|
Balancing Life Safety, Infrastructure Investment, and Downtime 平衡生命安全、基础设施投资和停机时间 FOCUS | OCTOBER 2017
By Matt Stansberry, Senior Director of Content and Publications, and Uptime Institute Technical Staff According to Uptime Institute’s annual data center industry survey, about one-third of organizations allow maintenance activities on energized electrical equipment at voltage levels that could cause health or human- safety consequences (see Figure 1). Accidents, including shock and arc flash, can derail data center operations and cause serious harm to workers and equipment. Costs to businesses can include lost work time, downtime, OSHA investigation, fines, medical costs, litigation, lost business, equipment damage, and most tragically, loss of life. According to the Workplace Safety Awareness Council (WPSAC), the average cost of hospitalization for electrical accidents is US$750,000, with many exceeding US$1,000,000. 根据 Uptime Institute的数据中心行业年度调查，有大约三分之一的公司允许维护的电气设备处于激活状态，此时的电压等级是高于人体安全接触电压的。（见图一）在维护期间偶尔的一些震动或者电弧会导致数据中心运行不当，并且会引发一些严重的人身安全事故和仪器设备的损害。企业的损失包括丢失工作时间，停工期的运行成本，OSHA的调查，罚款，医疗费用，诉讼，丢失生意订单，仪器的损坏，最严重的就是人员的伤亡。根据工作环境安全意识委员会的记录，电气事故引起的住院医疗保险的平均花费是75万美元，其中很多都超过了100万美元。 The U.S. Occupational Safety and Health Administration (OSHA) and the National Fire Protection Association (NFPA) Standard 70E address electrical safety in the workplace and provide guidance and regulations on safety programs, warning labels, personal protective equipment, boundary requirements, and hazard analysis. And yet, there is widespread confusion over how the codes should be applied in the data center industry, as evidenced by the responses from North American data center operators and executives (see Figure 2). 美国职业安全与健康署和美国国家防火协会标准70E在工作场所解决电气安全问题并在安全程序，警告标志，个人保护设备，边界允许范围和危害分析方面提供指导和管理。目前，普遍的问题在于如何将标准中的内容应用在实际的数据中心企业中，北美数据中心的操作人员和主管们的反应证明了这一点。 Even highly informed experts can disagree on how these regulations should be applied. Confusion over how regulations and codes should be applied is clearly a major issue facing this industry. The confusion creates opportunities for accidents and operational exposures to risk that can cause significant injuries and even death. 甚至是掌握专业技能的专家也无法在如何应用这些法律规范达成一致。如何将这些规范应用到实际工作中是这个行业所要面临的主要问题。上述的困惑会产生导致严重损伤甚至是死亡的风险。 The most effective way to eliminate the risk of electrical shock or arc flash hazard is to de-energize the equipment. Uptime Institute’s Tier III and Tier IV criteria both require design and installation of systems that enable equipment to be fully de-energized to allow planned activities such as repair, maintenance, replacement, or upgrade without exposing personnel to the risk of working on energized equipment. 最有效清除电击或者弧闪的方法是将用电设备断电。Uptime Institute的Tier III和Tier IV 标准都要求在设计和安装的数据中心系统能够在进行有计划的活动时完全的断电。 例如维修，维护，更换或者升级设备时不会让工作人员面对被电击的风险。 Industry Standards and Regulations 行业标准与管理办法 To prevent these kinds of accidents and injuries, it is imperative that data center operators understand and follow appropriate safety standards for working with electrical equipment. Both the NFPA and OSHA have established standards and regulations that help protect workers against electrical hazards and prevent electrical accidents in the workplace. 为了阻止意外伤亡事故的发生，数据中心的操作员很有必要理解和按照适当的标准去操作电气设备。美国职业安全健康管理局和美国国家防火协会都建立了标准与管理办法为了保护工作人员远离电击风险和阻止电气事故的发生。 OSHA 29 CFR Part 1910, Subpart S and OSHA 29 CFR Part 1926, Subpart K include requirements for electrical installation, equipment, safety-related work practices, and maintenance for general industry and construction workplaces, including data centers. 在美国职业安全健康管理局的联邦法规，劳工方面的1910条例的S部分和1926条例的K部分内容包括在大部分企业和建筑物中（包括数据中心）对电气设备的安装，安全相关工作的测试和维护。 NFPA 70E is a set of detailed standards (issued at the request of OSHA and updated periodically) that address electrical safety in the workplace. It covers safe work practices associated with electrical tasks and for performing other non-electrical tasks that may expose an employee to electrical hazards. OSHA revised its electrical standard to reference NFPA 70E-2000 and continues to recognize NFPA 70E today. 美国国家防火协会 70E条例是一套详细的条例（根据美国职业安全健康管理局的要求发布并定期更新），为了处理工作环境中的电气安全问题。它涵盖了与电气任务相关的安全工作实践，以及执行其它的可能使员工暴露在电气危害的环境中。如今美国职业安全健康管理局修改了其电气标准，参考了美国国家防火协会的70E-2000条例，并继续认可美国国家防火协会 70E条例。 OSHA requires that facilities: 美国职业安全健康管理局要求企业做到如下几点： · Provide and be able to demonstrate a safety program with defined responsibilities 提供并有能力说明企业拥有一个明确具体责任的安全检查项目 · Calculate the degree of arc flash hazard 计算弧闪危害的程度 · Use correct personal protective equipment (PPE) for workers 工人们使用正确的个人保护装置 · Train workers on the hazards of arc flash 训练工作人员正确面对弧闪 · Use appropriate tools for safe working 使用恰当的工具避免事故 · Provide warning labels on equipment. 在电气设备上贴上警示标签 NFPA 70E further defines “electrically safe work conditions” to mean that equipment is not and cannot be energized. To ensure these conditions, personnel must identify all power sources, interrupt the load and disconnect power, visually verify that a disconnect has opened the circuit, lock out and tag the circuit, test for absence of voltage, and ground all power conductors, if necessary. 美国国家防火协会70E条例更进一步定义了安全工作环境，指的是电气设备不能被激活。 为了确保这些安全的环境，工人必须确认全部的电源，终端所有的负载，断开所有的电源。视觉上能够确认断开连接，电路开路。如果有必要，封闭电路贴上标签，进行无电压检测，所有的电源导体接地。 Justification for “Hot Work”
NFPA 70E and OSHA require
employers to prove that working
in a de- energized state creates
more or worse hazards than
the risk presented by working
on live components or is not
practical because of equipment
design or operational limitations,
for example, when working
on circuits that are part of a
continuous process that cannot
be completely shut down. Other exceptions include situations in which isolating and deactivating
system components would create a hazard for people not associated with the work, for example,
when working on life-support systems, emergency alarm systems, ventilation equipment for
hazardous locations, or extinguishing illumination for an area. 证明在带电设备上进行维护作业的可行性美国国家防火协会70E和美国职业安全管理局要求员工证明在设备不通电的状态下会比在激活设备的情况下创造更多的危险，或者这是不实际的因为设备本身存在设计缺陷和操作失误。举一个例子，当一个电路是属于一个不能被切断的连续工作的过程的一部分时，其他的例外包括，那些被隔离或者没有被激活的系统组件会对与维护工作无关的人员产生危害。举一个例子，当处于危险地区的生命支持系统，紧急报警系统，通风系统进行维护，或者熄灭了对应区域的照明对于那里的人员是危险的。 In addition, OSHA makes provision for situations in which it would be “infeasible” to shut down equipment. For example, some maintenance and testing operations can only be done on live electric circuits or equipment. The decision to work hot should only be made after careful analysis of the determination of what constitutes infeasibility. In recent years, some well publicized OSHA actions and statements have centered on the matter of how to interpret this term. 此外，美国职业健康管理局做了预备措施用来针对无法被关停的设备。 举一个例子，一些维护和测试操作只能在接通的电路或者设备上进行。只有在仔细分析所有不可行的决定后，才能决定是否要在设备通电的情况下进行维护和测试操作。 近年来，一些广为宣传的行动和声明都集中在如何解释这个项目的合理性。 Electrical Safety Measures in Practice 电气安全措施的实践 Only qualified persons should work on electrical conductors or circuits that have not been put into an electrically safe work condition. A qualified person is one who has received training in and possesses skills and knowledge in the construction and operation of electric equipment and installation and the hazards involved with this type of work. Knowledge or training should encompass the skill to distinguish exposed live parts from other parts of electric equipment, determine the nominal voltage of exposed live parts, and calculate the necessary clearance distances and the corresponding voltages to which a worker will be exposed. 只有专业的人员才能在不安全的情况下使用电气导线或者电路。一个专业的人员是接受并且掌握了电气的知识，操作电气设备，设备的安装还有不同类型工作的潜在危害。知识或者训练应该能够使专业人员将暴露的通电部分与其他电气设备部分区分开，使专业人员能够调整暴露部分的标称电压，计算必须的电气间隙和相对应工人会接触的电压。 An arc flash hazard analysis for any work must be conducted to determine the appropriate arc flash boundary, the incident energy at the working distance, and the necessary protective equipment for the task. 为了找到发生弧闪的恰当边界条件，弧闪危害分析使很有必要的，在工作的范围内的发生危害时的入射能量，还有必要的保护装置。 NFPA 70E outlines strict standards for the type of PPE required for any employees working in areas where electrical hazards are present based on the task, the parts of the body that need protection, and the suitable arc rating to match the potential fl exposure. PPE includes items such as a flash suit, switching coat, mask, hood, gloves, and leather protectors. Flame-resistant clothing underneath the PPE gear is also required. 美国防火协会 70E概要表明必须要严格规范在任何有可能电气危害发生的地方，必须穿戴的个人保护设备类型。这些保护设备的类型时根据任务，不同人体部位和弧闪发生时对应功率产生的曝光亮度。个人保护设备包括一套防弧闪服，可调节的大衣，面具，弧闪保护罩，手套和羽绒保护服。防火服也需要携带。 After an arc flash hazard analysis has been performed, the correct PPE can be selected according to the equipment’s arc thermal performance exposure value (ATPV) and the break open threshold energy rating (EBT). Together, these components determine the calculated hazard level that any piece of equipment is capable of protecting a worker from (measured in calories per square centimeter). For example, a hard hat with an attached face shield provides adequate protection for Hazard/Risk Category 2, whereas an arc flash protection hood is needed for a worker exposed to Hazard/Risk Category 4. 在弧闪危害分析之后，正确的个人保护设备可以根据弧热性能曝光值和突破阈值能量等级而选择相应的设备。这两个参数决定了弧闪的危害等级，从而决定了哪些设备能够保护在当时环境下的工人（根据每平方厘米的热量测定）。举一个例子，当类型二的弧闪危害发生时一个戴有面具的安全帽可以提供足够的保护。然而当弧闪危害等级为四时，工人需要佩戴弧闪保护罩。 PPE is the last line of defense in an arc flash incident; it is not intended to prevent all injuries, but to mitigate the impact of a flash should one occur. In many cases, the use of PPE has saved lives or prevented serious injury. 个人保护装置是保护工人的最后一道防线；这个设备不是打算阻止所有的伤害，而是减缓工人在弧闪发生时所受到的影响。在许多的案例中，个人保护设备挽救了很多的生命或者阻止了严重伤害的发生。 Conclusions 结论 It can be argued that some of today’s data center operations approach the status of being “essential” for much of the underlying infrastructure that runs our 24x7 digitized society. Data centers support the functioning of global financial systems, power grids and utilities, air traffic control operations, communication networks, and the information processing that support vital activities ranging from daily commerce to national security. 如今数据中心的运转，对于运行我们的数字虚拟社会的大多数底层基础设施来说是必不可少的。 数据中心支持全球金融系统， 电网和公共设备，空中交通管制，网络通讯和虚拟网络的信息传递从日常的商业贸易到国家信息安全。 Each facility must assess its operations and system capabilities to enable adherence to safe electrical work practices as much as possible without jeopardizing critical mission functions. In many cases, it may become a jurisdictional decision as to the answer for a specific data center business requirement. 每一个设施都必须对它的操作和系统性能进行评估，为了能够尽可能的遵守电气安全施工条例，而不会对企业的一些关键业务造成危害。在许多案例中，这会成为一个有司法管辖权的决定作为对数据中心企业的详细要求。 Balancing the need for appropriate electrical safety measures and compliance with the need to maintain and sustain uninterrupted production capacity in an energy-intensive environment is a challenge. But it is a challenge the data center industry is perhaps better prepared to meet than Balancing Life Safety, Infrastructure Investment, and Downtime RISK & RESILIENCY many other industry segments. It is apparent that those in the data center industry who subscribe to high-availability concepts such as the Tier Standards: Topology and Operational Sustainability have adopted a rigorous approach to cleaning, maintenance, installation, training, and other tasks that forestall arc flash. 恰当的电气安全措施的需求和遵守在一个能源密集型环境中维持不间断生产力的需要之间的平衡对于数据中心企业来说是一个挑战。但是真正的挑战是，数据中心企业有没有做好准备去迎接这个平衡挑战。在许多其他行业的细分市场。很明显在数据中心企业中的那些接受高实用性概念的企业已经使用严格的方法去清洁、维护、安装、培训和其它一些任务为了预先防止弧闪事故的发生。 Organizations that subscribe to Tier standards and maintain stringent operational practices are better prepared to take on the challenges of compliance with OSHA and NFPA 70E requirements, in particular the requirements for safely performing work on energized systems, when such work is allowed per the safety standards. 这些概念比如层级标准：拓扑和操作可持续性。组织接受Tier标准和保持严格的操作实践能够为了达成OSHA和NFPA 70E标准做出充足的准备，尤其是在按照安全标准下的通电系统工作。 No measure will ever completely remove the risk of working on live, energized equipment. In instances where working on live systems is necessary and allowed by NFPA 70E rules, the application of Uptime Institute Tier III and Tier IV criteria can help minimize the risks. Tier III and IV both require the design and installation of systems that enable equipment to be fully de-energized to allow planned activities such as repair, maintenance, replacement, or upgrade without exposing personnel to the risks of working on energized electrical equipment. 没有措施能够一劳永逸的移除带电设备工作的风险。举一个例子，在必须带电作业和遵守NFPA 70E条列的场合下，Tier III和 Tier IV能够帮助最小化事故风险。Tier III 和Tier IV都要求系统的设计和安装能够使得设备完全开路，为了允许计划的任务能够展开，比如维修、维护、替代或者升级，杜绝工人接触到通电设备发生故障的风险。 · Does this data center [specify] perform site work and maintenance on energized electrical equipment? 你知道的数据中心在场地工作和维护工作时带电作业吗？请详细说明 o If no, and you are in a Tier III or IV Certified data center that—by design and Uptime Institute award—your organization has no reason to risk exposure to hot work. 如果没有，并且你是在Tier III 或者Tier IV 认证（这个认证是Uptime Institute设立的奖励）的数据中心工作，你的公司没有理由冒着风险带电作业。 o If no, and you are not in a Tier III or IV Certified data center, then you are exposed to the risk of equipment failure due to indefinitely deferred site work and maintenance. 如果没有，并且你不是在一家认证的数据中心工作，那么你会面对发生事故的风险因为不确定的延迟场地工作和维护。 o If yes, these questions may help you to understand your risk exposure of life safety, unplanned downtime, disrupted business process, code violation and penalty, and/or adverse revenue impact: 如果是，这些问题也许能够帮助你理解你承担的风险，生命的安全，没计划的停工期，中断企业进程，违反法律条例和处罚，和不利的税收影响。 — What is the established corporate policy for performing work on energized electrical equipment? 针对带电作业所建立的公司条例是什么？ — Who is informed of, and signed off on, this policy? 谁知道并且签署了这项政策？ · Data Center Operations 数据中心运营 · Maintenance & Site Work Contractors · 维护和场地工作承包商 IT Systems 信息技术系统 · Risk/Compliance 风险和承诺 · Life Safety/Health 生命安全/健康 · Regulatory/Oversight (3rd-Party or Internal) 管理/监督（第三方或公司内部） — When was the last time that work was performed on energized electrical equipment? 最后一次带电作业是什么时候？ — Who was alerted before the work was performed on energized electrical equipment? · 在带电作业之前谁先预动作警报？ Data Center Operations 数据中心运营 · IT Systems 信息技术系统 · Risk/Compliance 风险和承诺 · Life Safety/Health 生命安全/健康 · Regulatory/Oversight (3rd-Party or Internal) 管理/监督（第三方或公司内部） — Who and how many performed the work (contractor or employees)? 哪些人参与并运行这个工作？ — What were the safety precautions? 实行的安全预防措施有哪些？ — Who and how many performed the work (contractor or employees)? 哪些人参与并运行这个工作？ — What were the safety precautions? 安全预防措施有哪些？ — How long was the ‘hot work’ period scheduled for? 计划的带电作业持续时间是多少？ — How long did it actually take? 这个实际花了多久时间？ — What was the process of QA/QC before the ‘hot work’ period concluded and normal operations restored? 在带电作业结束和正常运行修复之前，QA和QB的过程是什么？ — What are the scheduled and upcoming ‘hot work’ periods? 计划的和即将来临的带电作业的周期是什么？ — As noted in this article, regulatory and code affecting hot work is changing. Who is responsible to check up on the latest impacts to corporate policy and site work activities? · How often does that check up occur? 正如本文所指出的，影响带电作业的法律法规条例一直在变化。谁有责任去检查最近这些变化对公司政策和场地工作的影响多久检查一次？ 翻译： 邓秋实 同济设计院电气设计师 DKV(Deep Knowledge Volunteer)计划精英成员 编辑： 梁鸿雁 中能测（北京）科技发展有限公司秘书处处长 公众号声明： |
|
|
