DEP SPECIFICATION

PLANT TELECOMMUNICATION

DEP 32.71.00.10-Gen.

February 2011
(DEP Circular 47/11 has been incorporated)

DESIGN AND ENGINEERING PRACTICE

DEM1

© 2011 Shell Group of companies

All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, published or transmitted, in any form or by any means, without the prior
written permission of the copyright owner or Shell Global Solutions International BV.
 DEP 32.71.00.10-Gen.
February 2011
Page 2

PREFACE

DEP (Design and Engineering Practice) publications reflect the views, at the time of publication, of Shell Global
Solutions International B.V. (Shell GSI) and, in some cases, of other Shell Companies.
These views are based on the experience acquired during involvement with the design, construction, operation and
maintenance of processing units and facilities. Where deemed appropriate DEPs are based on, or reference
international, regional, national and industry standards.
The objective is to set the recommended standard for good design and engineering practice to be applied by Shell
companies in oil and gas production, oil refining, gas handling, gasification, chemical processing, or any other such
facility, and thereby to help achieve maximum technical and economic benefit from standardization.
The information set forth in these publications is provided to Shell companies for their consideration and decision to
implement. This is of particular importance where DEPs may not cover every requirement or diversity of condition at
each locality. The system of DEPs is expected to be sufficiently flexible to allow individual Operating Units to adapt the
information set forth in DEPs to their own environment and requirements.
When Contractors or Manufacturers/Suppliers use DEPs, they shall be solely responsible for such use, including the
quality of their work and the attainment of the required design and engineering standards. In particular, for those
requirements not specifically covered, the Principal will typically expect them to follow those design and engineering
practices that will achieve at least the same level of integrity as reflected in the DEPs. If in doubt, the Contractor or
Manufacturer/Supplier shall, without detracting from his own responsibility, consult the Principal.
The right to obtain and to use DEPs is restricted, and is typically granted by Shell GSI (and in some cases by other Shell
Companies) under a Service Agreement or a License Agreement. This right is granted primarily to Shell companies and
other companies receiving technical advice and services from Shell GSI or another Shell Company. Consequently, three
categories of users of DEPs can be distinguished:
1) Operating Units having a Service Agreement with Shell GSI or another Shell Company. The use of DEPs by
these Operating Units is subject in all respects to the terms and conditions of the relevant Service Agreement.
2) Other parties who are authorised to use DEPs subject to appropriate contractual arrangements (whether as part
of a Service Agreement or otherwise).
3) Contractors/subcontractors and Manufacturers/Suppliers under a contract with users referred to under 1) or 2)
which requires that tenders for projects, materials supplied or - generally - work performed on behalf of the said
users comply with the relevant standards.
Subject to any particular terms and conditions as may be set forth in specific agreements with users, Shell GSI
disclaims any liability of whatsoever nature for any damage (including injury or death) suffered by any company or
person whomsoever as a result of or in connection with the use, application or implementation of any DEP, combination
of DEPs or any part thereof, even if it is wholly or partly caused by negligence on the part of Shell GSI or other Shell
Company. The benefit of this disclaimer shall inure in all respects to Shell GSI and/or any Shell Company, or companies
affiliated to these companies, that may issue DEPs or advise or require the use of DEPs.
Without prejudice to any specific terms in respect of confidentiality under relevant contractual arrangements, DEPs shall
not, without the prior written consent of Shell GSI, be disclosed by users to any company or person whomsoever and
the DEPs shall be used exclusively for the purpose for which they have been provided to the user. They shall be
returned after use, including any copies which shall only be made by users with the express prior written consent of
Shell GSI. The copyright of DEPs vests in Shell Group of companies. Users shall arrange for DEPs to be held in safe
custody and Shell GSI may at any time require information satisfactory to them in order to ascertain how users
implement this requirement.
All administrative queries should be directed to the DEP Administrator in Shell GSI.
 DEP 32.71.00.10-Gen.
February 2011
Page 3

TABLE OF CONTENTS
1. INTRODUCTION ........................................................................................................5
1.1 SCOPE........................................................................................................................5
1.2 DISTRIBUTION, INTENDED USE AND REGULATORY CONSIDERATIONS .........5
1.3 DEFINITIONS .............................................................................................................5
1.4 ABBREVIATIONS .......................................................................................................6
1.5 CROSS-REFERENCES .............................................................................................7
1.6 SUMMARY OF MAIN CHANGES...............................................................................8
1.7 COMMENTS ON THIS DEP .......................................................................................8
1.8 DUAL UNITS...............................................................................................................8
2. GENERAL...................................................................................................................9
2.1 USER REQUIREMENTS ............................................................................................9
2.2 TELECOMMUNICATION AUTHORITY......................................................................9
2.3 SYSTEMS REQUIRED...............................................................................................9
2.4 SYSTEM INTEGRATION..........................................................................................10
3. TELEPHONE SYSTEM ............................................................................................11
3.1 WIRING.....................................................................................................................12
3.2 IP TELEPHONE SYSTEM ........................................................................................12
3.3 TELEPHONE SETS AND PC CONNECTIVITY .......................................................12
3.4 CONNECTION TO THE PUBLIC NETWORK ..........................................................13
3.5 BACK-UP FACILITIES..............................................................................................13
4. PLANT RADIO SYSTEM..........................................................................................14
4.1 TRUNKED RADIO ....................................................................................................14
4.2 LOCATION AND ANTENNA.....................................................................................15
4.3 INTERFACE WITH THE TELEPHONE INFRASTRUCTURE / SYSTEM ................15
4.4 FIXED RADIOS.........................................................................................................15
4.5 HANDPORTABLE RADIOS......................................................................................16
4.6 VEHICLE RADIOS....................................................................................................16
4.7 POWER SUPPLY .....................................................................................................16
4.8 NETWORK MANAGEMENT SYSTEM (NMS) .........................................................16
4.9 PAGING ....................................................................................................................17
5. PUBLIC ADDRESS & GENERAL ALARM SYSTEM..............................................18
5.1 GENERAL .................................................................................................................18
5.2 SYSTEM REQUIREMENTS .....................................................................................18
5.3 SOUND PRESSURE LEVEL REQUIREMENTS......................................................19
5.4 ZONES......................................................................................................................19
5.5 CABLING ..................................................................................................................20
5.6 POWER.....................................................................................................................20
5.7 ALARMS ...................................................................................................................20
5.8 ACCESS CONTROL PANELS .................................................................................20
5.9 ACCESS PRIORITY .................................................................................................21
5.10 LOUDSPEAKERS.....................................................................................................21
5.11 BEACONS.................................................................................................................21
5.12 INPUTS /OUTPUTS..................................................................................................21
6. COMPUTER DATA SYSTEM...................................................................................23
6.1 DATA ACQUISITION AND CONTROL ARCHITECTURE (DACA)..........................23
6.2 WIRING.....................................................................................................................23
6.3 NETWORK EQUIPMENT (CORE SWITCHES, EDGE SWITCHES, ROUTERS) ...24
6.4 SERVERS .................................................................................................................24
6.5 APPLICATIONS........................................................................................................24
6.6 NATIONAL AND INTERNATIONAL CONNECTIONS..............................................24
6.7 E-MAIL ......................................................................................................................24
6.8 NETWORK SIZING...................................................................................................25
7 CLOSED CIRCUIT TELEVISION (CCTV) FOR PLANT SURVEILLANCE AND
PROCESS MONITORING ........................................................................................26
7.1 GENERAL .................................................................................................................26
 DEP 32.71.00.10-Gen.
February 2011
Page 4

7.2 CCTV SURVEILLANCE SYSTEM REQUIREMENTS..............................................27

7.3 FENCE SURVEILLANCE CCTV SYSTEM...............................................................27
7.4 PLANT PROCESS MONITORING ...........................................................................28
7.5 CCTV NETWORK CONFIGURATION .....................................................................29
7.6 CAMERAS AND SUPPORT STRUCTURES ...........................................................29
7.7 MONITORS AND CONTROL UNITS .......................................................................30
7.8 RECORDING AND ARCHIVING ..............................................................................30
7.9 POWER SUPPLY .....................................................................................................31
7.10 LIGHTING .................................................................................................................31
8. SECURITY SYSTEM ................................................................................................32
8.1 ACCESS CONTROL.................................................................................................32
8.2 INTRUDER DETECTION SYSTEM (IDS) ................................................................33
8.3 COMMUNICATION WITH SECURITY STAFF.........................................................34
8.4 COMMUNICATION WITH PRIVATE SECURITY COMPANY, LOCAL OR
NATIONAL LAW ENFORCEMENT AGENCIES.......................................................34
9. EMERGENCY FACILITIES ......................................................................................35
9.1 REPORTING OF EMERGENCY ..............................................................................35
9.2 EMERGENCY CALL OUT ........................................................................................35
9.3 EMERGENCY ROOM COMMUNICATIONS............................................................36
9.4 RECORDING FOR ANALYSIS AFTER THE EVENT ..............................................36
10. TELECOMMUNICATIONS FOR MARINE LOADING .............................................37
10.1 COMMUNICATION WITH SHIPS.............................................................................37
10.2 LOADING OPERATIONS .........................................................................................37
10.3 OTHER SERVICES ..................................................................................................38
11. TELECOMMUNICATIONS FOR GAS GATHERING AND DISTRIBUTION ...........39
11.1 USER REQUIREMENTS ..........................................................................................39
11.2 TELECOMMUNICATION SOLUTIONS....................................................................39
12. TELECOMMUNICATIONS FOR CONSTRUCTION SITES.....................................41
12.1 USER REQUIREMENTS ..........................................................................................41
12.2 TELECOMMUNICATION PLAN ...............................................................................41
12.3 SUGGESTED TELECOMMUNICATION SOLUTIONS ............................................41
13. REFERENCES .........................................................................................................42

APPENDICES
APPENDIX 1 PLANT IP TELEPHONE SYSTEM SPECIFICATION .....................................44
APPENDIX 2 CCTV SYSTEM DESIGN ................................................................................48
APPENDIX 3 LIGHTNING PROTECTION AND EARTHING ................................................51
APPENDIX 4. DATA ACQUISITION AND CONTROL ARCHITECTURE (DACA).................52
 DEP 32.71.00.10-Gen.
February 2011
Page 5

1. INTRODUCTION

1.1 SCOPE
This DEP specifies requirements and gives recommendations for equipment and systems
used for plant telecommunication and for the selection and specification of such equipment
and systems.
This DEP applies to onshore plants (upstream or downstream) and is complementary to
DEP 32.71.00.12-Gen. Telecommunications for offshore Platforms.
Reference in section (13) is made to a list of Shell and international standards for details of
specific telecommunications subsystems.
This DEP contains mandatory requirements to mitigate process safety risks in accordance
with Design Engineering Manual DEM 1 – Application of Technical Standards.
This DEP is a revision of the DEP with the same number dated July 1998; see (1.5)
regarding the changes.

1.2 DISTRIBUTION, INTENDED USE AND REGULATORY CONSIDERATIONS

Unless otherwise authorised by Shell GSI, the distribution of this DEP is confined to Shell
companies and, where necessary, to Contractors and Manufacturers/Suppliers nominated
by them. Any authorised access to DEPs does not for that reason constitute an
authorization to any documents, data or information to which the DEPs may refer.
This DEP is intended for use in facilities related to oil and gas production, gas handling, oil
refining, chemical processing, gasification, distribution and supply/marketing. Application in
other facilities may also apply.
When DEPs are applied, a Management of Change (MOC) process should be
implemented; this is of particular importance when existing facilities are to be modified.
If national and/or local regulations exist in which some of the requirements could be more
stringent than in this DEP, the Contractor shall determine by careful scrutiny which of the
requirements are the more stringent and which combination of requirements will be
acceptable with regards to the safety, environmental, economic and legal aspects. In all
cases the Contractor shall inform the Principal of any deviation from the requirements of
this DEP which is considered to be necessary in order to comply with national and/or local
regulations. The Principal may then negotiate with the Authorities concerned, the objective
being to obtain agreement to follow this DEP as closely as possible.

1.3 DEFINITIONS
1.3.1 General definitions
The Contractor is the party that carries out all or part of the design, engineering,
procurement, construction, commissioning or management of a project or operation of a
facility. The Principal may undertake all or part of the duties of the Contractor.
The Manufacturer/Supplier is the party that manufactures or supplies equipment and
services to perform the duties specified by the Contractor.
The Principal is the party that initiates the project and ultimately pays for it. The Principal
may also include an agent or consultant authorised to act for, and on behalf of, the
Principal.
The word shall indicates a requirement.
The capitalised term SHALL [PS] indicates a process safety requirement.
The word should indicates a recommendation.
 DEP 32.71.00.10-Gen.
February 2011
Page 6

1.3.2 Specific definitions

Term Definition
Delegated a person who has received delegated authority to approve Derogations
Technical from the Process Safety requirements from the Head of Shell P&T.
Authority
Derogation an authorised variance or exemption from a Process Safety requirement,
with specified conditions
Process the management of hazards that can give rise to major accidents involving
Safety the release of potentially dangerous materials, release of energy (such as
fire or explosion) or both

1.4 ABBREVIATIONS
AC Alternating Current
ANPR Automatic Number Plate Recognition
ASCii American Standard Code for Information Interchange
ATEX ATmosphere EXplosibles (French – Explosive
Atmospheres)
CCD Charged Coupled Device
CCR Central Control Room
CCTV Closed Circuit Television
COS Class of Service

DACA Data Acquisition & Control Architecture

DC Direct Current
DEP Design Engineering Practice
DID Direct Inward Dialling
DOD Direct Outward Dialling

DSC Digital Selective Calling

DTMF Dual Tone Multi-Frequency
E1 European system of classifying ISDN bandwidth of
2 Mbit/sec
F&G Fire and Gas
FAR Field Auxiliary Room
GMDSS Global Maritime Distress and Safety System
GPS Global Positioning System
GST Global Standard – Telecommunications
HF High Frequency
HSSE Health, Safety, Security and Environment
I/O Input / Output
ICSS Integrated Control and Safety System
IDS Intruder Detection System
 DEP 32.71.00.10-Gen.
February 2011
Page 7

IP Internet Protocol
ISDN Integrated Service Digital Networks
LAN Local Area Network
MDF Main Distribution Frame
MPEG Motion Picture Experts Group
NMS Network Management System
NVR Network Video Recorder
PABX Private Automatic Branch eXchange
PAGA Public Address General Alarm
PAS Process Automation System
PC Personal computer
PSTN Public Switched Telephone Network
PTT Post of Telephone and Telegraph
PTZ Pan/Tilt/Zoom
SBM Single Buoy Mooring
SDS Short Data (messaging) Service
T1 American system of classifying ISDN bandwidth of
1.5 Mbit/sec
TCP/IP Transmission Control Protocol/Internet Protocol
TDMA Time Division Multiple Access
TER Telecoms Equipment Room
TETRA TErrestrial Trunk Radio
UHF Ultra High Frequency
UPS Uninterruptible Power Supply
UTP Unshielded Twisted Pair
VOIP Voice Over IP
VHF Very High Frequency
VMD Vehicle Motion Detection
VSAT Very Small Aperture Terminal (satellite system)
WAN Wide Area Network

1.5 CROSS-REFERENCES
Where cross-references to other parts of this DEP are made, the referenced section
number is shown in brackets. Other documents referenced by this DEP are listed in (13).
 DEP 32.71.00.10-Gen.
February 2011
Page 8

1.6 SUMMARY OF MAIN CHANGES

This DEP is a revision of the DEP of the same number dated July 1998. The following are
the main, non-editorial changes.

Old New Change

section section
1 Updated
2 Updated
3. Amended for new IP telephony
4. Amended for new TETRA radio technology
5. Updated
6. Updated
6.1 Added section on DACA
7. Amended for new technology
8. Amended to match CCTV sections
9. Updated
10. Updated
11 Updated
12 Updated
13 13 Added DACA DEP’s and update international standards
Appendix Added DACA Appendix
4
14 Added SHALL [PS] statements
15 Segregated into specification and instruction DEPs

1.7 COMMENTS ON THIS DEP

Comments on this DEP may be sent to the Administrator at standards@shell.com, using
the DEP Feedback Form. The DEP Feedback Form can be found on the main page of
“DEPs on the Web”, available through the Global Technical Standards web portal
http://sww.shell.com/standards and on the main page of the DEPs DVD-ROM.

1.8 DUAL UNITS

Amended per
Circular 47/11
Dual units have been incorporated throughout this DEP.

This DEP contains both the International System (SI) units, as well as the corresponding
US Customary (USC) units, which are given following the SI units in brackets. When
agreed by the Principal, the indicated USC values/units may be used.
 DEP 32.71.00.10-Gen.
February 2011
Page 9

2. GENERAL

2.1 USER REQUIREMENTS

The safe and efficient operation of a plant generally requires:
• voice communication between the control room and operators at various locations in
the plant;
• video monitoring of critical equipment and critical areas;
• voice, data and e-mail communication between control rooms, attached offices,
workshops and laboratories;
• voice communication with on-site contractors, customs and government inspectors;
• entrance control, intruder detection and communication with security staff (usually
data, video and voice);
• voice, data, fax and e-mail communication with the import and export terminals or
facilities;
• voice broadcast and alarm communication to areas of the plant, particularly in
emergency situations
• voice and pager communication with staff in residential areas;
• voice, data, fax and e-mail communication with the national 'main office' if this is not
located within the plant boundary;
• voice, data, fax and e-mail communication with third parties, both nationally and
internationally.
Plants that are heavily integrated with other facilities, e.g. gas gathering or distribution
networks have additional user requirements and will require detailed advice from the
Principal. Such plants may, for example, be designated as National Critical Infrastructure
that requires telecommunications systems that are compliant with National guidelines for
such installations
The telecommunication requirements for the construction of a plant, particularly on a 'green
field' site, require special consideration since they are not the same as for normal
operation.

2.2 TELECOMMUNICATION AUTHORITY

Contact with the Telecommunication Authority (usually a department or agency of
Government) shall be made by the Principal for each project in which telecommunication is
included.
In all cases it shall be assured that those systems that are connected to the public
communication network and all systems based on radio transmission (plant radio, paging)
have the approval of the Telecommunication Authority.
Regulatory authorities shall be informed and involved if extensive private communications
systems are required for construction and later operation of the plant, (see
DEP 32.71.00.31-Gen.).
Application to the Telecommunication Authority, for the necessary approvals, shall be made
at the earliest opportunity.

2.3 SYSTEMS REQUIRED

The following systems or facilities are normally required:
• Telephone system with connection to the public network and Shell Group Network;
• Public Address General Alarm (PAGA) system;
 DEP 32.71.00.10-Gen.
February 2011
Page 10

• Plant radio system;

• Data system with connection to the Shell Group network;
• Emergency Communication Systems;
• CCTV system;
• Security and Intruder detection system;
• Access Control system
The following special telecommunication systems may be required:
• Communication for marine loading terminal and facilities;
• Communication for aircraft and helicopter operations
• Communication for gas gathering and/or gas distribution network;
• Temporary telecommunications systems for local, national and international
communications for construction on 'green-field' sites;
• Extension of parts of the telecommunications systems outside the plant area to cover
such as export pipelines

2.4 SYSTEM INTEGRATION

The separate telecoms systems components shall be integrated to create a complete
operational system which meets the functional, integrity and availability requirements.
Prior to installation, the quality of the integration shall be assured by performing an iFAT
(integrated Factory Acceptance Test) at the location of the integrator, to demonstrate that
the system meets the functional, integrity and availability requirements.
 DEP 32.71.00.10-Gen.
February 2011
Page 11

3. TELEPHONE SYSTEM
The Telephone Systems design shall be based on hardware approved by the Principal to
facilitate support by Company appointed third party network support contractor and shall be
based upon GST-5065
Green field sites shall employ an IP telephony(VOIP) solution. Brownfield sites shall expand
the existing telephone system or use an IP telephony solution integrated with the existing
telephone system.
The following IP telephony sub-systems shall be provided:
• Wiring (to CAT 6 Standard);
• Call processor;
• Call Logging and Billing
• Voice recorder
• Voice Mail
• Firewall
• Wireless Access points
• IP telephone sets;
• IP Gateway providing connection to:
o The public network (PSTN)
o The Shell Group Network
o Legacy analogue telephones
o Fax Machines.
o Plant radio (e.g.TETRA)
o PAGA system
The IP Telephony sub systems are connected as shown in Fig 3.0
Voice Mail, Call Logging, Voice
Firewall
Recorder, Billing (Applications)
Call Processing Wireless access
Point Cell phone
M Internet

Ethernet

IP
Gateway
IP Analogue
IP telephones Telephones
IP

IP
Plant Radio &
PAGA

Fax

Desktop PC
Company
PSTN
Private Network

Fig 3.0 General arrangement of Plant IP telephone Network

 DEP 32.71.00.10-Gen.
February 2011
Page 12

3.1 WIRING
The following DEPs and GSTs shall be used in the design of cabling systems for:
• legacy wiring systems within the battery limits of oil, gas or chemical plants see DEP
32.37.20.10-Gen. Instrument Signal Lines
• office building wiring see DEP 32.71.00.30-Gen.; Structured cabling systems for
telecommunications and GST-1008 – Structured Cabling Standard. Structured
cabling systems shall be compliant with EIA/TIA 568 and ISO 11801 standards.
• residential areas and other off-plant locations see DEP 32.71.00.16-Gen. Design
Installation of Telephone Cabling and GST-1008 – Structured Cabling Standard

3.2 IP TELEPHONE SYSTEM

GST-5015 IP Telephony Standard shall be used in the selection of IP telephone systems.
IP Telephony security shall be carefully considered as per GST-5075.
More details of the specification of an IP telephone system are given in (Appendix 1).
Only telephone systems with local Type Approval shall be considered. See (2.2).

3.3 TELEPHONE SETS AND PC CONNECTIVITY

The following types of telephone sets shall be considered:
• wire connected IP Telephone sets
• wire connected analogue or IP telephone sets ATEX approved for use in hazardous
areas.
• Wire connected analogue telephone sets in combination with an A/D converter for IP
use.
• wireless IP telephone set.
• Personal computer Based soft phones complying with GST-5080
It shall be clearly indicated where:
• each type of set has to be provided;
• additional features are required such as executive-secretary communications.
Amended per
Circular 47/11

Telephone sets installed in hazardous areas shall comply with DEP 32.31.00.32-Gen
section 2.5.
Plant-mounted and portable telephones used in the plant, shall be suitable for explosive
hazardous areas accordance with DEP 32.31.00.32-Gen section 2.11.
External bells/sounders shall be provided where the difference between normal ringtone
volume and ambient noise is less than 6 dB.
In addition to bells/sounders, flashing beacons shall be provided where the ambient noise
pressure level is more than 85 dB(A).
Telephone sets in control rooms and in the field shall be simple directly connect devices,
without any requirements for logins, passwords, etc.
IP telephone system shall take CAT 6 cable length limitations into account. Where cable
runs exceed CAT 6 limitations traditional analogue telephones and cables should be
installed.
3.3.1 Wireless IP telephones offer the advantage of portability but all such sets SHALL [PS] be
certified intrinsically safe for ATEX zone 1 IIC T4 as specified by IEC 60079-14. IP
Telephone and PC installation.
 DEP 32.71.00.10-Gen.
February 2011
Page 13

A single Ethernet port shall be provided to connect both Telephone and PC as shown in
Fig 3.0 with the PC connected to the network via a telephone Ethernet port. All IP
telephones shall be equipped with two Ethernet ports to enable connection of both
Telephone and PC as described above.
IP Telephone instruments shall be powered using power over Ethernet.

3.4 CONNECTION TO THE PUBLIC NETWORK

The IP telephone system SHALL [PS] be designed for direct connection to the public
network without operator intervention so that direct inward and outward dialling is
technically possible from any extension. Interface to the PSTN shall be via redundant IP
gateways. Extension class of service will determine the ability of a phone to connect to the
PSTN.
The local telephone company should be consulted about the interface required for
connection to the PSTN. The preferred connection is E1 (2 Mbit/sec or 30 traffic channels)
or multiples of E1 depending on the number of extensions that will be accessing PSTN
lines. T1 service may be offered in North America and some other countries.

3.5 BACK-UP FACILITIES

IP telephone systems shall provide internal redundancy by having separate but linked
independent call processing units running in mirrored configuration.
The IP telephone sub systems SHALL [PS] be supplied from a UPS with sufficient capacity
to run the telephone system with full traffic for at least 8 hours in the event of mains power
failure.
The following alternative means of communication shall be provided in the event of a
telephone system fault:
• direct outgoing telephone lines by-passing the plant telephone system;
• direct lines (hot lines) to the local community Emergency Services and to utility
companies;
Mobile (GSM phones) or Direct satellite telephones shall be provided where the above
alternatives are not possible.
 DEP 32.71.00.10-Gen.
February 2011
Page 14

4. PLANT RADIO SYSTEM

Plant size shall be considered for very small plants, a radio system consisting of a main
station in the control room and a number of handheld radios all operating on a single radio
frequency will provide adequate coverage, or the area can be served by wider area
coverage.
For larger facilities, a digital trunked radio system to TETRA as per EN 303 035 or
equivalent standards shall be selected.
The trunked radio and paging system (if required) shall provide radio coverage on the
facility between:
• Handportable to handportable radio
• Handportable to fixed radio
• PBX (telephone system) to handportable and fixed radios
• PBX (telephone system) to pager receivers
The number of handheld radios that are needed will depend on the operating philosophy of
the plant. The frequency band chosen shall follow frequency plans as determined by local
and international regulatory bodies.

4.1 TRUNKED RADIO

A typical arrangement for a plant Trunked UHF radio system is shown in fig 4.1
TETRA Switching and
Base Station Control Node

PBX/ IPT

Dispatcher console

TETRA
Handportable
radios

Fixed Radio

Vehicle
mounted Radio

Radio Tower

Fig 4.1 General arrangement of trunked (TETRA) plant radio system

 DEP 32.71.00.10-Gen.
February 2011
Page 15

The system shall include a multi channel UHF Trunked (e.g.TETRA) radio base station
located on the facility close to the radio tower, providing facility wide radio coverage.
The system shall be equipped with multiple carriers providing full duplex logical channels.
One channel is used for system control, leaving other channels for communication. The
system supplied shall be capable of expansion to accommodate additional carriers and
channels.
Short data (messaging) service (SDS) shall be provided.
An integrated trunked switching and control node shall be supplied that handles call
processing.
The air interface should use a standard signalling protocol based on international
standards, e.g. ETSI EN 300392 Voice plus data (V+D) or other equivalent standard.
Each base station shall have a stand-by transceiver. Switchover from one set to the other
may be carried out manually.
The switching and control node assigning the channels shall have its own specific
redundancy built in.
Each user group shall have one or more radio dispatcher consoles that should be capable
of being placed at operational locations within the plant.
A radio operator console consisting of a handset or microphone, loudspeaker and push-to-
talk button shall be provided in the central control room and should be provided at every
operator position. Alternatively, separate loudspeakers may be considered, in which case
the volume of both speakers shall be individually adjustable, and the system shall be
designed such that there is no acoustic feedback.

4.2 LOCATION AND ANTENNA

The radio equipment and associated antennas should be located in a position to give
optimum coverage of the plant. A telecommunications tower may be required. See DEP
32.71.00.14-Gen. for guidance on tower design. If it is not possible to provide reliable
coverage from a single location, one or more repeaters should be considered. For coverage
inside buildings, tunnels or areas shaded by steelwork, leaky coaxial cable may be used.

4.3 INTERFACE WITH THE TELEPHONE INFRASTRUCTURE / SYSTEM

The plant radio system shall be connected to the telephone system allowing automatic
access to a radio channel by telephone.
Access to a radio channel shall be limited to selected extensions only, based on class of
service (COS). Design of the interface shall ensure that telephone access has the lowest
priority and does not block access to a radio channel by other users.

4.4 FIXED RADIOS

Fixed radio terminals, including antennas, feeder cables, lightning arrestors and externally
mounted antennas shall be provided in selected areas of the facility.
The following locations on a facility shall normally be supplied with fixed radio terminals:
• CCR consoles
• Plant manager and supervisors offices
• Security gatehouse
• Emergency control centre
• Fire station control room
• Medical centre
• FARs
• Jetty Operations and loading facilities
 DEP 32.71.00.10-Gen.
February 2011
Page 16

Fixed radio terminals that are required during emergencies such as those located in the
control room, emergency control centre, fire station and jetty & loading facilities, shall be
powered from vital power supply as per DEP 33.64.10.10-Gen section 3.9

4.5 HANDPORTABLE RADIOS

A single standard type of handportable, including its dedicated battery shall be adopted
throughout a plant area.
Handportable radios for use in plants SHALL [PS] have a type of protection "EX-i"
(intrinsically safe), and be certified to "EX-i" Zone 1 IIC T4” or more stringent, as specified
in IEC 60079 ;in some areas this may be the equivalent FM (Factory Mutual) specification.
The handheld radios shall be fit for purpose without being over complicated to operate. All
handportable radio equipment shall be equipped for a minimum of sixteen workgroup
operation, and protected from water and dust ingress to IP65 as defined in IEC 60529.
Each handheld radio shall be provided with:
• high capacity battery
• Spare battery
• Battery conditioning charger unit
• Leather carry case
• Belt
• Lapel speaker/microphone
Provision of suitable headset should also be considered for high noise areas.
Charging units shall be provided at all locations where handheld radios are kept. The
battery chargers should be capable of "rapid" charging. Radio batteries are expensive and
if there are a significant number of radios (say 20 or more), a computer based battery
charging and management system should be considered together with spare batteries.(as
an alternative to individual chargers)
Approximately 10%, additional spare handheld radios shall be supplied.

4.6 VEHICLE RADIOS

The plant radio system should be used only for communications within the plant boundary.
If required selected plant vehicles may be equipped with UHF handportable radio hands
free car kits.

4.7 POWER SUPPLY

The Base station and TETRA switching and control node SHALL [PS] be power supplied
from vital power as per DEP 33.64.10.10-Gen section 3.9
For fixed radio terminals see (4.4)

4.8 NETWORK MANAGEMENT SYSTEM (NMS)

A network management system that provides the following shall be provided:
• configuration;
• monitoring; and,
• data logging facilities.
The NMS terminal shall be located in a manned location, such as a network control centre.
The NMS system shall have the following functionality:
 DEP 32.71.00.10-Gen.
February 2011
Page 17

• Fault management
• Configuration Management
• Alarm and configuration graphical view
• Accounting management
• Performance management
• Maintenance management
• Security management
• Subscriber management

4.9 PAGING
Optionally a paging system may be provided that is activated by alarms from the process
and control systems and is able to send alphanumeric (ASCII) information to the required
pager group. The paging system and receivers shall be capable of generating, receiving
and displaying messages with up to 255 alphanumeric characters
The paging controller shall be accessible from the CCR and provide operators with the
ability to manually enter text messages for transmission to individual users, groups or all
users connected to the radio network
Paging receivers SHALL [PS] be certified to "EX-i" Zone 1 IIC T4 or more stringent, as
specified in IEC 60079 in some areas this may be the equivalent FM(Factory Mutual)
specification,
 DEP 32.71.00.10-Gen.
February 2011
Page 18

5. PUBLIC ADDRESS & GENERAL ALARM SYSTEM

5.1 GENERAL
A Public Address and General Alarm (PAGA) system SHALL [PS] shall be installed
providing:
• aural public address and alarm audible at every part of the facility where people may
be present and aural communication is practicable.
• visual alarm where the audible alarm is impractical or cannot be heard because of
too high ambient noise levels.
The PAGA system shall include facilities to mix various input signals (voice, pre-recorded
messages, generated tones, entertainment) and interface with the F&G system. The PAGA
will not include the Fire and Gas control panel itself or any other safety equipment such as
visual warning lights and break glass units etc

5.2 SYSTEM REQUIREMENTS

Elements of the PAGA system that, when failed, would render one or more functionalities
out of order, shall be duplicated. This typically applies to items such as CPU, PSU’s, tone
generators etc. Switch over to the redundant component should be automatic.
Offshore installations require a fully duplicated PAGA with completely separate systems
and interleaved speakers and flashing beacons (e.g. PA-A and PA-B)
Each panel of amplifiers shall incorporate a hot standby amplifier in an N+1 configuration
such that failure of a single amplifier does not affect the overall performance of the system.
The complete system (fans, amplifiers, speaker loops + speaker drivers, tone generator,
control panel, etc.) shall be continuously monitored for faults. Faults should be logged and
visible on the network management system (4,8).
Amended per
Circular 47/11

All equipment that is located external to designated safe areas SHALL [PS] comply with
DEP 32.31.00.32-Gen section 2.5
All PAGA cables shall be sized such that loudspeakers continue to deliver the correct
sound pressure level (SPL) and beacons continue to operate correctly.
The system design shall ensure that amplifiers have 20% spare capacity, per loudspeaker
loop.
The PAGA system shall be interfaced with the plant F&G system to action audible alarms.
The central control equipment cabinets shall typically provide the following functionality;
• Control of system equipment
• Local amplification for loudspeaker loops
• Beacon Drivers
• Fault monitoring equipment
• Telephone access interface
• Alarm tone and voice announcement generators
• Recording facilities for emergency speech
• Programmable bi directional volt free contacts /Digital I/O
• Supervisory alarm outputs
• Transmission equipment interfaces e.g. Fibre optic Cable
 DEP 32.71.00.10-Gen.
February 2011
Page 19

The typical layout of a combined Public Address General Alarm (PAGA) system is shown in
Fig 5.2

Entertainment System
Control Logic
(mute)

Alarm Panel

Loudspeaker Loops
Voice Recorder Interfaces

Amplifier 1
Marshalling / IDF Cabinet
Supervisory and and fault

Marshalling / IDF Cabinet

recording system

Amplifier n

Telephone Access Flashing Beacons

Local Loudspeaker ( mute)

ICSS/ F&G

Access Control Panel

PA Control and Amplifier

Cabinet

Fig 5.2 General layout of typical PAGA system

5.3 SOUND PRESSURE LEVEL REQUIREMENTS

The design of the PAGA system shall be such that the ratio of PA speech level to
background noise is a minimum of 6 dB and optimally 12 dB above ambient noise in all
parts of the plant where persons may be present during normal operations and ambient
noise levels permit.
Alarm tones SHALL [PS] be a minimum of 15 dB(A) and a maximum of 20 dB(A) above
noise level in all parts of the plant where persons may be present during normal operations
and ambient noise levels permit.
In sleeping cabins the speech level SHALL [PS] be 75dB (A) in order to wake sleeping
persons.
In areas where the ambient noise exceeds 85 dB (A) flashing beacons SHALL [PS] be
provided.
The SPL at the listener SHALL [PS] not exceed 110 dB (A) or be less than 65 dB (A) in any
circumstance.
The SPL in high ambient noise areas shall be checked during commissioning and any
necessary adjustments made to the PAGA SPL to ensure requirements are met.

5.4 ZONES
The system shall be designed for multiple zones.
 DEP 32.71.00.10-Gen.
February 2011
Page 20

5.5 CABLING
All system field cables shall be terminated in their respective MDF, which will be located
within or adjacent to the system control cabinet(s).
All cables shall be fire resistant tested to IEC 60331.
The cables used shall be sized one size larger than the maximum size necessary to cater
for re-routing of cables.
Access control unit cables shall be screened overall.
Loudspeakers and beacons shall not share cables or junction boxes.
MDF terminations shall accommodate all required cable core sizes.
All cables, cores and terminations shall be clearly identified with input and output cabling
segregated

5.6 POWER
The PAGA system SHALL [PS] be power supplied from vital power as per
DEP 33.64.10.10-Gen section 3.9

5.7 ALARMS
The designation of the alarm tones and the arrangements for initiating and cancelling
alarms shall be defined during design in consultation with Company HSE and in compliance
with local government regulations.

5.8 ACCESS CONTROL PANELS

Operation of the PAGA system is performed through access panels connected to the PAGA
Control equipment.
Panels shall be configured in a hierarchical structure so that higher priority access panels
override lower priority level panels.
Each control panel shall consist of a loudspeaker with volume control, a microphone, press-
to-talk button and a zone selector switch or a push-button unit.
The system shall provide acoustic feedback suppression and the ability to mute speakers
near to the access panel. (Larsen effect)
The PA access and alarm initiation panels shall include the following functionality:
• Zone selection
• Routine speech announcement initiation
• SHALL [PS] have Emergency speech initiation
• All call initiation
• Alarm initiation
• Alarm cancel
• System busy lamp
• System status lamps
• Lamp test feature
Alarm initiation, alarm cancel and all call buttons shall have a movable cover to minimise
false activation
The control panel should include the ability to broadcast pre-recorded tones and
emergency messages. This is particularly applicable in multilingual environments.
 DEP 32.71.00.10-Gen.
February 2011
Page 21

5.9 ACCESS PRIORITY

Facilities shall be provided to enable priority of access between different microphone
stations and the alarm tones.

5.10 LOUDSPEAKERS
Amended per
Circular 47/11

All loudspeakers for use in hazardous areas SHALL [PS] comply with
DEP 32.31.00.32-Gen. section 2.5 and be protected against water ingress to IP 65 as
defined in IEC 60529.
For external areas and process modules, directional re-entrant horn loudspeakers shall be
used. They shall be rated for at least 20 Watt.
Loudspeakers shall incorporate a transformer suitable for 100V working and have a range
of secondary tappings. 20 Watt units shall be capable of being adjusted down to 2.5 watt.
Loudspeakers within areas where a control and access panel is located shall be muted
during speech announcements initiated by the panel in that area.
All speakers shall be connected to the speaker loops via individual junction boxes and
cable tails.
Loudspeaker mountings shall enable the units to be oriented +/- 900 in both azimuth and
elevation.
All spare cable entries to junction boxes, speakers and beacons shall be fitted with blind
plugs to the correct rating.

5.11 BEACONS
The beacons shall have the following features:
• Operate with a flash rate of between 60 & 180 flashes per minute
• The lens colour shall be yellow
• Produce a light intensity at least 300 Candelas but not greater than 400 Candelas
• Shall be protected against water ingress to IP 65 as defined in IEC 60529.

5.12 INPUTS /OUTPUTS

5.12.1 PAS/F&G
Each PAGA control cabinet shall have the following inputs from the F&G /PAS system to
automatically signal alarm events.
• General Alarm
• Toxic Gas
The input signals shall be volt free contacts. Each PAGA control cabinet shall have the
following outputs to the PAS system to signal actuation of the respective alarms
• General Alarm
• Toxic Gas
The output signal type shall be agreed with the PAS vendor.
5.12.2 Telephone Interface
The system shall provide an interface to the telephone system. This input shall be
controlled and not allow live access to the PAGA system.
The user will dial an access number and then at a tone record an announcement of a
configurable maximum duration.
 DEP 32.71.00.10-Gen.
February 2011
Page 22

It shall be system configurable, and provided with additional equipment if needed, such that
on the user phone “going on hook” the announcement is indicated to the control room and
operators can listen and allow or delete the message prior to broadcast.
The telephone input to the PAGA shall have the lowest priority.
The telephone system shall be configured to restrict access to this input based on user
class of Service (COS)
Automatic acoustic feedback suppression (to counter Larsen effect) shall be provided.
5.12.3 Voice Recorder
The PAGA system shall include a recorder system to record and play back speech
announcements.
Recorded voice data shall be stored for a period of 28 days before being overwritten.
The recorder shall provide the facility to replay and search.
The recorder shall also cater for inputs from VHF, UHF, HF, and selected telephone
lines, etc.
 DEP 32.71.00.10-Gen.
February 2011
Page 23

6. COMPUTER DATA SYSTEM

The management information LAN design shall be based on hardware approved by the
Principal to facilitate support by Company appointed third party network support contractor.

6.1 DATA ACQUISITION AND CONTROL ARCHITECTURE (DACA)

Telecommunications shall be realised in line with Shell requirements for the Data
Acquisition and Control Architecture (DACA) to ensure reliable and secure communication
in support of business goals.
The information technology (IT) infrastructure, including systems providing data
communications shall support the requirements for a data acquisitions and control
architecture (DACA). The DACA ensures the integrity and security of business critical data
within the plant facility and protects against outside influence. DACA requirements will
impose certain functional and architectural requirements such that information can be
brought together, analysed and used to support operations and (remote) maintenance
strategy, planning and execution.
The DACA comprises the following layers:
• Process Control Domain (PCD) – this includes the Distributed Control System
(DCS), Safety Instrumented System (SIS), Fire & Gas System (FGS), Emergency
Shutdown System (ESD), etc., all of which are functionally independent but are
interconnected via a process control network (PCN) to support the Centralised
Control Room (CCR) concept.
• Process Control Access Domain (PCAD) – this “demilitarised zone” regulates
read/write access to systems within the PCD by acting as a secure gateway for
data between the PCN and the OD.
• Office Domain (OD) – this includes IT facilities for asset management, data storage
and provides a path for data communication between the PCD and
command/control facilities.
However, the development of the PCD and PCAD will impose functional requirements on
the telecommunications infrastructure.
General information on DACA is given in an Appendix to this document.
Telecommunications systems development shall follow DEP guidelines for DACA.

6.2 WIRING
The following Company and international standards shall be adhered to in the design of
structured cabling systems:
• DEP 32.71.00.30-Gen.
• GST-1008.
• TIA/EIA –568-B
• ISO/IEC 11801
The computer network shall be Cat 6 UTP compliant covering offices and buildings as
specified in the project spec.
Cabling systems in each building shall be linked to the main telecoms equipment room
using a star topology.
6.2.1 UTP Category 6/ISO Class E cable
The UTP cable supplied shall be Category 6, four pair cable capable of supporting
frequencies to 250 MHz and certified to carry up to 10Gbps of data up to 100m (330 ft).
Connectors shall be Category 6 compliant RJ45.
 DEP 32.71.00.10-Gen.
February 2011
Page 24

6.2.2 Fibre Optic Cable

The fibre cable used in the office backbone and inter building connections shall be single
mode fibre. The fibre supplied shall support the 1000 base-LX standard and be capable of
supporting lengths up to 10 km (6 mile).
Connectors for fibre cable shall be SC type connectors.

6.3 NETWORK EQUIPMENT (CORE SWITCHES, EDGE SWITCHES, ROUTERS)

The following standards shall be adhered to in the design of network equipment and
systems.
• GST -001
• GST-1005
Edge switches shall provide Ethernet connectivity for users and shall be linked to core
switches by GB Ethernet uplinks. The central LAN equipment cabinets shall be located in
the plant Telecoms Equipment Room (TER).
Dedicated rooms or closets in each building shall be provided to house the distributed
network equipment.
The core switches shall be equipped with redundant hardware and configured so that a
single failure does not result in a complete loss of the management information LAN in any
area of the plant

6.4 SERVERS
The Principal shall be consulted to ensure that all hardware and software will be compliant
to Shell standards.

6.5 APPLICATIONS
The Principal shall be consulted about the specific applications that will be run on the
network and these shall include but not be limited to:
• personal productivity tools e.g. spreadsheet, word processor;
• information sharing tools e.g. Intranet;
• specific business applications e.g. cost accounting, time sheet, and technical
calculations.

6.6 NATIONAL AND INTERNATIONAL CONNECTIONS

Internet and intranet connections shall be provided and shall comply with Shell standards..
Connection to any network shall comply with Shell security guidelines and GST-1004.
Direct connection to the public Internet is specifically not allowed, the requirements in GST-
1010 (Internet Connectivity Standards) shall be adhered to. The Principal shall be
consulted about the current security requirements and choice of a secure gateway, if
required.

6.7 E-MAIL
Electronic mail (e-mail) is an application running on top of the infrastructure described
above.. Since the e-mail system needs to communicate with the Shell Group e-mail system,
the Principal shall be consulted on applicable Shell standards,
 DEP 32.71.00.10-Gen.
February 2011
Page 25

6.8 NETWORK SIZING

It is particularly important to make an estimate of the likely data traffic in cases where long
distance data communications is needed since the data traffic will affect the choice and
sizing of the carrier, e.g. fibre optic, microwave, or satellite, and the total cost. Each
application requiring regular data transfer shall be identified to determine the minimum
necessary data rate and likely quantity of data. The data network shall be sized using this
information but if this results in a disproportionately complicated or expensive network the
potential users should be requested to modify their requirements or to justify them.
 DEP 32.71.00.10-Gen.
February 2011
Page 26

7 CLOSED CIRCUIT TELEVISION (CCTV) FOR PLANT SURVEILLANCE AND PROCESS

MONITORING

7.1 GENERAL
An integrated plant CCTV system shall be provided to facilitate intruder detection,
surveillance and process monitoring.
For detailed design of the CCTV systems see (Appendix 2).
The general arrangement of a typical plant CCTV system is shown in Fig 7.1
JB 1
Video
Video &
AC
Camera
telemetry
Video
Cameras may be directly
wired via composite cable
TCP/IP signals (Power and Video ) to
Junction Boxes for Video
from JBs.
conversion to IP

Video
Video &
AC
Camera
telemetry
Video
JB
System Node

XX
Video
F&G System Server
Flat screen display (s)
DCS NVR

Ethernet
VMD FDF
Switch
CCTV Control -
Camera control
hardware +
Software, including
mapping facility

Ethernet

Fig 7.1 General arrangement of plant CCTV system

Apart from the overall views of the perimeter fences and process areas, CCTV cameras
should be considered to monitor:
• Visual information of activity in key areas of the plant;
• Smoke emission and light intensity of flares;
• The emission from the stacks in the case of non-gas fired furnaces;
• Personnel in plants handling very toxic products, as defined in
DEP 01.00.01.30-Gen;
• Remote-controlled fire-fighting monitors (water and/or foam cannons; one camera
for each fire-fighting monitor);
• The loading areas of road tankers or rail cars;
• Jetties where tankers are loaded / unloaded;
• Jetties/wharfs;
 DEP 32.71.00.10-Gen.
February 2011
Page 27

• Hot oil pumps, liquefied gas pumps and generally the pumps and areas below pipe
bridges which transport gases and liquids above their auto-ignition temperature
The following monitors shall be provided in the:
• security gatehouse for security and surveillance views,
• CCR for all other views.
The design shall incorporate a high level of redundancy and resilience, such that failure of a
single component or module, including power supplies shall not render the overall system
dysfunctional.

7.2 CCTV SURVEILLANCE SYSTEM REQUIREMENTS

The CCTV surveillance system shall form part of the Intruder Detection system (IDS)
described in (8) by providing visual monitoring of perimeter fencing and entrances. The
CCTV system network delivery shall be Internet Protocol (IP) based with TCP/IP
transmission protocol.
The system should include automated video content analysis capability.
The plant perimeter fence shall be monitored by CCTV capable of detecting any attempt to
interfere with or breach the fence or the controlled gates and doors.
On detection of an event, such as the breach of a logical camera tripwire the system shall
provide an audible and visual alarm at a workstation in the gatehouse and the monitor(s)
shall focus attention on the alarmed location.
The CCTV fence surveillance system shall be divided into zones for the purposes of
managing alarms.
The IDS system shall automatically select surveillance cameras in the vicinity of the
intrusion to provide clear visual images of the detected event on the CCTV monitors in the
gatehouse.
Private area zone masking shall be provided when requested by the Principal to meet
privacy requirements.
A workstation in the gatehouse shall provide a graphic depicting the fence systems. The
workstation display shall also provide a graphic identifying the area (zone) in which an
event or events have been detected. The workstation shall log, store and provide time
stamped displays of all data associated with all events detected by the system.
The CCTV surveillance system and the intruder detection system shall be interfaced
together to provide an integrated facility that delivers the required degree of security
management on the site.

7.3 FENCE SURVEILLANCE CCTV SYSTEM

Surveillance cameras shall be located to provide clear unobstructed images of the
perimeter fence, key access points such as gates, roadways and key building entrance and
egress points.
Cameras positioned along the fence line shall be fixed cameras with auto focus and auto
iris linked back to the gatehouse. Colour cameras shall be employed with low day/night
threshold switching and additional fixed cameras may be employed to provide views of
general areas, doorways and access roads. Use of backlight compensation and sunshields
shall be considered to ensure full view in all lighting conditions.
The cameras shall be placed around the perimeter such that each sector of the fence is
covered by at least one camera. The design shall be based on utilising fixed cameras
approximately every 60 to 70 metres (200 to 230 ft) around the fence, ensuring that a
person of 1.8M (6 ft) height can be detected at 70m (230 ft).
Elevated PTZ cameras shall be positioned on towers at each corner (2 cameras per corner)
and shall be equipped with pan, tilt and zoom mechanisms controlled via a console in the
 DEP 32.71.00.10-Gen.
February 2011
Page 28

gatehouse. High power optical zoom lenses shall be used to enable these cameras to view
a close up of any area of the fence or plant in the event of an incident. At the corners, 8m
elevated mounting fixtures are required for the two pan, tilt and zoom cameras at each
corner.
The use of infrared cameras and infrared illumination should be considered for onshore
sites where in-climate weather may obscure security intrusions using traditional cameras.
Video content analysis should be provided and configured to permit identification of
intruders and detection of rogue non moving objects to identify threats to safety and
operational integrity.
Other security cameras shall be provided for the gatehouses and other areas at the site.
The designer shall carry out a review and determine whether the 60 to 70m (200 to 230 ft)
camera spacing proposed is optimum to achieve 100% coverage of the security fence.
The design shall review the location of the proposed perimeter lighting support posts and
advise whether they can be utilised in their current position. Suitable camera mounting
fixtures (e.g. cantilever arm) may be attached at a height of 6m on these posts.
The base case solution is for each of the cameras in the field to have fibre optic cabling
connected back to the CCTV marshalling cabinet in the Telecoms Equipment Room (TER)
Any coaxial cable runs should be restricted to local wiring from the telemetry unit to the
cameras only. The designer may consider enhanced technology for this application as an
option to the base solution.
Multiple single mode fibre optic cables shall be installed along the perimeter fence to
connect the fence surveillance cameras. The fibre cable ring shall start and end at the TER
where the CCTV central equipment is located.
The workstations in the gatehouses and in the CCR are connected to all the security
surveillance cameras via the LAN.
Camera housings shall be equipped with windscreen, wash/wipe, demister and sunshield (if
required). The cameras, pan and tilt units and junction boxes shall be rated at a minimum of
IP65.

7.4 PLANT PROCESS MONITORING

Day /night colour cameras equipped with pan, tilt and zoom facilities shall be provided:
• to monitor selected process areas of the plant,
• for security purposes
• to aid plant operation.
The IP video technology used for this CCTV system shall be identical and fully compatible
with the IP CCTV system required for the security applications.
The location of cameras shall be determined during design. The design shall be based on
the utilization of cameras equipped with motorised zoom lens and an auto-iris function in
order to compensate for varying light level conditions. Alternative fixed cameras using
digital zoom techniques may be considered if the same quality can be achieved.
Camera housings shall be equipped with windscreen, wash/wipe, demister and sunshield (if
required). The cameras, pan and tilt units and junction boxes shall be rated at a minimum of
IP65.
Amended per
Circular 47/11

CCTV camera's located in hazardous area's SHALL [PS] comply with

DEP 32.31.00.32-Gen. section 2.5. Colour CCTV monitors and a control unit shall be
provided for installation in the CCR. Monitors shall display full screen, sequential or multiple
pictures from any combination of cameras selected by the operator.
 DEP 32.71.00.10-Gen.
February 2011
Page 29

In addition, monitors shall be installed at those locations where personnel (operators,

supervisors) need to see the picture transmitted by particular cameras such as:
• In the jetty or harbourmaster's office, for the jetty loading cameras;
• At the place from where the remote controlled fire-fighting monitors are controlled
(fire-fighting cubicle);
• At the place from where the rail car or road car loading operations are supervised.
This can be for example a loading office or a gatehouse;
• In FARs, if they are regularly manned by operators.
Monitors shall have an anti glare screen and be positioned such that reflection from room
lights and windows is minimized.

7.5 CCTV NETWORK CONFIGURATION

The CCTV system comprises:
• Day / night colour CCTV cameras, lenses, housings and mounts
• MPEG-4 encoders/decoders camerasand monitors(if required)
• Telemetry interface unit for PTZ and wash/wipe control
• Video management software and video matrix capability
• Server and network video recorder (NVR) unit
• Workstation (client), Keyboards, joystick and monitors.
• Capability for up to 500 cameras
• All images and events time stamped to GPS clock accuracy.
Text insertion facilities shall be provided enabling the selected camera number, location,
time and date to be displayed on the system monitors
The network shall be designed to transport the video streams at each camera location with
sufficient capacity and equipment to ensure that the network is not overloaded.
The plant security surveillance CCTV system shall be designed to use a separate VLAN to
the process monitoring CCTV system although the technology and IP transmission network
shall be common.

7.6 CAMERAS AND SUPPORT STRUCTURES

Suitable camera mounts shall be provided on which to mount the camera assemblies. The
design of the support structure shall enable the cameras to have a clear field of view and
ensure easy access to the camera for maintenance.
All externally mounted cameras and stainless steel camera housings shall be equipped with
windscreen, wash-wipe, demister and sunshield (if required). The entire camera, pan and
tilt unit, stainless steel junction box and all associated equipment, shall be rated at a
minimum of IP65.
The minimum camera performance characteristics are described in Appendix 2
All CCTV cameras shall be required to transmit full video resolution at the full frame rate
(25 fps) to any of the connected monitors or workstations at the site such that any camera
can be viewed at its maximum resolution, in real time, from any (or all) of the connected
monitors at an individual site. The requirement is such that the recorded information shall
be available at full video resolution and frame rate on receipt of an alarm of any kind and
preferably, in the early pre-alarm state, to determine the full nature of the alarm event.
The system shall provide a fully interactive alarm management and archiving facility, fully
integrated with the fence monitoring system.
 DEP 32.71.00.10-Gen.
February 2011
Page 30

7.7 MONITORS AND CONTROL UNITS

Colour CCTV monitors and control units shall be provided as a minimum in the CCR,
gatehouse and in the emergency control room. The monitors in the gatehouses shall
provide views from all surveillance cameras, including cameras provided to give general
views of process areas.
The monitors in gatehouses shall provide displays of the approaches to gates or turnstiles
that the site gatehouse controls. A facility shall be provided to enable dark screen mode for
monitors in the gatehouses so that the monitors are only activated on receipt of an alarm.
This method of operation is recognised as providing a more efficient operator environment
that leads to quicker incident response and allows operators to focus on directly monitoring
incidents as they occur.
The system shall be software based and provide the operator with camera and monitor
selection facilities with the ability to display individual full screen pictures or combination of
pictures from any camera or monitor selected by the operator. In the CCR and gatehouses,
flat screen monitors shall be provided, sized to display views of the process areas and sites
using quad images and sequenced images.
Monitors and control units identical to those provided in the gatehouses shall also be
located in the emergency control centre. The system shall be capable of displaying views
from pre-selected cameras at each of the monitor locations.
The system should be capable of extending images for viewing to locations outside the
plant area (e.g. Offices).

7.8 RECORDING AND ARCHIVING

The CCTV system shall include networked video recorder (NVR) capability to
simultaneously record, search and playback of 28 days of footage from each of the
cameras in full MPEG-4 CIF quality.
The system shall provide a fully interactive alarm management and archiving facility,
catering for both the fence and plant monitoring systems.
The video servers shall comprise a resilient, high availability disc storage system (e.g.
RAID) including the management software necessary for recording and playback.
The network video recorder shall be provided to accommodate real time recording of
images from all cameras. The system shall store typically 28 days images (national laws
permitting) from each of the system cameras. An archiving facility shall be provided to
enable selected items to be stored offline with verification ‘watermark’ for integrity. A means
shall be provided for a rapid search based on either time or event logs.
The latest generation of equipment, approved by the Principal, shall be provided at time of
equipment ordering.
The recording facility shall include:
• Centralised alarm recording from CCTV generated and externally generated alarms
• Alarm index for one-touch access to alarm recorded events.
• Recording and multi-display playback simultaneously with no effect on recording
• Mode-lock to prevent accidental switching during recording.
• Linear counter.
• Continuous recording from all cameras for 28 days
• Battery back-up.
• Forward and reverse playback, with selectable frame rate and image quality.
 DEP 32.71.00.10-Gen.
February 2011
Page 31

• Failure alarm
• On-screen display of equipment settings, alarm activation and alarm memory.
• System administration and user management
• Facility to back-up to permanent offsite storage (e.g.)
The emergency / contingency plan for the plant should provide for the removal of discs after
an event to prevent further overwriting and to allow for later analysis.

7.9 POWER SUPPLY

The CCTV system (cameras, monitors, recorders) shall be powered from vital power supply
as per DEP 33.64.10.10-Gen section 3.9.

7.10 LIGHTING
The area to be viewed by CCTV cameras shall be illuminated as specified in
DEP 33.64.10.10-Gen.
 DEP 32.71.00.10-Gen.
February 2011
Page 32

8. SECURITY SYSTEM

Guidance is provided in: Shell Group Security Standards and Security Manual.
The security systems for the plant should be commensurate to the assessed threat
identified by project security risk assessment. Counter measures should be in-line with
baseline security criteria described in the GSS (2007) Security Procedures manual and
take into consideration National Government Security Policies.
Telecommunications systems provide support for an overall security plan and procedures
appropriate to the local threats and consequences. The telecommunications systems may
include:
• access control;
• intruder detection;
• communication with security staff;
• communication with private security, local and national law enforcement agencies;
Simple and effective systems are preferred and the local importation regulations and
maintenance capability will often limit the complexity that can be used.

8.1 ACCESS CONTROL

The security plan will have divided the plant to be protected into separate zones, some or
all of which may need an entrance control system to:
• Permit and register incoming and outgoing personnel;
• Control entrance/exit of vehicles.
The systems and/or procedures SHALL [PS] control the specified area and establish the
number of people within that area.
Shell have selected the Honeywell “Pro Watch “ software as the group standard for access
control and the access control system provided for the plant shall be based on this software
platform. Honeywell card readers are the preferred Shell reader hardware but are not
mandated and other manufacturer’s card reader systems may be acceptable. Any selected
card reader system must be compatible with “Pro Watch” software.
The system design shall consider other existing systems in the region, country to enable
system integration, common database(s) and management to improve efficiency and
reduce costs.
Identification of individuals and vehicles shall be by electronic badges or tags interrogated
by fixed readers at the access/exit gates. Each badge shall be unique and will be
interrogated by fixed equipment (badge readers). The interrogation shall not rely on
physical contact with the card. Preferred system is by inductive coupling.
The system shall contain a database of valid cards with the name of the bearer. Facilities
for restricted areas and time zones shall be provided. The system shall check the validity of
the card and shall record each reading. Each reader position shall be provided with
indication "valid" and "invalid" and intercom facilities to the gatehouse. The "valid/invalid"
indication shall be repeated in the gatehouse. A photo display of all cardholders shall be
available on the access control monitor equipment at the main security gatehouse.
The contents of the memory of the badge reader shall not be lost in case of power failure.
The system shall start automatically at power return.
Pedestrian entrances to the facility should be fitted with walk through metal detectors and
full height anti-pass back turnstiles.
Pedestrian entrances shall be by full height anti pass back turnstiles fitted with card readers
for automatic operation. The turnstiles shall allow entrance of one person at the time after
reading of a valid card. The gatehouse shall have intercom facilities to all badge reader
locations
 DEP 32.71.00.10-Gen.
February 2011
Page 33

The access control system shall be integrated with the CCTV and permit to work system.
Door entry shall trigger the CCTV camera to record a snap shot of the person entering the
building/facility for identification.
Vehicle entrances shall be a secured entry system formed by an initial vehicle barrier to
permit entry into a vehicle checkpoint where the exit is controlled by an electronically
controlled barrier. Vehicle entrances shall be fitted with dual height car readers (for cars
and lorries) at both entrance and exits.
All entrances and exits shall have an emergency release, controllable from the gatehouse.
All emergency exits shall be interfaced with the access control system and an open position
shall raise an alarm at the gatehouse.

8.2 INTRUDER DETECTION SYSTEM (IDS)

The Intruder detection system shall comprise one or more security systems operating in
combination to provide the necessary level of security for the plant. The following
telecommunications systems assume that a perimeter fence designed to Shell standards
has been provided. The preferred intruder detection systems are described below.
A fibre cable vibration sensing system shall be used to detect intruders attempting to
breach the perimeter fence. The accuracy of the system shall be better than 10m (33 ft).
Either a cable attached to the fence or a buried cable system will be considered. Both these
systems provide accurate detection and are able to discriminate between vibrations caused
by an intruder and vibrations caused by wind, rain and animals. The system shall be
capable of detecting tampering with the sensing cable. The system shall be capable of
configuring alarm zones independent of the location of equipment. Alarm zones should be
between 50m (165 ft) and 100m (330 ft) in order to provide accurate alarm detection and
verification
A microwave motion detection system shall be provided to detect an intruder who is,
walking, and running, crawling, jumping or rolling. The microwave units will be located
around the fence perimeter with a maximum separation of 100m (330 ft) between units.
Dedicated units shall be used to cover sliding gate entrances. Each microwave zone shall
be based on bistatic sensors where the transmitter and receiver are located in separate
units. Portable Microwave detection systems may in addition be provided to protect
temporary facilities or plant equipment.
As part of the CCTV system, described in (7.3), fixed and PTZ cameras shall be provided to
cover the perimeter fence. The cameras shall be linked to the IDS to verify intruder events
by preset settings.
Fixed CCTV cameras shall be provided to identify persons entering or leaving all entrances
and exits of the plant and buildings. Dedicated fixed cameras shall monitor all personnel
and vehicle search areas. Cameras monitoring vehicle entrances shall support Automatic
Number Plate Recognition ANPR.
The cameras shall be of 316L stainless steel construction with an electro polished finish.
All cameras should be capable of performing Video Motion Detection (VMD) or Video
content analysis software (VCA) and be capable of generating alarms on the security
management system when any unidentified object enters the detection zone or crosses a
virtual trip wire. Tripwire detection identifies objects that cross a user defined virtual line
drawn within the cameras field of view. Video content analysis should also permit detection
of rogue non moving objects to identify threats to safety and operational integrity.
All cameras shall be day / night colour with conversion to black and white at low lux levels
and fitted with auto iris lenses. Cameras shall provide at least two video streams, one for
recording and one for real time viewing. Megapixel equivalent cameras shall be considered
as an alternative.
All CCTV images shall be stored on a Network Video Recorder (NVR) located in a secure
area and retained for a period of 28 days to assist in analysing security breaches and
process incidents. NVR should be non windows based.
 DEP 32.71.00.10-Gen.
February 2011
Page 34

8.3 COMMUNICATION WITH SECURITY STAFF

Communication with security staff throughout the plant and offices shall be an integral part
of the security plan since these staff will provide the human response to alarms raised by
the automatic intruder detection systems. They will normally be assigned a separate group
on the plant trunked radio system. If there is no trunked radio system they may need their
own radio channel. In extreme cases, encryption of the radio traffic may be required to
prevent intruders overhearing or interfering with instructions to the security staff. A backup
telecommunication system should be in place and tested periodically.

8.4 COMMUNICATION WITH PRIVATE SECURITY COMPANY, LOCAL OR NATIONAL LAW

ENFORCEMENT AGENCIES
Plant security staff may not be able to deal with all situations and back up from a private
security company, local or national law enforcement agencies may be required. The plant
IP telephone system shall provide the normal means of communication but a separate
secure line may be justified. In extreme cases this may need to be protected from
interception or from being cut off, e.g. a direct radio link.
 DEP 32.71.00.10-Gen.
February 2011
Page 35

9. EMERGENCY FACILITIES

9.1 REPORTING OF EMERGENCY

One telephone number SHALL [PS] be assigned which is publicised as the number on
which to report an emergency. The telephone shall be located in the control room. This
telephone shall be configured:
• to accept only incoming calls (outgoing calls barred);
• either as a non-busy extension (new callers will not get busy tone even if the telephone
is in use) or to queue calls with a recorded message that the operator is aware of the
emergency situation and will handle their call as soon as possible;
• the telephone itself shall be clearly coloured or marked as the emergency phone and
shall have a distinctive loud ring which can be heard at all locations in the control room.

9.2 EMERGENCY CALL OUT

There are two main methods of contacting staff: telephone and paging. It is likely that both
will be required.
With telephone call-out a selected number of telephone sets both inside and outside the
plant shall be configured to be called simultaneously and a pre-recorded message sent.
The emergency response centre should be equipped with a recorder on which the operator
can record a message, which is then played on the telephone system and the paging
system (the latter only when it can handle voice).
Pagers are complementary to telephones and are well suited to emergency call-out. If the
majority of staff is either in the plant or in an adjacent and compact residential area, then a
private system is likely to be suitable. If the majority of staff lives off-site, spread over a
wide area, a public system should be chosen.
Whichever system is chosen it shall allow both individual as well as group paging.
As a minimum, the paging units shall have a numerical display of at least 4 digits, with
distinct tones for individual and group call and a memory to hold the last message.
The units should have rechargeable batteries. If non-rechargeable batteries are used they
shall last at least 2 months at 8 hours per day of service. For rechargeable batteries a
suitable number of charging units shall be available.
The paging units shall be robust enough to withstand rough handling. They shall be small,
lightweight and designed to operate under the environmental conditions as specified.
The paging units SHALL [PS] be certified intrinsically safe for ATEX zone 1 IIC T4
hazardous area operation.
The paging base station described in (4) should be connected as a telephone set to the
plant telephone infrastructure. The telephone user may be able to call a paging unit by first
dialling the telephone number of the paging transmitter, and then the number of the paging
unit, possibly followed by the message to be displayed. In order not to block the telephone
access to the paging base station, the base station shall automatically go 'on-hook' after a
certain idle time in case the telephone user has forgotten to replace his handset.
The system shall accept signalling from:
• wire-connected DTMF push-button sets;
• wire-connected digital sets;
• radio-connected digital sets (if used).
Besides placing a paging call via the telephone system, it shall be possible to make a call
via a dedicated paging controller connected to the paging base station. The paging
controller shall normally be located in the CCR or in the security gatehouse.
 DEP 32.71.00.10-Gen.
February 2011
Page 36

The paging system shall be connected to a UPS supply to allow for continued operation in
the event of a failure of mains power.
Where available, public mobile phones should be considered instead of or in addition to
paging. Intrinsically safe mobile phones are now available commercially that removes one
of the major obstacles to their use for this application.

9.3 EMERGENCY ROOM COMMUNICATIONS

The normal plant telephone and plant radio systems shall be designed to cope with the
extra traffic expected during emergencies.
The emergency room SHALL [PS] be equipped with one or more telephones on the plant
telephone system and directly connected PSTN lines. Consideration should be given to
loud speaking telephone instruments. A fax machine and PC LAN network capability shall
be provided.
The emergency telephone will normally be answered first by the control room operator or
supervisor but there should be a parallel extension in the emergency room. The lighting and
equipment in the emergency room should be powered from a UPS supply.

9.4 RECORDING FOR ANALYSIS AFTER THE EVENT

The plant emergency telephone described in (9.1) should have a recorder attached to the
line, which is activated whenever a call is received. Recording other telephones in the
emergency room may be considered. Every telephone instrument which has traffic
recorded from it shall be visibly marked. All recordings shall be date and time stamped. An
archiving facility shall be provided to enable recordings to be selected and stored offline
with a verification “watermark” for integrity. The recorder shall provide the facility for rapid
search based on either time or event logs.
If tape recording is required the manufacturer of the equipment should be consulted.
Critical CCTV cameras should be recorded as described in (7.3).
Procedures shall be established to remove recording media after an event
The recording equipment shall be powered from a vital supply.
 DEP 32.71.00.10-Gen.
February 2011
Page 37

10. TELECOMMUNICATIONS FOR MARINE LOADING

10.1 COMMUNICATION WITH SHIPS

Inmarsat facilities are usually accessible through the plant and public telephone system but
in some countries this may not be possible or sufficiently reliable, if so a dedicated Inmarsat
land station shall be provided and located at or near the terminal. This allows direct
communication between the terminal and the ship.
Within about 40 km, the International Maritime Mobile Band (156-162 MHz) can be used to
communicate with approaching carriers. All vessels carry radios that permit ship-to-ship
and ship-to-shore communication over VHF channels. Shore terminal should be provided
and should be equipped with a marine band radio, which can select ship-to-ship channels.
Ships equipped for GMDSS and with Digital Selective Calling (DSC) are no longer (wef 1
February 2005) required to carry out a listening watch on channel 16 (156.8 MHz). There is
therefore no requirement for the onshore radio to continuously monitor channel 16.
It may also be possible to establish a maritime shore station with one or more shore station
frequencies. This should allow more reliable communication with ships from portable radios
by using the shore station as a repeater. In most countries, special permission is needed to
establish a private maritime shore station.
In many areas of the world the International Maritime Band is congested and others may
interrupt critical ship-to-shore communication. For mooring operations, where integrity of
communications is important, a private VHF or UHF frequency should be considered.
All portable radio equipment used in the mooring should be of intrinsically safe design. The
fixed equipment located in non hazardous areas on shore, on mooring / hose handling
vessels and on the tanker may be of normal design.

10.2 LOADING OPERATIONS

When ship loading/offloading occurs at a jetty terminal shore-ship communication system
(SSCS) shall be provided, this link shall include provide “hotline” and telephony
functionality. Electrical and fibre optic cables shall provide the direct “wired” communication
and shall be wound on permanently installed reels with suitable handling facilities.
Arrangements shall be provided to minimize stress on connectors when cables are being
handled.
Amended per
Circular 47/11

Telephones installed in potentially explosive atmospheres SHALL [PS] shall comply with
DEP 32.31.00.32-Gen section 2.5 If the ship is moored at an SBM (Single Buoy Mooring)
only radio can be used. In either case, if radio is required, a private frequency shall be used
since the International Maritime Band does not provide sufficient integrity and regulations
do not normally allow the use of maritime mobile channels in port.
There is also a requirement to remotely stop the flow of oil in an emergency and to shut
down the shore-based loading pumps. This can be done by means of a command sent
from the loading master's radio. A separate clearly marked and protected button should be
provided for this purpose. The integrity of the link and coding / decoding of the transmitted
radio signal shall be sufficiently robust that it operates reliably and does not operate
spuriously. Since the shutdown signal may be sent from inside the vessel (ship's loading
control room) it may not be possible to span the distance to shore directly. If this is the
case, a repeater should be provided on an existing structure such as an offshore loading
platform where one exists. Otherwise it may be necessary to modify procedures so that the
shutdown signal is only given from an exposed part of the ship e.g. deck or bridge.
If an SBM is used, a radio telemetry system should be installed to transmit the tension of
the tanker mooring line to the control room or marine office on shore.
 DEP 32.71.00.10-Gen.
February 2011
Page 38

10.3 OTHER SERVICES

Depending on the country and location, port services may be provided by the government
or the Principal or both.
Typical port services are:
• approach radar if the berthing is difficult or congested or there is frequent poor
visibility;
• pilot services;
• tug services;
• harbour master services;
• mooring / hose handling if an SBM (single buoy mooring) is used;
• weather and/or sea state monitoring and forecasting;
• customs and other government controls;
Reliable communication is needed between all parties. The exact requirements should be
determined early in the project, as equipment may need to be purchased by the Principal
for installation in premises belonging to others.
 DEP 32.71.00.10-Gen.
February 2011
Page 39

11. TELECOMMUNICATIONS FOR GAS GATHERING AND DISTRIBUTION

11.1 USER REQUIREMENTS

The specific user requirements should be established on a project-by-project basis since
they can vary considerably. The following are the most common requirements:
• voice and record communication between the plant control room and the gas
Supplier/consumer control room(s);
• voice and record communication with scheduling department(s) if in a different
location from the control room(s);
• voice communication with pigging teams, pipeline right-of-way inspectors and
others working on the line e.g. cathodic protection staff;
• telemetry for pipeline leak detection (if required);
• telemetry for remote closing of sectionalising block valves (if required);
• telemetry of custody transfer metering (if required);
• emergency communications to deal with a pipeline rupture;
Record communication provides a hard copy output on a medium and in a format agreed
by both parties. Nowadays, for these purposes, fax is the record communication of choice.
Unless specially configured, e-mail does not provide the necessary immediacy.

11.2 TELECOMMUNICATION SOLUTIONS

The main requirement is a reliable end-to-end communication bearer, which can carry
several services (voice and data) simultaneously. The possibilities are microwave, fibre-
optic cable, satellite or a combination of these. A long undersea pipeline will limit the
possibilities. The choice of technology will be influenced by cost, expected reliability,
maintainability, susceptibility to damage either accidental or deliberate, and need for
communications services at intermediate sites (see DEP 32.71.00.31-Gen. for guidance on
using microwave and satellite systems).
The end-to-end communications bearer shall provide the infrastructure for voice and record
communications between the distant control rooms. Hot line phones and fax machines
should be provided at each end either connected directly or through one or both telephony
systems, if they are sufficiently reliable. Extension to the system may be needed to provide
contact between scheduling departments but their needs are less immediate than those of
the control rooms. Telemetry for leak detection and custody transfer metering can be
carried on the same end-to-end bearer.
Also Field Auxiliary Rooms (FAR’s) are often designated as a safe refuge, in which case
they shall have additional requirements for emergency use, such as PAGA intercom.
Voice communication with staff working on the right-of-way should be provided by means of
VHF or UHF vehicle-mounted radios. A separate radio system, not an extension of the
plant system, should be used since it is important not to compromise the integrity of the
plant radio system. Depending on the length of the pipeline, it may be necessary to provide
radio repeaters at intervals to cover all the right-of-way. These repeaters should be co-
located with fibre-optic repeaters or microwave to provide the necessary remote control
channel and to share prime power.
If possible, the fibre-optic repeaters or microwave should be located at sectionalising block
valve sites so that telemetry for remotely closing the valves can be connected back to the
plant. If this is not possible, spur links to the block valves sites should be planned. A point
to multipoint microwave system (see DEP 32.71.00.31-Gen. (Appendix 1)) should be used
instead of multiple spur links
If the pipeline network is extensive, an emergency communications package should be
provided which SHALL [PS] be deployed at the site of a pipeline break to help the repair
work. If provided this package shall be
 DEP 32.71.00.10-Gen.
February 2011
Page 40

• designed so that it can be transported to site quickly by locally available transport

e.g. by land, water, or air.
• be self-contained and include a power supply.
• include a link back to the main communications network
• provide for local area communications with hand held radios.
• Have electronic still or video cameras and a means of transmitting the picture back
to the main emergency centre should be considered.
 DEP 32.71.00.10-Gen.
February 2011
Page 41

12. TELECOMMUNICATIONS FOR CONSTRUCTION SITES

12.1 USER REQUIREMENTS

In the first stage of a project (phase 1), most of the work will be carried out within and
between established offices of the Principal and the Contractor. The communication
requirements will be telephone, fax, e-mail and file transfer.
Both Principal and Contractor are likely to establish or expand existing representative
offices in the country where the plant will be built. Telephone, fax and e-mail will be
required, including connectivity to the Shell network.
In the main construction stage (phase 3), the plant itself is built. The site office will probably
become the construction base. The requirements are:
• voice communications within the site office, around the plant and marine areas with
additional coverage of the construction camp and the residential area (if one is to
be built);
• telephone, fax, e-mail and file transfer communication from the site office to the in-
country offices of Contractor and Principal and to the design office;
• telephone, fax, and e-mail communication with major Suppliers and Manufacturers;
• telephone, fax, e-mail and data communications to allow Manufacturers’ visiting
commissioning engineers to call their home base;

12.2 TELECOMMUNICATION PLAN

A master plan for telecommunications should be drawn up to meet the specific user needs
of the project. The plan should highlight the timing of both requirements and solutions with
particular emphasis on any regulatory approvals that may be required.
The plan should consider early installation of the main communications equipment to
provide service during the construction phase. Re-use of some equipment for the later
operations phase may be possible but portable equipment is not likely to be in good
condition at the end of the construction phase.

12.3 SUGGESTED TELECOMMUNICATION SOLUTIONS

During phase 1, PABXs and local area data networks should be established in the offices of
Principal and Contractor and connected to the public system. In the absence of reliable
public telecommunications infrastructure, fixed or portable VSAT/ Inmarsat terminals should
be considered for main or back-up communications between the construction site, the in-
country offices, and the head offices of Principal and Contractor.
Phase 2 is the time to install and commission communications for the main construction
phase. The construction site office should be equipped with a PABX through which all voice
services are connected. It may be preferable to use some radio-connected phone sets if the
laying of cable is difficult or if it may be damaged by earthmoving activities. TDMA radio
systems (see DEP 32.71.00.31-Gen.) may be used if the range of PABX radio-connected
phones is insufficient. The site Telephony system should be linked to the public system
either by wire, fibre-optic cable or microwave. In the absence of a reliable public system a
private satellite connection should be considered.
A simple local area network should be established within the construction office complex,
linked to the in-country offices of the Contractor and Principal and connected directly or
through them with the outside world. E-mail should be provided at an early stage since it
can significantly improve communication with the design and project offices. The Local
Area Network infrastructure shall be designed and built according to the Managed Network
Service ISP (currently AT&T) network standards.
Phase 3 is the time to install communications for the operational phase of the plant. All
communications should be installed and working before the commissioning of the plant
since this is the time when user requirements reach their peak.
 DEP 32.71.00.10-Gen.
February 2011
Page 42

13. REFERENCES

In this DEP, reference is made to the following publications:

NOTES: 1. Unless specifically designated by date, the latest edition of each publication shall be used,
together with any amendments/supplements/revisions thereto.
2. The DEPs and most referenced external standards are available to Shell staff on the SWW (Shell
Wide Web) at http://sww.shell.com/standards/.

SHELL STANDARDS
Definition of temperature, pressure and toxicity levels DEP 01.00.01.30-Gen.
Shell Enterprise Process Control Domain Security Standard DRAFT
DACA – Gen DEP 32.01.20.10-Gen
Instruments for measurement and control DEP 32.31.00.32-Gen.
Instrument signal lines DEP 32.37.20.10-Gen.
Telecommunications for offshore platforms DEP 32.71.00.12-Gen.
Telecommunications towers and guyed masts DEP 32.71.00.14-Gen.
Design and installation of telephone cabling DEP 32.71.00.16-Gen.
Structured cabling systems for telecommunications DEP 32.71.00.30-Gen.
Microwave systems DEP 32.71.00.31-Gen.
Electrical engineering guidelines DEP 33.64.10.10-Gen.
LAN/WAN Hardware Standard and Design Guide GST-1001
International WAN Design Standard GST-1004
LAN/WAN Configuration Standard GST-1005
Structured Cabling Standard GST-1008
Internet Connectivity Standards GST-1010
IP Telephony Standard GST-5015
IPT Hardware Standards and Design Guide GST-5065
IPT Nortel Configuration Standard GST-5070
IPT Security Standards GST-5075
IPT Soft phone Gateway Standard GST-5080
Group Security Procedures Manual GSS (2007)

Electronics Industries Alliance (EIA)/Telecommunications

Industry Association (TIA)
Commercial Building Telecommunications Cabling Standard (All EIA TIA 568 B
Parts)

European Telecommunications Standards Institute (ETSI)

Terrestrial Trunked Radio (TETRA); Voice Plus Data (V+D). (All ETSI EN 300 392
Parts)

International Electro technical Commission (IEC)

Electrical Apparatus for Explosive Gas Atmospheres (All Parts) IEC 60079
Fire Resisting Characteristics for Electrical Cables (All Parts) IEC 60331
 DEP 32.71.00.10-Gen.
February 2011
Page 43

Degrees of Protection provided by Enclosures (IP code) IEC 60529

Video Cameras (PAL/SECAM/NTSC) - Method of Measurement. IEC 61146
(All Parts)
Protection against lightning IEC 62305

International Organisation for Standardisation (ISO)

Information technology - Generic cabling for customer premises. ISO 11801
2nd Edition plus amendments and corrigenda.
 DEP 32.71.00.10-Gen.
February 2011
Page 44

APPENDIX 1 PLANT IP TELEPHONE SYSTEM SPECIFICATION

1. SCOPE OF WORK
When purchasing or renting an IP telephone system it is important to define exactly the
Supplier's scope of work, e.g.:
• supply of equipment;
• installation;
• cables and jointing of cables;
• inclusion of the wiring system;
• telephone sets (these need not necessarily be obtained from the same Supplier as
the call processor);
• interface with the public telephone system, public data networks, etc. (including
interface and cable connection);
• interface with private systems such as other telephone systems, radio systems,
paging systems;
• integration into existing private network;
• facilities as described in this DEP.
From the outset of a project, the Telecommunication Authority should be involved. Items to
be discussed should include:
• type approval of IP telephone system, permission to connect;
• incoming and outgoing signalling;
• group hunting on incoming lines;
• purchase or rent of the IP Telephone system.
The IP telephone system includes:
• Call processing unit ;
• MDF with lightning arresters for all cables connecting legacy or analogue
telephones
• CAT 6 structured cabling system;
• UPS system;
• Fault logging subsystem;
• alarm display;
• operator console(s) or automatic attendant facility
• maintenance console;
• Wireless Access Points for wireless connected telephone sets;
• Call logging and Billing system;
• Voice recorder
• Voice mail system
• telephone directory subsystem;
• interface facilities with the public networks and private networks such as a private
telephone network, radio systems and paging systems;
• all special tools and test equipment required for preventive maintenance and first
line maintenance.
 DEP 32.71.00.10-Gen.
February 2011
Page 45

2. TECHNOLOGY
The telephone system shall be based on an IP call processing unit that will provide
standard telephony call handling facilities. Separate IP gateways shall provide interfaces
suitable for connection to both analogue and digital networks, and should be compatible
with the local public version of Integrated Services Digital Network (ISDN).
The system shall be provided with all modern telephone facilities and able to handle voice,
text, data and image communications.
The system shall support both ISDN BRI (2B+D) voice and data communication and
connection to the public network by 2Mbps PRI (30B+D) links in addition to any
requirement for analogue city lines
The telephone system shall be suitable for use with IP wire-connected telephone sets, and,
if required, wireless-connected digital sets.
If the exchange becomes non-operational because of a failure (e.g. total power failure)
there shall be a facility to switch selected telephone sets to the public central office lines.
For this facility, the following extensions should be considered:
• security department;
• medical department;
• central control room;
• general manager;
• telephone operator;
• Telephone system equipment location.
3. SIZE OF THE TELEPHONE SYSTEM AND PERIPHERALS
For the correct sizing of the telephone system, the following items shall be considered:
• initial capacity required (number of extensions);
• ultimate capacity (maximum number of extensions ever likely to be required);
• initial and ultimate numbers of central office lines to the public system;
• initial and ultimate number of tie lines to other private switches (if any);
• number of operator consoles;
• capacity of the batteries, specified in hours under full traffic (at least 8 hours), and
whether a stand-by rectifier is required;
• special interfaces, for example with plant radio system, plant paging system, etc
In most cases one console should be sufficient. Every effort should be made to persuade
the local telephone company to provide DID (direct inward dialling), to avoid the need for an
operator. An operator may be provided during office hours if desired but this is not
essential. Where DID and DOD (direct outward dialling) are not available or restricted, it
may be necessary to increase the number of consoles.
110 High density category 6 patch panels shall be provided in the telecommunications
equipment rooms and closets to terminate all cables. The structured cabling system shall
be sized for the maximum capacity of the Telephone system as specified, plus 10% spare
to cater for expansion of the system... All conductors of the cables shall be terminated at
the 110 patch panels (no loose hanging conductors). All cable pairs leaving the building
shall be protected by lightning arresters.
Larger systems, e.g. with more than 500 extensions, shall include a battery charging
system with two 100% rectifiers (fed if possible from independent AC supplies). The
rectifiers shall run in parallel to charge the battery (with blocking diodes to prevent back
feeding).
 DEP 32.71.00.10-Gen.
February 2011
Page 46

Separate malfunction alarms from each rectifier, plus a battery under-voltage alarm, shall
be provided for remote indication. Means shall be provided to individually isolate the
rectifiers for maintenance purposes.
4. STANDARD FACILITIES
The following facilities shall be provided as a minimum:
• Direct dialling to another extension of the exchange;
• Restriction of direct outward dialling from certain extensions, i.e. selective
prohibition of the following user facilities:
o dialling of certain internal extensions;
o dialling to the local public exchange network;
o dialling to the national public exchange network;
o dialling to the international public exchange network;
• Enquiry. During an external connection, enquiry with another internal extension
shall be possible while the external connection remains in the hold position;
• Transfer. It shall be possible to transfer an incoming external connection to another
telephone extension;
• Changing the class of service outside business hours. It shall be possible to
centrally change the facilities of the extensions, for example a set which can
normally directly dial international calls will only be allowed to dial local calls
outside business hours. These changes in user facilities shall automatically
become operational at a specific time of day or when the night console is switched
on;
• Intrusion/data protection. The operator shall be able to intrude into an established
connection. A tone shall warn the parties of the intrusion. Extensions used for data
communication shall be excluded;
• Night console. When the operator console is not manned (for example outside
working hours), it shall be possible to transfer all calls to a preselected extension
which is designated as the night console, e.g. in the gatehouse.

5. OPTIONAL FACILITIES
The following optional facilities shall be considered (if not already provided as a standard
feature of the telephone system):

• DID for all extensions, subject to the availability of this facility in the public network.
• Automatic call forwarding on 'no answer'. If there is no answer after ringing a
prescribed number of times, the call will be transferred to a pre-determined number
or the operator;
• Automatic call forwarding on 'engaged' (busy). Calls to an engaged extension are
rerouted to a pre-determined number or to the operator;
• Executive-secretary arrangement. This shall allow single-digit or two-digit dialling
between two defined users and a simplified transfer of calls between them;
• Three-party conference (add-on conference);
• Abbreviated dialling. The exchange contains a list of abbreviated numbers which
can be used by all, or preselected, extensions;
• Hot-line facility. When the handset is lifted the extension shall be automatically
connected to a predetermined extension, where the telephone will start ringing;
 DEP 32.71.00.10-Gen.
February 2011
Page 47

• Follow me. It shall be possible to reroute all calls from an extension to another
extension;
• Automatic ring-back. The system rings back the caller and the engaged extension
at the moment the engaged extension is free;
• Group hunting. A number of sets are assigned a general number. When this
number is called a free set in the group will be selected, either at random or in a
certain sequence. The individual sets can be called directly by their individual
numbers;
• Exception of night time "class of service" for individual extensions;
• Additional "class of service" for access to international abbreviated numbers;
• Additional class of service as "space" for later configurations;
• Telephone directory. A separate system should be provided which can be used to
maintain the telephone directory. Updates and changes should be easy to carry out
and it should be possible to provide both online and printed versions;
• Call Logging and Billing. The telephone system should provide call logging
information for use by a separate application that provides details of all calls made
and shall enable call billing via an additional billing application. These applications
shall reside on a network connected server. As a minimum, the billing application
shall be able to determine the cost of international calls made from the telephone
service. More extensive call cost recording should be considered. For ease of
administration, the call billing software should share the same database as the
telephone directory described above.
If DID is not available, consideration should be given to providing an automatic attendant
facility which answers the incoming city line and prompts the user to dial the extension
required. This facility is usually linked with voice mail.
For exact cost calculation it is necessary that the city telephone exchange provides the
metering pulses to the telephone system. This will not always be possible. If no pulses are
available, the approximate cost of a call can be calculated on basis of the destination, time,
duration and known rates. In either case, the operator of the city telephone exchange
should be asked to provide itemised billing for all city lines which can be compared with the
telephone system billing application on either a random or continuous basis. From time to
time, the telephone system clock should be synchronised with the city exchange to make
the comparison easier.
6. WIRELESS-CONNECTED IP TELEPHONE SETS
Wireless connected IP telephone sets offer the advantage of portability as individuals can
easily carry wireless IP telephone sets. However, this portability can be a disadvantage in
certain situations e.g. at large meetings. The telephone set batteries need to be charged
and a regime established so that the majority are operational at any one time. Some fixed
telephone sets are still required.
The design needs to provide adequate radio coverage throughout the service area. This is
likely to require separate wireless access points on each floor and more than one if the
area to be covered is large. These need to be powered from a UPS to meet stand-by
requirements in the event of a mains power failure. The traffic handling capacity of each
wireless access point should allow a reasonable number of users away from their normal
location to be able to use their telephones in a specified area e.g. outside meeting rooms.
7. VOICE-MAIL BOXES
Voice-mail provides the user community with a means of receiving messages when they
are not available and playing them back later. Not everyone needs or wants voice-mail and
it should be used with discretion.
 DEP 32.71.00.10-Gen.
February 2011
Page 48

APPENDIX 2 CCTV SYSTEM DESIGN

1. GENERAL
The CCTV system provided shall be a colour system.
The system shall be either 625 lines/50 Hz or 525 lines/60 Hz, 2:1 interlaced, depending on
the local broadcasting standard or if IP minimum of 4CIF PAL
It shall be designed for continuous duty.
The system and its transmission facilities shall be such that a clear and sharp picture is
obtained on each monitor (even if the same picture is selected simultaneously on all
possible monitors). Fibre optic cable transmission is preferred.
It shall be assured that the whole system will automatically restart at power return.
The system shall operate normally under the maximum voltage and frequency deviations of
the power supply as specified for the site. It shall tolerate at least a 10% deviation in the
voltage and 2% deviation in the frequency.
2. CAMERAS
The cameras shall have progressive scan CCD (charged coupled device) image pick-up
devices.
The camera performance characteristics shall meet the following minimum requirements:
• Automatic white balance sensing
• Auto switching for low light conditions
• Video signal to noise >56dB
• Sensitivity Colour 0.65 lux, minimum illumination level 0.2 lux. Or better (at f/1.4 -
6dB) measured in accordance with IEC 61146-1
• Colour cameras shall be employed with low light day/night threshold switching.
• At low illumination levels, the cameras shall be equipped with colour-noise
cancellation circuits to improve picture quality
• Sensitivity Mono 0.25 lux, minimum illumination level 0.05 lux.
• Image resolution 720 x 576 pixels (>520 TVL)
• Backlight compensation
• Optical Zoom lens with a minimum zoom of x18 where fitted
• Suitable for use in ambient temperatures to from -40 to +50°C (-40 to 120 °F)
• Built in audio functionality
• Configurable for 4:3 or 16:9 aspect ratio
• Automatic frame rate adjustment dependant on video content
• Incorporate preset positioning capability
IP Encoding requirements shall be defined as follows:
• Dual MPEG-4 streaming
• 25 frames/sec at 4CIF PAL
• Constant and Variable rate on each MPEG-4 stream (40Kbit/s to 6Mbit/s)
• Video resolution 4CIF, 2CIF, Half D1, CIF, QCIF (selectable)
• Firewall to prevent unauthorised access
 DEP 32.71.00.10-Gen.
February 2011
Page 49

The cameras shall be provided with facilities for the later insertion of filters.
The cameras shall be equipped with remote-controllable 'window' cleaning facilities when
specified by the Principal.
The cameras shall be equipped with thermostatically controlled internal or window heaters
when specified by the Principal.
Fixed cameras shall have a manual focus and zoom adjustment.
PTZ cameras shall have remote control, pan, tilt, zoom and focus facilities.
The pan and tilt heads of the PTZ cameras shall allow rotation over a minimum of 300
degrees in the horizontal plane, 60 degrees upward and 60 degrees downwards. They shall
have limit stops/switches, which can be set by the user. The orientation of the camera shall
not be affected by strong winds.
Dome camera shall allow rotation over a minimum of 360 degrees in the horizontal plane,
120 degrees upward and 90 degrees downwards. They shall have digital programmed limit
stops/switches, which can be set by the user. The orientation of the camera shall not be
affected by strong winds.
The camera enclosures shall be made of stainless steel with a rain/sun shield and a
protective cover for the 'window'. The ingress protection (IP) of the cameras shall be
minimum IP 65 as defined by IEC 60529.
Camera mounting shall be rigid to avoid false positives in intrusion detection systems.
The aperture ratio (f-number) of the lenses shall be selected such that a good picture is
obtained at night with the existing plant and equipment lighting. It shall be 1.4 or less for
fixed focal length lenses and 1.8 or less for zoom lenses.
3. LOCATION OF THE CAMERAS
If an electronic plant “model” or a complete model of the plant is available, it should be used
to determine the location of all the cameras. The viewing angle of the cameras shall be
shown on the plant lay-out drawings.
When selecting the camera positions, care shall be taken to prevent the direct light of the
sun or of lamps from shining into the camera lens.
Cameras shall always be located inside the fence.
4. MOUNTING OF THE CAMERAS
Wherever possible, existing non-vibrating structures shall be used for mounting the camera,
otherwise special structures shall be provided. The location of the camera shall be selected
so that the camera and its supporting structure will present the least obstruction and the
risk of accidental damage will be minimized. Where necessary, protective rails or fences
shall be provided. The cameras shall be easily accessible for maintenance with fixed or
mobile access platforms. Swing-type poles are not recommended.
The apparent vibration of any object on the screen due to the vibration of the structure on
which the camera is mounted shall be less than 2 mm with a frequency of less than 2 Hz.
Swing and torsion of the structure and backlash of the pan and tilt heads shall be taken into
account. Image stabilisation should be used to ensure this is achieved.
The camera housing and camera shall be mounted on the pan and tilt head, so that with
the mounting facility disconnected, the camera will be balanced in the horizontal position.
Dome cameras shall be mounted to ensure full 360 degree horizontal and 120 degree
vertical views can be achieved.
5. MONITORS
Unless otherwise specified the CRT screen size shall be 49 cm (19 inch).
CRT monitors shall have a bandwidth of at least 7 MHz (-1 dB) and a horizontal resolution
in the centre of the picture of 600 lines at moderate brightness.
 DEP 32.71.00.10-Gen.
February 2011
Page 50

LCD monitors shall be 21 inches, with resolution/picture stabilisation: 1280x1024 pixels /

60Hz as a minimum. Viewing angle shall be at least 120deg in vertical and horizontal
directions.
The ingress protection (IP) of the monitors shall be minimum IP 20 as defined by IEC
60529.
The maximum permissible operating temperature shall be at least 40 °C (100°F).
The monitors shall have facilities to loop the video signal through to other monitors.
The monitor shall remain dark if no camera is selected or if there is no signal at the video
input.
The screen shall have a non-reflective surface.
Each monitor/camera control shall have the following control facilities:
• Control of the wiper/washer or air jet window cleaning, if fitted;
• Pan, tilt, zoom and focus controls in the case of PTZ / dome cameras. Control of a
camera shall only be possible when it is selected on the monitor. In the stand-by
position no camera shall be selected and the monitor shall be dark.
6. TRANSMISSION
For the cable selection, earthing and lightning protection, DEP 32.37.20.10-Gen. –
Instrument signal Lines shall apply.
The cabling shall provide for each camera:
• Video link;
• Control of wiper/washer or air jet (if fitted), and control of pan, tilt, zoom and focus
(for PTZ cameras).
Fibre optic transmission is preferred.
7. Test equipment
The system shall be supplied with all special tools and test equipment required for
preventive and first-line maintenance, and shall include the following:
• a 12-inch portable test monitor.
• Laptop computer
 DEP 32.71.00.10-Gen.
February 2011
Page 51

APPENDIX 3 LIGHTNING PROTECTION AND EARTHING

In General lightning protect and earthing shall comply with the provisions in
DEP 33.64.10.10-Gen, but please note particular requirements for telecommunications
below.
LIGHTNING PROTECTION
The plant SHALL [PS] be protected against lightning in accordance with
DEP 33.64.10.10-Gen. and IEC 62305. In all cases the telecommunication tower shall be
protected since it is likely to be one of the taller structures in the plant and its foundations
are liable to be damaged by any lightning discharge. Earth electrodes shall be installed
near the base of the tower and connected to the structure by the most direct route and
without twists or bends using copper braid of at least 70 mm2 (0.11 in2)
To minimise damaging potential differences occurring across the telecommunications
equipment in the event of a lightning strike on the telecommunications tower, all cables to
the tower, including feeders, the earth connection, and power for any hazard warning lights
shall be made through the same feeder opening in the telecommunications equipment
room.
Some telephone cables will run in areas of the plant that are not protected by the overall
lightning protection system of the plant and all cables terminating on the
telecommunications MDF will be provided with lightning arresters of the gas discharge tube
type.
EARTHING
Telecommunications SHALL [PS] have a separate earth from the electrical system - a
telecommunications clean earth. This clean earth shall not be connected to other clean
earth systems such as the instrument clean earth. If a telecommunications tower is located
nearby, the earth electrodes provided for lightning protection should be used for the
telecommunications earth otherwise separate earth electrodes should be buried near the
equipment room. In all cases the earth resistance should be as low as practicable and the
aim should be to achieve 1 ohm between the telecommunications equipment and the
general mass of the earth.
A clearly marked and separate earth busbar shall be provided in the telecommunications
equipment room. The positive side of the telecommunications battery or batteries and all
telecommunication equipment shall be connected to this earth busbar.
Since it is not possible to completely isolate the telecommunications earth from the
electrical safety earth and to avoid potential differences appearing between the two earths,
the telecommunications earth busbar should be connected to the electrical safety earth at
one point only and by the most direct route using copper cable of at least 70 mm2 (0.11 in2).
 DEP 32.71.00.10-Gen.
February 2011
Page 52

APPENDIX 4. DATA ACQUISITION AND CONTROL ARCHITECTURE (DACA)

DACA (Data Acquisition and Control Architecture) is a Shell term used primarily to describe
• Provision of a secure, standardised Process Control Network (PCN) architecture in
the Process Control Domain (PCD).
• Provision of remote connectivity from the Office Domain (Shell’s Global
Infrastructure (GI) IT system) to the PCD data in a safe and secure manner to
enable technical support from remote locations.
DACA requirements apply to Telecommunication systems if there is a functional
requirement for systems to connect to the PCN e.g. CCTV screens on DCS systems.
DACA implementation shall be as per DEP 32.01.20.10-Gen
The DACA architecture is hierarchical; see Figure, comprising the following layers:
• Process Control Domain (PCD) – this includes the production and utility related
systems such as;
o Distributed Control System (DCS),
o Safety Instrumented System (SIS),
o Power Management System (PMS, also known as Electrical Network
Monitoring & Control (ENMC) system)
o Fire & Gas System (FGS),
o Emergency Shutdown System (ESD),
o Custody Transfer System (CTS),
o etc.
all of which are functionally independent but are interconnected via a Process
Control Network (PCN) to support the Centralised Control Room (CCR) concept
as well as common PCN facilities such as data back-up.
• Process Control Access Domain (PCAD) – this “demilitarised zone” regulates
read/write access to systems within the PCD by acting as a secure gateway for
data to/from the PCN.
• Office Domain (OD) – this includes IT facilities (Shell’s Global IT Infrastructure) for
asset management, data storage and provides a path for data communication
between the PCD and command/control facilities ashore, which is facilitated by
telecommunications systems identified in this section. The OD provides secure
links to the Internet where mobile users or other authorised third parties external to
a Shell facility can perform certain specialised activities such as remote
diagnostics, data acquisition, and Office Domain activities as required.
 DEP 32.71.00.10-Gen.
February 2011
Page 53

DACA Architecture overview

The DACA requirements for security in the Process Control Domain are primarily contained
in a series of Shell IT standards and DEPs.