cnx_vinyl/docs/facility-security.md

Facility: Security and Site Systems

What the plant needs beyond the production machinery. Access control and CCTV are set requirements; the rest of this list is what a plant of this profile definitely needs, to be refined during site design.

Physical security

• Access control: zoned, not just at the gate. Minimum zones: general production, galvanics clean room (controlled access is already a safety requirement), chemical storage, master/stamper archive, server/IT room, finished goods and shipping. Badge or biometric, with logs.
• CCTV: entrances, perimeter, loading dock, production floor, chemical storage, archive. Retention policy to be defined; Thai PDPA (personal data protection) applies to camera footage of staff and visitors.
• Intrusion alarm with monitoring, covering off-hours.
• Perimeter and lighting: fencing appropriate to the site, lit approaches and parking.
• Visitor management: sign-in, escort rules, PPE issue at entry, no unaccompanied access to production or galvanics.

Protecting the irreplaceable

• Master and stamper archive: fathers and mothers are unique metal parts; a destroyed father can mean re-cutting and re-plating a release. The archive room needs fire-rated construction or safes, climate control, access logging, and an off-site strategy for the most critical masters.
• Client audio: pre-release music is a high-value leak target, and labels ask about it before they send masters. Isolated storage for client files, encrypted transfer and at-rest storage, strict need-to-know access, and a written policy the sales team can show clients.
• Chemical inventory: silver nitrate is valuable and regulated; nickel salts are hazardous. Locked storage, inventory tracking, and controlled issue to the galvanics team.

Fire and life safety

• Fire detection and alarm throughout; suppression matched to each zone (hot PVC and hydraulic oil in pressing, chemistry in galvanics, paper and cartons in packaging/finished goods, and the boiler room).
• Boiler room safety: the steam generator (10 bar, 180 °C) needs its own room, safety valves and interlocks, and inspection per Thai boiler regulations (Department of Industrial Works requirements, licensed boiler operator).
• Emergency equipment in galvanics: eyewash stations and emergency shower at the plating line, spill kits, and neutralizing agents.
• Emergency lighting, marked exits, assembly point, and first-aid coverage on every shift.

Plant systems and monitoring

• Utility monitoring and interlocks: fume-extraction interlocks on the galvanics line (no extraction, no plating), steam and compressed-air pressure monitoring, leak detection, and safe-shutdown sequences.
• UPS and controlled shutdown for the IT room, access control, alarms, and the press PLCs (a power cut mid-cycle should never leave a press in an unsafe state; the battery stack can carry critical loads).
• Lightning protection and grounding: northern Thailand has intense storm seasons; the PV array, steel structures, and electronics all need a proper LPS and earthing design.
• Environmental monitoring: temperature and humidity logging in production (the process spec calls for 20-26 °C, 35-60% RH), the archive, and the clean room.

Compliance anchors (Thailand)

• Factory license (Ror.Ngor. 4) and Department of Industrial Works requirements for the machinery classes and chemical quantities involved
• Boiler registration and licensed operator requirements
• Hazardous substance registration for the plating chemistry
• PDPA compliance for CCTV and personnel data
• Local fire codes and building permits during construction

All of this belongs in the site design brief, so contractors quote it from day one rather than retrofitting it.