CE-SOP-001 — CONTROLS ENGINEERING PROJECT LIFECYCLE
Department: Engineering – Electrical Controls & Automation
Document Type: Standard Operating Procedure
Document ID: CE-SOP-001
Revision: Rev. 1.0
Status: Active Standard
Process Owner: Electrical Controls Engineering
Applies To: Electrical Controls Engineers, Automation Engineers, Engineering Management, Maintenance, Operations, Contractors, Integrators, and other personnel involved in controls-related projects
1. PURPOSE
The purpose of this Standard Operating Procedure is to establish a consistent, documented, safe, and repeatable process for executing Electrical Controls Engineering projects from initial request through final closeout.
This procedure ensures that controls projects are:
-
Properly requested and documented
-
Prioritized appropriately
-
Technically understood before modification
-
Reviewed for safety and operational risk
-
Properly scoped
-
Backed up before changes are made
-
Designed before programming
-
Tested before production release
-
Commissioned systematically
-
Validated with stakeholders
-
Properly documented
-
Recoverable if a change fails
-
Closed only after all engineering requirements are satisfied
The objective is to prevent undocumented, uncontrolled, or poorly understood changes to PLC, HMI, electrical, network, and automation systems.
2. FUNDAMENTAL RULE
A Controls Engineering project is not simply:
REQUEST → PROGRAM → DOWNLOAD → DONE
The standard project lifecycle is:
REQUEST
↓
TRIAGE
↓
DISCOVERY
↓
CURRENT STATE
↓
FUTURE STATE
↓
SCOPE
↓
RISK REVIEW
↓
PRE-CHANGE BACKUP
↓
DESIGN
↓
DEVELOPMENT
↓
OFFLINE VERIFICATION
↓
READY FOR INSTALL
↓
INSTALLATION
↓
COMMISSIONING
↓
VALIDATION
↓
POST-CHANGE BACKUP
↓
DOCUMENTATION
↓
MONITORING
↓
CLOSEOUT
↓
POST-IMPLEMENTATION REVIEW
3. SCOPE
This procedure applies to planned or permanent modifications involving:
-
PLC programs
-
HMI applications
-
SCADA systems
-
Sensors
-
Photo eyes
-
Proximity switches
-
Solenoids
-
Valves
-
Motors
-
Motor starters
-
VFDs
-
Servo systems
-
Remote I/O
-
Industrial networks
-
Managed switches
-
Safety-related control systems
-
Control panels
-
Electrical controls
-
Machine sequences
-
Interlocks
-
Permissives
-
Timers
-
Counters
-
Alarm systems
-
Data collection
-
Trending
-
Communication systems
-
Hardware replacements
-
Hardware upgrades
-
Software upgrades
-
New machine installations
-
Existing machine modifications
-
Vendor/integrator controls work
Emergency troubleshooting may initially follow an abbreviated process; however, any permanent changes made during emergency troubleshooting shall ultimately be documented according to this procedure.
4. PROJECT OWNERSHIP
Every Controls Engineering project shall have one designated:
Controls Project Owner
The Project Owner is responsible for ensuring the project progresses through the required lifecycle.
The Project Owner does not necessarily perform every task.
The Project Owner ensures the required tasks are completed.
Responsibilities include:
-
Understanding the request
-
Gathering requirements
-
Performing or coordinating discovery
-
Identifying risks
-
Maintaining backups
-
Developing or reviewing logic
-
Coordinating downtime
-
Commissioning
-
Maintaining documentation
-
Communicating status
-
Completing closeout
When only one Electrical Controls Engineer is available, that engineer may serve as both Project Owner and Controls Engineer.
As the department grows, these responsibilities may be distributed.
5. PROJECT IDENTIFICATION
Every project shall receive a unique Project or Support Ticket number.
Recommended format:
CE-YYYY-####
Example:
CE-2026-0047
The Project ID should follow the project throughout its entire lifecycle.
It should appear on:
-
Project record
-
Support ticket
-
Change log
-
Backup records
-
Commissioning documentation
-
Quotes
-
Purchase requests
-
Project notes
-
Knowledge Articles where applicable
-
Final closeout record
6. PHASE 1 — PROJECT REQUEST
Objective
Clearly document what is being requested before engineering work begins.
Required Information
Record:
-
Project ID
-
Project Title
-
Date Requested
-
Requested By
-
Department
-
Area
-
Production Line
-
Machine/System
-
Asset Number, if applicable
-
Request Description
-
Current Problem
-
Desired Outcome
-
Business Reason
-
Production Impact
-
Safety Impact
-
Quality Impact
-
Requested Completion Date
-
Known Downtime Requirements
-
Photos
-
Screenshots
-
Supporting Documentation
Controls Engineer Responsibility
Do not assume that the requested solution is necessarily the correct engineering solution.
The requestor should explain:
WHAT problem needs to be solved.
Controls Engineering determines:
HOW the problem should be solved.
7. PROJECT GATE 1 — REQUEST ACCEPTED
The project may move to DISCOVERY when:
☐ Request is documented
☐ Requestor is identified
☐ Equipment is identified
☐ Problem is understood at a basic level
☐ Desired outcome is documented
☐ Priority has been assigned
☐ Controls Project Owner has been identified
Status
DISCOVERY
8. PHASE 2 — TRIAGE & PRIORITY
Classify the project.
P1 — CRITICAL
Examples:
-
Immediate safety concern
-
Production completely stopped
-
Critical PLC failure
-
Critical HMI failure
-
Critical automation network failure
-
Controls issue affecting multiple systems
Response: Immediate
P2 — HIGH
Examples:
-
Significant production degradation
-
Repeated downtime
-
Major quality problem
-
Critical component approaching failure
-
Important reliability issue
Response: High priority
P3 — NORMAL
Examples:
-
Planned PLC modification
-
Planned HMI modification
-
Alarm improvement
-
New sensor
-
Process improvement
-
Sequence modification
Response: Scheduled engineering work
P4 — IMPROVEMENT / BACKLOG
Examples:
-
HMI cosmetic improvement
-
Documentation improvement
-
Future upgrade
-
Optimization
-
Non-critical data collection
-
Long-term obsolescence project
Response: Backlog / future planning
9. PHASE 3 — DISCOVERY
Objective
Understand the existing system before changing it.
The Controls Engineer shall investigate:
PROCESS
-
What does the machine/process currently do?
-
What initiates the process?
-
What stops the process?
-
What determines successful operation?
-
What operating modes exist?
-
What abnormal conditions exist?
PLC
Identify:
-
PLC Manufacturer
-
Controller Model
-
Processor
-
Firmware
-
Software
-
Program Name
-
Program Revision
-
IP Address
-
Relevant Routine(s)
-
Relevant Tags/Addresses
HMI
Identify:
-
Manufacturer
-
Model
-
Software
-
Firmware
-
Application
-
Relevant Screens
-
Relevant Tags
-
Alarm configuration
FIELD DEVICES
Identify applicable:
-
Sensors
-
Photo eyes
-
Limit switches
-
Proximity switches
-
Valves
-
Solenoids
-
Motors
-
Drives
-
Relays
-
Contactors
-
Safety devices
DOCUMENTATION
Locate:
-
PLC program
-
HMI program
-
Electrical drawings
-
I/O mapping
-
Network documentation
-
Equipment manuals
-
Previous project history
-
Previous support tickets
-
Existing Knowledge Articles
10. CURRENT-STATE DOCUMENTATION
Before designing the new solution, document:
CURRENT STATE
Answer:
What does the system do today?
Document:
-
Startup sequence
-
Normal operating sequence
-
Shutdown sequence
-
Auto operation
-
Manual operation
-
Inputs
-
Outputs
-
Timers
-
Counters
-
Interlocks
-
Permissives
-
Alarms
-
Reset behavior
-
Fault behavior
-
Communication dependencies
-
Existing operator controls
Where necessary, create a Current-State Sequence of Operation.
11. CRITICAL DISCOVERY QUESTIONS
Before changing logic, determine:
WHAT STARTS THE PROCESS?
WHAT STOPS THE PROCESS?
WHAT MUST BE TRUE FOR OPERATION?
WHAT PREVENTS OPERATION?
WHAT HAPPENS IF A SENSOR FAILS?
WHAT HAPPENS IF COMMUNICATION IS LOST?
WHAT HAPPENS AFTER POWER LOSS?
WHAT HAPPENS DURING E-STOP?
WHAT HAPPENS DURING MANUAL MODE?
WHAT HAPPENS DURING AUTO MODE?
WHAT RESETS THE SYSTEM?
WHAT COULD CREATE UNEXPECTED MOTION?
These questions shall influence the final design.
12. PHASE 4 — FUTURE-STATE REQUIREMENTS
After the current system is understood, document:
FUTURE STATE
Answer:
What should the system do after this project is completed?
Create a simple sequence.
Example:
-
Operator enables system.
-
PLC verifies required permissives.
-
System enters Ready state.
-
Product reaches sensor.
-
PLC starts monitoring timer.
-
Required condition is evaluated.
-
Output activates.
-
Confirmation sensor verifies operation.
-
Failure to confirm generates alarm.
-
Operator clears condition.
-
Reset becomes available.
-
System returns to Ready.
This becomes the engineering blueprint.
13. PHASE 5 — PROJECT SCOPE
Define exactly what the project includes.
IN SCOPE
Document:
-
PLC routines being modified
-
HMI screens being modified
-
New I/O
-
New hardware
-
Electrical modifications
-
Network modifications
-
Alarm modifications
-
Drawings affected
-
Documentation affected
OUT OF SCOPE
Document what is specifically excluded.
This prevents uncontrolled project expansion.
14. HARDWARE REQUIREMENTS
Determine whether the project requires:
-
Sensors
-
I/O modules
-
PLC hardware
-
HMI hardware
-
VFDs
-
Relays
-
Contactors
-
Power supplies
-
Managed switches
-
Enclosures
-
Terminals
-
Wiring
-
Connectors
-
Network cables
-
Safety hardware
-
Spare parts
For each item, document:
-
Manufacturer
-
Part Number
-
Description
-
Quantity
-
Unit Cost
-
Extended Cost
-
Lead Time
-
Vendor
-
Availability
15. SOFTWARE REQUIREMENTS
Determine:
-
Required programming software
-
Required version
-
Firmware
-
Licenses
-
Communication drivers
-
Vendor utilities
-
Required laptop configuration
-
Required cables/adapters
-
Required virtual machines, where applicable
Document any software upgrade opportunity discovered during the project.
16. PHASE 6 — RISK & SAFETY REVIEW
Before development or installation, evaluate:
☐ Unexpected machine motion
☐ Motor operation
☐ Valve movement
☐ Pressure
☐ Temperature
☐ Chemical/process exposure
☐ Electrical hazards
☐ Stored energy
☐ Interlock changes
☐ Safety circuit impact
☐ Automatic restart
☐ Communication loss
☐ Sensor failure
☐ PLC failure
☐ HMI failure
☐ Power failure
☐ Product quality impact
☐ Production impact
Controls Engineering shall not casually bypass or defeat safety functions.
Changes involving safety systems require appropriate review and authorization under applicable company safety procedures.
17. FAILURE MODE REVIEW
Ask:
What happens when the new design fails?
Consider:
-
Sensor stuck ON
-
Sensor stuck OFF
-
Broken wire
-
Output failure
-
Valve failure
-
Motor failure
-
Communication failure
-
HMI unavailable
-
PLC power cycle
-
Network loss
-
Operator presses wrong command
-
Process does not complete
The system should fail in a predictable and appropriate manner.
18. PROJECT GATE 2 — DISCOVERY COMPLETE
Project may move to SCOPING / ENGINEERING when:
☐ Current process understood
☐ Relevant PLC logic identified
☐ Relevant HMI identified
☐ Relevant I/O identified
☐ Existing documentation reviewed
☐ Future-state requirement documented
☐ Initial hardware requirements identified
☐ Initial software requirements identified
☐ Risks identified
Status
SCOPING
19. PHASE 7 — PRE-CHANGE BACKUP
NO SIGNIFICANT PLC/HMI MODIFICATION SHALL BEGIN WITHOUT A RECOVERABLE BACKUP.
Before modification:
☐ Upload PLC
☐ Save PLC program
☐ Upload HMI where applicable
☐ Save HMI application
☐ Verify files open
☐ Record software version
☐ Record firmware
☐ Record IP addresses
☐ Record current revision
☐ Save relevant drawings
☐ Photograph hardware where useful
☐ Establish rollback file
Recommended naming:
Machine_Project_YYYY-MM-DD_PRECHANGE
Never overwrite the only known-good file.
20. ROLLBACK PLAN
Before implementation, answer:
If this change fails, how will production be restored?
Document:
-
Previous PLC program
-
Previous HMI application
-
Hardware restoration method
-
Required cables/software
-
Estimated rollback time
-
Person responsible for rollback decision
-
Conditions requiring rollback
The rollback plan shall exist before commissioning begins.
21. PHASE 8 — ENGINEERING DESIGN
Design the solution before implementing final logic.
Determine:
INPUT
What tells the PLC something happened?
CONDITION
What must be true?
PERMISSIVE
What must be true before operation is allowed?
INTERLOCK
What condition prevents or stops operation?
COMMAND
What is the requested action?
OUTPUT
What device is controlled?
FEEDBACK
How does the PLC know the action occurred?
FAULT
How is failure detected?
ALARM
How is failure communicated?
RESET
How does the system recover?
22. PLC DESIGN
Where applicable, determine:
-
New tags
-
New addresses
-
I/O mapping
-
Timers
-
Counters
-
State logic
-
Mode logic
-
Interlocks
-
Permissives
-
Alarm triggers
-
Alarm status
-
HMI interface
-
Diagnostics
-
Manual control
-
Automatic control
Use existing Controls Engineering programming standards.
23. HMI DESIGN
Determine:
-
Screen affected
-
Navigation
-
Pushbuttons
-
Indicators
-
Setpoints
-
Numeric inputs
-
Alarm messages
-
Status information
-
Maintenance diagnostics
-
Security
-
Operator instructions
The operator should be able to determine:
What is happening?
Why is it happening?
What action can I take?
24. PROJECT GATE 3 — ENGINEERING READY
Before development proceeds:
☐ Scope approved/understood
☐ Future-state sequence documented
☐ Safety/risk review completed
☐ Failure modes considered
☐ Hardware identified
☐ Software identified
☐ Downtime estimated
☐ Pre-change backup completed
☐ Rollback plan established
☐ Test requirements established
Status
DEVELOPMENT
25. PHASE 9 — DEVELOPMENT
Develop:
-
PLC logic
-
HMI changes
-
Alarm configuration
-
I/O mapping
-
Electrical design
-
Network configuration
-
Documentation
Programming should be:
-
Readable
-
Structured
-
Commented
-
Descriptive
-
Maintainable
-
Consistent with department standards
Avoid unnecessary complexity.
Another qualified engineer should be capable of understanding the intent of the logic.
26. CHANGE COMMENTS
Where the platform permits, significant changes should include useful comments.
Example:
Added 10/06/2026 – CE-2026-0047 – Infeed jam monitoring added. Photo eye blocked >5 sec activates Can Stop and requires operator reset after PE clears.
Comments should explain why, not merely repeat the instruction.
27. PHASE 10 — OFFLINE VERIFICATION
Before production installation:
☐ Program compiles/verifies
☐ Tags exist
☐ Addresses verified
☐ Timer values verified
☐ Counter values verified
☐ HMI tags verified
☐ Alarm tags verified
☐ Interlocks reviewed
☐ Permissives reviewed
☐ Reset logic reviewed
☐ Auto logic reviewed
☐ Manual logic reviewed
☐ Failure conditions reviewed
☐ Output conflicts reviewed
☐ Communications reviewed
Simulation should be used where available and appropriate.
28. INSTALLATION PLAN
Document:
-
Planned installation date
-
Planned start time
-
Expected duration
-
Required production downtime
-
Operations contact
-
Maintenance contact
-
Engineering contact
-
Contractor/vendor involvement
-
Required hardware
-
Required software
-
Required tools
-
Backup location
-
Rollback method
-
Expected testing duration
29. PROJECT GATE 4 — READY FOR INSTALL
A project may enter READY FOR INSTALL only when:
☐ PRECHANGE PLC backup exists
☐ PRECHANGE HMI backup exists where applicable
☐ Rollback plan exists
☐ Development complete
☐ Offline verification complete
☐ Hardware available
☐ Software available
☐ Installation plan complete
☐ Test plan complete
☐ Downtime coordinated
☐ Required stakeholders notified
Status
READY FOR INSTALL
30. PHASE 11 — INSTALLATION
Before beginning:
-
Confirm correct equipment.
-
Confirm production status.
-
Confirm appropriate work authorization.
-
Confirm backups.
-
Confirm correct project files.
-
Confirm rollback file.
-
Confirm required hardware.
-
Confirm required software.
-
Confirm communications.
-
Confirm safe work conditions.
Then perform the controlled installation.
31. PHASE 12 — COMMISSIONING
Commissioning shall verify the complete system.
INPUT TESTING
☐ Physical device changes state
☐ PLC receives correct state
☐ HMI displays correct state
OUTPUT TESTING
☐ PLC command activates correctly
☐ Physical output activates correctly
☐ Field device responds correctly
☐ Feedback is correct
MODE TESTING
☐ Auto
☐ Manual
☐ Disabled
☐ Maintenance where applicable
SEQUENCE TESTING
☐ Startup
☐ Normal operation
☐ Shutdown
☐ Restart
INTERLOCK TESTING
☐ Interlocks stop/prevent appropriate operation
PERMISSIVE TESTING
☐ Missing permissive prevents operation
ALARM TESTING
☐ Alarm triggers
☐ Alarm message correct
☐ Alarm acknowledgment correct
☐ Alarm clears correctly
RESET TESTING
☐ Reset only occurs under acceptable conditions
FAILURE TESTING
Where safe and practical:
☐ Sensor failure
☐ Jam condition
☐ Missing feedback
☐ Communication loss
☐ Power recovery
32. COMMISSIONING RULE
The statement:
"The output came on."
does not mean:
"The project works."
Commission the complete process.
33. PHASE 13 — STAKEHOLDER VALIDATION
The responsible operator, production representative, maintenance representative, or project stakeholder should validate the completed function where appropriate.
Confirm:
☐ Requested functionality works
☐ HMI is understandable
☐ Alarms are understandable
☐ Operator recovery is understandable
☐ Production process operates correctly
☐ No obvious unintended consequence exists
Record:
Validated By:
Department:
Date:
Comments:
34. PROJECT GATE 5 — COMMISSIONING COMPLETE
The project may move to MONITORING when:
☐ Installation complete
☐ I/O verified
☐ Sequence tested
☐ Auto tested
☐ Manual tested
☐ Interlocks tested
☐ Permissives tested
☐ Alarms tested
☐ Reset tested
☐ Failure conditions reviewed/tested
☐ Stakeholder validation completed
Status
MONITORING
35. PHASE 14 — POST-CHANGE BACKUP
After successful commissioning:
UPLOAD THE FINAL PRODUCTION PROGRAM AGAIN.
Do not assume the offline development file perfectly represents what is running.
Save:
Machine_Project_YYYY-MM-DD_POSTCHANGE_REVX.X
Complete:
☐ Final PLC upload
☐ Final HMI upload
☐ Revision assigned
☐ Change Log updated
☐ New master file identified
☐ Previous version archived
36. PHASE 15 — DOCUMENTATION UPDATE
Update all applicable:
☐ PLC backup
☐ HMI backup
☐ I/O mapping
☐ Tag list
☐ Alarm list
☐ IP address register
☐ Controls Asset Database
☐ Electrical drawings
☐ Network drawings
☐ Device list
☐ Hardware inventory
☐ Software inventory
☐ Sequence of Operation
☐ Change Log
☐ Support Ticket
☐ Project notes
☐ Photos
☐ Commissioning record
Documentation is part of the engineering work.
37. KNOWLEDGE ARTICLE REVIEW
Ask:
Did this project teach us something another Controls Engineer may need later?
If YES:
Create or update a Knowledge Article.
Examples:
-
New troubleshooting procedure
-
New hardware replacement method
-
New PLC communication procedure
-
New HMI procedure
-
Unusual machine behavior
-
Vendor-specific procedure
-
Recovery process
-
Programming technique
Do not repeatedly solve the same difficult problem from scratch.
38. PHASE 16 — MONITORING PERIOD
Significant changes should remain in MONITORING before final closeout when practical.
Recommended:
24–72 hours of meaningful production operation
depending on the application.
During monitoring, review:
-
Unexpected faults
-
Nuisance alarms
-
Operator complaints
-
Repeated resets
-
Unexpected downtime
-
Sensor behavior
-
Timing
-
Sequence performance
-
Quality impact
Minor low-risk changes may not require a lengthy monitoring period.
39. PHASE 17 — PROJECT CLOSEOUT
Before closing:
☐ Requested change completed
☐ Commissioning completed
☐ Stakeholder validation completed
☐ Monitoring completed where required
☐ Final PLC backup saved
☐ Final HMI backup saved
☐ Revision updated
☐ Change Log completed
☐ I/O documentation updated
☐ Drawings updated where applicable
☐ Network documentation updated where applicable
☐ Hardware inventory updated
☐ Software inventory updated
☐ Support ticket updated
☐ Knowledge Article created where appropriate
☐ Outstanding temporary modifications identified
☐ Lessons learned documented
☐ Final stakeholder communication completed
40. PROJECT GATE 6 — CLOSED
A project may only be marked:
CLOSED
when the applicable Definition of Done requirements have been satisfied.
Record:
Closed By:
Close Date:
Final Revision:
Final PLC File:
Final HMI File:
Documentation Location:
Related Knowledge Article:
Final Comments:
41. PROJECT STATUS DEFINITIONS
The web-based project-management system should use standardized statuses:
NEW
Request received but not reviewed.
DISCOVERY
Engineering is investigating the existing system.
SCOPING
Requirements and project boundaries are being established.
WAITING FOR APPROVAL
Engineering work is waiting for management/stakeholder authorization.
WAITING FOR INFORMATION
Required project information is unavailable.
WAITING FOR PARTS
Hardware is required before proceeding.
DEVELOPMENT
PLC/HMI/electrical development is underway.
READY FOR INSTALL
Engineering work is complete and awaiting installation opportunity.
COMMISSIONING
System is being installed/tested.
MONITORING
System is operating in production under observation.
DOCUMENTATION
Technical work is complete but final documentation remains.
ON HOLD
Project intentionally paused.
CLOSED
All applicable project requirements completed.
42. WEB SYSTEM REQUIRED FIELDS
Each Controls Engineering project should contain tabs or sections for:
PROJECT INFORMATION
-
Project ID
-
Title
-
Requestor
-
Department
-
Equipment
-
Priority
-
Status
-
Project Owner
-
Target Date
SUPPORT TICKET INFORMATION
-
Problem
-
Current Condition
-
Desired Outcome
-
Production Impact
-
Safety Impact
-
Quality Impact
DISCOVERY
-
PLC
-
HMI
-
Software
-
Firmware
-
Routines
-
Screens
-
I/O
-
Drawings
-
Current State
ENGINEERING REQUIREMENTS
-
Future State
-
Sequence of Operation
-
Inputs
-
Outputs
-
Interlocks
-
Permissives
-
Alarms
-
Reset
-
Failure Conditions
HARDWARE/SOFTWARE
-
Item
-
Manufacturer
-
Part Number
-
Quantity
-
Cost
-
Vendor
-
Lead Time
-
Upgrade Opportunity
CHANGE MANAGEMENT
-
PRECHANGE Backup
-
Risk Review
-
Rollback Plan
-
Change Description
-
Approval
DEVELOPMENT
-
PLC Changes
-
HMI Changes
-
Electrical Changes
-
Network Changes
COMMISSIONING
-
Test Results
-
Problems
-
Corrections
-
Validation
CLOSEOUT
-
POSTCHANGE Backup
-
Revision
-
Change Log
-
Documentation
-
Knowledge Article
-
Lessons Learned
-
Final Approval
43. PROJECT HEALTH INDICATOR
The web system should display:
GREEN
Project progressing normally.
YELLOW
Risk exists.
Examples:
-
Waiting for information
-
Possible schedule impact
-
Parts concern
-
Limited downtime
RED
Project significantly blocked.
Examples:
-
Critical hardware unavailable
-
Safety issue
-
Major engineering problem
-
Production schedule prevents installation
-
Management decision required
44. ESCALATION RULE
Escalate to management when:
-
Safety concerns cannot be resolved.
-
Scope materially changes.
-
Cost significantly increases.
-
Downtime requirement increases.
-
Production requirements conflict with safe commissioning.
-
Required hardware is obsolete.
-
Required software is unavailable.
-
Project requires outside expertise.
-
Another department is blocking critical progress.
-
Controls Engineering cannot safely validate the proposed solution.
Escalation is not failure.
Escalation is part of responsible engineering.
45. ENGINEERING DECISION LOG
For larger projects, maintain a simple Decision Log.
Record:
Date
Decision
Reason
Alternatives Considered
Decision Maker
Impact
This prevents future questions such as:
"Why did we program it this way?"
46. LESSONS LEARNED
At project closeout ask:
WHAT WORKED?
WHAT DID NOT WORK?
WHAT TOOK LONGER THAN EXPECTED?
WHAT INFORMATION WAS MISSING?
WHAT SHOULD BE STANDARDIZED?
WHAT COULD PREVENT THIS PROBLEM IN THE FUTURE?
SHOULD A KNOWLEDGE ARTICLE BE CREATED?
SHOULD AN UPGRADE PROJECT BE CREATED?
Lessons learned should improve the next project.
47. ENGINEERING QUALITY TEST
Before closing any significant project, the Controls Engineer should ask:
Could another qualified Controls Engineer understand what was changed, why it was changed, how it works, how it was tested, and how to restore the previous version without needing to call me?
If the answer is:
NO
the project documentation is not yet complete.
48. DEFINITION OF SUCCESS
A successful Controls Engineering project is not simply a machine that currently runs.
A successful project is:
SAFE
FUNCTIONAL
TESTED
RECOVERABLE
DOCUMENTED
MAINTAINABLE
TRACEABLE
UNDERSTANDABLE
and
REPEATABLE
The objective of CE-SOP-001 is to ensure every Controls Engineering project leaves the automation system in a better-controlled condition than it was found.
49. QUICK-REFERENCE WORKFLOW
For everyday use:
1. LOG IT
Create Project/Support Ticket.
2. UNDERSTAND IT
Perform Discovery.
3. DEFINE IT
Document Current State and Future State.
4. SCOPE IT
Determine exactly what changes.
5. REVIEW IT
Evaluate safety, risks, and failure modes.
6. BACK IT UP
Save PRECHANGE PLC/HMI files.
7. DESIGN IT
Develop the sequence before writing final logic.
8. BUILD IT
Develop PLC/HMI/electrical changes.
9. VERIFY IT
Perform offline verification.
10. PLAN IT
Coordinate installation, downtime, testing, and rollback.
11. INSTALL IT
Perform the controlled modification.
12. TEST IT
Commission normal and abnormal conditions.
13. VALIDATE IT
Confirm operation with stakeholders.
14. BACK IT UP AGAIN
Create POSTCHANGE master files.
15. DOCUMENT IT
Update engineering records.
16. MONITOR IT
Observe actual production operation.
17. CLOSE IT
Complete Definition of Done.
18. LEARN FROM IT
Capture lessons and create Knowledge Articles where appropriate.
50. CONTROLS ENGINEERING STANDARD
DO NOT JUST FIX IT.
UNDERSTAND IT.
BACK IT UP.
DESIGN IT.
BUILD IT.
TEST IT.
DOCUMENT IT.
MAKE IT REPEATABLE.
That is the Controls Engineering Project Lifecycle.
REVISION HISTORY
Rev. 1.0
Initial release of CE-SOP-001 – Controls Engineering Project Lifecycle.
Owner: Electrical Controls Engineering
Next Review: Annual or following a significant change to the Controls Engineering project-management process.