Power and Water Utility Company for Jubail and Yanbu (MARAFIQ) Master Specification: MQ-SP-T-7814

Project Name: Date: 04 Apr 2011

Contract Number: Page: 1 of 13
Revision: 0

SPECIFICATION – INFORMATION SECURITY (SECURITY DEVICES AND SYSTEMS)

This specification has been revised as indicated below and described in the revision record on the following
page. Please destroy all previous revisions.

Revision Date Originator's Reviewed/Checked By Pages

No. Name & Initials Name & Initials
0 4/4/2011 Cory A. Haynes Anna M. Pham 13

APPROVALS SIGNATURES DATE

Lead Engineer Thomas B. Robinson

Project Manager: Russell Shulz
Client Approval:

ISSUED FOR : Construction X Other Review/Approval

Power and Water Utility Company for Jubail and Yanbu (MARAFIQ) Master Specification: MQ-SP-T-7814
Project Name: Date: 04 Apr 2011
Contract Number: Page: 2 of 13
Revision: 0

SPECIFICATION – INFORMATION SECURITY (SECURITY DEVICES AND SYSTEMS)

Record of Revisions
Revision Date Description
No.

0 4/4/2011 Issued for Review/Approval

Power and Water Utility Company for Jubail and Yanbu (MARAFIQ) Master Specification: MQ-SP-T-7814
Project Name: Date: 04 Apr 2011
Contract Number: Page: 3 of 13
Revision: 0

SPECIFICATION – INFORMATION SECURITY (SECURITY DEVICES AND SYSTEMS)

TABLE OF CONTENTS

Section

1.0 GENERAL......................................................................................................................................................... 4

2.0 REFERENCES ................................................................................................................................................. 4

3.0 FACILITY DESCRIPTION ........................................................................................................................... 4

4.0 SCOPE OF FACILITIES................................................................................................................................ 5

5.0 SCOPE OF SERVICES .................................................................................................................................12

6.0 TESTING AND ACCEPTANCE .................................................................................................................13

Power and Water Utility Company for Jubail and Yanbu (MARAFIQ) Master Specification: MQ-SP-T-7814
Project Name: Date: 04 Apr 2011
Contract Number: Page: 4 of 13
Revision: 0

SPECIFICATION – INFORMATION SECURITY (SECURITY DEVICES AND SYSTEMS)

1.0 GENERAL

A. This specification defines the minimum mandatory requirements governing the design
and installation of the information security system, including security devices and
systems, for the Power and Water Utility Company for Jubail and Yanbu (MARAFIQ).

B. The design, permitting and approval of this system are the Contractor’s
responsibility. Installation, commissioning and startup shall be by a contractor
experienced in the technology and approved by MARAFIQ.

2.0 REFERENCES

A. This document defines the functional requirements, while allowing flexibility to benefit
from Contractor’s experience and expertise. The use of equipment and components that
are field proven is preferred. Where the intent of this document may be satisfied with
variations that permit greater utilization of Contractor’s standard techniques, Contractor is
encouraged to highlight the differences and propose alternatives for MARAFIQ’s
consideration.

B. MARAFIQ Engineering Standards:

a. MQ-SP-T-7803 : Local Area Network (LAN)

b. MQ-SP-T-7804 : Telephone System and Intercommunication Equipment

c. MQ-SP-T-7805 : Telephone Instrument and Intercom System

d. MQ-SP-T-7808 : Public Address Sound System

e. MQ-SP-T-7809 : Physical Security (Building Security Access System)

f. MQ-SP-E-6001 : Electrical Design

3.0 FACILITY DESCRIPTION

A. The security system shall be designed to accommodate future expansions.

B. Plant Personnel

 The expected number of plant personnel for the dayshift is included for basis
of sizing equipment and systems. The security system console(s) will be
located in the Security Center located on the ground floor of the Building
outside the process plant area. All entrances to this building and selected
offices within this building shall be through restricted access control portals
requiring an acceptable personnel badge and/or keypad code. All other
buildings inside the process plant area will not require access control except
as required by MARAFIQ and as specified in this document.
Power and Water Utility Company for Jubail and Yanbu (MARAFIQ) Master Specification: MQ-SP-T-7814
Project Name: Date: 04 Apr 2011
Contract Number: Page: 5 of 13
Revision: 0

SPECIFICATION – INFORMATION SECURITY (SECURITY DEVICES AND SYSTEMS)

 The Contractor’s design for the Security System shall include all phases. The
system shall be designed for expandability for future units.

 The Owner shall provide an Emergency Control Center (ECC) to be located in

the Security Center. The purpose of the ECC is to provide a location for
Owner executives to assemble and manage emergency situations.

4.0 SCOPE OF FACILITIES

A. The Contractor shall provide a fully functional integrated security system with the
computer system being the focal point for all elements. This system will assist the
security manager and staff in maintaining security at the site and shall be designed to
accommodate all security personnel requirements. Documentation, system languages
and access control displays shall be in Arabic and English as per MARAFIQ
requirements.

B. The security system shall be designed with redundancy for critical elements so that
failure of a single element will not compromise the overall functionality of the system.

C. All electrical equipment including CCTV cameras shall meet the electrical classification of
the area where they are to be located.

D. All databases shall be integrated as required.

E. As a minimum the security system shall be equipped with the following systems and
subsystems.

F. Access Control Systems

1. Access Control and Badging Systems

a. All equipment and software required for a sitewide integrated access

control and event/alarm management system. As per MARAFIQ
requirements for access control, the main building lobby entrance to be
remotely controlled by the security. An intercom shall be provided at this
entrance with the following pushbuttons for communicating with the
security personnel
 Receptionist (for communication during normal hours)
 Security Center (for communication after hours)

b. All equipment and software required for a sitewide integrated electronic

digital photo identification system.

c. All video imaging equipment required for ID badging

d. Integrated access control and photo identification databases

Power and Water Utility Company for Jubail and Yanbu (MARAFIQ) Master Specification: MQ-SP-T-7814
Project Name: Date: 04 Apr 2011
Contract Number: Page: 6 of 13
Revision: 0

SPECIFICATION – INFORMATION SECURITY (SECURITY DEVICES AND SYSTEMS)

e. Integration into the overall security system

f. Capability to record all information

g. All supplies for creating badges

h. Ability to produce reports

i. Automatic updates to the security system databases and remote units

j. PC Workstation(s), (Server/CPU/Monitor/Keyboard, printers, etc) to

accommodate all security personnel requirements

k. Receptionist – PC workstation with required software and hardware

l. Power panels for access control equipment in all locations

m. Card readers with pin entering devices (PED’s)

n. Proximity card readers

o. Door contacts

2. Gatehouses (Manned and Unmanned) and Main Plant Entrance

a. Full height turnstiles adjacent to main plant gatehouse entrance

b. Card readers with pin entering devices (PED’s)

c. Heavy duty sliding vehicle gate(s)

d. Vehicle drop gate(s)

e. Rumble strips

f. Electric gate control shall be from each gatehouse. However the plant’s
main entrance shall be controlled from the Main Plant Gatehouse.

g. Power and access control panels

h. Manual override to electronic gates

i. Metal detectors for pedestrians

j. Mobile metal detectors for security guards

k. Integrated inter-phone system at gatehouses and the security center

Power and Water Utility Company for Jubail and Yanbu (MARAFIQ) Master Specification: MQ-SP-T-7814
Project Name: Date: 04 Apr 2011
Contract Number: Page: 7 of 13
Revision: 0

SPECIFICATION – INFORMATION SECURITY (SECURITY DEVICES AND SYSTEMS)

G. Intruder Detection Systems

1. Perimeter Microwave System

a. Microwave antenna(s)

b. Mounting pole(s)

c. All equipment associated with operating and sending alarm signals to the
security system

d. Integration into sitewide security system

e. Linked to the security CCTV System

f. Attempted intrusions shall automatically display on the security system

monitors and sound an audible alarm

g. Operate in parallel with the fence fiber detection system but function
independently

2. Perimeter Fiber Optic Detection System

a. Fiber Optic Cable sensors installed in the fences

b. All equipment associated with operating and sending alarm signals to the
security system

c. Attempted intrusion alarms shall automatically display on the security

system monitors and sound an audible alarm

d. Linked to the security CCTV System

e. Integration into sitewide security system

f. Operate in parallel with the microwave detection system but function

independently.

3. Closed Circuit Television (CCTV)

a. CCTV cameras with pan, tilt and zoom (PTZ) for coverage of the entire
perimeter fence, checkpoints, gatehouses, gates, vehicle lock, tankage
areas (within dikes), substations and protected building areas.

b. PTZ color preset cameras for unmanned gates. These cameras shall be
Power and Water Utility Company for Jubail and Yanbu (MARAFIQ) Master Specification: MQ-SP-T-7814
Project Name: Date: 04 Apr 2011
Contract Number: Page: 8 of 13
Revision: 0

SPECIFICATION – INFORMATION SECURITY (SECURITY DEVICES AND SYSTEMS)

integrated with the interphone system.

c. All equipment associated with CCTV operations, monitoring, switching,

recording and sending alarm signals to the security system

d. Control of CCTV system from the security system console

e. Ability to display the input from any camera

f. CCTV matrices shall be provided

g. CCTV monitors linked to the main CCTV matrix with full function
keyboard allowing selection of any system camera. This requirement is
for the Access Control/ID offices.

h. Ability to record input from any camera after an alarm has been
generated. This is in addition to the VCR recording.

i. Audio and video recording equipment

j. Attempted intrusions shall be displayed on the security system monitors

and sound an audible alarm

k. Mounting Poles

l. Backlighting and masking

m. All equipment associated with operating and displaying the CCTV

cameras in the security center and at gatehouses.

n. CCTV monitors and PC Workstation(s), (Server/CPU/Monitor/Keyboard,

printers, etc) linked to the main CCTV matrix in the security system

o. Monitor bank(s)

p. Large screen(s) for system displays

4. Turnstiles

a. Turnstiles shall be installed in all required locations and integrated into

the overall security systems.

H. Perimeter and Security Lighting System

1. Electrical installation shall be as per MARAFIQ standards.

2. Security lighting for the plant perimeter, vehicle lock, checkpoint(s), gatehouse(s)
Power and Water Utility Company for Jubail and Yanbu (MARAFIQ) Master Specification: MQ-SP-T-7814
Project Name: Date: 04 Apr 2011
Contract Number: Page: 9 of 13
Revision: 0

SPECIFICATION – INFORMATION SECURITY (SECURITY DEVICES AND SYSTEMS)

and any other security lighting.

3. Lighting control panels in the security center.

4. Computer plots showing lighting grids

5. Cables

6. Power distribution equipment

7. Grounding

8. Underground routing and trenching

9. Lighting poles with hand hold covers and base plates, lighting fixtures and lamps,
brackets, and foundations.

10. Concrete duct banks for road crossings

11. All equipment and material, software, engineering and construction drawings,
construction services, testing and commissioning, documentation, record books,
as-built drawings, systems and integration required for compliance with
MARAFIQ specifications.

I. Scope covered by Others:

1. Security and perimeter fence

2. Power feeds

3. Buildings

4. HVAC

5. Plant PABX telephones

6. Hotline/direct line telephones

7. Radio System

J. Optional Items

1. Interface to SAP R/3 version 4.6c for time and attendance information

K. Overall Security System Requirements

1. All software provided for this system shall be commercial off the shelf.
Power and Water Utility Company for Jubail and Yanbu (MARAFIQ) Master Specification: MQ-SP-T-7814
Project Name: Date: 04 Apr 2011
Contract Number: Page: 10 of 13
Revision: 0

SPECIFICATION – INFORMATION SECURITY (SECURITY DEVICES AND SYSTEMS)

2. A digital computer monitoring system shall be installed to process the information

on binary numbers. It shall be capable of storing and retrieving large quantities of
information, dealing with them accurately, and performing all preprogrammed
instructions simultaneously.

3. All access control, intruder detection, television surveillance systems (CCTV),

and system fault indication shall be connected with the security system.

4. Data backup system for archiving and disaster recovery shall be provided.

5. The system shall have a loop configuration providing 100% resilience.

6. The system shall be configured in a redundant mode such that the failure of the
communication loop for data collection shall not impact operation of the system.

7. The system shall be connected utilizing fully tolerant LAN technology via server
on an internationally accepted LAN standard.

8. The system shall have internal diagnostic capability that will clearly display any
faults or potential faults in an informative and clear manner.

9. The system shall have multi-level security passwords. As a minimum the

following levels shall be provided:
 System Manager

 Supervisor

 Operator

 Maintenance

 Development

10. Recorders of events shall be used to record all cases of entry and exit as well as
all change in the protected areas.

11. Graphic maps shall be created and installed for alarm indication in all areas
covered by security systems.

12. Alarm signals shall be audible inside the security center, sending signals to show
the monitoring area on screen.

13. An alternate transmitter and receiver shall be provided in case the monitoring
system fails.

14. All sensing equipment shall be included.

Power and Water Utility Company for Jubail and Yanbu (MARAFIQ) Master Specification: MQ-SP-T-7814
Project Name: Date: 04 Apr 2011
Contract Number: Page: 11 of 13
Revision: 0

SPECIFICATION – INFORMATION SECURITY (SECURITY DEVICES AND SYSTEMS)

15. Switchboard(s) shall be installed for use by the operator(s) and communication
processor(s) to contact the receivers installed throughout the protected area.

16. The system shall be designed to automatically retrieve and display maps of all
alarms.

17. A main map showing all areas of concern, control points, intruder detection,
location of TV surveillance cameras and everything that would assist in cases of
emergency shall be provided.

18. Mimic panel using mosaic tile technology in order to support easy modification or
a large dynamic computer display with a site map and lower level maps of
buildings or various zones.

19. An Uninterruptible Power Supply (UPS) Network that meets all

MARAFIQ requirements shall be provided.

20. All system test switches, alarm panels and alarm management
software shall be provided.

21. Software and hardware systems shall be designed with redundancy.

22. Redundant intruder detection systems that are integrated but function
independently shall be provided.

23. All satellite data collection panels for a complete integrated system shall be
provided.

24. The system shall be installed to accommodate all phases, and the additional
20% installed growth capability required.

25. All furniture for the security center and receptionist console in the General
Services Building lobby shall be provided.

26. A large battery operated clock shall be provided.

27. Storage cabinets for files, orders, standing orders, emergency plans, accident
records, telephone directory, names and addresses of responsible officials in the
concern and in the respective agencies shall be provided. It shall be provided
with all necessary equipment and stationery.

28. Upon activation of the emergency audible alarm system the security system will
also receive an audible notification.

29. Connectivity to emergency outside authorities will be through a hand held radio
with charger.
Power and Water Utility Company for Jubail and Yanbu (MARAFIQ) Master Specification: MQ-SP-T-7814
Project Name: Date: 04 Apr 2011
Contract Number: Page: 12 of 13
Revision: 0

SPECIFICATION – INFORMATION SECURITY (SECURITY DEVICES AND SYSTEMS)

30. The security center and gatehouses will be provided with telephones from the
plant PABX as required.

31. Integration of subsidiary alarm display from the Fire and Gas System will not be
required. Activation of the plant audible alarm system will make Security
Personnel aware of the existence of emergency conditions on site.

32. System shall be able to produce all reports required.

5.0 SCOPE OF SERVICES

As required by the specification, the Contractor shall perform as a minimum the following
activities for a complete turn-key, operational system:

a. Develop the Security System design specification. This specification will be reviewed
and approved by MARAFIQ.

b. Design, engineer and install the entire system, including inside and outside building
cables routing.

c. Provide Face-to-face communication is necessary to ensure successful interfaces.

Including but not limited to:

1. Inside and outside building cable routing

2. Architectural

3. Power/grounding

4. HVAC

5. Structural

d. Procure equipment

e. Install all parts of the system

f. Obtain MARAFIQ approval for all work as required

g. Obtain all permits as required

h. Factory Acceptance Tests (FAT)

i. Site Acceptance Tests (SAT)

Power and Water Utility Company for Jubail and Yanbu (MARAFIQ) Master Specification: MQ-SP-T-7814
Project Name: Date: 04 Apr 2011
Contract Number: Page: 13 of 13
Revision: 0

SPECIFICATION – INFORMATION SECURITY (SECURITY DEVICES AND SYSTEMS)

j. Commission and turnover the system to Owner

k. Operations and maintenance training, including training documentation

l. Provide as-built documentation

m. Obtain MARAFIQ acceptance of security system

6.0 TESTING AND ACCEPTANCE

A. Contractor shall perform a Factory Acceptance Test (FAT) to be witnessed by MARAFIQ.

1. Contractor shall notify MARAFIQ two (2) weeks prior to FAT testing. Prior to
testing, Contractor shall create a detailed FAT procedure to be submitted 30 days
in advance for approval by MARAFIQ.

2. The tests witnessed by the MARAFIQ shall include loop by loop checks of
each input, output and control function for proper operation and display.

3. Once the system has been accepted the Contractor shall create a copy of the
configuration data on floppy disk, tape or other media type that shall be shipped
separately to the site. This configuration data shall be used to reconfigure the
system on site.

4. After the system has been commissioned and accepted on site the Contractor
shall make two (2) copies (tape, disk, etc.) of system files which shall retained by
MARAFIQ for reloading data and configuration in the event they are corrupted.

B. Contractor shall perform a Site Acceptance Test (SAT) to be witnessed by MARAFIQ.

Prior to the SAT, the Contractor shall create a detailed SAT procedure to be submitted 30
days in advance for approval by MARAFIQ. Contractor shall notify MARAFIQ in writing
two (2) weeks in advance of the SAT.

C. The security system shall have been fully tested, commissioned, and approved by
MARAFIQ prior to plant start-up.