Understanding and Applying the ANSI/

ISA 18.2 Alarm Management Standard

Abstract
Alarm Management has become an ever-increasing topic of discussion in the power and processing
industries. In 2003, ISA started developing a standard around this subject. After six years of hard work, the
ANSI/ISA-18.2-2009 Management of Alarm Systems for the Process Industries standard was published.
This paper reviews the scope, regulatory impact, requirements, recommendations, alarm definitions, and
other details of the standard.
Overview In this white paper, we will review the most
Over the last several years, alarm management has important aspects of the scope, requirements,
become a highly important topic, and the subject recommendations, and other contents of ISA-
of a number of articles, technical symposia, and 18.2. However, there is no substitute for obtaining
books. and understanding the full document.

In 2003, ISA began developing an alarm 1. Purpose and Scope

management standard. Dozens of contributors,
from a variety of industry segments, spent
thousands of hours participating in the
development. PAS participated as both a section
editor and a voting member. After six years of
work, the new ANSI/ISA-18.2-2009 Management
of Alarm Systems for the Process Industries
(ISA-18.2) standard was released. It is available at
www.isa.org.
The issuance of ISA-18.2 is a significant event
for the chemical, petrochemical, refining,
power generation, pipeline, mining and metals,
pharmaceutical, and similar industries using
modern control systems with alarm functionality.
It sets forth the work processes for designing,
implementing, operating, and maintaining a
modern alarm system in a life cycle format. It will
also have considerable regulatory impact.
ISA-18.2 is quite different from the usual ISA
standard. It is not about specifying communication
protocols between equipment, nor the detailed
design of control components. It is about the
work processes of people. Alarm management
is not really about hardware or software; it is
about work processes. Poorly performing alarm
systems do not create themselves. ISA-18.2
is a comprehensive standard developed per
stringent methods based on openness, balancing
of interests, due process, and consensus. These
components make it a “recognized and generally
accepted good engineering practice” from a
regulatory point of view.
1. See http://www.iec.ch/cgi-bin/procgi.pl/www/iecwww.p?wwwlang=e&wwwprog=pro-det.p&progdb=db1&He=IEC
&Pu=62682&Pa=&Se=&Am=&Fr=&TR=&Ed=1.0
© PAS 2010
The basic intent of ISA-18.2 is to improve
safety. Ineffective alarm systems have often been
documented as contributing factors to major
process accidents. The alarm system problems
that ISA-18.2 addresses have been well known for
nearly two decades.
There are several common misconceptions about
standards. Standards intentionally describe the
minimum acceptable and not the optimum. By
design, they focus on the “what to do” rather
than the “how to do it.” By design, standards do
not have detailed or specific “how-to” guidance.
ISA-18.2 does not contain examples of specific
proven methodologies or of detailed practices.
The standard focuses on both work process
requirements (“shall”) and recommendations
(“should”) for effective alarm management.
Readers familiar with alarm management
literature should not expect to learn new or
different information when reading the ISA-18.2.
The key difference is that ISA-18.2 is a standard,
not a guideline or a recommended practice, and
it was developed in accordance with stringent
ANSI methodologies. As such, it will be regarded
as a “recognized and generally accepted good
engineering practice” (RAGAGEP) by regulatory
agencies. ISA-18.2 is in the process of being
adopted as an International IEC standard (IEC
62682 Ed. 1.0)1.
The ISA-18.2 committee is now working on
creating additional explanatory and methodology
information in follow-up ISA technical reports.
These should be available in 2011.
1
2. Does ISA-18.2 Apply to You?
The focus of ISA-18.2 is on alarm systems that
are part of modern control systems, such as
DCSs, SCADA systems, PLCs, or Safety Systems.
It applies to plants with operators responding to
alarms depicted on a computer-type screen and/
or an annunciator.
This includes the bulk of all processes operating
today, specifically:
• Petrochemical
• Chemical
• Refining
• Platform
• Pipelines
• Power Plants
• Pharmaceuticals
• Mining & Metals
Additionally, it applies whether your process is
continuous, batch, semi-batch, or discrete. The
reason for this commonality is that alarm response
is really not a function of the specific process being
controlled; it is a human-machine interaction. The
steps for detecting an alarm, analyzing the situation,
and reacting are steps performed by the operator.
There is little difference if you are making (or
moving) gasoline, plastics, megawatts, or aspirin.
While many industries feel “We’re different!”, that
is simply not the case when it comes to alarm
response. Many different industries participated
in the development of ISA-18.2, recognized
this, and the resulting standard has overlapping
applicability.
ISA-18.2 indicates the boundaries of the alarm
system relative to terms used in other standards,
such as Basic Process Control System (BPCS),
Safety Instrumented System (SIS), etc. Several
exclusions are listed to not contradict existing
content in other standards.
3. Regulatory Impact
This paper is not intending to be a detailed clause-
by-clause interpretation of OSHA, EPA, DOT,
PHMSA, or other regulations. The regulatory
environment is complex and overlapping for
some industry segments. Many industries are
clearly covered by OSHA 1910.119 Process
Safety Management, which makes a few specific
mentions of alarms.
2. See http://www.osha.gov/pls/oshaweb/owadisp.show_document?p_table=INTERPRETATIONS&p_id=25164
3. See http://www.osha.gov/pls/oshaweb/owadisp.show_document?p_table=MOU&p_id=323
© PAS 2010
The important thing is that regulatory agencies
have “general duty” clauses and interpretations. As
one example, consider OSHA 1910.119 (d)(3) (ii)
which states, “The employer shall document that
equipment complies with recognized and generally
accepted good engineering practices.” This is
actually a regulatory acronym, RAGAGEP.
Codes, standards, and practices are usually
considered “recognized and generally accepted
good engineering practices.” In the OSHA
interpretation letter to ISA, a National Consensus
Standard, such as ISA-18.2, is a RAGAGEP.
OSHA recognizes ANSI/ISA S84.01-1996 as
an example.2 There exists a “Memorandum
of Understanding” between OSHA and ANSI
regarding these matters.3
There is little question ISA-18.2 is an example
of RAGAGEP, and companies should expect
the regulatory agencies to take notice. Generally,
a regulated industry can be expected to either
comply with RAGAGEP or explain and show
they are doing something just as good or better.
Indeed, OSHA has sought and received permission
from ISA to internally distribute ISA-18.2 to its
inspectors. This was with the specific intent to be
able to easily cite it in investigations and used for
enforcement reasons.
The U.S. Chemical Safety Board (www.csb.gov)
will also be using ISA-18.2 as a resource in its
investigations. Other regulatory agencies are also
becoming aware of ISA-18.2. The American
Petroleum Institute (API) will soon release API
RP-1167, Alarm Management Recommended
Practices for Pipeline Systems. This API document
is in full alignment with ISA-18.2, and the Pipeline
and Hazardous Materials Safety Administration
(PHMSA) generally adopts API recommended
practices in their regulatory language.
4. Grandfathering
A grandfather clause used by other ANSI/ISA
standards was also used in ISA-18.2. It is:
“For existing alarm systems designed and constructed in
accordance with codes, standards, and/or practices prior
to the issue of this standard, the owner/operator shall
determine that the equipment is designed, maintained,
inspected, tested, and operated in a safe manner. The
practices and procedures of this standard shall be applied
to existing systems in a reasonable time as determined by
the owner/operator.”
2
The two instances of “shall”, which are
highlighted, indicate mandatory requirements.
This clause mimics language used in OSHA
regulation 1910.119(d)(3)(iii).
5. Definitions in ISA-18.2
An immense amount of work was done in
researching and carefully crafting various
definitions, while maintaining consistency
between ISA-18.2 and other references.
ISA-18.2 defines an alarm as “an audible and/or
visible means of indicating to the operator an equipment
malfunction, process deviation, or abnormal condition
requiring a response.”
6. Alarm State Transitions
ISA-18.2 includes a
moderately complex
diagram depicting the
alarm states and sub-
states of “Normal”,
“Unacknowledg ed”,
“A c k n o w l e d g e d ” ,
“Returned-to-Normal”,
and “Latched”. Of
particular interest are
the states of “Shelved”,
“Suppressed by
Design”, and “Out of
Service”. These have
specific meanings:
“Shelved” is an alarm Figure 1: The Alarm Management Life Cycle
that is temporarily suppressed, usually via
a manual initiation by the operator, using a
method meeting a variety of administrative
requirements to ensure the shelved status is
known and tracked.
“Suppressed By Design” is an alarm
intentionally suppressed due to a designed
condition. This is a generic description that
includes such items as simple logic-based
alarms and advanced state-based alarming
techniques.
“Out of Service” is a non-functioning
alarm, usually for reasons associated with the
Maintenance stage of the life cycle. An “Out
of Service” alarm is also tracked via similar
administrative requirements to a shelved
alarm.
The terms “suppress” and “alarm suppression”
are intentionally generic and not specific to a
type of DCS. They are used to indicate when
the alarm functionality is not working (generally
through an override mechanism of some sort).
It is possible, and unfortunately common, to
suppress an alarm outside of the proper work
practices, and the detection of such undesirable
situations is part of the Monitoring life cycle
stage.
7. The Alarm Management Life Cycle
ISA-18.2 is written with a life cycle structure
comprised of ten stages (see Figure 1). They
are:
Alarm Philosophy: Documents the objectives
of the alarm system and the work processes
to meet those
objectives.
Identification:
Work processes
determining
which alarms are
necessary.
Rationalization:
The process
of ensuring an
alarm meets the
requirements
set forth in the
alarm philosophy,
including the tasks
of prioritization,
classification, settings determination, and
documentation.
Detailed Design: The process of designing
the aspects of the alarm so that it meets the
requirements determined in rationalization and
in the philosophy. This includes some HMI
depiction decisions and can include the use of
special or advanced techniques.
Implementation: The alarm design is brought
into operational status. This may involve
commissioning, testing, and training activities.
Operation: The alarm is functional. This stage
includes refresher training, if required.
Maintenance: The alarm is non-functional
due to either test or repair activities. (Do not
equate this life cycle stage with the maintenance
department or function.)
© PAS 2010 3
Monitoring and Assessment: The alarm
system’s performance is continuously monitored
and reported against the goals in the alarm
philosophy.
Management of Change: Changes to the alarm
system follow a defined process.
Audit: Periodic reviews are conducted to maintain
the integrity of the alarm system and alarm
management work processes.
7.1. Life Cycle Stages vs. Activities
Do not confuse a life cycle stage with an activity.
Life cycle is a structure for the content of the ISA-
18.2 document. It is not specifically or necessarily a
list of activities to be accomplished in a particular
order.
For example, in a matter of minutes an engineer
could sit down and resolve a single nuisance
chattering alarm. That task could involve going
through several different life cycle stages as part
of performing the activities associated with a
simple task. Consider the following:
Monitoring Stage: Engineer: “Well today, I am
spending some time fixing nuisance alarms. Which
of my alarms are on the most frequent alarm list?
Ah, there’s one – a chattering high-value alarm on
the column pressure.”
Identification Stage: Engineer: “Ah yes, I
happen to remember that we need this alarm as
part of our quality program; however my job
today is to make it work correctly and eliminate
the chattering behavior, not to decide whether to
get rid of it or not. So I don’t have to research
as to whether it was originally specified by some
particular process like a PHA.”
Detailed Design Stage: Engineer: “Let’s check
the configuration of this alarm. There’s nothing
unusual about it. Hmmm, I see that the alarm
deadband on this point is set to zero. That’s
certainly not a proper thing and could easily
lead to chattering behavior. Let’s examine some
process history and alarm history, and consult a
good book on alarm management to determine a
more appropriate deadband setting.”
Operation Stage and Maintenance Stage:
Engineer: “Now I am going to alter the alarm
deadband to a new setting. Hmmm, do I have
to take the point off-scan to do that? Not in this
case, on this DCS. If I did, I would have to tell
4. Documentation is a part of the Rationalization stage of the life cycle
© PAS 2010
the operator first. But I can make this change
without that and the alarm will remain online
throughout.”
Management of Change Stage: Engineer: “So
far, I haven’t actually changed anything. Before I
type in and activate this new number for deadband,
I mentally review the management of change
requirements for doing so. This specific type of
change is covered in our alarm philosophy, and
our site procedures empower me to make this
change as part of my authorized job duties. I do
not have to seek any approval or signatures. I will
have to document this change in the master alarm
database though.”
Implementation Stage: Engineer: “Now I
actually change the deadband. I type in the new
number and hit ‘Enter.’ Done!”
Rationalization Stage4: Engineer: “Since I have
the proper security access, I will add this new
deadband setting into the master alarm database
along with my name, date, and reason. I will also
make a note in the weekly nuisance alarm tracking
report about this one. As long as I am here looking
at this alarm, I note it is configured as a Priority
3. That seems reasonable, but let’s just check the
online master alarm database for the reasons that
resulted in that priority assignment. Hmmm, they
look pretty good. If they did not, I could not
change them myself. I need the Prioritization team
take a look at it. Any change in priority requires
notification to the operators.”
Monitoring Stage: Engineer: “Part of my work
process for this is to continue to look at the alarm
data to see if this deadband setting change solved
the problem. I will add this one to my tracking and
follow-up list.”
In a few minutes, several different life cycle
stages were briefly visited in accomplishing this
one example task. In understanding and applying
ISA-18.2, do not get overwrought about trying to
figure out which life cycle stage you are in at any
point in time. It is a requirements structure, not a
work process sequential checklist.
In 2006, PAS published The Alarm Management
Handbook, which provided a proven seven-step
methodology for solving an alarm system problem
and accomplishing effective alarm management.
There is no conflict between this seven-step
approach and the ISA-18.2 life cycle methodology;
4
there is only some different nomenclature and
task arrangement.
8. The Alarm Philosophy Life Cycle
Stage
ISA-18.2 recognizes that an alarm philosophy
document is a key requirement for effective
alarm management. A table lists topics which
are noted as either mandatory or recommended
for inclusion. Remember that a standard
describes the minimum acceptable, not the
optimum.
The major mandatory contents of the alarm
philosophy include roles and responsibilities,
alarm definition, the basis for alarm
prioritization, HMI guidance, performance
monitoring, management of change, training,
etc.
There are no surprises in the list except for two
concepts not previously included in the Alarm
Management lexicon, “alarm classification”
and “highly managed alarms”.
8.1. Alarm Classification
Alarm classification is a method for assigning
and keeping track of various requirements
for alarms, mostly administrative ones. For
example, some alarms may require periodic
refresher training, while others may not. The
same could be true for testing, maintenance,
reporting, HMI depiction, and similar aspects.
Alarm classes are defined and used to keep
track of these requirements. It is mandatory in
ISA-18.2 to define alarm classes.
This is a slightly unusual thing for a standard.
Normally, standards tell you what to do but not
how to do it, or to require a specific method.
For example, the standard could have simply
stated, “Identify and track alarms that require
periodic testing.” There are a variety of methods
to successfully do this and a classification
structure is only one of them. However, the
committee elected to require a classification
structure, though it need not be an onerous
one. There are no specific class requirements
and no minimum number of class definitions
specified. PAS recommends the “keep it
simple” approach and have a straightforward
class structure with minimal variations.
© PAS 2010
8.2. Highly Managed Alarms
The committee thought it desirable to explicitly
define one class of alarms. A variety of
designations were considered, from “critical” to
“vital” to “special” to “super-duper.” “Highly
Managed Alarms” or HMAs was chosen as
the term. The intent is to identify the alarms
that must have a considerably high level of
administrative requirements.
Now, there is no requirement to have or use
this classification. However, if you do, if you
state “this classification in my philosophy is per
the ISA-18.2 usage of Highly Managed”, then
you must document and handle a multitude of
special administrative requirements in a precise
way according to the standard.
The various mandatory requirements for HMAs
are spread over several sections throughout
ISA-18.2. These include:
• Specific shelving requirements,
such as access control with audit trail
• Specific “Out of Service” alarm
requirements, such as interim
protection, access control, and audit
trail
• Mandatory initial and refresher
training with specific content and
documentation
• Mandatory initial and periodic
testing with specific documentation
• Mandatory training around
maintenance requirements with
specific documentation
• Mandatory audit requirements
PAS’ advice is to specifically avoid the usage of
this alarm classification. You might choose to
have your own similar classification, and then
choose only the administrative requirements
you deem necessary for those alarms. These
will probably be only a subset of the ISA-18.2
listing for HMAs.
9. The Alarm System Requirements
Specification (ASRS)
This non-mandatory section basically says that
if you are buying a new control system, it is
a good idea to write down your requirements
and evaluate vendor offerings and capabilities
against them. Specific deficiencies in the
chosen system can drive the acquisition or
creation of third-party or custom solutions.
5
The ASRS then becomes a useful document for
system testing and acceptance.
10. The Alarm Identification Life Cycle
Stage
This section of ISA-18.2 notes that different
methods are used to initially identify the need for
some alarms. All modern control systems have a
lot of built-in alarm capability; perhaps more than
a dozen types of alarms available for some point
types.
In some cases, the need for use of one of those
types or the creation of a specific alarm via custom
logic or calculation may be driven from a variety
of process-related sources. These are the usual
list of studies such as a Process Hazard Analysis
(PHA), Layer of Protection Analysis (LOPA),
Failure Mode and Effects Analysis (FMEA), etc.
11. The Alarm Rationalization Life Cycle
Stage
This life cycle stage consists of several activities.
Most people familiar with alarm management
concepts think of rationalization as the specific
activity of a team reviewing an alarm system and
making decisions about usage, priority, setpoints,
etc. In ISA-18.2, the word is used to indicate a
collection of activities that may be done in a
variety of ways.
The activities are as follows:
• Ensuring alarms meet the criteria set
forward in the alarm philosophy
• Justifying the need for the alarm
• Marking for deletion alarms that
should not exist
• Determining the appropriate alarm
• type
• Determining the appropriate alarm
setpoint or logical condition
• Determining the proper priority
• Documenting any special design
considerations for an alarm
• Documenting any advanced alarming
capabilities desired for an alarm
• Documenting relevant information
such as operator action, consequences,
etc.
• Determining the alarm’s classification
Note all of the activities listed above include both
the cases of review of already existing alarms or
consideration of potential new alarms. The major
© PAS 2010
mandatory contents of the rationalization stage
are for specific alarm documentation and alarm
classification.
The section is quite short since it intentionally
avoids listing specific methods for effective and
efficient rationalization. Some examples of such
methods are planned for one of the follow-up
ISA technical reports.
12. The Basic Alarm Design Life Cycle
Stage
This section describes the common capabilities of
control system alarm functionality and how they
relate to the alarm state diagram. There is some
non-mandatory advice about the proper usage of
some alarm types and some alarm configuration
capabilities, such as deadband and delay time.
13. Human-Machine Interface (HMI)
Design for Alarm Systems
This section describes the desired functionality for
indicating alarms to the operator. Since there is a
current ISA standard in development specifically
about HMIs (ISA-101), this section is intentionally
limited.
Some items discussed (with little detail), include:
• Depiction of alarm states, priorities,
and types
• Alarm silencing and
acknowledgement
• Alarm shelving, designed
suppression, and out of service conditions
and depiction
• Alarm summary display functionality
• Other alarm-related similar displays
and functionality
• Alarm sounds
• Alarm information and messages
• Alarm annunciators
Many functionality items are listed as mandatory
or recommended. The major mandatory items
are for specific depiction of various alarm-related
conditions, and specifically required HMI screens
and functionality. These items are typically within
the capabilities of most modern control systems.
It is noted at the start of the section that some
described features are not possible in some control
systems. You can still be in compliance with the
standard if you have such a system.
I would estimate that the ISA-101 standard on
6
HMI is several years from issuance. It actually
might turn out to be just a technical report than
a standard; this is uncertain. In the meantime,
if you want more detailed information
on creating proper and effective operator
graphics, we recommend our latest book The
High Performance HMI Handbook, as well as the
ASM Consortium Guidelines for Effective Operator
Display Design.
14. Enhanced and Advanced Alarm
Methods
This is an informative section providing an
overview of alarm features and capabilities that
are usually a bit beyond the standard capability
of a control system. This section notes that
usage of such advanced capabilities may require
additional design work and support.
These types of advanced methods briefly
discussed include the following:
• Information linking
• Logic-based alarming
• Model-based alarming
• Alarm attribute modification
• Externally enabled systems
• Logical alarm suppression/
attribute modification
• State-based alarming
• Model-based alarming
• Non-control room considerations
(such as remote alarm notification)
• Paging, e-mailing, and remote
alerting systems
• Supplementary alarm systems
• Continuously variable alarm
thresholds
• Batch process alarm
considerations
• Training, testing, and auditing
systems
• Alarm attribute enforcement
15. The Implementation Life Cycle
Stage
This section covers the activities and
requirements around implementing a new
alarm system or implementing desired changes
to an existing one. The areas covered generally
have both mandatory requirements and non-
mandatory recommendations.
© PAS 2010
They are as follows:
• Planning
• Training for new systems and
modifications
• Testing and validation for new
systems and modifications
• Documentation of training and
testing
16. The Operation Life Cycle Stage
This section deals with mandatory requirements
and non-mandatory recommendations for
in-service and operating alarms. The areas
addressed are:
• Alarm response procedures
• Alarm shelving, including
documentation
• Operator refresher training, including
documentation
17. The Maintenance Life Cycle
Stage
This section is not about the maintenance
department or the maintenance function.
It is about the condition where an alarm
has been removed from service specifically
for testing or repair. The section covers
mandatory requirements and non-mandatory
recommendations for the following:
• Moving alarms in and out of the
Maintenance stage of the life cycle,
including notification, tracking, and
documentation
• Interim procedures for when alarms
are out of service
• Periodic testing of alarms, including
record-keeping
• Refresher training for personnel
involved with alarm repair or testing
• Alarm validation in regard to
equipment replacement
18. The Monitoring and Assessment
Life Cycle Stage
This is the stage in which alarm system
performance is measured and reported. The
intent is to verify that the other life cycle stages
are successful in creating an alarm system that
is effective.
7
 It is mandatory that alarm system performance be The items covered are:
measured and compared against goals identified
• Changes subject to management of
in the alarm philosophy. Four clearly defined
change
terms are used in this section: “monitoring”,
• Change review process requirements
“assessment”, “audit”, and “benchmark”.
including the consideration of
Several analyses are described and recommended technical basis, impact, procedure and
for alarm system performance measurement. A documentation modifications, review,
non-mandatory table indicating recommended and authorization
performance goals and metrics is provided. The • Ensuring changes are in accordance with
numbers allow for possible modifications, and are the alarm philosophy
as follows: • Temporary changes
• Implementation of changes
“The target metrics in the following sections are approximate
• Change documentation requirements
and depend upon many factors (e.g. process type, operator
and recommendations
skill, HMI, degree of automation, operating environment,
• Alarm decommissioning
types and significance of the alarms produced). Maximum
recommendations
acceptable numbers could be significantly lower or perhaps
• Alarm attribute modification
slightly higher depending upon these factors. Alarm rate
requirements and recommendations
alone is not an indicator of acceptability.”
The analyses described are: 20. The Audit Life Cycle Stage
The Audit stage involves a more comprehensive
• Average annunciated alarm rate per
review of not only the performance of the
operating position (per day, per hour, per
alarm system itself, but also of the various work
10 minutes, with acceptability numbers)
processes associated with it. The section covers
• Peak annunciated alarm rates per
the nature of audits, items to be examined, and
operating position
some recommendations around practices, such as
• Alarm floods (calculation methods and
interviews and action plans.
recommendations)
• Frequently occurring alarms 21. Summary
• Chattering and fleeting alarms ISA-18.2 is an important standard and will
• Stale alarms undoubtedly result in a significant safety
• Annunciated alarm priority distribution enhancement for the process industries. It validates
(alarm occurrences) and embodies practices that industry experts and
• Alarm attributes priority distribution leading manufacturing companies have advocated
(alarm configuration) for many years. The publication of ISA-18.2
• Unauthorized alarm suppression has significant regulatory consequences, and
• Alarm attribute monitoring (for companies are advised to become familiar with its
unauthorized change) contents.
In deciding the particular measures and About the Author
performance numbers, the committee did Bill Hollifield is the
considerable research to achieve consensus. PAS Principal Alarm
Several analyses with problematic concerns were Management and HMI
intentionally left out. Recommendations for the Consultant. He is a voting
reporting of alarm system analyses are provided. member of the ISA SP-
18 Alarm Management
19. The Management of Change Life
committee and the
Cycle Stage American Petroleum
This section deals with mandatory requirements
Institute’s committee
and non-mandatory recommendations for change
developing API-1167 Recommended Practices for
of the alarm system.
Alarm Management of Pipeline Systems. Bill is also the
coauthor of The Alarm Management Handbook, The
High-Performance HMI Handbook, and the Electric

© PAS 2010 8
Power Research Institute’s Alarm Management and
Annunicator Application Guidelines. Bill has
international, multi-company experience in
all aspects of Alarm Management along with
many years of chemical industry experience
with focus in project management, chemical
production, and control systems.
Bill holds a Bachelor’s Degree in Mechanical
Engineering from Louisiana Tech University
and an MBA from the University of Houston.
He’s a pilot, and builds furniture (and the
occasional log home in the Ozarks) as a
hobby.
About PAS
PAS (www.pas.com) improves the automation
and operational effectiveness of power and
process plants worldwide by aggregating,
contextualizing, and simplifying relevant
information and making it universally
accessible and useful. We provide software and
services that ensure safe running operations,
maximize situation awareness, and reduce plant
vulnerabilities. Our comprehensive portfolio
includes solutions for Alarm Management,
Automation Genome Mapping, Control
Loop Performance Optimization, and High-
Performance Human-Machine Interfaces. PAS
solutions are installed in over 1,000 industrial
plants worldwide.
Contact PAS:
16055 Space Center Blvd., Ste. 600
Houston, TX 77062
+1.281.286.6565
info@pas.com

© PAS 2010 9
 Maximize Operator Effectiveness:
High Performance HMI Principles and Best Practices
Part 1 of 2

A PAS White Paper

Version 3.0

Bill Hollifield
Principal Alarm Management and HMI Consultant, PAS

Hector Perez
High Performance HMI Product Manager, PAS

High Performance HMI 3.0 - Part 1 | Cover

© PAS 2015
 Table of Contents
Introduction and Overview ......................................................................................................................................................... 1
HMIs Past and Present ………………………………………………….................................................…....…………...................................... 3
Justification for HMI Improvement .......................................................................................................................................... 5
Proper Graphic Principles ........................................................................................................................................................... 6
Show Information Instead of Raw Data ................................................................................................................................. 7
Proper Use of Color ....................................................................................................................................................................... 9
Elements and Depictions of HPHMI ........................................................................................................................................ 10
Depicting Process Values ......................................................................................................................................................... 10
Depicting Alarms ......................................................................................................................................................................... 11
Depicting Profiles of Temperature or Pressure ................................................................................................................ 13
Depicting Dynamic Equipment .............................................................................................................................................. 13
Bars vs. Pointers .......................................................................................................................................................................... 14
Depicting Level Indication ....................................................................................................................................................... 14
Depicting Control Valves and Shutoff Valves ................................................................................................................... 14
Depicting Equipment Commands ........................................................................................................................................ 15
Use of Trends ................................................................................................................................................................................ 16
Depicting Tables .......................................................................................................................................................................... 16
Depicting Advanced Process Control (APC) .................................................................................................................... 17
Depicting Shutdown Activation ............................................................................................................................................ 17
Depicting Interlock Functionality ......................................................................................................................................... 18
Startup Map ................................................................................................................................................................................... 20
Navigation and Command Buttons ...................................................................................................................................... 20
Display Layout and Faceplate Handling ............................................................................................................................. 21
Avoiding “Blob” Graphics ......................................................................................................................................................... 23
Display Hierarchy ............................................................................................................................................................................ 23
Level 1 – Operation Overview .................................................................................................................................................. 24
Level 2 – Unit Control ................................................................................................................................................................. 25
Level 3 – Unit Detail ..................................................................................................................................................................... 26
Level 4 – Support and Diagnostic Displays ........................................................................................................................ 26
Conclusion of the Part 1 Document ......................................................................................................................................... 27
About the Authors ......................................................................................................................................................................... 28
References ......................................................................................................................................................................................... 29

High Performance HMI 3.0 - Part 1 | Table of Contents

© PAS 2015
Introduction and Overview
The process control and automation industry has spent billions on improving process safety
via complex, instrumented systems. Yet, we continue to frequently see industrial incidents,
accidents, and fatalities in the news. The causes are generally not the failure of such automated
systems but are instead the result of a wide variety of human errors. PAS firmly believes that
addressing the causes of human error and the improvement of Operator Effectiveness is of the
highest importance. The proper use of such technologies as High Performance HMITM (HPHMI)
and Alarm Management can actually save lives and prevent injuries. Detailed information on
these should not be withheld, and that is why we offer this and other white papers freely.
They can also significantly lessen process upsets, improve process efficiency, and increase
productivity.

The human-machine interface (HMI) is the collection of screens, graphic displays, and other
technologies used by the operator to monitor and interact with the control system (typically
DCS or SCADA). Several major accidents, such as the Texas City refinery explosion in 2005,
have cited poor HMIs as a significant contributing factor. The design of the HMI plays a critical
role in determining the operator’s ability to effectively manage the operation, particularly in
quickly detecting and resolving an abnormal situation, which is the most important task of an
operator. A poor HMI can actively interfere with this ability.

For several reasons, the current designs and capabilities of most HMIs are far from optimal
for running the kinds of complex operations we have in industry. Most HMIs consist simply of
schematic or P&ID style graphics covered in numbers. Such displays provide the operator large
amounts of raw data but almost no real information. They are difficult to interpret and provide
inadequate situation awareness to the operator.

Since we published The High Performance HMI Handbook in 2008, improving HMI has become
one of the hottest topics in the automation industry. In that book, we explained exactly why
most current HMI practices were poor, and we put forth the proper principles and details for
making graphics significantly better. Many companies have adopted those principles and have
completed migrations to improved graphics. Many more have such efforts currently underway.

This two-part paper provides a history, justification, and detailed plan of action for the
improvement of a process control HMI. Here is an overview of the contents.

High Performance HMI 3.0 - Part 1 | Page 1

© PAS 2015
Part 1
Examples: We provide typical examples of common but poor HMIs, along with highly
detailed depictions of improved methods that provide for much better operator situation
awareness and control.

Principles: We cover the most important aspect of HPHMI, the display of information
to the operator rather than raw data. Many other necessary graphic principles including
the correct way to use color are provided. Depictions of detailed graphic elements are
included.

Hierarchy: HPHMI graphic designs must reflect a proper hierarchy – the exposure of
additional detail as needed. We include examples of graphics that illustrate this hierarchy,
along with the work processes used to design such graphics.

If your facility utilizes a process control system with a computer-based HMI, you will find this
information useful. This white paper augments the detailed content in The High Performance
HMI Handbook.

Part 2 (Separate Document)

Case Studies: Since the publication of our 2008 book, many projects have provided
for the development of real world case studies. We include two such studies in this
paper. The first was conducted by the Electric Power Research Institute (EPRI) but is
applicable to all types of process operations. The second shows how a major company
has improved performance and significantly lowered costs via company-wide adoption
of standardized High Performance graphics. This has led to a major HPHMI product
innovation for the power industry: PowerGraphiX™.

We also provide an example as to how “out-of-the-box thinking” can address HMI issues,
in the discussion of a Pipeline System Overview Display.

Standards Review: Two standards documents available on HMI are discussed, including
the ANSI/ISA-101.01-2015: Human Machine Interfaces for Process Automation Systems
released in August 2015.

HPHMI Work Processes and Implementation Guidance: The work process for HMI
improvement is described. We also address the most common issues encountered in
HMI improvement and cost effective ways to transition to High Performance graphics.

High Performance HMI 3.0 - Part 1 | Page 2

© PAS 2015
HMIs Past and Present
Before the advent of sophisticated digital control systems, the operator’s HMI usually consisted
of a control wall concept such as Figure 1.

The control wall had the advantages of

providing an overview of the entire operation,
key trends, and a limited number of well-defined
alarms. A trained operator could see the entire
operation almost at-a-glance. Spatial and
pattern recognition played an important role
in the operator’s ability to detect burgeoning
abnormal situations.

These systems had several disadvantages.

They were difficult to modify, the addition of
Figure 1: Example of a Control Wall
incremental capabilities was problematic, and
the ability to extract and analyze data from
them was almost non-existent. In the 1980s-1990s, the modern electronic control systems (DCS/
SCADA) replaced them for such reasons.

When the modern systems were introduced, they included the capability to create and display
graphics for aiding in the control of the operation. However, there were no guidelines available
as to how to create effective graphics. Early adopters created graphics that mimicked P&ID or
schematic drawings, primarily because they were readily available. The limited color palette was
used inconsistently, and screens
began to be little more than
crowded displays of numbers on
a P&ID.

Graphics such as Figures 2

and 3 were developed over 20
years ago and remain common
throughout the industry. Indeed,
inertia, not cost, is the primary
obstacle to the improvement of
HMIs. Engineers and operators
become accustomed to this style
of graphic and are resistant to
change.
Figure 2: An Early Graphic Showing Many Problematic Practices

High Performance HMI 3.0 - Part 1 | Page 3

© PAS 2015
 As a result, industries that
use modern control systems
are now running multi-
million dollar operations
from primitive HMIs created
decades ago at a time that
little knowledge of proper
practices and principles was
available.

As control system hardware

progressed, the manufacturers
began to develop very flashy
Figure 3: A Typical Crowded, P&ID-Style Graphic
example graphics which were
used for marketing purposes. While fit for that purpose, they were quite ineffective for actually
controlling a process. Many companies and projects, however, began to create graphics similar
to those examples. The results were displays that are actually suboptimal for operators.

To illustrate this point, Figure 4 is an example of flashy design taken from a power generation
facility. The graphic dedicates 90 percent of the screen space to the depiction of 3-D equipment,
vibrantly colored operation lines, cutaway views, and similar elements. However, the information
actually used by the operator consists of poorly depicted numerical data, which is scattered
around the graphic, and only makes up 10 percent of the available screen area.

There are no trends, condition

indicators, or key performance
elements. You cannot easily
tell from this graphic whether
the operation is running well
or poorly. That situation is true
for more than 90 percent of
the graphics used throughout
industry today because
they were not designed to
incorporate such information.
Instead, they simply display
dozens to hundreds of
raw numbers lacking any Figure 4: A Flashy Graphic Inappropriate for Actual Operational Control
informative context.

High Performance HMI 3.0 - Part 1 | Page 4

© PAS 2015
Justification for HMI Improvement
Poorly performing HMIs have been cited time and again as significant contributing factors to
major accidents. Yet, our industry has made little significant change in HMI design. There is
another industry that learns from its accidents and has made phenomenal advancement in HMI
design based on new technology. That industry is avionics. The resulting improvement in pilot
situation awareness is one of the largest contributing factors in the decades-long decline in
aviation accidents.

Figure 5: Garmin G2000® Avionics Package in a Small Plane

Modern avionics feature fully-integrated electronic displays as shown in Figure 5. These depict
all of the important information, not just raw data, needed by the operator (i.e., pilot). Position,
course, route, engine diagnostics, communication frequencies, and automated checklists are
displayed on moving maps with built-in terrain proximity awareness. Real-time weather from
satellite is overlaid on the map. Detailed database information on airports is available with just a
click. Situation awareness and abnormal situation detection is far improved by these advances.
This capability – impossible even a dozen years ago in multi-million dollar airliners – is now
standard on even the smallest single engine aircraft.

There have been tests involving actual operators running realistic simulations using traditional
graphics vs. High Performance ones. PAS participated in such a test at a large power plant,
sponsored by the EPRI and detailed later in this paper. The results were consistent with a
similar test run by the ASM® (Abnormal Situation Management) Consortium on an ethylene
plant. The test showed the High Performance graphics provided significant improvement in the
detection of abnormal situations (even before alarms occurred) and significant improvement in
the success rate for handling them. In the real world, this translates into a savings of hundreds
of thousands of dollars per year.

Since safety is significantly improved with modern HMIs, it is only logical that we would want all
operators to have access to them. Yet, most companies have done little to upgrade.

High Performance HMI 3.0 - Part 1 | Page 5

© PAS 2015
Proper Graphic Principles
Ineffectively designed graphics are easy to find. Simply search the internet for images under the
category “HMI.” Problems with these graphics include:
● Primarily a schematic or P&ID representation
● Lots of displayed numbers
● Few or no trends
● Spinning pumps/compressors, moving conveyors, animated flames, and similar
distracting elements
● Brightly colored 3-D equipment
● Highly detailed equipment depictions
● Attempts to color code piping with contents
● Long, cryptic tagnames shown on the screen
● Brightly colored liquid levels displaying the full width of the vessel
● Lots of crossing lines and inconsistent flow direction
● Inconsistent color coding
● Bright colors on dark backgrounds
● Misuse of alarm-related colors
● Limited, haphazard navigation
● A lack of display hierarchy

Ineffective graphics encourage poor operating practices, such as operating by alarm. By

contrast, High Performance graphics have:
● A generally non-schematic depiction except when functionally essential
and at Level 3
● Limited use of color, where color is used specifically and consistently
● Gray backgrounds to minimize glare and reflection issues
● No animation, except for specific alarm-related graphic behavior
● Embedded, properly-formatted trends of important parameters
● Analog representation of important measurements, including their value
to normal, abnormal, alarm, and interlock conditions
● A proper hierarchy of display content providing for the progressive exposure
of detailed information as needed
● Simple and straightforward depictions in 2-D not 3-D
● Consistent flow depiction and layout to minimize crossing lines
● Embedded information in context (via right-click menus or similar methods) such
as alarm documentation and rationalization, standard operating procedures, and
more.
● Logical and consistent navigation methods
● Techniques to minimize operator data entry mistakes
● Validation and security measures

High Performance HMI 3.0 - Part 1 | Page 6
© PAS 2015
Show Information Instead of Raw Data
A primary difference of High Performance graphics is the underlying principle that, wherever
possible, operational values are shown in an informational context and not simply as raw
numbers scattered around the screen.

Information is data in context made useful.

As an example, consider this depiction of a
compressor shown in Figure 6. Much money has 190.5 psig

been spent on the purchase of instrumentation. 55.7 psig 155.2 °F 108.2 °F 166.1 F °
65.1 °F 135.1 Cooler
2.77
MSCFH
Yet, unless you are specifically trained and psig
Oil 155.2 F °
experienced with this compressor, you cannot Oil 85.1 psi

tell if it is running at peak efficiency or is about

West East
to fail.
W. Vibration: 2.77 E. Vibration: 3.07
The mental process of comparing each
number to a memorized mental map of Drive: 232.2 amps

“what is good” is a difficult cognitive process.

Operators have hundreds (or even thousands) Figure 6: All Data, No Information

of measurements to monitor. Thus, the results vary by the experience and memory of the
operators as well as how many abnormal situations they have personally experienced with this
particular compressor. Training new operators is difficult because the building of these mental
maps is a slow process. Adding more numbers to a screen like this one does not aid in situation
awareness; it actually detracts from it.

By contrast, a bank of analog indicators, as in Figure 7, can represent these numbers much more
effectively. Analog is a powerful tool because humans intuitively understand analog depictions.

RECYCLE COMPRESSOR K43

Cool Suct Inter Dsch Suct Inter Dsch E. Vib N. Vib W. Vib Motor Oil Oil
gpm psig psig psig degF degF degF mil mil mil Amps psig degF
Alarm
2 Indicator

Interlock
Threshold

Alarm
Range

Desirable
Operating
Range

Alarm
Range
42.7 38.7 93.1 185 95 120 170 12 8 9 170 80 290

Figure 7: Analog Depiction of Information

High Performance HMI 3.0 - Part 1 | Page 7

© PAS 2015
 Moving Analog indicators with Normal Range, High, Hi-Hi, Low, and Lo-Lo alarm
indications, Interlock indication, and recent range
When
FLOW FLOW FLOW FLOW Measurement
gph gph gph gph Is Invalid
3 2 4
Alarm
Hi-Hi Alarm
indicator is Priority 2
Range
always Hi-Hi
Hi Alarm based on alarm is Dark blue bar
Range the highest in effect shows
Abnormal priority measurement
and Hi
High Range alarm in variability in a
Alarm is
Desirable effect on still in specified time
Operating the sensor effect period such
Range shown as prior 2
Priority 3 hours.
as a light blue Hi Alarm
shaded area (possible on
is in some control
effect systems)
Abnormal Low
Range
Low Alarm
Lo-Lo Alarm
32.1 81.1 91.1 63.5 BAD ----
Interlock Function

Figure 8: Further Explanation of Moving Analog Indicators

We are hard-wired for pattern recognition. With a single glance at this bank of properly designed
analog indicators, the operators can tell if any values are outside of the normal range, by how
much, the proximity of the reading to both alarm ranges, and the values at which interlock
actions occur. Analog depictions such as these moving analog indicators are a key element of
HPHMI.

In just a second or two of examination, the operator knows which readings, if any, need further
attention. If none do, the operator can continue to survey the other portions of the operation.
In a series of short scans, the operator becomes fully aware of the current performance of their
entire span of control.

The knowledge of what is normal is embedded into the HMI itself, making training easier and
facilitating abnormal situation detection, even before alarms occur, which is highly desirable.

Similarly, depiction of PID controllers is accomplished with the addition of easily scanned
setpoint, mode, and output information, as in Figure 9. If the final control element has a position
feedback signal, deviation is easily and effectively shown on the output scale. Mechanical
deviations are prime causes of abnormal situations, and they should be made easy to spot.

The subtle, slight gradients and shadows are intended to increase prominence of the live
elements. Images in printed form are often significantly different than images shown on a
screen. For that reason, other modifications to increase printed visibility have been made on
some depictions in this paper. Actual design of HPHMI elements concerns their appearance on
the screen.

High Performance HMI 3.0 - Part 1 | Page 8

© PAS 2015
 Analog Controller Controller with With Position
Depiction Device Feedback Deviation Alarm
Damper Position
Description
Units (psig) A B C D E F G H
2
A A A A M A A A
Diamond
for
Setpoint 2 2
Device
Feedback
Output on same
Indicator scale
0-100%

Black
Outline 562.1 562.1 602.1
PV, Mode, 74 77 45 74 50 50 75 51
Indicates
MAN Setpoint & AUTO 22% AUTO 22% 73 78 78 75 51 50 65 55
Mode is 560.0 560.0 23% 485.0 55%
Abnormal Output
22% Values

Figure 9: Analog Depiction of PID Controllers and Position Feedback

Proper User of Color

Color must be used consistently. People have several types of common color-detection
deficiency (e.g., red-green, white-cyan, green-yellow). For this reason, the most important rule
for color is this:

Color, by itself, is never used as the sole differentiator of an important condition or status.

Most graphics throughout the world violate this principle. A color palette must have a limited
number of distinguishable colors used consistently. Bright colors are primarily used to bring
or draw attention to abnormal situations, not normal ones. Screens depicting the operation
running normally should not show brightly saturated colors, such as bright red or green pumps,
equipment, valves, and similar items.

When alarm colors are chosen, such as bright red and yellow, they are used solely as an
aspect of the depiction of an alarm-related condition and for no other purpose. If color is used
inconsistently, then it ceases to have meaning. Figure 10 is a workable HPHMI color palette, and
the example figures in this paper generally follow it. There should not be very many colors, and
all colors must be easily distinguishable.

Graphics with color-neutral gray backgrounds on LCD screens are effective. They also enable
the lights in the control room to be turned back to bright – where they should be. Poor graphics
began with dark backgrounds and bright colors due to 1980s-90s CRT hardware limitations.
This scheme resulted in major glare and reflection problems which were addressed by dimming
the control room lights. For operator alertness, the control room lighting should actually be
brighter than a typical office, all day and all night.

High Performance HMI 3.0 - Part 1 | Page 9

© PAS 2015
 Color RGB Values Sample Defined Uses
Gray 213, 213, 213 Overall graphic background

White 255, 255, 255 Highlighting of some small items, e.g., PV Quality indications

Light Gray 243, 243, 243 “ON” indication for equipment

Gray 136, 136, 136 “OFF” indication for equipment

Dark Gray 74, 74, 74 Some text, minor process lines

Black 0, 0, 0 Text and labels, major process lines, process vessel outlines.
Dark Gray (64, 64, 64) can also be a good choice.
Dark Blue 0, 0, 215 Process values, controller modes and outputs, similar special
purposes. Trend line for a single trended value.
Dark Green 0, 128, 0 Controller setpoints and other operator inputs, trend trace of
setpoints
Light Green 153, 255, 102 Possible “faint green” for some specific highlighting

Light Blue 187, 224, 227 Desired operating ranges or conditions

Cyan 0, 255, 255 Vessel level strips, trend lines

Brown 204, 102, 0 Trend lines, position feedback indiciation

Pale Red (Pink) 255, 153, 204 Possible “faint red” for some specific indications

Red 255, 0, 0 Top level, Priority one alarm

Yellow 255, 255, 0 Priority two alarm

Orange 255, 102, 0 Priority three alarm

Magenta 255, 0, 255 Priority four alarm for diagnostics

Dark Magenta 204, 0, 102 Trend lines

Figure 10: An Example HPHMI Color Palette

Elements and Depictions of HPHMI

This section shows many of the common situations that a process graphic must depict and how
to accomplish those depictions by following High Performance HMI principles.

Depicting Process Values

The display of live values on the screen should be shown in a different way than static text:
● The choice of a bold, dark blue is a good choice with the gray background and
differentiates live values from static text done in black or dark gray as in Figure 11.
● Leading zeros are not displayed, except on fractional values (e.g., 0.27). Values are
shown only to the precision needed by the operator.
● In tables or columns, generally align numbers on the decimal point.
● Units of measurement are displayed in non-bold text near the value.

High Performance HMI 3.0 - Part 1 | Page 10

© PAS 2015
 ● Point names should not be shown on the screen by default. It should never
be necessary for an operator to have to type in a point name in the entire HMI.
● Process values can have a variety of diagnostic conditions. Figure 11 shows a clear,
concise, and visible way for depicting those. Color coding is not recommended.
● When items are “selected,” that status should be indicated. Surrounding the
selected item with a white outline is a good practice.

Display of process values. No alarm conditions are in effect.

480.1 psi BAD ----- psi OOR ----- psi

Normal Bad Value Out of Range

Note that the BAD or OOR condition is normally alarmed, and the
additional alarm element would be shown (see depiction of alarm
conditions).
It may be possible to show the Last Good Value of a BAD or OOR
measurement, rather than showing dashes. If this is the case,
the depiction will be:
?LG 480.1 psi

Bad or Out of Range Value

Discrete (“digital”) conditions are shown using the same blue

color and in bold, using easily understood words
Vent Valve
Pump 14: Damper 7: SW 66:
Stopped Moving Locked Auto
Closed

Selection of an item causes the relevant faceplate to appear

and the selected item is highlighted. See Faceplate section.

480.1 psi 480.1 psi

Invisible selection area Selection indication

Figure 11: Depicting Process Values

Depicting Alarms
Proper alarm depiction should also be redundantly coded based upon alarm priority
(color / shape / text). Alarm colors should not be used for non-alarm related functionality.

When a value or object comes into alarm, the separate alarm indicator appears next to it, as
shown in Figure 12. The indicator flashes while the alarm is unacknowledged (one of the very
few proper uses of animation) and ceases flashing after acknowledgement but remains visible
as long as the alarm condition is in effect. People do not detect color change well in peripheral
vision, but movement such as flashing is readily detected. Alarms thus readily stand out on a
graphic (and on multiple screens) and are detectable at a glance.

Figure 12 shows that the most common methods of alarm indication are a direct violation of the
basic rule of color use, as they are different solely by the use of color.

High Performance HMI 3.0 - Part 1 | Page 11

© PAS 2015
 Poor Alarm Depictions Violating the Basic Color Rule

Similar 480.1
480.1 psi 480.1 psi 480.1 psi 480.1
Bad
No Alarm In Alarm In Alarm Depictions 480.1

480.1 psi 480.1 psi 480.1 psi 480.1 psi

Diagnostic Priority 3 Priority 2 Priority 1
Priority
480.1 psi 480.1 psi 480.1 psi 480.1 psi
Diagnostic Priority 3 Priority 2 Priority 1
Priority

Improved Alarm Depictions With Redundant Coding

4 3 2 1
480.1 psi 480.1 psi 480.1 psi 480.1 psi

Priority 4 Priority 3 Priority 2 Priority 1

Diagnostic
The symbol’s outlines
Suppressed S
480.1 psi above are important!
Alarm
Symbols without
them would not be as
Overall Alarms Summary element effective in standing
out on a graphic:
Alarms 1 2 3 4 S
4 3
Total 0 4 8 1 12
Un-Ack 0 0 2 1 2 1

Figure 12: Depiction of Alarms

It is highly beneficial to include access within the HMI

to the alarm rationalization information contained in
Embedding Alarm
the Master Alarm Database as show in Figure 13. If Documentation
these terms are unfamiliar, you are advised to read
the ISA 18.2 standard for Alarm Management in the
Process Industry, or read the API RP-1167 Alarm 3 Response Time: <15 min
122.1 deg F
Management Recommended Practice if you are in Right-click
callup
the pipeline industry. PAS offers free white papers
explaining both documents. Information
called into the
shape & size of a
standard
faceplate
Link to
Procedures
X
TI-468-02 Column
Overhead Temperature
Alarm: PV HIGH
Category: Minor Financial
Priority: 3
Setting: 120 deg F
Alarm Consequences:
Off spec Production
Lowered efficiency
Alarm Causes:
Excess steam
Pressure excursion
Insufficient reflux
Feed composition variance
Corrective Actions:
Adjust base steam rate.
Check pressure and feed
parameters vs. SOP 468 -1
-
Adjust reflux per
computation; check
Controller for cascade mode.
Check feed composition

Figure 13: Linked Alarm Information

High Performance HMI 3.0 - Part 1 | Page 12

© PAS 2015
Depicting Profiles of Temperature or Pressure
Consider these alternative distillation column
A Column Temperature Profile
temperature profile displays. When only numbers
Alarm Ranges
are shown, even an experienced operator may easily
20.1
miss a suboptimal condition. Additionally, a new 20.1 18.2
24.2
24.2 24.0
operator will find it difficult to build a mental map
25.6
25.6 25.6
of a proper profile. The desire is for all operators to 27.8
27.8 29.8
recognize normal and abnormal profiles at a single 28.9
28.9 32.9 2
glance.
Normal
range
A correct profile can be seen at a glance as a
straight line.
Is this a This one is. Too hot at the
good profile? bottom, too cold
at the top.

Depicting Dynamic Figure 14: Measurement Profile

Equipment
So what about the paradigm of using bright green to depict “ON” and bright red for “OFF” (or
vice versa in the power industry)? This is an improper use of color. The answer is a depiction
such as Figure 15.

Wrong Better The relative brightness of the object shows its

“ON-oFF” status, as does the use of a process
Pump Not
Running STOPPED
(Shape is Filled value word next to it. Equipment items
Darker)
brighter than the background are “ON” (think
Pump of a light bulb inside them). Items darker
Running
RUNNING than the background are “OFF.” If equipment
(Shape is Filled
Wrong Better
Brighter) has no status that is sensed by the control
system, but is desired on the graphic anyway,
Dynamic equipment without instrumentation sensing
of process states can be depicted with a fill the same
it is shown as transparent to the background
as the background.
color. The status word can indicate several
Showing choices from predefined Limiting the displayed conditions conditions, as shown. Remember, if any of
conditions to only those in effect:

those are also alarm conditions, the separate

alarm indicator will appear next to the
Running
Interlocked
Running
Interlocked
Running
equipment when it is in an alarmed state.
Stopped – Error Stopped – Error
Stopped with Condition Stopped with Condition
Stopped – Needs Reset Stopped – Needs Reset
Stopped – OK to Start Stopped – OK to Start
Repair State Repair State
Stopped – Needs Reset

Figure 15: Depicting Status with Redundant Coding

and Proper Color Usage

High Performance HMI 3.0 - Part 1 | Page 13

© PAS 2015
Bars vs. Pointers
Attention to detail is important. It is typical to use bar graph elements to show relative
positions and values. While this may be better than simply showing numbers, it is inferior
to the use of moving pointer elements since the bar disappears as the bar’s value gets low.
The human eye is better at detecting the presence of something than its absence. And, the
low condition may be more
Analog Position – Poor but Typical Analog Position - Better
important than the high
0% 25% 50% 75% 100% 0% 25% 50% 75% 100%

condition and should have Valve Valve

V-1 100% V-1 100%
V-2 100% V-2 100%
equal visual prominence. V-3 95% V-3 95%
X-1 88% X-1 88%
The example in Figure 16 is X-2 100% X-2 100%
X-3 100% X-3 100%
superior in showing relative X-4 75% X-4 75%
S-1 0% S-1 0%
values, besides the color S-2 55% S-2 55%
K-1 100% K-1 100%
improvement. K-2 100% K-2 100%

Figure 16: Bars vs. Pointers

Depicting Level Indication

Vessel levels should not be shown as large blobs of saturated color. A simple strip depiction
showing the proximity to alarm limits is better. A combination of trend and analog indicator
depictions is even better such as Figure 17. The right-hand edge of the trend replaces the pointer
and provides context.

Depiction of Vessel Level Indication

2

Crude
Feed
TK-21

56.5% 2 Hrs 49.5% 2 Hrs 81.5%

Better: Thin bar Trend with Best:

Very Poor Poor level strip with dotted lines for Combination
normal and normal range, with full context
alarm range tic marks for analog indicator
context alarm settings

Figure 17: Vessel Levels

Depicting Control Valves and Shutoff Valves

Control valves turn out to be one of the more complicated items to depict. The tendency is
to want to cram too much data into a small space. Traditionally, we depict a control valve
(throttling, variable position) with a domed head depiction and an automated block valve (only
on-off) with a rectangular head depiction.

High Performance HMI 3.0 - Part 1 | Page 14

© PAS 2015
In keeping with equipment depictions, the valve body is filled darkly for closed and brightly
for open. This also follows the P&ID paradigm for block valves. The same method can depict
the state of three-way valves. The solenoid and position switch statuses can also be shown if
desired.

Control Valves Control Valves Same Principles for On-Off

(no feedback) (with Analog Feedback) Valves, with Status Words
Output Output
Valve Head
determines No determines Valve
is Unfilled
valve head feedback valve head Traveling

Valve
Open
33%
O: 33% Open Open Trav
A: 38%
Actual determines
Valve valve body fill.
Closed O% and A %
0% numbers are shown Closed Closed
Output % Shown
Valve Fail Direction Solenoid: When Position Showing All The
Fail Fail Fail de-energized, Switches: Options: Confusing!
Open Closed Last valve moves to Made and
fail position Unmade

O: 100%
0% 0% 0% A: 99%

Avoid Tiny If You Can’t Resist, at 3-Way Valves Showing

Output Bars! Least Use a Slider Open Flow Paths

Figure 18: Control and Automated Block Valves

Depicting Equipment Commands

When DCS/SCADA points are built that indicate equipment state, the control engineer can
usually decide which words to display to represent the current state. The choices they make
are often poor. The most common example is “RUN” and “STOP.” Do these represent the
equipment’s status, or a command to it? “RUNNING” and “STOPPED” are much better status
indication words. “STOP” and “START” are commands, not statuses.

Similarly, the graphics need to differentiate clearly between status indications and command
possibilities. In general, the graphic indicates the current state, and faceplate interactions are
used to command changes to that state. It is
common to have a point type that includes Digital Composite
Point Depiction:
both a switch-type (binary) output command Pump 22 3
Command
and binary status feedback, commonly called (“setpoint”) to Run
a Digital Composite Point. Figure 19 shows a the device: Stopped Mismatch
Feedback from alarm if
compact graphic presentation of those statuses.
the device: applicable
Selecting the graphic element would call up the
faceplate for the actual interaction. Figure 19: Digital Composite Point Depiction

High Performance HMI 3.0 - Part 1 | Page 15

© PAS 2015
Use of Trends
The most glaring deficiency in HMI today is the general West Comp Flow MSCFH
55.0
lack of properly implemented trends. Every graphic
PV
generally has one or two values on it that would be far 49.1
SP
better understood if presented as trends. However, the 50.5

graphics rarely incorporate them.

45.0
-90
- --60 -30
- 2 Hours
West Comp Discharge Temp °C
Instead, engineers and managers believe vendor claims 50.0

that their operators can easily trend any value in the PV

44.1
control system on demand with just a click. This is
incorrect in practice; a properly scaled and ranged trend
40.0
-90 -60 -30 2 Hours
may take 10 to 20 clicks/selections to create and usually
5000
15
disappears into the void if the screen is used for another Main
Steam
purpose (like calling up a different graphic). 4150
Feed
Water
3280
This deficiency is easily provable; simply walk into the Drum
Level
-0.5
control room and count how many trends are displayed. 0
1 Hr
-10

Our experience in hundreds of control rooms is that

trends are vastly underutilized and situation awareness Figure 20: Trend Depiction of
Desirable Ranges
suffers due to that.

Trends should be embedded in the graphics and appear, showing proper history, whenever the
graphic is called up. This is generally possible but is a capability often not utilized. Trends should
incorporate elements that depict both the normal and abnormal ranges for the trended value.
There are a variety of ways to accomplish this as shown in Figure 20. The range indicator could
also indicate the alarm and interlock ranges (see the later Level 1 Overview Example; Figure 33).

Table Design
Improper Practice Better Practice HPHMI Startup Permissives Table
Abc abc abc
Abc abc abc
Abc abc abc
Abc abc abc
X
X
Breaker 15 Power OFF Depicting Tables
Abc abc abc Abc abc abc
Oil Temp 16-33 NOT OK
Abc abc abc Abc abc abc X Oil Pres Status NOT OK Even tables and checklists can
Abc abc abc Abc abc abc Level in TK-8776 NOT OK
Gen System Status OFF
incorporate proper principles as
HPHMI Equipment Status Table Comp 88 in Auto OK
Lineup Ready
shown in Figure 21. Consistent
Air Status Mode Diagnostic NOT OK
Comp Sys Status Checks NOT OK colors and status indication can
Bearing Readouts OK
C #1 RUNNING AUTO OK
Comm check NOT OK be integrated. The intent is to
C #2 STOPPED MAN OK Outlet Temp < 250 NOT OK
C #3 RUNNING AUTO OK Cooling Flow OK make the abnormal stand out.
Internal Circuit Check NOT OK
C #4 STOPPED AUTO FAULT 3
Bypass Closed NOT OK
AFS Function NOT OK
Another Better Practice Status Table
Pump Status
A2 CWP A2 HWP C2 HWP A2BFPT
ON 2 ON ON ON
B2 CWP B2 HWP SUBFP B2BFPT
ON OFF ON
3 ON

Figure 21: Tables and Checklists

High Performance HMI 3.0 - Part 1 | Page 16

© PAS 2015
Depicting Advanced Process Control
Advanced Process Control (APC) is also known as Multi-Variable Control. It is the method by
which a sophisticated computer program monitors the process and adjusts controllers in real
time to continually optimize performance.
Advanced Process Control (APC)
Not all controllers are “touched” by the APC
APC is ON: Indicators for Simplified
system, and it is useful for the operator to see increase, decrease, and maintain: Alternative
which ones are and what the APC system is APC APC APC
doing with them. Small indicators next to the
affected controllers are useful for this. Figure APC in effect on a controller:

22 shows this with an alternative, non-analog APC TK21 Level

P 75.1 %
PID controller representation that is useful in S 77.0
O 88.5 %
some circumstances. Auto

A Level 2 or 3 screen showing overall health APC is Off: APC X X

and functionality of the APC system itself is
Figure 22: Advanced Process Control
desirable.

Depicting Shutdown Activation

Operators must have the ability to shut down operating equipment manually and quickly.
However, when an important action with significant consequences is based upon operator
input, the input should have a confirmation mechanism that avoids inadvertent activation. The
“cancellation” option should be consistently implemented.

It should never be possible to make a single selection on a screen that results in an inadvertent
shutdown. A “Shutdown button” should call up at least one, and perhaps two, layers of
confirmation before it is possible to actually cause such a significant event.

The “defaults” of such mechanisms should be Reactor 7

X
Reactor 7
Manual Reactor 7
Manual
on the safe option. Always consider what an Shutdown
Shutdown “Continue” Shutdown
SHUT brings
inadvertent “ENTER” will do and label screen DOWN CONTINUE
CONTINUE up standard
REACTOR ACCESS Digital Shut
Shut Down
items with full clarity. 7 ACCESS
Reactor 7
Output
Down

Reactor
Manual7
Manual
Shutdown Faceplate:
Shutdown
Switch Normal
Normal
Major process upsets have occurred by
Screen button Switch

mistyping an input (for example, opening a selection calls

up a CANCEL
CANCEL

slide valve to 47 percent instead of 4.7 percent). confirmation

CANCEL
CANCEL
faceplate. Reactor 77
Older DCSs using membrane keyboards are Reactor
“Cancel” is the Manual
Manual
default: Shutdown
Shutdown
particularly susceptible to this type of error.
Error checking methods should be used to
require confirmation of numerical entries that Figure 23: Layers of Confirmation

seem inappropriate.

High Performance HMI 3.0 - Part 1 | Page 17

© PAS 2015
Depicting Interlock Functionality
Interlocks are functions whereby normal
Interlock Not Interlock in Interlock in
control actions are overridden by in Effect Effect Bypass
Interlock
predetermined process conditions. An Symbology
I I I
example would be to override a steam valve I-57D I-57D I-57D
to the closed position if the equipment Bank of Interlocks, Status and Actions

temperature or pressure is too high. I-5A I-5B I-5C Interlock Actions:

I Feed I ADTV-1 I ADTV-2 Stop Feed OFF
There are several HMI-related issues to be Stop ADTV-1 OFF
I-5D I-5E I-5F Stop ADTV-2 OFF
addressed for interlocks, and these must be I Temp I Pres I Level Max Cooling OFF
Max Vent ON
handled regardless of whether the interlock
is implemented in the DCS or in a separate Figure 24: Interlock Symbology

Safety Instrumented System.

Interlocks are implemented using logic structures, usually “blocks” or “points” or “ladders.”
These are usually complicated and cryptic to understand when displayed using the native
capabilities of the DCS (e.g., logic point detail). They may activate infrequently since they are
usually designed to protect against an abnormal situation. Due to this, the operator may not
encounter them for months. When they activate, the operator may not remember being told
about “the new column interlock” implemented a year ago and have no idea why he cannot
start feed to the column. If this occurs at 2 a.m. on a Saturday night, then the engineer is
(deservedly) likely to get a phone call and production may be delayed.

Therefore every interlock, when activated, needs to indicate that activation on the appropriate
Level 2 and 3 display. The strategy
Interlock Depiction D-101
may be different for those displays. Pre-Alarm has occurred psig
Controller is in Auto 2
For Level 2 displays, a small bank of and block valve is still Open

interlock symbols can be created,

with functionality as shown in Main Feed
Figures 24 and 34. An element next Feed1 Flow D-101
P 108.5 gph
to it can indicate the interlock action S 110.0 202.0
O 52.0 %
conditions. When an interlock Auto Open Open

becomes active, any element that Interlock Depiction

D-101
psig
it is affecting (such as a pump Pre-Alarm still in effect. Interlock
has Activated with alarm. 2 2
or control valve) should have the Controller is overridden to I
Manual and both valves
interlock symbol appear next to it. are Closed
I-57D

In this manner, the operator can Main Feed

I
Feed1 Flow I-57D D-101
clearly see which interlocks are
P 0.0 gph
in effect and what items they are S 0.0 222.0
O 0.0 %
affecting. Man Closed Closed

Figure 25: Interlock Before and After Activation

High Performance HMI 3.0 - Part 1 | Page 18

© PAS 2015
For Level 3 displays, a more
I W-1A I W-1B I W-1C
detailed view of the interlock can West Compressor Interlock Initiators Mech Flow Pres

be shown such as in Figure 26. Comp in Overspeed NO 1 Stg Pres is High YES
Winding Temp is High NO 2 Stg Pres is High YES
When active, the specific interlock
Vibration is High NO Suction Pres is Low NO
symbol can be displayed next to
Oil Pres is Low NO Total Flow is Low NO
each initiator signal and affected
West Compressor Interlock Actions
output. For Level 3 displays, an
W. Comp Shutdown NO Flow Cascade to Manual YES
interlock diagnostic element
Inlet Block Valve OPEN Maximum Flow Bypass OPEN
should be created, clearly Outlet Block Valve Maximum Cooling
OPEN NORM
showing the possible initiators E. Comp Override to 100% NO Winding Purge OFF
and possible actions taken by the
interlock. This does not have to
Figure 26: Interlock Diagnostic Table
be complicated; a table such as
the following can often suffice.

When an interlock shuts down a piece of equipment, a “First Out” indication is often desirable
since some of the other initiators may activate after the shutdown trip occurs. Figure 27 is a
simple example of a Shutdown “First Out” Table:

Compressor 43 Shutdown Initiators

Overspeed OK

West VIB >25 X 1.5 First Out

West Bearing Temp >220 160.3
East VIB >25 1.3
East Bearing Temp >220 155.3
Suction Pressure <20 X 12.3
Discharge Temp >240 148.7
Oil Pressure <10 X 3.3

Figure 27: Shutdown Initiator Table with First Out

Shortly after the compressor shuts down due to high vibration, the oil pressure also drops
which produces another shutdown initiator. As a result of equipment isolation, the suction
pressure may also drop sufficiently to activate another shutdown initiator. Thus, by the time the
diagnostic graphic is consulted, three separate shutdown causes are present and the question
is – which is the original culprit? Two are a consequence of the immediately prior shutdown, and
the actual cause of the shutdown is shown via the “First Out.” The vibration reading depicted is
“currently” much less than the shutdown limit (since it quits shaking after the shutdown), thus
the high vibration indication (the “X”) needs to be latched until reset.

High Performance HMI 3.0 - Part 1 | Page 19

© PAS 2015
 Reactor 7 Startup
Startup Map
Temp 80
Consider the principle illustrated by Deg C 60
65.1
Figure 28. The roadmap for a proper 40
20
startup is clearly depicted and progress 0
is visible. (In this case, the trend lines Feed
20
Rate 15
“grow from the left.”) The roadmap MPH
10
21.1
reflects the proper rates and conditions 5
0
for temperature rise, staggered feed
8
Additive
introduction, and staggered additive Flow 6
MPH 4
introduction. It takes many pages of 6.9
2
written procedures to describe what 0
+30 +60 +90
this single diagram more clearly depicts.
The structure gives the operator proper Figure 28: High Performance Element Designed for Startup Use
situation awareness and shows not only
what has happened, but what is coming up next. A picture of a P&ID sprinkled with live values
can do none of this, yet startup graphic elements like this are extremely rare. People may say,
“But it costs money to design custom elements like this!” Yes, but we don’t save money by not
painting lane divider lines in our roads. A single poorly-executed startup often costs much more
than proper HMI development.

Navigation and Command Buttons

Multiple methods of navigation should be provided. The operator should be able to go up and
down through the hierarchy, side to side through the process, and call related details, trends,
and shutdown status displays from any graphic. This navigation capability should work with
all available methods provided by the DCS vendor – mouse or touch screen target selections,
keyboard keystrokes, context sensitive menus, or others.

Every screen (particularly Level 2) should have navigation targets to the most likely other screens
that the operator would access. When a P&ID depiction is used, any process line entering or
exiting the screen should contain a navigation link to the relevant graphic. Navigation buttons
or targets should be consistent
Navigation Buttons Faceplate or Special
Scrubber
Purpose Element
and simple (and not look
Main Menu Callup Buttons
Navigation identical to command buttons).
Target L2 Reactor M5 Pres Control
Most control systems provide
L2 Feed System APC pre-made navigation button
Non-navigation
depiction L3 M5 Agitator Product Change objects, including many that are
Tank Farm 2
L3 Analyzers Feed Change inappropriately colored, needlessly
3-D, and overly intrusive.
Figure 29: Navigation Buttons and Targets

High Performance HMI 3.0 - Part 1 | Page 20

© PAS 2015
The system and graphics should be configured so it is never necessary for the operator to type
in a point name or graphic name. Some DCSs have arrays of programmable keys, which can
be assigned to call up certain displays or combinations of displays. For systems that do not,
programmable key arrays are inexpensive on the computer accessory market.

Implementing an entire navigation structure in a single Windows-type pull-down hierarchical

menu (i.e., one with “sub-menus” that pop-out of the side) is generally not recommended,
particularly a structure more than two levels deep.

The Main Menu: It is desirable for the operator to have two-click access from any graphic to any
other graphic, to supplement any other navigation method used. Every graphic should have a
consistently placed “Main Menu” navigation button. It opens a simple text screen, logically and
hierarchically arranged, with one-click navigation links to all graphics.

Typical reserved control system menu bar and status area

Display Layout and

Faceplate Handling Reserved
faceplate
area,
desirable
Displays need a consistent “look and feel.”
Rectangular narrow
1/16th of
Different DCSs have unique embedded
Process screen
faceplate
structures and paradigms around the Depiction Area shown
location and type of navigation abilities,
faceplates, “change zones,” programmable Wider 16x9 screens Area for
keys, and similar items. These features should be used to navigation
enlarge the Process buttons or other
should be implemented in such a way Depiction Area useful fixed
information
as to comply with the principles of High
Performance displays. Typical reserved “status line” area

Figure 30: Typical Screen Layout

It is important to use these built-in abilities
to their maximum potential. It is inadvisable to attempt to make a “Brand XYZ” DCS look like a
“Brand ABC.” The results will usually be far from optimum.

Layout for a typical screen is shown in Figure 30. Screen layout usually includes these
elements:
● A top menu and status area shows a variety of information, such as screen and
alarm controls. This element is provided by the DCS manufacturer, is often
mandatory, fixed in size, and usually configurable in several ways.
● A bottom “status line” area, usually optional, depicts information about a selected
object, a command, or similar condition.
● A process depiction area is where the graphic is created.
● A reserved area for faceplates is provided. (This reserved area is a High
Performance practice.)

High Performance HMI 3.0 - Part 1 | Page 21

© PAS 2015
When screen objects are selected, additional information about them should be shown. This
is typically in the form of a faceplate popup. If the operator can interact with or manipulate
the object, the interface for that interaction is contained in the faceplate. A reserved area in
which the faceplate appears is important. It is undesirable for a faceplate to appear randomly
on the screen, obscuring the primary graphic, and then requiring it being manually dismissed
or moved. Reserved areas should be a rectangular area on the upper or lower right side of the
screen, or a narrow strip across the bottom or right-hand side.

The size of the reserved faceplate area is determined by the brand of DCS. Ideally, faceplates are
tall and narrow. This provides for placing them adjacent to the right-hand edge of the graphic,
leaving a large, contiguous, mostly rectangular area for the process depiction. But, some DCSs
have faceplates that are large, square, clunky, and poorly organized, making a reserved area for
them difficult to accomplish. If you own such a system, encourage the manufacturer to move
into the 21st century and modify their standard faceplates.

Only one item on a screen should be selectable at a time. Any new selection on the screen
should replace any prior faceplate from a prior selection, without any manual “closing” of
the prior faceplate needed. On a few screens, it might be desirable to enable more than one
faceplate at a time.

Faceplates are usually supplied as standard elements by the DCS manufacturer. It may or may
not be possible to alter them, and they may not follow some of the principles you desire for
your HMI, such as proper and consistent use of color. However, rebuilding or replicating dozens
of standard faceplates from scratch to correct minor consistency issues may not be worth the
effort since future vendor software upgrades may override that work.

The faceplate should show the point name and description since point names should not
normally be shown on a graphic. Exposing even more configuration information (i.e., Level 4
“point detail” or configuration data) about the point should be possible from the faceplate
element. Faceplate interaction should not be modal (i.e., preventing other graphic action until
the faceplate is closed).

We have seen a presentation advocating that faceplate functionality (altering setpoints, outputs,
modes, states, etc.) be incorporated into the graphics themselves and the use of the standard
faceplate interaction eliminated. Now, as you can imagine, we are always open to evaluating
new ideas, but not every new idea is a good one! The claim is made that “it is speedier and the
operator might save fractions of a second per interaction that way, which will add up to maybe
several hours saved per year.” This is a bad idea, because huge amounts of additional custom
coding and its upkeep are needed and significant layout and consistency problems must be
addressed. Stick with faceplates.

High Performance HMI 3.0 - Part 1 | Page 22

© PAS 2015
Depending on DCS HMI capabilities, other methods for point information manipulation are
possible, such as right-click menu access.

64.2 C-42
22 %
Avoiding “Blob” Graphics
Some places have carried the gray-scale principle 65.1
too far and created extremely low-contrast “blob” 68.2

graphics shown in Figure 31. These are gray-on-gray, 70.5 107.56

typically without even thin black boundary lines 72.6

defining the various elements. These are a bad idea;

we have seen many operators squinting at these to 80 %
figure out what is happening. Graphics should be C-44

clear and unambiguous, and blob graphics are not

recommended. The key is to provide easy visibility
of elements but to reserve emphasis for abnormal
situations. Figure 31: “Blob Graphic” Elements
with Insufficient Contrast

Display Hierarchy
Displays should be designed in a hierarchy that provides progressive exposure of detail. Displays
designed from a stack of P&ID schematic designs will not have this; they will be “flat” like a
computer hard disk with one folder for all the files. This does not provide for optimum situation
awareness and control. A four-level hierarchy is desired.

Level 1 Note: Possibly More than one

Process Area Overview Display available,
Overview designed for significantly
Display different operating states

Level 2 Level 2 Level 2 Controllers,

Process Unit Process Unit Abnormal Values, Alarms,
Control Display Control Display Situation Tasks Trends, Status

Level 3 Level 3 Level 3 Smaller equipment

groups, Controllers,
Process Unit Process Unit Process Unit
Alarms, Values, Trends,
Detail Display Detail Display Detail Display
ESD Displays, Equipment
Status

Level 4 Level 4 Level 4 Interlocks, Details,

Diagnostics, “First-Outs,”
Process Unit Process Unit Process Unit
Procedures,
Support Display Support Display Support Display
Documentation, Help

For Each Overview Display, Multiple Level 2 Process Unit Detail Displays
For Each Level 2 Display, Multiple Level 3 Process Unit Detail Displays
For Each Level 3 Display, Multiple Level 4 Process Unit Support Displays

Figure 32: High Performance HMI Display Hierarchy

High Performance HMI 3.0 - Part 1 | Page 23

© PAS 2015
Level 1 – Operation Overview
5000 7500 1200
Unit 2 5000 1250 1200
15 5 3000
Overview
Steam Air Steam
05-31-14 KLBH KLBH °F
13:22:07 4100 5820 990
Total Fd Wtr Coal Reheat
Alarms KLBH KLBH °F
4580 980 1005
1 0 Drum Furn Steam
Lvl in. Pres psig
5 -0.5 -0.5 2400
2
0 0 600
3 8 0 0 600
-15 -45 -30 -15 1 HR -5 -45 -30 -15 1 HR 0 -45 -30 -15 1 HR

Status Alarms Pump Status Fan Status

PULV D-ON B-ON A B C D PUMPS A2 CWP A2 HWP C2 HWP A2BFPT A2 ECW A2 FD B2 FD A2 PA
E-ON H-ON AND ON ON ON ON ON ON ON ON
C-ON A-OFF E F G H FANS B2 CWP B2 HWP SUBFP B2BFPT B2 ECW A2 ID B2 ID B2 PA
F-OFF G-ON ON OFF ON ON ON ON ON ON

Turbine-Generator LPT-A LPT-B H2 H2 Turb Oil Stator Condenser-Feed Wtr HW Lvl Drum Lvl DA Lvl DA Wide Cond Hdr
Gross MW Net MW MVAR HZ in.hg in.hg psig °F °F GPM A2 BPFT B2BPFT in.H2O In. H2O in.H2O FT H2O psig
2

702.1 640.1 -5.2 60.00 0.2 0.2 49.1 104 115 351 3.1 3.1 20.1 -0.5 0.0 9.0 400
Auto Auto Auto Auto
Boiler BBD Econ Econ Gas Aux Stm Fans A2ID A2FD B2ID B2FD Econ Sec Air CEMS NOX SO2 CO Inst Air
A/F Ratio pH pH Out °F psig F. in.H2O Stall Stall Stall Stall % O2 in. H2O % Opac #/MMBTU #/MMBTU ppm psig
2

7.1 9.4 9.4 775 300 -0.5 25 25 25 25 6.0 7.0 21 0.45 0.9 200 90
Auto

Figure 33: Example Level 1 Display

This is a single graphic showing the operator’s entire span of control, the big picture. It is an
overall indicator as to how the operation is running. It provides clear indication of the current
performance of the operation by tracking the Key Performance Indicators as in Figure 33.

Level 1 Overview graphics are usually not designed for making control interactions (i.e., no
faceplate zone).

The Figure 33 example is from a large power plant. We often hear “But it doesn’t look like
a power plant!” Correct! Does your automobile instrument panel look like a diagram of your
engine surrounded by numbers? The display is designed so that it is easy to detect if the plant
is running well or poorly and that important abnormal conditions and alarms stand out clearly.

The Level 1 graphic is ideal for display on a large, perhaps off-console, monitor. Many have
purchased such large screens with little idea of how to make the best use of them.

High Performance HMI 3.0 - Part 1 | Page 24

© PAS 2015
Level 2 – Unit Control
Feed Composition Coolant: Cat. Purge Conv. Feed ADTV-1 ADTV-2 Temp Pres
%A %B %C GPM °C Act% MCFH Eff. % MPH MPH MPH
Product:Thionite State: Mid-Run RTAM: ON-OK Reserved
°C psig
Run Plan: Faceplate Zone
2
Actual:

I-5A I-5B I-5C SHUT When any item

I I I
Feed ADTV-1 ADTV-2 DOWN M5
on the screen is
I-5D I-5E I-5F selected, the
I Temp I Pres I Level FREEZE
faceplate for that
M5
item appears in
Interlock Actions:
Stop Feed OFF Max Cool OFF ISOLATE this reserved
80.5 15.5 4.0 80.5 15.5 4.0 80.5 15.5 77.5 11.9 4.0 45.0 112.2 Stop ADTV-1 OFF Max Vent OFF M5 area.
Auto Auto Auto Auto Auto Stop ADTV-2 OFF Max Circ OFF
All control
27 17 48 53
manipulation is
80.0 % % % % VENT SYS accomplished
Open 48 % through the
Feed 35 %
MPH
standardized
faceplates.
Open Open Open Open Lvl Prod Material Balance
OP % MPH In: 19.7 Out: 19.3
To Coils
72.0
-90 -60 -30 2 Hrs Reactor
Reactor M5
M5 Agitator IN OUT
4
ON
14.0 +10%
Analysis: Purity %
ADTV 40.0
Main Menu
1 0%
MPH
L2 M5 Startup
OP
-10% L2 M5 Scram
10.0
-90 -60 -30 2 Hrs 75.9 92.0 %DIFF
32.0 Auto Calc Diff: 2.1 % L2 Feed System
-90 -60 -30 2 Hrs 75.0
6.0 54.3% Hours: 238.1
ADTV Analysis: Inhibitor Concentration % L2 Prod Recovery
2 6.0
MPH L2 Compression

OP L2 RX Summary
2.0 PRODUCT ---- Level 3 ----
-90 -60 -30 2 Hrs Open 5.0 % 74.3 %
Daystrom Pumps
48.0 4.0 M5 Circ Pumps Needed: 1
-90 -60 -30 2 Hrs M5 Interlocks
Temp Pump A Pump B
°C 75.8 Backup Lvl % Running Stopped M5 Cooling Sys
Open
OP OK Fault M5 Vent Sys
40.0 3
-90 -60 -30 2 Hrs M5 Agitator

Figure 34: Example Level 2 Display of a Reactor

Every operation consists of smaller, sub-sectional unit operations. Examples include a single
reactor, a pipeline segment, a distillation train, or a compressor station. A Level 2 graphic exists
for each separate major unit operation. It is designed to contain all the information and controls
required to perform almost all operator tasks associated with that section from a single graphic
as shown in Figure 34.

Notice how the analog indicators and controllers are lined up for easy scanning rather than being
scattered all around a P&ID depiction. Ease of abnormal situation detection is an important
HPHMI design consideration.

When properly designed, most operator actions will occur at Level 2, and the Level 3 graphics
will be used only for more detailed troubleshooting.

High Performance HMI 3.0 - Part 1 | Page 25

© PAS 2015
Level 3 – Unit Detail
West Compressor
Reserved
20.1 psi MANUAL ACTIONS
Speed Tot Flow 1 Stg 2 Stg CLR In CLR Out Winding Faceplate Zone
OH EAST COMP
% MSCFH psi psi °C °C °C
WEST WC Speed IDLE PURGE
P 90.8 %
WEST WEST When any item
COMP S 90.0
OPEN O COMP COMP on the screen is
RUNNING 90.0 %
CAS selected, the
faceplate for that
111.0 °C item appears in
95.1 Oil psi this reserved
SHUT
ISOLATE area.
48.0 psi DOWN
WEST
65.0 °C 90.8 76.8 48.0 90.0 65.0 32.0 111 WEST All control
1st Cas Auto COMP
COMP manipulation is
Stage 20.0 °C accomplished
Inter- through the
cooler CW
standardized
44.0 °C 2nd 28.0 °C Flow Demand faceplates.
P 76.8 MSCFH FLOW-SPEED
Stage 32.0 °C EAST COMP S 76.0 CASCADE
O 88.5 % IN EFFECT
AUTO
OPEN 90.0 psi 48.4 MSCFH
RECOVERY
Main Menu
50.0 West Comp Discharge Temp °C 55.0 West Comp Flow MSCFH 95.0 West Comp Speed %
L2 Compression

L2 Recovery
---- Level 3 ----
Seq. Overlay

40.0 45.0 85.0 Startup Overlay

-90 -60 -30 2 Hours -90 -60 -30 2 Hours -90 -60 -30 2 Hours
West Interlocks
I W-1A I W-1B I W-1C
West Compressor Interlock Initiators Mech Flow Pres West Compressor Interlock Actions West Cooling
Comp in Overspeed NO 1 Stg Pres is High NO W. Comp Shutdown NO Flow Cascade to Manual NO East Comp
Winding Temp is High NO 2 Stg Pres is High NO Inlet Block Valve OPEN Maximum Flow Bypass CLOSED ---- Level 4 ----
Vibration is High NO Suction Pres is Low NO Outlet Block Valve OPEN Maximum Cooling NORM Logic Diagrams
Oil Pres is Low NO Total Flow is Low NO E. Comp Override to 100% NO Winding Purge OFF
Procedures

Figure 35: Example Level 3 Display

Level 3 graphics provide all of the detail about a single piece of equipment. These are used for
detailed diagnosis of problems. They show all of the instruments, interlock status, and other
details. A schematic or P&ID type of depiction is often desirable for a Level 3 display.

The Figure 35 example shows what could be created “from scratch” as a Level 3. Besides the
P&ID depiction, other HPHMI elements are included. In existing systems, most graphics are
actually Level 3. See the “HPHMI Implementation on a Budget” section in the Part 2 document
for guidance about this.

Level 4 –Support and Diagnostic Displays

Level 4 displays provide the most detail of subsystems, individual sensors, or components.
They show the most detailed possible diagnostic or miscellaneous information. A “Point Detail”
display is a typical example. The dividing line between Level 3 and Level 4 displays can be
somewhat gray.

High Performance HMI 3.0 - Part 1 | Page 26

© PAS 2015
Conclusion of the Part 1 Document
The principles of High Performance HMI are specifically developed to deal with the needs of
today’s operators regarding the complex systems they manage. A High Performance HMI is
designed to be the best tool for operator interaction with the process control system. It is
designed to maximize operator situation awareness and abnormal situation detection and
response.

In the separate Part 2 document, we provide case studies supporting that a High Performance
HMI accomplishes these goals. In addition, there is discussion of a major HMI-related advance
in the power industry, a review of HMI Standards, and an example Table of Contents of HMI
Philosophy and Style Guide documents.

High Performance HMI 3.0 - Part 1 | Page 27

© PAS 2015
About the Authors
Bill R. Hollifield, PAS Principal Alarm Management and HMI Consultant

Bill is the Principal Consultant responsible for the PAS work processes and
intellectual property in the areas of both Alarm Management and High
Performance HMI. He is a member of the American Petroleum Institute’s API
RP-1167 Alarm Management Recommended Practice committee, the ISA SP-
18 Alarm Management committee, the ISA SP101 HMI committee, and the
Engineering Equipment and Materials Users Association (EEMUA) Industry
Review Group.

Bill has multi-company, international experience in all aspects of Alarm Management and HMI
development. He has 28 years of experience in the petrochemical industry in engineering and
operations, and an additional 12 years in alarm management and HMI software and services for
the petrochemical, power generation, pipeline, pharmaceutical, and mining industries.

Bill is co-author of The Alarm Management Handbook, The High Performance HMI Handbook, and
The Electric Power Research Institute (EPRI) Guideline on Alarm Management.

Bill has authored several papers on Alarm Management and HMI, and is a regular presenter on
such topics in such venues as API, ISA, and Electric Power symposiums. He has a BSME from
Louisiana Tech University and an MBA from the University of Houston. In 2014, Bill was made an
ISA Fellow.

Hector R. Perez, PAS High Performance HMI Product Manager

Hector oversees the High Performance HMI business line at PAS. He is a

chief designer of High Performance graphics intended to facilitate situation
awareness in a variety of industries. At PAS, Hector oversees PAS software
directions to improve product design and capabilities.

Prior to working with PAS, Hector was a senior engineer at Schlumberger. His
strength in design contributed to his success in creating new and improved
HMIs for reservoir evaluation services and interfaces for business Key
Performance Indicator tracking.

In addition to his expertise in High Performance HMI, Hector has widespread experience in all
aspects of Alarm Management. He has facilitated numerous Alarm Management workshops,
conducted alarm rationalization projects, and developed Alarm Philosophy documents for a wide
range of clients in the petrochemical, power generation, pipeline, and mining industries.

Hector has authored technical articles on High Performance HMI. In 2009, he and Bill collaborated
with the Electrical Power Research Institute (EPRI) on a comparative research study evaluating
High Performance graphics and operator effectiveness. Hector holds a Bachelor of Science in
Chemical Engineering from Rice University.

High Performance HMI 3.0 - Part 1 | Page 28

© PAS 2015
References
API-RP-1165: Recommended Practice for Pipeline SCADA Displays, American Petroleum Institute
(2006)

Crawford, W., Hollifield, B., Perez, H., Electric Power Research Institute Operator HMI Case Study:
The Evaluation of Existing “Traditional” Operator Graphics vs. High Performance Graphics in a
Coal Fired Power Plant Simulator, Product ID 1017637 (2009)

Hollifield, B. Oliver, D., Nimmo, I., and Habibi, E., The High Performance HMI Handbook. PAS (2008)

Hollifield, B. and Habibi, E. 2006. The Alarm Management Handbook, 2nd edition. PAS (2010)

ANSI/ISA-101.01-2015: Human Machine Interfaces for Process Automation Systems, International

Society for Automation, August 2015

High Performance HMI 3.0 - Part 1 | Page 29

© PAS 2015
About PAS

PAS, Inc. is a leading provider of software solutions for process safety, cybersecurity, and
asset reliability to the energy, process, and power industries worldwide. PAS solutions include
industrial control system cybersecurity, automation asset management, alarm management, high
performance HMI, boundary management, and control loop performance optimization. PAS
solutions are installed in over 1,000 facilities worldwide with more than 40,000 users.

For more information, visit www.pas.com.

Connect with PAS on Twitter @PASGlobal or LinkedIn.

© PAS, Inc. 2015. Ideas, solutions, suggestions, hints and procedures from this document are the
intellectual property of PAS, Inc. and thus protected by copyright. They may not be reproduced,
transmitted to third parties or used in any form for commercial purposes without the express
permission of PAS, Inc.
High Performance HMI 3.0 - Part 1 | Page 30
© PAS 2015
 Maximize Operator Effectiveness:
High Performance HMI Case Studies, Recommendations,
and Standards
Part 2 of 2

A PAS White Paper

Version 3.0

Bill Hollifield
Principal Alarm Management and HMI Consultant, PAS

Hector Perez
High Performance HMI Product Manager, PAS

High Performance HMI 3.0 - Part 2 | Cover

© PAS 2015
 Table of Contents
Introduction and Overview ......................................................................................................................................................... 1
A Real World Case Study and Test of HPHMI Concepts ................................................................................................. 3
The Level 1 Overview .................................................................................................................................................................. 4
The Level “1.5” Pulverizer Overview Graphic ..................................................................................................................... 5
The Level 2 Pulverizer Control Graphics ............................................................................................................................. 6
Abnormal Situation Response Graphics ............................................................................................................................. 7
The Testing ..................................................................................................................................................................................... 8
The Results ..................................................................................................................................................................................... 9
PowerGraphiX TM
.............................................................................................................................................................................. 9
Paradigm Busting: The Pipeline Overview ............................................................................................................................ 13
A Review of HMI Standards ........................................................................................................................................................ 16
API-1165: Recommended Practice for Pipeline SCADA Displays ............................................................................... 17
.. ISA-101: Human-Machine Interfaces for Process Automation Systems .................................................................. 17
The PAS Seven Steps HPHMI Work Process ........................................................................................................................ 21
HPHMI Implementation on a Budget ...................................................................................................................................... 22
Conclusion ......................................................................................................................................................................................... 23
Typical Table of Contents of an HPHMI Philosophy and Style Guide ......................................................................... 24
About the Authors ......................................................................................................................................................................... 27
References ......................................................................................................................................................................................... 28

High Performance HMI 3.0 - Part 2 | Table of Contents

© PAS 2015
Introduction and Overview
The process control and automation industry has spent billions on improving process safety
via complex, instrumented systems. Yet, we continue to frequently see industrial incidents,
accidents, and fatalities in the news. The causes are generally not the failure of such automated
systems but are instead the result of a wide variety of human errors. PAS firmly believes that
addressing the causes of human error and the improvement of Operator Effectiveness is of the
highest importance. The proper use of such technologies as High Performance HMITM (HPHMI)
and Alarm Management can actually save lives and prevent injuries. Detailed information on
these should not be withheld, and that is why we offer this and other white papers freely.
They can also significantly lessen process upsets, improve process efficiency, and increase
productivity.

The human-machine interface (HMI) is the collection of screens, graphic displays, and other
technologies used by the operator to monitor and interact with the control system (typically
DCS or SCADA). Several major accidents, such as the Texas City refinery explosion in 2005,
have cited poor HMIs as a significant contributing factor. The design of the HMI plays a critical
role in determining the operator’s ability to effectively manage the operation, particularly in
quickly detecting and resolving an abnormal situation, which is the most important task of an
operator. A poor HMI can actively interfere with this ability.

For several reasons, the current designs and capabilities of most HMIs are far from optimal
for running the kinds of complex operations we have in industry. Most HMIs consist simply of
schematic or P&ID style graphics covered in numbers. Such displays provide the operator large
amounts of raw data but almost no real information. They are difficult to interpret and provide
inadequate situation awareness to the operator.

Since we published The High Performance HMI Handbook in 2008, improving HMI has become
one of the hottest topics in the automation industry. In that book, we explained exactly why
most current HMI practices were poor, and we put forth the proper principles and details for
making graphics significantly better. Many companies have adopted those principles and have
completed migrations to improved graphics. Many more have such efforts currently underway.

This two-part paper provides a history, justification, and detailed plan of action for the
improvement of a process control HMI. Here is an overview of the contents.

High Performance HMI 3.0 - Part 2 | Page 1

© PAS 2015
Part 1 (Separate Document)
Examples: We provide typical examples of common but poor HMIs, along with highly
detailed depictions of improved methods that provide for much better operator situation
awareness and control.

Principles: We cover the most important aspect of High Performance HMI, the display
of information to the operator rather than raw data. Many other necessary graphic
principles including the correct way to use color are provided. Depictions of detailed
graphic elements are included.

Hierarchy: HPHMI graphic designs must reflect a proper hierarchy – the exposure of
additional detail as needed. We include examples of graphics that illustrate this hierarchy,
along with the work processes used to design such graphics.

Part 2
Case Studies: Since the publication of our 2008 book, many projects have provided
for the development of real world case studies. We include two such studies in this
paper. The first was conducted by the Electric Power Research Institute (EPRI) but is
applicable to all types of process operations. The second shows how a major company
has improved performance and significantly lowered costs via company-wide adoption
of standardized High Performance graphics. This has led to a major HPHMI product
innovation for the power industry: PowerGraphiX™.

We also provide an example as to how “out-of-the-box thinking” can address HMI issues,
in the discussion of a Pipeline System Overview Display.

Standards Review: Two standards documents available on HMI are discussed, including
the ANSI/ISA-101.01-2015: Human Machine Interfaces for Process Automation Systems
released in August 2015.

HPHMI Work Processes and Implementation Guidance: The work process for HMI
improvement is described. We also address the most common issues encountered in
HMI improvement and cost effective ways to transition to High Performance graphics.

If your facility utilizes a process control system with a computer-based HMI, you will find this
information useful. This white paper augments the detailed content in The High Performance
HMI Handbook.

High Performance HMI 3.0 - Part 2 | Page 2

© PAS 2015
A Real World Case Study and Test of
HPHMI Concepts
The following section is taken from a study conducted by the Electric Power Research Institute
(EPRI).

Operator HMI Case Study: The Evaluation of Existing “Traditional” Operator Graphics vs. High
Performance Graphics in a Coal Fired Power Plant Simulator, Product ID 1017637

• Existing Overview

Figure 1: 1990s Graphics from the EPRI HPHMI Test

The EPRI study tested the HPHMI concepts in this paper at a large, coal-fired power plant. The
plant had a full and accurate simulator used for operator training. The existing graphics on the
simulator (created in the early 1990s) operated the same as those on the actual control system.
PAS was retained to prepare several High Performance graphics for the simulator. Several
operators were then put through multiple abnormal situations using both the existing and the
new High Performance graphics.

Four examples of the existing graphics are in Figure 1. They have the following characteristics:
● Many controller elements are not shown on any of the existing graphics.
● No graphic hierarchy.
● No Overview.

High Performance HMI 3.0 - Part 2 | Page 3

© PAS 2015
 ● Numbers and digital states are presented inconsistently.
● Poor graphic space utilization.
● Inconsistent selectability of numbers and elements.
● Poor color choices, overuse, and inconsistencies.
● Bright red and yellow used for normal conditions.
● Poor interlock depiction.
● No implemented trends (“trend-on-demand” rarely used by the operators).
● Alarm conditions generally not indicated on graphics – even if the value is a
precursor to an automated action.

The operators used dozens of such graphics to control the process. PAS prepared the following
High Performance graphics:
● Power Plant Overview (Level 1) – Figure 2
● Pulverizer Overview Graphic (Level “1.5”) – Figure 3
● 8 Individual Pulverizer Level 2 Control Graphic – Figure 4
● Runback 1 and 2: Special Abnormal Situation Graphics – Figure 5

The Level 1 Overview

5000 7500 1200
Unit 2 5000 1250 1200
15 5 3000
Overview
Steam Air Steam
05-31-14 KLBH KLBH °F
13:22:07 4100 5820 990
Total Fd Wtr Coal Reheat
Alarms KLBH KLBH °F
4580 980 1005
1 0 Drum Furn Steam
Lvl in. Pres psig
5 -0.5 -0.5 2400
2
0 0 600
3 8 0 0 600
-15 -45 -30 -15 1 HR -5 -45 -30 -15 1 HR 0 -45 -30 -15 1 HR

Status Alarms Pump Status Fan Status

PULV D-ON B-ON A B C D PUMPS A2 CWP A2 HWP C2 HWP A2BFPT A2 ECW A2 FD B2 FD A2 PA
E-ON H-ON AND ON ON ON ON ON ON ON ON
C-ON A-OFF E F G H FANS B2 CWP B2 HWP SUBFP B2BFPT B2 ECW A2 ID B2 ID B2 PA
F-OFF G-ON ON OFF ON ON ON ON ON ON

Turbine-Generator LPT-A LPT-B H2 H2 Turb Oil Stator Condenser-Feed Wtr HW Lvl Drum Lvl DA Lvl DA Wide Cond Hdr
Gross MW Net MW MVAR HZ in.hg in.hg psig °F °F GPM A2 BPFT B2BPFT in.H2O In. H2O in.H2O FT H2O psig
2

702.1 640.1 -5.2 60.00 0.2 0.2 49.1 104 115 351 3.1 3.1 20.1 -0.5 0.0 9.0 400
Auto Auto Auto Auto
Boiler BBD Econ Econ Gas Aux Stm Fans A2ID A2FD B2ID B2FD Econ Sec Air CEMS NOX SO2 CO Inst Air
A/F Ratio pH pH Out °F psig F. in.H2O Stall Stall Stall Stall % O2 in. H2O % Opac #/MMBTU #/MMBTU ppm psig
2

7.1 9.4 9.4 775 300 -0.5 25 25 25 25 6.0 7.0 21 0.45 0.9 200 90
Auto

Figure 2: Example Level 1 Display

High Performance HMI 3.0 - Part 2 | Page 4

© PAS 2015
The Overview graphic shown in Figure 2 (repeated from the Part 1 document) shows the key
performance indicators of the entire system under the operator’s control. The most important
parameters incorporate trends. It is easy to scan these at a glance and detect any non-normal
conditions. Status of major equipment is shown. Alarms are easily detected.

The operators found the overview display to be far more useful than the existing graphics in
providing overall situation awareness and also very useful in detecting burgeoning abnormal
situations.

The Level “1.5” Pulverizer Overview Graphic

The operator controls eight identical, heavily instrumented, and complex pieces of equipment
called coal pulverizers. At normal rates, seven are in use and one is on standby in case of a
problem. The seven that are running should be showing almost identical performance. It was
immediately apparent that an “Overview” graphic of just these eight items would be useful
to the operators, since much of their activity is in monitoring and manipulating them. Being
mechanical, they are subject to a variety of problems and abnormal conditions. There were
three separate existing graphics needed for monitoring and controlling each pulverizer, 24 in
total for them all. Monitoring using 24 graphics was difficult for the operators.

PULVERIZER OVERVIEW 08-15-2012 14:22:09

Pulverizer Status Coal Flow Trend Mill Amps Trend Diff Pres Trend Pri. Air Flow Trend Primary Damper
A B C D E F G H A B C D E F G H A B C D E F G H A B C D E F G H A B C D E F G H
Burn A A A A M A A A A A A A M A A A A A A A M A A A A A A A M A A A A A A A M A A A
Diag Maint
S S S 2 2
A ON
B ON
C ON
D ON
E OFF 3
F ON
G ON
H ON 113 112 0 112 42 42 0 43 8.0 9.1 0.6 8.5 204 204 0 204 75 78 76 75 51 50 75 55
102 113 113 112 43 44 43 43 9.8 9.0 8.0 8.3 233 205 205 205
74 45 74 74 50 50 65 51

S. Air Flow Trend North Damper South Damper C/A Temp Trend Hot Damper Cold Damper

A B C D E F G H A B C D E F G H A B C D E F G H A B C D E F G H A B C D E F G H A B C D E F G H
A A A A M A A A A A A A M A A A A A A A M A A A A A A A M A A A A A A A M A A A A A A A M A A A
S 2

204 204 0 204 75 78 78 75 0 50 75 55 75 78 78 75 30 50 75 55 135 135 277 135 75 78 78 75 40 50 75 55 75 78 78 75 50 50 75 55

205 205 205 205 135 135 135 135
74 77 78 74 0 50 76 51 74 77 78 74 30 50 73 51 74 77 78 74 40 50 65 51 74 77 78 74 50 50 73 51

16 140
Select B M1 M2 Diff Coal
Pres Flow
PSI KLB/HR
Main A A
Flame B B
C C
90 90
D D
Igniter
Flame E E
F F
Fuel Type: G G
GAS-1 30 30 H H
OFF OFF
SWG Valves OPEN NORM

Flm Mnt Mod OPEN NORM 2 Hrs 2 Hrs

0 1

Main Menu L1 Overview Runback 1/2 PULV A PULV B PULV C PULV D PULV E PULV F PULV G PULV H

Figure 3: The Level “1.5” Pulverizer Overview

High Performance HMI 3.0 - Part 2 | Page 5

© PAS 2015
The new Pulverizer Overview in Figure 3 depicts more than 160 measurements on a single graphic!
The key to making this understandable is that the devices are supposed to run alike. Instead of
blocks of indicators for each pulverizer being grouped together, the same measurement from
each pulverizer is grouped together. Any individual unit operating differently than the others
stands out. The unit that is in standby service also is easily seen. Air damper command vs. actual
positions, a consistent source of problems, is clearly shown.

Note that the trends seemingly violate our recommendation of showing no more than three
or four traces on a single trend. In this case, what the operator is looking for is any trend line
that is not “bunched in” with the others. For such a condition, having these eight traces was
acceptable. Note that the standby pulverizer’s trace is normally on the bottom.

Even with such a “dense” information depiction and with so many measurements, the operators
found it easy to monitor all eight devices and easily detect burgeoning abnormal situations. It is
easy to scan your eye across the screen and spot any elements that are inconsistent (Pulverizer
“B” in the depiction). Alarm conditions are also easy to spot.

Note that control actions are not taken on this screen but rather on the eight individual Level 2
graphics, one for each pulverizer. This graphic is “in-between” Level 1 and 2, as it is an overview
of a complex sub-part of the operator’s responsibility. The most common sources or problems
are depicted.

The Level 2 Pulverizer Control Graphic

PULVERIZER A – Level 2 05-31-2012 11:13:55
KLBH Diff-P Amps KLBH Damper % °F H.Dmp % C.Dmp %
“A” Coal Flow KLB/HR “A” Primary Air Flow KLB/HR “A” C/A Temperature
140 220 200

113.0 10.7 45 205.0 50.0 135 72.1 31.0

AUTO AUTO CAS AUTO AUTO AUTO
2 Hrs 115.0 2 Hrs 200.0 49.0% 130 70.0 30.0
40 120 0 2 Hrs
75.0% 65.0% 48.0% 71.2% 70.1% 27.8%
Flow Air-N Air-S N Damp S. Damp GAS PSI
“A” Sec. Air Flow (Total) Flame A1 A2 A3 A5 A6 A7 Reserved
900 Faceplate
Main Zone
Flame
90 88 90 91 91 94 When any item
ON ON ON ON ON ON
on the screen
is selected, the
Igniter
faceplate for
Flame that item
appears in this
Fuel Type: 30 30 30 30 30 30 reserved area.
Gas-1
OFF OFF OFF OFF OFF OFF
615.2 312 312 50% 50% 5.9
AUTO CAS CAS SWG Valves OPEN OPEN OPEN OPEN OPEN OPEN AUTO All control
600.0 50% 50% manipulation is
400 2 Hrs 10.0
60.0% 56% 42% Maint Mode NORM NORM NORM NORM MNT-B NORM 82% accomplished
through the
PULV “A” Sequence Blocked By: standardized
STOP PULV “A” PULV “A”
Status: STARTING faceplates.
Start Sequence All PA fans stopped or PAH stopped Group Trip Trip Valves
LTR oil press low or HDR VLV not open
Status Done Status Done Trip Status OK
Feeder inlet gate not open
IG HDR VENT CLOSED
Begin Sequence Ready Start Pulv Ready Pulv seal air diff press low
RESET
IG GAS TRIP CLOSED
Sec Air to L.O. Ready Start Feeder HOLD LTR atom air press low
Min boiler A.F. required PTR Status OK IG OIL TRIP CLOSED
Start Ltrs. Ready Pulv Tmp to Auto X Flame detected
BURNER VENT CLOSED
Pulv Grp Dmd Ready Rel Sec Air X Flame det clg air press lo RESET
Lube oil press low
Start PA Flow Ready Stop Ltrs X
Any Pulv group trip not reset Flame Status OK Open Swg
Open Swg Vlvs Ready Rel Pul Dmd X Valves
No coal on feeder belt
RESET
Any Seal Air blower stopped

Main Menu Pulv Overview Runback 1/2 L3 Feeder L3 Flame L3 Gas B C D E F G H

Figure 4: Level 2 Pulverizer Control

High Performance HMI 3.0 - Part 2 | Page 6

© PAS 2015
Rather than using the three separate graphics shown to control each pulverizer (24 graphics
total), a single Level 2 graphic for each pulverizer was created with everything needed to
accomplish all typical control manipulations.

While complex in appearance to the layman, the trained operator had no difficulty in
understanding and accessing everything they needed for pulverizer startup, shutdown, and swap
situations that arose during the test. Much of the text on the screen has to do with the status of
existing semi-automated sequences that sometimes require operator intervention. Everything
on the screen is selectable, and when selected the standard faceplate for the element appears
in a reserved “faceplate zone” rather than floating around the screen obscuring the graphic.
Element manipulation is made via the faceplate.

Abnormal Situation Response Graphics

The operator response for many abnormal plant situations is to cut rates by half, from 700MW
to 350MW. Called a “Runback,” this is a complicated and stressful procedure that takes about
20 minutes to accomplish. If done incorrectly or if important parameters are missed, the plant
can fall to zero output, a very undesirable situation. One of the main purposes of the simulator
was to periodically re-train the operators for this situation. The operators have to use more than
a dozen of the existing graphics to accomplish the task, involving a lot of navigation activity
around screen callups and dismissals along with control manipulation.

However, in more than a decade of such training, it had never occurred to anyone to design
special graphics specifically designed to assist in this task. This demonstrates the power of
inertia in dealing with our HMIs. Specific Abnormal Situation Detection and Response graphics
are an important element of an HPHMI.

PAS created two “Runback” graphics designed specifically to assist in this task. Every element
that the operator needed to monitor and control the runback situation effectively was included
on them. In use, the operators placed them on adjacent physical screens. Figure 5 shows
“Runback 1;” Runback 2 was similar. The reserved faceplate zone is on the lower right.

As a simple example of providing information rather than data, consider the trend graph at the
upper left of Runback 1. To be successful, the rate of power reduction must not be too slow or
too fast. The existing graphics had no trend of this, simply showing the current power megawatt
number. This new trend graph had the “sloped-line” element placed next to it, indicating the
ideal rate of power reduction, the full load zone, and the target half-rate zone. On the figure,
the actual rate of drop is initially exceeding the desired rate, and that condition is easily seen.
(Note: It would have been more desirable to have the sloped lines on the background of the
trend area itself, but the DCS could not accomplish such a depiction. This is a compromise, but
one the operators still found to be useful.)

High Performance HMI 3.0 - Part 2 | Page 7

© PAS 2015
 UNIT 2: RUNBACK Graphic 1 11-13-2012 14:22:09

750 3000 8
5
700

Main LPT-A
600 Steam 3.2
psig In.hg
Gross 2400
LPT-B
MW
3.0
562 Furn In.hg
Pres
20 Min in.H2O 20 Min
-0.5
400
20 Min
350 0
-0.5
300 0

Econ Sec Air A/F 7500 Reserved

Gross MW 562 TURBINE
MASTER MAN O2 % in.H2O Ratio 10 Faceplate
20 Zone
TRICON VERY TURBINE Air
LOAD RATE: FAST FOLLOW KLBH
7400
TRICON BOILER When any item
DEMAND: 100.0% FOLLOW Econ on the screen is
O2% selected, the
ACS COORD
DEMAND: 100.0% CONTROL
5.0 faceplate for that
Sec item appears in
Input new ACS this reserved
CONSTANT Air
DEMAND or
use buttons:
90.0% PRESSURE in.H2O area.
7.0
7.0 5.0 7.1
Decrease Increase VARIABLE Auto Auto 20 min All control
Load Load PRESSURE 0 manipulation is
7.0 5.0
0 accomplished
50% 50% through the
0
standardized
faceplates.
Boiler Fuel Main Steam Reheat Aux Stm Furn LPT-A LPT-B A2 B2 Drum Turb-X1 Turb-X2
Master Master psig degF degF psig in. H2O in.hg in.hg BPFT BPFT Top>Bot °F Mills Mills

2402 65.1
Auto Auto
2200 65.0
50% 48%

2400 1000 1000 300 -0.5 0.2 0.2 3.1 3.1 10 300 300

Main Menu Pulv Overview Runback 2 A B C D E F G H

Figure 5: Abnormal Situation Graphics – Runback 1

The Testing
Eight Operators, averaging eight years of console operating experience each, were used in the
test. They received only one hour of training with the new graphics prior to the start of testing.
(This was to address the common objection of “Changing our graphics would take months of
retraining!”) They were tested on four increasingly complex situations, each lasting about 20
minutes.
● Coal Pulverizer Swap Under Load
● Pulverizer Trip and Load Reduction
● Manual Load Drop with Malfunctions
● Total Plant Load Runback

All operators did all scenarios twice, using the old graphics alone, and the HPHMI graphics. Half
used the old graphics first (without having been shown the new graphics), and half used the
new HPHMI graphics first.

Quantitative and qualitative measurements were made on the performance of each scenario
(e.g., detection of the abnormal condition, time to respond, correct and successful response).

High Performance HMI 3.0 - Part 2 | Page 8

© PAS 2015
The Results
The High Performance graphics were significantly better in assisting the operator in:
● Maintaining situational awareness.
● Recognizing abnormal situations.
● Recognizing equipment malfunctions.
● Dealing with abnormal situations.
● Embedding knowledge into the control system.

Operators highly rated the Overview screen, agreeing that it provided highly useful “big picture”
situation awareness. Even with only one hour of familiarization with the new graphics, operators
had no difficulties in operating the unit. The High Performance graphics are designed to have
intuitive depictions.

Very positive Operator comments were received on the analog depictions, alarm depictions,
and embedded trends. There were consistent positive comments on how “obvious” the HPHMI
made the various process situations. Values moving towards a unit trip were clearly shown and
noticed by the operators.

The operators commented that HPHMI would enable faster and more effective training of
new operations personnel. The negative operator comments generally had to do with lack of
familiarity with the graphics prior to the test (which was intentional).

The best summary quote was this one:

“Once you got used to these new graphics, going back to the old ones would be hell.”

The effect of inertia being the controlling factor for HMI change was once more confirmed.
The existing HMI had been in use since the early 1990s, with simulator training for more than a
decade. Despite clear deficiencies, almost no change to the existing HMI had been made since
inception.

Operators using the existing graphics first in the test were then asked “What improvements
would you make to the existing graphics to help in these situations?” In response, there were
very few or no suggestions!

However, operators using the existing graphics after they used the HPHMI graphics had many
suggestions for improvement, namely analog depictions, embedded trends, alarm depiction,
consistent navigation, etc.

So, people get “used to” what they have – and do not complain or know what they are missing
if they are unfamiliar with these HPHMI concepts.

A lack of complaints does not indicate that you have a good HMI!

High Performance HMI 3.0 - Part 2 | Page 9

© PAS 2015
PowerGraphiX™
After the publication of The High Performance HMI Handbook, Southern Company, a major
United States power generation and distribution company, took notice of it. Southern Company
operates more than 280 nuclear, coal, oil, gas, biomass, wind, solar, and hydro generating units
at more than 75 power plants, with a combined capacity of more than 45,000 megawatts. They
are well known for their forward thinking and engineering approach to problem solving.

Southern had traditionally designed graphics much like others have. This was either using the
perspective of an engineer looking at the P&IDs, or by delegating graphics creation to operators,
who tended to arrange screens of numbers suiting their individual preferences. Neither of those
approaches led to a consistent or satisfactory end product.

In 2009, Southern suspected that there “had to be a better way” to present information to their
operators. Significant problems were being found as new projects were each being treated
as custom HMI implementations. Existing control rooms had significant screen and graphic
proliferation – with many plants having more than 500 different graphics used for control and
creating significant HMI maintenance problems.

An in-house study was made and identified these common deficiencies:

● Few internal standards were in place.
● Personal graphic preferences resulted in each control project being a custom,
inconsistent solution.
● Large HMI inconsistencies existed between identical plants.
● Significant retraining was required for personnel transfer.
● The over-abundant use of color incorporated in their graphics was not an aid to
the operator.
● Individually plant-customized graphics led to significant impacts to cost, schedule,
and consistency.

Southern concluded that the graphics portion of a controls project should be an “engineered
solution,” just like the rest of the project. After considerable research, they recognized that the
principles and design practices covered in The High Performance HMI Handbook dealt with all
the issues they identified and went beyond them. Managerial support of a major improvement

Figure 6: Original Control Room and How it Grew After DCS Conversion

High Performance HMI 3.0 - Part 2 | Page 10

© PAS 2015
effort was obtained. A test case project was chosen, involving a DCS conversion for two coal-
fired generation units. HPHMI Workshops were held and workgroups formed. Corporate-wide
operations experts designed template Level 1 and 2 graphics based on task analysis. The screen
layout was driven by the Operator’s thought processes. The goal was total fleet standardization
of High Performance graphics.

The test project was successful and then further proven in 17 plant conversions with more
underway. Operator response is positive:
● “I can see problems coming before they happen.”
● “You got it right.”
● “I didn’t like it at first, but I do now.”
● “I wish I had this when I was learning to operate.”
● “I can find what I need now.”
● “I don’t have to jump around between screens to operate.”

Figure 7: Control Room after HPHMI Implementation of PowerGraphiX™

The number of graphics used to control a plant was reduced from a typical value of 300-600 to
approximately 80. Southern Company has documented both performance improvements and
substantial costs savings in these areas:
● Improved operator situation awareness.
● Improved abnormal situation detection and handling.
● Reduced engineering time and cost for new plants, conversions, and
modernizations.
● Reduced hardware costs (fewer workstations).
● Reduced licensing cost for control system software.
● Reduced ongoing maintenance cost.
● Reduced ongoing cybersecurity cost (fewer workstations and licenses).
● Reduced training costs.
● Upsets avoided (anecdotal evidence and cases).

Now designated as PowerGraphiX™, these graphics represent thousands of hours of design,

improvement, and actual in-operation experience. The measurements and statuses shown on
each graphic have received highly detailed review and proof testing by experienced power

High Performance HMI 3.0 - Part 2 | Page 11

© PAS 2015
industry experts. The designs, layouts, and functionalities are the right choices for implementation
of a proper graphic hierarchy and HPHMI. They support maximum functionality for effective
operator monitoring and control.

The power generation industry is much more consistent in plant design than is the petrochemical
/ chemical industry. This makes it possible for advancements such as PowerGraphiX to be
incorporated much more easily and inexpensively by other companies. Southern and PAS
realized that making PowerGraphiX available to the power industry would benefit overall
operational effectiveness as well as safety.

To that end, PAS provides PowerGraphiX to the power industry. Here are a few of the many
features and benefits included in PowerGraphiX.

Features:
● Documented HMI Philosophy & Style Guides.
● Layouts and templates for Hierarchy Levels 1, 2, 3, & 4.
● Object Libraries.

Benefits:
● Reduced engineering time and cost (Note that it costs at least as much to
build or migrate a bad graphic as a good one.)
● Improved control system HMI consistency.
● Improved operator situation awareness and effectiveness.
● Effective use of large screen displays.
● Reduced ongoing HMI maintenance cost.
● Reduction in number of graphics.

These platforms are initially supported, and more are being developed. All product names are
property of their respective owners and used in this paper for identification purposes only:
● ABB Symphony Plus ®
● Emerson Ovation ®
● Emerson Delta-V ®
● Invensys FOX IA ®
● Honeywell Experion ®
● Alstom Alspa 6 ®

Plant Types:
● Coal Fired.
● Combined Cycle.
● Supercritical.

For more information on PowerGraphiX, visit www.pas.com/PowerGraphiX or email at info@

pas.com.

High Performance HMI 3.0 - Part 2 | Page 12

© PAS 2015
Paradigm Busting: The Pipeline
Overview
This is an example of the kind of out-of-the-box thought process involved in re-examination
of some of our HMI paradigms. The pipeline industry (including the water and wastewater
segment) typically involves a process network of pipelines and processing facilities spread over
large geographical area.
42.87
That industry has the typical P&ID-
11.55
covered-in-numbers approach to
60.02 21.43
graphics involving the facilities. 12.44

They also have usually developed 2.34

18.48
an “Overview” type of display.
17.36
32.17
The paradigm for that is as shown
40.56
in Figure 8, a map covered in 27.81
31.41
38.33 29.927
numbers. By now, you should
have guessed this!

Certainly some geographic detail

is relevant to the role of the
Figure 8: A Typical Pipeline Network Overview Display
operator in this case. But is all of
this detail relevant or helpful? Or is it a distraction? Is a map covered in numbers any better than
a P&ID covered in numbers? The question is – what would be better?

It is a great tradition in engineering to build on the work of others – to adapt and enhance
concepts that are successful in other domains. The trick is to have a wide enough view of
the topic to recognize an applicable
solution. It is to ask, “Has anyone else
solved a similar problem?” In this case,
the answer is yes, and in a big way.

A map of the very complex 1908

London Underground subway system
is shown in Figure 9.

Figure 9: The 1908 London Underground Map

High Performance HMI 3.0 - Part 2 | Page 13

© PAS 2015
The user of this map is the subway rider. It is not that easy to interpret, for the purpose of
figuring out the best route from your current position to the destination, using which subway
lines, and changing at which stations. And there is time pressure – you are looking at the map,
and the train has just pulled in next to you. Do you get on this one or the next one? Hurry!

It took about three decades for something better to be produced. In 1936, Engineer Harry Beck
came up with a radically different depiction. He determined these questions to be the key ones
for the subway rider:
● Where am I now (what station)?
● Where am I going (what station)?
● What lines service this station and where do they go?
● Where do I change trains?
● How many stops until my destination?

Even more importantly, he realized that there were many things that the subway rider did not
need to know:
● Am I going around a curve?
● Am I passing under a river or near another train line?
● What is the relative distance between stations?
● Am I traveling in a specific direction (N,S,E,W) in between stations?

Beck realized that depicting topology, and not geography, was the key.

In the revised map, every line is horizontal, vertical, or at 45 degrees – even the River Thames.
There is just enough geography and landmark depiction for the rider to orient their current
position and find their destination station. It is fast and easy to pick out an efficient route, even
for the novice rider.

Since 1936, the London

Underground has continued to
grow in complexity, but Beck’s
Paradigm still works. It has become
an iconic image, so functional that
it has been universally adopted.

How can this paradigm be adapted

to a Level 1 Overview display for
a pipeline network? There are
geographic cues important to a
pipeline operator.

Figure 10: Harry Beck’s 1936 London Underground Map

High Performance HMI 3.0 - Part 2 | Page 14

© PAS 2015
For example, the location of a station or spill relative to state lines can mean that different
regulations, reporting requirements, or emergency procedures apply.

Task analysis has shown these to be some important things for depiction:
● Important status conditions and alarms.
● Significant highway crossings.
● Significant waterway crossings.
● Neighborhoods if adjacent to pipeline.
● Important boundaries (i.e., state lines).
● Pressure profiles.
● Analog indicators showing station performance.
● Direction and content indicators.
● Important trends.
● Topology, not geography.

A conceptual Pipeline Overview Display with these elements is shown in Figure 11.

Altair 4 C1 OK C2 OK Mesklin C1 OK C2 OK Arrakis C1 OK C2 OK Trantor C1 OK C2 OK

I I I I C3 OK C4 OK I I I I C3 OK C4 OK I I I I C3 Fault C4 OK I I I I C3 OK C4 OK
C1 C2 C3 C4 C1 C2 C3 C4 C1 C2 C3 C4 C1 C2 C3 C4
C1 Outlet Vent C3 Outlet Vent C1 Outlet Vent C3 Outlet Vent C2 Outlet Vent C4 Outlet Vent C2 Outlet Vent C3 Outlet Vent
MCFH psi °F scfh MCFH psi °F scfh MCFH psi °F scfh MCFH psi °F scfh MCFH psi °F scfh MCFH psi °F scfh MCFH psi °F scfh MCFH psi °F scfh
3

228 660 112 156 302 670 125 212 259 635 133 115 202 558 110 108 238 658 127 116 402 523 114 72 218 675 108 126 302 453 104 61
Line Pressure Profiles Prod Leaks
2 1000
2 Kessel Run C57D OK
Frostbite Falls JUP2 OK
Total
C
Y
Flow
Fra Mauro RV12 OK
C
Brigadoon V35B OK
943
L MCFH
E Cannonball C182 OK
600
3 Mayberry C172 OK 665 630 627 615 609 592 560 545 523 481 -90 -60 -30 2 Hrs

Weyland-Yutani Pipeline Overview Hooterville Green Pixley Valve Positions

Acres
A11
Alarms 1 3 S Minbari
2 A12
Bodine River
Brigadoon 1 Hekate A13
Total 0 1 4 2
Pern 2 A14
Un-Ack 0 0 1
B11
Frostbite Falls 3
B12
Rama 4
B13
Shady
Cannonball Rest B14
Chindi
Arrakis Terminus J2
1 Mayberry
1 J7
2 2 Raisa R4
Additives
Gateway Armstrong Aldrin R5
3 3
4 4 Cernon R6 3
Fra Mauro 1 Trantor
R7
2
Mesklin Z51
Dantooine
Kessel Run 3 Z52
4 Cogswell Z53
Eddore
Altair 4 TX LA Main Menu
Tyrell LV-223 LV-426

Figure 11: A Conceptual Pipeline Overview Display

HMI design is not simply arranging objects from a library onto a screen. There is room for a
creative approach, as long as the proper principles are reflected in the design. When faced with
an unusual process depiction problem, look at how similar situations have been solved in other
areas, and then adapt them.

High Performance HMI 3.0 - Part 2 | Page 15

© PAS 2015
A Review of HMI Standards
Many readers of this white paper will already have The High Performance HMI Handbook and
may be curious about other HMI-related documents. In this section, we review the API-1165
Recommended Practice and the ISA-101 HMI Standard released in August 2015.

We need to be precise in our language when discussing standards. In this section, the term
“standard” applies only to a document that is produced in documented accordance with a
strict methodology that involves balance of interests, consensus, and a stringent review and
documentation process. Recognized bodies like the ISA follow these principles in issuing
documents they call standards. Other organizations (e.g., EEMUA) do not, and the documents
they produce are essentially books and reports, not standards.

When standards are issued by a recognized body, they acquire the status of being a “recognized
and generally accepted good engineering practice (RAGAGEP).” This clumsy acronym denotes
something very important, because regulatory agencies can and will cite the principle of
RAGAGEP as being enforceable, as a “catch-all.”

Standards are highly restricted in their allowable content. Standards intentionally describe
the minimum acceptable and not the optimum. By design, they focus on the “what to do”
rather than the “how to do it.” Standards intentionally do not have detailed or specific “how-to”
guidance – the kind of guidance that most people actually want or need, but that we do not
want to be mandatory. Standards do not contain examples of specific proven methodologies or
detailed work practices.

Other than The High Performance HMI Handbook, and this much expanded white paper, there
are very few authoritative documents that address process control HMI. Here is a discussion of
two of them.

API-1165: Recommended Practice for Pipeline

SCADA Displays
API documents are often considered as RAGAGEP by their regulatory agency, PHMSA (Pipeline
and Hazardous Materials Safety Administration). In 2006, API issued a document on SCADA HMI
displays. There are some significant inconsistencies within that document. Overall, the concepts
incorporated in the text portion of the document are valid. It mentions several good practices.
The examples provided, however, contain several depictions that are in direct violation of the
principles in the text.

High Performance HMI 3.0 - Part 2 | Page 16

© PAS 2015
For example, Section 8.2.4 states, “Color should State Background Foreground Example
Color Color
not be the only indication for information. That Normal Black Green 1234

is, pertinent information should also be available High-High Alarm Black Red 1234
High Alarm Black Yellow 1234
from some other cue in addition to color such as a
Low Alarm Black Yellow 1234
symbol or piece of text.” Low-Low Alarm Black Red 1234
Unknown Error Black Blue 1234
Yet throughout the remainder of the document,
examples are shown that routinely violate this
principle. Figure 12 shows only a few of the
“recommended practice examples” from API-
RP-1165. In many of these examples, only subtle
color differences, not distinguishable by a
substantial fraction of the operator population, are
the only means to distinguish a significant status
difference.

In one table, API-1165 recommends color coding

alarms by type. The well-known best practice is
that they are redundantly coded by priority, not
type.

Users of API-1165 are therefore advised to pay more

attention to the written principles it contains than
to the example depictions.

Figure 12: Sub-optimal Examples from API-RP-1165

ISA-101 Human Machine Interfaces for Process

Automation Systems
ISA-101 (officially ANSI/ISA-101.01-2015) was begun in October 2008, very close to the time that
the first edition of The High Performance HMI Handbook was published. PAS is a voting member
of the ISA-101 committee. In June 2014, a “final” draft of ISA-101 was sent out to the overall
committee for final comment and ballot. The draft was approved by vote but 1,163 comments
were returned and had to be resolved. In March 2015, the version reflecting those modifications
was sent out for a revote, which passed and the document was released in August 2015.
Understand that the ISA document is much more about the “work process” of creating and
operating an HMI and not the details of what makes for a good vs. poor HMI. Those that are
looking for such detail will be disappointed.

The ISA-101 document is relatively short, containing approximately 44 pages of content and
approximately 20 pages of introduction, definitions, and legal notice.

High Performance HMI 3.0 - Part 2 | Page 17

© PAS 2015
 CONTINUOUS WORK PROCESSES
MOC Audit Validation

ENTRY ENTRY

New System New Display

Major Changes Display Changes
SYSTEM DESIGN IMPLEMENT OPERATE Continuous
STANDARDS Improvement
Console Design Build Displays In Service
Philosophy

REVIEW
HMI System Build Console Maintain
Style Guide Design
Test Decommission

Toolkits User, Task,

Functional Train
Requirements
Commission
Continuous Display Design
Verification
Improvement

Figure 13: ISA-101 Example Life Cycle

ISA-101 contains consistent definitions of various aspects of an HMI. It has the typical text
principles of good graphics design, but these are constrained by what is allowable in a standard.
Standards are to provide the minimum acceptable, not the optimum. For example, ISA-101 can
make a statement like “Color should be used to direct attention and add meaning to the display.”
But ISA-101 does not contain anything like the example color palette of Figure 10 in this paper
(Part 1), nor should it. Such detail is not within the purview of a standard.

ISA-101 follows the usual Life Cycle approach of other ISA Standards. Life Cycle is a document
structure, not a project plan. An example of a Life Cycle for HMI development and operation is
supplied. It is mandatory to use some sort of life cycle process to administer an HMI. But the life
cycle shown in the document is labeled as an example and is not mandatory.

ISA-101 also makes it mandatory to place changes in the HMI under Management of Change
(MOC) procedures, similar to those that govern other changes in the plant and the control
system. The details of the MOC procedures are left to the user.

A reader with only brief and rudimentary knowledge of control systems and process control
HMI will find nothing new or unusual in ISA-101.

ISA-101 makes it mandatory to create “System Standards.” These are documents that govern the
design and creation of the HMI. These are the familiar HMI Philosophy, Style Guide, and Toolkit
(Object Library). It is mandatory to apply MOC to the Toolkit. ISA-101 has discussion of ways to
create these documents, but there are no examples. Brief descriptions of the contents of such
documents are provided (See the end of this white paper for a detailed Table of Contents listing
of a comprehensive HMI Philosophy and Style Guide). It is noted that the primary user of the
HMI is the operator and design should keep that in mind. There is a small bit of guidance about
the use of scripting logic and color.

High Performance HMI 3.0 - Part 2 | Page 18

© PAS 2015
There is a brief section on the determination of the tasks that a user will accomplish when using
the HMI and how those feed the HMI design process.

The activities listed in the ISA-101 life cycle are generally discussed in bullet list and table form.
It contains basic (and well known) recommendations such as these:
● The HMI should be consistent and intuitive.
● The information shown should be relevant to the operator.
● Color should not be the only indicator of an important condition.
● Colors chosen should be distinguishable by the operators.
● Auditory warnings should be clear and unambiguous.

There are no examples of proper and improper human factors design and no details such as
appropriate color palettes or elements. The only HMI examples in ISA-101 are in a survey-type
section providing a list of different types of display styles. Each style is accompanied by a small,
intentionally non-detailed example, typically of about one square inch in size. Figure 14 shows
a few of those examples in their actual sizes.

Figure 14: ISA-101 Example Images, Full Size

ISA-101 mentions the concept of display hierarchy with discussion of Level 1, 2, 3, and 4 displays.
Each has an example, and those have been made intentionally undetailed and simplified. The
descriptions of the different levels contain no unusual items. Here, for example, are the ISA-101
Level 1, 2, and 3 display examples.

The reader is invited to compare these to Figures 33, 34, and 35 in Part 1 of this white paper.

High Performance HMI 3.0 - Part 2 | Page 19

© PAS 2015
 Figure 15: ISA-101 Example Level 1 Graphic

ISA-101 finishes by providing brief descriptions of the following methods for interacting with an
HMI.
● Data entry in fields.
● Entering and showing numbers.
● Entering and showing text.
● Entering commands.
● Designing buttons.
● Using faceplates.
● Navigation – various common methods for navigating from one graphic to another
are discussed, such as hierarchical menus and navigation buttons.
● User access and security are briefly mentioned.

In ISA-101, user training in use of the HMI is mandatory. There is brief discussion of a list of things
that the training should cover, such as interpreting screen symbols, manipulating the controls,
and navigating from screen to screen. If non-operators are also expected to use the HMI, they
are expected to be trained as well.

Figure 16: ISA-101 Example Level 2 Graphic

High Performance HMI 3.0 - Part 2 | Page 20

© PAS 2015
 Figure 17: ISA-101 Example Level 3 Graphic

In summary, the publication of ISA-101 is an important step in the field of HMI. ISA-101 is a short
document containing some generally well-known and basic principles of HMI design. Its only
mandatory requirements are to have an HMI Philosophy, Style Guide, and Object Library, to
apply MOC to the HMI, and to provide for user training. ISA-101 contains no detailed examples
and does not provide detailed design guidance. For those, the reader will need to seek other
sources of expertise. ISA plans to create additional “Technical Reports” on ISA-101, but these
typically take from two to six years to publish.

The PAS Seven Step HPHMI Work

Process
There is a seven step methodology for the development of an HPHMI with more detail in The
High Performance HMI Handbook.

Step 1: Adopt a High Performance HMI philosophy, Style Guide, and Object Library. You must
have a written set of principles detailing the proper way to construct and implement a
High Performance HMI.

Step 2: Assess and benchmark existing graphics against the HPHMI philosophy. It is necessary
to know your starting point and have a gap analysis.

Step 3: Determine specific performance and goal objectives for the control of the operation
and for all modes of operation. These are such factors as:
● Safety parameters/limits.
● Production rate.
● Run length.

High Performance HMI 3.0 - Part 2 | Page 21

© PAS 2015
 ● Efficiency.
● Equipment health.
● Environmental (i.e., emission control).
● Production cost.
● Quality.
● Reliability.

It is important to document these along with their goals and targets. This is rarely
done and is one reason for the current poor state of most HMIs.

Step 4: Perform task analysis to determine the control monitoring and manipulations needed
to achieve the performance and goal objectives. This is a simple step involving
the determination of which specific controls and measurements are used to
accomplish the operation’s goal objectives. The answer determines the content of
each Level 2, 3, and 4 graphic.

Step 5: Design High Performance graphics using the design principles in the HMI philosophy
and elements from the style guide and object library to address the identified tasks.

Step 6: Install, commission, and provide training on the new HMI.

Step 7: Control, maintain, and periodically reassess the HMI performance.

HPHMI Implementation on a Budget

While desirable, it is not necessary to replace all (or any) of your existing graphics to obtain
much of the benefit of HPHMI. A partial implementation can provide most of the benefits with
minimum disruption. A partial implementation involves:

● ALL EXISTING GRAPHICS ARE KEPT ON THE SYSTEM. This eliminates almost all
objections to HMI improvement.
● Design and deploy new Level 1, Level 2, and Abnormal Situation Management
graphics designed with HPHMI principles. This is generally around 20 or so
graphics.
● Existing graphics can be designated as Level 3 (which is generally what they
actually are) and navigation paths to them altered.
● Improvements to those existing Level 3s (correcting color choices, adding status
indications, adding embedded trends, and providing proper context) can be made
over time as desired. Yes, there will be inconsistency between the HPHMI graphics
and the existing ones. But in examining hundreds of existing HMIs, we have yet to
find one that did not already have significant inconsistencies within itself.
Operators can handle this with no problem.

High Performance HMI 3.0 - Part 2 | Page 22

© PAS 2015
Experience has shown that the operators will begin to use the High Performance Level 2
graphics preferentially for normal operation and abnormal situation detection. Why? Because
they are BETTER for the purpose. They will use the existing Level 3 graphics for the detailed
troubleshooting purposes that they are most suited to support.

Any facility can afford about twenty new graphics! A High Performance HMI is affordable.

Conclusion
The most important job of an operator is to detect and successfully respond to an abnormal
situation. The HMI is the means by which the operator accomplishes this task. Existing HMIs
are woefully inadequate for this purpose. They were generally designed in an era when proper
practices were unknown, and the resistance to change has kept those graphics in commission
for two or more decades.

The principles of High Performance HMI are specifically developed to deal with the needs of
today’s operators and the complex systems they manage. A High Performance HMI is designed
to be the best tool for operator interaction with the process control system. It is designed with
these important capabilities in mind:
● Provision of an easily monitored overview of the equipment under the
operator’s control.
● Ease in maintaining full situation awareness of the span of a
large process.
● Early detection and clear depiction of abnormal conditions.
● Effective resolution methods for abnormal situations.
● Embedding easily accessible and relevant knowledge into the control system.

The benefits of such an HMI are more than just reducing human error and avoiding abnormal and
unsafe operations. The HMI becomes an effective operational tool for maximizing production,
reliability, efficiency, quality, and profitability.

Industry is now recognizing the need and benefits of improved HMIs. Dozens of major companies
are in the process of HMI modernization and see it as not only a safety initiative, but a cost-
saving and productivity-enhancing one as well.

The functionality and effectiveness of our process automation systems can be greatly enhanced
if redesigned in accordance with proper HMI principles. A High Performance HMI is both practical
and achievable.

High Performance HMI 3.0 - Part 2 | Page 23

© PAS 2015
Typical Table of Contents of an HPHMI
Philosophy and Style Guide
High Performance HMI Philosophy Example Table of Contents
Note: All sub-sections are not shown.

1.0 Introduction
1.1 Purpose and Use of a High Performance HMI Philosophy
1.2 Purpose and Function of the Operator HMI
1.3 Common but Improper HMI Practices
1.4 Functional Description of HMI Elements
1.5 Level 1 Process Area Overview Display
1.6 Level 2 Process Unit Control Display
1.7 Level 3 Process Unit Detail Display
1.8 Level 4 Process Unit Support Display
1.9 Special Purpose Graphics for Specific Abnormal Situations
1.10 Display Content
1.11 Display Layout
1.12 Display Navigation
1.13 Alarm Management Features
2.0 HMI Design Process
2.1 Step 1 - Adopt a High Performance HMI Philosophy, Style Guide, and Object
Library
2.2 Step 2 - Assess and benchmark existing graphics against the HMI Philosophy
2.3 Step 3 - Determine specific performance and goal objectives for the control of
the process
2.4 Step 4 - Perform task analysis to determine the control manipulations needed
to achieve the Performance and Goal objectives
2.5 Step 5 - Design and build High Performance Graphics using the design
principles in the HMI Philosophy and elements from the Style Guide and
Object Library, to address the identified tasks
2.6 Step 6 - Install, commission, and provide training on the new HMI
2.7 Step 7 - Control, maintain, and periodically reassess the HMI performance
3.0 Purpose and Use of an HMI Style Guide and Object Library
3.1 DCS Specificity
3.2 Object Library Contents and Usage
4.0 HMI Performance Monitoring and Ongoing Assessment
5.0 HMI Management of Change (MOC) and Maintenance
6.0 Control Room Factors
6.1 Control Room Design Factors
6.2 Control Room Work Practices
6.3 Operator Console Design
6.4 Operator Work Practices
6.0 References

High Performance HMI 3.0 - Part 2 | Page 24

© PAS 2015
High Performance HMI Style Guide Example Table of Contents
Note: All sub-sections are not shown.

1.0 Purpose and Use of an HMI Style Guide

2.0 Control System Specificity
3.0 HMI Development Work Process
4.0 Object Library – Description and Use
5.0 Display Concepts, Objectives, and Content
5.1 Level 1 Display – Process Overview
5.2 Level 2 Displays – Process Unit Operating Graphics
5.3 Level 3 Displays – Process Detail Displays
5.4 Level 4 Displays – Process Support and Diagnostic Displays
6.0 Global System Display Defaults
7.0 Operator Interaction Methodologies
7.1 Standard DCS Functionality Usage
7.2 Change Zones and Faceplates
7.3 Standard Display Templates
7.4 Point Manipulation and Faceplates
7.5 Window Management and Yoking
8.0 Display Layout
9.0 Navigation Methods and Practices
9.1 Programmable Buttons and Keys
9.2 Keyboards, Menus, and Tab-based Navigation
9.3 Target-Based Navigation
9.4 Pointing and Selection Devices
10.0 Basic Principles of Process Depiction
10.1 The Proper Role of the P&ID View Element
10.2 High Performance Display Elements
11.0 The Proper Use, Implementation, and Importance of Trends
12.0 Color Palette and Usage
12.1 Color Palette Definitions & Settings
12.2 The Role of Color in Situation Awareness
12.3 Designing for Color-Deficiencies: Coding Redundancy
13.0 Detailed Display Element Specification and Functionality
13.1 Depiction of Lines and Labeling
13.2 Depiction of Static Text, Lists, Tables, and Similar Structures
13.3 Vessels and Other Static Equipment
13.4 Depicting Dynamic Equipment
13.5 Depicting Analog and Digital Values
13.6 At a Glance Performance Indicators
13.7 Depicting Controllers
13.8 Device Position Feedback
13.9 Vessel Liquid Levels
13.10 Depiction of Point Names

High Performance HMI 3.0 - Part 2 | Page 25

© PAS 2015
 13.11 Temperature, Pressure, and Similar Profiles
13.12 Startup and Checklist Elements
13.13 Plan vs. Actual
13.14 Depicting Economic Constraints
13.15 Production Extrapolation
13.16 Dynamic Shapes and Elements Library
13.17 Data Input Mechanisms and Safeguards
13.18 Shutdown Activation Elements
13.19 Depicting Valves and Other Final Control Elements
13.20 Interlock and Logic Elements and Displays
14.0 Display Naming Convention & File Storage Naming/Pathnames
15.0 Alarm Functionality
15.1 Proper Configuration of the Alarm Summary Display
15.2 Proper Depiction of Alarms
15.3 Proper Settings for Audible Alarm Tones
15.4 Abnormal Condition Indications
15.5 Alarm Management Functionality
15.6 Alarm and Graphic Association
15.7 Operator Alarm Response
15.8 Depiction and Alarming of Instrument Malfunction
15.9 Alarm Shelving Depiction and Functionality
15.10 State-Based Alarming
15.11 Alarm Flood Suppression
15.12 Operator Alert System
16.0 Special Purpose Graphics
16.1 Startup and Shutdown Assistance
16.2 Expected Abnormal Situations
16.4 Product Change
16.5 Geographic Screens
17.0 Depiction of Programmatic Functionality
18.0 Display Call-up Speed and Performance Requirements
19.0 Advanced Process Control (APC) Application, Functionality, and Depiction
20.0 Standardized Abbreviations List and Engineering Unit Descriptors
21.0 Standard Tools and Display Creation Methodologies
22.0 System Backup
23.0 Management of Change
24.0 Standardized Abbreviations and Engineering Unit Descriptors

High Performance HMI 3.0 - Part 2 | Page 26

© PAS 2015
About the Authors
Bill R. Hollifield, PAS Principal Alarm Management and HMI Consultant

Bill is the Principal Consultant responsible for the PAS work processes and
intellectual property in the areas of both Alarm Management and High
Performance HMI. He is a member of the American Petroleum Institute’s API
RP-1167 Alarm Management Recommended Practice committee, the ISA SP-
18 Alarm Management committee, the ISA SP101 HMI committee, and the
Engineering Equipment and Materials Users Association (EEMUA) Industry
Review Group.

Bill has multi-company, international experience in all aspects of Alarm Management and HMI
development. He has 28 years of experience in the petrochemical industry in engineering and
operations, and an additional 12 years in alarm management and HMI software and services for
the petrochemical, power generation, pipeline, pharmaceutical, and mining industries.

Bill is co-author of The Alarm Management Handbook, The High Performance HMI Handbook, and
The Electric Power Research Institute (EPRI) Guideline on Alarm Management.

Bill has authored several papers on Alarm Management and HMI, and is a regular presenter on
such topics in such venues as API, ISA, and Electric Power symposiums. He has a BSME from
Louisiana Tech University and an MBA from the University of Houston. In 2014, Bill was made an
ISA Fellow.

Hector R. Perez, PAS High Performance HMI Product Manager

Hector oversees the High Performance HMI business line at PAS. He is a

chief designer of High Performance graphics intended to facilitate situation
awareness in a variety of industries. At PAS, Hector oversees PAS software
directions to improve product design and capabilities.

Prior to working with PAS, Hector was a senior engineer at Schlumberger. His
strength in design contributed to his success in creating new and improved
HMIs for reservoir evaluation services and interfaces for business Key
Performance Indicator tracking.

In addition to his expertise in High Performance HMI, Hector has widespread experience in all
aspects of Alarm Management. He has facilitated numerous Alarm Management workshops,
conducted alarm rationalization projects, and developed Alarm Philosophy documents for a wide
range of clients in the petrochemical, power generation, pipeline, and mining industries.

Hector has authored technical articles on High Performance HMI. In 2009, he and Bill collaborated
with the Electrical Power Research Institute (EPRI) on a comparative research study evaluating
High Performance graphics and operator effectiveness. Hector holds a Bachelor of Science in
Chemical Engineering from Rice University.

High Performance HMI 3.0 - Part 2 | Page 27

© PAS 2015
References
API-RP-1165: Recommended Practice for Pipeline SCADA Displays, American Petroleum Institute
(2006)

Crawford, W., Hollifield, B., Perez, H., Electric Power Research Institute Operator HMI Case Study:
The Evaluation of Existing “Traditional” Operator Graphics vs. High Performance Graphics in a
Coal Fired Power Plant Simulator, Product ID 1017637 (2009)

Hollifield, B. Oliver, D., Nimmo, I., and Habibi, E., The High Performance HMI Handbook. PAS (2008)

Hollifield, B. and Habibi, E. 2006. The Alarm Management Handbook, 2nd edition. PAS (2010)

ANSI/ISA-101.01-2015: Human Machine Interfaces for Process Automation Systems, International

Society for Automation, August 2015

About PAS

PAS, Inc. is a leading provider of software solutions for process safety, cybersecurity, and
asset reliability to the energy, process, and power industries worldwide. PAS solutions include
industrial control system cybersecurity, automation asset management, alarm management, high
performance HMI, boundary management, and control loop performance optimization. PAS
solutions are installed in over 1,000 facilities worldwide with more than 40,000 users.

For more information, visit www.pas.com.

Connect with PAS on Twitter @PASGlobal or LinkedIn.

© PAS, Inc. 2015. Ideas, solutions, suggestions, hints and procedures from this document are the
intellectual property of PAS, Inc. and thus protected by copyright. They may not be reproduced,
transmitted to third parties or used in any form for commercial purposes without the express
permission of PAS, Inc.
High Performance HMI 3.0 - Part 2 | Page 28
© PAS 2015
Become a Digital Industrial Company
GE Digital's portfolio overview

The operating climate for industrial companies has never

been more challenging. Consumer products manufacturers
are faced with cost volatility, shrinking profit margins,
and constantly changing buyer preferences. Heavy
equipment manufacturers are challenged with compressed
cycle times, increased price pressure, and demands for
customization. Oil and gas companies face intense pricing
pressure, knowledge attrition, and growing environmental
scrutiny. As a global industrial leader, GE faces these same
challenges every day.
In response, GE Digital is reimagining how industrial
companies, including many GE companies, operate
plants and deliver products—using data as the fuel and
advanced analytics as the growth engine. We embrace
the vision of the Industrial Internet and the promise
of driving disruptive, positive changes across the
industrial landscape.
“GE is truly on the path to digital transformation (DX). With the
announcement of GE Digital as a separate software division, Predix as
platform as a service in the cloud, and ready-to-roll asset performance
management, this manufacturing company is evolving. The company
has all the elements of DX that IDC believes are essential to success.
A commitment from CEO Jeff Immelt, a reworking of the operating
models, a focus on information, and a refreshing view toward sourcing
work with partners and developers are in the mix.”
Robert Parker, Senior Vice President, IDC

The Industrial Internet changes everything
Imagine a world where:
• Your factories are “brilliant”—giving you real-time visibility
and control over all manufacturing processes
• Your power plants replace scheduled maintenance with
just-in-time, predictive maintenance to prevent unplanned
outages
• Your industrial data, control networks, and applications are
protected from malicious software threats—automatically
and continuously
• Your analytic capabilities are infinite, and can be customized
using open tools and pluggable software services—allowing
you to minimize downtime, optimize performance, and react
to market changes with flawless agility
Services to accelerate your journey
While this is an exciting time for opportunity and growth,
the Industrial Internet can also bring on new challenges,
questions, and uncertainty. Specifically, how do you
get started? Or, what steps do you need to take to be
successful? No matter where you are on your journey,
GE Digital has the right services offering for you.
Use data-driven insights for optimized
performance
The starting point for your Industrial Internet journey is
getting connected to build “digital twins”—digital models
of your machines and processes. Sensors transmit data
from your industrial assets securely to your chosen storage
topology—edge/on-premises, Predix industrial cloud, or
hybrid. You can then use GE Digital's software suites for
Asset Performance Management, Brilliant Manufacturing,
HMI/SCDADA, and OT Cyber Security to gain insights that
allow you to optimize your assets and operations. You can
also create custom analytic applications by assembling
pre-built Predix software services and building new Predix
services from scratch.

This is the Industrial Internet. It is here now. It is powered by

GE's Predix, the operating system for the Industrial Internet. It
will change the face of global industries for generations to come.
Predix
The world's first Industrial
Internet platform
Created by GE to help transform its business, Predix—the
operating system for the Industrial Internet—is the only
solution built by industry for industry. From the edge to the
cloud, Predix turns data and intelligence into actionable
insights, and employs the latest innovation, including
digital twins, to optimize assets and operations. All this
is supported by a robust ecosystem that accelerates app
development.
“Like GE, Pitney Bowes is in the midst of its
own physical and digital transformation.
With APM apps running on the Predix cloud,
we're able to extract and analyze data from
our assets faster than ever, and use that
insight to drive real business outcomes
for Pitney Bowes and its clients. GE knows
industrial machines and related data
analytics better than anyone.”

Industry is reinventing itself for the digital age, and Predix Roger Pilc, Chief Innovation Officer, Pitney Bowes
makes it possible.

Connect your data Gain insights Optimize your operations

To help accelerate industrial transformation,
Predix connects every facet of your enterprise
and empowers your team with unparalleled
visibility and insights. It helps illuminate new
business models and revenue streams.
With Predix, you can revolutionize your business
with the ability to integrate assets and distribute
knowledge from edge to cloud. Predix helps you
orchestrate complex industrial data, seamlessly.
Predix enables you to build understanding to boost
performance and gain insights through sophisticated
modeling. You can envision the past, present,
and future with digital twins—helping you to fully
optimize your assets and operations.
Asset Performance Management
Enabling intelligent asset strategies
to optimize performance
GE Digital's Asset Performance Management (APM) suite
helps asset-centric organizations drive safer and more reliable
operations while facilitating optimal performance at a lower
sustainable cost by enabling intelligent asset strategies.
APM is capable of working across many types of assets
(rotating, non-rotating, and process), OEMs (GE and non-
GE equipment and machinery), and industries, across
the plant and across the fleet. Built on GE's Predix—the
operating system for the Industrial Internet—APM manages
collaborative workflows between experts and operational
teams. And, it balances cost, availability, and risk.
Connect your data
Machine & Equipment Health from GE Digital, part of our
APM suite, allows for the secure collection, intermediate
storage, backhaul, and administration of time-series and
enterprise data from external sources to edge/on-premises
and cloud-based APM applications—one time during setup
or continuously.
“APM is learning every time we start
the plant, every time we stop the plant,
every time we change load, every time
we change a fan on and off. Our entire
plant is being monitored by APM, which is
learning what a healthy system looks like,
and warning us when we deviate from that
healthy system status.”
Declan Lynch, Deputy Project Manager, Bord Gáis Energy
Gain insights Optimize your operations
Leveraging advanced data-management and predictive- Asset Strategy Optimization (ASO) from GE Digital, part of
analytic tools, APM unlocks the power of your data to reveal our APM suite, helps develop, implement, maintain, and
critical insights. With APM, you get an enterprise-wide optimize intelligent asset strategies to help you make the
and risk-based view of the impact of asset performance best decisions and maximize overall asset and operational
management activities to help you make the best decisions. performance. These strategies also allow you to continuously
improve and learn, automatically. ASO can increase asset
reliability and availability, reducing maintenance costs while
balancing equipment risk profiles.
Brilliant Manufacturing
It's time for the smart factory
GE Digital’s Brilliant Manufacturing is a suite of Predix-
powered software and services that helps manufacturers
optimize plant operations and compress cycle times between
market demand and production. Brilliant Manufacturing
applications can be securely deployed on-premises, on
GE's Predix industrial cloud, and in hybrid configurations.
Numerous GE manufacturing subsidiaries are actively
using Brilliant Manufacturing software to reduce machine
downtime and optimize operational efficiency.
“GE Digital’s Brilliant Manufacturing suite
has enabled significant reductions in
unplanned machine downtime resulting
in higher plant efficiency. As part of our
Digital Thread strategy, we will increase our
machines and materials connectivity by
400% in the coming year.”
Bryce Poland, Advanced Manufacturing Brilliant Factory
Leader, GE Transportation

Connect your data Gain insights Optimize your operations

Brilliant Manufacturing gives you a single, secure way to
gather data from a wide variety of assets and systems,
creating a comprehensive and validated data repository.
Brilliant Manufacturing applications then transform machine
data into actionable production efficiency metrics so that
plant managers can reduce unplanned downtime, maximize
yield, and increase equipment utilization.
Brilliant Manufacturing includes powerful applications for
managing production operations—including the control of
product flows between equipment—generating product
genealogy reports and scheduling changes to reduce excess
inventory. Applications provide full traceability of products
through every step of the manufacturing lifecycle.
Brilliant Manufacturing integrates production data with
information from ERP and PLM systems, allowing factories
to ship higher quality products while reducing the cycle
times and costs for new product introductions. Brilliant
Manufacturing enables manufacturers to track each serialized
item that moves through the production process, and view
the information needed to optimize routing decisions.
Manufacturers are able to understand real-time sequence
requirements and proactively manage the plant floor when a
sequence is broken.
HMI/SCADA
World-class automation software
for the smart operator
GE Digital’s HMI/SCADA suite helps customers in
manufacturing and infrastructure industries design and
implement real-time supervisory control applications. Trusted
by thousands of industrial businesses, GE Digital's proven
HMI/SCADA suite is used in wide-ranging applications from
discrete, hybrid, and continuous manufacturing to utility
distribution, generation, and extraction. These applications
leverage the latest technologies and can be deployed in a
variety of architectures, from a single system on an individual
packing machine or remote substation to complex central and
distributed network architectures that span multiple factories
and geographies.
Connect your data
GE Digital’s HMI/SCADA software enables fast acquisition
and consolidation of data directly from machines—and
works across a variety of OEMs—via an extensive suite of
I/O drivers and data processing capabilities. Each driver
is rigorously tested in our labs, with partners, and in the
field, ensuring that your device connections will be fast and
reliable.
“By providing real-time hydro station
information to our dispatch center, we’ve
significantly reduced our troubleshooting
downtime, in some cases by as much as
100%, as we can now see exactly when
and where the problem is occurring and
immediately provide a targeted response.”
Pierre Letarte, Process Control Superintendent,
Great Northern Paper
Gain insights Optimize your operations
HMI/SCADA applications include a robust, scalable SCADA HMI/SCADA enables fast, intelligent monitoring and control
engine that drives deep visibility into every aspect of your by giving operators advanced tools for detecting problems
industrial processes. Our HMI visualizations and analytics before they occur. HMI/SCADA applications provide a window
provide advanced situational awareness that allows your into your operations cycle—end-to-end—integrating complex
operators to supervise work across machines, in the control processes, analytics, and control into a single pane of glass.
room, and throughout your enterprise. Optimization of the entire operator experience reduces
downtime, waste, setups, and rework.
Wurldtech OT Cyber Security
Get on the path to operational
resilience
Wurldtech, part of the GE Digital family, provides operational
technology (OT) cyber security products and services to help
improve the security posture of both device manufacturers
and system operators.
Our award-winning OpShield solution was developed to
inspect network traffic and enforce policies to protect
industrial control systems. OpShield monitors and blocks
“We are very pleased to be working with
Wurldtech to protect our critical systems
around the world. They have unmatched
expertise and experience in this domain.
Wurldtech’s products and services are
trusted and integrated throughout our
global operations.”
Ted Angevaare, Global DACA Manager, Shell Oil Company

malicious activity and misconfiguration to ensure highly

available operations and secure productivity.

Connect your data Gain insights Optimize your operations

OpShield is easy to install into existing environments—
no network re-engineering or downtime is required. It
automatically identifies traffic on the industrial network
and enforces network security policies unique to OT
environments. In addition, Wurldtech provides a variety of
cyber security assessment services aimed at identifying
network vulnerabilities and improving OT security.
OpShield’s centralized management console provides a
graphical interface that allows system operators to easily
deploy security policies and vulnerability signatures. It also
offers a network-wide view of alerts and attacks. OpShield
gives operators visibility into network traffic and applications
across your connected production systems.
OpShield provides breakthrough drag-and-drop virtual
zoning for simple, non-invasive network segmentation.
In addition, security administrators can easily define
policies that whitelist specified traffic. Using OpShield,
organizations can optimize the security of OT applications,
networks, and processes.
About GE
GE (NYSE: GE) is the world’s Digital Industrial Company, transforming industry with software-defined machines
and solutions that are connected, responsive, and predictive. GE is organized around a global exchange of
knowledge, the “GE Store,” through which each business shares and accesses the same technology, markets,
structure, and intellect. Each invention further fuels innovation and application across our industrial sectors.
With people, services, technology and scale, GE delivers better outcomes for customers by speaking the
language of industry.

Contact Information
Americas: 1-855-YOUR1GE (1-855-968-7143)
gedigital@ge.com

www.ge.com/digital

©2017 General Electric. All rights reserved. *Trademark of General Electric. All other brands or names are property of their respective holders.
Specifications are subject to change without notice. 02 2017
iFIX 5.9 from GE Digital
Driving decision support for operators with high-performance visualization

Fourth-generation HMI/SCADA
increases efficiency and reduces costs
With just a glance, operators should be able to recognize which information
requires their attention and what action needs to be taken. They need to know
quickly what problems have arisen and how they can be addressed efficiently.
You can enable smart operators with new fourth-generation HMI/SCADA.
01 Speed operator response with modern
screens that facilitate situational awareness
iFIX 5.9 provides a new graphical engine that modernizes your HMI/SCADA.
Take advantage of a completely refreshed Workspace with features that
include anti-aliasing for picture shapes, time lapse playback for historical
data, updated ribbon bars and menu options, high performance graphics,
and more.

02
The new iFIX 5.9 from GE Digital leverages the latest technologies that help
Find information easily with a context-rich
deliver faster time to insight and greater efficiency for your operations while
HMI based on the model structure
speeding time-to-insight for system integrators.
This context-rich HMI changes as the user moves through the system.
iFIX 5.9 offers a new graphical engine to modernize your HMI/SCADA
Navigation is derived from the model structure built by the engineer. The
experience. Get an intuitive user experience to reduce execution errors
context follows the asset definition and is defined only once for a class of
and improve operator response time to events and incidents. This new
assets. This prescribed experience provides the operator with the most Designed to the Efficient HMI guidelines, iFIX 5.9 improves operator
generation of software combines proven HMI/SCADA capabilities—used by
relevant information—in context—and minimizes the effort to find it. decision making and speeds response.
thousands of organizations around the globe—with new advanced features

to deliver best-in-class results.
Outcomes
• Speed response with modern screens based on a powerful, new
graphical engine
• Reduce troubleshooting time with higher situational awareness,
using efficient HMI layouts and context-driven navigation based on a
model structure
• Enable action anywhere, anytime with native responsive web design
03
Reduce time to solution with
Efficient HMI out of the box
To help engineers create the right user experience, iFIX 5.9 contains pre-
defined objects and templates designed using Efficient HMI concepts.
Effective layouts are also available out of the box. Designing your HMI
has never been so easy, speeding time to solution and maintenance.
Additionally, iFIX 5.9 introduces a unique concept of flexible assembly of
graphical content using external HTML5 editors.
05
Save time with zero deployment clients
with centralized management
iFIX 5.9 is a true native web HMI. Web clients do not require any client
side installation. The configuration, development, and deployment are
all centralized, and any updates or changes are automatically reflected
on the clients. The clients can be initiated through a browser or kiosk
session and always start with the latest software updates deployed on
the server.

• Minimize maintenance time and costs with zero deployment clients

• Improve change management efficiency with centralized

development and deployment
04 Achieve visualization where you need
it with native responsive web design “iFIX is the easiest way to hook to a variety of things …
We haven’t found anything that iFIX couldn’t overcome.”
The HTML5 user interface produced using iFIX 5.9 offers native Web
• Enable superior design flexibility for consumption of third-party
out of the box and supports responsive design concepts. The displays John Franklin, Logic Systems Administrator,
HTML5 content
support multi-touch and can scale to adapt to various form factors and Arizona Electric Power Cooperative
orientations where the HMI will be viewed, from small to large high
resolution screens.
iFIX 5.9 from GE Digital
Driving decision support for operators with high-performance visualization

Hardware requirements Software requirements

Features
• Anti-aliasing/picture property SmoothShapes
improve picture quality
• Time lapse playback added to Global Time
Control
• High performance Dynamos and other features
at your fingertips for Efficient HMI
• Office 2016 themes and updated ribbon bars
• Never start with a blank sheet of paper, improve
efficiency by starting with a model
• Native Web HMI
• Structured asset model mapped to the SCADA
database
• HTML5 object library for a more efficient HMI and
HTML5 content generation from the workspace
• Base API to consume external HTML5 content
• Standard layouts and cards on topics such as
trends, alarms, KPIs, and more
• Multi-touch alarm and trend viewer
• Local, remote over LAN, WAN, or Internet
connections, including VPN
• Encrypted communication from your Web client
using SSL / digital certificate, IT security friendly,
and cloud ready
• A 2.0 GHz Intel Core2 Duo Processor or better
computer. For better performance, GE Digital
recommends a minimum 3 GHz computer with 4
GB memory or better is needed. Be aware that the
computer must be at least dual core; a single core is
not supported (with or without hyper-threading).
• A minimum of 2 GB RAM. For better performance,
please consider using more.
• A minimum of 10 GB of free hard drive space for iFIX
pictures, databases, alarm files, and other data files.
• Qualified HTML5 browsers
• One of the following operating systems:
–– Microsoft Windows 10
–– Microsoft Windows Embedded Standard 7
–– Microsoft Windows 8.1 (32-bit or 64-bit)
–– Microsoft Windows 7 (32-bit or 64-bit)
–– Microsoft Windows Server 2016
–– Microsoft Windows Server 2012 R2
–– Microsoft Windows Server 2008 R2
• Network interface software for TCP/IP network
communication and certain I/O drivers.
• An I/O driver for SCADA servers. GE Digital supplies
I/O drivers for many programmable controllers.

Hardware and software requirements are representative and may vary by customer deployment.
Please consult the product documentation for more details.

Today’s SCADA is not just monitoring and visualization

with alarms rolling in. iFIX 5.9 can optimize your
LEARN MORE
operations for active decision support—enabling your
team to achieve critical business outcomes.

Each window of the layout provides a different, interchangeable perspective,

or view, on the displayed asset to deliver a personalized experience.
iFIX 5.9 from GE Digital
Driving decision support for operators with high-performance visualization

Services Related products Continue your IIoT journey

In the world of Industrial Internet of Things (IIoT), organizations are able to GE Digital’s HMI and SCADA suite helps you precisely monitor, control, Transforming your business requires innovative foundational solutions
optimize productivity, reduce costs, and achieve Operational Excellence. and visualize every aspect of your operations, enabling operators to that lay the groundwork for optimized performance.
While this is an exciting time for opportunity and growth, it can also bring on
make the best decisions faster.
new challenges, questions, and uncertainty. No matter where you are on your
IIoT journey, GE Digital has the right services offering for you.
Workflow Cyber Security for OT
Advisory Services We can help you plan and start your IIoT journey in a way Guide operators with dynamic, Take the right actions to increase
that aligns to your specific business outcomes. interactive electronic work resilience, help ensure safety, and
instructions and eSOPs for maintain availability across your
Managed Services We can help you maintain your critical machines from more consistent operations operational technology (OT).
one of our remote locations around the world using model-based predictive- and optimized processes. 
analytic technology.
Batch Execution
Implementation Services Our experienced global Automation partners can Mobile With Batch Execution, gain the
implement a collaborative, multi-generational program that marries your Take industrial automation
security, flexibility, and ease of use
existing investments to the right enhancements and technology. to a new level, transforming
you need to reduce costs, increase
operational data into actionable
Education Services We specialize in education services to ensure that quality, and boost profitability.
information, accessible anywhere,
you’re leveraging our solutions to the fullest extent with our training and
anytime.
certificate programs.

GlobalCare Support Services Let us help by ensuring that your business

Historian
Plant Applications
continues to operate at its highest efficiency, all while mitigating risks to Optimize asset and plant performance
Maximize overall equipment
your investments. through time-series industrial data
effectiveness (oee), improve
production scheduling, and ensure collection and aggregation.
Ctber Security Services Our solutions provide industrial-grade security for a
product quality by leveraging real-
wide range of OT network and application topologies.
time production data
Predix
Innovate and transform your
About GE Contact business with the cloud-based
operating system for the
GE (NYSE: GE) is the world’s Digital Industrial Company, transforming industry with software-defined machines and solutions that are connected, responsive Americas: 1-855-YOUR1GE (1-855-968-7143)
and predictive. GE is organized around a global exchange of knowledge, the “GE Store,” through which each business shares and accesses the same technology, gedigital@ge.com
Industrial Internet, purpose-built
markets, structure and intellect. Each invention further fuels innovation and application across our industrial sectors. With people, services, technology and scale, www.ge.com/digital for industry.
GE delivers better outcomes for customers by speaking the language of industry.

©2016 General Electric. All rights reserved. *Trademark of General Electric. All other brands or names are property of their respective holders. Specifications are
subject to change without notice. 07 2017
iFIX from GE Digital—
Enabling the Smart Operator
Optimized for Active Decision Support
Expect More from Your
HMI/SCADA
Is your HMI/SCADA more than a passive partner, collecting
information, monitoring performance, and generating alarms?
Your HMI/SCADA should anticipate your operators’ needs,
delivering the precise information they need quickly and
intuitively to support the best possible decision-making.

That’s our vision for fourth-generation iFIX from GE Digital –

featuring the latest HMI/SCADA technologies that leverage
the power of the Industrial Internet. With just a glance at their
iFIX screens, your operators will be able to pinpoint issues
that undermine your productivity and determine the optimal
action to resolve them.

It’s the ability to provide active decision support that

distinguishes fourth-generation iFIX from traditional
HMI/SCADA, opening new doors to ever-higher efficiency,
reduced waste, and significantly higher performance.
HMI/SCADA Built for
Your Operator
Over the last 40 years, HMI/SCADA has gained steadily in
power and sophistication. It progressed from the inflexible
proprietary systems of the 1980s and the LAN-based,
I/O-centric systems of the 1990s to the network-based,
equipment-centric systems of the 2000s.

Now with fourth-generation iFIX, GE Digital is combining

a series of new approaches, including efficient HMI design,
structured asset-based modeling, advanced analytics, and
latest web standards, to build an HMI/SCADA that acts like an
extension of your operator.

Operator-centric HMI/SCADA is an idea whose time has come.

Unscheduled downtime and poor quality cost more than $20
billion a year in the North American process industry alone,
according to ARC Advisory Group. Forty percent of that is due
to preventable operator error. Reduce these errors and see a
significant gain in productivity and reliability.

“With high performance HMI/SCADA, operators are able to

quickly determine an abnormal situation and get to the root
causes of many issues. We help operators visualize a process
and make alarms very visible. We’re shaving the time it takes
for operators to act on a situation.”

Sergio Chavez, Automation Engineer, Los Angeles

Department of Water and Power
Efficient HMI
Smarter Visualization Makes It
Easier for Operators to Identify
Problems and Causes
 More is better—that used to be the rule for HMI/SCADA screens. Earlier generations
Benefits of Efficient HMI
of HMI/SCADA solutions were loaded with three-dimensional renderings and
According to findings from research GE
extensive color palettes, encouraging users to build elaborate screens that were
conducted that tracked eye movements
impressive in their realism.
and operator response, efficient HMI
improves operator performance in a
The latest findings from cognitive science point in the opposite direction. Complexity slows reaction time, number of ways:
diminishes situational awareness, and increases the likelihood of error.

At GE Digital, we approach this challenge in a number of ways. We simplified the HMI, adopting flatter objects • Less time spent navigating
and limiting the color palette to make the HMI/SCADA screen easier to read. We also created predefined
• Faster finding critical data
templates for processes, trends, and alarms that embody best practices in efficient HMI. These can be
combined in a variety of layouts to provide operators with different perspectives. • Improvements in alarm resolution success

And because screens are tied to a structured asset model mapped to the SCADA database, the HMI changes • Faster identification of relevant screens for an alarm
as the user moves through the system. With iFIX, operators have the situational awareness that’s crucial for
• Increases in usability
reacting quickly and making the best decisions.

“Ever since the introduction of GE Digital's iFIX at Pirelli, the system has been great to work with, which has encouraged us to
expand the system further and further to include new machines over time.”

Bernhard Munzert, Automation and Control Systems, Pirelli

Real-Time Information
Anywhere Anytime
HTML5 Implementation Gives
Operators On-Demand Support
Wherever They Go
Today’s operators are more mobile than ever before. Their work
often takes them out of the control room, onto the plant floor, and
to remote locations. But wherever they go, iFIX has them covered,
thanks to a native-web HMI based on the HTML5 standard.

HTML5 is compatible with most common browsers and supports

multi-touch applications. Thanks to its responsive design, it can
scale to adapt to the form factors, orientations, and capabilities
of displays that operators might use, from iPads and iPhones to
terminals and HTML-compliant panel boxes.

The advantages of native-web HMI go beyond the operator

interface. With iFIX, there is no need for client-side
installation. Configuration, development, and deployment
are all centralized, and any updates or changes are
automatically reflected in the clients.

With iFIX, you also have the system design flexibility to produce
your own HTML-based content that can be used to provide
additional information to the operator using our model context.
This extendable capability allows you to host information from
other systems, such as business applications and external web
content, in the same client layout, based on the equipment or
process on the display to further enable the operator.
Operational Analytics
Delivering Intelligent Warnings, Not Just Alarms
When equipment fails, industrial processes can slow or grind
to a halt. In the past, avoiding these failures meant observing
recommended maintenance schedules, a trade-off between
safety based on hypothetical norms and real-world efficiency.
Even though systems generated thousands of data points,
there was no way to use those points to determine the status
of system components.
Automation software from GE Digital approaches this
challenge from multiple perspectives. It employs real-time
multivariable analysis, rather than single-sensor equipment
protection, to filter out false alarms and to provide more
accurate and timely alerts.
With its analytic plug-ins for components like air handlers,
chillers and other equipment, our software brings to HMI/
SCADA the benefits of predictive real-time analytics—
algorithms that mine historical system data to guide
operators to the right preventive actions. Because it
is based on actual system performance, predictive
maintenance is more efficient than planned maintenance in
reducing downtime due to equipment failure or unnecessary
maintenance, while giving operators the insight they need to
optimize system performance.
The result: iFIX users have seen as much as a 33% increase
in operations capacity and 40% faster troubleshooting.
Integrated Work With integrated work processes and electronic Standard
Operating Procedures (eSOPs) delivered in iFIX through
Fourth-generation HMI/SCADA also bridges the gap between
operations and maintenance. When an out-of-spec event

Processes
Workflow from GE Digital, you can drive the right actions
globally every time. The benefits are substantial, helping you to:
• Reduce troubleshooting time and risk of making errors
Step-by-Step Instructions Make • Decrease downtime, maintenance, and costs
It Easier for Operators to Avoid • Capture knowledge of your best operators and reduce
takes place in the SCADA, operators can trigger a work
process to interface with the CMMS/EAM system, secure
a work order number, send specific instructions including
GIS location, and facilitate corrective action to remediate
the problem.

Mistakes training time

The result: real-time, condition-based asset performance
• Record and track work processes for compliance management.
Operators—as well as contractors and engineers—need
guidance, structured documents and common references,
at their fingertips, to ensure consistency, repeatability,
conformance to standards, and accountability.

“iFIX has done an excellent job over the years and continues
to be one of the most solid and flexible SCADA platforms on
the market.”

Lars Peter Larsen, System Specialist,

Copenhagen Airport

“When new operators come in, they are able to know how the
system works – to be able to adjust the treatment process for
swings without impacting quality.”

Fred Haffty, Wastewater Facility Manager,

City of Haverhill Water and Wastewater Division
Highly Extensible
Architecture Maximizes
Your Options
The iFIX distributed client/server architecture incorporates
any combination of distributed servers and distributed clients,
providing maximum flexibility for system design. Deployment
possibilities range from a single computer running iFIX in a
stand-alone HMI application to a large networked system
with many distributed clients and servers. But no matter
how complex the application, iFIX appears as a single,
high-performance integrated system.
iFIX 5.8 R2
Our latest release—iFIX 5.8 R2—captures all the benefits of
fourth-generation HMI/SCADA: efficient HMI, structured asset
model, operational analytics, and on-demand support.

To Learn More

Visit www.ge.com/digital/products/ifix

©2016 General Electric. All rights reserved. *Trademark of General Electric. All other brands or names are property of their respective holders.
Specifications are subject to change without notice. 08 2016
Make Every Operator In Your Plant A Hero
Fall 2017 Technology Fair

Matthew K. Wells
VP – Digital Product Management
GE Digital

© GE Digital
GE Digital Mission

GE for GE GE for Customers GE for World

Supplier Customer

Productivity Apps Platform

• Digital thread • Outcomes for customers • Enable industrial companies
• Digital twin • Optimize GE machines • Predix industrial operating
• Predix Analytics • Industrial apps portfolio system
• Services Transformation • Industrial-focused security

OWWA - Fall 2017 Technology Fair | © GE Digital

 Monitor many
Today’s Challenges
Ensure 24x7 operations &Optimize geographically
Capacity dispersed assets

Reduce Risks
Control Effluent
Quality & Avoid
Penalties

Drive down operational costs

(Energy, Chemicals, …)

Empower a lean workforce

OWWA - Fall 2017 Technology Fair | © GE Digital

 PEOPLE

PROCESSES ASSETS

OWWA - Fall 2017 Technology Fair | © GE Digital

Workforce Issues

“Overall, how prepared do you think

the water sector is to address issues
related to talent attraction and
retention in the next five years?” Fully prepared
1% Not at all
Very prepared
prepared
6%
17%

Moderately
prepared
39%
Slightly prepared
37%

Source: 2017 State of the Water Industry Report, The American Water Works Association

OWWA - Fall 2017 Technology Fair | © GE Digital

Taxonomy of Human error

MISTAKES SLIPS

Knowledge Rule

Interpretation Plan
Stimulus Action
Evidence Situation Intention of Execution
Assessment Action

LAPSES &
MODE ERRORS Memory

Source: Steve Kass, University of West Florida

OWWA - Fall 2017 Technology Fair | © GE Digital

How to make the Operator a Hero?

Empower each operator with the tools that will

make him your best operator

OWWA - Fall 2017 Technology Fair | © GE Digital

#1 Efficient HMI
Layouts that facilitate Situational Awareness
OWWA - Fall 2017 Technology Fair |

© GE Digital
HMI design process,
a High Performance mindset

1. P&ID, following standard color palette

Start to simplify the interface - Create new face to the HMI Beginning the High
Performance Graphics
2. Confirm standard navigation

Use the ISA S88/S95 Equipment Model

process by defining:
• Philosophy
3. Enable card style control areas of each Process

Start to build library of objects for easy rollout

• Style guide
• Toolkits
4. Alarming Philosophy

Alarm rationalization that will help notify on the most Critical Focus on how a “new”
5. Enable Full KPI cards
HMI would operate
Transform the information that helps the operator
understand the process with a glance

OWWA - Fall 2017 Technology Fair | © GE Digital

Customer Example - San Luis Obispo, CA

Mobile Scaling Poor

Difficult to
Troubleshoot
Screens
Overcrowded

Alarms Unclear

Colors have
no meaning

OWWA - Fall 2017 Technology Fair | © GE Digital

BEFORE AFTER

OWWA - Fall 2017 Technology Fair | © GE Digital

Provides all current High Performance Dynamos
& other features at your fingertips for efficient HMI

OWWA - Fall 2017 Technology Fair | © GE Digital

Screen Levels*

Details – usually control

Procedures & Help,
Overview Process Unit Overview focused displays (Loops,
Diagnostics
Alarms, etc.)

Level 1 displays: Level 4 displays:

broad scope focused scope

* As defined by the ISA 101 Standards

OWWA - Fall 2017 Technology Fair | © GE Digital

Overview screen - San Luis Obispo, CA

14

OWWA - Fall 2017 Technology Fair | © GE Digital

Efficient navigation
Level 1 displays:
broad scope

Line
Display 1-click

Line Line
Line
Trends Alarms KPIs
& Events
Asset
Display

Level 4 displays:
focused scope
• The data model drives the navigation
• Navigation in Context Asset Asset Asset
Trends Alarms KPIs
& Events

OWWA - Fall 2017 Technology Fair | © GE Digital

Key Outcomes

• less time spent navigating

• faster finding critical data on screen
• improvement in alarm resolution success
• faster to identify relevant screen for an alarm

OWWA - Fall 2017 Technology Fair | © GE Digital

#2 Increase productivity with

mobility

OWWA - Fall 2017 Technology Fair |

© GE Digital
Operator from the 1980s patiently A mobile workforce is 30%
acknowledging alarms … more efficient!

OWWA - Fall 2017 Technology Fair | © GE Digital

Real-time visibility across your operations

The right information to the right from any

anywhere, anytime person device

Exec Manager

Opps
Manager

IT / Operator / Quality Maintenance Process

Manuf. IT Supervisor Manager Manager Engineer

A single version of the truth

OWWA - Fall 2017 Technology Fair | © GE Digital

#3 What should be addressed first?

Filter noise and guide the right

response
OWWA - Fall 2017 Technology Fair | © GE Digital
Alarms filtering allows for a 60% reduction* of
the number of alarms presented to the operator!

• By Role
E • By Area
• By Asset Type
* Customer interviews C • By Severity
F
D
H G

A
B Drive the right
action!

OWWA - Fall 2017 Technology Fair | © GE Digital

Additional Alarm Management
Enhancements to standard iFIX alarm functionality

Enhanced Alarm List

Disabled Alarm List
Off Normals List

OWWA - Fall 2017 Technology Fair | © GE Digital

#4
Digitize procedures to ensure
consistency, repeatability,
conformance to standards &
accountability on task completion

OWWA - Fall 2017 Technology Fair |

Structured documents & a common reference ensure
Consistency | Repeatability | Conformance | Accountability

Digitize work procedures - Don’t miss any important data related to manual activities

Quality Manager

Alarm
Response
PMs
Technician Operator
Mgt
Work
Instructions

Maintenance Policies Lab

SOPs

Security
Engineer

OWWA - Fall 2017 Technology Fair | © GE Digital

 #5 Advanced
Analysis

“The system gives me information about an upcoming

issue, and it tells me what to do to prevent it!”

OWWA - Fall 2017 Technology Fair |

Time Lapse Playback
New option added to Global Time Control to enable historical playback.
Great to view how your facility responds to historical events frame by frame!

Works for every Historical Mode other than Current Value

Maximum 24-hour playback duration

OWWA - Fall 2017 Technology Fair | © GE Digital

 Solve multiple data streams

Traditional technique: Single-sensor equipment protection

Flow Alarm / Trip

Real-time, multivariable analysis Time Difference

Alarm Hi Dynamic Bands
Flow Alerts / Incidents

Pressure

Speed

Temp

See alerts before

Few false alarms Normal operation Early stages of damage
traditional alarms

OWWA - Fall 2017 Technology Fair | © GE Digital

A real-life example
Large paper plant on small river
CHALLENGE:
Strict BOD limits of waste water effluent released into the river
Advanced analytics provide 4 hourly BOD estimate with causes:
• Causes for BOD excursions
• Abnormal process inputs identification
• Bad quality inputs identification
BENEFITS / OUTCOMES
Avoid compliance penalties & associated production costs that can otherwise amount
to $100K’s annually

OWWA - Fall 2017 Technology Fair | © GE Digital

 Example - BOD* estimation

MEASUREMENT PREDICTION
Last available BOD sample Current BOD estimation

4-5 days

* BOD: Biochemical Oxygen Demand

OWWA - Fall 2017 Technology Fair | © GE Digital

Industrial Big Data Analytics

Digital Twin Model

Infrastructure
Automation Data Cataloging Process Data
Analytics
Optimization

Asset Model
Boundary Conditions Lifing Knowledge
Product Data Historical & Real Time Deep Learning Tracking Data
Time-phased Data Fill-in Missing Values
Virtual Sensors

OWWA - Fall 2017 Technology Fair | © GE Digital

Industrial Big Data Analytics

BIG DATA ANALYTICS FRAMEWORK*

DESCRIPTIVE DIAGNOSTIC PREDICTIVE PRESCRIPTIVE

ANALYTICS WHAT HAPPENED WHY IT HAPPENED WHAT WILL HAPPEN WHAT ACTION TO TAKE

Personnel Processes
Data Connectors as On-
Ramp to Predix
Equipment Materials

EXECUTION INDUSTRIAL AUTOMATION

LAYER HMI/SCADA for Supervisory & Control – Alarming – Real time process management

* LNS RESEARCH, 2016

OWWA - Fall 2017 Technology Fair | © GE Digital

Predix: Physics meets Analytics

Connected Edge Cloud Apps

Assets Predix SystemTM Application Services Visibility & Insights

Analytics Operations
Digital Twin ModelingSecurity
& Analytics

Asset Data Event Orches- Operati

Services Services Services tration ons

Data Connectivity & Ingestion

Dashboards

Predix Machine
Software /
Edge Analytics
Assets Operations Business
Enterprise Systems External Sources
(ERP, R&D, LIMS, etc.)

End-to-End Security
Feedback loop Feedback loop

OWWA - Fall 2017 Technology Fair | © GE Digital

Cloud Deployed Web HMI (Predix Apps Base)*

Local/Edge view Edge Cloud

Web HMI Predix SystemTM Application Services Predix HMI App
Visibility & Insights
Analyti
Digital Securit
Twin Modeling Operati
& Analytics
cs y Orch ons
Asset Data Event Oper
es-
Servic Servic Servic ation
tratio
es es es s
n
Data Connectivity & Ingestion

• Real-time animated remote viewing of assets, processes,

schematics, alarms, etc.
• Context Driven Navigation via Predix/APM Asset Model
• Accessible any where, any time
• Be able to collaborate with operators on site, through a
common view
A single pane of glass for your operations

* planned Q1 2018

OWWA - Fall 2017 Technology Fair | © GE Digital

 Make your Operator a Hero!
Drive the right behavior – every time, globally

1. Record and track actions for compliance & facilitate

knowledge transfer and ensure data & process
integrity
2. Identify problems & causes early, operators can
take the right actions, anytime, and anywhere.
3. Leverage Analytics & sophisticated automation to
send intelligent warnings and prevent mistakes &
problems before they occur

Decrease downtime & operations

costs

OWWA - Fall 2017 Technology Fair | © GE Digital

OWWA - Fall 2017 Technology Fair |
GE
Digital

The Changing Role

of the Operator
ENGAGING AND SUPPORTING THE OPERATOR OF TODAY INTO
THE FUTURE WITH ADVANCED SOFTWARE CAPABILITIES
INTRODUCTION
As businesses strive to gain a competitive
advantage from their operations, the way
operators perform their work has evolved.
Shifting from being purely functional to
highly analytical, operators have become an
increasingly critical part of today’s business
processes—significantly changing the way
businesses operate and adding more value
than ever before.
While operators of the past were trained to
function in their roles with in-depth linear
knowledge and to continually follow the
process within established guidelines, the
operator’s role has evolved significantly with
advancements in technology. Operators
are increasingly required to engage beyond
their traditional functional boundaries and to
collaborate within a cross-functional role for
increased business agility.
To advance operator effectiveness, the latest
software solutions enable operators to better
leverage information in both routine and
critical conditions for optimal decision making.
There is a growing need for tools that enable
them to collect, connect, analyze, and act
upon vast amounts of real-time operations
data, supporting a more engaged and
intelligent workforce.
The Operator of the Past However, this approach of having operators with only in-
depth linear knowledge is not sustainable in the competitive
The manual demands of yesterday’s operator required an in-
global marketplace and inevitably, the number of operators
depth knowledge of process and machine operations, as well
will diminish over time because employing a large number of
as of the systems that enable the process. These operators
specific experts is too expensive to develop and maintain.
often learned from previous operators, sometimes through trial
and error, and worked within a predefined set of parameters. As employers realize this, many now utilize a streamlined
team-based approach whereby workers are cycled through
They made decisions based on the way they were trained and
strived to comply with established guidelines and procedures to many jobs to not only enable knowledge sharing and continued
maintain status quo. There was a great deal of linear knowledge professional growth, but to also cover the lack of company
within these operators’ specific functions, where the boundary funding for expert operators for each step of the process. This
of much of their work would occur. has been effective for many companies, yet the adoption of
advanced software is key to further evolve their teams with
In many cases, the more operators an employer hired, the
greater efficiency.
better a system ran because each operator would focus on a
specific machine and/or part of the process that made him/
her an expert. One of the benefits to this approach is that the
operator’s deep understanding of the process and system
leads to quick problem resolution with a level of intelligent
understanding of the issues at hand.
As the role of the operator has evolved,
advanced software solutions can help
operators efficiently leverage analyzed
data from many sources, make objective
decisions based on complex, real-time
information, and collaborate within a
cross-functional role—enabling intelligent
problem solving.
Today’s Operator YESTERDAY'S OPERATOR TODAY'S OPERATOR a business wants to operate. The incredible volumes of data
The modern operator has evolved into a multi-faceted employee, collected from various systems can often lead to data collection
Follow the process based on Make objective decisions paralysis, whereby operators have too much to work with,
which has drastically increased the role’s responsibilities as a predefined procedures based on real-time data
“generalist,” solving problems in real time and not specifically without the ability to focus on what’s critical or to leverage
being an expert in merely one section of the process. Today, the Work within a linear, Work within a cross- meaningful information for optimized decision making. They
operator is one of the key members of the team, and enhancing
functional role functional organization need to be able to understand and act on the information
the efficiency of this role through improved operator response because in many cases, operators provide the management and
Maintain compliance with Contribute to driving
provides a critical advantage. set standards process changes engineering staffs with the reality of the plant floor based on
real-time and historical knowledge.
Operators need the ability to reason, plan, and solve problems Make independent decisions Leverage institutionalized
quickly, and to use a wide set of software tools to present based on training knowledge
Software systems have evolved to provide reliable visualization
data, collaborate, and automate advanced intelligent analysis. and control of devices, although there is a significant gap in
The right tools can provide quick, easy-to-use, and effective software tools in terms of the level of intelligence added to
increasingly critical to the team as they provide the first level
decision support needed to understand and troubleshoot both the data. Solutions that provide informational and analytical
of interpretation.
routine and upset conditions. Advanced features such as alarms, tools offer a key advantage because they can reduce the need
Software implementations that collect the right information for operators to interpret raw data, enabling them to be more
historical trending, and predictive analysis are helping operators are critical to enable focus on the areas that align with how
drive higher value of events and process information, increasing intelligent problem solvers.
productivity for businesses.
The adoption of software technology can drive operational
excellence by enabling operators to:
• Leverage analyzed data from many sources
• Make objective decisions based on complex,
real-time information
• Understand the system to solve problems quickly
and effectively

Optimizing Decision Making

With the introduction of decision-making software, more tasks
became automated, and the focus of operators shifted to
performing tasks across different systems. Massive adoption of
software tools such as HMI (human machine interface), SCADA
(supervisory control and data acquisition), MES (manufacturing
execution systems), and MI (manufacturing intelligence) has
resulted in significant volumes of data, with more alarms and
warnings being produced than ever before—making operators
Driving Operator Effectiveness and Intelligence
Operators need tools that help them engage so they can
leverage powerful analytics and intelligence for critical decision
making; automated analytics are equivalent to encapsulating
the knowledge of a process engineer into the software to
enhance the ability of operators to respond to real-time data.
They also need the ability to respond to real-time data made
available through mobile computing, instant connectivity, and
knowledge sharing software for faster, more focused reactions.
With operators increasingly becoming generalists, the
digitization of work processes to encapsulate specific
knowledge, as well as to ensure safe and repeatable operations,
is key to driving effectiveness. Highly advanced software
solutions can help businesses leverage their operators,
collectively share vital information, and automatically transform
data into information.
Advanced software solutions and platforms contain the features
and functionality to drive operator effectiveness and are
specifically developed with a focus on how operators interact
with the system, enabling more informed decision making.
Example features include:
• Added Attention and Focus – Replacing screens with
hundreds of data points, operators can leverage runtime
screens with contextualized help, automatic focusing scripts,
and enhanced process visualizations.
• Easy Sharing and Replay Functionality – Operators can
share data by email, capture moments in time, and record data
and screen activity for easy team collaboration.
• Web Interfaces – Operators can view, control, and
troubleshoot their system with full functionality from
anywhere, providing mobility that is vital for increased
productivity and collaboration.
• Historical Trending – Dynamic control of objects on the
screens enables operators to analyze issues, identify root
causes, and take actions to avoid future problems.
• Automatic Analytics – Analytic tools enable operators to
reduce their time to action via constant analysis into real-time
alarm information and comparisons against historical models
to direct the operator to what is wrong and why.
• Predictive Analytics – With intelligent preemptive alarm and
failure events, operators can proactively avoid process issues
and downtime.
• Alarm Response Management – With systems automatically
pushing standard operating procedures based on live alarms to
operators, companies can drive consistency and
quicker responses.
• Pre-Packaged Solutions – Software solutions that
preemptively define the inputs required and produce known
deliverables are key to driving quick value to operators.
A Look into the Future
Systems are now being deployed with heavy input from the
operator, moving away from being purely functional data
solutions into intelligent, analytical systems. IT and engineering
groups are increasingly looking for operator feedback on
initiatives and software purchases, and how the system
provides value-added information to users—not just data for
visibility. There is also increasing importance on collaboration
platforms and software that analyze and provide information
based on real-life data.
The need to transform data into information is essential as
many operators and technicians are nearing retirement age,
and thus, resulting in companies losing “operator knowledge”
as these retirees exit the workforce. Capturing this knowledge
will help existing operators leverage institutionalized
knowledge, decrease the need for training, and ease the
learning curve for new operators who will have little to no
guidance as they move into roles that require the ability to
reason and solve problems through objective decision making.
Future capabilities could include real-time chat, which would
enable operators to connect with remote engineering experts
on demand and allow them to view what they see on their
screens, much like a global social networking site within a
VISUALIZE
Present data for interpretation by operations
View alarms and warnings from processes,
assets or systems
corporation. By enabling operators to access experts directly
through their consoles, they would be able to leverage the
knowledge outside their local operations to quickly solve
problems and understand data with ease.
It’s also important to note that the gradual introduction of
software tools is key to the adoption of software systems to
enable knowledge sharing and increased operator effectiveness,
as proven by many companies that have successfully taken a
“layered” approach. The market has responded with layerable
products that complement each other, allowing operators
to adopt new systems gradually and ensuring quick wins for
businesses, as well as long-term sustainable value.
Lastly, the implementation of interoperability standards within
software suites is critical to achieving faster rollouts while
providing companies with greater flexibility on module selection
across vendors. Software vendors no longer require custom
coding to play well with others, as standards are continuously
being adopted to drive a point-and-click configuration
that significantly increases time to value and flexibility for
customers. As a result, companies can reduce rollout costs and
have the ability to choose the best modules available, regardless
of the vendor.
UNDERSTAND
Identify root causes and uncover data correlations
Leverage statistical models for predictive analytics and
causal relationships
Conclusion
No longer are operators simply working within their
traditional functional boundaries with established guidelines
and procedures to maintain status quo. They are increasingly
expected to leverage their knowledge to make objective
real-time decisions, which means they need a deeper
understanding of the various factors that impact their
operations and the ability to use that knowledge to improve
planning and problem solving with more proactive measures.
Holistic, scalable software solutions are garnering much
attention by businesses because they can add true value
to all levels of the organization with specific modules that
can be implemented over time—delivering quick, easy-to-
use, and effective decision support needed by operators to
troubleshoot issues and routine conditions.
Forward-looking businesses that recognize the value of
today’s operator have begun adopting advanced software
tools to support them as more intelligent problem solvers,
significantly increasing productivity and efficiency to gain a
competitive advantage.
EXECUTE
Deploy real-time work orders based on system data and
automatic intelligence
Document actions taken and incorporate into intelligent
analysis and share knowledge
ABOUT GE
GE (NYSE: GE) is the world’s Digital Industrial Company, transforming industry with software-defined
machines and solutions that are connected, responsive and predictive. GE is organized
around a global exchange of knowledge, the “GE Store,” through which each business shares and
accesses the same technology, markets, structure and intellect. Each invention further fuels
innovation and application across our industrial sectors. With people, services, technology and
scale, GE delivers better outcomes for customers by speaking the language of industry.

CONTACT INFORMATION
Americas: 1-855-YOUR1GE (1-855-968-7143)
gedigital@ge.com

WWW.GE.COM/DIGITAL

©2016 General Electric. All rights reserved. *Trademark of General Electric. All other brands or names are property of their respective holders.
Specifications are subject to change without notice. 06 2016
 OWWA Automation
Workshop 2017
Ignition by Inductive Automation
Travis Cox
Co-Director of Sales Engineering
Inductive Automation
 Agenda

• About Ignition
• Ignition Edge
• High Performance HMI
• Alarm Management
• Security
• The Future of IIoT
• The Future of Ignition
Ignition: Industrial Application Platform

Database-centric, 100% cross-platform, web-deployed

industrial application platform for HMI/SCADA/MES/IIoT
 Ignition: Industrial Application Platform

One Universal Platform for

HMI, SCADA, MES & IIoT

• Unlimited licensing model

• Cross-platform compatibility
• Based on IT-standard technologies
• Scalable server-client architecture
• Web-managed
• Web-launched on desktop or mobile
• Modular configurability (SDK)
Ignition: The Ultimate in Data Acquisition
Standard Architecture
Mission Critical
 New Release: Ignition Edge

A New Line of Lightweight, Limited, Low-Cost Ignition Products

 Ignition Edge Products

Edge Panel Edge Enterprise Edge MQTT

 Ignition Edge

Features: Benefits:
• Come with up to 500 tags • Mix and match products
• Are equipped with OPC-UA and • Plug-and-play functionality
drivers • Affordable bulk pricing
• Cross-platform and ARM-compatible
• Work seamlessly with Ignition
systems
• Offer guaranteed performance on
constrained devices
Ignition Edge Panel
Ignition Edge Enterprise
High Performance HMI
"In many cases, the HMI impedes
rather than assists an operator in
handling a process upset or
abnormal condition.”
– The High-Performance HMI Handbook
 Ignition: High Performance HMI

Built-in support for:

• Moving analog indicators
• Radar charts
• Sparkline charts (embedded trends)
• Alarm indicators
• Redundant coding
• Use of color
• Emphasis using size, position, and isolation
Example Before
Example After
 Ignition: High Performance HMI

Resources:
• Design Like a Pro: Optimizing Your HMI
• Design Like a Pro: Graphic Design Tips for Better HMIs
Alarm Management
Alarm Management Handbook
 Ignition: Alarm Management

Built-in support for:

• Naming and organization of alarms
• Alarm prioritization
• Alarm delays and deadbands
• Dynamic alarm properties & associated data
• Alarm acknowledgement
• Alarm shelving & disabling
• Alarm history, analysis, and notification (email, SMS, voice)
• Alarm consolidation (avoid floods)
• Alarm escalation
 Alarm Notification Pipeline Builder

• Conditional routing
• Splits
• Escalation
• Delays
 2-Way Notification

• Email (SMTP)
• SMS (hardware & Twilio)
• Voice (VoIP)
 SQL Support

• Any SQL database

• Alarm history
• Alarm statistics
• 3rd party reporting
support
 Ignition: Alarm Management

Resources:
• Design Like a Pro: Alarm Management
Security
 Security

Built-in features:
• SSL (HTTPS)
• Role-based security
• Security zones
• Active Directory and SSO
• Audit logging
• Designer security and permissions
• Client security and permissions
 Java Security

Java Development & Deployment

Java Plugin in Web Browsers

 Security

Resources:
• Security Hardening Guide
• Java Security Whitepaper
• Java Security and Ignition Webinar
The Future of IIoT: The New Architecture
Conventional Architecture
IIoT: The New Architecture
Leading IIoT Messaging Protocol
 Why MQTT?

• Decouples devices from applications

• Low bandwidth
• Report by exception (RBE)
• TLS security
• Outbound connection only (no inbound firewall rules)
• Stateful awareness
• Quality of service (QOS) data delivery
• Single source of truth
• Plug and play functionality
• Eliminates cutovers (parallel applications)
Ignition Edge – IIoT Architecture
The Ecosystem
Big Access to Big Data: Cloud Services

These new Injector modules easily connects any tag data

from the Ignition platform into the Amazon Web Services
(AWS) and/or Microsoft Azure cloud services
infrastructure. With a simple configuration, tag data will
flow into the AWS or Azure cloud Big Data services.
• Connects to any TAG data
• Easy to configure
 The Future of Ignition

• Improving mobile access

• Improving scalability
• Better support for large distributed systems
Thank You
Bringing Data to Life through Visualization

Sharon Billi-Duran
Product Manager, Visualization Software
November 2017

PUBLIC
Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 1
 Sharon Billi-Duran
 Started out as a software engineer
 22 years experience in the industrial automation space
…all related to visualization software
…all at Rockwell Automation
 At least one project in almost every industry imaginable
 Special interest in mobility, location awareness

https://www.linkedin.com/in/sharonbilli/
@sharonbilli

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 2

 New and Notable at Rockwell Automation
System Release 2017
• Updated visualization software - FactoryTalk View v10.0
• Updated EOI hardware and software - PanelView 5000 v4.0
• Updated control development software - Studio 5000 v31.0

Plant PAx v4.5

• Updated Visuals and Trending
• New Power & IEC61850 device libraries
• Controlled access for operations based on roles & responsibilities

FactoryTalk Analytics for Devices

• Network appliance that detects Ethernet/IP devices automatically
• Performs analysis on device data
• Presents automatic dashboards for operators

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 3

 Modern Visualization Solution
from Rockwell Automation

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 4

 Water

INDUSTRIAL
Internet of Things

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 5

 Building Your Visualization System

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 6

 A View for Every Scenario

Machine-Level Visualization
• PanelView Plus
• Compact
• PanelView 5000

Scalable PC Based Visualization

• Industrial Computers
• Non-Industrial Computers
• Monitors

Web-Based Visualization
• Add-on for Machine Edition and Site Edition
• Access HMI screens from a web browser
• Dashboard and Report access

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 7

 Big Data = Lots of Connected Devices

Connecting to:
Rockwell Automation EtherNet/IP and CIP Networks
using RSLinx Enterprise

Connecting to:
Rockwell Automation Non-CIP Networks
using RSLinx Classic

Connecting to: Non-Rockwell

FactoryTalk
View SE Non-Rockwell Devices using Kepware Technologies Devices

Connectivity for all device communications

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 8

 Why count tags?

Legacy Modern

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 9

 Reference Controller Tag Properties
Referencing Tag Properties Directly on Graphics

Direct-reference extended properties as any other controller tag

EntryTankLevel_Set.@Description
EntryTankLevel_Set.@Max
EntryTankLevel_Set.@EngineeringUnit

EntryTankLevel_Set.@Description
EntryTankLevel_Set.@Min

EntryTankFilling_FB.@State0
EntryTankFilling_FB.@State1

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 10

 Reference Controller Tag Properties
Controller Extended Properties - Language Switching

No Translation Needed in the HMI Project

Choose Language From FactoryTalk View Client:

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 11

 Alarming Made Easy

We’ve got
a problem… I’m on it!
I’m on It!
ACCURATE We’ve got
Time Stamps a problem…

The controller detects alarm conditions and triggers alarm The server captures all of the controller events
events. Alarms are buffered in the controller and show on the and sends notification to connected clients
display in the right order with accurate time stamps.

Alarms and Events

LOGIX INSTRUCTION AND Configured TAG-BASED Software-based alarm servers poll data
TAG BASED ALARMS in a Logix Controller ALARMS tags for alarm conditions

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 12

 Alarming Made Easy

Operator Stations

Mobile Devices

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 13

 Replacing manual log books

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 14

 Reporting and Regulatory Compliance

 Process Data
 Historian Data
 Diagnostics Data
 Operator Log Comments

Automatic
Government
Compliance

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 15

 Rockwell Automation Library of Process Objects

Step 1 Step 2 Step 3 Step 4

Import the PlantPAx Library Drop and configure the device AOI Create the base Global Object and New Global Object can be accessed
into Studio 5000 Project instance to your control program assign it to the AOI instance on device faceplates at runtime

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 16

 Process Library of Objects
ISA 101 Standards

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 17

 Process Library of Objects
ISA 101 Standards

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 18

 Effortlessly Display Information from Devices

WHAT DOES IT DO?

• Monitors and improves MTTR (Mean Time to Repair)
• Detects Ethernet/IP devices automatically Browser + Mobile Access
• Performs analysis on device data
• If there is any issue with a device, notifies customers
• Learns what issues are important for a specific user
Analytics Appliance
• Performs system level health & diagnostics to solve hard-to-
discover issues
• New and intuitive ways to interact with analytics

Automation Devices

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 19

 Effortlessly Display Information from Devices

DETECTS
AUTOMATICALLY

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 20

 Smart Machine Monitoring in the Cloud

for Machines

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 21

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 22
 Importance of Operator Location

Operator Single Sign-On

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 23

 Mobile Clients

Extension of

“Make Your HMI Mobile”

By Rockwell Automation
• See and interact with HMI screens in a web browser
• Displays are rendered in HTML5
• Supports a full range of mobile devices

Visit the online demo with your own device!

http://ra-1-view.cloudapp.net/FTVP

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 24

 Mobile-Friendly Navigation

Automatically generated
with

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 25

 Responsive design display
for mobile devices

Desktop HMI Mobile Web HMI

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 26

 Alarms: when and where you need them

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 27

 Alarms: Notifying you when there’s a problem
Hello Steven, this is the WIN-911 Alarm Notification
system. Please enter your Authorization Code.

1…2…3…#

You have 1 new message.

Chlorint Level is HiHi as of 6:03 AM

Native FactoryTalk
Alarm Client

Copyright © 2017 WIN-911 Software. All rights reserved.

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 28
 ALL DONE AUTOMATICALLY!

DASHBOARDS

PEFORMS DIAGNOSITIC ASSESSMENT

IDENTIFIES THE DEVICE

IMPORTANT SUPPORTING DATA

SIGNIFICANT DIAGNOSTICS

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 29

 OPERATOR PREFERENCES

ACTION CARDS

ON PHONES, SWIPING
RIGHT IS AN “UP VOTE” AND
SWIPING LEFT IS A “DOWN
VOTE”

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 30

 OPERATOR INTERACTION

NEXT GENERATION

“Hey Shelby, which drive

needs maintenance?”

That’s the drive on Pump 4.

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 31

 TEAM COLLABORATION

NEXT GENERATION
“Hey Mike, did you see Kyle’s note about the drive on Pump 4?”
Human Data Device Data

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 32

 Quick Links
 For more information about PlantPAx and W/WW, click here.
 White paper: Creating an effective HMI
 For more information about FactoryTalk View, click here.
 To access the online FactoryTalk ViewPoint demo, click here.
 White paper: Designing for Mobility
 For more information about ThinManager, click here.
 For more information about FactoryTalk TeamONE mobile app, click here.
 Watch a video here!
 For more information about FactoryTalk Analytics for Devices, click here.
 Watch a video here!
 For more information about FactoryTalk Analytics for Machines, click here.
 Watch an interactive video here!
PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 33
Thank you!

Sharon Billi-Duran
Product Manager, Visualization Software
November 2017

PUBLIC
Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 34
 Wonderware Water Solutions
OWWA Workshop Nov 2017.

Wonderware Solutions
For the Water Industry

Presented by

Manuel Parra Batres– Smart Water Manager -Schneider Electric

Jason Jacobs – Account Manager – Wonderware Canada East

Confidential Property of Schneider Electric/ WWCE |

Agenda

1. Trends/ Roadmap
2. InTouch
3. System Platform
4. Water Optimization
Software
5. Mobile / Cloud
6. Energy Solutions in
InTouch
Our strength lies in our installed base strength, global reach, partner
network and the diversity of our customer base
Wide Industry Coverage

We work with
• 7 of the top 8 private water operators.
• 19 of the top 20 petroleum companies
• 22 of the top 40 chemical companies
• 10 of the top 15 mining and minerals companies
• 25 of the top 50 food and beverage companies
Installed Base Strength
Over 100,000 sites
Over 2 Million+ licenses
Over 20 Billion+ operating parameters monitored
Over 12,000+ terabytes of operating data processed
Scale
Partner Ecosystem
2800 people
10 R&D centers 4000 SI partners
24 project centers 160 technology partners

Schneider Electric is a founding

member of SWAN (Smart Water
Networks Forum)
Specific Issues Seen in W/WW

State of water and sewer infrastructure

• Aging infrastructure has led to leaks and disruption of service.
• Barely averted sewage overflow during heavy rain event

Long-term water supply availability / quality

• Increased stress on water resources and supply needs
• Pressing needs for conservation
• Industrial waste making water “non-consumable”.

Financing for capital improvements

• Cities, while growing, are utilizing increased revenue in other
areas
• Out of sight, out of mind approach to water and sewer.

Compliance with Federal/Provincial Regulations

• Population growth is pushing us near our permitted capacity

Workforce
• Workers are finding more attractive jobs
• Many are retiring, taking tribal knowledge with them.

Public understanding
• The cost to treat water is increasing, rates are not.
• Population growth is leading to increased consumption and
services
 Wonderware Roadmap
- First to Market Cloud Based Solutions Development and
Historians
- HTML5 Browsers
- Machine Learning and predictive analytics
- Development in the Cloud

- Dealing with Cyber Security in Mind

- physical, data, transmission, etc
- technology built on .NET scripting

- Integration of IIoT Devices

- Flexible Payments- perpetual or subscription

- Build Actions from Data with Workflow Products

- Augmented Reality SCADA .

- Full Migration of the past - Always Built on Prior Install Base

- Still be able to open older version – No Application left behind.

- Energy and Water Industry Solutions.

- Leverage Schneider PMI software
- Energy Performance Module Release-Nov 2017
 Cyber Security

We Address :

- Physical Security- Azure

- Data Residency and Digital Sovereignty
- Data at Rest
- Data in Motion
- Hybrid Deployments
- Transmission Reliability – Store Forward
- Certification , Encryption, IT Friendly Designs
- Authentication, Authorization
- Audits

- Visit www.wonderware.trust.com
 InTouch HMI 2017 Key Updates
 InTouch longest running HMI in the world
 Still can import all older versions into Modern V2017
 Modern ArchestrA Graphics including Situational Awareness Library
 Enhance Formats and Wizards

• Our Latest Features

 Modern ArchestrA Graphics
 Situational Awareness Built-In
 Application Templates
 Window Templates
 Target Resolution
 New Script Editor
 Frames (Pan & Zoom enablement)
 WindowViewer as a Service
 Much More!
Situational Awareness
Situational Awareness and InTouch Mobile Client
Communication Drivers- New OI Drivers

Web Services
API- SOAP, REST, XML, JSON
 System Platform 2017 Core

Application Server
Framework for system wide, real-time data
acquisition, alarm and event management,
centralized security, data manipulation, remote
deployment and collaborative engineering.

Historian Insight
HTML5 Custom Web Browsers Dashboard. New 2017

OI Servers ( Former DA Severs)

OI Servers
Field device connectivity, Web, Auto Build New 2017

Historian
Plant data historian

InTouch for System Platform/ OMI

Visual interface into plant floor process
New 2017
Performance without Compromise
Scale to meet your needs from small to distributed systems

Optional Cloud Applications

HW 8/16C 32GB 500GB SSD

One Node Optional Redundant 2-400 Nodes Optional Redundant Unlimited Nodes Optional Redundant
100,000 I/O second/update
20,000 tags Historized
20 PLCs with each 5000 tags
20 Clients RDP server
20 Clients 1000’s of Clients Unlimited
0-1.000.000 Tags 0-10.000.000 Tags Unlimited
10,000 Alarms
One Galaxy One Galaxy Multi Galaxy

IoT Hubs IoT Sensors Plant 1 & 2 IoT Hubs IoT Sensors Plants IoT Hubs IoT Sensors Plants
All running on 1 box

Cameras 1-100.000 I/O Building Cameras 1-1.000.000 I/O Buildings Cameras Unlimited Buildings

High performance engine can render displays of 8K resolutions. InTouch OMI is 6 to 10x faster in graphic rendering
performance than InTouch System Platform on 1/10 memory footprint (e.g. 200+ clients on single terminal server).
 Object Oriented Programming

Text & Email Alerts

Inputs/Outputs Workflow
Graphic Symbols/Faceplates

Logic/Scripting

Maintenance Systems

Asset Performance Alarms & Events

• Downtime
• Productivity
• OEE
Operational Discipline Historical Information
• Track and Trace
• Production Orders Security
• Inventory
Hot
Mill01

Hot
Mill02
$Hot
Mills
Hot
Mill03
 InTouch
Wonderware System OMI
Platform Experience
2017 & InTouch OMI -

SIMPLER Symbol/ Object Library App Expanded- Maps

Framework Layout/ Panels Covers 80% of you Needs Calculator, Nav Bars, Camera

IT/OT Convergence Platform

Equipment Assets

Instrument Assets

Valve Assets
 Multi-Touch & Gestures

The Magic Touch

Improve the user experience and usability of your HMI designs

with intuitive human-centric interactions across all devices.

1 Finger 2 Fingers 3 Fingers (or More)

Element Operations Pane Operations Application Operations
 Historical SCADA Playback

Instant Replay
Process graphics can empower users with
greater insights by replaying past events
by switching to the historical data stream.
This improves Operator training and
troubleshooting.
Wonderware Online- Historian in the Cloud
…

Apps, Analytics &

Services

Apps, analytics
& services

Edge Control

Power Monitoring
Discrete Process Continuous Process plug-in for Wonderware

Edge control

Connected Products
Touchscreen Machine Valve Industrial Variable Speed
Panel Automation Positioners Sensors Drives

Connected products

Wonderware Online is a cloud platform for collecting, storing, and visualizing high fidelity data across the
enterprise for smarter, faster business decisions. Wonderware Online is the simplest solution for industrial data
access, sharing and mobility. From zero to cloud in minutes!
Wonderware Online- Historian in the Cloud
…
Online InStudio - InTouch IDE Dev Studio in the Cloud

- Create an Image (complete with

OS and the Integrated
Development Environment (IDE))

- Jointly work on an application with

others at the same time

- Never install the software, SQL

- Comes with Existing Dev

- Deploy to local Dev Studio

Agile Cloud Development
 Water Network Optimization Specific Features

- Monitor your pressure in your network

- Using your GIS/ Hydraulic Models
- Combine Virtual and Real Sensors
- Use IIoT devices
- 48hour Forecasting of Alarms/ Events
- Integration in InTouch or System Platform
- Push Alarms in SCADA
- Monitor all in one location
- See the effect of Changes
- New Sub-Divisions
Solved
- Re-Routing of Water Direction
with:
- Towers/ Reservoirs
- Prevent Main Line Pressure issues.
- Critical Loads- Hospital
- Add Skelta Workflow ( Model Track, Create Action

- Reduce Leakage, Energy, Water Age (

Flushing), and improve OEE
Industry Solutions- InTouch
with Energy Performance

Energy Performance module

 Track Energy and CO2
in the context of production
 Energy per State
 Energy per Shift
 Energy per Process Order
 Energy per Product

+ +
Power Monitoring Expert
 Energy & Power Monitoring
 Energy Analysis (ISO50001)
 Demand & Power Factor Management
 Cost allocation
 Power Quality Performance
 Capacity Management
 Breaker Performance
 Generator Performance
 UPS Performance
Visit Us at our Upcoming Wonderware Canada East Knowledge Transfer
Nov 15th – Glen Erin Inn Mississauga
Hands on Labs, IIoT, Cloud, Product Roadmaps,
 31 Years of Innovation
A Canadian company with 6 offices in 3 countries.

A permanent staff of programmers and engineers.

Over 200 integrators serve customers on 6 continents.

Bedford, Canada
Aberdeen, UK Orlando, USA Calgary, Canada Houston, USA Birmingham, USA
(Head Office)

Industries
Water & Wastewater Manufacturing
Oil & Gas Marine Systems
Power Generation Airport Solutions
Broadcasting Food & Beverage
 Version 11.3

Instantly Intuitive
VTScada removes frustration from every stage of the HMI / SCADA lifecycle.

Control Engineering Magazine 2015 Engineers’ Choice Award - HMI Software

Winner in 2015, Honorable Mention in 2017.

40% growth in new installations in 2016. 2017 has already surpassed 2016.
 31 years. One product. No dead ends.

VTScada 11.3
We never discontinue software versions
forcing customers to start over. VTScada 11.2
 Integrated features simplify the upgrade process.

 Install new version directly over old. VTScada 11.1

 Licensing and options remain unchanged.
VTScada 10
 No changes required for applications built on standard features.

 Alteration and testing may be required for custom features. VTScada 9

 Upgrade to the latest version anytime so long as support is current.
VTScada 8

VTScada 7
 A Full-Integrated SCADA Solution

One installation. One license agreement. All Core features.

Reporting Trending Security Alarming Version Control

Under 200 MB Installer

Communication Driver Library

Enterprise Connectivity Monitoring and Control Displays Mobile Thin Client Server
(ODBC, OPC Client/Server, Web Services)
 Long-Term Scalability
Single Server System

Easily grow from small

to very large systems.
 2.5 Million tag capacity tested.

 No limit to the number of displays.

 Hierarchical tag data structures.

Two Server System
 Simplified multi-plant deployment.

 Supports any number of redundant

servers (requires additional licenses).

Large Scale System

 Open Connectivity

Open Architecture Network Connectivity Advanced Polling

Standard and Proprietary Device Drivers PCs and Mobile Devices Fast/normal poll mode switching
On-line poll rate tuning
Thin
Client
Server

Thin Clients

Enterprise Connectivity Package

Part of every Development Runtime License

Web Services OPC Client and Server ODBC Server

 Automatic System-Wide Redundancy

Server Failover
 Application Servers.
 Thin Client Servers.
 Load-share services.
 Requires additional licenses.

Network Failover PLC 1

 Unique Driver Multiplexer. Protocol 1
 Redundant Networks or Devices. MUX
Protocol 2
PLC 2

SITE A SITE B
Synchronized Historians and
Alarm Databases DB A DB B
 Alarm and Event Databases. DB B DB A
 Across LAN or WAN.

INTERNET
 Built-In Historian–- No Cost or Configuration

VTScada Historian
Standard Component *

 A native database in every application.

 Configure synchronized redundant databases in

seconds.** Native SCADA
 Configure additional database formats as needed.**

 Extremely fast, especially across a network.

Oracle® MySQL®

Historian

MS SQL SQLite®
Server®

SQL Server, Oracle, MySQL and SQLite are trademarks of their respective owners .
* Other database formats licensed and installed separately. ** Requires additional VTScada licenses.
 Tag Structure Model

VTScada Hierarchical Tag Browser

Standard Component

Group Together Tags to Reflect Real-World Structures

 Save time and reduce errors.
 Draw multi-tag equipment in one step.
 Only I/O addresses count towards your chosen tag limit.
 Intuitive Display Development

Standard in VTScada Development Runtime Licenses

VTScada Idea Studio

Simple drag-and-drop tools.
Configure outstanding displays, menus, and
tags from one interface.
 Familiar ribbon toolbar.
 200+ widgets, 4000+ graphics, 3D pipes.
 Pre-built high impact display pages.
 Easily align graphical elements.
 Add graphics from anywhere.

VTScada Scripting Language

Unlimited Customization
 Easy Application Deployment

Online Deployment Single-file Deployment

Standard With Development Runtime Licenses Standard Components
 Concurrent multi-user development.  Simple to create, distribute, and import.
 No configuration server required.  Easy to share applications with support teams.
 Instant network deployment after changes validated.  Backup or clone applications in seconds.

1 2

Bridge1.changeset

User A User B 3 User A User B

@ Easy to distribute.
User A User B
 Integrated Change Management

VTScada Application Version Control

Standard Component

Trace changes and instantly recover from

configuration issues.
 Distributed version control vs. older technology
requiring central server.
 Instantly reverse any change.
 Switch to a known good version.
 See who did what, where.
 No configuration needed.

See color-coded incremental

version changes.
An Interface Built For Operators

VTScada Tiled Page View

Standard Component

Oversee and navigate all your most

important pages.
 Auto-generated based on Page Menu.
 Tiles resize to current menu level.
 Large tiles display real-time data.
 Click tiles to open pages and folders.
 Recently viewed pages across the top.
 - Core Technologies -

Operator-Created Trending

Historical Data Viewer (HDV)

Standard Component

 Click values to open custom trends.

 Easily save trend groups for future use.

 Add encrypted notes to add context.

Managing SCADA Complexity

High Performance HMI™

 Greyscale images convey normal

conditions.

 Color, and animation instantly draw

attention to problems as they emerge.

 Simple on-screen trends (spark lines).

 5000 graphics tools, widgets and images

to build any indicator required.
 Alarm Management and Action Logging

Tools Based on ISA 18.2 Alarms Management Standard

Easily filter only
the Alarms you
need.
Separate
Alarms &
Events
databases.

Use colour,
symbols,
and sound
to meet the
visual needs
of your
operators.
Operators can
add one or more
notes alarm
instances.

All operator Shelved Alarms

actions are won’t distract
recorded as operators but
encrypted are recorded in
events. the Events
database.
 Alarms Tuning Reports

Quickly identify and eliminate nuisance alarms.

Bad Actors Report

Summary of alarm occurrences within a specific period,
sorted by the number of activations.

Alarm Flood Report

Count of alarms tripped within equal time slices.
Click a bar to zoom into that period.

History Report
All active and trip alarm events within a specific period.

Priority Distribution Report

Compares priority of configured alarms and actual alarm
occurrences against ISA’s recommended best practices.
 Thin Client Connections

Remote Access From Anywhere

Optional Component

VTScada Application
Internet Server Enabled.

VTScada Anywhere Client VTScada Internet Client VTScada Mobile Client

HTML5-compliant devices. PCs and laptops. HTML5-compliant devices.
Consistent across all devices. Full workstation experience. Great for small screens and data plans.
No reporting or file export. Full reporting and file export. Full monitoring and control.

Formats to suit your device and data plan.

Integrated Alarm Notification System

Critical Alarms Find You Anywhere

Optional Component

 Tightly integrated for the life of our system.

 Create rosters of up to 30 contacts.
 Configure any number of rosters.
 Enable rosters by date and time.
 Security Accounts

Application Level User Accounts

Standard Component

 Centralized account management.

 Windows active directory support.
 Immediate and application wide.
change deployment.
 Military-grade encryption.
 Card-reader support.

Privileges, Rules and Roles

 Tune what users can do and where.
 Reduce time to configure accounts.
 Secure Connectivity Options

Typical VTScada Internet Security Strategies

VPN
Known users via known computers/devices.

TLS/SSL
Known users. Unknown devices.

SCADA Firewall
Server
Read Only
Unknown users. Unknown devices.

Thin Clients

DMZ
 Training and Support

Training That Suits Your Schedule

We offer a wide variety of materials to help you get up
and running in minutes.
Training Facilities in Bedford and Orlando
Self-Taught
 Intuitive operation and configuration.
 Context-based electronic help.
 Electronic Quick-Start Guides.
 Downloadable student workbooks.
 ‘How-to’ video library.

Courses
Online Video Tutorials
 In-class courses at Trihedral facilities.
 Custom courses at customer facilities.
 Directed webinars.
 Seminar events.
The Most Accessible and Personal Support in the Business

The VTScada Support Team

New licenses include 90 days of SupportPlus.

 Renewals are 15% of the original software price per year.*
 Includes 9-5 AST phone/email support and software version upgrades.
 24/7, VTScada only or application-specific options available.
 Licensing and Architecture

A single installation installs all core SCADA features

 Priced to prevent customers from having to purchase more than they need.
 Tag Expansions enjoy greater volume discounts without penalty.

Adding new options and Thin Clients or increasing the tag limit is as easy as installing a new key.
 Hosted Applications

Cloud Based SCADA Model

 Remote monitoring & control devices at customer sites collect data and control equipment.
 A communication network (e.g. cellular) transmits commands and carries data back to a third-party SCADA host.
 For a monthly fee, the host provides access to application displays via (thin) Internet clients.
 The host provides all hardware/software maintenance, automatic failover, data backup, and security accounts.

Benefits Installation Examples

 Low upfront installation cost and predictable monthly expense.  Xylem
 Centralized data collection and storage.  Kennedy Industries
 Secure customer data access via Thin Client.  Colacino Industries

 Distributed redundancy for disaster recovery.

Remote Site Cellular Network Central SCADA Servers Internet Customer Thin Clients
 Free 50 I/O License

We are sharing our passion for instantly intuitive SCADA with the world.

Introducing…

A free development/runtime suite.

 One mobile connection.
 No expiration or runtime limits.
 Perfect for small industrial and
personal applications.

To try VTScadaLIGHT, select this checkbox during installation.

 Our Roadmap
“The best indicator of future behavior is past behavior.” – Dr. Phil

Our Commitment to Continuous Development

 Our roadmap does not include dates to retire specific versions.

 We are not locked to a feature release schedule.

 We release features when they are ready and most needed.

 Continuous development reduces risk of disruption vs. step-wise changes.

 Features and incidents are released together with backward compatibility for standard features.

 To mitigate changing industry trends, we develop and maintain all our own technologies.
e.g., Version Control, Alarm Notifications, Scripting Language

 New releases support the most recent releases of the Windows OS.

 In 2017, Trend Micro Magazine ranked VTScada quickest to patch security threats based on ICS-CERT advisory statistics.
New Features in 11.3 New Features Coming Soon
 Full support for IPv6 addressing.  Historical Data Editing.
 Alarm Notification via VOIP using Twilio®.  Multi-Language Support.
 JSON Driver.  Subordinate Applications.
 IEC 60870-5-104 Driver.  Mapping Enhancements.
 Anywhere Client can allow OpenID Connect logons.

IPv6 OpenID

On the Horizon
 Industrial Internet of Things (MQTT).
 Augmented Reality SCADA.
 Features Released Since Fall 2016
(Legible list available upon request.)

F1112 Event records in the alarm history for unknown username login attempts now show the attempted username.
F1111 The Alarm Page can now display the text of acknowledged alarms using their priority color rather than just black or white.
F1110 A new application hook has been added, AlarmAckAllHook, that is called whenever the Ack All or Ack Shown buttons are clicked.
F1109 ROC Driver TLP definitions may now be added or overridden at the application level
F1076 The Sites, Map, and Operator Notes pages now each have their own dedicated system privilege. Old applications will have their Operator and Logged Off users updated with the new privileges as each application is activated, and any users
not inheriting from those roles will also be updated. Any applications which have been updated with new privileges will not be updated again, and thus they can be removed from any users or roles that were automatically given privileges
after the update.New applications will include the new privileges as part of the Operator role only.
F1094 Added OpenID Connect Basic Client Relying Party support using the OAuth 2 Authorization Code Flow
F1083 A new TextEncode() function was added which encodes text as UTF-8.
F1053 A system library function has been added for JSON encoding, System.JSON_Encode().
F1027 Addition of the IEC 60870-5-104 Master and Slave device driver
F0493 VTScada now supports the Internet Protocol Version 6 (IPv6)
F0811 Voice telephony alarm notification functionality will be supported using Twilio, as an alternative to using a voice modem. This allows better system virtualization, bypasses the use of POTS voice modems for voice alarm notification, and
simplifies VTScada alarm notification configuration.
F1104 Custom multi-state alarms can now re-activate an alarm with a different priority and description without creating superfluous records in the alarm history.
F1099 Realms can both be added and removed to the SoapServicesRealmName property without re-starting the VTS application.
For an existing application, users will need to move the setting from their application's Settings.Startup to Settings.Dynamic in order to change their application without re-starting. Any existing user applications where this is not done will
continue to function as before, requiring a re-start if this setting is changed, but this will not break existing applications in any way if the setting is not moved. After moving the setting and editing these files, an application re-start would need
to occur, so it is recommended to do this as part of the upgrade process for VTScada, prior to the application being started.
F1098 When you click Go To Page in the navigator in Tag Browser or Alarm Page, and a tag is only drawn on one page, it can now be opened as a pop-up.
F1097 A public method has been added for custom Alarm Column Graphics Modules to help determine if a row was selected.
F1096 Changes to the alarm Mute button are now recorded in the event log
F1095 Right-clicking on the Alarm icon on title bar now opens a popup Alarm Page.
F1089 Hovering over a source code variable in the Source Debugger now displays a tooltip showing the current value.
F1087 Help files no longer require adjusting browser settings to be viewed using the Anywhere Client with Internet Explorer.
F1074 The Internet Client Monitor style has been modernized
F1069 A new dialog now is provided to list tags that have not finished initializing as expected at application startup.
F1064 Spawn() may be used to open URLs on the Anywhere Client.
F1057 Performance and robustness improved for Historian native storage format.
F1048 VTScada can now be installed as VTScadaLIGHT. All versions of VTScada must now be activated when run for the first time on each workstation. VTScadaLIGHT, and optionally full versions, will report basic usage information to Trihedral.
F1079 The Alarm Database Tag can now appear on the Sites page as a folder or a site.
F1077 Workstation and Device columns have been added to the alarm History tab of the Alarm Page, with the columns marked as "extra" so they can be hidden from view when other extra columns are also hidden.
Additionally, the display of the Workstation name defaults to a Hex display of the MachineID if a friendly name does not exist anywhere it is displayed right now, rather than being blank.
F1072 The System pages now obey default Title and Task Bar Contents when opened as popups.
F1071 Maps in VTScada now provide a button to reposition the map to the initial location and zoom level.
F1070 The Site Legend widget has been updated to indicate what the flashing inner circle means. The legend now appears on the Sites page in the toolbar.
F1068 The List Page Menu button and the Tile Page Menu button now can be displayed independently.
F1062 Some VTScada files (including logo images) have been protected to ensure consistent appearance of applications built using VTScada.
F1033 Added a new standard method for drivers to connect and receive a semaphore from port tags.
F1073 The JSON/XML Driver now supports secure connections
F1066 Tag browser now shows the type of Report tags.
F1060 Added support for Emerson Well Optimization Manager and Surface Control Manager to the ROC driver
F1055 The file tree displayed when showing the difference between revisions or uncommitted files will now auto expand and auto select when there is only one item to view.
F1052 There is now an option to automatically open the containing folder after creating a new changeset or revision file.
F1051 To make the Calculation type easier to find in the new tag browser layout the Calculation tag has been added to the 'Analogs' type group. A new type group called 'Analytics' was also created which contains types having "post input/output"
operations, including the Calculation type.
F1050 Handling of copying and pasting Menu Item Tags has been improved.
F1044 A new function to create VTScada data types from JSON strings, JSONParse(), has been added.
F1042 A new driver has been created for retrieving XML or JSON formatted data from a URL.
F1041 It is now possible to use linked tags (or their descendants) and container parameters as the scope for widgets drawn within a Folder widget.
F1038 Network Values, which are used extensively to share persistent data among VTScada workstations, have had several improvements and issues fixed:
- The time to start an application has been reduced, sometimes by several minutes, especially when there are tens of thousands of Network Values.
- Changes made on different computers that are temporarily not connected by a network will result in the latest change being used rather than simply choosing the server's value.
- Cases where values would be different on different computers after network disruptions have been resolved.
- The disk space required to store the Network Values has typically been reduced to less than 1% of what it used to be.
F1032 The user can now remove a pen from the current plot when viewing the HDV without having to use the Tag Selector dialog.
F1029 The tag browser now hides the child tags of the Menus branch when set to show all children as these tags were numerous and would therefore over complicate this list. The "Menus" tag itself will still appear in the list, as well as in the tree
view on the left where it will continue to show it complete tree when expanded.
F0825 The ability to automatically scale analog pens in HDV plots has been added. This is turned on by default in new applications but left off for existing applications. There is a setting in the Application Configuration -> Edit Properties on the
Historical Data Viewer tab to turn this on and off.
F1059 Alarm templates can be over-ridden in context tags.
F1058 The driver trace field was too small to hold the maximal size of a DNP3 Data Link message.
 Instantly intuitive SCADA from
people you can work with.

“If I see a customer walking towards me, I never want to have to

cross the street because our company has not treated them fairly.”
– Robert Spencer