Command-and-control room engineering: three envelopes, per-envelope power, hand-off boundaries

Command-and-control room engineering is its own discipline. The procurement default treats the room as 'large boardroom with surveillance' — the operational reality treats it as a multi-envelope facility with per-envelope power, dedicated earthing, hand-off boundaries and operator-correlation surfaces. Government perimeter operations, transit-control rooms, power-plant SCADA centres and broadcast master-control rooms all share the same engineering pattern.

## Three concentric envelopes

Envelope 1 (Perimeter): UVSS, ANPR pole array, X-ray screening, boom barriers, turnstile flap-gates, RFID auto-recognition. Per-load online UPS, chemical-earthing pits dedicated to the screening plant, IP67 / IP66 enclosure discipline. Envelope 2 (Surveillance + Communication): control-room CCTV bank, NVR fleet, EPABX, structured LAN, PoE switching, BMS supervisory layer, IP-PBX hunt-groups. Per-system online UPS, dedicated head-end rack environment, configuration baseline export. Envelope 3 (Command + Briefing): operator console, secure briefing room with BYOD-capable AV, 6 kVA UPS for the head-end rack, 30-minute holdover for the entire room load.

## Per-envelope power and earthing strategy

Each envelope has its own dedicated UPS architecture and its own earthing strategy — the perimeter envelope's screening plant cannot share UPS or earthing with the command envelope's operator console. A fault on the X-ray feed cannot reach the operator console; a fault on the operator-console UPS cannot reach the screening plant. The architecture enforces fault isolation at the power-and-earthing layer rather than at the application layer.

## Hand-off boundaries between envelopes

Screening events from the perimeter envelope hand off to the surveillance envelope (CCTV bookmark on every UVSS / ANPR / X-ray trigger), which hands off to the command envelope (operator console correlates the gate event with the approach-road footage). The hand-off is engineered: each envelope's event surfaces on the next envelope's operator surface with a documented correlation path, witnessed at commissioning. Without engineered hand-offs, incident review fragments across three operator surfaces.

## Convenience layer in parallel with screening, never bypassing

RFID auto-recognition for protocol-fleet vehicles, BYOD pairing for visiting delegation laptops, voice-command for operator console gestures — these convenience features run in parallel with the underlying screening and surveillance disciplines, never as a bypass. A cloned RFID tag still triggers the UVSS underside scan and the ANPR plate read; a BYOD pairing event still requires the closed-VLAN credential. The convenience is operator-facing; the security is engineered into the underlying flow.

## Operator-correlation surface

The operator console correlates events across all three envelopes on a single surface — incident review pulls the perimeter event (gate UVSS), the surveillance event (approach-road CCTV) and the command event (operator action log) from the same timestamp range without switching consoles. The correlation discipline is engineered at the VMS layer plus the IP-PBX integration plus the BMS event log; without it, incident review fragments across three operator surfaces and the audit trail is lost.

## Configuration baseline discipline

Every controller across the three envelopes — UPS, fire panel, BMS, Wi-Fi controller, IP-PBX, audio DSP, lighting controller, RFID reader — has its configuration baseline exported offline at handover and re-exported after every firmware refresh. Any controller is recoverable from a clean slate within the same business day if a field unit is replaced. The recovery procedure is rehearsed at each AMC visit.

## AMC discipline matches the operational tier

Command-and-control rooms operate at Mission-Critical tier — named engineer, 4-hour on-site response, quarterly preventive maintenance, monthly failover testing, configuration baseline review at every visit. The AMC is engineered against the operational tier, not against a generic commercial baseline.

## Callout — what command-room procurement most miss

**Three envelopes with per-envelope power, dedicated earthing, engineered hand-offs and an operator-correlation surface — the room is a facility, not a boardroom.** Specify each envelope's UPS architecture, its earthing strategy, its hand-off boundary to the next envelope, and the operator-console correlation surface that binds them. The AMC tier matches the operational reality, not the procurement default.

## References

1. IEEE 1100 — recommended practice for powering and grounding electronic equipment (Emerald Book).

2. TIA-942 — telecommunications infrastructure for data centres.

3. NFPA 70 (NEC) — National Electrical Code (US cross-reference).

4. IS 3043 — earthing practice for low-voltage installations.