security systems.
facility security systems.
SCC
SCC Security Center: A
Contra! Center:
Security Control facility that
A facility monitors the
that monitors the complete
complete
security environment in
security environment in aa designated and manages
area and
designated area alarms and
manages alarms and
responses to security
responses to security events.
events.
SOW
SOW Scope of
Scope Work: A
of Work: A study that defines
study that defines the for security,
requirements for
the requirements security,
and fire
safety and
safety fire protection at aa facility.
protection at facility.

Dntc: l2i6l143lH
h u e Date:
Issue 12/6/1431BI/26/05lZ01D
2610512810

RESTRICTED
RESTRICTED
Aii reserved to
Rights reserved
All Rights Copyingor
HCIS. Copying
to HCIS. distributionprohibited
or distribution withoutwritten
prohibited without from HCIS
permission from
written pennission HCB
Page of 23
Page 44 of 23
Kingdom
Kingdomof SaudiArabia.
ofSaudi Arabia
T
ofInterior
Ministryof
Ministry Interior 35 1-—:—:l>'|i5* 330;
HighCommission
High IndustrialSecurity
forIndustrial
Commissionfor Security
Secretariat
SecretariatGeneral
General RM‘ 11-9‘
SEC-01 Application
SEC-01 SecurityDirectives
ApplicationofofSecurity Directives

3.0.
3.0. References
References
Thisdirective
This thelatest
adoptsthe
directiveadopts ofthe
editionof
latestedition referenceslisted.
thereferences listed.
The selection
The materialand
ofmaterial
selectionof equipment,and
andequipment, andthe construction,maintenance,
design,construction,
thedesign, maintenance,
operation and repair of equipment and facilities
operation and repair of equipment and facilities covered
covered byby this
this Security
Security Directive
Directive
shall complywith
shallcomply latestedition
thelatest
withthe ofthe
editionof listedinineach
referenceslisted
thereferences Security Directive,
each Security Directive,
unless otherwisenoted.
unlessotherwise noted.

API
API Security Vulnerability
Security Assessment Methodology
Vulnerability Assessment for the
Methodology for the
Petroleum
Petroleum and
andPetrochemical
PetrochemicalIndustries.
Industries.

Issue Date:
issue Date: 12/6/1431]-1
121613431HI126105/2010
ZGIBSIZGIO

RESTRICTED
RES'IXIETm
All Rights
All reserved to
Righrs reserved Copying or
HCIS. Copying
to HCIS. Wstriburionprohibited
or distribution without written
prohibii without from HCIS
permission from
written permission HClS
Page of 23
Page 55 of 23
'
- - - ' zrtea £44., 44:
Kingdom of Saudi Arabia
T
Ministry of Interior )( ?+.1='-|—\-'I| 336;
High Commission for Industrial Security - i_,-=\=-all .y‘>U LN uél
Secretariat General ht:-J! am:
SEC-01
SEC-01 SecurityDirectives
ApplicationofofSecurity
Application Directives

4.0. GeneralRequirements
4.0. General Requirements
4..
4.1. Minimum reauirementsthat
Minimumreguirements applytotothis
thatapply thisDirective:
Directive:
4.1 .l.
4.1.1. TheHigh
The Commissionfor
High Commission forIndustrial (HCIS)reserves
Security(HCIS)
IndustrialSecurity righttoto
theright
reservesthe
modify and/or
modify and/or make
make changes,
changes, as
as deemed
deemed necessary,
necessary, to
to the
the Security
Security
Directiveswithout
Directives priornotice.
withoutprior notice.
4.1.2. The
Thenational securityof
nationalsecurity ofSaudi includingthe
Arabia,including
SaudiArabia, securityof
thesecurity theeconomy
ofthe economy
and the well
and the well being
being of
of its
its population,
population, depends
depends directly
directly on
on physical
physical and
and
operational safety of a range
operational safety of a range of
of facilities
facilities across
across Saudi
Saudi Arabia.
Arabia. The
The
criticality of
criticality of each facility varies
each facility depending on
varies depending on the product oror service
the product service
provided. Therefore, the High Commission for Industrial Security
provided. Therefore, the High Commission for Industrial Security (HCIS)
(HCIS)
shallhave
shall havethe
theultimate authorityon
ultimateauthority onclassifying allfacilities.
classifyingall facilities.
4.1.3. Facilities shall have
Facilitiesshall adequate levels
have adequate of protection
levels of within these
defined within
protection asas defined these
Security Directives.
Security Directives.
4.1.4. The level
The level of protection atat each
of protection facility shall
each facility dictated by
be dictated
shall be by its
its security
security
classification. HCIS reserves
classification. HCIS reserves the
the exclusive
excfusive right
right to
to classify
ciassify facilities
facilities
accordingto
according to its criteriaor
internalcriteria
its internal anynew
orany securityrequirements.
new security requirements.
Guidelinesare
Guidelines provided with
are provided with this Directive inin order
Security Directive
this Security permit the
to permit
order to the
Operator to
Operator develop
to develop a
a preliminary
preliminary evaluation
evaluationof
of facility
facility classification.
classification.
All security design
All security be carried
shall be
design shall by qualified
out by
carried out consultants or
security consultants
qualified security or
companieswho
qualified companies
qualified whohave
havebeen approvedby
been approved the HCIS.
by the HCIS.
The shall develop
Operator shall
The Operator security vulnerability
detailed security
develop aa detailed assessment or
vulnerability assessment or
rislc analysis, performed by a qualified security consultant, that
risk analysis, performed by a quaiifred security consultant, that shall
shall be
be used
used
as the
as the basis of facility
basis of This shall
classification. This
facility classification. the methodology
follow the
shall follow methodology
specified in
specified the API
in the document Security
APT document Vulnerability Assessment
Securily Vulnerability Assessment
Methodologzfor
Methodology for the
the Petroleum
Petroleum and
and Petrochemical
Petrochemical Industries.
Industries.
This classification and
facility classification
This facility risk analysis
and risk be submitted
shall be
analysis shall HCIS for
to HCIS
submittedto for
approval prior
approval to security
prior to development or
design development
system design
security system or implementation.
implementation.
4. I .9. The information
The information contained herein will
contained herein be used
will be to define
used to levels of
the levels
define the of
protection required for facilities in the Kingdom
protection required for faciIities in the Kingdom of Saudi
Saudi Arabia
Arabia (KSA)
WSA) that
that
fall under
fall under the supervision of
the supervision of the High Commission
the High Industrial Security
for Industrial
Commission for Security
(HCIS)
(HCIS)of Ministry of
the Ministry
of the of Interior, Kingdom of
Interior, Kingdom Saudi Arabia.
of Saudi Arabia.

Issue Date: 12/6/1431HC 26/05n010


Issue Date: 12/6ll43lH I 26IlJ5I20l0

RESTRICTED
RESTRICTED
AD Rights
All rese~edto
Rights reserved HCIS. Copying
to HCIS. distribution prohibited
or distribution
Copying or without written
paohibitedwithout from HCIS
permissionfrom
written permission HCIS
Page 66 of
Page of 23
23
Kingdom ~ a uArabia
KingdomofofSaudi dArabia
i _ .‘-E/2\",,;..l’;".":l;:",£F.l,l,%
/lllal
T
Ministry of Interior
Ministry of Interior BC 1-’—-.l>'|-U‘ 53}:
High Commission for Industrial Security . gum! ‘-,»‘.>U \—.i-J‘ -ti.-N
High Commission for industrial Security
Secretariat General
Secretariat General M»-ll iii-3!‘
SEC-01 Application
SEC-01
AppkationofofSecurity
SecurityDirectives
Directives

Thedetails
4.1.10. The
4.1.10. detailsofofprotection requiredfor
protectionrequired eachfacility
foreach describedininindividual
facilityisisdescribed individual
Security Directives that cover each aspect
Security Directives that cover each of
aspect the
of therequirement.
requirement.
Operatorswho
4.1.1 1. Operators
4.1.11. operateoffshore
whooperate facilitiesshall
marinefacilities
offshoreorormarine thatthey
ensurethat
shallensure they
provideananadequate
provide Ievelofofsecurity
adequatelevel measurestotoprotect
securitymeasures thesefacilities.
protectthese facilities.
Operators shall apply aspects of the International
Operators shall apply aspects of the International Ship
Ship and
andPort
PortFacility
Facility
Security Code (ISPS), issued by the IMO, that apply
Security Code (ISPS), issued by the IMO, that apply tototheir
theiroffshore
offshore oror
marinefacilities.
marine facilities.
Companiesthat
Companies operatemarine
thatoperate shalldefine
fscilitiesshall
marinefacilities exclusionzone
defineananexclusion zone
around each marine facility. They shall ensure
around each marine facility. They shall ensure that adequate
that adequate warning
warning signs
signs
aredeployed
are strategicallylocated
deployedononstrategically advisingincoming
buoysadvising
locatedbuoys traficthat
incomingtraffic that
they are entering a restricted area. These warning signs shall
they are entering a restricted area. These warning signs shall comply
comply with
with
prevailing Saudi
prevailing Arabian and
Saudi Arabian international marine
and international standards onon sign
marine standards sign
construction and
construction and design. Operatorshall
design. Operator responsiblefor
shallbeberesponsible ensuringallall
forensuring
required permissions and standards for
required permissions and standards forbuoy
buoy deployment
deployment are
are complied
complied with
with
and that the buoys are maintained in good condition.
and that the buoys are maintained in good condition.
Operator shall
Operator deploy marine
shall deploy barriers toto protect
marine barriers marine facilities.
protect marine facilities.
Deployment of these barriers
Deployment of these barriers shall not
shall, notcompromise
compromise safety
safety considerations
considerations for
for
the facility.
the facility.
TheseSecurity
4.1.12. These
4.1.12. supersedeall
Directivessupersede
SecurityDirectives olderSSD’s
all older issued by
previouslyissued
SSD'spreviously by
theHCIS.
the HCIS.

4.2.
4.2.
FacilitvClassification
Facility Classification
Facilitiesshall
Facilities shallbe
beclassified basedon
classifiedbased (4)level
four(4)
onaafour methodology. The
classificationmethodology.
levelclassification The
general criterion for each level is defined in the sections below.
general criterion for each Ievel is defined in the sections below.

4.2.1.
4.2.1. Class11Facility
Class Facility

A Class
A Class 1I facility
facility isis defined as any
defmed as facility whose
my facility or serious
destruction, or
whose destruction, serious
damage, could seriously damage the Kingdom’s economy
damage, could seriously damage the Kingdom's economy or
or gravely
gravely disrupt
disrupt
thewell
the well being of its
being of its population.
population.
Such facilities
Such characterizedby
are characterized
facilitiesare ANY of
meeting ANY
by meeting followingcriteria:
the following
of the criteria:
4.2.1.1.
4.2.1.1. Very large
Very capital investment
large capital investment

Issue Date: 12/611431H126105t2010


Issue Date: l2!6ll 431 H I’ 26a'05.Q01D
’ RESTRICTED
RESlRlCfED
permissionfrom
All Rights reserved to HCIS. Copying or dfibution prohibited without writtenpermission from HCIS
All Rights reserved to HCIS. Copying or distribution prohibited without written
HClS
Page of 23
Page 77 of 23
£fY<"5 {/73 ’-/r:
Kingdom of Saudi Arabia T
Ministry of interior
Ministry of Interior X 3-4:‘-LU" 335:
High Commission for
High Commission for Industrial
Industrial Security
Security
Secretariat General
Secretariat General 344* “W1
SEC~01 Application of
SEC-02 Application Security Directives
of Security Directives

4.2.1.2.
4.2.1.2. Loss
toss presents
presents an
an unacceptable
unacceptable financial
financial risk.
risk.
4.2.1.3.
4.2.1.3. Loss
Loss of functiodcapacity cannot be made
of function/capacity cannot be made up up by other existing
by other existing
facilities.
facilities.
4.2.1.4.
4.2.1.4. Directly
Directly andand seriously impacts hydrocarbon
seriously impacts hydrocarbon exports.
exports.
4.2.1.5.
4.2.1.5. Major threat to environment or population due
Major threat to environment or population due to damage or
to damage or
destruction.
destruction.
4.2.1.6.
4.2.1.6. Critical
Critical infrastructure,
inffastructure, regardless of capital
regardless of capital investment or availability
investment or availability
of alternates.
of alternates.

Class 11 Facilitv
Class Facility Examples
Examples
Examples
Examples ofof facilities that are
facilities that are classified
classified as
as Class
Class 1I are
are as
as follows:
follows:
4.2.1.7. Major
Major Oil
Oil &
& Gas production, processing,
Gas production, transportation and
processing, transportation export.
and export.
4.2.1.8. Major Oil
Major Refining and
Oil Refining and Storage.
Storage.
4.2.1.9. Major
Major Electricity
Electricity Generation
Generation Facilities.
Facilities.
4.2.1.10. Major
Major Water
Water Desalination Facilities.
Desalination Facilities.
4.2.1.1 1. Major
Major Commercial
Commercial & & Industrial
Industrial Sea
Sea P Ports.
orts.
4-2.1 . 1 2. Maj or Telecommunications facilities.
Major Telecommunicationsfacilities.
4.2.1.13. Major facilities using
Major facilities using or producing chemicals
or producing chemicals whosewhose flammability,
flammability,
explosiveness, toxicity and evaporability may cause serious harm
explosiveness, toxicity and evaporability may cause serious harm toto
the environment or population if the facility is damaged or
the environment or population if tbe facility is damaged or destroyed. destroyed.
4.2.1.14. Manufacture
Manufacture and and storage
storage ofcommercial explosives.
of commercial explosives.
4.2.1.15. Infrastructure that supports, or contains facilities or
Infrastructure that supports, or contains facilities services, that
or services, are
that are
deemed important to the national interest.
deemed important to the national interest

4.2.2. Class 2
Class 2 Facility
Facility

A Class
A Class 22 facility
facility is defined as
is defined facility whose
any facility
as any whose destruction,
destruction, or serious
or serious
damage, could
damage, short term
cause short
could cause term damage
damage to to the
the Kingdom’s economy or
Kingdom's economy or
temporarily disrupt
temporarily the well
disrupt the well being of its
being of its population.
population.
Such facilities
Such facilities are
are characterized
characterized by
by meeting
meeting ANY ofthe
ANY of following criteria:
the following criteria:
4.2.2.1.
4.2.2.1. Medium capital investment
Medium capital investment
4.2.2.2.
4.2.2.2. Loss of function/capacity
Loss of functiodcapacity can can be compensated for
be compensated short periods
for short periods
other existing
by other
by facilities.
existing facilities.
4.2.2.3.
4.2.2.3. Directly impacts
Directly hydrocarbon exports
impacts hydrocarbon exports but will not
but will significantly
not significantly
reduce them.
reduce them.

Issue Date: l2I'6Il431l-If ZEIDSIZOIO


- -

Issue Date: 17./6/1431HI26lDS~Ol0


RESTRICTED
RESTRICTEI)
All Rights
All reserved to
Rights reserved to HCIS.
HCIS. Copying
Copying or dis&ibutionprohibited
or distribution prohibited without written
without written permission
pumission from HCIS
from NClS
Page of 23
Page 88 of 23
Kingdom of Saudi Arabia 4}7‘.'{?»
Kingdom of Saudi Arabia T

.4 £.«.a lififillf/E
I-’ 2:

Ministry of Interior
Interior Y -.i_i..'
_ -we 331},
Ministry of
High Commission
High Commission fn.
Secretariat General
Secretariat G end
for Industrial
Industrial Security
Security \ W get-4}! E-,5,-Ll L,L.Ji any
zculi aibiil
SEC-01
SEC-01 Application of Security
Application of Directives V
Security Directives

4.2.2.4.
4.2.2.4. Possible
Possible threat
threat toto environment
environment oror population due to
population due to damage or
damage or
destruction.
destruction. -
4.2.2.5.
4.2.2.5. Critical iilirastructure, regardless
Critical infrastructure, of capital
regardless of investment or
capital investment or
availability of alternates.
avaitability of alternates.

Class
CIass 22 Facility
Facility Examples
Examples
Examples of
Examples of facilities
faciIities that are classified
that are as Class
cIassified as 2 are
Class 2 as follows:
are as follows:
4.2.2.6.
4.2.2.6. Support
Support facilities for hydrocarbon
facilities for hydrocarbon production,
production, processing,
processing,
transportation
transportation && export.
export.
4.2.2.7.
4.2.2.7. Hydrocarbon
Hydrocarbon plants,
plants, such as major
such as major GOSPYs.
GOSP’s.
4.2.2.8.
4.2.2.8. Facilities using or producing chemicals
Facilities using or producing chemicals whose whose relativeiy low
relatively low
flammability, explosiveness, toxicity and evaporability
flammability, explosiveness, toxicity and evaporability present present
medium
medium level
level risk to the
risk to environment or
the environment or population
population if
if the facility
the fxility
is damaged
is damaged oror destroyed.
destroyed.
4.2.2.9.
4.2.2.9. Infrastructure
In fiastructure that
that supports, or contains
supports, or contains facilities or services,
facilities or services, that
that
are deemed important
are deemed important to the national
to the national interest.
interest.
4.2.2.10. Major pumping facilities for oil and water.
4.2.2.1 0. Major pumping facilities for oil and water.
4.2.2.1 1. Major
4.2.2.1I. Major computer facilities that
computer facilities that manage the above
manage the above items.
items.

4.2.3.
4.2.3. Class
Class 33 Facility
Facility

A CIass
A Class 33 facility is defined
facility is defined as
as any
any facility
facility whose
whose disruption,
disruption, or
or serious
serious
damage,
damage, could cause minimal
could cause or no
minimal or no damage
damage to the Kingdonfs
to the Kingdom's economy
economy oror
would not
would not disrupt
disrupt the
the well
well being
being of its population.
of its population.
Such facilities
Such facilities are characterized by
are characterized by meeting ANY of
meeting ANY the following
of the criteria:
following criteria:
4.2.3.1.
4.2.3.1. Small
Small capital
capital investment
investment
4.2.3.2.
4.2.3.2. Loss
Loss of function/capacity
of hnctionlcapacity can can bebe compensated an extended
for an
compensated for extended
period by
period by other
other existing
existing facilities.
facilities.
4.2.3.3.
4 No direct
.2.3.3. No direct impact
impact on
on oil exports.
oil exports.
4.2.3.4.
4.2.3.4. No threat
No threat to
to environment
environment or population due
or population due to
to damage
damage or
or
destruction.
destruction.

Class 3
Class 3 Facilig
Facilitv Examples
Examules
Examples
Examples of
of facilities that are
facilities that classified as
are classified as Class 3 are
Class 3 are as
as follows:
follows:
Issue Date:
lssur Date: 1216!1431 H I 2610512010
1216i1431H126/OSIZ010
RESTRICTED
RESTRICTED
All Rights reserved
All Rights reserved to
to HCIS.
WCIS. Copying
Copying or
or distribution
distribution prohibited without written
pmkbirtad without written pamission
permission from
from HCIS
HCIS
Page 99 of
Page 23
of 23
Kingdom
Kingdom of
of Saudi
Saudi Arabia
Arabia 4‘: Y
T
Ministry
Ministry of
of Interior
Interior X 3-—.——.1-'*-‘J’ U3.)
High
- Commission
High Commission forfor Industrial
Industrial Security
Security
Secretariat
Secretariat Genera}
General M-1* i»'b"!*
SEC-01
SEC-01 Application
Application ofof Security
Security‘Directives
'Directives

4.2.3.5.
4.2.3.5. Minor
Minor Sea
Sea Ports.
Ports.
4.2.3.6.
4.2.3.6. Low
Low Capacity
Capacity Electricity
Electricity Generation. (See SA1-7-19
Generation. (See SAF-19 for details of
for details of
Power
Power Generation
Generation Facilities).
Facilities).
4.2.3.7.
4.2.3.7. Minor
Minor Telecommunications
TelecommunicationsFacilities.
Facilities.
4.2.3.8.
4.2.3.8. Bulk
Bulk Plants.
Plants.

4.2.4.
4.2,4. Class
Class44 Facility
Facility

A
A Class
Class 44 facility
facility isis defined
defined asas any
any facility
facility considered facility that
considered aa facility that
supports
supports aa class
class 1,1, 22 or
or 33 facility
facility and
and isis either
either adjacent
adjacent to,
to, or remote to,
or remote to,
Class
Class 1,1,2
2 or 3 facilities.
or 3 facilities.
Such
Such facilities
facilitiesare
arecharacterized
characterizedby bymeeting
meeting ANYANY of ofthe
the following
followingcriteria:
criteria:
4.2.4.1.
4.2.4.1. Minimai
Minimal capital
capitalinvestment
investment
4.2.4.2.
4.2.4.2. Loss Loss ofof fimctionlcapacity
functionlcapacity can can be compensated for
be compensated for an
an extended
extended
period
period bybyother
otherexisting
existingfacilities.
facilities.
4.2.4.3.
4.2.4.3. No No direct
directimpact
impacton on oil
oilexports-
exports.
4.2.4.4.
4.2.4.4. No No threat
threat to to environment
environment or or population
population due damage or
due toto damage or
destruction.
destruction.

Class
Class44Facility
FacilitvExampies
Exam~les
Examples
Examplesofoffacilities
facilitiesthat
thatare
areclassified
classifiedasasClass
Class44are
areas
asfollows:
follows:
4.2.4.5.
4.2.4.5. Supply
SupplyWarehouses.
Warehouses.
4.2.4.6.
4.2.4.6. Office
OfficeSupport
Supportfacilities.
facilities.

4.3.
4.3. Environmental
EnvironmentalRequirements
Requirements
All
Ali devices
devicesinstalled
installedfor
for Security
SecurityDirective
Directivecompliance shallbe
complianceshall becapable
capableofofoperating
operating
continually when
continualIy whensubjected
subjectedtotothe
theenvironmental
environmentalconditions
coriditionsofthe
oftheinstallation
installationsite.
site.

4.3.1.
4.3.1. Indoor
IndoorAir
AirConditioned
ConditionedEnvironment
Environment

All
All areas
areas housing
housing security
security devices
devices inin facilities shall be
facilities_ shall be cooled
cooled with
with
redundant
redundant split
split oror central air-conditioning units.
centraI air-conditioning units. Devices -
installed inin
Devices installed
cabinets
cabinetsshall
shalluse
useaacabinet
cabinetspecific
specificair
airconditioner.
conditioner.

Issue Date:l2I6l143lH
IssueDate: 1216/14318I 126/05/2010
26/052010

RESTRICTED
RESTRICTED
All
AllRights
Rightsreserved
rcscrvedtotoI-ICIS.
HCIS.Copying
Copyingorordistribution
dismbutionprohibited
prohibitedwithout
witbutwritten pumjssionfrom
writtenpermission rfomHCIS
HCIS
Page of23
Pagei010of 23
. /V -
Kingdom
Kingdom ofSaud1AIab1a
. .
of Saudi Arabia
Ir»;
fig‘,,fi.ll,.‘:»',4;l:é-ill
4 ;
f
Ministry
Ministry of
of Interior
Interior g i—'—_»l=»'-|—\J| 338;
High Commission for
High Commission Industrial Security
for Industrial Security
Secretariat General
Secretariat General but am:
SEC-01
SEC-01 Application of
Application of Security
Security Directives
Directives

Window type
Window type air
air conditioners shall not
conditioners shall not be used for
be used for cooling
cooling any
any security
security
facilities or equipment.
facilities or equipment.

4.3.2.
4.3.2. Outdoor Environment
Outdoor Environment

4.3.2.1.
4.3.2.1. Equipment to
Equipment to be
be installed outdoor shall
installed outdoor shalI be
be designed
designed to to operate
operate
without
without air conditioning or
air conditioning or forced
forced air
air ventilation
ventilation system
system andand
under the conditions
under the conditions ofof environment detailed below
environment detailed below and shall
and shalt
meet
meet the
the specified performance when
specified performance when subjected
subjected toto the
the full range
full range
of these conditions.
of these conditions.
4.3.2.2.
4.3.2.2. Equipment that is
Equipment that is not capable of
not capable of operating
operating in such temperatures
in such temperatures
shall
shall he
be instailed
installed in in aa cabinet
cabinet with
with active
active cooling specifically
cooling specifically
designed for the cabinet.
designed for the cabinet.
The
The contractor
contractor shall provide certification,
shall provide by an
certification, by an independent
independent
authority, that the
authority, that the cabinet
cabinet is
is rated
rated for
for operation
operation in the conditions
in the conditions
specified in this section.
specified in this section.
4.3.2.3.
4.3.2.3. Ambient Temperature Ranger
Ambient Temperature Range: -10”
-10' C
C to
to ++65° C (excluding
65O C (excluding
temperature
temperature rise
rise in
in cabinet)
cabinet)
4.3.2.4.
4.3.2.4. Ambient Relative
Ambient Relative Humidity
Humidity Range:
Range: 5% to l100%,
5% to 00%, non-
non-
condensing
condensing
4.3.2.5.
4.3.2.5. The norrnai
The normal airborne dust concentration
airborne dust shall be
concentration shall be considered as 11
considered as
mg/ml.
mg/ml. During sandstorrn conditions,
During sandstorm conditions, dust
dust concentrations
concentrations
reaching 500
reaching 500 mg/ml are encountered
rng/mI are encountered and
and winds may gust
winds may gust to 112
to 112
km/hr.
km/hr.
95% of
95% of all
all dust
dust particles
particles are
are less than 20
Iess than 20 micrometers and 50%
micrometers and 50%
of all particles
of all particles are
are less than 1.5
less than 1.5 micrometers in size.
micrometers in Compounds
size. Compounds
present in
present in the
the dust
dust include
include those
those ofof sodium,
sodium, calcium, silicon,
calcium, silicon,
magnesium and aluminum.
magnesium and aluminum.
When
When in wet condition
in wet condition (i00%
(100% humidity),
humidity), these
these compounds
compounds
fiinction as electrolytes
function as electrofytes and
and can result in
can result severe corrosion
in severe corrosion of
of
other materials.
other materials.
4.3.2.6.
4.3.2.6. Other
Other pollutants
pollutants present
present (ppm
@pm vol.
vol. /vol. atmosphere, worst
in atmosphere,
/vol. in worst
case)
case) are:
are:
H2S: 20
20 ppm
ppm (vol/vol)
(vol/vol)
Issue Date: l2l6l143lH I 2610512010

RESTRICTED
RESTRICTED
All Rights reserved
All Rights resewed to
to HCIS.
HCIS. Copying
Copying or distributionprohibited
or distribution without written
prohibited without permission from
written permission HCIS
from HClS
Page II
Page 1 1 of23
of 23
Kingdom of
Kingdom of Saudi
Saudi Arabia
Arabia
T
Ministry of
Ministry of Interior
Interior Y 1-.—.|=eLUI 33");
High Commission for
High Commission for Industrial
industrial Security
Security .‘,sk'-all .-_,»5U l-.1»-Jliieél
Secretariat General
Secretariat General Ltd‘ 31:35 '
SEC-01
SEC-01 Application of
Application Security Directives
of Security Directives

CO:
CO: 100
100 ppm (vol/vol)
ppm (vol/vol)
NOx:
NOx: 55 ppm (vol/vol)
ppm (vol/vol)
so’:
so2: 1 ppm (vol/vol)
100 pprn (voi/vol)
03:
03: I1 ppm (vol/vol)
ppm (voVvo1)
Hydrocarbons:
Hydrocarbons: 150 ppm (vol/vol)
150 ppm (vol/vol)

4.4.
4.4. Contractor Prere~uisites
Contractor Prerequisites for Security Proiect
for Security Proiect Execution
Execution

4.4.1. Designers,
Designers, suppliers,
suppliers, contractors
contractors and systems for
and systems security related
for security related projects at
projects at
facilities classified under the Security Directives shall be approved
facilities classified under the Security Directives shall be approved by by
HCIS.
HCIS.
4.4.2. The Operator shall
The Operator be responsible
shall be responsible for
for providing HCIS with
providing HCIS required data
with required at
data at
least three(3) months before the scheduled security related project initiation.
least three(3) months before the scheduled security related project initiation.
This
This will allow aa complete
will allow evaluation by
complete evaluation by HCIS
I-ICIS of
of the project and
the project the
and the
proposed
proposed contractors.
contractors.
4.4.3. Contractors and
Contractors suppliers shall
and suppliers shall be certified by
be certified the Ministry
by the Ministry of Interior and
of Interior and
the Ministry of Commerce & Industry.
the Ministry of Commerce & Industry.
4.4.4. The contractor shall
The contractor be licensed
shall be by the
licensed by the competent
competent authority at the
authority at the Ministry
Ministry
of Interior (the General Directorate of Public Security). The certification
of Interior (the General Directorate of Public Security). The certification '
shall clearly indicate
shall clearly indicate that
that the is authorized
contractor is
the contractor to engage
authorized to engage inin security
security
related work. It shall specify the nature and type of authorized activity and
related work. It shall specify the nature and type of authorized activity and
be included
shall be
shall included in in the commercial registration
the commercial registration certificate issued by
certificate issued the
by the
Ministry of Commerce and
Ministry of Commerce and Industry.Industry.
4.4.5. The Commercial
The Commercial Registration
Registratiwn (CR) certificate issued
(CR)certificate issued byby the Ministry of
the Ministry of
Commerce &
Commerce & Industry
Industry shall
shall clearly specify that
clearly specify that the
the contractor is authorized
contractor is authorized
to conduct security
to conduct security related work. It
related work. It shall
shall clearly state the
clearly state vendors line
the vendors of
line of
business as either importing, designing, installing or maintenance of
business as either importing, designing, installing or maintenance of securitysecurity
systems.
systems.
4.4.6. The Operator
The shall submit
Operator shall qualification data
submit qualification to the
data to the HCIS for approval
HCIS for of all
approval of all
contractors selected for design and installation of security related
contractors selected for design and installation of security related work. work.
Contract award
Contract for design,
award for installation or
design, installation or maintenance shall not
maintenance shall proceed
not proceed
until such
untiI such approvals are received
approvals are from the HCIS.
received from the HCIS.

Date: i2.'6Il43lli
Issue Date:
Iwue I 26/05/2010
12/613431H12610512010
RESTRICTED
RESTRICTED
Ali Rights
All reserved to
Rights reserved to X
HCIS. Copying or
I S . Copying or distribution prohibited without
distributionprohibited written permission
without written from HClS
permission from HCIS
Page
Page 12 of 23
12 of 23
‘ - - -
Kingdom of Saudi 4!-"."<'%~ £31? ’//I
Kingdom of Saudi Arabia
Arabia
T
X‘
Ministry of Interior z.z.i>"4J‘ 55'3")
Ministry of
High
Interior
High Commission
Commission for
for Industrial Security
Industrial Security 1 gel-'-A3‘ g->U U»-5‘ 49%|
Secretariat General
Secretariat General . M61 5413'
SEC-01
SEC-01 Application of
Application of Security
Security Directives
Directives

The data submitted


The data submitted to
io the HCIS shall
tbe HCIS shall include, but not
include, but not be
be limited to, the
limited to, the
foliowing:
following:
A) Valid
Valid copies of commercial
copies of registration, showing
commercial regisfration, specified in
license spec@ed
showing license in
4.4.5. above.
4.4.5. above.
3) Chamber
Chamber of ofCommerce membership
Commerce membership
C) Registration & classification
Registration & classijication certificate issued by
certificate issued by the
the Ministry
Ministry ofof
Municipal & Rural Afiairs.
Municipal & Rural Aflairs.
D) Company
Company profile
pro$le
E) Full
Full names
names and
and details
details about company owners,
about company owners. director,
director, senior project
senior project
personnel, system
personnel, designer and
system designer installation management.
and installation management..
F) List
List ofprevious
of previous projects
projects of
of aa similar
similar nature
nature that
that have
have been
been executed.
executed.
List
List must
must show
show the
the have
type oofwork
f work,size ofproject,
size of dates and
project, dates user of
and user of the
the
executedproject.
executedproject.
G) Whether company
mether performing the
company performing work is
the work is aor subsidiary
subsidiary oror part
p u t of
of
another
another organization
organization
H9 Head
Head office
ofice address
address & & contact details for
contact derails for all prime and
all prime and sub-
sub-
contractors.
contractors.

4.4.7.
4.4.7. The Operator shall
The Operator shall ensure
ensure that
that the company selected
the company selected for security related
for security related
work shall have adequate engineering capabilities and qualified manpower
work shaI1 have adequate engineering capabilities and qualified manpower
to design,
to design, install,
install, test and maintain
test and maintain the
the system
system and all work
execute all
and execute work
requirements.
requirements.
4.4.8. The Operator shall
The Operator shall submit
submit toto I-ICIS full details
HCIS full of all
details of all Saudi
Saudi and
and foreign
foreign
companies participating
companies in the
participating in work.
the work.
HCIS reserves
HCIS reserves the
the exclusive right to
exclusive right to approve or reject
approve or any company
reject any company
proposed to perform the work.
proposed to perform the work.
The Operator
The Operator shall ensure that
shall ensure all companies
that all participating in
companies participating in the
the work are
work are
approved by HCIS prior to work initiation.
approved by HCIS prior to work initiation.
4.4.9. The Operator shall
The Operator shall ensure
ensure that the company
that the selected for
company selected related
security related
for security
Work
work shall have prior
shall have prior technical
technical experience inside or
experience inside or outside the Kingdom
outside the Kingdom in in
similar work that matches the scope, and magnitude, of the current
similar work that matches the scope, and magnitude, of the current work. work.
4.4.10.
4.4.10. The
The security
security system contractor shall
system contractor shall formally
formally assume, in writing,
certified in
assume, certified writing,
total responsibility for
total responsibility for executing all phases
executing all phases of work. All
the work.
of the All sub-contractors
sub-contractors
shall be prior to any contract award. The procedures for
shal I be approved by HCIS prior to any contract award. The procedures
approved by I-ICIS for
approved of sub—contractors shall be the same as for the primary contractor.
approval of sub-contractors shall be the same as for the primary contractor.
4.4.11.
4-4-11. Contractors
Contractors receiving bid documents
receiving bid documents at
or working
working on security system
on security design,
system design,
installation,
installation, support
support or maintenance shall
or maintenance shall sign Agreements
Non—Disclosure Agreements
sign Non-Disclosure
Issue Date: 12f61I431H
Issue Datt: 12161143}!!!/26/05/2010
26l0Si20l0

RESTRICTED
RESrnCTED
All Rights
All Rights resewed
reserved to
to HCIS. Copying or
HCIS. Copying or distribution
disbibutionprohibited without written
prohibited without permission from
writtea permission HCIS
from HCIS
Page 13 of
Page 13 of23
23
Kingdom
Kingdomof Saudimabia
ofSaudi Arabia ‘»:,§2\",,s..lf:
T
MinistryofofInterior
Ministry Interior g 3-;-Ar"-U‘ 33'};
Commissionfor
HighCommission
High forIndustrial
IndustrialSecurity
Security
SecretariatGeneral
Secretariat General Mail will
SEC-01 Application
SEC-01 ofsecurityDirectives
ApplicationofSecurity Directives

@IDA) specifying
(NDA) that the
specifjring that the contractor maintain all
shall maintain
contractor shall work related
all work related
documentsinin confidence
documents confidenceand andnot
notdisclose anythird
them toto any
disclosethem partywithout
thirdparty without
priorwritten
prior writtenapproval
approvalof theOperator.
ofthe Operator.
4.4.12.
4.4.12. Contractors
Contractors performing related work
security related
performing security shall fomially
work shall certify, inin
formally certify,
writing,
writing, that
thatthey shall provide,
they shall for atat least
provide, for least 10 after-sales services,
years, after-sales
10years, services,
supportand
support andspare partsfor
spareparts alldevices
forall devicesandandsystems
systemsinstalled.
installed.
4.4.13.
4.4.13. The Operator
The shallprovide
Operatorshall HCISwith
provideHCIS detailed list
with aadetailed listof
ofmajor system and
major system and
equipment
equipment for
for all security related
all security related work. The list
work. The include model
shall include
list shall model
numbers,descriptions,
numbers, manufacturerand
descriptions,manufacturer andlocal
localagent.
agent.
4.4.14.
4.4.14. HCISshall
HCIS havethe
shallhave theright rejectany
righttotoreject ofthe
anyof systemsor
the systems equipment. InIncase
orequipment. case
any system
any systemor rejectedby
equipmentisisrejected
or equipment HCIS the
by HCIS the Operator replace itit
shallreplace
Operator shall
with approved
with system or
approved system equipment or
or equipment submit additional
or submit system or
additional system or
equipment details for approval.
equipment details for approval.
4.4.15.
4.4.15. The Operator shall
The Operator ensurethat
shall ensure that any required by
prerequisites required
any prerequisites current rules
by current rules
and regulationsinineffect
andregulations effectare includedininthe
areincluded projectscope.
theproject scope.
4.4.16.
4.4.16. There shall
There be no
shall be outstanding objections,
no outstanding reservations or
objections, reservations claims by
or claims by any
any
other
otherparty againstthe
partyagainst the contractor executing-thework.
contractorexecutingthe work.
4.4.17.
4.4.17. All submissionstotoHCIS
All submissions shallbe
HCISshall be inin writing.
writing.

5.0.
5.0. Requirementsfor
General Requirements
General for Executing SecurityProjects
ExecutingSecurity Projects
HCIS approve all
shall approve
HCIS shall related work
security related
all security executed by
work executed by companies fa11 under
that fall
companies that under
the supervision of
the supervision of the Directives. HCIS
Security Directives.
the Security approvals shall
HCIS approvals secured as
be secured
shall be as
detailed
detailed in
in the
the following
following sections.
sections.

5.1.
5.1. Project Workflow Overview
Proiect Workflow Overview

Projects that
Projects that fall under the
fall under jurisdiction of
the jurisdiction the HCIS
of the follow the
shall follow
HCIS shall following general
the following general
sequence
sequencetoto ensure approvals are
requisite approvals
ensure requisite received from
are received HCIS on
from HCIS timely basis:
on aa timely basis:

Issue
Issne Date:
Date: l2.l'6lI431HI26f05I2010
12M1431HI26105n010
mmcm
RESTRICTED
All
All Riglns rescrvcdto
Rights reserved Copyingor
HCIS. Copying
to HCiS. distributionprohibited
or distribution without written
prohibikedwithout from HCIS
permission from
written permission HClS
Page
Page 14 of 23
14 of 23
. . . (V 2.. I .4 2/;
Kingdom of
Kingdom Saudi Arabia
of Saudi Arabia
T
of Interior
Ministry of )6 '‘-——1=-'"J5‘
Ministry Interior . I '. 33");
High
Nigh Commission
Commission forfor Industrial
Industrial Security
Security D .,,—°|-'-=J1;,»‘>U LN-1'-.l=|
Secretariat General
Secretariat General ‘vi-=5‘ W9‘
SEC—0l
SEC-01 Application
Application of Security Directives
of Security Directives

Task
Task Description
Description Transmit
Transmit
documents to HClS
documents to HCIS
1- Concept
Concept Company
Company develops
develops conceptfor a new
conceptfor a new Operator
Operator
project
project Discretion
Discretion
2- Classification
Classification Company classifies project security
Company classflesproject security Operator
Operator
level
level as
as specified in SEC-OI
specified in SEC—01 Discretion
Discretion
3- Risk
Risk Analysis
Analysis SEC—01, section
SEC-01, section 4.1.6.
4.1.6. Operator
Operator
Discretion
Discretion
4- Conceptual
Conceptual Shows the classification
Shows the class@cutionofafacility,
of afacility, 3 months before
3 months" before
Design (1
Design (10%)
0%) the risk
the risk analysis
analysis and
and aa proposed
proposed preliminary design
preliminary design
security
security design
design overview
overview
5- Preliminary
Preliminary Shows details
Shows details ofALL aspects of
of ALL aspects of After Preliminary
After Preliminary
Design (PD)
Design (PD) security
security related
related elements
elements atfacility
atfacility Design has
Design has
completed internal
completed internal
(30%)
(30%) Operator review
Operator review
6- Detail Design
Detail Design Final Design offacility
Fino1 Design offacility afler all
after all 3
3 months
months before
before
internal and HCIS
internal and HClS reviews
reviews start of
start of
(60%/90%)
(60%/90%) _
construction
construction
7- Construction
Construction Afier
After HCIS approvals are
HClS approvals received
me received Operator
Operator
Release
Release Discretion
Disc retion
8- Final As-Built Retain
Final As-Built Retain drawings
drawings in
in internal
internal company
company None
None
Drawings
Drawings archive
archive

This
This section provides an
section provides overview of
an overview the project
of the workflow for
project workflow projects. Details
for projects. for
Details for
the specific phases can be
the specific phases can found
be found in following sections.
the following sections.
in the

5.2.
5.2. Conceptual Design
Conceptual Desim
The
The conceptual design to
conceptual design be submitted
to be submitted to HCIS shall
to HCIS shall contain three main
contain three elements:
main elements:
0 The
The Classification
Classification of
of the proposed facility
the proposed facility and
and the basis for
the basis for the classification.
the classification.

Issue
Issue Date: l2I6ll43lHl26I’05I2Dl0
Date: l216r1431H126/05/2010
RESTRICTED
RESTRICTED
All Rights
All Righrs reserved
reserved to
to HCIS.
HCIS. Copying
Copying or
or distribution prohibited without
distribution prohibited written
without w permission from
r i m prmissiion from HCIS
HCIS
Page
Page 15 of 23
15 of 23
<4.
Kingdom of
Kingdom of Saudi
Saudi Arabia
Arabia T .,:r:~.* “tees”: /Eem
.-
'
hr -' Dr

Ministry of
of Interior Y 1_._'.,.!_.._-‘ull {Jig}
Ministry Interior
High Commission
High Commission for Security \ %
Industrial Security
for Industrial god: J30 gun 1.-._.J.l
Secretariat Genera!
Secretariat General a.L.1I asbfiu

SEC-01
SEC-OX Application
Application oi’of Security Directives
Securitv Directives

0 The
The risk
risk analysis
analysis that
that has
has been
been performed.
performed.
0 Security design
Security design overview
overview
I-ICIS shall evaluate
HCIS shall this information
evaluate this information and
and infonn the Operator
inform the of its
Operator of its acceptance
acceptance or
or any
any
issues with the submission. This evaluation shall allow the preliminary design
issues with the submission. This evaluation shall allow the preliminary design to to
proceed with an accepted basis.
proceed with an accepted basis.

5.3.
5.3. Prelimingty Desig
Preliminarv Desiw
5.3.1.
5.3.1. The Operator
The Operator shall prepare aa preliminary’
shall prepare preliminary' design package, developed
design package, developed by
by aa
qualified security consultant, that details the Scope of Work (SOW),
qualified security consuItant, that details the Scope of Work (SOW),main main
and auxiliary
and auxiliary elements
elements ofof security
security related
related work
work and site specific
and site specific
requirements.
requirements.
5.3.2. The preliminary
The preliminary design package shall
design package shall include
include the foliowing at
the following at aa minimum:
minimum:
5.3.2.1.
5.3.2.1. Site
Site Layouts
Layouts showing main security
showing main security related device
activity, device
related activity,
locations and system locations.
locations and system locations.
5.3.2.2.
5.3.2.2. Area covered by
Area covered the Access
by the Control System
Access Control (ACS), Intrusion
System (ACS), Intrusion
Detection
Detection System
System (IDS) and Video
(IDS) and Video Assessment
Assessment & & Surveillance
Surveillance
System (VASS) when installed. Information shall
System (VASS) when installed. Information shall also also be
be
provided for any additional systems installed by the Operator
provided for any additional systems installed by the Operator
above
above and
and beyond the directive
beyond the directive requirements.
requirements.
The preliminary design
The preliminary design shall prov&, at
shall provide, at aa minimum, general
minimum, generai
details on
details an ACS
ACS location
location &‘ number of
& number card readers,
of card readers, IDS zones,
IDS zones,
layout & hardwme/sofiware, VASS cameras, zones &
layout & hardware/software, VASS cameras, zones &
hardware/software.
hardwave/sufhywe.
5.3.2.3.
5.3.2.3. Details of fencing,
Details of fencing, lighting, patrol road,
lighting, patrol road, security
security control room
control room
and
and clearances for each site. The information provided shall
clearances for each site. The information provided shall
include the
include the position
position of each element
of each element relative to each
relative to other and
each other and
the
the facility.
facility.
5.3.2.4.
5.3.2.4. Location and installation
Location and installation details for main
details for main gates, restricted area
gates, restricted area
gates and
gates and emergency gates. This
emergency gates. This section shall provide
section shafI provide details of
details of
all
all devices
devices that
that shall be installed
shall be installed at each of
at each these gates.
of these gates.
5.3.3. The
The Operator
Operator shall submit this
shall submit data to
this data HCIS as
to HCXS as specified in 4.4.2
specified in of this
4.4.2 of this
security
security directive.
directive.
Issue
lssne Date: l2}6:'l431l'Il26.'0Sl20ll}
Date: IZ6l14318 /26/05/2010
RESTRICTED
RESTRiCTED
All Rights
AII reserved io
Rights resewed to I-lClS.
HHCIS. Copying
Copying or
or distribution without written
prohibited without
distributionprohibited written permission
permhion from HCIS
from HClS
Page 16 of
Page 16 of 23
23
1 Kingdom
Kingdom of
of Saudi
Saudi Arabia if": lifftllfgll./'3l
Arabia
if L.L_1=‘-|-0| 53'};
Ministry of
Ministry of Interior
Interior g
High Commission
High for Industrial
Commission for Industrial Security
Security Q gtaalt L-/3U L.-U‘ '«=_~M
Secretariat General
Secretariat General M-J! BWI
SEC-01
SEC-01 Application of
Application of Security
Security Directives
Directives

5.4.
5.4. Detail Design
Detail Design
s.4.l.
5.4.1. The Operator shall
The Operator shall prepare
prepare aa detail design package,
detail design package, prepared by aa qualified
prepared by qualified
security
security consultant,
consultant, that
that provides
provides detailed technical specifications,
detailed technical specifications,
engineering
engineering design
design and list of
and list bidders for
of bidders main design
for main design elements.
elements. All
All
information
information provided to HCIS
provided to HCIS shall be up
shall be up to
to date
date at the time
at the time of submission.
of submission.
5.4.2.
5.4.2. During construction,
During construction, the
the Operator
Operator shall
shall ensure
ensure that
that ongoing
ongoing construction
construction
sites
sites shall
shall be
be surrounded
surrounded byby aa category
category 44 fence
fence and adequate separation
and adequate separation
maintained
maintained from
from existing
existing facilities.
facilities.
5.4.3. A
A copy
copy of of the
the detail
detail design package shall
design package shalt be
be provided
provided to the HCIS
to the for
HCZS for
approval at
approval at least
least three
three months prior to
months prior awarding the
to awarding the bid,
bid, ordering
ordering materials
materials
or initiating
or initiating any
any work
work specified
specified under the detaiI
under the detail design
design package.
package. This data
This data
shall include the items listed below- The Operator responsible
shall include the items Iisted below. The Operator shall be responsible for
shall be for
any delay that
any delay may occur
that may occur due
due to
to non-compliance
non-compliance withwith the time requirements
the time requirements
mentioned
mentioned aboveabove of of failing
failing to demonstrate compliance
to demonstrate compliance withwith the
the
requirements
requirements in in the
the HCIS
HCIS security
security directives
directives related to the
related to the project work.
project work.
The Operator is
The Operator is required
required to
to meet
meet I-ICIS
HCXS time for approvals
requirements for
time requirements approvals and
and
ensure full compliance
ensure fill compliance with
with the
the security directives.
security directives.
5.4.4. The detailed design
The detailed design package
package shall
shall include
include aa list of contractors
list of contractors on the bidders
on the bidders
list. The certification of the contractors, as specified under section
Iist. The certification of the contractors, as specified under section 4.4. 4.4. of
of
this security
this security directive, shall be
directive, shall be supplied as part
supplied as part of
of this
this package.
package.
5.4.5. A
A compliance
compliance list showing compliance
list showing compliance or non-compliance, with
or non-compliance, with justification
justification
and reasons, for each applicable aspect of the HCIS security directives &
and reasons, for each applicable aspect of the HClS security directives &
project specifications
project shall be
specifications shall be provided as part
provided as part of
of this
this package.
package.
5.4.6. A list
A list of
of all
all equipment,
equipment, hardware, software, and
hardware, software, and devices shall be
devices shalI be provided
provided as
as
part of this package:
part of this package:
5.4.6.1.
5.4.6. I. Manufacturers namefor
Manufacturers name for each
each system
system or
or equipment
equipment
5. 4. 6.
5.4.6.2. 2. Certificate for material compliance that shows that
Certificate for material compliance that shows material complies
that material complies
with
with required
required standards
standor&
5.4.6.3.
3.4.6.3. Period
Period in
in which
which device
device has
has been available in
been available in local and internatiomd
local and intematiofial
markets
markets
5. 4. 6. 4.
5.4.6.4. Local
Local users
users ofthe product.
of the product.
5. 4.6.5.
5.4.6.5. Name
Name && address oflocal agent
address of local agent

Issue Date: 121611431!-I I 26a’05!2Dl0

RESTRICTED
RESTRICTED
All
AII Rights reserved to
Rights reserved to HCIS.
X I S . Copying or distribution
Copying or dbtribulion prohibited
prohibited without written permission
witout wriaen permission from I-ICES
from HClS
Page
Page 17
17 of
of 23
23
, . ,. .
Kingdom of Saudi
Kingdom of Saudi Arabia
Arabia
if
Ministry
Ministry of
of Interior
Interior % ’ -'t—:—:1a'-‘-Ul 5:-*3;
High Commission for
High Commission Industrial Security
for Industrial Security g ._,9l-‘all g,-5“ l—.i=l 1-25‘
Secretariat
Secretariat General
General M-5| KW‘
SEC-01
SEC-01 Application of
AppIication Security Directives
of Security Directives

5.4.6.6.
5.4.6.6. Local
Local agent
agent Commercial Registration rss
Commercial Registration as specified
speci;fied in section 4.4.
in section of
4.4. of
this
this security directive.
security diredive.
5.4.7. The proposed
The proposed work
work execution schedule shall
execution schedule shall be
be provided
provided as part of
as part this
of this
package.
package.
5.4.8. Copies of
Copies original manufacturer
of original catalogs and
manufacturer catalogs and device
device specifications shall be
specifications shall be
provided as part of this
provided as part of this package.
package.
5.4.9. The technologies, devices
The technologies, devices and systems to
and systems to be supplied for
be supplied for the
the project
project shall
shall be
be
obtained
obtained from
fiom credible
credible and
and reputable sources and
reputable sources and manufacturers. The full
manufacturers. The full
identities
identities of at1 sources and manufiicturers shall be accurately disclosed in
of all sources and manufacturers shall be accurately disclosed in
the
the documentation
documentation sentsent to
to HCIS.
KIS,

5.5.
5.5. Construction Release
Construction Release
Once all
Once all HCIS
HCIS approvals
approvals have
have been received the
been received the design can be
design can be released to the
released to the
installation contractor for construction.
installation contractor for construction.

5.6.
5.6. Installation Contractor
Installation Contractor
The installatian
The contractor shall
installation contractor shall be certified as
be certified as specified
specified in section 4.4
in section 4.4 of
of this security
this security
directive.
directive.

5.7. Performance
Performance Reguirements
Reauirernents
5.7.1. The Operator shall
The Operator shall ensure that all
ensure that systems and
all systems devices used
and devices for security
used for security
compliance
compliance shall
shall incorporate the latest
incorporate the latest technologies
technologies that meets the
that meets the
specifications and is in production by the supplier.
specifications and is in production by the supplier.
5.7.2. Systems deployed for
Systems deployed directive compliance
security directive
for security shall operate
compliance shall in an
operate in an
integrated environment
integrated environment as
as specified
specified in
in security directive SEC-05
security directive SEC-O5 “Integrated
"Integrated
Security System”.
Security System".
5.7.3. Alarm
Alarm prioritization
prioritization shall be aa part
shall be part of all systems.
of all systems.

Issue Date:
Issue Date‘. 1216/14311-I
12/6/1431BI/26/05/2010
26/DSIZOIO

RESTRICTED
RESTRICTED
All Rights reserved
AII Rights reserved to
to HCIS. Copying
HCIS. Copying or distributionprohibited
or distribution without written
prohibitedwithout written permission from HClS
pe~missionfrom HCIS
Page 18
Page 18 of
of 23
23
Kingdom of Saudi
Kingdom of Arabia
Saudi Arabia .{Q"."f'3,fi';..ii,.l__‘(,u;.,/T,"£l\i,‘)\§il,i
Ministry
Ministry of
of Interior
Interior ; 1——‘-—:1>'i-U‘ 3313;
High
High Commission for Industrial
Commission for Industrial Security
Security
Secretariat General
Secretariat General z..L.ii 23,3"
SEC-01
SEC-01 Application of
Application Security Directives
of Security Directives

5.7.4.
5.7.4. All critical system
All critical system devices
devices such
such as, but not
as, but not limited
limited to,
to, computers
computers andand
networks, shall operate in a fully redundant mode as specified in security
networks, shail operate in a fully redundant mode as specified in security
directive SEC-05 “Integrated
directive SEC-05 "Integrated Security
Security System”
System" and other security
and other directives
security directives
that apply
that apply toto auxiliary
auxiliary systems
systems such
such as
as power
power supplies, lighting and
supplies, lighting and
communications.
communications.
5.7.5.
5.7.5. System components
System components shall have the
shall have the capability for future
capability for future expansion.
expansion. The
The
system
system shall
shall have at least
have at least 50% spare capacity
50% spare capacity when
when itit is deployed.
initially deployed.
is initially
This spare
This spare capacity
capacity includes,
includes, but
but is not limited
is not limited to,
to, computer memory and
computer memory and
disc space.
disc space.
5.7.6.
5.7.6. Systems shall
Systems shall be
be designed
designed so so that
that failure
failure of
of aa single component or
single component or
subsystem shall
subsystem shall not result in
not result the faiIure
in the failure of
of the
the system.
system. When failure
When aa failure
occurs, system
occurs, system shall
shall fail—secure or fail-safe
fail-secure or depending on
fail—safe depending on the
the requirements
requirements
ofthe function.
of the function. ..
5.7.7.
5.7.7. System components
System components and devices shall
and devices have tamper
shall have tamper sensors
sensors and shall
and shall
annunciate an
annunciate an alarm for any
d a m for attempt to
any attempt open, modify,
to open, remove, or
modify, remove, cut system
or cut system
devices and
devices communications cabling.
and communications cabling.
5.7.8.
5.7.8. Systems shall
Systems shall be designed around
be designed architecture to
open architecture
around open to permit easy
permit easy
integration of technology advances.
integration of technology advances. -
5.7.9.
5.7.9. All main system
AII main components shall
system components shall have the ability
have the to send
ability to data, text
send data, text or
or
video, as
video, as applicable,
applicable, to an external
to an external system, when main
system, when system is
main system is configured
configured
to
to do so. All
do so. All external
external system communications and
system communications data transfers
and data shall be
transfers shall in
be in
full compliance with all security considerations mentioned in the Security
full compliance with all security considerations mentioned in the Security
Directives.
Directives.

5.8.
5.8. Performance
Performance Validation
Validation
5.8.1.
5.8.1. System performance shall
System performance shall be
be validated
validated by
by aa Factory Test (FAT)
Acceptance Test
Factory Acceptance (FAT)
which shall verify compliance with all detail design and functional
which shall verify compliance with all detail design and functional
requirements.
requirements. All
All major
major exceptions shall be
exceptions shall cleared prior
be cleared prior to
to shipment to the
shipment to the
installation
installation site.
site.
The documented
The documented results
results of
of the
the FAT be used
shall be
FAT shall used as the basis
as the of system
basis of system
acceptance by the Operator. The system contractor shall produce aa FAT
acceptance by the Operator. The system contractor shall produce FAT
certificate certifying full
certificate certifying with all
compliance with
full compliance requirements which shall be
all requirements which shall be

Issue Date:
Issue 12/611431}! I/ 26."05!2D10
Date: lW6f1431H 26/05/2030
RESTRICTED
R ESTRTrn
All Rights reserved
AIL Rights reserved t
too HCIS.
HCIS. Copying or distribution
Copying or distribution prohibiid
prohibited without written permission
without written from HCIS
permission from I-lClS
Page 19
Page 19 of 23
of 23
Kingdom of Saudi Arabia ‘$527Y,,a:::“_..il~w::,i.é_C=;/liii
T
Ministry of Interior )6 1-—.—=1»'-H1‘ 5393:
High Commission for Industrial Security gball .3-DU kl:-5' -nae‘
Secretariat General kw will
SEC—0l
SEC-01 Application
Application of Security Directives
of Security Directives

signed by
signed both the
by both contractor and
system contractor
the system and the or his
Operator or
the Operator his representative.
representative.
The FAT documentation
The FAT shall be
documentation shall available for
be available for examination
examination by
by I-ICIS.
HCIS.
5.8.2.
5.8.2. Installations
Installations at
at each
each site shall be
site shall be validated by aa Site
validated by Site Acceptance
Acceptance Test
Test (SAT)
(SAT)
which shall verify compliance
which shall verify compliance with all with all installation performance
& performance
installation &
requirements.
requirements.
The documented results
The documented results of
of the SAT
the SAT shall be used
shall be used as
as the
the basis of site
basis of site
acceptance by the
acceptance by the Operator.
Operator. The SAT documentation shall be available for
The SAT documentation shall be available for
examination by HCIS.
examination by HCIS.

5.9.
5.9. Maintenance &
Maintenance & Support
Supwort
5.9.1.
5.9.1. The Operator
The Operator shall
shall ensure
ensure that
that all
dl securityinstallations
security~installationsare
are supported with aa
supported with
complete maintenance and support infrastructure.
complete maintenance and support infrastructure.
5.9.2. The system
The system contractor shall provide
contractor shall provide all
all details
details and
and tools
tools required
required for
for system
system
maintenance.
maintenance. This shall
This shall include
include maintenance manuals, software
maintenance manuals, software
diagnostics, special tools, calibration equipment and procedures.
diagnostics, special tools, calibration equipment and procedures.
5.9.3. The
The maintenance
maintenance manuals shall contain
manuals shall contain recommended
recommended maintenance
maintenance
intervals,
intervais, procedures and recommended
procedures and parts lists.
spare parts
recommended spare lists.
5.9.4. The Operator shall
The Operator shall be
be responsible for implementing
responsible for implementing aa maintenance strategy
maintenance strategy
to
to meet recommended maintenance
meet recommended for all
requirefnents for
maintenance requirements equipment.
all equipment.
5.9.5.
5.9.5. All
All emergency
emergency backup
backup generators shall be
generators shall started up
be started up and
and maintained as
maintained as
T specified in
in SEC-07.
SEC—07. Once auto-switch switchgear
switchgear shall be
shall be
specified Once aa month
month the
the auto-switch
tested.
tested.

Generator maintenance
Generator maintenance logs for the
logs for current calendar
the current calendar year
year shall
shall be
be available
available
for
for inspection by HCIS
inspection by HCIS if requested.
if requested
5.9.6. All components
All shall have
components shall regularly scheduled
have regularly preventive maintenance
scheduled preventive maintenance
(PM) at least once every 6 months with the exception
(PM) at least once every 6 months with the exception of of emergency backup
emergency backup
generators which
generators which must
must bebe tested
tested as
as stated
stated in
in section 4.5 of SEC-07. The
section 4.5 of SEC-07. The
actual PM
actual PM performed shall be
performed shall documented and
be documented and available
available for review for
for review at
for at
least
least one
one calendar
calendar year.
year. During
During PM the performance
fM the performance of of the
the component shall
component shall
be validated
be validated toto perform
perform to
to its design requirements.
its design requirements.

Issue Date:
Issue 12n‘6l'I43]H
Date: l I 26fl}5f20I0
21611431H /2#05~010
’ RESTRICTED
RESTRICTED
All Rights
At1 reservedto
Rights reserved to HCIS. Copying or
HCIS. Copying or distribution prohibited without
distribution prohibited without written pamission from
written permission from HCIS
HCIS
Page 20 of
Page 20 of 23
23
Kingdom of Saudi Arabia 473:2” llf:éll.f&;/éllal
T
Ministry of interior X 1-——:-.1=*'—\3l 535.;
KVJ
Ministry of Interior
High
High Commission for Industrial
Commission for Industrial Security
Security q.-.5.-.,,Ji _.,.=,u L,1.Ji 2.-__u
Secretariat General
Secretariat General a..L..n 2.1.3!»
SEC-01
SEC-01 Application
Application of Security Directives
of Security Directives

5.9.7. The Operator


The Operator shall
shall have
have aa facility, manned 24
facility, manned hours aa day,
24 hours day, 7
7 days
days aa week,
week,
available for field personnel to report failures
availabIe for field personnel to report failures via via telephone, radio or
telephone, radio or
security system
security system telemetry.
telemetry.
5.9.8. Operator
Operator shall
shall bebe responsible
responsible for classifying system
for classifying system failures
failures as critical or
as critical or
non-critical failures. Critical
non-criticat failures. Critical failures shall bc
failures shall be rectified as soon
rectified as as possible.
soon as possible.
5.9.9. System
System failures
failures and
and alarms
alarms shall be analyzed
shall be analyzed quarterly
quarterly by
by the
the Operator
Operator to
to
identify potential problem areas. This quarterly review shall be
identify potentiaI problem areas. This quarterly review shall used as
be used as the
the
basis for
basis for the
the development
development of
of strategies
strategies to
to rectify the problems
rectify the problems identified.
identified.
5.9.10.
5.9.10. The Operator
The Operator shall
shafl maintain
maintain documentation
documentation for all security
for all security equipment
equipment
installed. This documentation shall include
installed. This documentation shall include full contact
full details of
contact details af
component manufacturers,
component manufacturers, part numbers, recommended
part numbers, recommended sparespare parts
parts and
and
maintenance manuals
maintenance manuals needed
needed for
for each
each security
security installation.
installation.
5.9.l
5.9.1 1.
1. The Operator
The Operator shall
shall maintain
maintain aa full
full set
set of As Built
of As drawings for
Built drawings all security
for all security
systems and civil work. The
systems and civil work. The drawings shall be
drawings shal maintained as
be maintained soft copy
as soft copy in
in an
an
easily accessible
easily accessible format.
format. The
The Operator
Operator shall
shall maintain an index
maintain an index ofof all
all
drawings pertaining
drawings pertaining to all security
to all related work.
security related work. All
All drawings shall be
drawings shall be
stored in a secure location and in a secure format.
stored in a secure location and in a secure format.
5.9.1:."
5.9.1 2. All Maintenance activities
All Maintenance activities shall
shall be documented and
be documented retained for
and retained for aa I2
12 month
month
period.
period. The
The documentation
documentation shall be available
shall be available for
for review by HCIS.
review by HCIS.
5.9-13.
5.9.13. The
The Operator
Operator shall
shall conduct
conduct periodic
periodic audits of all
audits of security equipment
all security equipment as
as
specified
specified in
in SEC~12.
SEC-12.

5.10. Training

The Operator shall


The Operator shall ensure
ensure that
that training
training isis provided
provided to
to security personnel in
security personnel the
in the
operation and support of all security related systems
operation and support of all security related systems and
and devices.
devices.
The operational
The operational training
training requirements
requirements are as follows:
are as follows:
5.10.1. Training shall
Training be provided
shall be provided toto security
security personnel, assigned to
personnel, assigned to aa location
location with
with
aa new security instalIation,
new security installation, prior
prior to
to system or device
system or device deployment.
deployment.
5.10.2. The training shall
The training shall cover
cover procedures,
procedures, general
general system operation, failure
system operation, failure
reporting procedures,
repoaing procedures, methods
methods for handling reported
for handling reported errors
errors and alarms,
and alarms,
alarm acknowledgement and
alarm acknowledgement and response.
response.

issue Date:
issue Date: l2I6/143111! 26/05/2010
1W6/143111/ 261W10
RESTRICTED
RESTRICTED
All Rights
All Rights reserved
reserved to
to HCiS.
HCIS. Copying
Copying or
or distribution prohibited without
disbibution prohibited written permission
without writtm permission from
from 1-108
HCIS
Page 21
Page 21 of
of 23
23
' - - 4}?’ ‘V3: £5’-'7': f/é
Kingdom of Saudi
Kingdom of Arabia
Saudi Arabia
T
Ministry of Interior
Ministry of Interior X ‘-...'—.l>"-*5‘ 335;
High
High Commission
Commission forfor Industrial Security
industrial Security .59‘-'~=J1.-,-Bil ‘=1-JH==&'
Secretariat General
Secretariat General -LL-JI astfiil
SEC-01
SEC-01 Application
A ofnSecuritv
~ ~ l i c a t i oof Security Directives
Directives

5.10.3.
5.10.3. The
The Operator
Operator shall maintain logs
shall maintain logs of all training
of all activities. The
training activities. The logs
logs shall list
shall list
all training provided
all training provided to
to personnel
personnel and
and include
include personnel
personnel name, date and
name, date and type
type
of training
of training provided.
provided.
5.10.4.
5.10.4. Personnel assigned to
Personnel assigned locations with
to locations with security installations shall
security installations undergo aa
shall undergo
short training period
short training prior to
period prior to assuming their new
assuming their new duties.
duties.

The
The support training requirements
support training are as
requirements are as follows:
follows:
5.10.5.
5.10.5. Personnel
Personnel directly
directly involved
involved in
in system
system support
support shali be provided
shall be provided training in
training in
all aspects of systems software,
all aspects of systems software, hardware,
hardware, diagnostics preventive
and preventive
diagnostics and
maintenance.
maintenance.
5.10.6.
5.10.6. The
The Operator
Operator shall
shall maintain
maintain logs
logs of ail training
of all activities. The
training activities. The logs
logs shall list
shall list
all training provided to personnei and include personnel name, date and
all training provided to personnel and include personnel name, date and type type
of
of training
training provided.
provided.

5.1}.
5.1 1. Response to Emergency
Response to Emergency Events
Events
The Operator shall
The Operator shall setup
setup the
the infrastructure, procedures and
infrastructure, procedures and personnel
personnel to
to develop
develop aa
cohesive, rapid response to an emergency event. This shall include the
cohesive, rapid response to an emergency event. %is shall indude the management management
of fixed and
of fixed and mobile
mobile security
security assets
assets using
using aa proven
proven command
command and and control
control system
system
where
where anan overview
overview and
and details
details ofof emergency
emergency events
events shall
shall be
be available
available to operators.
to operators.
Personnel designated for
Personnel designated for aa rapid response force
rapid response force shall
shall be
be provided
provided with additional
with additional
training as needed to meet expected emergencies.
training as needed to meet expected emergencies.
The security
The security directives issued by
directives issued HCIS shaII
by HCIS shall be
be used
used as the basis
as the of defining,
basis of defining,
preparing and training
preparing and training for
for emergencies.
emergencies.

Issue
Issue Date:
Date: 12/G}l43lH 26lD5f20l0
lW611431H I/26/05/2010
RESTRICTED
RESTRICTED
All Rights
AIL Rights reserved
reserved to
to HCIS.
HCIS. Copying
Copying or
or distribution prohibited without
disbtMin prohibited without written permission from
written permission HCIS
from HCIS
Page 22
Page 22 of
of 23
23
/"
Kingdom of
Kingdom Saudi Arabia
of Saudi Arabia 57 Y :4‘ ix‘: i‘) i
T
Ministry of
Ministry of Interior
Interior X - ELF-i-*1‘ 3' "2-
High Commission
High Commission for Industrial Security
for Industrial Security got‘-=15 -J->U Li:-1| «git
Secretariat General
Secretariat General 1-la-3| 54W‘
SEC-01
SEC-01 Application of
Application of Security
Security Directives
Directives

6.0.
6.0. Application of
Application of Requirements
Requirements

This section
This section lists
lists how the elements
how the elements of this security
of this security directive
directive apply
apply to facilities depending
to facilities depending on
on
their classification
their classification using
using the
the criteria stated in
criteria stated section 4.2
in section 4.2 of
of this
this directive.
directive.

. .
APPLICATION
APPLICATION
. .. . .
E LL E
E E M
M E
ENN T
T ' . ..' '. CIass I I Class 2
CIass 2 Class 33 1 Class
1 Class Class 4
4
Minimum Requirements that Apply
ents that Apply to this
to this ,/ ,/ ,/ ,/
Directive

Facility Ciassification V /

Environmental Requirements n/ 1/

Contractor Prerequisites for Security Project ,/ /


Execution

General Requirements for Executing J J ,/ J


Security Projects

Issue Date:
Issue Date: 12/6IlQlH 26/05/2010
12f6/143111]126n5I2010
'
RESTRICTED
RESTRICTED
All Rights reserved to HCIS. Copying or distribution prohibited without written permission
All Rights resewed to HCIS. Copying or diskibution prohibii without wriaen permission from from HClS
HCIS
Page 23 of
Page 23 23
of 23

You might also like