Kelda Water Services (Defence)
Section 29
SECURITY
Employers Specification Representative:
Tony Morgan
Engineering Specification V1
Asset Management
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
Record of Amendments
Asset Management
2 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
Index
29.1
Policy and Generic Guidance
29.2
Security Risk Assessment
29.3
Security Design Specification
29.4
Framework Term Contractors – Security
29.5
Fencing
29.6
Enclosures
29.6.1
29.7
GRP Kiosk – Security Enhancement
Access Points
29.7.1
29.7.2
29.7.3
29.7.4
29.7.5
29.8
Security Doors
Access Covers
Windows / Bars / Grills
Improved Bar Systems
Ventilators
Electronic Security
29.8.1
29.8.2
29.8.3
29.8.2
29.8.5
29.9
Policy
Intruder Detection
CCTV
Security Lighting
Access Control
Other
29.9.1
29.9.2
29.9.3
29.9.4
Appendix 1
Asset Management
Service Reservoirs
Borehole Protection
Pipebridge and Pipe crossing Protection
Dam Protection
Security Design Standards
3 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
29.1
Section 29 - Security
POLICY AND GENERIC GUIDANCE.
Security requirements are driven by a duty to comply with mandatory
requirements as set out by DEFRA and the Government Security Advisor.
The requirements of DEFRA and Security Advisor are constantly
reviewed and may change from time to time with immediate effect.
The security policy of Kelda Water Services Limited is recorded in the
Security and Emergency Planning Manual database. The policy and
procedures issued under it include the categorisation of all sites as being
either Designated, Enhanced+, Enhanced, Basic+ or Basic security risk. It
should be noted that many factors can affect the risk category of a site and
they vary over time, therefore at the start of planning any major changes
(including new build) at a site, the Employers Security and Emergency
Planning team (SEPT) shall be consulted to re-assess the risk and
provide the required Security Design Specification (Appendix 1) as
appropriate to the assessed risk.
29.2
Security Risk Assessment
The security risk assessment methodology was revised by the Government in
2008. This is a risk based approach that is driven by the status of the
operational asset and its security vulnerability on a scale of 1 to 5
(Designated, Enhanced+, Enhanced, Basic+ or Basic). The security solutions
are geared to each level of risk. It is not appropriate to include the detail in
this document which is why the Employers SEPT must be consulted on all
occasions. The guiding principles are however shown below:
29.3
Security Design Specification – Appendix 1
Appendix 1 shall include, but is not limited to, specifications for the following
defined security items including all additions in this specification;
SECURITY ITEM
Fencing
Enclosure
IDS
Access Points
Access Control
Attendance
Management
Asset Management
DEFINITION
Any continuous perimeter barrier including any other
structure, (such as masonry or concrete walls), that
serve the same purpose.
Any structure that provides three dimensional
protection against unauthorised access to an asset by
completely enclosing it (e.g. a building, room, chamber,
kiosk, cage, etc.)
Intruder Detection System. A system or process which
can identify and communicate an intrusion into a
protected area such that an appropriate response is
initiated.
Doors, windows, hatch covers, vent and duct grills, etc.
Locking systems and devices to control access and
egress at a specific point of the secured area. These
may be mechanically, electronically driven or man
guarded.
Any live system that provides information relating to the
presence and identity of individuals in access controlled
areas, to assist in the management of IDS activations
or the consequences thereof.
4 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
CCTV / Lights
Other
29.4
Section 29 - Security
Closed circuit television and security lighting.
Other specific security requirements. E.g. Pipebridge
protection, Service Reservoirs, borehole protection.
FRAMEWORK TERM CONTRACTORS – SECURITY
The Employer has a framework repository database which lists subcontractor
agreements for security products as follows:


Fencing
Locking systems
Electronic Security Systems – including, intruder detection,
access control and intercoms, closed circuit television (CCTV)
and security lighting
The Framework Term Contractors shall be utilised for all projects.
For steel security products (LPCB security rated) such as doors, access
covers, window bars and roller shutters etc. SEPT should be consulted for the
current list of preferred suppliers.
Use of any non framework suppliers for the above security items must be
approved by the Employers Security Manager.
29.5
FENCING
All sites must be fenced to the appropriate standard as specified by the
Employers Security Manager in Appendix 1.
29.6
ENCLOSURES
Enclosures will be identified in accordance with the following ratings:
Class C is an enclosure as defined by the CSE “C” or 115mm masonry or a
proprietary kiosk, cabinet or prefabricated structure of a similarly robust
construction.
Class B is an enclosure as defined by the CSE “B” or cavity wall or 225 mm
solid wall or a proprietary kiosk, cabinet or prefabricated structure
manufactured to LPCB 1175 rating 3.
Class A is an enclosure as defined by the CSE “A” or masonry reinforced
with expanded metal mesh and plywood (SEAP material specification) or a
proprietary kiosk; cabinet or prefabricated structure manufactured to LPCB
1175 rating 4.
29.6.1 GRP Kiosk
All GRP kiosks (Enclosures) shall be constructed to the standard as specified
in Section 25: Outdoor Kiosks unless specified otherwise in Appendix 1.
Asset Management
5 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
29.7
Section 29 - Security
ACCESS POINTS
29.7.1 Security Doors
In general security doors shall only be fitted to external doors, however on
certain sites and in some circumstances they may be required to protect a
sensitive area within a building these areas shall be specified in Appendix 1.
Security Doors shall be of a minimum LPCB 1175 rating 3 or as specified in
Appendix 1.
The inclusion of ventilators in doors shall not be permitted.
Security doors for vulnerable points identified in Appendix 1 shall be fitted
LPCB 1175 rating 4 doors incorporating three point locking systems operating
from a single key and locking point suited to the abloy lock system applicable
for the site.
Internal doors shall be constructed to normal building regulation standards
unless protecting a particularly valuable or vulnerable point such as the site
control room.
29.7.2 Access Covers
Access to the treated water space requires LPCB 4 rated covers which are to
be moated (double skinned). Non water space items (meter, valve chambers)
are to be LPCB 3 rated. Cable duct run chambers are required to have
lockable covers to prevent cable theft.
29.7.3 Windows / Bars / Grills
If it is necessary for windows to be created or retained in operational buildings
then for security the installation of LPCB 1175 rating 3 approved bar-sets and
/ or grills shall be required unless otherwise specified in Appendix 1.
29.7.4 Ventilators
Whenever ventilators are being fitted they shall be considered as a possible
means of entry to a building. If ventilators are to be fitted then a LPCB 1175
rating 3 approved bar-set is to be installed to prevent use of that route.
29.8
ELECTRONIC SECURITY
29.8.1 Policy
It is the responsibility of the
team to design all electronic
systems design service within
the requirements of all IDS,
Systems.
Asset Management
Employers Security and Emergency Planning
security requirements and they will provide a
14 days of a request. Appendix 1 shall specify
CCTV, Security Lighting and Access Control
6 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
29.8.2 Intruder Detection System (IDS)
The IDS system must be ACPO approved and compatible with the receiving
systems within the Employers ROCC Security Monitoring Station. A BT line
and an unswitched fuse spur will be required to be installed next to the
intruder panel.
29.8.3 CCTV
An IP CCTV system will be specified allowing transmission via the Employers
wide area network (WAN) to the Employers ROCC Security Monitoring
Station, (please confirm availability with the Employers Telecoms
department).
This section covers security CCTV systems only. For process control CCTV
systems please refer to Section 20: Control and Monitoring.
29.8.4 Security Lighting
Starting with specialist infrared illumination, moving into white light CCTV and
security lighting, energy efficient, long life, light-emitting diodes (LED)
products are now available and are to be used in all cases.
Security lighting systems shall be understood to mean external illuminators
intended to deter, or to assist in the detection of intruders, either by eye or by
CCTV. Lights may be permanently switched on, time or photocell controlled,
or activity initiated, but must be appropriate by type, location, direction and
level of illumination to their intended purpose. Due regard must be given to
light pollution and overspill and to conflict of purpose between general
illumination and the observation of specific areas.
29.8.5 Access Control
The Access Control system must be compatible with the Employers existing
access system (to allow the programming of access cards already in use
elsewhere by the Employer).
29.9
OTHER
29.9.1 Service Reservoirs
The ‘Specification for the Security of Service Reservoirs’ (Issue 1, July 2005)
has superseded the Service Reservoirs Codes of Practice (Issue 2, 2003).
The specification is a Government restricted document and therefore can
only be viewed by application to the Employers Security and Emergency
Planning department.
The specification, which stipulates the security
requirements according to risk for all service reservoirs, contact tanks, break
pressure tanks and water towers, should be read in conjunction with the KWS
design brief for service reservoirs.
Attention is drawn particularly to the requirements for additional security to
service reservoirs which are not buried or of concrete construction.
Compliance with the security requirements for such reservoirs can be both
Asset Management
7 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
difficult and expensive and such designs should be avoided. (Reinforced
Concrete Service Reservoirs Asset Standard).
29.9.2 Borehole Protection
The protection of the heads of boreholes shall be achieved by either encasing
within a concrete chamber fitted with a steel access cover to LPCB 1175
rating 4, or by enclosing within a robust building, or within a kiosk which has
been security enhanced to LPCB 1175 rating 4.
All borehole sites are required to have intruder alarms on each borehole head
and will be specified in Appendix 1.
29.9.3 Pipebridge and Pipecrossing Protection
The Contractor shall provide protection from both a security and health and
safety perspective to all pipe bridges and pipe crossings. Appendix 1 will
recommend the level of protection required.
29.9.4 Dam Protection
The protection of Dams is concentrated on the vulnerable points around the
site, such as the Draw off Tower, valves and exposed pipework etc. The
principles will be the fitting of a minimum LPCB 1175 rating 3 for access
covers, doors and cages around these vulnerable points. The protection will
also include the installation of an Intruder Detection System.
Asset Management
8 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
Appendix 1 - Security Design Standards
1.0 – Physical security
1.1 – Enclosures
1.1.1
1.1.2
1.1.3
1.1.4
Operational buildings
Chambers
Kiosks
Security cages
1.2 – Access
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Doors
Windows / Bars / Grills
Hatches
Locking systems
Ventilation
Below ground cable security
Above ground cable security
Bottle clamps
1.3 – Fencing
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
Perimeter solutions
Motorised access gates and barriers
Bollards
Anti climb spinners (pipe bridges, walls and fences)
Razor wire and toppings
Tree removal
Electric fencing
Signage
1.4 – Electric fencing
2.0 – Electronic Security
2.1
2.2
2.3
2.4
2.5
Intruder Detection system (IDS)
Closed Circuit Television (CCTV)
Security Lighting
Access Control
Audio, Radio, Wireless
3.0 – Security Risk Assessment
3.1
Security Risk Assessment Matrix
Asset Management
9 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
1.0 Physical Security
1.1 Enclosures
 1.1.1 Operational Buildings
Buildings should be of strong construction i.e. double skinned brick, or block-work
and brick, or metal cladding with internal brick / block-work to a minimum height of
2.4 metres. Drainpipes should be constructed so as not provide a climbing aid.
Single storey buildings with low roofs’, (a weak point through which access may be
gained), require strengthening by means of internal reinforcement using plywood and
expamet. External appendages to buildings are to be avoided as they provide
climbing aids.
Doors - the number of external doors shall be reduced to the minimum operational /
health and safety requirement. Internal doors to be constructed to normal building
regulation standards unless they are protecting a valuable or vulnerable asset such
as a control room.
Control Rooms – need to be secure to protect computer systems. The internal wall
fabric needs to be capable of supporting a LPCB rating 4 door.
Windows - unless there are exceptional circumstances windows are not to be fitted.
If windows are to be fitted they should be protected by a roller shutter or fixed LPCB
rating 3 window bars to prevent a person entering the building.
Ventilators are to be protected by internally fitted LPCB rating 3 metal bar sets to
prevent a person entering the building by removal of the ventilator or kicking through
louvres.
Telephone wires to be installed in underground ducts into the site and building(s).
 1.1.2 Chambers
Important underground valves are to be secured in chambers with a lockable LPCB
rating 3 security cover.
 1.1.3 Kiosks
There are a number of different products available from GRP to galvanised steel
which can be used for small roadside cabinets to walk in self contained structures. It
is important that the security design takes into account the vulnerability of the asset it
protects. The Security Risk Assessment (SRA) will identify the security standard of
kiosk required as follows;


A “standard” kiosk with 3-point locking system fitted to the door(s) with an
Abloy cylinder lock suited to area operational requirements, i.e. waste / clean
level 2 or 3.
A security rated kiosk (LPCB 3 or 4 security rated) for applications identified
in the security risk assessment process.
Asset Management
10 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification

Section 29 - Security
For large structures with a LPCB 3 or 4 security requirement consider the
construction of a brick building (see section 29.6 Enclosures - Class A)
instead of a kiosk.
If it is protecting a borehole then a LPCB 4 security rated kiosk with detachable roof
is to be used to allow the borehole head to be removed (craned out) for maintenance
and repair.
 1.1.4 Security Cages
LPCB rating 3 security cages are to be used to protect external penstocks or other
valves with raised spindles. Other uses include protecting outlet connections from
sludge tanks, exposed vulnerable pipe work, walkways etc.
1.2 Access
 1.2.1 Doors
In general, security doors shall only be fitted to external doors, however they may be
required to protect a sensitive area within a building; these areas will be specified in
the Security Design Specification (SDS). Security Doors are to be a minimum of
Loss Prevention Certification Board specification level 3 (LPCB security rating 3) or
as specified in the SDS (LPCB security rating 4 doors for vulnerable points).
There shall be no louvre / ventilator fitted in any external door.
LPCB 4 security doors for vulnerable points are to be fitted with a 3 point locking
system operated from a single key and suited to the Abloy locking system applicable
for the site.
A security door is to meet the following requirements:
The door itself (known as the door set), its frame and its securing system should be
of comparable or equal strength.
The strength of the fixings should match that of the door components i.e. the fixing of
locks and bolts to the door.
The door must be compatible in strength with the wall in which it is installed as weak
walls cannot accept heavy door sets. The wall thickness and its construction should
be taken into account. The door should be fitted with approved locking devices - see
section on locks.
Door restraints are to be fitted to all doors apart from fire escape doors. The door
restraint is to be heavy duty appropriate for heavy steel doors e.g. 200kg or above.
For office type buildings door closers should be fitted to all external doors apart from
fire escape doors. The door closer is to be heavy duty and capable of closing heavy
steel doors e.g. 200kg or above.
Under normal circumstances a fire door will not have an external access (key entry).
Asset Management
11 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
Bolton doors - where vertical folding doors are fitted they are to be secured by three
internal locking points.
Roller shutters – where roller shutter doors are utilised they are to be equipped with a
minimum of four lockable security points i.e. two at the base and two at the sides.
 1.2.2 Windows / Bars / Grills
New buildings are not to be designed with windows unless there is an operational
requirement to do so (to be agreed with the Security Manager). Where windows are
to be installed they are to be protected by roller shutters. On existing buildings the
windows are required to be bricked up or LPCB security rating 3 barsets or roller
shutters are to be installed.
 1.2.3 Hatches
Potable water
“Hatch” shall mean all hinged covers that provide direct access to potable water,
these includes man-access, vents, valve spindles, etc.
The lid, frame, locking device and installation together are of a construction that will
meet the requirements of LPCB security rating 4 for the finished assembly.
The hatch assembly comprises an outer and an inner cover designed to collect and
divert substances introduced by drilling of the outer cover.
Hinges are concealed when the hatch is closed and cover removal is prevented in
the event of hinge breakage or failure.
Valve / meter chambers
Single skin LPCB security rating 3 covers to be installed.
Waste water applications
Single skin LPCB security rating 3 covers to be installed.
 1.2.4 Locking Systems
Mechanical Locks
Locks shall be of good quality, i.e. Abloy lock with ASSA lock case, keyed to the
appropriate security key suite in use in the relevant KW operational area. For high
security doors (LPCB security rating 4) a 3 point locking system is to be installed.
Electronic Locks
Electronic locks are to be fitted where PAC access control system is in use.
The locks installed must incorporate Abloy cylinders suited to site specific or area
operational requirements, i.e. waste / clean level 2 or 3 etc. The relevant lock level to
be determined via the Security Risk Assessment.
Access control systems incorporating magnetic locks (Maglocks) or digital locks
cannot be relied upon for external security purposes they are designed for internal
‘privacy use’ and are easily defeated both physically and by manipulation.
 1.2.5
Ventilation
Asset Management
12 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
Ventilation openings are often inadequately protected and the following measures
may be required. Expert advice should be sought where these may restrict the flow
of air required to cool plant or equipment, and rapid draw-down conditions in service
reservoirs.

Louvres in Walls - Most types of commercial metal or wood ventilation louvres
are very vulnerable to intrusion or to the introduction of contaminants.
Louvres are to be reinforced internally by LPCB security rating 3 barsets or
grilles.

Louvres in Doors - Doors with louvre panels are not to be used. Venting
should be through the fabric of the building.

Large Ventilation Openings - Large ventilation openings e.g. in hollow dams,
tunnels etc. are to be protected by LPCB security rating 4 steel grilles /
jailhouse doors.

Small Ventilation Openings - Small openings for natural ventilation are often
needed in windowless structures. The following methods may be used to
protect small ventilation openings in walls:

Openings in Cavity Brick Walls - the openings in the inner and outer leaves of
brickwork should be staggered by at least 225mm. Vent grilles (airblocks)
made of galvanised steel should be fixed into the openings at both the outer
and inner faces of the wall. They are to be welded into a steel box for added
security.

Openings in Solid Walls - a vent grille may be used to protect the opening in
the outer face of the wall. The opening on the inner face should be protected
by a steel plate, 6mm thick, fixed 50mm from the wall by not less than 4 x
12mm ragbolts set well into the wall. The steel plate should be large enough
to overlap the opening by at least 300mm of all four sides. The ragbolts must
be at least 225mm from the edges of the openings.

Openings in Concrete Walls - the methods described above (solid walls) may
be used. Alternatively, several small diameter, e.g. 50mm, galvanised steel
pipes may be cast transversely into the wall.
 1.2.6 Below ground cable security
Cable theft within Kelda Water is a major issue. Frequently duct chamber lids have
been removed and cables cut and pulled out. Consequently, the chamber lids need
to be protected. This shall be done by one of the following methods;


Fitting lockable access covers.
Burying the chambers (below ground level) in 150mm of soil. If this
method of ‘security’ is used, location plans to be provided to enable
chambers to be located and exposed if and when needed for future
works.
For further advice, please contact a member of the KW Security Team.
 1.2.7 Above ground cable security
Asset Management
13 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
Cable theft at Kelda Water is a major issue, in particular those cables which are
exposed above ground in open cable trays. Typically the cable is cut at both ends
and pulled out allowing long lengths of cable to be removed from site.
To prevent this from happening cable trays must be covered with a metal cover and
secured with high security anti tamper rawl bolts fitted at 1 metre intervals which
need a ‘special key’ to remove them.
Cables that rise from ducts to above ground cable trays must be protected by the use
of a ‘formed concrete duct’ which must raise a minimum of 450mm above the ground
to allow a secure fixing for the use of external protective covers.
All cables installed in cable trays must be secured with cable tie wraps in the usual
manner.
 1.2.8 Bottle Clamps
Bottle clamps are designed for the protection of hazardous chemicals and
gases, such as Chlorine, Sulphur Dioxide and Ammonia. Bottle clamps are to be
used to secure these chemicals and must be certified to LPS 1175 Security Rating
Level 2.
1.3 Fencing
 1.3.1 Perimeter solutions
For basic, basic+ and enhanced sites (unless otherwise specified in the SDS) the
following fencing specifications are to be applied.
V Mesh Fencing
V mesh satisfies the requirements for Category: 1 (General Purpose) and Category:
2 (Security) fences as prescribed by B.S. 1722 Part: 14 – Open Mesh Steel Panel
Fences. The following specification is to be used.



Nominal Height: 2000mm / 2400mm
Width panels: 3000mm
Mesh and wire: Welded mesh spacing 50mm vertical x 200mm horizontal
x 5mm wire diameter. Panel incorporates ‘V’ beams spanning horizontally
across the panel. Galvanised & PVC coated Green RAL6005. Or 9005
black
Method of setting posts: In concrete foundations, to comply with the design loading
requirements specified by manufacturers technical specifications for this category of
fence.
The contractor shall employ experienced installers and provide qualified supervision
to complete works as specified by manufacturer’s technical specifications for this
category of fence.
For Enhanced+ sites as identified in the SDS, the following is to be used:
SECURIFOR 358 Hi-SECURITY SYSTEM
Asset Management
14 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
Securifor 358 satisfies the requirements for Category: 2 (Security) and Category: 3
(High Security) fences as prescribed by B.S. 1722 Part: 14 – Open Mesh Steel Panel
Fences. The following specification is to be used.





Nominal Height: 2000mm/2400mm/3000mm
Width panels: 2515mm
Overlapped 75mm at each post.
Mesh and wire: Welded mesh spacing 76.2 mm vertical x 12.7 mm horizontal
x 4mm wire diameter. Horizontal wires on attack face. Weld strength 75% of
the minimum tensile strength of the wire (tensile range 540-690 N/m²).
Galvanized & polyester powder coated Green RAL6005 / Black RAL9005 to
pass 1000 hour salt spray testing.
Panels terminated at finished ground level
Method of setting posts: In concrete foundations to comply with the design loading
requirements specified by manufacturers technical specifications for this category of
fence.
The contractor shall employ experienced installers and provide qualified supervision
to complete works as specified by manufacturer’s technical specifications for this
category of fence.
Standard single metal gates
Must incorporate the following:


Drop bolt on the gate, galvanised steel tube sunk into tarmac to locate the
drop bolts when open.
Top hinges need reversing to stop the gate from being lifted off the hinges
and removed.
A heavy duty shroud covering the lock mechanism.
Double metal gates
Must incorporate the following:


Drop bolts on each leaf of the gate, galvanised steel tubes sunk into tarmac to
locate the drop bolts when closed. Galvanised steel tubes to be set in
concrete / tarmac positioned so as to hold the gates open.
Top hinges need reversing to stop the gate from being lifted off the hinges
and removed.
If a single padlock is to be used then the locking mechanism is to be integral
to the gate with a heavy duty shroud. Where more than one lock is required,
(shared access for BT, YEDL, Vodafone, Police etc.), then an approved multilock system is to be used (i.e. Tayhope Enterprises).
 1.3.2 Motorised Access Gates and Barriers
Where a site has heavy levels of traffic then a motorised sliding cantilever gate is to
be installed. This installation must always incorporate a single leaf pedestrian gate to
facilitate access in case of mechanical or electrical failure of the main gate.
Asset Management
15 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
Motorised Sliding Gates (cantilever trackless)
Motorised cantilever sliding gates are the preferred option when a motorised solution
is required. However, where site conditions are such that there is not enough room
to install a cantilever gate then a motorised swing gate can be used.
Cantilever sliding gates must incorporate the following safety features:

Vehicle detector induction loop system to prevent gate closing whilst a vehicle
is present in the opened gate aperture;
Safety edges (usually rubber "buffer" strips running the full height of the gate);

light beams to detect a person or object in the way of the closing gate;

the operation of the force limitation device (although this is unlikely to be
enough to stop injury on its own);

fixed guards at other areas e.g. where the vertical bars of a gate slide close to
the vertical bars of a fence.
When purchasing a new automated gate, check that the installer can show you the
features explained above, and that they will CE mark the gate and issue you a
Declaration of Conformity.
The following electronic systems (installed by KW's term contract Security Installer)
to be incorporated:
An access control system - the current system within Kelda Water, either as a
stand alone option or the existing networked / dial up. Dual height read in
and read out readers.

An audio entry system with intercom.

A CCTV camera focused on the gate to monitor visitor activity with either local
control or by transmission to the ROCC.

If for operational requirements then a remote release radio system
(Marlborough) can be incorporated for the use by on-site operatives.
Vehicle Control Barriers
Electronic systems as per above.
Vehicle Control Road Blockers
Electronic systems as per above.
 1.3.3 Bollards
Bollards should be Installed to help protect reader posts or to prevent vehicles driving
around gates and/or barriers.
 1.3.4 Anti climb spinners (Pipe Bridges, Walls and Fences)
Rotor spikes have been developed as a means of preventing and deterring
trespassers from walking or otherwise entering onto or over pipe crossings. Mounted
Asset Management
16 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
on brackets they are positioned on the crest of pipes or on the top of boundary wall
or fence.
 1.3.5 Razor wire and toppings
As the Water Industry is deemed as part of the "critical national infrastructure" we
have dispensations to use appropriate measures to protect our assets. The use of
razor wire is deemed an appropriate measure. We use razor wire at KW assets as
long as the following conditions are observed.
It is cranked off the top of the fence at a minimum height of 2.2 metres.
It is inward facing.
It can either be 3 strands or coiled (but the minimum height restrictions are to be
observed).
We have adequate signage to say that it is being used.
If it is coiled and on the ground then it should be positioned between an inner and
outer fence.
 1.3.6 Tree Removal
Trees close to the fence line can be used as a climbing aid for trespassers. Where it
is not appropriate to remove over hanging branches it will be necessary to remove
the tree. Due care and attention has to be made to ensure that the tree does not
have any local tree preservation orders (TPO).
 1.3.7 Electric Fencing
A requirement and type for an electric fence would be identified in the SDS and
would be applicable to protect identified vulnerable points. It is not to be positioned
around the site perimeter but would be used as a means to protect the vulnerable
point only i.e. compounds.
 1.3.8 Signage
Security signage is used as a deterrent to reduce intrusion and is an important
strategy to complement existing security measures. A range of site security signs
have been approved to improve security on our sites. For further information contact
any member of the Employers Security and Emergency Planning Team.
2.0 Electronic Security
2.1. Intruder Detection Systems (IDS)
Heavy -duty door contacts should be fitted to all external doors. Passive Infra-Red
(PIR) or Dual Technology (PIR + Microwave) detectors should be fitted in support of
the door contacts to cover any intrusion through the fabric of the building and provide
a verification capacity and thus reduce false alarm calls to standby staff. The intruder
detection system should be linked via a PSTN telephone line to the ROCC Security
Monitoring Station. The system shall also be linked to the RTS line to provide
additional resilience at no extra cost. The alarms are to be supplied and fitted by the
KWS Security Term Contractor to the specification and costs laid down within the
term contract. A maintenance contract shall be taken up with the Term Contractor to
ensure the continued efficient functionality of the system.
Asset Management
17 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
2.2 Closed Circuit Television (CCTV)
Operational Requirement
CCTV coverage should be utilised to support the perimeter protection fence, intruder
detection system and access control system by providing the opportunity: to observe the site from within the control room, (on site and at the ROCC),
 recognise any unauthorised persons, or activities on site,
 Record the activities and to enable observers to initiate a timely response by
KW staff and / or the police.
In particular attention should be paid at all times to the entrance gate to record
people and vehicles entering and leaving the site. Entrances to buildings and critical
area’s of the site should also be the subject of constant monitoring via the Image
Recording systems (Digital) on site. The size and nature of the site will determine
the extent of camera coverage required but in all cases activity shall be recorded
from all cameras 24 hours per day with images retained for a minimum of 14 days.
KWS Term Contractor will carry out supply, installation and maintenance.
2.3 Security Lighting
Security lighting technology has evolved dramatically over the past 5 years or so.
Energy efficient, long life, light-emitting diodes (LED) have come on to the scene.
Starting with specialist CCTV infrared illumination, moving into white-light CCTV and
security lighting, LED products are now available.
It is the policy of Kelda Water to use LED lighting, where security lighting is required,
on new CCTV installations. Existing IR CCTV lights (incandescent bulbs) will be
replaced with LED lighting as soon as practicable.
Operational Requirement
General background lighting around KW sites / assets is also to be considered for
security purposes and the security design is to take into account security lighting
requirements. An operational requirement (OR) is to be completed prior to the
installation of security lighting and / or CCTV systems. As part of the ongoing site
security audit process the OR is to be revisited, and amended if necessary, on a
regular basis. The following is to be considered:



Event driven lighting (if an intruder is detected by a PIR)
Hybrid lighting (IR and white-light)
Lighting levels required
Design Considerations
The most important aspect in designing a security lighting system is achieving even
illumination. CCTV lighting must be designed to respect privacy zones and minimise
light pollution (as IR is invisible to the human eye it does not create light pollution
whereas White-Light does). CCTV lighting should be well specified, well designed
and well directed. The beam should be pointed down to minimise light spill. Extra
care should be taken with White-Light to ensure that only the target area is
Asset Management
18 of 19
Version 1 – Approved December 2013
Kelda Water Engineering Specification
Section 29 - Security
illuminated. Correctly specifying the angle of illumination (or using Adaptive
Illumination), to match the lighting to the target area or operating the light only upon
an event trigger are all good practice.
2.4 Access Control
On those sites where there is a high volume of vehicular traffic, an electrically driven
gate of the sliding cantilever type is to be installed in conjunction with a proximity
access control system. Doors must also be fitted with conventional locks for use out
of normal working hours. Access control systems shall be supplied and installed by
the KWS Term Contractor.
2.5 Audio, Radio and Wireless
Video Wave Digital is based on the 802.11 WLAN technology, especially adapted for
transmitting video and telemetry in the 2.4GHz and 5.6GHz license free bands. The
system is flexible, offering various configurations from simple point to point, to
multiple camera applications, with telemetry for full PTZ control where required. The
key feature of the RDT system is the ease of use, with simple set-up procedures
which require no laptop or specialist networking knowledge.
In the RDT system, standard analogue CCTV cameras are connected to a Video
Input Module (VIM), which converts the video to compressed H.264 digital format.
This signal is then routed to the transmitter for onward transmission. A number of
cameras, each with its own VIM, can be connected to a single transmitter via a
router.
2.4GHz Transmitter / Receiver
The RDT 2.4GHz Video Wave Digital transmission system is based on the 802.11g
wireless standard, especially adapted for transmitting video and telemetry in the
2.4GHz license free band. The system has been designed specifically for the CCTV
market, with ease of use and simplicity of installation being the key objective.
Units are supplied in IP67 weatherproof enclosures for direct external installation
suitable for most applications. There is an external RF antenna connection (SMA) so
that various antennas can be selected depending on the particular requirement.
These can be mounted directly on the unit or remotely mounted using an antenna
cable, to give additional height and flexibility.
3.0 – Security Risk Assessment
3.1
Security Risk Assessment Matrix
A security risk assessment (SRA) is required to be returned to the Security team for
all schemes. A guidance document (Excel spreadsheet) is attached.
Eng Spev V13 Section 29 - Security risk assessment matrix V3.xls
Asset Management
19 of 19
Version 1 – Approved December 2013