Document Rj707XZJzDZnXKXRJV7nBJEp8

1996 CONSOLIDATED AUDIT PROCESS CONTROL TF.AM I .FADER - JOHN WILLIAMS FUNCTIONAL LEADERS - MIKE WOODS Audit Form Plant information Plant Chlorine I Compliance with the GPC Minimum Security Standards Introduction This document identifies plant: compliance with the GPC Minimum Security Standards * variances with the GPC Minimum Security Standards Document management The plant maintains this document in the plant library with the process control operating discipline documentation. A copy of this document is sent to the GPC Security. GPC maintains a database of all plant variances to the GPC Minimum Security Standards. Audit information The following general audit information is required: Audit Date: Process Information: LACLWI 14.728 LACLW2 14.664 Process Control Types: Process Information Types: LACLWI 2.4 LACLW2 2.4 Plant Site: Node: LACLV2 Plant Name: & Section DEC Node: 14.878 Sys. Mgr.: Phone #: 6717 EMail Addr.: Dow MOD's: Yes Dow OS: No PLC's: Yes Other Types TDC-2000 Dow GPI Ver.: 2.4 Dow OS Ver.: No Other: continued on next page Revised: September 1995 Printed: 8/20/96 DO A 043133 CONFlrifNTTAL RESTRICTED FOR i WITHIN DOW 40 08:26 AM Draft Copy: Form0695.MSW Audit Form, continued Minimum requirements The following are minimum requirements of the GPC Security Standards: Security Minimum Requirement Plant in Compliance (y/n/na) Plant Variance Required &Submitted (y/n/na) Variance Category All devices doing Direct Process Write are within the Direct Control environment. Yes A All Validated Date Write generated by automatic devices must be authorized, including verification of transmission and validation of range of value. Yes B1 Users performing Validate Data Write must be within the plant. Yes B2 Alarm Acknowledge only occurs within the operating area of the plant. Yes B3 MOD 5 communications between control rooms in different plants must use approved secure means: Network controller cards Dedicated (Ethernet) systems for MOD Servers, MODECS, and dedicated wire C1SS boxes Inter plant communications require approval from both superintendents, or their designees. Yes Yes Cl C2 All programs are written (edited) in an integrated environment with version control, change control and syntax checking (like DSS in the MOD systems). Yes D1 All critical Safety and Environmental programs are simulated after they are written or altered before loading into a process control system which is running the process. Yes D2 Control System program loads are only made by personnel authorized by the superintendent, or his designee. Yes D3 Control System program loads can only be enabled in the direct control area at the time of loading. Yes D4 continued on next page 41 Printed: 8/20/96 DO A 043134 CONFIDENTIAL RESTRICTED FOR USE WITHIN L . W Revised: September 1995 08:26 AM Draft Copy: Form0695.MSW Audit Form, continued Minimum requirements (continued) Security Minimum Requirement Plant in Complianc e (y/n/na) Control System program loads are only made at times authorized by operations. Changes to Process Control Source Code are only made by personnel authorized by the superintendent, or his designee. The appropriate process control equipment is installed to work with abort programming. The superintendent, or his designee authorize changes to the critical process abort program. Access to the critical process abort program source code is independent from access to the process control programming. Critical Safety and Environmental abort program code is programmed by a different individual (using independent logic) than the individual coding the associated process control program. (The use of an accepted abort template such as an MCAPP template qualifies as programmed by a different individual.) Machine Language changes (micro's) to a running plant program are authorized by superintendent, or his designee. Machine Language changes (micro's) to a running plant program are only made in the direct control environment. The use of Remote Date Entry panels is authorized by superintendent, or his designee. Remote Data Entry panels are only used within visual contact of appropriate process status data. N/A Yes Yes Yes Yes Yes Yes N/A N/A N.A. N/A Plant Variance Required and Submitted (y/n/na) Variance Category D5 D6 El E2 E3 E4 FI F2 G1 G2 G3 continued on next page Revised: September 1995 Printed: 8/20/96 on A 0431 cnfro RESTRICTED FOR USE WITHIN DOW 42 08:26 AM Draft Copy: Form0695.MSW