SEC Directives

Download as pdf or txt
Download as pdf or txt
You are on page 1of 20

Ministry of the Interior, Kingdom of Saudi Arabia,

High Commission for Industrial Security HCIS

Understanding the New Directives and their impact on the


projects and existing security of industrial facilities in KSA
HCIS: Who are they?
HCIS: Who are they?
HCIS History
HCIS Approval
Security Directives
General Requirements (SEC-01)

4.1.1: The HCIS reserves the right to modify and/or make changes to the
Security Directives without prior notice.

4.1.2: The criticality of each facility varies depending on the product or service
provided.

4.1.3: The HCIS will have the ultimate authority on classifying all facilities.

4.1.4: The level of protection shall be dictated by its security classification.

4.1.6: All security design shall be carried out by qualified security consultants
approved by HCIS.

4.1.7: The operator shall develop a detailed security vulnerability assessment,


or risk analysis, performed by a qualified security consultant, that shall be used
as the basis of facility qualification. This SVA shall follow the API Methodology.

4.1.8 The facility classification and Risk Analysis shall be submitted to HCIS for
approval prior to security system design or implementation.
The Security Directives

SEC 01 - Application of Security Directives

SEC 02 - Security Fencing

SEC 03- Security Gate

SEC 04 – Security Lighting

SEC 05 - Integrated Security Systems

SEC 06 - Security Devices

SEC 07 - Power Supply

SEC 08 - Communications

SEC 09 - Security Doors

SEC 10 - Security Locks

SEC 11 - Identification Cards

SEC 12 - Identification Protection


The HCIS Security Process:

HCIS HCIS
FAT / SAT
•Security Approval •Front End Approval •Detail Design
Vulnerability •Concept of Engineering •Detail Design (90%) •Issued for
Assessment Design (10%) Design (30%) (60%) Construction
(SVA) (100%)
HCIS HCIS HCIS
Approval Approval Approval

oSecurity Integrator Prequalification Review (HCIS bidder approval process


required)
oTechnical Scope of Work for client (Request for Proposal)
oBid Evaluation (technical evaluation of integrator bids)

oPolicy, Plan and Procedures


oManpower Study
oSecurity Awareness and Training Programmes
Security
Security Directives:
Vulnerability
Procedure Assessment
(SVA)

The plant owner commissions a Security Vulnerability Assessment to be


carried out by an HCIS approved Security Consultant.

The SVA has to be carried out following the API methodology. The purpose
of the SVA is twofold:

1. Identify critical assets, threats, risks, vulnerability and propose


mitigation measures
2. Classify the facility according to a class 1 to 4 system.
Security Directives: Concept of
Procedure design (COD)

After the approval of the Security Vulnerability Assessment, the plant


owner commissions an HCIS approved Security consultant to take the
results from the SVA and produce a security Concept of Design (COD)

This Concept of Design (also called 10% Preliminary design) provides a


design solution to the mitigation measures proposed and approved during
the SVA exercise.
Front End
Security Directives: Engineering
Design
Procedure (FEED)

After the approval of the concept of design (COD), the plant owner
commissions an HCIS approved Security consultant to produce a Front
End Engineering Document from the SVA and Concept of Design (COD) .

The FEED (or 30% Design) will form the basis of the Technical Scope of
Work that will form part of the Request for Proposal (RFP).

This RFP will be issued to approved System Integrators to prepare a


Tender Bid.

The TSOW and RFP need not be approved by HCIS, but the FEED
document does and the security system integrators must be approved by
the HCIS.

The EPC should submit the prequalification document of the security


system integrator to the HCIS consultant for comment/approval before
submission to the owner for transmission to and approval by the HCIS.
Security Directives: Detailed
Procedure Design 60%

After the award of the security contract to an approved integrator the


integrator will produce a 60% detailed design that is in accordance with the
FEED design (30%). The design will include details of all hardware and
software to be used and will detail how the software is configured to
produce an integrated system.

The 60% detailed design is submitted to the HCIS approved consultant for
comment and review before submittal by the EPC to the owner for
transmission and approval by the HCIS.
Security Directives:
Procedure
Detailed
Design 90%

After the approval of the 60% detailed design the Security Systems
integrator will produce the 90% engineering submittal. This will include
information on the total system down to individual field item level showing
location, mechanical installation and all electrical terminations

The 90% detailed design is submitted to the HCIS approved consultant for
comment and review before submittal by the EPC to the owner for
transmission and approval by the HCIS.
Security Directives:
Issued For
Procedure Construction

After the approval of the 90% design package the Security Systems
Integrator will prepare the system for the Factory Acceptance Test (FAT)

The Security System Integrator will produce a FAT document for submittal
and approval by the HCIS before the FAT is carried out .

The FAT will be attended by the HCIS representative, the HCIS consultant,
the owner and the EPC.

The approved consultant will lead a Site Acceptance Test (SAT) and issue a
Final Completion report (100%) for the HCIS.
Detailed
Safety Directives: Design Phase
Procedure

The EPC will receive a bid package from the owner, based on the FEED
preliminary engineering. This includes the requirement that the EPC
selects a fire engineering company that meets the requirements of HCIS
SAF 1.

The EPC should select a fire contractor(s) that meets the requirements of
the HCIS and submit the companies pre-qualification document to the HCIS
consultant for comment. If the consultant approves the document then the
EPC should submit to the plant owner for transmission to and approval by
the HCIS.

The EPC should issue tender enquiries to the chosen approved


contractor(s)

The EPC should award the contract for the design, supply, installation and
commissioning of the fire systems to the approved fire contractor
Safety Directives: Operational
Aspects (prior
Procedure to operations)

The owner, in conjunction with the EPC will produce Site operational
systems including Incident Management System, permit to work system
and all other safety related procedures

The Incident Management System (IMS) shall meet the requirements of


SAF20 and be integrated with the Site Security Systems and the Site wide
fire alarm and fire protection system.

The IMS should be integrated from a hardware and software perspective to


produce an easy to use system that can be used to:
o Reduce loss of life
o Reduce loss or damage to assets
o Ensure any situation is controlled
o Ensure the safety of personnel and Assets
o Reduce hostile effects in the environment.
Operational
Safety Directives: Aspects (prior
Procedure to operations)

The IMS must provide Fast, Effective Access to Critical Incident Data

Clear Command Communications

Common Operational Picture:


o Shared across an incident
o Shared between many agencies

Capacity to:
o Operate on a massive scale
o Operate over long timescales
o Manage massive numbers of victims and resources
o Minimise ecological and environmental damage
Operational
Safety Directives: Aspects (prior
to operations)
Procedure

The Incident Management System shall meet the requirements of the


NFPA.

NFPA 450 Emergency Medical Services and Systems

NFPA 472 Competence of Responders to Hazardous Materials/ Weapons


of Mass Destruction Incidents

NFPA 473 Competencies for EMS Personnel Responding to Hazardous


Materials / Weapons of Mass Destruction Incidents

NFPA 1006 Rescue Technician Professional Qualifications

NFPA 1620 Pre-Incident Planning

NFPA 1670 Operations and Training for Technical Rescue Incidents

NFPA 1951 Protective Ensembles for Technical Rescue Incidents

You might also like