ASHRAE HVAC APPLICATIONS IP CH 59-2015 HVAC SECURITY.pdf

1、59.1CHAPTER 59HVAC SECURITYOWNERS PROJECT REQUIREMENTS 59.1RISK EVALUATION. 59.2HVAC SYSTEM SECURITY AND ENVIRONMENTAL HEALTH AND SAFETY DESIGN 59.3Modes of Operation . 59.3Security and EHS Design Measures 59.4Commissioning and Recommissioning 59.6Maintenance Management. 59.6CHEMICAL INCIDENTS 59.6T

2、ypes of Chemical Agents 59.6BIOLOGICAL INCIDENTS . 59.9RADIOLOGICAL INCIDENTS 59.10Radioactive Materials Effects and Sources 59.10Radiological Dispersion. 59.10Radiation Monitoring. 59.10Facility Response 59.11EXPLOSIVE INCIDENTS 59.11Loading Description. 59.11Design Considerations . 59.11HIS chapte

3、r is intended to be an overview of HVAC securityTconsiderations relative to natural events, accidents, terrorism,and national threats, as well as addressing chemical, biological,radiological, and explosive (CBRE) incidents that do not causemajor structural damage to a building or its infrastructure.

4、 Thisadded focus on CBRE incidents, either accidental (e.g., an industrialspill) or premeditated, is intended to be a general overview and notused as design guidelines.Because of the nature of security, there is not much documenta-tion available pertaining to designing, constructing, operating, com-

5、missioning, or recommissioning and maintaining HVAC equipmentand systems from a security and environmental health and safety(EHS) standpoint. Organizations such as the U.S. Department ofDefense have guidelines that are considered highly confidential andare only shared with others on an as-needed bas

6、is. In other situations,special security organizations follow behind the design and/or con-struction teams with security measures that are not shared with thesedesign/construction organizations. As a result, the owners projectrequirement (OPR) document should include a security and EHSstatement, and

7、 the HVAC design engineer must include informationin the basis of design (BOD) document to raise awareness of theapproach and level of security and EHS for the specific project.In general, HVAC security and EHS apply to all building appli-cations based on a broad range of reasons, needs, and request

8、s. Theyplay a particularly important role for businesses such as pharmaceu-tical companies, property managers of high-profile commercialbuildings where workers and visitors come and go on a regular basisthroughout the day and night, and convention centers and sport sta-diums entertainment venues whe

9、re thousands of people are presentfor a few hours. Recently, security considerations have expanded toinclude all building programs, whether a K-12 school, movie theater,or simply a tenant fit-out of a small business space.This chapter is not intended to be used for design or develop-ment of life saf

10、ety systems or procedures, or for protection of per-sonnel during an incident; rather, it offers an approach to HVACsecurity and EHS to include a segment in the design team BOD doc-ument that can address HVAC security, EHS, commissioning, andrecommissioning of systems; details the need to provide pr

11、oactivemaintenance of these components and systems; and providesdescriptions of some CBRE incidents and their associated effectson buildings, building equipment, and occupants, along with gen-eral guidelines for how to deal with their effects on building infra-structure.Since September 11, 2001, mor

12、e published information hasbeen available about procedures for preventing, mitigating, and re-mediating terrorist or other CBRE incidents. ASHRAEs (2003a)Report of Presidential Ad Hoc Committee for Building Health andSafety under Extraordinary Incidents discusses many aspects ofbuildings, building i

13、nfrastructure, and measures that can both re-duce the threat and/or damage from such incidents. Several depart-ments of the U.S. federal government, including the FederalEmergency Management Agency (FEMA), Department of Home-land Security (DHS), National Institute for Occupational Safetyand Health (

14、NIOSH), Centers for Disease Control (CDC), and De-partment of Defense (DOD), have produced reports and guidelinesfor dealing with terrorist threats to buildings (see the Bibliogra-phy). Emphasis is generally on actions to reduce the potential harmto building occupants and minimizing the potential fo

15、r an accident,both reducing the threat of harm, by instituting procedures that re-duce the hazard during an incident.HVAC security and EHS begin in the building program phase ofa renovation or new construction project. The design team shouldaddress the level of security via a risk evaluation and doc

16、ument thelevel of security and EHS to be invested in the building program. Formost buildings, the risk evaluation will fall into the category of lowto medium, but do not overlook the potential for high risk based onthe buildings application.In almost any case of a terrorist event affecting a buildin

17、g, itsinfrastructure, or its occupants, the affected building and its imme-diate surroundings are likely to be in police or military control forseveral days (or longer) after the event. During this period, the roleof the building(s) owner or physical plant staff is to assist in control-ling or remed

18、iating the affected areas through their knowledge of thebuilding and its infrastructure systems. Assessment of damage orremaining danger to the building or personnel is difficult, particu-larly with chemical, biological, and radiological events, in which thecontaminating agent often is invisible and

19、 is only revealed throughadverse health effects. As such, there are no specific guidelines forhow or when a building can be brought back online and readied foroccupancy; each event is unique. Any preparation or response pro-tocol for CBRE incidents internal or external to the facility should bedesig

20、ned to consider the specifics of the building and its occupants.It is impossible to provide general guidelines for incidents that are sounpredictable and potentially so devastating. This chapter attemptsto shed light on design intent, construction administration, commis-sioning, and recommissioning,

21、 and some of the possible effects onbuildings, their systems, and their occupants, which may aid in thedevelopment of a more specific protocol in line with a particularfacilitys needs.1. OWNERS PROJECT REQUIREMENTSThe initial process of any building program is establishing theowners project requirem

22、ent (OPR) document, which is an abbrevi-ated overview of the owners project goals. Both the OPR and theThe preparation of this chapter is assigned to TG2, Heating, Ventilation,and Air-Conditioning Security.59.2 2015 ASHRAE HandbookHVAC ApplicationsBOD must be drafted in the conceptual phase of a ren

23、ovation or newconstruction project. The OPR covers a wide range of categories todocument the owners intent in investing in this new construction,renovation, or infrastructure project. The OPR identifies the driversthat will shape the design, how it will be constructed, the energybudget, and how it w

24、ill be operated and maintained over the build-ings life. It also sets a construction budget and project timeline.Security and EHS requirements may remain confidential, with lim-ited documentation between the owners security professionals andthe designer. A separate design team and construction team

25、alsocould be brought into the project after design is completed andbefore the owner begins occupancy, to fulfill the BOD.When drafting an OPR, the building owner, owner representa-tive, and the design team should consider the following:Who are the main occupants?What is the intended use of the build

26、ing?What is the total planned population of the building, includingvisitors and service staff?What type of operations will the facility and/or occupants con-duct?What is the planned response to an incident? Will occupants evac-uate, shelter in place, or carry on normal activities uninterrupted?How w

27、ill the building staff become aware of a threat, and what isthe likely notification time?What level of protection is required against threats?Will some occupants have planned responses that differ signifi-cantly from the general building plan?What level of access will the general public be allowed i

28、n thebuilding? Does the owner have a dedicated security team and/or consultant?What life safety measures are planned for the building?Will occupants be required to remain in the building after an inci-dent (e.g., in a high-security prison)?Are there any unique environmental health concerns (e.g., ex

29、plo-sive atmosphere, laboratory)?In addition to the preceding, the design engineer should also con-sider lessons learned from past HVAC security process failuresassociated with the type of building (e.g., for a hospital project:emergency generators and primary HVAC equipment located belowflood water

30、 levels that took out the emergency power and specialHVAC central air systems serving in-patient space). An Internetsearch of related issues and concerns is advised.The OPR should be complete and exhaustive, and should ade-quately cover the owners overall goals for the buildings HVACsecurity. Many H

31、VAC security measures are relatively low in costand effort during new construction or renovation planning, but mayrequire significant cost and effort if implemented after constructionis completed. Therefore, it is critical to capture these requirementsearly in any design process.All projects should

32、include some minimal level of HVAC secu-rity design and planning. These measures are typically included inthe life safety requirements, specific designs, or best practices typ-ically applied to building construction. These baseline measuresinclude equipment or design features that can be applied to

33、allbuildings at a minimal cost and effort to provide basic protectionagainst internal and external threats. Baseline measures support thesafe sheltering in place and/or evacuation of occupants during anincident. Many baseline measures can be implemented in an exist-ing facility with little or no add

34、itional engineering design or cost,and with minor alteration to the facility operations. Enhancedmeasures include equipment or design features beyond the base-line level, and are intended for facilities with identified risks or crit-ical operations. Costs for design, construction, and sustainment ca

35、nbe significant, depending on the measures selected; however, theprotection afforded by these systems typically allows longer-termsheltering in place or continuous uninterrupted operations for theduration of the incident. Specific design features and equipment toprovide these measures of protection

36、are discussed later in thischapter. A buildings particular HVAC security design uses its ownunique collection of HVAC security measures, depending on riskand requirements.2. RISK EVALUATIONIn parallel with development of the OPR, a risk evaluation shouldbe conducted for the building and its planned

37、design. FEMA andother industry organizations have developed various guidance doc-uments and software to assess the risk and appropriate responsefrom both external and internal events. Significant detail regardingrisk management for catastrophic events is included in ASHRAEGuideline 29-2009.Risk is a

38、 function of the probability of an event occurring andthe consequence of this event. For HVAC security and EHS plan-ning, the probability of a catastrophic event occurring is typicallynearly zero. This probability is shaped by multiple factors, includ-ing the facilitys occupants, its location, and n

39、earby objects that maypose a threat. The consequence of an event, however, is usually con-sidered extremely high. Factors to be considered include potentialloss of life, failure of critical infrastructure, and remediation timeand effort.Figure 1 presents a generalized framework for managing build-in

40、g security risks. The key considerations for a risk analysis includethe following:Vulnerabilities: what elements of the building design, construc-tion, location, or operations present opportunities for catastrophicevents?Acceptable vulnerabilities: what identified vulnerabilities cannotor should not

41、 be addressed, and thus must be accepted as opera-tional risks?Impact: what are the consequences of an adverse event, includingremediation, reconstruction, and lost business, and how does thiscompare to the cost of implementing HVAC security measures?Constraints: what limitations exist that would sh

42、ape the HVACsecurity design of a building?Successful risk evaluation should include a review of all facets ofthe planned building design and operations to determine the risk.This evaluation may include the following areas of assessment:Fig. 1 Risk Management Framework(Adapted from ASHRAE Guideline 2

43、9-2009)HVAC Security 59.3Building and occupantsIdentification of potential high-value targetsIdentification of specific vulnerabilitiesClassification of occupants and operationsAssessment of benefits of containment versus evacuationPotential threats and vulnerabilitiesIdentification of potential agg

44、ressorsIdentification of potential delivery systemsLikely support mechanismsIdentification of likely first-responder unitsIdentification of infrastructural supportPostevent remediationConsideration for potential consequences if building is unoccu-pied or unusable for extended periodsEstimation of re

45、lative magnitude of remediation measuresExamples of considerations that may increase the overall riskassessment of the facility include the following:Potential effect of building remaining unoccupied for extendedperiodsMilitary and government command centersSignificant landmarksCritical infrastructu

46、re elementsSingle-failure point operations or equipmentCorporate headquarters or critical operations centersTransportation hubsCommunications nodesPopular tourist destinationsApproach and takeoff areas for major airportsSites open to the publicSites frequently targeted by protests and demonstrations

47、Locations near significant potential hazards such as nuclearpower plants or chemical manufacturing facilitiesLocations adjacent to major shipping and transportation routeswhere external events may affect building occupants (e.g., truckfire, ruptured tanker car on train)Sites frequently subjected to

48、severe natural or weather events,such as tornados, hurricanes, or earthquakesObviously, this list is not exhaustive, and many buildings mayhave unique circumstances or characteristics that warrant special-ized HVAC security measures. Generally, it is difficult or impossi-ble to completely mitigate a

49、gainst all risks; thus, the overall goal ofa risk evaluation and implementation of security measures is tomove subsequent evaluated risks to lower levels. That is, if a build-ings overall risk is assessed as high, measures should be imple-mented such that subsequent risk assessments for the same buildingwould be medium or low.3. HVAC SYSTEM SECURITY AND ENVIRONMENTAL HEALTH AND SAFETY DESIGNBuilding design and operations during a CBRE event shouldleverage strongly from the OPR and risk evaluation documents.This section presents generalized recommendations and practicesf