The purpose of this document is to describe the technical and functional requirements for the Automation system for the MFW . The content of this document describes the requirements for theThis document provides the overall design criteria for the Industrial Automation and Control System (IACS) and shall form the basis for the functional design specifications for IACS sub-systems, including Supervisory Control and Data Acquisition (SCADA) systems, with the required interfaces to all other related systems and external interfaces. Fiscal metering and TSO communication needs to be clarified and agreed with TSOReference is made to Design basis MFW – PM735-PMS-050-001The design and operation of the entire Wind Power Plant (WPP) shall be demonstrated to be in accordance with all applicable laws, rules and regulations as required by the regulatory authorities, including but not limited to, Contract Appendix E document.It is the Contractor’s responsibility to ensure that the design, material, and equipment provided meets all relevant requirements.Contractor shall indicate in their proposal if any part of this specification deviates from Contractor’s usual design so that a significant increase in the cost is expected without providing a corresponding increase in quality; or if Contractor’s usual design will provide better quality than the design required by this specification.Contractor shall ensure that the design incorporates HSE best practices and gained experiences so that construction, testing, installation, maintenance, and normal production activities can be carried out in an efficient manner, and without risk to people, environment, or the asset.All engineering, design and construction covered by this specification shall be in line with relevant Polish Laws and Regulations and practices applicable for the offshore wind sector.For roject specific design requirements towards Polish Transmission System Operator (TSO) is defined in the Grid Connection Agreements between TSO and , Technical Conditions for the Connection to the Telecommunication Network of PSE S.A., Grid Code and any other relevant TSO requirements for Telecommuncation systems.Contractor shall be responsible to ensure and document that its products are designed in accordance with applicable laws, regulations, standards given in App E of the Contract.If there are inconsistencies between the various requirements given within the regulations, requirements, and standards, reference is made to the contractual Order of Precedence.The wind power plant shall be built for unmanned operation. This shall include the Onshore Substation (ONS), Offshore Substation (OSS) and Wind Turbine Generators (WTGs). It shall be possible to control and monitor the Wind Power Plant (WPP) from remote sites, including e.g. utility systems.The WPP shall have an integrated automation system for supervision, control and monitoring of the Wind Farm including ONS, OSS, WTGs and cable monitoring. The automation system shall control utilities, or interface third party utility control systems supplied by package suppliers such as HVAC, UPS, etc. The overall automation system for is denoted Industrial Automation and Control System (IACS), see section 3 for further details.The control system and electrical HV Control & Protection system/ equipment, MV, LV equipment/systems and utility equipment/systems for ONS / OSS and the WTGs shall be remotely operated and controlled from the Multi wind farm Central Control Room (CCR), located at the O&M base.The IACS system in the wind farm shall be designed with three levels of control.All systems on shall have a uniform, consistent and standardized design. This applies to all aspects of system design, including both hardware (cabinet design, cabling etc), software (user interfaces etc), condition monitoring capabilities and so on.All relevant real-time data shall be made available to the Company IMS/Wind Farm Management System. This shall include both raw and analysed data from all SCADA systems. Raw data shall be available without any filtering or compression, via agreed interface protocols. Definition of “all relevant real-time data” shall be detailed during the detail engineering phase and agreed with Company.Both raw and analysed data shall include historical records, plus data from SCADA and Control and Protection systems, monitoring systems, database system, Conditioning Monitoring systems (CMS) Metering Systems, etc. Data shall flow from the source systems directly to the company IMS buffer servers on the company network without leaving and re-entering the Company network. Data transfers should, unless agreed with Company, occur continuously and with minimal delay.The automation systems, including ESI SCADA, WTG SCADA and SUS SCADA (if not integrated part of ESI SCADA) shall have OPC UA interface to a future Top Level/Common SCADA in the CCR for operation of the windfarm. The WTG SCADA for could be combined, the ESI SCADA for could be combined and the SUS SCADA (if not integrated part of ESI SCADA) could be combined for . Top Level/Common SCADA will probably not be made until B is built. This to be clarified with Company during FEED.Doc. No. C256-EQ-J-SP-OOOO2 Rev. no. 01 Valid from: 12.12.2022Multi Wind Farm Central Control Room (CCR) Multi Wind Farm CCR SCADA SystemWindfarm Automation System ESI Automation System Wind Turbine Automation SystemSafety & UtMtty System Sutotatlon Automaton Electrtcal System WTG SystemThe interface shall support OPC UA companion specification OPC 10040 - UA for IEC 61850 for monitoring and operation of the lED's exposing the information models to the above systems. In addition, the interface shall support other relevant OPC UA companion standards for non-IED equipment in the ESI systems exposing the information models to the above systems. The information model shall be inclusive of alarms and events.The OPC UA interface should as a minimum support the following features:A. OPC UA clients shall support the "Standard UA Client 2017 Profile" (http://opcfoundation.org/UA- Profile/Client/Standard2017).B. OPC UA clients shall support the "Documentation - Client" profile (http://opcfoundation.org/UA-Profile/Client/Documentation).C. OPC UA clients shall support the "Base Client Behaviour Facet" profile (http://opcfoundation.org/UA- Profile/Client/Behaviour)D. OPC UA clients shall support the "Reverse Connect Client Facet" profile (http://opcfoundation.org/UA- Profile/CIient/ReverseConnect)E. OPC UA servers shall support the "Standard UA Server 2017" profile" (http://opcfoundation.org/UA- ProfiIe/Server/Sta ndardUA 2017).F. OPC UA servers shall support the "Data Access Server Facet” profile (http://opcfoundation.org/UA- Profile/Server/DataAccess)G. OPC UA servers shall support the "Documentation - Server" profile (http://opcfoundation.org/UA- Profile/Server/Documentation).H. OPC UA servers shall support the "Base Server Behaviour Facet" profile (http://opcfoundation.org/UA- Profile/Server/Behaviour).I. OPC UA servers shall support the "Reverse Connect Server Facet" profile (http://opcfoundation.org/UA- Profile/Server/ReverseConnect) KJ. OPC UA client shall support the “Alarm & Condition Server Facet” profile http://opcfoundation.org/UA-Profile/Client/ACBaseConditionK. OPC UA server shall support the “Alarm & Condition Server Facet” profile http://opcfoundation.org/UA-Profile/Server/ACBaseCondition2021The OPC UA interface should support the following feature: OPC UA clients should support the “Pub/Sub facet” OPC UA servers should support the “Pub/Sub facet”An overall Automation and Control System shall be installed for monitoring and control of the wind farm. For the IACS shall comprise one or more of the following components: Industrial control systems, including but not limited to distributed control systems (DCSs), programmable logic controllers (PLCs), remote terminal units (RTUs), Intelligent Electronic Devices (IEDs), Supervisory Control and Data Acquisition (SCADA) systems, network components, networked electronic sensing and control, and monitoring and diagnostic systems. All systems designated for operational use shall be compliant for real-time monitoring and control. The ESI SCADA shall therefore be designed with complete functionality for real-time monitoring, and for control of all electrical and utility equipment on the ONS/OSS. The control system shall be compliant with the IEC 61850 standard for substation automation and support other standard communication protocols as listed in chapter 6.1.6.Figure 1 - IACS General Architecture gives a general overview of the IACS and does also indicate main interfaces towards systems and parties external to IACS. Please note that the outline of the IACS is only functional, hence not necessarily reflecting location or the Automation network topology correctly.The objective of the IACS is to control and monitor the power generation, the electrical power distribution network, and auxiliary systems.The IACS shall control and monitor the 400/220 kV switchboards, HV, MV and LV and all auxiliary equipment on the ONS, and controlling the 220/66 kV switchboards, HV, MV and LV and all auxiliary equipment on OSS including 66kV inter array cable incomers from the WTGs, with required signals and set point to/from the WTG SCADA Plant Control/Wind Farm Power Control (WFPC) system.The ESI SCADA shall also control and monitor the WTG 66 kV switchgear in the WTGs via the IEC 61850 network.The IACS shall in basis consist of the following systems:• ESI SCADA performing Supervisory control and monitoring of the high voltage distribution, medium voltages and low voltage distribution system and transmission system from the high voltage connections in the WTGs.• High Voltage Control & Protection system including control equipment for:Doc. No. C256-EQ-J-SP-00002 Rev.no. 01 Valid from: 12.12.2022o Onshore 400/220 kV high voltage substation switchgear and other high voltage components, transformers, reactors etc. o Offshore 220 kV /66 kV high voltage substation switchgears and other high voltage components, transformers, reactors etc. o 66 kV inter array cable distribution system, including 66 kV WTG switchgear and the 66/0,690kV WTG transformer.• ONS auxiliary system/equipment including but not limited to Low Voltage switchgears/distribution system, power supplies, battery systems, UPS, fire detection, HVAC systems as needed to obtain remote capabilities to the SCADA system• OSS Safety and Utility automation system (SUS SCADA), including, but not limited to: o Shutdown System o Fire (and Gas) detection o Protection systems o Auxiliary and Utility systems o Low Voltage switchgears/distribution system and UPS's o HVAC control system o Intruder system• WTG SCADA performing Supervisory control, monitoring of the WTGs, and controlling Active Power (MW) and Reactive Power (MVAr) from the WTGs.• Interface between ESI SCADA and WTG SCADA/WFPC for power control of the WTGs in the Wind Farm.• ESI SCADA HMI systems including operator and engineering workstation remote monitoring and control of the wind farm electrical system infrastructure, including remote monitoring and control of OSS SUS.• WTG SCADA HMI systems including operator and engineering workstation for remote monitoring and control of the WTGs including remotely controlled medium voltage breaker at 690V side of WTG transformer, if poss. This to be further detailed in FEED.• Interface to Information Management System (IMS) for data acquisition from the above systems.• Interface to TSO for inter-tripping, monitoring and metering.• Interface to Condition Monitoring System (CMS), including WTG Main Bearing CMS system.• Interface to cable monitoring systems, such as Distributed Temperature Sensing (DTS) and similar.• Interface to telecommunication systems (WTG WAN, Wifi, Telephony system, TMS, CCTV, Met-Ocean, GPS Clock system, Access Control, Intruder system, PVTS, radio and /radar systems).• TCP/IP based interface to WTG Contractors Navigation and aviation aid system (Sabik)• Interface to WTG Contractors Fleet leader systems (SiDAC in Baltyk) on two WTGs.A dedicated and redundant PRP control and protection network utilizing the IEC 61850 protocol for the control & protection shall be established. IEDs for control and monitoring function shall be implemented. Control & Protection systems and related equipment's shall support PRP network, IEC61850 MMS and GOOSE communication.400/220/66kV switchboard and LV transformer incomers shall be connected to the IEC61850 network for control and protection. The local control units (LCU) and protection relays/IE Os shall be integrated to the SCADA system via agreed interface/communication protocol. IEC 61850 GOOSE shall be used for intertrip and permissive signals, hardwired interlocks/intertrips shall be limited to what is strictly necessary.Local Control Units (LCU) shall provide fully integrated monitoring functions of all 400/220/66 kV switchgear within the wind farm, e.g., circuit breaker, disconnector, earth switch, 3-pos-switch, etc. The LCU shall allow the operator to control switchgear locally at the relay or remotely from the SCADA.Protection relays provide fully integrated protection functions of all 400/220/66 kV circuits within the wind farm. The protection relays also provide monitoring and control functionality for all the WTG 66 kV switchgear. These shall be controlled from the ESI SCADA system.Required inter tripping signals shall be included for tripping of the circuit breakers for stop of the production and protection of equipment and export cable including soft stop and/or Hard stop of the WTG’s/400kV grid circuit breakers in compliance with TSO Operational Tripping Schemes (OTS).Arming, disarming and reset functions shall be included from the ESI SCADA HMI, according to TSO.All required HW, SW and functions shall be included for local and remote maintenance access, diagnostic, trouble shooting and SW updating via the Company secure access solution. The foregoing is applicable for all programmable and configurable equipment. Contractor to ensure all Sub Suppliers meet this requirement.The three main parts of the “power supply chain” in are;• The WTGs – the offshore wind turbines and the cables between the WTGs and the OSS.• The transmission system - consisting of the OSS, ONS, HV cables between the two, and the interconnection to the grid• The grid – TSO receiving the power from . This is owned by an external party; Company does therefore not have any control over the grid. The IACS shall comply with the TSO Manuals, such that grid-related control and status signals can be sent and received. Fiscal metering must also be incorporated.For these three parties to work efficiently together, it is necessary to exchange some crucial information and act in a timely manner based on the information. The main objectives are to2) Handle de-loading and inter-tripping efficiently and reliably, and finally,3) Ensure the technical integrity of the wind farm is not compromised. The power control requirements will be described in the Power System Philosophy and shall be basis for the Power Control philosophy and design.Power Control From the grid there is a requirement to not provide more active power (MW) at any given time than the grid can handle. Normally the grid can handle full production, but during maintenance of power lines onshore and high amount of wind a need to limit the active power produced may be informed by the TSO. To ensure grid compliance the reactive power control shall use voltage and reactive power reference at POI. The reactive power support requirement is specified in the grid code and the system shall be designed accordingly. TSO may, in special operation scenarios, specify how reactive power shall be controlled, by providing a reference value for voltage, reactive power or power factor at POI. The Power Control system shall be suited for different power control modes to enable input from TSO and manual input of set points. The concept for reactive power control shall be in line with the Projects Grid Connection Conditions and shall be agreed with the TSO.De-load and inter-tripping; Under certain operational scenarios the grid owner may need to rapidly reduce the power production from the wind farm. In this situation the wind farm must be able to efficiently and reliably de-load as required by the grid owner. Should the required de-loading not be executed sufficiently fast, a trip shall be initiated according to a pre- defined inter-tripping scheme agreed with TSO.1) Technical integrity; During operation of the wind farm there will be a limited number of pre-defined operational scenarios, sometimes referred to as Configurations and Topologies. Configuration means a clearly defined combination of open and closed HV breakers, and thereby a defined set of transformers, reactors, and WTGs in operation. Different Configurations may require different needs of support from the WFPC units. Topology is a term used by the WTG Contractor for identifying scenarios where a sub-set of WTGs may be controlled by another WFPCthan then normal one. If for instance a transformer on the OSS is inoperable and a bus-tie breaker is closed to reroute power towards the grid on-shore, the power generated by a set of WTGs may now be routed in such a way that it is measured by another WFPC module than before. Such change of Topology required a Topology change sequency to be performed before resuming operation to inform the WFPC about the change in WTGs under its measurement and control.For some pre-defined scenarios there can be limitations to permitted power production to prevent overloading components (e.g., cables & transformers). Rerouting power by opening and closing of HV breakers in the system often means changing from one Topology or Configuration to another. A Topology Change procedure must be developed for the project since it involves informing the WFPC system about which WTGs are under which WFPC units' control. The procedure shall define the necessary steps to be performed by operators in ESI Scada HMI, and for a given topology the system may be permitted only to change to a few other topologies, e.g., if the operator attempts to change to a topology for which there is insufficient capacity in transformers or export cables, they will be warned that this is an invalid topology.These three functions are implemented in a common interface where the ESI Power Controller (EPC) and the Wind Farm Power Controllers (WFPC) are the main units at the side. The number and location of the EPCs and WFPCs necessary to implement reliable, maintainable, and safe solutions shall be assessed as part of the overall system design.Figure 2 gives a high-level overview of the functional split between the different controllers, as well as the signals exchanged between them.Assess topology and limitations based on all inputs■ Decide Wind park set points (MW, Mvar)Functions: Optimize WTG usage based on Wind Park set point Calculate set point for each WTGFunctions: Run each WTG as per received set pointFigure 2 Power Control, Interlocks and Grid Compliance. ESI Power control to be delivered by ESI contractor. WFPC and WTG controllers are WTG delivery.The purpose of EPC is to receive external information from the TSO, in addition to information from within the Wind Farm. The information is typically MW, MVAr references, de-load/intertrip requests and so on from the TSO, as well as HV breaker status, transformer/reactor status, power production and export cable temperature from within the Wind Farm. Based on this information the EPC shall determine the optimized power production. The other main task for the EPC is to maintain an overview of the current topology based on the current status of all relevant equipment.The purpose of the WFPC is to adjust the Wind Farm power production according to the demand dictated by TSO, and within the limits dictated by the ESI Power Controller. Based on the set points received from the ESI Power Controller, the WFPC shall give set points to each WTG in operation to meet the overall requirement for MW and MVAr while still adhering to the limitations.Further details of the different controllers and interfaces are described in the following sections.A separate Power Control system philosophy describing the required topologies, tripping schemes and interfaces between the ESI SCADA, the WFPC and TSO for Grid Compliance shall be developed. Also, Power Control functional drawing and equipment scope drawing showing the entire windfarm shall be made, by collecting input from TSO, WTG and OSS.The Wind Farm Power Controller (WFPC) shall be installed by the WTG supplier for control of the reactive and active power from the WTG’s. For SGRE WFPC is normally referred to as High Performance Park Pilot (HPPP).The WFPC shall be able to receive various active power limiting “runback signals” from the Wind Farm Electrical System Infrastructure, e.g., bus tie circuit breaker position indication, external run back signals from grid operator, fault indications on transformer breakers etc. and take action by reducing total wind farm power output according to the new condition in the wind farm. The runback signal with the lowest power limiting shall have priority over runback signals with less reduction in allowable power production.The intertrip/ run back signals from TSO control centre shall have duplicated communication routes between the POI and ONS. TSO intertrip shall have priority above all other intertrip signals, as long as the isolation of a fault is according to relevant electrical system studies, to ensure the safest intertrip scheme for every fault cause and location. This will be specified in the Power System Philosophy.To perform required power control the interface signals per WFPC /Balancing mechanism units (BMU) must be included, such as: MW and MVAr references, MW measurements, MW and MVAr Set point, MW production, MW at Grid entry point, De- load request, Breaker configuration/constellation, and voltage measurements to be included and presented on the ESI SCADA HMI.Required Trip and De-load signals shall be included as defined by TSO requirements.It is the responsibility of the Contractor to coordinate the WFPC settings with the ESI system so that the overall integrity of the power system is not degraded. The WFPC shall have functionality supporting the different possible operating modes of the WTGsA Function design document, equipment scope and cause and effect scheme shall be developed showing all exchanging signals with ESI SCADA.The wind farm shall be designed to operate and be energized under different operation scenarios without overloading the plant.Required functions, logic, interlocks, control of the different breaker positions/constellation, topologies and operation limits shall be included to maintain the active power and reactive power needed within defined limits to ensure the primary plant is not overloaded and the compliance to the grid code is met.To fulfil this requirement a dedicated ESI Power Controller (EPC), for single point of contact with the WTG WFPC, shall be included for handling automatic verification of different topologies for the “Grid Code” Compliance towards TSO. Requiredtopologies/logic, trip, and de-load signals (Soft stop), breakers status and control signals (MW, MVAr setpoints) shall be implemented between the EPC and the WFPC. Alternatives to a PLC-based implementation may be accepted by Company provided it can be documented that reliability, maintainability and uptime is comparable to the PLC.The purpose of the EPC is to automate the response regarding power flow in each export cable dependent on a set of operational modes, scenarios (contingencies) and topologies/breaker constellations for the ONS and OSS.• The functionality to be implemented in the EPC for grid code compliance will be described in the Power SystemPhilosophy, and shall be followed. The main functionality shall be: o Power limitation dependent of operating scenario and a defined set of power limitation inputs (onshore/offshore) o Reactive power setpoint as a function of active power output and operational scenario.The wind farm may be energized to operate under any of the above configurations by the operating personnel.Depending on the configuration, the active power and reactive power needs to be maintained within defined limits to ensure the primary plant and component limits are not exceeded and the agreed compliance for the specific scenario to the grid code is met. To meet this functionality the required topologies and logic shall be implemented in dedicated controllers – the EPC and WFPC.The ESI Power Controller shall include all relevant functionality to comply with the Power System Philosophy. It will include, but not limited to, the following:• Receive WTG 66kV switchgear configuration information from the IEDs monitoring the WTG 66kV switchgears.• Receive offshore 66 kV switchgear configuration information from the IEDs monitoring the switchgear.• Receive onshore 220 kV switchgear status information, receive necessary measurements from WTG and ESI SCADA.• Use reactive power controller at POI to give feedback to STATCOM to ensure the voltage and reactive power delivered is within the given limits in the Grid Code.• Use active power controller at POI to give feedback to the WTG production to ensure the frequency and active power delivered is within the given limits in the Grid Code.• Use the WTG and offshore 66 kV circuit breaker configuration and onshore 220 kV switchgear status information and measurements to provide the MW and MVAr set points to WFPC to ensure optimized compensation of the 220kV export cables.• Utilise the CTS/DRS/DTS information to reduce the loading on the export cable when required.• Detect and prevent invalid topologies and fault operation.• Raise an alarm and/or initiate interlocks if the operator prepares to run the wind farm into a configuration which is not permitted.Modes of operation and limitation scenarios shall be included. The below table indicate some examples, based on previous experience. It is the responsibility of the Contractor to develop the required modes for operation and limitations scenarios applicable to according to the project specific Power System Philosophy.• Raise alarm and suggest a safe reconfiguration of the network in case an EAT (including 66kV earth reference point) at OSS is lost• Either automatically and/or manually from the O&M Base CCR execute de-loading of the wind farm, based on instruction from TSO.• Either automatically and/or manually curtail the MW output of the wind farm if required.• Raise an alarm, de-load and/or trip if the overall control interface fails.• One push button energization sequence for the wind farm (ONS-OSS-WTG), including relevant time delay for the sequence to energizing the WTG transformers.The wind farm MW and MVAr at the 66 kV or 220kV side offshore is handled via WFPCs which shall be interfaced to the EPC by means of a WFPC PLC to achieve the above aims of the overall control interface. The number and electrical placement of the WFPC controllers shall be evaluated during ESON FEED based on Grid code requirements, regulations related to need Balancing Mechanism Units (as in the United Kingdom or Polish equivalent) and subsidy CfD rules.The need and method for de-load and tripping signals or requests shall be agreed with the TSO through workshops. The functionality must be in accordance with all grid code requirements for different operating modes and with the Power System Philosophy. TSO requirements to signal interfaces must be clarified through FEED.Redundancy and Failure A fault function will need to be included to detect any problems caused by the program logic execution or interface/communication fault.• Failure of EPC shall raise an alarm to the ESI SCADA.• Failure of WFPC shall raise an alarm to the ESI SCADA.• Communication error between the EPC and WFPC shall raise an alarm to the ESI SCADARedundancy of the interface between ESI Power Control and WFPC shall be included.The EPC and ESI SCADA shall receive breaker status information from the POI connection point, ONS, OSS and WTG 66kV switch gear. The short circuit levels are high in the WTG system. LV breakers on 690 V will most likely not be allowed manual operation of. Status and possible operation of all 690 V breaker is mandatory in WPS/ESI scadaThe DTS for both IAC and EC shall be integrated to the EPC for cable monitoring and power control to ensure cable integrity in all operational scenarios/configurations/topologies.For all information and interface signals described above, it shall be ensured that information is exchanged as direct as possible if the units communicating are connected to the same network. Firewall crossings shall be done at the lowest possible level. Communication and available network architecture shall be thoroughly assessed when hardware for implementation of EPC and WFPC functionality is considered. Horizontal communication shall be limited to the extent necessary.The IACS test facility shall accommodate testing of all changes to applications, configurations, and settings prior to implementation on the live system. Testing shall be performed without relying on any part of the operating IACS. Software simulators shall be utilized to emulate IACS components to the extent possible, hardware components shall be delivered for units where this is not possible. The test facility shall have necessary network connections to permit download of security patches and other software updates for test and connected to the company secure access solution for remote activities.The test facility functionality shall include but not be limited to;IACS networks shall be designed according to reference standards and requirements document as described in Appendix E, which gives the framework for the design and specific requirements to the proposed solution. This design and requirements are based on IEC62443. This includes, but are not limited to, zoning and conduits, firewall requirements, OS patching, malware, and antivirus protection. All systems delivered (including subsystems) shall be assessed, designed, implemented, and documented according to the requirements and guidance in these frameworks and requirements, including (dependent on project phase):• Network, Security Zones and Conduit drawings shall be made by Contractor. The template for the drawing shall be provided by Employer.• The Zones and Conduit drawing shall contain Security Level-Targets substantively following the processes as set out by IEC62443-3-3:2019. The SL-Ts will be based on the Reference Architecture Model in IEC62443-3-3:2019 and the SL-Ts shown therein and documented as a part of the topology drawing agreed between Company and Contractors/Suppliers• Cyber Security tests shall be a part of the Contractors and Suppliers’ FAT procedure and report• The Contractor shall conduct a detailed Cyber Security Risk and Vulnerability Assessment. A Detailed Risk and Vulnerability Assessment report shall be provided to Company. The assessment should follow the processes defined in IEC 62443-3-2• Create backups and test the backup and recovery procedures.• Antivirus and patch management procedures shall be described. All systems, servers and clients shall be tested to ensure that required antivirus and security OS patches are installed.• The Contractor shall make procedures and strategies for hardware, OS and software upgrades for all systems.Each computer and Server on the technical and process network shall be kept up to date with security patches and virus protection software during project execution and at handover to Company. The system shall also be designed to enable patching and malware protection during normal operation.All hardware and software shall when commissioning is complete have at least 10 years left before End of Life, i.e., before Support is no longer officially available from the Manufacturer. This shall be from the date when Contractor has completed his commissioning scope, as well as all assistance to Company during offshore commissioning.The systems on the technical network shall have local access to a recovery backup. Recovery backup shall be performed after all software changes. The automated backup solution shall be able to hold minimum 10 previous backups.The arrangement and configuration of servers and communication equipment shall be based on a redundancy philosophy. If any of the substation SCADA server / communication equipment fails, then a standby server shall take over, or communication shall be routed through another channel. Performance of the backup channel shall be equal to that of the primary communication channel.The SCADA Logic Solvers/logic controllers shall be based on a true real-time operating system to achieve the necessary degree of security, reliability, and reduced maintenance, i.e., operating systems like Microsoft Windows are not allowed for Logic Solvers.Process values shall be in engineering units throughout the system (engineering tools and run-time system).When powered up after being powered down, the total IACS shall automatically restart, including all internal system communication mechanisms, without manual intervention. Power-up shall not cause spurious activation of outputs. Restart shall take less than 10 minutes.Configuration changes to the logic solvers/IEDs shall be persistent, such that the configuration is not affected by power loss and restart.All system software changes shall be recorded in defined system for logging changes visible (auditable and unalterable log) to Company.There shall be facilities for read-out of current versions of all system software and firmware, including logic solvers, control and protection devices, I/O cards, servers, and operator stations.The IACS software tools shall be available through Company Secure access solution.The software tools shall be available from a central management server and/or from the engineering-/maintenance workplace.Software should allow for a central management server to apply all updates, modifications, patches, etc from a single location. This should be accessible via Company Secure access solution.If several engineering stations are used, then the SCADA shall have means of preventing online configuration conflicts. SCADA applications and system performance shall not be influenced by utilization of engineering tools.The system shall be self-documenting including both suppliers’ standard application blocks and project specified application blocks. The documentation shall be "as programmed" in the executing SCADA logic solvers, servers, and Control and protection unit/devices.It shall be possible to document the application program directly from the system including utility systems, Control and Protection devices and IED’s and make it available as a graphical report. In special cases, program listings can be accepted based on Company preapproval. An automatic cross reference between graphical report interconnections shall be included.There shall be a tool for automatic read-back of the current online parameters and comparison with the engineering master. It shall be possible to perform an update of the master configuration files for all or for selected parameters. This tool shallprovide a report showing the parameter differences. In the case of deviations these shall be reported as maintenance alarms/advisories, not to the main operator alarm list.There shall be admin/management tools for remote monitoring and management for the system. The system shall send diagnostic information in case of failure. The information shall be available in the admin/management tools to address problems rapidly and take corrective actions.Servers / clients shall all be supplied with both Administrator and Operator loginsThe system shall have role-based security to prevent unauthorized access to functionality. Any thick client Application shall support 64-bit client Operating System, e.g., Windows 10.The system server application shall support Windows Server 2019 or newer. Unless system servers have need for special interfaces that prevents virtualization, servers shall be provided with VMWare Workstation Pro 14 (or newer) Virtualization software.Required back-up solution shall be provided to be able to perform automatic and regular back-up of the SCADA and subsystems software including Network, HMI, and engineering workstation.For any backup media used by the backup / recovery solution, it shall be possible to store the backup media in a separate location (either on a physical backup media, or by file transfer to a Company server).A backup and recovery solution shall be included, covering all equipment with software, configuration settings and other data needed to recover the system to resume normal operation.The IACS shall be distributed and designed to be self-contained (autonomous)SCADA servers and Logic devices/Logic Solvers hardware shall be unified, i.e., a limited number of hardware types shall be used to ease maintenance and spare part handling. It shall be possible to replace redundant components in SCADA during normal operation of the system, without any loss of functionality or production.Any SCADA unit shall be able to survive loss of power for an indefinite period without irrecoverable loss of application programs, configuration or parameters which have been set by the user/operator.Approximate recovery time for each SCADA unit shall be documented and verified.Electrically powered devices shall comply with relevant test limits and performance criteria in EN 61326 or IEC 61000-6-2 and IEC 61000-6-4 with respect to electromagnetic emission and immunity in an industrial environment.Company assigned IP addresses shall be used for all systems. Note that IP addresses shall not be openly displayed on the HMI or in system documentation.To ensure network time synchronization and provide coordinated time stamping for alarms and events, between all IACS system units, electrical, instrumentation and telecommunications systems, a common and reliable NTP, or better, time server (real-time clock) shall be used. The time server shall receive Network Time Protocol (NTP) coordinated universal time (Universal Time Coordinated (UTC)) or better from the telecommunication system real-time clock (RTC) and distribute the time to other system equipment including networked field devices. If possible, the RTC shall be a common clock used for telecom, IACS, electro and Control & Protection equipment, to avoid multiple sets of GPS antennas on the facility.Contractor shall ensure all relevant components receive the UTC time and maintain correct time. This is applicable to all components connected to a network.The time server shall be equipped with 10/100Mbit/s outputs, in an RJ45 format, for direct connection to the SCADA backbone, technical network and other consumers. Instrumentation, telecommunication systems shall request NTP (Network Time Protocol) (or better) information from the time server for time synchronization.The SCADA shall be capable of providing a time synchronization signal to IEDs via IEC 61850 protocol to ensure all events are time stamped.The HMI shall have the possibility of enabling daylight saving summertime (Wintertime + 1 hour) including alarm list.All events, process and system alarms shall be time stamped in order to identify the correct sequence of events. Time stamping should be performed by the SCADA units, and the accuracy of the time stamping shall be according to the defined cycle time. Timestamps shall use UTC.Independent of configuration and number SCADA control devices/units, the protection alarms in SCADA, control and protection equipment and all sub-systems shall be time stamped with the accuracy of 10 ms, or better, relative to when they physically appear.All IO values in the system shall include Quality and Timestamp (VQT). VQT shall be propagated throughout the system, from the IO device (e.g., IED or PLC) through to the HMI and IMS.Timestamps shall be in UTC. The quality code shall be an industry standard. Company’s preference is the OPC UA quality codes.All SCADA hardware modules shall have been tested in accordance with recognised industrial standards regarding susceptibility to environmental conditions such as:IACS failure shall in general not cause a production loss. This includes all components in the SCADA system.In addition, Mean Time Between Failure (MTBF) and Mean Time to Repair (MTTR) figures shall be documented and calculations of overall IACS availability shall be performed. The overall system availability requirement is set to 99,5%, the IACS shall be designed such as it will not contribute to a lower total availability than 99,5%. No single IACS failure shall have the effect to disrupt the process.Design of safety instrumented functions shall be based on the Safety Requirement Specification developed on basis of the Hazard and Risk analysis.Redundancy shall be evaluated based on the following:Short time data shall be possible to store for at least 30 days. Database storage with RAID 0+1 striping is preferred.The different database servers such as OPC, ODBC etc shall have required direct interface to Company IMS.All units on the IACS network, including network components and IEDs shall be monitored and detected fault or malfunction shall be alarmed. IACS unit, fault type and card (if relevant) shall as a minimum be referenced in the alarm text.Programming for logic solvers shall comply with IEC 61131-3 Function Block Diagram, Sequential Function Chart and Structured Text. Structured Text shall be used for function block coding only.It shall be possible to configure SCADA and Logic Solver applications semi automatically, as well as manually, utilising different configuration levels and libraries of function blocks and templates (ref. section 9.5) to maintain the consistent use and quality throughout the configuration. The use of a central management server shall be considered for maintenance of SCADA software and libraries.SCADA and Logic Solver functionality shall support application configuration on the following levels:TR4036 “SCADA Operator Station HMI” should be the basis for development of an HMI philosophy. The Project will have two SCADA systems, one dedicated to the WTGs, referred to as WTG SCADA, and one dedicated to the ESI (power distribution systems and utilities) referred to as the ESI SCADA. There shall be some exchange of information between the two, but they will not be fully integrated. The ESI SCADA and WTG SCADA system shall include all necessary HMI, operator, engineering, and service workstations for remote monitoring and control. The SCADA operator station represents the main HMI between the operator and the electrical distribution and utility facilities.The HMI solution shall include equipment and functionality for Large Screen solution. Dedicated mimics shall be developed for the Large Screen Display solution to ensure correct information as well as level of detail and readability is ensured.An HMI philosophy detailing the HMI functionality shall be developed during detail design. The philosophy shall cover HMI solutions, alarm, and trend solutions as well as the Large Screen Display solution, and any other functionality foreseen to be covered from the Operator Stations.The HMI (Human Machine Interface) for all systems in the control room shall be built to a common standard/philosophy, as agreed with Company. This HMI standard shall include:• Consistent use of colours, layout, and sounds• Consistent screen navigation and functions, for example:‣ One-click navigation from alarm summary to associated HMI display• Clear indication of the relevant wind farm and plant area/systemRequired HMI/Operator Workstations shall be available at the CCR in O&M Base situated in Leba, on the OSS and ONS.Engineering workstations shall be installed at ONS/OSS and remotely accessed from CCR and Company secure access solution.From the engineering workstation, it shall be possible to perform maintenance, troubleshooting, without any interference with the monitoring and control of the process.Use of symbols and colours for operator interface shall be consistent throughout. Tagging of alarms and events for the local operator interfaces, shall be consistent and harmonized with the WTG Supplier Wind Power workstation.In line with the agreed HMI philosophy, the IACS and SCADA HMI shall have required functionality and interface for viewing and selection of all SCADA HMI mimics, alarm and events, IMS information, CCTV (Closed circuit television) information/mimics, Intruder information/mimics.The layout of the HMI displays shall be function-oriented and based on Single Line Diagrams, Key Line diagram, SCADA Topology Drawings, Fire Detection Layouts, Area Layout drawings, P&ID, etc. The display shall enable the operator to monitor and control ESI electrical and utility section functions. Where interfaces and interaction with TSO is needed, the symbols and naming shall be the same as TSO to avoid misunderstandings.WTG displays shall enable monitoring and control of relevant WTG functions.The electrical and utility detail display shall contain all electrical process-related variables and control functions for each section.The HMI display for the electrical system shall be split into different HV and LV electrical main and sub levels, including but not limited to Generator, UPS system, and utility process sub level displays. In addition, there shall be separate displays for all utility systems, including but not limited to;The use of colours shall be fully based on applicable standard for similar offshore wind projects and agreed with Company. TR4036 should be used as guideline. There shall be a clear distinction between dynamic symbols and static symbols on the displays.The operator shall be able to select the corresponding trend displays from the process detail display. All signals shall have trend facility with adjustable time and range span.The HMI system shall be object based. From the object faceplate, it shall be possible to:• Operate the equipment. All commands that will change the state of the equipment (e.g., Open, Close) shall require confirmation. No more than one level of confirmation is required.• View any current interlocks on the equipment, and the origin of these interlocks• View any current alarms on the equipment• View the current quality and timestamps, including timestamp of last good valueThe HMI system shall include the following functionality:• Operator notes/comments. It shall be possible to associate operator notes with any HMI object (e.g. circuit breaker, disconnector, earth switch). A symbol next to the object shall indicate that there is an active operator note. Operator notes shall be timestamped and shall record the name of the operator as well as the actual text entered. The contents of the operator notes shall be logged on the SCADA server and retrievable via the report system.The HMI displays shall be based on recognized standards, such as the following:The use of static text shall be minimized. Branding (the inclusion of the supplier’s name or logo within the HMI) is not permitted.Bad-value representation: HMI displays shall normally display the current value of the IO tag. In the event of bad or uncertain quality, this shall be clearly indicated on the HMI. The last good value shall be shown on the HMI. It shall be possible to see the timestamp of the last good value, for example in the object faceplate.Control and monitoring of OSS systems at the CCR shall be through the ESI SCADA, not a separate OSS HMI. OSS SUS shall be integrated in the ESI SCADA to allow supervisory control, monitoring and alarm handling of OSS SUS and the related sub- systems noted in Section 3.2.1.HMI summary screens from the OSS SUS shall be reproduced in the ESI SCADA including supervisory control functionality. Alarm and event handling shall be per Section 5.2.5. Remote troubleshooting of OSS SUS or subsystems shall be possible using engineering workstations at the CCR; Contractor and OSS Contractor shall coordinate on automation and telecoms system design to allow this remote accessibility.ESI SCADA integration with OSS systems and end devices shall include: - Hardwired interfaces to OSS lighting controls as noted in OSS Specification.- Hardwired interfaces to LV switchgear and Standby Diesel Generator (SDG) for trip commands: main and generator breaker trips, diesel generator unit trip.- Hardwired interfaces to LV switchgear, UPS, and SDG for key status points: main and generator breaker status, UPS common alarm contact, other key status points at ~4-5 per device.- Hardwired interfaces for any OSS safety-related functions executed by ESI-SCADA. Above-noted LV main breaker and SDG trips are examples of this.- Hardwired or soft interfaces to Motor MCB’s that are controllable directly by ESI SCADA. Interface method is to be agreed with OSS Contractor.- Soft interfaces to LV switchgear, MCC’s, UPS and SDG for the remainder of SCADA functionality for electrical systems. This could be a combination of direct interfaces with the end devices or through the OSS SUS. - Soft interfaces to protective relays for integration into P&C networks (e.g., IEC 61850). - Hardwired interfaces to sub-panel breaker status as noted in OSS specification. - ESI SCADA interfacing with non-electrical OSS systems, e.g., HVAC and F&G, shall be through soft link with OSS SUS except as noted above.Hardwired interface method including typical loop configurations are to be agreed with OSS Contractor. Interposing relays, where required, shall be provided by OSS Contractor.To ease the workload for the operators in CCR, several HMI components from WTG SCADA shall be displayed in ESI SCADA as a minimum the following functionality and information shall be induced:Alarms shall be prioritized according to the severity of consequences that could be avoided by corrective actions and the time available for successful corrective operator action.Alarm management capabilities (e.g., the ability to filter, block, suppress, handle nuisance alarms, sort or re-prioritize) shall be provided.A common alarm prioritisation scheme shall be used, approved by Company prior to implementation. At least 4 priorities shall be supported. It shall be possible to direct certain alarm priorities to different users.The alarms shall be presented with text, colours, symbols, and sound, clearly differentiated from other information. Alarm description shall be understandable and self-explanatory for the operation.The operator shall be alerted by means of audible and visual indication. The alarm shall present information defining the problem e.g., descriptive alarm text in alarm lists and change in graphic displays on operator stations.Each tag/alarm should have an associated free-text comment field available for use by the operator. The operator shall be allowed to sort and filter lists. Alarm and event shall be in separate lists on SCADA HMI.The system shall include the following alarm/event categories:Alarm implies an audible alarm requiring acknowledgement by the operator. Before acknowledgement, the object shall be flashing. When acknowledged, the object is shown with steady light. An acknowledged alarm shall reflect the abnormal process condition until the process variable has returned to normal state.A common sounder system shall be implemented to avoid multiple sounders simultaneously sounding and causing confusion.Event requires neither audible alarm nor acknowledgement by the operator. When applicable, events shall result in a visual change of state on the associated dynamic symbol.Alarms and events shall be reported on separate summaries and recorded on disk. Options shall exist to recall alarms/events on search criteria like time, tag, process section, event type, etc. Suppressed alarms are not logged.Alarm list The following information shall be available for each alarm / status:SCADA shall provide a facility for real time and historical trending for all binary and analogue variables, independent of the IMS. Real time trending shall be with the same time resolution as the cycle time of the application in the Logic solver.Historical trending shall have user selectable sampling time, normally 1 second. Sampling time for selected values shall be possible from 100 ms. SCADA shall store relevant values for a minimum of 35 days for trending purposes.Print server functionality on the SCADA servers shall be included for printing of alarm and event list/reports, HMI mimic from all the Operator workstation via DMZ print server via Company secure access solution to a printer on the office network and to a SCADA local printer.Failure of one operator station shall not prevent printer access. Silent type of colour printers shall be used.A printer shall be available at the CCR. It shall be possible to generate printouts, e.g., screen dumps, list, reports from the SCADA engineering station. Required printers shall be installed on the O&M Base CCR and ONS.A Safety system shall be installed for detection of abnormal conditions and to perform necessary action. Reference is made to safety strategies in Appendix E.Control & Protection system shall shut down necessary equipment during an fault situation, automatically or manually and remotely from the CCR.The Fire Detection and Fire Fighting systems shall be integrated in the ESI SCADA system via agreed interface protocol.The purpose of the shutdown system is to prevent escalation of abnormal conditions into a major hazardous event and to limit the extent and duration of any such events that do occur.The shutdown logic shall be implemented by use of Logic Solvers.The probability of single defects / failures causing inadvertent trip actions shall be as low as reasonably possible, e.g., provide fault tolerance by means of automatic diagnostic features and redundancy according to cost-benefit assessment.Safety system shall have facilities to allow for testing and maintenance without interrupting production or operation. Safety system shall be in compliance with DNVGL-ST-0145.Manual initiating of the different shutdown levels shall be possible from CCR via reliable connection to the ESD/Fire/safety logic solver.A Fire detection system for continuously monitoring of the fire status and execute safety related functions upon fire detection shall be installed. The fire detection system shall comply to applicable Polish standards as defined in appendix E requirements.Aspiration smoke detection shall be used for areas not accessible in normal operation.The control logic/Cause & effect for the ONS shall preferably be included by use of separate Logic Solvers but may also be included locally in the fire detection panel. Solution to be agreed upon.The safety related parts of HVAC, such as closing of fire dampers and trip of fans and heaters, shall be part of the Fire Fighting system.The Fire Detection system shall have the capability to handle addressable detectors either directly or interfaced through dedicated Fire detector panels via agreed interface protocol.Silent testing shall be possible, i.e., for the functions being tested it shall be possible to disable audible alarm annunciation and also inhibit release of Fire Fighting agent.All safety critical loops for the Fire Detection System shall be line monitored, enabling detection of abnormalities (e.g., earth fault detection, short circuit detection, open circuit detection in the entire circuits, etc.).When powered up after being powered down, the total Fire system shall automatically restart itself, including all internal system communication mechanisms, without manual intervention. This also includes F detector interface centrals. Power-up shall not cause spurious activation of outputs.All fire Detection Systems/Panels shall be powered from two independent UPS electrical sources.The UPS shall offer 100 percent redundancy, such that loss of one power source shall not cause any malfunction within the system.Gas detection may be provided in battery rooms for Hydrogen, and in switchgear rooms for SF6 leakage. Gas alarms shall be enunciated locally both inside and at the entrance to the electrical rooms. Gas alarms shall also be sent to the ESI SCADA system via robust industry standard protocol, to be decided during detailed design.A control system for monitoring and control of HVAC system on ONS and OSS shall be implemented. The HVAC Control System shall be fully integrated in ESI SCADA for operation and monitoring. For chilled water system, supplier's local control system shall be used. System status and operation signals shall be transferred to ESI SCADA system for information.Fire dampers shall be initiated from the Fire Detection system with damper position limit switches also connected to the Fire Detection system. The HVAC system including fire dampers, fans, instrumentation shall be shown on a separate HVAC HMI picture. Fire dampers shall be redundant to allow for periodic testing. Failure of a fire damper in closed position during testing shall not be critical for power production/affect platform operations. Design of fire dampers and control systems shall allow for remote testing, monitoring and recording of opening and closing times. If maximum limits for opening/closing times are exceeded, alarm shall be given.The HVAC logical programmable logic devices/Logic Solvers should preferably be connected to the ESI SCADA system via OPC UA, IEC-104 protocol or by Profibus protocol. Use of Profibus shall be agreed upon.All data from the HVAC control and monitoring system shall be available in the SCADA system servers/HMI. All real time values, analogue data from the HVAC system shall be available to the IMS via agreed interface.It shall be possible for remote connection to the HVAC Control system for diagnostic, troubleshooting and SW updating via Company Secure Access solution.Communication line between ONS and Company administrative network, O&M Base CCR and TSO operator, and between OSS and ONS, shall be redundant and through Multi-Protocol Label Switch with Transport Profile (MPLS-TP) infrastructure and it shall support routable communication protocols such as IEC104 and OPC UA. Interface requirements and capacity shall be as described in the Telecom Technical and functional requirements document C256-EQ-T-SP-00001.A fiber optic network based on the fiber cores in electrical cables shall be established for control/monitoring and telecommunication purposes both for all WTGs and the OSS. The WTGs shall be connected to the OSS via fibers in the inter array subsea electrical cables.Communication to shore shall be via redundant single mode fiber optics, G.652, as part of the subsea export cable. All communication to shore shall be equipment redundant i.e., if one link goes down, the communication shall automatically switch over to the other link. Communication between ONS and OSS as well as internal communications on substations shall be done by standard protocols e.g., TCP/IP, IEC104 and IEC 61850 through the MPLS-TP infrastructure.All networks shall be monitored, and an alarm shall be raised in the ESI SCADA if any part of the network does not perform as expected to permit the first line maintenance to action the problem. In addition, the networks will be monitored by Company’s specialist service during the operational phase, therefore some central network components shall be Company Provided Items to ensure monitoring systems already established can be used. Furthermore, to ensure the IACS networks are fully transparent to the monitoring system, also some network components further “down” in the system require Company approval. Close cooperation with Company’s network specialist is required.Some signalling may require full redundancy/different routing between ONS and OSS, according to Grid Connection Agreement, Grid Code and Technical Conditions for The Connection to The Telecommunication Network of PSE S.A. Agreement with TSO (App E), and the required communication systems shall be installed to fulfil this requirement.A typical Architecture model of Integrated Automation and Control system is shown in figure 1. Based on this an overall SCADA network hierarchy/topology drawing including all SCADA process network, technical network, and Company Wide Area Network (WAN) network structure shall be developed and detailed during detail engineering phase, including input from OSS, WTG, IT, TSO or others where relevant.Each SCADA network (ESI and WTG) shall be fully redundant, and a fail-safe philosophy shall be evaluated for critical signals. In case of communication failure, the system shall move to predefined state with regards to the severity of the failure, where the predefined state shall be defined in the fail-safe philosophy. The SCADA systems shall have robust and fault tolerant protocols for the dual redundant communication network and shall have intuitive alarms and diagnostics tools for the communication network.The network shall include RSTP (Rapid Spanning Tree Protocol) functionality, with high priorities on the backbone switches to ensure an uninterruptible changeover if one part of the network failsThere shall be a separate process critical data network for the control and monitoring system (process technical network) of all SCADA monitoring and control system. All equipment that needs to communicate together or to remote systems shall be connected via dedicated firewalls to technical network.New data shall only need to be defined once, with one single engineering tool. The interface between SCADA gateway and IMS shall be one of the following protocols:Plant data export shall not have a negative influence on SCADA primary functions, i.e., safeguarding, control and monitoring. The SCADA gateway shall have the buffer capacity to store all SCADA real time data and selected parameters for 7 days. Status information of the interface shall be available in SCADA.The I/O list shall clearly define what is an alarm and what is an event.Communication to TSO (monitoring of electrical Infrastructure at TSO control centre) and settlement metering/trading agency shall also be established, communication protocols to be used to be agreed and approved by TSO.Communication between TSO and ONS should go through a dedicated and redundant link including firewall and malware protection. Secure IT solution and access control shall be established.Signals to be transferred to / from TSO shall be agreed as part of Detail designIEC60870-5-101 and/or IEC60870-5-104 is the preferred standard for data exchange between TSO and ONS on the application layer of the communication link. Alternatively, the DNP3 protocol could be used. Signals sent from TSO to substation control system shall also be available in the SCADA system.Telephone interconnection will be based on VoIp. All telephone communications initiated/received by TSO to be recorded. Retention time of recordings according to local regulations.Handling of inter-trip signals and installation of Dynamic System Monitoring and Ancillary Service Monitoring Equipment must be provided in accordance with TSO requirements.For data exchange of signals for monitoring and control between/to the ESI/WTG SCADA systems, the following communication interfaces may be used:Doc. No. C256-EQ-J-SP-OOOO2 Rev. no. 01 Valid from: 12.12.2022For data exchange of signals for monitoring and control to TSO, workshops need to be done with TSO. Also see "Technical Conditions for the Connection to the Telecommunication Network of PSE S.A", l.e.:• ARNE/ARST automatic voltage and reactive power control system - communication• The communication between ONS and TSO should be established through a multiplexing system based on Optical Transport Network (layer 1), MPLS-TP with resiliency-robustness, traversal time, network latency, synchronization (time/phase) as needed by selected Tele-protection and SCADA protocols.The primary revenue metering for the WPP will be at Slupsk Substation, delivered and installed by TSO, The back-up revenue metering for the WPP will be at Sfupsk Substation, delivered by contractor but installed by TSO. In order to mitigate the risk of change of ownership of Slupsk substation and export cable to PSE / there will be established 0,2 class (revenue grade) VT's & CT's in 220 kV GIS bus bar at OSS. This is to safeguard always to have a correct fiscal metering independent of ownership boundaries.At the Sfupsk, check metering shall be provided at the 400kV circuits at POI, for operational and verification purposes. Check metering shall use revenue grade current and voltage measurements, but these measurements may be shared with other functions, e.g., PQ metering. Check metering values shall be transmitted to TSO via a Remote Intelligence Gateway (RIG).Permanently PQ measurement system, including PQ server to continuously monitor and report on the electrical system power quality parameters with the ability to provide remote reporting and feed this information to the SCADA system and PQ Server shall be installed at POI, at ONS 400 kV side of transformers, at 220kV ONS and 66kV OSS.The PQ measurement system shall include necessary PQ meters, sensors, PQ server, network, and interfaces for connection of the PQ meters to PQ servers and to SCADA network, and with required interface to Company IMS server.The PQ meters shall be type Class A meters as defined in IEC 61000-4-30, and the system shall be able to obtain an evaluate up to the 100 th harmonics data. Alternative standards for PQM metering shall be approved by Company.Typical data shall be available, but not limit to:PQ data shall be transferred via IEC-61850, IEC-60970-5-101/104, DNP3 or OPC-UA. Type of protocol to be agreed upon.For locations other than 400kV, the ESI SCADA shall gather non-metering grade P and Q measurements from throughout the system, for HMI viewing of system power flow, and ability to approximate system losses. This includes P and Q to auxiliary systems, O&M base, and both ends of the export cables. These P and Q values may be through P&C relays using protection class instruments, i.e., standalone hardware is not required.All PQM data to be stored for long time storage in the PQM server such as.• Current, phase voltage, frequency, active/reactive power, import/export for all PQMs in system• PQMs shall be installed for all voltages levels (66kV, 220kV onshore and 400kV ONS/TSO). Sampling interval, time-average and how high frequencies shall be according to grid code and Polish requirements and shall be grid compliant• The data shall be shown in a clear and correct way where the planning levels from Engineering Recommendation G5/4 is shown in the figure as threshold values• Flag in system, timestamp and save applicable data for long term storage when crossing thresholds• If not derived from any of the other items here, it must be set up with thresholds, so the PQM record the data and store it during an event.• The same values as TSO can see through the DSM onshore and offshore shall be included on the PQM server.• As per TSO requirements, the same data shall be gathered and presented so it is easy to see if we are within or outside the bounds• Flag in system, timestamp and save applicable data for long term storage when crossing thresholds• Same as for DSM, as per TSO requirementsRequired SW for monitoring and analysing of all required data shall be included/installed on the PQM server.All available and collected data, measurements, real time data, raw data, historical and analysed data and stored in the PQM server shall be available and transferred to Company IMS server via agreed interface protocolWeb interface for remote access to the PQM server and PQM meters for retrieving of required data and data analysing shall be included and shall be based on Company’s secure access solution.The PQM solution shall store all PQM data for a pre-defined time, at least 3 months, before transfer to Company’s long-term storage solution. No data shall be lost, redundant data shall be removed.PQM measurements shall be transmitted to TSO via a RIG. Data shall also include: - gross MW and MVAR quantities at the generator terminals, - generator terminal voltage and current magnitudes and angles; - generator terminal frequency and frequency rate of change;- generator field voltage and current, where available; - breaker status, if available.Above noted data relating to WTG measurements shall be transmitted from WTG SCADA to ESI SCADA. ESI SCADA shall transmit data to TSO. There is not a separate data link from the WTG SCADA to TSO, ESI SCADA shall act as a pass-through / data concentrator.Condition monitoring shall be included for equipment on ONS, OSS, cables and WTG with the following goals:• Solutions to reduce maintenance need or requirement for facility visits (e.g., online monitoring rather than physical readings)• Solutions to monitor asset condition by data collection and analysis to review asset health and future maintenance needCondition monitoring solutions may perform “dual roles” by also being used in other applications. For example, a Distributed Temperature Sensing (DTS) system on export cable can be used for condition monitoring, but also used in conjunction with Dynamic cable Rating System (DRS) engine to perform dynamic power set point analysis and control. Also, Depth of Burial (DoB) Monitoring shall be included.Required equipment, interfaces, protocols, signals, and instrumentation shall be included for transfer of required signals into SCADA and to Company IMS for Conditioning Based maintenance and monitoring and analysing of electrical, mechanical and instrument equipment to reduce lifetime cost and reduce time for offshore maintenance.Equipment that shall have online condition monitoring system, including but not limited to are:Doc. No. C256-EQ-J-SP-OOOO2 Rev. no. 01 Valid from: 12.12.2022Doc. No. C256-EQ-J-SP-OOOO2 Rev. no. 01 Valid from: 12.12.2022Required software/application for remote connection for remote support, maintenance, trouble shooting, diagnostics, software updates and fil transfer shall be included.If TSO requires phasor measurement unit, this shall be included forthe400kV circuit.Location and segregation shall be assessed for all IACS components for which a redundant design is chosen for reliability or availability reasons. This applies to cable routing, segregation of power feeds, physical location of components in panels, and so on. The main principle is to ensure a redundant system or function is not rendered inoperable because of a single failure.All equipment shall be fully functional in the environmental conditions in which it is installed, ref is made to C218-ST-Z -SP-00001.The requirements in this section shall apply to all IACS cabinets, including but not limited to server cabinets, Network panels. Field Termination Cabinets (FTCs) and RIO cabinets.The IACS cabinets including panels for protection relays shall be segregated from the telecom panels. Cabinet layout, sizes and material shall be standardized.All cabinets design shall consider passive thermal cooling techniques to maintain operating conditions, and all cabinets, except server cabinets should be designed to avoid need for cabinet cooling fans. Special considerations, such as perforation of cabinet/doors and enforced cooling, shall be taken for server cabinets.All cabinets shall be equipped with door locks, and it shall be possible to connect lifting lugs easily.For cabinets installed in rooms with computer raised access floor, cable entry shall be in the bottom of the cabinets.Equipment inside cabinets shall be easily accessible with door(s) open, and cabinet doors shall self-lock in the fully opened position.Cabinets shall have sufficient space to permit cables to be installed without going below the minimum bend radius given by the cable manufacturer. Special attention shall be paid to arrangements for fiber optical and network cables to ensure installation in line with manufacturers recommendation is achievable for all cables. These requirements are applicable also to future cables not installed at the time of handover to Company.It shall be possible to isolate field signals from the SCADA units without disconnecting the cable cores from the terminals. This applies to all field signal terminations, including those in RIO units and field junction boxes. Field termination blocks shall be spring-loaded. It shall be possible to disconnect the termination part of the logic solvers without affecting the possibilities for application program testing. Reconnection facilities shall be pluggable. C&P circuits (e.g., CT and PT terminations) shall incorporate the necessary test switches to perform the tests required in Grid Connection Agreement and Grid Codes. The required test switches shall be placed such that they allow relay and overall protection circuit testing, including operation of lockout relays, while preventing breaker failure schemes from operating and causing unnecessary breaker operations and/or the tripping of the Facility.The field topology design shall be based on proven standard products in the offshore environment.Advanced diagnostics with use of smart/intelligent field instruments/devices with field bus/HART protocol should be used to reduce maintenance and unscheduled stops in production. Field transmitters and final control elements should have configuration and self-diagnostic capabilities to enhance safety and support maintenance planning.Industrial network for signal transfer based on fieldbus protocols may be used. This shall be in accordance with IEC 61158. The preferred choices are Profibus PA and Foundation Fieldbus.Field transmitters and final control elements using Foundation Fieldbus or Profibus PA shall have documented interoperability, e.g., tick marked.Analogue instruments shall be used instead of mechanical switches.IEC 60529/ NEMA 250: Minimum degree of protection provided by local control panels, enclosures, instrument housing (i.e., transmitter housing) and junction boxes shall be as follows:All equipment and materials shall as a minimum be flame retardant (fire retardant) and with preferably no halogen content (e.g., no fluoride, chloride, bromide, or iodide).Equipment enclosures located outdoors in naturally ventilated areas and wash down areas shall be made of proven sea water resistant material. Alternatively, the enclosures shall be a protected by an approved coating system according to Appendix E material requirements.Operating temperatures for 316 Stainless Steel shall be limited to 60 Deg C to limit the risk of chloride stress cracking in a saliferous environment.Precautions against galvanic corrosion shall be made when considering the use of dissimilar materials and applying insulating layers where required.Sensor materials shall be suitable for the application, with respect to process parameters, measurement uncertainty and repeatability.The material requirements in Table 5 shall be applied wherever possible.Winterization shall be accomplished by first considering indoor installation, then outdoor installation with suitable instruments and heated enclosure and heat tracing of instruments and process tubing.When thermowell is used, the temperature transmitter should be mounted directly on top of the thermowell and in such a manner that the element can be installed and removed from the thermowell for maintenance, without disconnecting the cable.Level gauges and transmitters shall be physically accessible, removable, and capable of isolation from the tank, without having to drain down inventory. This is to facilitate calibration and maintenance.GIS shall be provided with intelligent circuit breaker monitoring solution based on the Supplier’s standard instruments cabled to the applicable controller. Functionality shall include monitoring and alarming of SF6 pressure, temperature, and leakage rate. The ESI SCADA shall monitor the SF6 status and provide alarms. No manual registration shall be necessary. The signal sent to SCADA shall be an analogue value, and not based on level switching, to be able to monitor and register small SF6 leakages over time or other operating point deviations.The following spare capacity that shall be provided at the time of plant start-up.• Spare space in panels/cabinets (for equipment and internal wiring): 15%• Spare in installed multicore cables and terminations (shall be terminated at both ends) excluding Cat cables: 25%• Spare space in main cable ladders/trays and Multi cable transits for (MCTs) for telecom and instrument cabling: 10%• Spare space in equipment rooms for future panels/cabinets, 10% based on final number of panels/cabinets installedAll tagged instruments shall be delivered with a 316 Stainless Steel tag plate of minimum size 50mm x 20mm, with etched or embossed characters of minimum 5 mm high. This tag plate shall contain the tag number only. The plate shall either be affixed to the instrument with Stainless Steel screws or Stainless-Steel wire.Field instrument nameplates shall as a minimum contain the following information:• Explosion protection category and ingress protection rating (if applicable).Electrical power shall be provided at 220 VDC and 230 VAC, 50 Hz.All IACS cabinets, instrumentation, OWSs (Operator Workstations), EWSs (Engineering Workstations), plus SCADA backbone and Instrument Technical Network equipment shall remain operable following a main power failure. This shall be accomplished by installation of an Uninterruptable Power Supply (UPS).All IACS panels shall be powered from two independent sources, one being via the UPS. All IACS equipment is to be served from one common UPS.The IACS panels shall be equipped with redundant AC/DC power supplies in an N+1 arrangement, for provision of DC power to electronics equipment such as logic controllers, I/O cards, network components etc. Electrical isolators shall be installed such that replacement of an individual power supply unit shall be possible without interrupting normal operations.A common alarm shall be provided for each system cabinet, to alert the operator of a power supply unit failure.All IACS components shall be designed for continuous dual electrical power feed inputs. Where this proves impractical a changeover unit with dual power inputs shall be provided.Galvanic isolation shall be used within the AC/DC power supplies to ensure that cable borne electrical interference does not adversely impact operation of either logic controllers, I/O cards, or field instruments.The UPS shall interface to the ESI SCADA system via a serial data interface, for performance monitoring and power failure, as defined for Class 2 equipment. Trip signals shall be hardwired.Required protection earth (PE), instrument earth (IE) and equipotential bonding shall be included. The IE shall be the common earth reference for instrumentation and telecommunication 0 V references and earthing of cable screen.For OSS, see C256-EQ-Z-SP-00009 chapter 6.10 for details.The maximum cycle time for the logic solver shall be 100ms. Individual applications may require shorter cycle times. Where required, selected logic solvers shall be able to handle applications with cycle times down to 10 ms.HMI response time is how fast the system responds to user interaction, that is how fast the response is after the user gives information to the system or demands information from the system. The speed of computer response to user entries should be appropriate to the transaction involved. In general, the response should be faster for those transactions perceived by a user to be simple.Required response time shall be defined such as:The following are requirements for some key interactions and shall be satisfied for pages containing typically up to 1000 dynamic data points (See Note 1 below Table 2):SCADA component types Lifetime requirements (Years) SCADA servers 10 SCADA operation station 10 Programable Logic Controllers 20 I/O cards 20 Logic solver power supply 20 SCADA network components 20 SCADA applications and tools Life cycle support through version upgrades.Contractor shall provide lifecycle plan for delivered equipment.Equipment shall as a minimum be certified for operation under the following conditions.The FAT shall include HMI equipment for testing of all interfaces at the Contractor’s site. All communication interface signals and protocols shall be fully tested during the FAT.All communications interface equipment shall be fully tested against telecom and relevant HMI operator station(s) for remote and local operation and monitoring.All systems, servers and clients shall be tested to ensure that required antivirus and security OS patches are installed. In addition, testing shall ensure that OS and other software is correctly password protected and that all Universal Serial Bus ports are disabled. Verification of enabling for remote access shall also be performed.Additional FAT testing to be performed shall include the following:• Remote connection/Remote Desktop function for all equipment.Test equipment for simulating all types of connected equipment and signals shall be supplied with the system. Test programs simulating values on equipment and signals shall also be supplied. These programs shall be equipped with an appropriate operator interface.LCI documentation shall be delivered as described in LCI requirement in Appendix E documents.CCR standard system for access and services to technical systems. The solution provides two factor login, user access management, and services like WSUS, antivirus, backup etc.All control and monitoring are fully integrated in the SCADA, utilizing standard software and unit hardware Central Control Room (CCR) shall have the capability to control multiple farms from a single location, each with a predefined set of control, monitoring and communication services. CCR is located at the O&M base.Backup CCR The Control Room on the ONS shall serve as a backup for the CCR and the ONS Station control must therefore be designed with necessary facilities to accommodate this.ESI Electrical System Infrastructure for offshore-onshore power transmission, including performing control and supervision of all functions and installations at Onshore Substation and Offshore Substation. Hereunder all infrastructure elements such as switchgears, transformers, back-up generators, reactive power components and auxiliaries.GMS (Grid measurement system) performing the control of the WTGs power at the Grid Connection Point in the wind farm power network to achieve grid code compliance.IACS Industrial control systems, including distributed control systems (DCSs), programmable logic controllers (PLCs), remote terminal units (RTUs), intelligent electronic devices, supervisory control, and data acquisition (SCADA), networked electronic sensing and control, and monitoring and diagnostic systems.OSS SUS Offshore substation Plant Automation System. Automation, SCADA, safety, and condition monitoring system with interfaces to other systems.SCADA Integrated Automation Control System is the overall integrated system for Electrical Power control system including ESI SCADA and WTG SCADA, Shutdown system, fire and gas detection system which included the basic control system, power distribution control limited to Control Class 1 systems. SCADA comprises the main HMI for the facility.Logic Solver That portion of the IACS that performs one or more logic function(s). Examples are electronic systems, programmable electronic systems, pneumatic systems, hydraulic systems. Sensors and final elements are NOT part of the Logic SolverOperator Workplace All the equipment that the operator has for his disposal to do the monitoring and control of his facility area. Consists of one or more operator stations.Part of Old Text Part of New TextConfiguration Scenario A Normal operation B Loss of one 66kV WTG string/feeder C Loss of one 66 kV SWB D Loss of one OSS 220/66 kV transformer E Loss of one 220 kV export cable F Loss of one ONS 400/220 kV transformer G Loss of any reactive compensation or filter unitSignal Description Analogue Units 1 Current IA Amps 2 Current IB Amps 3 Current IC Amps 4 Voltage VAB KV 5 Voltage VBC KV 6 Voltage VCA KV 7 Frequency Hz 8 Active Power MW 9 Reactive Power MVAr 10 Power Factor % 11 Voltage Unbalance: &Unit From SCADA to DTSParameter Current Export Cable 1 A Voltage Export Cable 1 kVParameter Unit Max Measured Temperature Cable 1 °C Max Calculated Temperature Cable 1 °C Max Actual Current Cable 1 A Max Measured Temperature Cable 2 °C Max Calculated Temperature Cable 2 °C Max Actual Current Cable 2 A Alarm on Export Cable 1 - Zone n 0/1 Alarm on Export Cable 2 - Zone n 0/1 System Status o/i System Fault o/iParameter Unit Max Measured Temperature Export Cable 1 °C Max Calculated Temperature Export Cable 1 °C A Max Actual Current Export Cable 1 Max Load Export Cable 1 MW Max Measured Temperature Export Cable 2 °C Max Calculated Temperature Export Cable 2 °C Max Actual Current Export Cable 2 A Max Load Export Cable 2 MW System Status 0/1 System Fault 0/1 Alarm on Export Cable 1 - Zone n 0/1 Alarm on Export Cable 2 - Zone n 0/1Active Power Export Cable 1 MW MVAr Reactive Power Export Cable 1 Current Export Cable 2 A Voltage Export Cable 2 kV Active Power Export Cable 2 MW Reactive Power Export Cable 2 MVArLocation IEC 60529 NEMA250 IP 56 4X Outdoor areas, naturally ventilated areas and wash down areas Dry indoor areas IP 20 12 Other areas 13/3S IP 44 (IP 54 for indoor areas with water mist)Enclosures Atmosphere/ field environment Instrument housing Fire&Gas detectors Protective shades Local Control Panels SSType AISI 316 SS or Fire retardant plastic (Note 1) Indoor and dry atmosphere or external non-saliferous atmosphere External and saliferous atmosphereAbbreviation Explanation ASMU Ancillary Service Monitoring System AVPF Anti-virus protection functions BCA Bilateral Connection Agreement BMU Balancing Mechanism Unit BW Black and White C&P Control and Protection CAP Critical Action Panel CB Circuit Breaker CCTV Closed Circuit Television CCR Central Control Room CMS Condition Monitoring System CoP Code of PracticeCPMS Condition and Performance Monitoring System CPU Central Processing Unit CT Current Transformer DMS Dynamic Monitoring System DMZ Demilitarized Zone DRS Dynamic Rating System DSM Dynamic System Monitoring DTS Distributed temperature sensing DTR Dynamic cable Thermal Rating EPC ESI Power Controller ESD Emergency Shutdown System ESI Electrical System Infrastructure ESON Electrical system design and onshore substation contractor EWS Engineering Work Station FAT Factory Acceptance Test FEED Front End Engineering and Design FDS Functional Design Specification FTC Field Termination Cabinets F&G Fire and Gas GEP Grid Entry Point GIS Gas Insulated Switchgear GMS Grid Measurement System GPS Global positioning system HART Highway Addressable Remote Transducer protocol HMI Human Machine Interface HPPP High performance park pilot HVAC High Voltage Alternating Current HV High Voltage Industrial Automation and Control System. Note: Industrial control systems, including distributed control systems (DCSs), programmable logic controllers (PLCs), remote terminal units (RTUs), intelligent electronic devices, supervisory control, and data acquisition (SCADA), networked electronic sensing and control, and monitoring and diagnostic systems IEC International Electro Technical Commission IED Intelligent Electronic Device IMS Information Management System I/O Input/Output KVM Keyboard Video Mouse switch/extender LAN Local Area Network LCI Life Cycle Information LCU Local Control Unit LOGIC SOLVER Programmable Control Unit (PLC and similar devices) LV Low Voltage LVAC Low Voltage Alternating Current MCT Multi Cable Transit MPLS Multiprotocol Label Switching NG National Grid NTP Network Time Protocol TSO Polish Transmission System Operator ODBC Open Database ConnectivityOMS Operating Metering Summator ONS Onshore Sub Station OPC OLE for Process Control OS Operating System OSS Offshore Sub Station OTS Operational Tripping Scheme OWS Operator Workstation O&M Operation and Maintenance PCC Plant Control Center PDCS Power Distribution Control System PFO Prepare for Operation PLC Programmable Logic Controller PQ Power Quality PQM Power Quality Monitoring RIO Remote Input/Output RSTP Rapid Spanning Tree Protocol RTTR Real Time Thermal Rating SCADA Supervisory Control and Data Acquisition SD Shutdown SNMP Simple Network Management Protocol SOV Service Operation Vessel SoW Scope of Work SVC Static VAr Compensator SW Soft Ware TCM Turbine Condition Monitoring TCP/IP Transmission Control Protocol/Internet Protocol TP Transition Piece TSO Polish Transmission System Operator UPS Uninterruptable Power Supply UTC Coordinated Universal Time VDU Video Display Unit VT Voltage Transformer WAN Wide Area Network WFMS Wind Farm Management System WFPC Wind Farm Power Controller WTC Wind Turbine Controller WTG Wind Turbine Generator