20
How To Identify, Plan, and Implement Changes For Control Systems Aging Gracefully
How To Identify, Plan, and Implement Changes For Control Systems
Aging Gracefully
2 | Aging Gracefully June 27, 2019
Presenter
Troy WindomDewberry
Group Leader Federal Projects MEP SE
919.424.37598
• Understand the impacts of not planning
• What is needed to plan
• What do I need for the long term
• The impact associated with cyber security
3 | Aging Gracefully June 27, 2019
Goals of Presentation
• High cost of upgrades/replacements:Think about it:
o How many Building Point of Connections (BPOC)?
o How many AHUs?
o How many terminal units?
o How many chillers/boilers?
o Programming?
4 | Aging Gracefully June 27, 2019
Impact of Not Planning
Priorities Description Cost
Priority 1 Honeywell BNA & C-Bus Upgrades $2,617,600
Priority 2 Loytec Upgrades $885,400
Priority 3 Loytec Upgrades (JCI Buildings) $50,000
Total Recommended Total Upgrades for N4 Integration $3,553,000
LonWorks Upgrade All Honeywell LonWorks Controllers $2,940,000
Grand Total Upgrade all surveyed controls at end of useful life $6,493,000
• Connectivity:o Getting kicked off the network
o Loose support for hardware/software
• Service to End User:o Trouble shooting
o Addressing comfort issues
o Maintaining equipment operations
• Addressing Design Issues: o ASHRAE 90.1
o ASHRAE 62.1
5 | Aging Gracefully June 27, 2019
Impact of Not Planning
• Start planning today for the next generation
• Just like any other equipment, controls age tooo Are you using the same computer you did
20 years ago?
o How about the software?
o Are you using the same refrigerant?
o Are the building codes the same?
6 | Aging Gracefully June 27, 2019
How Do I Plan?
• Energy managers and/or utilities division chiefs
• Mechanical Engineers
• Directorate of Public Works (DPW), O&M chiefs
• Shop and/or work leaders
• Technicians
• Engineering division and master planning
• NEC
• USACE/NAVFAC
7 | Aging Gracefully June 27, 2019
Who Gets Involved?
• What type of buildings do I have?o Confidentiality, integrity, and availability (C-I-A) impact levels
(LOW, MODERATE, or HIGH) for the control system.
• Manufacture, make, model and version
• As-builts: What do I have? In most cases very little. o Keep current
o Gather/keep them centrally located and with the equipment
• Where is my server, what platform, who has access?
8 | Aging Gracefully June 27, 2019
What Do We Have/What Do We Want?
9 | Aging Gracefully June 27, 2019
What Do We Have/What Do We Want?
• How is BCS/UMCS technology being used now?
• Who currently uses the existing system?
• Who might/will use it in the future?
• Can the system be supported? (operationally and maintenance wise) o Consider the following: staff, funding, contracting, integration process, and
cyber security
• What kind of system technology and functionality do I want?o User levels
o Password protection
o Alarms
o Smart building
o Interface with other systems
What Do We Have/What Do We Want?
UMCS
10 | Aging Gracefully June 27, 2019
• Who does it take to run a modern system?o System managers
o System integrators
o Technical experts
o System operators
o Controls technicians
o Someone acting as IT administrators
11 | Aging Gracefully June 27, 2019
Staff Consideration
Would a race car team go get the car without hiring a crew chief, driver, mechanics, pit crew, or engineers?
12 | Aging Gracefully June 27, 2019
If you don’t address staffing, failure of the system is asure bet!
13 | Aging Gracefully June 27, 2019
• Make sure staff is trainedo If you don’t use it, you lose it
• Ensure they know what they haveo Bought a Cadillac, using it like a Yugo
• Keep current
14 | Aging Gracefully June 27, 2019
Train the Team
• UFC 4-10-06 C2 is the most current UFC that addresses cyber security of facility-related control systems
• UFGS 25 05 11 - Who is familiar with it?o Note this spec is for low impact rating
15 | Aging Gracefully June 27, 2019
Cyber Security
“Unless explicitly authorized by the government, do not use any wireless communication. Any device with wireless communication capability is considered to be using wireless communication, regardless of whether or not the device is actively communicating wirelessly, except when wireless communication has been physically permanently disabled.”
• The Risk Management Framework (RMF) is the DoD process for applying cybersecurity to information technology (IT), including control systems.
16 | Aging Gracefully June 27, 2019
Risk Management Framework
17 | Aging Gracefully June 27, 2019
• Do you have the right staff?
• Who is responsible for updates?
• What means do you have in place to make sure you aregetting current software updates?
• Stay current on software
18 | Aging Gracefully June 27, 2019
Who is Performing Updates?
• Where is the server located? Is it backed up?
• Who is responsible for the updates?
• Who has access to it?
• Don’t have it out and about
• Don’t use it as a workstation
• Don’t include software where people have access to: o Check their email
o Browse the internet
o Play games
19 | Aging Gracefully June 27, 2019
Server
20 | Aging Gracefully June 27, 2019
Questions?
