Lou, I found no hardware requirements that I believe should be moved to UL827

UL 1981ISBN 0-7629-0857-2

Bob Bonifas’s brainstorming ideas in a redline draft for discussion (accept ideas or reject them), expand them or modify them prior to

formal proposals

DRAFT dated MAY 6, 2008

Central-Station Automation Systems

In my opinion new major issues to be accommodated in the revision of UL1981:

1) Requirements for redundant UPS system and for central station of a certain size;

2) Accommodating receiver-less central stations with direct computer connections of broadband and wireless;

3) Recognition with UL1981 for second back-up computers to be housed off-premises, across the city or across the country;

4) Recognition within UL1981 of the use of wireless handheld devices in the field by tech employees to put systems in and out of test;

5) Recognition within UL1981 of activity levels where redundant power supplies should be required in computer servers connected to redundant UPS systems.

Underwriters Laboratories Inc. (UL) 333 Pfingsten Road Northbrook, IL 60062-2096

UL Standard for Safety for Central-Station Automation Systems, UL 1981

Second Edition

Dated June 30, 2003

SUMMARY OF TOPICSThis Second Edition is being published to adopt the revisions as proposed in UL's August 30, 2000 and October 30, 2002 bulletins.

UL Standards for Safety are developed and maintained in the Standard Generalized Markup Language (SGML). SGML -- an international standard (ISO 8879-1986) -- is a descriptive markup language that describes a document's structure and purpose, rather than its physical appearance on a page. Due to formatting differences resulting from the use of UL's new electronic publishing system, please note that additional pages (on which no requirements have been changed) may be included in revision pages due to relocation of existing text and reformatting of the Standard.

The following table lists future effective dates with the corresponding item.

Future Effective Date 

References 

June 30, 2005  Paragraphs 3.2, 4.3, 7.2.1, 7.2.2, 8.2, 12.1, 13.1, 13.2, 13.5, 13.6, 16.3, 16.4, 17.3, 17.6 - 17.8, 20.8, 20.12, 20.16, 21.2, 22.1 and 24.3

The new and revised requirements are substantially in accordance with UL's Bulletin(s) on this subject dated August 30, 2000 and October 30, 2002. The bulletin(s) is now obsolete and may be discarded.

The master for this Standard at UL's Northbrook Office is the official document insofar as it relates to a UL service and the compliance of a product with respect to the requirements for that product and service, or if there are questions regarding the accuracy of this Standard.

UL's Standards for Safety are copyrighted by UL. Neither a printed copy of a Standard, nor the distribution diskette for a Standard-on-Diskette and the file for the Standard on the distribution diskette should be altered in any way. All of UL's Standards and all copyrights, ownerships, and rights regarding those Standards shall remain the sole and exclusive property of UL.

All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form by any means, electronic, mechanical photocopying, recording, or otherwise without prior permission of UL.

Revisions of UL Standards for Safety are issued from time to time. A UL Standard for Safety is current only if it incorporates the most recently adopted revisions.

UL provides this Standard "as is" without warranty of any kind, either expressed or implied, including but not limited to, the implied warranties of merchantability or fitness for any purpose.

In no event will UL be liable for any special, incidental, consequential, indirect or similar damages, including loss of profits, lost savings, loss of data, or any other damages arising out of the use of or the inability to use this Standard, even if UL or an authorized UL representative has been advised of the possibility of such damage. In no event shall UL's liability for any damage ever exceed the price paid for this Standard, regardless of the form of the claim.

UL will attempt to answer support requests concerning electronic versions of its Standards. However, this support service is offered on a reasonable efforts basis only, and UL may not be able to resolve every support request. UL supports the electronic versions of its Standards only if they are used under the conditions and operating systems for which it is intended. UL's support policies may change from time-to-time without notification.

UL reserves the right to change the format, presentation, file types and formats, delivery methods and formats, and the like of both its printed and electronic Standards without prior notice.

Purchasers of the electronic versions of UL's Standards for Safety agree to defend, indemnify, and hold UL harmless from and against any loss, expense, liability, damage, claim, or judgement (including reasonable attorney's fees) resulting from any error or deviation introduced while purchaser is storing an electronic Standard on the purchaser's computer system.

If a single-user version electronic Standard was purchased, one copy of this Standard may be stored on the hard disk of a single personal computer, or on a single LAN file-server or the permanent storage device of a multiple-user computer in such a manner that this Standard may only be accessed by one user at a time and for which there is no possibility of multiple concurrent access.

If a multiple-user version electronic Standard was purchased, one copy of the Standard may be stored on a single LAN file-server, or on the permanent storage device of a multiple-user computer, or on an Intranet server. The number of concurrent users shall not exceed the number of users authorized.

Electronic Standards are intended for on-line use, such as for viewing the requirements of a Standard, conducting a word search, and the like. Only one copy of the Standard may be printed from each single-user version of an electronic Standard. Only one copy of the Standard may be printed for each authorized user of a multiple-user version of an electronic Standard. Because of differences in the computer/software/printer setup used by UL and those of electronic Standards purchasers, the printed copy obtained by a purchaser may not look exactly like the on-line screen view or the printed Standard.

An employee of an organization purchasing a UL Standard can make a copy of the page or pages being viewed for their own fair and/or practical internal use.

The requirements in this Standard are now in effect, except for those paragraphs, sections, tables, figures, and/or other elements of the Standard having future effective dates as indicated in the note following the affected item. The prior text for requirements that have been revised and that have a future effective date are located after the Standard, and are preceded by a "SUPERSEDED REQUIREMENTS" notice.

New product submittals made prior to a specified future effective date will be judged under all of the requirements in this Standard including those requirements with a specified future effective date, unless the applicant specifically requests that the product be judged under the current requirements. However, if the applicant elects this option, it should be noted that compliance with all the requirements in this Standard will be required as a condition of continued Listing, Recognition, and Follow-Up Services after the effective date, and understanding of this should be signified in writing.

Copyright © 2003 Underwriters Laboratories Inc.

JUNE 30, 2003

UL 1981

Standard for Central-Station Automation SystemsPrior to the first edition, the requirements for the products covered by this standard were included in the Standard for Central-Station Burglar-Alarm Units, UL 1610.

First Edition - October, 1994

Second Edition

June 30, 2003

Revisions of this standard will be made by issuing revised or additional pages bearing their date of issue. A UL Standard is current only if it incorporates the most recently adopted revisions, all of which are itemized on the transmittal notice that accompanies the latest published set of revision pages.

ISBN 0-7629-0857-2

COPYRIGHT © 1994, 2003 UNDERWRITERS LABORATORIES, INC.

FOREWORDA. This Standard contains basic requirements for products covered by Underwriters Laboratories Inc. (UL) under its Follow-Up Service for this category within the limitations given below and in the Scope section of this Standard. These requirements are based upon sound engineering principles, research, records of tests and field experience, and an appreciation of the problems of manufacture, installation, and use derived from consultation with and information obtained from manufacturers, users, inspection authorities, and others having specialized experience. They are subject to revision as further experience and investigation may show is necessary or desirable.

B. The observance of the requirements of this Standard by a manufacturer is one of the conditions of the continued coverage of the manufacturer's product.

C. A product which complies with the text of this Standard will not necessarily be judged to comply with the Standard if, when examined and tested, it is found to have other features which impair the level of safety contemplated by these requirements.

D. A product employing materials or having forms of construction which conflict with specific requirements of the Standard cannot be judged to comply with the Standard. A product employing materials or having forms of construction not addressed by this Standard may be examined and tested according to the intent of the requirements and, if found to meet the intent of this Standard, may be judged to comply with the Standard.

E. UL, in performing its functions in accordance with its objectives, does not assume or undertake to discharge any responsibility of the manufacturer or any other party. The opinions and findings of UL represent its professional judgment given with due consideration to the necessary limitations of practical operation and state of the art at the time the Standard is processed. UL shall not be responsible to anyone for the use of or reliance upon this Standard by anyone. UL shall not incur any obligation or liability for damages, including consequential damages, arising out of or in connection with the use, interpretation of, or reliance upon this Standard.

F. Many tests required by the Standards of UL are inherently hazardous and adequate safeguards for personnel and property shall be employed in conducting such tests.

INTRODUCTION 

1 Scope

1.1 These requirements cover computerized central-station automation systems intended for use in central-station, proprietary, remote and subsidiary burglar-, and fire-alarm applications for the purpose of automating the signal handling and processing of change-of-status signals generated by receivers. In case of failure of an automation system, the receiving equipment is relied on for receiving and recording change-of-status signals and the provision of an audible and visual signal that identifies the source and type of signal that requires operator attention. These systems are intended to be installed in accordance with the following:

a)     The National Electrical Code, NFPA 70;

b)     The National Fire Alarm Code, NFPA 72; and

c)     The Standard for Central-Station Alarm Services, UL 827.

 1.2 A product that contains features, characteristics, components, materials, or systems new or different from those covered by the requirements in this standard, and that involves a risk of fire or of electric shock or injury to persons shall be evaluated using appropriate additional component and end-product requirements to maintain the level of safety as originally anticipated by the intent of this standard. A product whose features, characteristics, components, materials, or systems conflict with specific requirements or provisions of this standard does not comply with this standard. Revision of requirements shall be proposed and adopted in conformance with the methods employed for development, revision, and implementation of this standard. 

2 General

 

2.1 Components

 2.1.1 Except as indicated in 2.1.2, a component of a product covered by this standard shall comply with the requirements for that component. See Appendix A

for a list of standards covering components used in the products covered by this standard. 2.1.2 A component is not required to comply with a specific requirement that:

a)     Involves a feature or characteristic not required in the application of the component in the product covered by this standard, or

b)     Is superseded by a requirement in this standard.

 2.1.3 A component shall be used in accordance with its rating established for the intended conditions of use. 2.1.4 Specific components are incomplete in construction features or restricted in performance capabilities. Such components are intended for use only under limited conditions, such as certain temperatures not exceeding specified limits, and shall be used only under those specific conditions. 

2.2 Units of measurement

 2.2.1 Values stated without parentheses are the requirement. Values in parentheses are explanatory or approximate information. 

2.3 Undated references

 2.3.1 Any undated reference to a code or standard appearing in the requirements of this standard shall be interpreted as referring to the latest edition of that code or standard. 

3 Glossary

 3.1 For the purpose of this standard the following definitions apply.  3.2 ACTIVE SYSTEM - Any premises system that is preprogrammed to send more than 1 signal per day to the central station automation system.

3.2 revised effective June 30, 2005

  3.3 ALARM-MONITORING SOFTWARE - The sequence of instructions that tells the hardware how to handle the incoming signals and instructions from the keyboard. The alarm-monitoring software controls how the messages are stored in memory and how they are displayed on the operator terminal and printers.  3.4 ALARM SIGNAL - A signal from ana premises alarm system which requires immediate action. A signal, such as the alarm initiated from a manual box, a waterflow switch, an automatic fire detector, an intrusion detection unit, hold-up initiating device, door contact, or tamper switch, that indicates an emergency, fire or burglary condition requiring immediate action.  3.5 ANSWERBACK - A technique whereby modems contain keywords (not less than eight characters long) that are identical. When one modem "calls" the other, they automatically exchange their keywords and, when there is a match, they stay on-line. This interaction shall happen within three seconds or the called modem goes on-hook.  3.6 AUTOMATION SYSTEM - A computer system that consists of hardware and software components. These components include the alarm-monitoring software supplied by the automation system developer, the operating system, and programming languages, required to make the system operational. An automated system may be configured as a computer system that receives alarm signals directly into the automation system software from premises systems, that is directly connected to central-station receivers or is connected to remote receivers located in central-stations other than the one where the automation system is located. It is used to automatically process change-of-status signals such as alarm, trouble, supervisory, disarmings and armings (openings and closings), tests and similar signals that it receives directly from premises systems or from the central-station receiving equipment.  3.7 AUTOMATION SYSTEM HARDWARE COMPONENT - A separate removable/interchangeable section of the system including but not limited to any associated power supply; a supervisory module (watchdog timer) for the disk drive, processor, or primary power, and similar components; operator terminal; printer; interface equipment; and similar equipment.  3.8 AUTOMATION SYSTEM SOFTWARE DEVELOPER - A company that develops the alarm-monitoring software and specifies the minimum hardware platform specifications required for the combination of hardware and software to process signals from a subscriber's account in accordance with:

a)     The National Fire Alarm Code, NFPA 72;

b)     The Standard for Central-Station Alarm Services, UL 827; and

c)     The requirements of this standard.

  3.9 AUTOMATION SYSTEM'S ALARM SYSTEM DATA BASE - The system data base includes alarm system (account) information entered into the computer by central-station personnel. This information includes names and addresses of subscriber accounts; disarming and arming (opening and closing) schedules for individual alarm systems (accounts); dispatch information such as subscribers' phone numbers, police department phone numbers, and fire department phone numbers; and graphics and other relevant information.  3.10 CALLBACK - A technique whereby a "called" modem will accept only passwords that it is programmed to accept. Once a match is made, the modem goes on-hook, then off-hook, and dials a predetermined telephone/modem number.  Note: Do we need language or definitions for broadband and cable modems?

3.11 CENTRAL-STATION - A building, or enclosed area within a building, that houses an operating room and equipment used to provide central-station service to protected properties that are served by the central-station. Refer to the Standard for Central-Station Alarm Services, UL 827, and the National Fire Alarm Code, NFPA 72.  3.12 CENTRAL STATION PERSONNEL - Any employee of the central station who has the authority and access level to do what is described under specific paragraphs of this standard.  3.13 CENTRAL-STATION SERVICE - The use of a system or a group of systems in which the operation of circuits and devices at a protected property are signaled to, recorded in, and supervised from a central-station having trained operators who, upon receipt of a signal, take such action as required by the nature of the signal received.  3.14 Deleted June 30, 2003  3.15 CERTIFICATED SYSTEM - A system that is in compliance with the Standard for Installation and Classification of Burglar and Holdup Alarm Systems, UL 681, the Standard for Central-Station Alarm Services, UL 827; the Standard for Proprietary Burglar Alarm Units and Systems, UL 1076; or the National Fire Alarm Code, NFPA 72.  3.16 CONTROL UNIT, CENTRAL-STATION (RECEIVING UNIT) - Electrically operated receiving equipment located at a central-station which monitors the status of protected premises. The receiving equipment connected to an

automation system receives signals from alarm systems and transmits relays them to the automation system.  3.17 DEGRADED MODE OF OPERATION - A hardware or software failure that degrades the operation of the automation system to a point that the operators are required to handle alarm messages directly from the receivers.  3.18 DIAGNOSTICS - Software programs intended to self-test the automation system to determine that the computer hardware and software are operating as intended.  3.19 FAULT-TOLERANT COMPUTER SYSTEM - A computer system containing multiple power supplies, disks, processors, and controllers, each backing-up and checking on the processes of the others. In the event of a component failure, the other modules take over the job performed by the failed component without affecting the operation of the computer. In addition to the duplicate hardware, a fault-tolerant system includes software components consisting of the operating system, programming languages, and the alarm-monitoring software supplied by the automation system software developer required to make the system operational. See 3.21 and 3.33 for the definitions of a hot back-up and redundant computer system. A fault-tolerant computer system as defined above is considered to be a redundant system.  3.20 HARDWARE - Physical computer equipment (computer, disk drive, terminal, printer, memory boards, and similar equipment) that constitutes the automation system.  3.21 HOT BACK-UP - A continuously energized computer system that is a first or second back-up to the primary system computer and disk drive. The alarm system (account) information/signal processing is constantly or periodically updated in both the primary and the backup computers.  3.22 HVAC SYSTEM - Heating, ventilating, and air conditioning system.  3.23 INACTIVE SYSTEM - An alarm system that transmits a signal to the central-station only when an exception alarm, trouble, or supervisory condition exists or it is under test. Examples of an inactive alarm system are fire and holdup alarm systems, and burglar alarm systems supervising protected premises without the use of disarming and arming (opening and closing) signals. The 24-hour supervisory check-in signal transmitted by a digital alarm communicator transmitter or a one-way radio (RF) transmitter does not make an alarm system an active alarm system. An alarm system is considered inactive when the 24-hour supervisory signal is the only signal normally transmitted on a daily basis.  Note: Should the whole concept of an active and inactive system be scrapped?

3.24 INCIDENT - One or more alarm signals (i.e., fire, burglary, or holdup) of a related type received from an a premises alarm system that require investigation by an authority having jurisdiction, alarm company, and/or subscriber.  3.25 LEVEL OF ACCESS - The privileges associated with the security sign-on to the automation system. This is typically defined as having the ability to do one or more of the following to the automation system database or the alarm-monitoring software:

a)     View only,

b)     View and modify only,

c)     Add,

d)     Delete,

e)     Access alarm-monitoring software,

f)     Access certain segments of the database,

g)     Alter "master" files,

h)     Alter "operating" parameters, and

i)     Stop and start the computer.

These privileges can also be mixed for one security sign-on giving various levels of access to different functions of the system.  3.26 MANUAL RECORDS - Records that may be maintained on paper, microfiche, or the non-volatile memory of a computer independent of the automation system. The records include alarm system (account) information that can be referred to in order to decode the signals on the receivers.  3.27 MODEM - A device that modulates and demodulates digital signals into analog frequencies that can be carried over a telephone network. Most modems are also capable of dialing and receiving telephone calls between modems.  Note: Should the modem be labeled a telephone modem?

3.28 NON-REDUNDANT COMPUTER SYSTEM - A single computer system used as an automation system.  3.29 NON-VOLATILE MEMORY - The type of memory wherein interruption of power will not result in loss of information content in the storage medium.

  3.30 OFF-SITE LOCATION - A location that is outside of and away from the building that houses the central-station (e.g., a separate building at the same address, or a building at a different address).  3.31 OPERATING ROOM - The area within a central-station that is physically secure and where operators receive and respond to the signals that are transmitted to the central-station.  3.32 OPERATOR'S TERMINAL - A terminal, consisting of a video display and keyboard, used for displaying and processing alarm, trouble, supervisory signals, and other similar signals.  3.33 REDUNDANT COMPUTER SYSTEM - Two or more computer systems maintained at a central-stationone or more locations, either any of which can quickly be connected and operational for processing alarm signals in the event that the other primary computer fails to operate. See 3.19 for the definition of a fault-tolerant computer system. A fault-tolerant computer system is considered to be redundant.  3.34 REMOTE AUTOMATION SYSTEM EQUIPMENT - Automation system equipment located at a remote location such as a fire department or police department or any other location and networked to an automation system located in a central-station. This equipment includes terminals, printers, and personal computers that perform functions of a terminal, modems, and similar equipment.  3.35 REMOTE LOCATION - A place where a connection to the central-station automation system exists outside the confines of the central-station. There is no alarm handling at a remote location except when the location is a police station or fire department.  3.36 RUNAWAY SYSTEM - Any alarm system that transmits a greater number of signals than the automation system is preprogrammed to receive within a preprogrammed period of time. The number of signals and the time frame which define a runaway system are agreed upon by the central-station and the automation system software provider. For example, a central-station may define a runaway system as one that transmits more than 20 signals of the same type within 30 minutes. The automation system software developer programs the automation system to this specification. An automation system programmed with the runaway system criteria provided by the central-station meets the requirement of 20.19.  3.37 SECURITY SIGN-ON - A technique used to prevent unauthorized access into a computer system. The security sign-on as referenced in this standard shall consist of not less than six alpha-numeric characters and shall also govern the level of access.

  3.38 SERVICING TERMINAL - A video display terminal used by service personnel. This terminal is not intended for alarm-monitoring and processing.  3.39 SOFTWARE - The automation system computer program that operates on the computer hardware. The software includes two main portions - an alarm-monitoring software and an operating system.  3.40 SUBSCRIBER - The user of a premises or item protected by a central-station burglar or fire-alarm system. An authorized representative of the user is also considered a subscriber.

3.41 SUBSIDIARY STATION - A normally unattended, physically secure facility which is linked by communication channels to a central-station. Signals from alarm systems are transmitted to the subsidiary station and then relayed to the central-station. When the communication link between the subsidiary station and the central-station is out of service, the subsidiary station is capable of being staffed and operated as a central-station.  3.42 TELECOMMUNICATIONS NETWORK - Any network that is connected to the telephone lines.

Note: Is 3.42 still currently active with cable and wireless?

3.43 VOLATILE MEMORY - The type of memory wherein any interruption of power will result in loss of information content in the storage medium.  3.44 WATCHDOG TIMER - A hardware or software supervisory module which supervises the disk drives, micro-processors, power supply output, and similar components. 

4 Installation Instructions

 4.1 A copy of the operating and installation instructions shall be furnished with the automation system submitted for investigation and shall be used as a guide in the examination and test of the system. A final edition is not required for this purpose. 4.2 The instructions shall include concise descriptions of the operation, testing, and maintenance procedures for the product(s), and recommended testing frequency. Additional information is not prohibited from being included. 4.3 The instruction manual shall have a section which specifically describes the

system configuration. This section shall include the following equipment requirements for the automation system:

a)     Minimum system specifications -

1)     Operating system class, minimum revision level and/or kernel type and revision level;

2)     For PC-based systems, the most basic microprocessor that the software is designed to work with and the minimum speed of the microprocessor. For systems using minicomputers, the basic system model or family as well as the microprocessor and its speed designation;

3)     Minimum disk storage space required;

4)     Minimum internal memory size; and

5)     Minimum revision level of the alarm-monitoring software.

b)     Environmental controls - Hardware shall be located in an environment where the temperature is maintained at a level within the temperature rating range of the equipment.c)     HVAC standby power - The HVAC system shall have 24 hours of standby power. The standby power for the HVAC shall be provided by the central-station's engine-driven generator(s). When the central-station chooses to do so, it may provide the standby power for the HVAC system by an uninterruptible power supply (UPS), or similar equipment. Exception: When the hardware is rated for use in environments with temperatures between 32°F (0°C) and 120°F (49°C), standby power is not required for the HVAC system. Note: In hot or cold weather central station personnel cannot work in extreme temperatures so this temperature exception should be deleted.d)     Source of power -

1)     Hardware Automation systems and interconnected components shall be powered by aredundant UPS systems that complies comply with either the Standard for Uninterruptible Power Systems, UL 1778, or the Standard for Power Supplies for Fire-Protective Signaling Systems, UL 1481.

2)     In order to perform maintenance and repair service, a means for disconnecting the input to a UPS and output from a UPS while maintaining continuity of power supply to the automation system shall be provided.

3)     When a power conditioner is being used, it shall comply with the Standard for Power Units Other Than Class 2, UL 1012. In order to perform maintenance and repair service, a means for disconnecting the input to a power conditioner and output from a power conditioner while maintaining continuity of power to the automation system shall be provided.

e)     Supply-line transient protection - Hardware shall be protected by transient voltage surge suppressors that comply with the Standard for Transient Voltage Surge Suppressors, UL 1449. The transient voltage surge suppressors for single-phase, 120/208/220 V AC systems shall have a marked rating of 330 volts or less. The transient voltage surge suppressors for 3-phase, 480 V AC or higher-rated systems shall have a marked rating of 400 volts or less.f)     Signaling-line transient protection -

1)     The communication circuits contained within the central-station building and not connected to the telecommunications network shall be protected by isolated loop circuit protectors. These protectors shall comply with the Standard for Protectors for Data Communications and Fire Alarm Circuits, UL 497B, and shall have a marked rating of 50 volts or less.

2)     Communication circuits connected to the telecommunications network shall be protected by secondary protectors for communication circuits. These protectors shall comply with the Standard for Secondary Protectors for Communications Circuits, UL 497A, and shall have a marked rating of 150 volts or less. These protectors shall be used only in the protected side of the telecommunications network.

Exception: Equipment connected to telecommunications circuits which has been evaluated to the requirements of the Standard for Control Units for Fire-Protective Signaling Systems,

UL 864, are not required to have protection devices evaluated to the requirements of UL 497A.

g)     Minimum system configuration - List of components constituting minimum system configuration for redundant/non-redundant systems (including CRTs, printers, computers, watchdog timers, and similar equipment).h)     Software version - Instructions on how to display the software version.

Revised 4.3(f) effective June 30, 2005

CONSTRUCTION 

5 General

 5.1 Data processing equipment and office appliance and business equipment used in an automation system shall comply with the Standard for Information Technology Equipment, UL 1950. 

6 Power Supply Sources

 6.1 In addition to the primary power supply and secondary power supply sources that are required to be provided at the central-station, the system shall be provided with an 2 or more redundant, uninterruptible power supply supplies (UPS) each with sufficient capacity to operate the computer equipment for a minimum of 15 minutes. If more than 15 minutes is required for the secondary power supply to supply the UPS input power, the UPS shall be capable of providing input power for at least that amount of time. 

7 Electrical Transient Protection

 

7.1 Supply-line transient protection

 7.1.1 The automation system hardware primary power source shall be protected by transient voltage surge suppressors that comply with the Standard for Transient Voltage Surge Suppressors, UL 1449. The transient voltage surge suppressors for single-phase, 120/220 V AC systems shall have a marked rating

of 330 volts or less. The transient voltage surge suppressors for 3-phase, 480 V AC or higher-rated systems shall have a marked rating of 400 volts or less. 

7.2 Signaling-line transient protection

 7.2.1 All ports of the automation system that are connected to communication circuits contained within the central-station building and not connected to the telecommunications network shall be protected by isolated loop circuit protectors for communication circuits. These protectors shall comply with the requirements in the Standard for Protectors for Data Communication and Fire Alarm Circuits, UL 497B. The transient protectors shall have a marked rating of 50 volts or less.

Exception No. 1: When all of the equipment connected to the automation system is located in the same room as the automation system and is not more than 25 feet (7.62 m) apart, and is not connected to the telecommunications network, isolated loop circuit protection is not required.

Exception No. 2: Transient voltage surge protection is not required for fiber optic circuits.

7.2.1 revised effective June 30, 2005

 7.2.2 Communication circuits connected to the telecommunications network shall be protected by secondary protectors for communication circuits. These protectors shall comply with the Standard for Secondary Protectors for Communications Circuits, UL 497A. These protectors shall be used only in the protected side of the telecommunications network. The transient protectors shall have a marked rating of 150 volts or less.

Exception: Equipment connected to telecommunications circuits which has been evaluated to the requirements of the Standard for Control Units for Fire-Protective Signaling Systems, UL 864, are not required to have protection devices evaluated to the requirements of UL 497A.

7.2.2 added effective June 30, 2005

 

8 Environmental Controls

 8.1 The automation system hardware (computers, monitors, disk drives, and similar equipment) shall be located in an environment where the temperature is maintained at a level within the temperature rating range of the equipment. The HVAC system shall be redundant and shall have 24 hours of standby power. The

standby power for the HVAC shall be provided by the central-station's engine-driven generator(s), or similar equipment. When the central-station chooses to do so, it is not prohibited from providing the standby power for the HVAC system by an uninterruptible power supply (UPS).

Note: Is this exception legitimate?

Exception: Standby power is not required for the HVAC system when the automation system hardware is rated for use in environments with temperatures between 32°F (0°C) and 120°F (49°C).  

8.2 A maintenance contract that provides for restoring operation of the HVAC system within 24 hours, 7 days a week shall be in place if the HVAC system is not redundant.

8.2 added effective June 30, 2005

 

9 Central-Station Staffing

 9.1 Central-station staffing shall be such that all alarm signals are acknowledged and verification and/or dispatch actions initiated within 45 seconds of signal acknowledgment by the central station automation system or receiver kiss-off to the alarm panel. 

10 Power Conditioners

 10.1 A power conditioner used with the system shall comply with the applicable requirements in the Standard for Power Units Other Than Class 2, UL 1012. In order to perform maintenance and repair service, a means for disconnecting the input to a power conditioner and output from a power conditioner while maintaining continuity of power to the automation system shall be provided. 

11 Uninterruptible Power Supplies

 11.1 The uninterruptible power supply supplies (UPS) used with the system shall comply with the Standard for Uninterruptible Power Systems, UL 1778, or the Standard for Power Supplies for Fire-Protective Signaling Systems, UL 1481. 11.2 In order to perform maintenance and repair service, a means for

disconnecting the input to a UPS and output from a UPS while maintaining continuity of power supply to the automation system shall be provided. 

12 Printerless Environment

 12.1 A central-station is not prohibited from using computer equipment (event loggers) to record signals received on receivers, in lieu of printers that are connected to or are part of receiving equipment, when the following conditions are met:

a)     Computers used for this purpose shall be redundant;

b)     In the event of failure of either the primary or back-up computer, there shall be an audible or visual indication within 90 seconds of the failure. The signal shall be obvious to the operator/responsible central-station staff. In addition, the central-station staff shall be capable of, and the back-up computer shall be ready for, switching over within 30 seconds so that the back-up computer is energized and connected to the affected receivers or premises signaling circuits when primary.

c)     The primary and back-up computers shall be isolated from the automation system computer/s (i.e., these computers shall not be configured in such a way that the signals from the receivers that are intended to be transmitted to the automation system computer/s have to first pass through the primary and back-up computers).

Note: Isn’t the primary computer the automation system?

d)     The primary and back-up computers shall have transient protection as required in Electrical Transient Protection, Section 7.

e)     The communication lines between the computer and the receiver or computer and the premises signaling circuits must be supervised so that, within 90 seconds, a distinct audible or visual trouble signal indicates the occurrence of a single break, a single ground-fault condition, or a short circuit that prevents the required operation of the computer.

f)     The captured signals must be retrievable upon demand in maximum within 5 seconds.

g)     Signals must be presented, at a minimum, in the same manner as they would be by receiver printers.

12.1 added effective June 30, 2005

 

13 Back-up Components

 13.1 The back-up component requirements depend on the final application of the automation system. Back-up components of the automation system are not required when all of the following conditions are met:

a)     The automation system does not serve more than 200 active systems nor more than 1000 inactive systems and operates in the degraded mode of operation using the receivers;

b)     The central-station supervisors and operators are trained for a period of not less than one hour per month and tested in the use of receivers, UPS units, printers, back-up procedures, emergency call lists, and other procedures in preparation for an automation system failure. A log documenting such training and testing shall be available at the central-station;

c)     The central-station shall maintain sufficient current documentation on hand to enable the operators to handle signals directly from the receiver;

d)     Upon failure of the automation system, the required functions of the receivers connected to the automation system, which may be suppressed, shall revert to their normal operation. These functions include printing all incoming signals and providing audible and visual indications of change-of-status signals; and

e)     The receivers are located in the same room or area as the operators and are accessible for operation. A partition made of glass or other durable, transparent material may separate the operators and the receivers. This partition shall not prevent operator access to the receivers.

Revised 13.1 (b) and (c) effective June 30, 2005 13.2 If the automation system serves more than 200 active alarm systems or more than 1000 inactive alarm systems, the following conditions shall be met:

a)     The automation system's main computer; hard disk; main computer's video display terminal; and the software components

including the operating system, program languages, and the alarm-monitoring software shall be completely duplicated. In the event of failure of the automation system's main computer, central-station staff shall be capable of, and the first back-up computer shall be ready for, switching over within 30 seconds so that the first back-up computer is energized and connected to the receivers, printers, and other devices required for the system. The back-up system shall be fully operational within 6 minutes of the loss of the primary system. This allows 30 seconds for plugging in the computer and switching the communication lines over to the first back-up system and also allows 5-1/2 additional minutes for the system to boot up, conduct memory tests, file system check, security verifications, and prepare for full operation. The first back-up computer shall have all the capabilities of the primary, including capacity and speed. The central-station operators and supervisor(s) shall be trained monthly in making the switchover and bringing the first back-up computer on line. When the automation system is configured in a hot back-up mode, the first back-up computer shall have its own watchdog timer.

Exception No. 1: The first back-up computer is not prohibited from having less computing power than the primary computer when non-alarm functions (such as accounting operations and energy management) that are performed on the primary computer are not performed on the first back-up computer and its alarm-monitoring performance is identical to or exceeds that of the primary.

Exception No. 2: A watchdog timer is not required if the automation system has a first hot back-up configuration and the following conditions are met:

a)     The primary/active computer monitors the operation of the first back-up computer and

b)     The primary/active computer is capable of generating an audible and visual signal within 90 seconds of the occurrence of a fault.

A visual display condition under which the failure or switchover condition is obvious to the operator is not prohibited from being used in lieu of both a visual and an audible signal.

b)     The central-station operators and supervisor(s) are trained for a period of not less than one hour per month and tested in the use of receivers, UPS units, printers, back-up procedures, emergency call lists, and other procedures in preparation for an automation

system failure. Sufficient current documentation shall be kept on hand to process signals directly from the receivers where used. A log documenting such training shall be available at the central-station.c)     The receivers are located in the same room or area as the operators. A partition made of glass or other durable, transparent material may separate the operators from the receivers. This partition shall not prevent operator access to the receivers.d)     The alarm system data base on the first back-up computer shall be updated not less than once every 24 hours. Central-stations that serve not more than 1000 active alarm systems or not more than 5000 inactive alarm systems may update the data base on the first back-up computer on a weekly basis when a back-up copy of the data base is made on a floppy disk or tape not less than once every 24 hours.e)     If the automation system does not have a hot back-up configuration, the back-up computer shall be energized, and a diagnostic conducted, on a weekly basis. A log documenting this energization and diagnostic testing shall be maintained at the central station.f)     All the network equipment through which signals pass is redundant. Redundancy is capable of being achieved by having back-up network equipment placed near the on-line unit so that connection to the network is accomplished in 6 minutes.

13.2 revised effective June 30, 2005

 13.3 In a hot redundant or a fault-tolerant configuration, failure of either the primary or first back-up computer system, and switchover to its back-up shall be indicated by an audible and visual signal within 90 seconds of the occurrence of the fault. A visual display condition under which the failure or switchover condition is obvious to the operator is not prohibited from being used in lieu of both a visual and an audible signal. 13.4 A fault-tolerant computer system may be used in lieu of complete duplication of the system when every component in the fault-tolerant computer system, including the software and the power supply cord, is duplicated. 13.5 When the automation system serves more than 25,0005,000 active accounts or more than 125,00010,000 inactive accounts, the primary and back-up computers shall be configured in a hot back-up mode. In addition, the following conditions shall be met:

a)     There shall be a second back-up computer that has the same capacity and performance as the primary or the first back-up computer.

b)     In the event of failure of the automation system's primary and first back-up computers, central-station staff shall be capable of, and the second back-up computer shall be ready for, switching over within 30 seconds so that the second back-up computer is energized and connected to the receivers and other devices required for the system. The second back-up system shall be fully operational within 6 minutes of the loss of the primary or the back-up system. This allows 30 seconds for plugging in the computer and switching the communication lines over to the second back-up system and also allows 5-1/2 additional minutes for the system to boot up, conduct memory tests, file system check, security verifications, and prepare for full operation. The second back-up computer shall have all the capabilities of the primary or the back-up automation system, including capacity and speed. The central-station operators and supervisor(s) shall be trained monthly in making the switchover and bringing the second back-up computer on-line.

c)     The second back-up computer shall have its own UPS which meets all of the requirements specified in this standard or is configured in such a way that it is capable of being connected to the primary or first back-up computer's UPS in time to meet the requirements of 13.5(b).

d)     The alarm system data base on the second back-up computer shall be updated not less than once every 24 hours.

e)     All the network equipment through which signals pass is redundant. Redundancy is capable of being achieved by having a back-up network equipment placed near the on-line unit so that connection to the network is accomplished in 6 minutes.

13.5 added effective June 30, 2005

 13.6 When the automation system serves more than 25,000 active account the following conditions shall be met:

a)     There shall be a second back-up computer that has the same capacity and performance as the primary or the first back-up computer.

b)     In the event of failure of the automation system's primary and first back-up computers, central-station staff shall be capable of, and the second back-up computer shall be ready for, switching over

within 30 seconds so that the second back-up computer is energized and connected to the receivers and other devices required for the system. The second back-up system shall be fully operational within 6 minutes of the loss of the primary or the back-up system. This allows 30 seconds for plugging in the computer and switching the communication lines over to the second back-up system and also allows 5-1/2 additional minutes for the system to boot up, conduct memory tests, file system check, security verifications, and prepare for full operation. The second back-up computer shall have all the capabilities of the primary or the back-up automation system, including capacity and speed. The central-station operators and supervisor(s) shall be trained monthly in making the switchover and bringing the second back-up computer on-line.

c)     The second back-up computer shall have its own UPS which meets all of the requirements specified in this standard. or is configured in such a way that it is capable of being connected to the primary or first back-up computer's UPS in time to meet the requirements of 13.5(b).

d) The central station shall be required to have two uninterruptable power supplies (UPS) each capable of powering the automation systems to meet the requirements of this standard for a minimum of 15 minutes.

e) The primary and first back-up computers shall be required to be equipped with duplicate power supplies connected to each of the two UPS systems.

fd)     The alarm system data base on the second back-up computer shall be updated not less than once every 24 hours.

ge)     All the network equipment through which signals pass is redundant. Redundancy is capable of being achieved by having a back-up network equipment placed near the on-line unit so that connection to the network is accomplished in 6 minutes.

h) Signal receiving equipment is not required when the requirements of this Section 13.6 have been met. Signaling can be input directly into an input port of the automation system.

i) Degraded mode operation shall not be required when the requirements of this Section 13.6 are met.

j) A fault tolerant configuration shall meet the requirements of the primary

and first back-up automation systems required in Section 13.6.

13.76 In a hot redundant or a fault-tolerant configuration, failure of either the primary or back-up computers, and switchover to their back-up shall be indicated by an audible and visual signal within 90 seconds of the occurrence of the fault. A visual display condition under which the failure or switchover condition is obvious to the operator is not prohibited from being used in lieu of both a visual and an audible signal.

13.6 added effective June 30, 2005

 

14 Spare Parts - Maintenance and Service

 14.1 An automation system (single or duplicated) shall be provided with the necessary spare parts and the personnel shall be provided with the necessary expertise to ensure that the system can be placed back in service within 24 hours of failure. A maintenance contract that provides for restoring operation of the automation system within 24 hours is one method that demonstrates compliance. 14.2 There shall be one spare operator terminal and one spare printer for every five being operated. A minimum of one spare operator terminal and printer is required when less than five of each are being used. The spare units are not prohibited from being used in nonessential duties within the central-station's building or suite of offices where they can be relocated or left in place and put into service for essential duty. 

15 Alarm Receiving Equipment

 15.1 Separate alarm signal receiving equipment for use with automation systems shall comply with:

a)     The Standard for Control Units for Fire-Protective Signaling Systems, UL 864:

b)     The Standard for Central-Station Burglar-Alarm Units, UL 1610;

c)     The Standard for Digital Alarm Communicator System Units, UL 1635; and

d)     The Standard for Proprietary Burglar Alarm Units and Systems, UL 1076, when applicable.

16 Back-up Media

 16.1 Daily back-up copies of the automation system's alarm system data base shall be generated for restoring purposes. The most recent back-up copy shall be kept on-site in the event that problems develop with the alarm system data base. At a minimum, bi-weekly back-up copies of the alarm system data base and alarm monitoring software shall also be maintained at a secure off-site location.

Exception: Back-up copies of the alarm system data base and alarm-monitoring software of automation systems that serve not more than 1000 active alarm systems or not more than 5000 inactive alarm systems are to be generated and maintained at a secure off-site location on a minimum of once per month.  16.2 In addition, a copy of the operating system shall be kept on-site and at the off-site location. The off-site location is not prohibited from being the software developer's location, if a copy of the operating system can be delivered to the central station within 24 hours.

16.3 Manual records (paper records, microfiche, personal computer storage) shall be kept in the operating area for reference in the event of loss of the automation system. These records shall be updated biweekly.Exception: Central-Stations that use a second back-up computer meeting the requirements of 13.5 are not required to comply with the requirement of 16.3.

16.3 revised effective June 30, 2005

 16.4 Twenty-four-hour access shall be provided for all back-up data records required in 16.1 and 16.2 maintained at an off-site location.

16.4 added effective June 30, 2005

 

17 Remote Connections

 17.1 All components of a central-station automation system, other than a power conditioner, a second back-up computer or a UPS, shall be located within the operating room. Components of an automation system that are not located within the operating room shall be located within the physical central-station building or an enclosed area within a building that houses the central-station except as indicated in Exception Nos. 1 and 2, and in the requirements in 17.2 and 17.4. A central-station automation system is not prohibited from being located next to the operating room with a partition made of glass or other durable, transparent material. This partition shall not prevent operator access to the receivers.

Exception No. 1: A central-station automation system that also performs non-alarm related supplementary processes, such as accounting or alarm service data, is not prohibited from having a terminal or printer that is connected to the system but located outside the operating room when all of the following conditions are met:

a)     Opens, shorts, and ground faults on the communication lines between the automation system and operator terminal or printer do not adversely affect the automation system;

b)     Alarm signal monitoring and processing are not done from the remote terminal; and

c)     Operation of the supplementary process does not adversely affect the change-of-status processing portion of the system, including operation speed.

Exception No. 2: The computers for an automation system are not prohibited from being located outside and away from the operating room but still within the central-station building or an enclosed area within a building that houses the central-station when the system complies with the requirements specified in Exception No. 1 (a) and (b), and when the room in which the computers are installed complies with all of the following:

a)     The doors entering the computer room are provided with automatic door closers without hold-open features;

b)     Door knobs do not have a button release feature;

c)     Doors are locked at all times;

d)     Doors are controlled by an access control system or keys are provided to authorized personnel for gaining access to the computer room;

e)     The computer room is monitored by a closed-circuit television or directly viewable through windows of the computer room;

f)     The room is provided with an automatic fire extinguishing system;

g)     The room has a fire resistance rating of at least 1 hour; and

h)     The switchover to the primary or back-up systems is done automatically within 30 seconds of the failure of either system so

that the operational system is energized and is ready to be connected to the receivers, printers, and other devices required for the system. The back-up system shall be fully operational within 6 minutes of the loss of the primary system. The back-up computer shall have all the capabilities of the primary system such as speed and capacity.

Failure of either the primary or the back-up system is to be indicated by an audible and visual signal to the operators. A visual display condition under which the switchover is obvious to the operator is not prohibited from being used in lieu of audible and visual signals.

 Exception No. 3: The second back-up computers for an automation system may be located outside and away from the operating room within a remote room or building any distance from the central-station when the system complies with the requirements specified in Exception No. 1 (a) and (b), and when the room in which the computers are installed complies with all of the following:

a)     The doors entering the computer room are provided with automatic door closers without hold-open features;

b)     Door knobs do not have a button release feature;

c)     Doors are locked at all times;

d)     Doors are controlled by an access control system or keys are provided to authorized personnel for gaining access to the computer room. Authorized and unauthorized entry to the room shall be monitored by the central station;

e)     The computer room is monitored by closed-circuit television;

f)     The room has a fire resistance rating of at least 1 hour; and

g)     The switchover to the primary, first back-up or second back-up systems is done automatically within 30 seconds of the failure of any of the systems so that the operational system is energized and is ready to be connected to the receivers, printers, and other devices required for the system. The second back-up system shall be fully operational within 30 minutes of the loss of the primary system. The back-up computer shall have all the capabilities of the primary and first back –up system such as speed and capacity.

Failure of either the primary, the first back-up or the second back-up system is to be indicated by an audible and visual signal to the

central station operators. A visual display condition under which the switchover is obvious to the operator is not prohibited from being used in lieu of audible and visual signals.

17.2 Terminals from which automation system records and/or data can be changed are not prohibited from being connected to the central-station automation system from a location outside the central-station when the following conditions are met:

a)     The terminals are connected via a callback modem or directly wired to the central-station automation system. Instead of a callback modem, the user from the remote location may call the central-station, and after being identified, the central-station can turn on the modem for a predetermined amount of time;

b)     The terminals meet the requirements of 7.2.2; and

c)     The automation system complies with the security provisions of Program Access and Control, Section 24;

d)     The requirements in Exception No. 1 (a) and (b) to 17.1.

e)     The remote location where the terminal is located shall comply with the following:

1)     Restricted access to the remote area shall be maintained. This shall be by lock-and-key, card access, or any other method that prevents the public from casually entering the area. The method used to restrict access to the remote area shall be documented and available at the central-station.

2)     The area shall be protected by an alarm system and the level of protection provided shall comply with Extent Number 3 as described in the Standard for Installation and Classification of Burglar and Holdup Alarm Systems, UL 681.

3)     When this area is within an area which non-alarm company personnel are not prohibited from accessing, the terminal shall be arranged so that a clear view of it is not possible.

f) Requirement to allow technical employee hand-held or laptop wireless or hardwire connection.

1) Technical field employees can only access subscriber accounts assigned to them for service or testing on their work shift.

2) An employee access code shall be used to authorize employees access to subscriber accounts from the field.

3) Transmitted data shall be encrypted.

f)     Programmed security:

1)     A security sign-on consisting of a minimum of six alpha-numeric characters shall be required.

2)     Each individual shall have a personal security sign-on.

3)     The time, date, and identifying characteristic of the individual signing-on shall be recorded.

4)     Any modification made to the data base shall be logged with a unique personal identification belonging to the person performing the modification.

5)     Each user's security sign-on shall be required to be changed not less than once every three months. The system shall prompt the user to change the security sign-on at 3-month intervals . The system shall not authorize the user to gain access if the security sign-on is not changed after the prompt.

g)     When a copy or copies of the central-station data base is available at the remote site, it shall be protected as follows. Paper printout of the data base shall not be provided at the remote site.

1)     Removable media:

i)     Shall be under lock-and-key within the remote location.

ii)     Shall be accessible to authorized alarm company employees only.

iii)     Access shall be limited to those who have a need to know.

iv)     Filing shall be organized in a manner that will alert someone when any of the media is missing.

v)     Data stored on removable media shall be unrecognizable to anyone not having the programs and cipher to unlock them.

2)     Non-removable media - Access to the data base shall have the same security as a central-station system. Exception: An alarm dealer is not prohibited from having a printout of the customer data base that he/she serves.

17.3 With respect to 17.2(f)(4), each area of the system that is modified shall be identified by the personal code. This user/modification information shall be stored on the system for a minimum period of 3 months. However, the central-station is required to keep the information available for retrieval for a minimum of 1 year.

17.3 added effective June 30, 2005

 17.4 Terminals through which automation system records and/or data cannot be changed are not required to comply with the requirements in 17.2. They shall comply with the requirements in Exception No. 1 (a) and (b) to 17.1. 17.5 Revised and combined with 17.2 June 30, 2003.

17.6 The automation system of a central-station is not prohibited from being used by other central-stations or subsidiary stations of the same company when the following conditions are met:

a)     Redundancy is provided for the automation system's primary computer, hard drive, alarm monitor, UPS, and all communication components of the network such as modems, concentrators, and similar equipment when the total number of active and inactive accounts for both the main central-station and remote central-station exceed 200 and 1000 accounts, respectively. Switchover to the back-up automation system shall occur as specified in 13.2(a).

Exception: When the total number of active and inactive alarm systems for both the main central-station and the remote central-station are less than 200 and 1000 respectively, the redundancy requirements specified in 17.6(a) do not apply.

b)     The communication components of the network such as the modems, concentrators, and similar devices shall comply with the requirements for each respective component.

c)     Each of the central-stations and subsidiary stations that use the automation system are able to generate alarm record information required under 20.8 - 20.10 for the alarm systems (accounts) for which each is responsible.

d)     All the signal processing requirements contained in the Normal Operation Test, Section 20, shall be complied with.

e)     All ports of the automation system, and all of the networking components, except those connected to the telecommunications network, shall be protected by isolated loop circuit protectors for communication circuits. These protectors shall comply with the requirements in the Standard for Protectors for Data Communications and Fire Alarm Circuits, UL 497B. The transient protectors shall have a marked rating of 50 volts or less.

Exception: When all of the equipment connected to the automation system is located in the same room as the automation system and is not more than 25 feet (7.62 m) apart, and is not connected to the telecommunications network, isolated loop circuit protection is not required.

f)     Communication circuits connected to the telecommunications network shall be protected by secondary protectors for communication circuits. These protectors shall comply with the Standard for Secondary Protectors for Communications Circuits, UL 497A. These protectors shall be used only in the protected side of the telecommunications network. The transient protectors shall have a marked rating of 150 volts or less.

Exception: Equipment connected to telecommunications circuits which has been evaluated to the requirements of the Standard for Control Units for Fire-Protective Signaling Systems, UL 864, are not required to have protection devices evaluated to the requirements of UL 497A.

g)     Failure of the primary or the back-up automation system shall be indicated at all of the central-stations and subsidiary stations using the system in such a way that it is obvious to the operators.

h)     Provisions shall be made at all of the central-stations using the automation system for operation in a degraded mode as described

in the Operation Test - Degraded Mode, Section 21, or the Operation Test - Degraded Mode, Alternate Path, Section 22 unless the automation system complies with the requirements of Section 13.6. The operators and supervisors shall be trained as specified in 13.1(b) and 13.2(b).

Revised 17.6 (e) and (h), and added Exception to 17.6(e), and added 17.6(f) effective June 30, 2005

 17.7 A central-station automation system is not prohibited from being used from a remote location such as a police or fire department when the following conditions are met:

a)     Failure of any signal to be acknowledged by an operator at the remote location is indicated at the central-station within 90 seconds.

b)     The automation system equipment (terminals, modems, personal computers, and similar equipment) is redundant.

Exception: Redundancy is not required for remote automation system equipment at the remote location nor for central-station equipment dedicated solely to communicate to such remote location when alternate means of communication by voice telephone is available and permitted by the remote location authority.

c)     All components of the remote automation system equipment shall comply with the requirements of Construction, General, Section 5.

d)     The remote automation system equipment, including all of the networking components, complies with the signaling-line transient protection requirements described in 17.6 (e) and (f).

e)     The remote automation system equipment generates a display or printout of the information being transmitted.

f)     The remote automation system equipment shall be capable of receiving test transmissions pursuant to applicable standards. Failure of any test shall be indicated at a central-station.

g)     When more than one central-station has access to the remote automation system, such access shall be controlled by special access and identification codes.

Revised 17.7(d) effective June 30, 2005 17.8 An automation system located at a subsidiary station shall comply with the following conditions:

a)     The system shall comply with all requirements of a central-station automation system.

b)     Redundancy is required in all cases.

c)     A hot back-up computer shall be provided.

Exception: When the main computer is providing a constantly updated data base on the disk drives of the standby computer, the switchover from the main computer to the standby computer may occur as a result of a signal indicating failure sent to the central-station whose personnel can effectuate a switch to the standby computer by a manual procedure when the switch to standby can be accomplished within 60 seconds. The central-station personnel shall be trained and tested on a monthly basis to accomplish the switchover within 60 seconds. A log documenting such training shall be available at the central-station.

d)     Failure of the main or back-up subsidiary station computer shall be indicated at the central-station.

Revised 17.8(c) effective June 30, 2005 

18 Compliance Verification Chart

 18.1 The automation system shall be provided with a compliance verification chart as described in 18.2. 18.2 The compliance verification chart shall include information on the following subjects, explaining the steps to be taken to properly set up the automation system in order to comply with the requirements for installation and operation of the system:

a) Reports: Instructions indicating that reports of the following items for certificated systems shall be up-to-date and kept for a minimum of one year. Items 1 - 5 may be stored on non-volatile memory if they can be retrieved and printed once the automation system is given the account number, date, and time, as appropriate.

b)

c) 1)     Alarm tickets.

2)     Disarm/arm (Open/close) schedule for each account.

3)     Fire alarm signals.

4)     Panic / hold-up alarm.

5)     Burglar alarm signals.

b)     Priority Levels: The automation system shall prioritize signals to the operator as follows.

1) Mass notification alarm

21)     Fire alarm.

32)     Hold-up or panic alarm.

43)     Medical.

54)     Industrial supervision if a danger can result (critical process alarm).

65)     Burglar alarm.

76)     Other.

Items 2, 3 and 4 are not prohibited from having equal priority.

PERFORMANCE 

19 General

 19.1 Except as otherwise indicated, the performance of an automation system shall be investigated by subjecting a representative sample in commercial form to the tests described in Sections 20 - 26. 

20 Normal Operation Test

 20.1 An automation system shall be capable of operating for all conditions of its intended performance as indicated in the user's instruction manual when used in conjunction with the equipment indicated by the installation wiring diagram and information supplied with it. 20.2 To determine compliance with 20.1, the required equipment (optional alarm receiving and transmitting equipment) is to be connected to an automation system as specified by the installation wiring diagram to form a typical combination. The system is then to be operated for each condition of its intended performance as indicated in the user's instruction manual. 20.3 The automation system shall have an operator terminal and the capability to generate an audible signal, as a means of alerting the operator to receipt of a change-of-status signal from any receiverpremises signaling circuits, whether through a receiver or direct to the automation system. Change-of-statusPremises signals shall include changes to activated, trouble, or restored conditions. Change-of-status Premises signals shall be recorded on non-volatile memory or the equivalent.

Exception: The audible signal is not required to be provided for change-of-status signals other than alarm, supervisory, tour delinquency, and trouble signals. Enabling the audible device is not required in central-stations where operators are dedicated to handling change-of-status signals and are stationed where the operator terminal is.  20.4 A minimum of one central-station operator or supervisor shall be logged on at all times. To ensure this, the system shall not allow all alarm-handling users to be logged out at one time. When only one operator or supervisor is logged on, who then attempts to log out, a message informing the operator/supervisor that he/she is the last one logged on is acceptable. 20.5 The time, date, type, and location of all signals received by the central station and requiring operator action are to be automatically recorded and displayed in a form that will expedite prompt operator interpretation in accordance with the following. To avoid operator overload, routine signals such as disarming and arming (opening and closing) complying with the schedule shall not be displayed.

a)     Signals requiring operator action and acknowledgment shall be both displayed on the operator terminal and recorded on hard disk.

b)     A status change signal that is acknowledged shall be displayed differently from a status change signal that has not been acknowledged.

c)     The visual information component shall be either retained on the display, or shall be periodically repeated at intervals of no more than 5 seconds and remain on for 2 seconds, until manually acknowledged.

d)     Each displayed signal requiring operator action shall be accompanied by an audible indication. Refer to the Exception to 20.3.

e)     There shall be means provided for the operator to redisplay the status of signals that have been acknowledged and not yet restored to the normal condition.

f)     When the system provides for continuous retention of the signal on the visual display until manually acknowledged, subsequent recorded presentations shall not be inhibited upon failure to acknowledge, and the visual display shall indicate that additional signals are pending.

g)     When only a single display is provided, fire alarm signals shall be given priority status on the common visual display.

h)     Multiple function systems shall be configured according to the following functions in descending order of priority:

1) Mass notification alarms

21)     Fire alarm.

32)     Hold-up or panic alarm.

43)     Medical.

54)     Industrial supervision if a danger can result.

56)     Burglar alarm.

76)     Other.

Items 2, 3, and 4 are not prohibited from having equal priority. The signal information content shall be recorded for both alarm and restoration to normal conditions.

 20.6 All change-of-statuspremises signals shall be recorded on non-volatile memory. The system shall be capable of printing change-of-status signals upon demand when given the account number, date, and time, as appropriate. 20.7 All operator actions, such as acknowledgment of signals, dispatch, alarm resolution, and the like, shall be automatically recorded on non-volatile memory with the time, date, and operator's unique personal identification specified. The date is to include day, month, and year; or day of the year and the year. The year is to be recorded in four digits. 20.8 Upon resolution of a fire, hold-up, or burglar alarm incident, the automation system shall automatically generate an alarm report for certificated accounts and record it on non-volatile memory. The system shall be capable of generating an alarm report upon demand for non-certificated alarm systems. This report shall include the following items, as applicable:

a)     The name and address of the subscriber (fire/burglar);

b)     The type of alarm (burglary, hold-up, fire);

c)     The designated response time (burglar);

d)     Whether there is standard or encrypted line security. When provided, it shall be indicated;

e)     The time the alarm was received by the automation system (fire/burglar);

f)     The time the police/fire department was notified, and the police/fire department identification number (fire/burglar);

g)     The time the alarm investigator No. 1 was dispatched, and the investigator's name and employee ID (fire/burglar);

h)     The time the alarm investigator No. 2 (if any) was dispatched, and the investigator's name and employee ID (burglar);

i)     The time the alarm investigator No. 1 arrived (fire/burglar);

j)     The time the alarm investigator No. 2 arrived (if dispatched) (burglar);

k)     The elapsed time between the receipt of the alarm signal at the central-station automation system and the investigator's arrival at the protected premises;

l)     The method used to verify the alarm investigator's arrival such as radio, telephone, or other means (fire/burglar);

m)     Whether the central-station holds keys;

n)     Whether the keys were used or not used (fire/burglar);

o)     The time the subscriber was notified, the name of the notified subscriber (2 or 3 lines might be required for multiple notifications) (burglar/fire);

p)     The disposition of the alarm (fire/burglar); and

q)     Whether a sounding device is provided on the alarm system (optional).

Added 20.8(d) effective June 30, 2005 20.9 The automation system shall be capable of displaying the alarm report on an operator terminal and printing it upon demand. 20.10 The automation system shall be capable of identifying, sorting, recording, and displaying fire and burglar alarm certificated accounts by type and designated response time (burglar) . The automation system shall store one year of alarm history on burglar and fire alarm certificated accounts. The automation system shall be able to display on an operator terminal and print upon demand the alarm reports for all certificated accounts in the automation system's alarm system data base. 20.11 The automation system shall be capable of displaying the software version so it can be easily verified. The software version may be displayed on the main log-in menu screen or on all screens. 20.12 The automation system shall be capable of displaying, on demand, the number of active and inactive accounts that it has on the data base.

20.12 revised effective June 30, 2005

 20.13 The automation system shall be capable of displaying active/inactive accounts for each receiver to which it is connected. 20.14 The automation system shall be capable of generating a printed record of change-of-status signals for a specific period of time for a specific account when given the account number, initial and final time, and date for that period. For

certificated burglar and fire alarm accounts, one year of change-of-status signals shall be resident on the automation system for retrieval upon demand. 20.15 When an audible signal that alerts the operator to receipt of a change-of-status signal is silenced, it is to be re-energized upon receipt of a subsequent change-of-status signal with higher priority from the same account or a change-of-status signal requiring operator action from another account. 20.16 When the operator is working from a menu other than the alarm processing menu, and a change-of-status signal requiring operator action occurs, the automation system shall generate an audible and a visual indication of the signal.Exception: In automation systems where the audible signal continues until the operator resumes alarm processing, the visual indication is not required.

20.16 revised effective June 30, 2005

 20.17 When the operation of a switch or a keyboard key prevents proper operation of the automation system, such operation is to be indicated by an audible trouble signal, or by an LED, video display, or other visual annunciator during any operating condition of the automation system. 20.18 The operation of an automation system from a standby power source under normal and abnormal conditions is to produce the same signals as when the unit is connected to its primary power source.

Exception: This requirement does not apply to the trouble signal that activates when the primary operating power becomes incapable of operating the system.  20.19 The automation system shall be able to automatically identify an alarm system as a runaway system when the number of signals from that system exceeds the preprogrammed number within the preprogrammed time frame. It shall immediately and automatically display a message on the operator terminal. The message shall indicate "runaway" system and identify the details of the alarm system such as account number, location, contact person, and similar information. 

21 Operation Test - Degraded Mode

 21.1 Upon failure of the automation system - whether redundant or non-redundant - the required functions of the receivers connected to the automation system (which may be suppressed), shall revert to their normal operation. Under the degraded mode of operation, the receiver shall automatically print all change-of-status signals and generate an audible signal to alert the operator of the

computer failure. There shall be no loss of signal when the system enters the degraded mode of operation. The receiver shall be situated so that operators can easily gain access to the readouts of the receiver. 21.2 When an automation system is operating in a degraded mode, change-of-status signals must be processed manually. Whether the automation system is a single or redundant system, the following records shall be maintained at the central-station:

a)     The most recent record of the alarm system data base shall be maintained and be readily available for all accounts. This record shall include, as appropriate, dispatch instructions, disarming and arming (opening and closing) schedules, pass card data, holidays observed and schedules , and the time and date that the data file was created. Additionally, record data shall meet the requirements specified in the Records sections (fire alarm, and burglar alarm) in the Standard for Central-Station Alarm Services, UL 827, as appropriate.

b)     A means to permanently record the date and time the action was taken to respond to change-of-status events.

c)     A means shall also be provided by the automation system to transfer the data from manually-generated activities into the automation system's permanent record when the automation system is back in normal operation.

Copies of the alarm system data base shall be maintained on-site and off-site in the event that problems develop with the system copy operating at the time. The alarm system data base record shall be updated not less than biweekly.

Revised 21.2(a) and added 21.2(c) effective June 30, 2005  Exception: Central stations having a second back-up computer complying with the requirements of Section 13.6 shall not be required to comply with the requirements of Section 21.

Note: Te assumption is central stations with more than 25,000 accounts are physically incapable of operation in the degraded mode.

22 Operation Test - Degraded Mode, Alternate Path

 22.1 Use of a second back-up computer in order to minimize reliance on manual records is not prohibited when the following conditions are met:

a)     The primary and first back-up computers are configured in a hot back-up mode and

b)     The requirements of 13.5 (a) - (d) are met.

22.1 added effective June 30, 2005

 

23 System Response Time

 23.1 The time lapse from the receipt of a signal that is received at the receiver and requires operator action until the signal is displayed and recorded by the automation system shall not exceed 10 seconds. Displaying the signal may be in the form of updating the number of signals in queue. 23.2 When the central-station automation system is duplicated, either manual or automatic switchover shall be accomplished as described in 13.2(a). 

24 Program Access and Control

 24.1 The alarm-monitoring software shall not be accessible for change, modification, or additions by the central-station staff, except as indicated under 24.3(d). Exception: Software providers may provide a log-in for their use to access the operating system and alarm-monitoring software. Updates to the operating system and alarm-monitoring software may be performed by this log-in.  24.2 The central-station staff shall not be able to change the time and date when change-of-status signals are received and processed, including dispatch, arrival, and similar information. 24.3 The automation system shall have a minimum of four levels (or degrees) of security. In order to operate the automation system, a security sign-on code consisting of not less than six alpha-numeric characters shall be required. The security sign-on shall govern the access level. The levels of security shall be as follows:

a)     Minimum security level - Shall permit acknowledgment of operator actions in response to signals received from alarm systems. It shall also permit printing or electronic copying of alarm system records. This level shall not affect the ability of the

automation system to perform its alarm system monitoring functions.

b)     Second security level - Shall permit temporary (24 hours maximum) suspension of the automation system's designated activity for specific functions of an alarm system. The preprogrammed condition shall automatically be restored within a predetermined time of change of function. Suspension may be repeated at the discretion of the central-station staff with this security level.

c)     Third security level - Shall permit permanent record changes to the automation system's alarm system data base such as adding, deleting, or suspending accounts for longer than 24 hours.

d)     Fourth security level - Shall provide the ability to change central-station operator IDs, or changes to time and date. The user shall not be able to change the time and/or date of change-of-status signals that are received and processed, including dispatch, arrival, and similar information.

e)     High security level - Shall provide capability for permanent modification of the alarm-monitoring software. This is intended to be a level only accessible to the software provider's programmers.

Added 24.3(d) effective June 30, 2005 24.4 A higher security level is not prohibited from including all the capabilities of a lower security level. 24.5 An audible trouble signal shall activate within 90 seconds of any occurrence of the following malfunctions:

a)     The automation system does not execute its program cycle.

b)     A power-supply output upon which the operation of the automation system relies (such as a micro-processor, memory, disk drive, or similar equipment) ceases to operate.

c)     Rotation ceases, or fails to start when required, in an automation system that incorporates permanent memory-storage devices having rotating elements.

Exception No. 1: When each and every receiver compatible with the automation system provides the audible indication within 90 seconds for the conditions (a) -

(c), then it is not required that the automation system have a separate watchdog timer.

Exception No. 2: A visual display under which the malfunctions specified in (a) - (c) are obvious to the operator meets the intent of this requirement. 24.6 The alarm-monitoring capabilities of the automation system shall not be affected when it executes or fails to execute any supplementary program. 24.7 The automation system shall have a non-volatile, reliable storage device (hard disk, optical disk, or similar device). 24.8 The back-up copies of the operating system and the alarm-monitoring software shall be stored on removable media. The alarm system data base shall be saved on removable media daily. The automation system shall have provisions for connection to equipment that is able to reload the operating system, alarm-monitoring software, and the alarm system data base. 24.9 A device that uses a memory storage medium that is subject to continuous wear during the course of normal operation and that is not sealed against atmospheric contaminants shall not be used to hold data that is required to perform the alarm-monitoring functions. Such a device is capable of being used for functions such as:

a)     Performing initial loading of software and data base information,

b)     Data base downloading if system operation is not inhibited,

c)     Providing enhancement to basic system descriptors, and

d)     Making back-ups of software and data base information.

 

25 Electrical Supervision Test

 25.1 Except as indicated in 25.2, all interconnecting circuits of the systems shall be electrically supervised so that within 90 seconds a distinct, audible trouble signal will indicate the occurrence of a single break; a single ground-fault condition; or a short circuit on circuits that prevent the required operation of the automation system including but not limited to the communication line between the receiver and the automation system.

When an intermittent trouble signal is used, it is to sound at least once every 10 seconds with a minimum time duration of one-half second. A visual display condition under which the trouble condition is obvious to the operator (a concise message describing the trouble) is acceptable in lieu of an audible trouble signal. 25.2 Interruption and restoration of any source of electrical energy connected to the automation system and its connected peripherals or any other malfunction shall not cause a false signal. 25.3 To determine compliance with the requirements in 25.1, the investigation is to start with the representative system combination in the normal supervisory condition. The type of fault to be detected is then to be introduced separately in each circuit conductor. 25.4 Except as indicated in 25.6, the automation system equipment trouble signal shall be distinguishable from an alarm signal and shall be obvious to the operator. After acknowledgment, the trouble signal shall be indicated in a manner that its being overlooked by the operator is not possible. 25.5 When an audible signal is used to indicate a trouble condition, it shall be generated once every 10 seconds until silenced. Means for silencing the audible trouble signal at an the automation system is not prohibited from being provided only when the act of silencing following receipt of one trouble signal does not prevent its operation upon receipt of subsequent trouble signals. The audible trouble signal shall sound when the means of silencing is in its "silence" position and no trouble exists. 25.6 Distinction among alarm, trouble and supervisory signals received by the automation system may be accomplished by means of a common sounding appliance coupled with a visual indication. 

26 Receiver Compatibility Test

 26.1 The receiver shall automatically transmit to the automation system the signals that it receives. This transmission shall be in such a manner that the time lapse from receipt of a signal that is received at the receiver and requires operator action until the signal is displayed and recorded at the automation system does not exceed 10 seconds. Displaying the signal may be in the form of updating the number of signals in queue. 26.2 The receiver to be used with the automation system is to be programmed in such a manner that it detects failure of the automation system within 90 seconds of its first attempt to send a signal (a "heartbeat") to the automation system and then operates in the degraded mode of operation. Upon detection of the

computer failure, the receiver is to generate an audible signal and store in memory or print all incoming signals. In addition, it shall print a message indicating the computer failure. There shall be no loss of signal when the system enters the degraded mode of operation.

Exception: When a receiver is not provided with a "heartbeat" signal, supervision is not required.  

APPENDIX A Standards for Components

Standards under which components of the products covered by this standard are evaluated include the following:

Title of Standard - UL Standard Designation

Alarm Communicator System Units, Digital - UL 1635 Attachment Plugs and Receptacles - UL 498 Burglar Alarm Units and Systems, Proprietary - UL 1076 Central-Station Alarm Services - UL 827 Central-Station Burglar-Alarm Units - UL 1610 Control Units for Fire-Protective Signaling Systems - UL 864 Information Technology Equipment - UL 1950 Installation and Classification of Burglar and Holdup Alarm Systems - UL 681 Lithium Batteries - UL 1642 Power Supplies for Fire-Protective Signaling Systems - UL 1481 Power Units Other Than Class 2 - UL 1012 Protectors for Communications Circuits, Secondary - UL 497A

Protectors for Data Communications and Fire Alarm Circuits - UL 497B Transient Voltage Surge Suppressors - UL 1449 Uninterruptible Power Systems - UL 1778 Wires, Cables, and Flexible Cords, Reference Standard for Electrical - UL 1581

Superseded Requirements For The Standard For Central Station Automation Systems,

UL 1981, Dated June 30, 2003 Second Edition

The superseded requirements shown are the requirements that have been superseded by requirements in revisions issued for this Standard. Superseded requirements are shown in red.  3.2 ACTIVE SYSTEM - A system that transmits one of the following signals to the central station on a regular basis:

a)     A signal that the system has been opened and the alarm protection removed or

b)     A signal that the system has been closed and the alarm protection set.

If one alarm system handles 20 accounts with openings and closings, the number of active accounts contributing to the loading of the automation system is 20. The 24-hour supervisory check-in signal transmitted by a digital alarm communicator transmitter or a one-way radio (RF) transmitter does not make a system an active system. A system is considered inactive if the 24-hour supervisory check-in signal is the only signal normally transmitted on a daily basis.

 4.3 The instruction manual shall have a section which specifically describes the system configuration. This section shall include the following equipment requirements for the automation system:

a)     Minimum System Specifications -

1)     Operating system class, minimum revision level and/or kernel type and revision level.

2)     For PC based systems, the most basic microprocessor that the software can work with and the minimum speed of the microprocessor. For systems using minicomputers, the basic system model or family as well as the microprocessor and its speed designation.

3)     Minimum disk storage.

4)     Minimum internal memory size.

5)     Minimum revision level of the alarm monitoring software.

b)     Environmental Controls - Hardware shall be located in an environment where the temperature is maintained at a level within the temperature rating range of the equipment.c)     HVAC Standby Power - The HVAC system shall have 24 hours of standby power. The standby power for the HVAC shall be provided by the central station's engine-driven generator(s). If the central station chooses to do so, it may provide the standby power for the HVAC system by an uninterruptible power supply (UPS), or the like. Exception: When the hardware is rated for use in environments with temperatures between 32°F (0°C) and 120°F (49°C), 24 hours of standby power is not required for the HVAC system. d)     Source of Power -

1)     Hardware shall be powered by a UPS that complies with either the Standard for Uninterruptible Power Supply Equipment, UL 1778, or the Standard for Power Supplies for Fire-Protective Signaling Systems, UL 1481.

2)     In order to perform maintenance and repair service, a means for disconnecting the input to a UPS

and output from a UPS while maintaining continuity of power supply to the automation system shall be provided.

3)     If a power conditioner is being used, it shall comply with the Standard for Power Units Other Than Class 2, UL 1012. In order to perform maintenance and repair service, a means for disconnecting the input to a power conditioner and output from a power conditioner while maintaining continuity of power to the automation system shall be provided.

e)     Supply Line Transient Protection- Hardware shall be protected by transient voltage surge suppressors that comply with the Standard for Transient Voltage Surge Suppressors, UL 1449. The transient voltage surge suppressors shall have a marked rating of 330 volts or less.f)     Signaling Line Transient Protection- The communications circuits shall be protected by secondary protectors for communications circuits. These protectors shall comply with the Standard for Protectors for Data Communications and Fire Alarm Circuits, UL 497B. The transient protectors shall have a marked rating of 50 volts or less.g)     Minimum System Configuration - List of components constituting minimum system configuration for redundant/non-redundant systems (including CRTs, printers, computers, watchdog timers, and the like).h)     Software Version - Instructions on how to display the software version.

 7.2.1 All ports of the automation system shall be protected by secondary protectors for communications circuits. These protectors shall comply with the requirements in the Standard for Protectors for Data Communications and Fire Alarm Circuits, UL 497B. The transient protectors shall have a marked rating of 50 volts or less.

Exception: If all of the equipment connected to the automation system is located in the same room as the automation system and not more than 25 feet (7.62 m) apart, signal line transient protection is not required.

 12.1 (13.1) The backup component requirements depend on the final application of the automation system. Backup components of the automation system are not required when all of the following conditions are met:

a)     The automation system does not serve more than 200 active systems nor more than 1000 inactive systems and operates in the degraded mode of operation using the receivers.

b)     The central station supervisors and operators are trained in the use of receivers for a period long enough to enable them to handle signals directly from the receivers. They shall be tested after receiving the training to ensure that they are capable of handling signals directly from receivers. A log documenting such training and testing shall be available at the central station.

c)     The central station shall maintain sufficient current documentation on hand to enable the operators to handle signals directly from the receiver.

d)     The required functions of the receivers connected to the automation system which may be suppressed shall revert back to normal operation upon failure of the automation system. Such functions include printing all incoming signals and providing audible and visual indications of change-of-status signals.

e)     The receivers are located in the same room or area as the operators and are accessible for operation. A glass partition may separate the operators and the receivers.

12.2 (13.2) If the system serves more than 200 active systems or more than 1000 inactive systems, the following conditions shall be met:

a)     The automation system's main computer; hard disk; main computer's video display terminal; and the software components including the operating system, program languages, and the alarm monitoring software shall be completely duplicated. The backup computer shall be switched over within 30 seconds so that it is energized and can be connected to the receivers, printers, and other devices required for the system. The backup system shall be fully operational within 6 minutes of the loss of the primary system. This allows 30 seconds for plugging in the computer and switching the communication lines over to the backup system but also allows 5-1/2 additional minutes for the system to boot up, conduct memory tests, file system check, security verifications, and prepare for full operation. The backup computer shall have all the capabilities of the primary, including memory, speed, and the like. The central station operators and supervisor(s) shall be trained monthly in making the switchover and bringing the backup computer on line.

Exception: The backup computer may be smaller than the primary computer if non-alarm functions that are performed on the primary computer are not performed on the backup computer and its alarm monitoring performance is identical to or exceeds that of the primary.

b)     The central station operators and supervisor(s) are trained for a period of not less than one hour per month in the use of receivers, and maintain sufficient current documentation on hand to handle signals directly from the receivers. A log documenting such training shall be available at the central station.

c)     The receivers are located in the same room or area as the operators. A glass partition may separate the operators from the receivers.

d)     The data base on the backup computer shall be updated not less than once every 24 hours. Automation systems that serve not more than 1000 active systems or not more than 5000 inactive systems may update the data base on the backup computer on a weekly basis if they make a backup copy of the data base on a floppy disk or tape not less than once every 24 hours.

 15.3 (16.3) Manual records (paper records, microfiche, personal computer storage) shall be kept in the operating area for reference in case of loss of the automation system. These records shall be updated biweekly.

 16.5 (17.6) The automation system of a central station can be used by other central stations or subsidiary stations when the following conditions are met:

a)     Redundancy is provided for the automation system's main computer, hard drive, alarm monitor, UPS, and all communication components of the network such as modems, concentrators, and the like if the total number of active and inactive accounts for both the main central station and remote central station exceed 200 and 1000 respectively. Switchover to the back-up system shall occur as specified in 12.2(a).

b)     The communication components of the network such as the modems, concentrators, and the like shall comply with the requirements for that component.

c)     All of the central stations and subsidiary stations that use the automation system are able to generate alarm record information required under 19.8 - 19.10 for the accounts for which they are responsible.

d)     All the signal processing requirements contained in the Normal Operation Test, Section 19, shall be complied with.

e)     All ports of the automation system, and all of the networking components, shall be protected by secondary protectors for communication circuits. These protectors shall comply with the requirements in the Standard for Protectors for Data Communications and Fire Alarm Circuits, UL 497B. The transient protectors shall have a marked rating of 50 volts or less.

f)     Failure of the primary or the backup system shall be indicated at all of the central stations and subsidiary stations using the system in such a way that it is obvious to the operators.

g)     Provisions shall be made at all of the central stations using the automation system for operation in a degraded mode as described in the Operation Test - Degraded Mode, Section 20. The operators and supervisors shall be trained as specified in 12.1(b) and 12.2(b).

 16.6 (17.7) Use of a central-station automation system from a remote location such as a police or fire department is acceptable if the following conditions are met:

a)     Failure of any signal to be acknowledged by an operator at the remote location is indicated at the central station within 90 seconds.

b)     The automation equipment (terminals, modems, personal computers, and the like) is redundant.

Exception: Redundancy is not required for remote automation equipment at the remote location nor for central-station equipment dedicated solely to communicate to such remote location if alternate means of communication by voice telephone is available and permitted by the remote location authority.

c)     All components of the remote automation equipment shall comply with the requirements of Construction, General, Section 5.

d)     The remote automation equipment, including all of the networking components, complies with the signaling line transient protection requirements described in 16.5(c).

e)     The remote automation equipment generates a display or printout of the information being transmitted.

f)     The remote automation equipment shall be capable of receiving test transmissions pursuant to applicable standards. Failure of any test shall be indicated at a central station.

g)     If more than one central station has access to the remote automation system, such access shall be controlled by special access and identification codes.

 16.7 (17.8) An automation system located at a subsidiary station shall comply with the following conditions:

a)     The system shall comply with all requirements of a central-station automation system.

b)     Redundancy is required in all cases.

c)     A hot backup computer shall be provided.

d)     Failure of the main or backup subsidiary station computer shall be indicated at the central station.

Exception: If the main computer is providing a constantly updated data base on the disk drives of the standby computer, the switch over from the main computer to the standby computer may occur as a result of a signal indicating failure sent to the central station whose personnel can effectuate a switch to the standby computer by a manual procedure if the switch to standby can be accomplished within 60 seconds.

 19.8 (20.8) Upon resolution of a fire, hold-up, or burglar alarm incident, the system is to automatically generate an alarm report for certificated accounts and record it on non-volatile memory. The system shall be capable of generating an alarm report upon demand for non-certificated systems. This report shall include the following items, as applicable:

a)     Name and address of subscriber (fire/burglar).

b)     Type of alarm (burglary, hold-up, fire).

c)     Grade of service (burglar).

d)     Time alarm received by the central-station receiver (fire/burglar).

e)     Time police/fire department notified and police/fire department identification number (fire/burglar).

f)     Time alarm investigator No. 1 dispatched, name and employee ID (fire/burglar).

g)     Time alarm investigator No. 2 (if any) dispatched, name and employee ID (fire/burglar).

h)     Time alarm investigator No. 1 arrived (fire/burglar).

i)     Time alarm investigator No. 2 arrived (if dispatched) (fire/burglar).

j)     Elapsed time between the receipt of the alarm signal at the central station and the investigator's arrival at the protected premises.

k)     Method used to verify alarm investigator's arrival such as radio, telephone, or the like (fire/burglar).

l)     Whether the central station holds keys.

m)     Whether keys were used or not used (fire/burglar).

n)     Time subscriber notified, name of subscriber notified (may need 2 or 3 lines for multiple notifications) (burglar/fire).

o)     Disposition of alarm (fire/burglar).

p)     Whether a sounding device is used on the system.

 19.12 (20.12) The system is to be capable of displaying on demand the number of active and inactive accounts that it has on data base.

Exception: This requirement does not apply to large systems that are intended to monitor more than 200 active or more than 1000 inactive systems and therefore are required to be used in a redundant configuration.

 19.16 (20.16) When the operator is working from a menu other than the alarm processing menu, and a change-of-status signal requiring operator action occurs, the system shall generate an audible and a visual indication of the signal.

 20.2 (21.2) Under the degraded mode of operation it is necessary to handle change-of-status signals directly from the receivers using manual records. It is therefore necessary to maintain the following records at the central station:

a)     The most recent record of the permanent data file reports or the equivalent information is to be maintained and readily available for all accounts. This record includes, as appropriate, dispatch instructions, opening and closing schedules, pass card data, holiday schedule dates, and the time and date that the report was recorded.

b)     A means to permanently record the date and time the action was taken to respond to change-of-status events.

System copies of the data base shall be maintained on site and off-site in case problems develop with the system copy operating at the time. The manual records shall be updated not less than biweekly.

 22.3 (24.3) The system shall have a minimum of four levels (or degrees) of security. In order to access the system, a security sign-on code consisting of not less than six alpha-numeric characters shall be required. The security sign-on shall govern the access level. The levels of security shall be as follows:

a)     Minimum security level shall acknowledge and act upon incoming signals. This level shall not affect the ability of the system to perform any critical functions.

b)     Second security level shall provide for temporary (24 hours maximum) suspension of designated activity. The preprogrammed condition shall automatically be restored within a predetermined time of change of function. Suspension may be recycled at the discretion of the system user with this security level.

c)     Third security level shall provide for permanent record changes to the data base such as adding new accounts, deleting accounts, or suspending accounts for longer than 24 hours.

d)     High security shall provide capability for permanent modification of the alarm monitoring software. This is intended to be a level accessible to the software providers programmers.