Division 19 · SIT · Cross-System Verification

System Integration Testing

Individual equipment can pass every test in isolation and the AGL system can still fail as a whole. Division 19 verifies that all major AGL subsystems — CCRs, PLCs, SCADA, ALCMS, HMI, remote monitoring, and the communication network that ties them together — actually talk to each other, exchange commands correctly, provide correct status feedback, generate and transmit alarms, execute approved interlocks and sequences, and behave as one integrated airport lighting control and monitoring system.

Philosophy: Division 19 is positioned after equipment-level testing, functional testing, and SAT, because its purpose is not to prove that individual equipment works — it is to prove that Command → Communication → Control Logic → Equipment Response → Field Response → Feedback → Monitoring → Alarm/Event works correctly across the complete integrated system.

18
Topics in Division
05
Verification Groups (A–E)
09
Chain-of-Verification Links
10
Step Complete Integration Test

Integration Philosophy

Every Division 19 test — whatever the subsystem — is proving the same underlying chain, from the moment a command is issued to the moment the system is confirmed to have recovered correctly.

Command
Communication
Control Logic
Equipment Response
Field Response
Status Feedback
Alarm / Event
Operator Confirmation
Recovery
Subsystem interfaces Command & feedback loop Network & redundancy Alarm, event & sequence logic Emergency & full-system proof

Chain of Verification

The strongest Division 19 acceptance test is never just “the CCR switched ON” — every link below has to hold across the complete integrated system before a test is accepted.

LinkWhat It Confirms
CommandThe operator or upstream system issues the approved command through an authorized interface
CommunicationThe command is correctly transmitted across the network to the intended controller/equipment
Control LogicThe PLC/controller processes the command correctly, with no cross-wiring or cross-mapping
Equipment ResponseThe correct CCR or equipment operates — and only that equipment
Field ResponseThe correct AGL circuit and fixtures respond as commanded
Status FeedbackActual equipment status returns accurately to the control system
Alarm / EventApplicable alarms and events are correctly generated, transmitted, and logged
Operator ConfirmationHMI/SCADA/ALCMS displays the condition that actually exists in the field
RecoveryThe system returns correctly to its approved normal operating condition

Before Testing Begins

Two things should be established before any Division 19 test is run — what this division is not repeating, and how alarm/priority and emergency conditions are to be handled.

Division 19 Is Not a Repeat

  • Division 14 asks whether the ALCMS/control system itself works
  • Division 15 asks whether the complete installed system behaves correctly during operation
  • Division 18 (SAT) asks whether the installed system meets overall site acceptance requirements
  • Division 19 asks whether all independent systems communicate and work together correctly across their interfaces

Coordination & Priority Rules

  • Alarm priorities are never assigned during testing — they are verified against the approved alarm matrix/philosophy
  • Emergency-operation testing must be carefully coordinated with airport operations and ATC where the test could affect operational lighting
  • Every command test must confirm that only the intended equipment responds — no unintended operation
  • No integration test is closed until the system is restored to its approved normal operating condition
DivisionPrimary Question
Division 14 — Monitoring, Control & ALCMSDoes the ALCMS/control system itself work?
Division 15 — Functional TestingDoes the complete installed system behave correctly during operation?
Division 18 — SATDoes the installed system meet the overall site acceptance requirements?
Division 19 — System Integration TestingDo all independent systems communicate and work together correctly across their interfaces?

The 18 Topics

Grouped by integration focus, in the order a complete system is normally worked through — click any topic to expand its verification checks and acceptance criteria.

A

Subsystem Integration

4 topics
TC-SIT-001CCR-to-ALCMS Integration
Verification Checks
  • Verify CCR identification and communication address
  • Verify CCR status transmission, ON/OFF command, and intensity command
  • Verify current feedback, fault feedback, and alarm feedback
  • Verify operating mode, local/remote status, and communication status
  • Confirm the CCR shown on the ALCMS corresponds to the actual CCR being controlled
Note

Test Sequence: ALCMS Command → Communication Network → CCR → Series Circuit → AGL Fixtures → CCR Feedback → ALCMS Indication

Acceptance / Record

Acceptance Criteria: the CCR displayed on the ALCMS is verified as the actual CCR being controlled, with correct status, feedback, and alarm indication.

TC-SIT-002PLC Integration
Verification Checks
  • Verify PLC input and output signals, digital inputs and outputs
  • Verify analog inputs and outputs where applicable
  • Verify equipment status, command signals, alarm signals, interlocks, and control logic
  • Confirm correct signal mapping and correct equipment association
  • Confirm no cross-wiring or cross-mapping exists
Note

Test: Field Signal → PLC → Control Logic → Output, and Command → PLC → Equipment → Feedback → PLC

Hold Point

Hold Point: any cross-wired or cross-mapped signal is corrected and retested before the PLC integration is accepted.

TC-SIT-003SCADA Integration
Verification Checks
  • Verify equipment representation, equipment status, and commands
  • Verify alarms, faults, and events
  • Verify communication status, intensity information, and operating mode
  • Confirm applicability — test only where SCADA integration is part of the project scope
Note

Test: SCADA Command → AGL Control System → Equipment, and Equipment Status → Control System → SCADA

Acceptance / Record

Acceptance Criteria: the SCADA display accurately represents the actual field condition at all times, in both directions of the command/status loop.

TC-SIT-004Remote-Monitoring Integration
Verification Checks
  • Monitor CCR status, circuit status, and equipment status
  • Monitor fault status, alarm status, and communication status
  • Monitor operating mode and overall system health
  • Create an approved test condition and verify correct equipment identification, status, alarm, timestamp where applicable, and status recovery
Note

Test: Field Condition → Controller → Communication → Remote Monitoring

Acceptance / Record

Acceptance Criteria: remote monitoring correctly receives and displays every applicable status, alarm, and recovery condition generated by the field system.

B

Command & Control Verification

5 topics
TC-SIT-005Alarm Communication
Verification Checks
  • Verify alarm generation and alarm transmission
  • Verify correct equipment identification and correct alarm description
  • Verify alarm priority and alarm indication
  • Verify alarm acknowledgement, alarm clearing, and alarm history
Note

Test Chain: Equipment Fault/Condition → Equipment Detection → PLC/Controller → Communication Network → ALCMS/SCADA → HMI Alarm → Alarm History

Acceptance / Record

Acceptance Criteria: the complete alarm chain, from field detection to alarm history, is verified for every tested alarm condition.

TC-SIT-006Control-Interface Verification
Verification Checks
  • Identify all approved control interfaces — local control panel, CCR control, ALCMS, HMI, SCADA, remote workstation, emergency control interface
  • Verify ON/OFF command, intensity command, circuit selection, and group selection
  • Verify mode selection, reset, emergency command, and status feedback
  • Issue a command from each approved control interface in turn
Hold Point

Hold Point (Critical Test): for every interface tested, only the intended equipment responds — no other equipment operates.

TC-SIT-007Interlocking Verification
Verification Checks
  • Identify applicable interlocks — local/remote, control-source, equipment, circuit, emergency, conflicting-command, maintenance/control
  • Attempt the applicable prohibited/conflicting operation for each interlock
  • Verify the interlock logic prevents the unintended operation
  • Verify correct indication/alarm appears and the event is recorded where required
Note

Test Principle: Attempt Applicable Prohibited/Conflicting Operation → Interlock Logic → Unintended Operation Prevented → Correct Indication/Alarm

Acceptance / Record

Acceptance Criteria: every applicable interlock operates correctly, protects the correct equipment, and generates the correct indication.

TC-SIT-008Equipment-Status Feedback
Verification Checks
  • Verify applicable statuses — ON, OFF, Fault, Trip, Local, Remote, Available, Unavailable, Communication failure, Standby, Emergency mode
  • Change the actual equipment state under a controlled condition
  • Observe the controller, then observe the ALCMS/HMI/SCADA
  • Confirm the displayed status corresponds to the actual physical condition of the equipment
Note

Test: Change Actual Equipment State → Observe Controller → Observe ALCMS/HMI/SCADA → Verify Correct Status

Hold Point

Hold Point (Critical Verification): the displayed status must correspond to the actual physical condition of the equipment at every point in the test.

TC-SIT-009Command-Feedback Verification
Verification Checks
  • Verify command received and command executed
  • Verify physical response is correct and status is returned
  • Verify the display is updated with no command/feedback mismatch
  • Confirm no unrelated equipment operates
Note

Test Sequence: Operator Command → Control Interface → PLC/Controller → Communication Network → CCR/Equipment → Physical Response → Status Feedback → ALCMS/HMI/SCADA

Acceptance / Record

Acceptance Criteria: this is one of the most important tests in Division 19 — for example, commanding CCR-05 ON must confirm the command is received, CCR-05 operates, the correct circuit energizes, field lights operate, CCR status changes, the ALCMS indicates ON, and no unrelated CCR operates.

C

Network & Communication Resilience

4 topics
TC-SIT-010Communication Redundancy
Verification Checks
  • Verify primary communication path and secondary communication path
  • Verify automatic/manual changeover where specified
  • Verify communication-loss indication and restoration
  • Verify equipment status retention/recovery and alarm generation
  • Confirm applicability — test only where redundant communication architecture is provided
Note

Test Sequence: Normal Communication → Controlled Primary Path Failure → Redundant Path → Communication Restored → Normal Configuration

Acceptance / Record

Acceptance Criteria: the system remains operational as designed, the failure is detected and alarmed, the redundant path activates where applicable, and recovery occurs correctly.

TC-SIT-011Network Communication
Verification Checks
  • Verify applicable network elements — switches, controllers, PLCs, CCR interfaces, HMI, SCADA, servers, remote workstations, communication gateways
  • Verify device connectivity and correct addressing
  • Verify data, status, and command transmission
  • Verify communication health, network alarms, and recovery after interruption
  • Check that no incorrect device-to-device communication or cross-assignment exists
Hold Point

Hold Point: any cross-assigned or incorrectly addressed device is corrected before the network is accepted.

TC-SIT-012Remote-Control Response
Verification Checks
  • Verify command transmission and command execution
  • Verify response time where specified
  • Verify field operation, feedback, and alarm/status indication
  • Test applicable commands — ON, OFF, intensity step, group selection, mode selection, reset
Note

Test: Remote Command → Communication → Control System → CCR → Circuit → Fixture

Acceptance / Record

Acceptance Criteria: every tested remote command produces the correct field response within any specified response time, with correct feedback and indication.

TC-SIT-013Failure Communication
Verification Checks
  • Test applicable failure conditions — CCR, PLC, network, HMI, SCADA, remote, and equipment communication failure
  • Verify failure detection and communication of the failure
  • Verify alarm, equipment identification, event recording, and recovery
  • Check that the system distinguishes, where designed to do so, between equipment fault, communication fault, control-system fault, and network fault
Note

Test Chain: Failure → Detection → Communication → Alarm → Identification → Event → Recovery

Acceptance / Record

Acceptance Criteria: every applicable failure condition is correctly detected, alarmed, identified, logged, and recovered.

D

Alarm, Event & Sequence Verification

3 topics
TC-SIT-014Alarm Prioritization
Verification Checks
  • Verify alarm category, priority, and description
  • Verify equipment identification and visual indication
  • Verify audible indication where applicable
  • Verify acknowledgement, alarm history, and alarm clearing
Note

Example Classification: the project alarm philosophy defines categories such as Critical, Major, Minor, and Advisory

Hold Point

Hold Point: alarm priorities are never assigned solely during testing — they are verified against the approved alarm matrix.

TC-SIT-015Event Logging
Verification Checks
  • Verify applicable events — operator command, circuit ON/OFF, intensity change, alarm, fault, communication failure, recovery, mode change, emergency operation, system restart
  • Verify event description, equipment identification, and date/time
  • Verify sequence/order and user/operator identification where applicable
  • Verify event storage and event retrieval
Note

Test: generate a controlled event and verify Actual Event → System Detection → Event Log → Correct Information

Acceptance / Record

Acceptance Criteria: every tested event is correctly logged with accurate description, identification, timestamp, and sequence, and can be retrieved.

TC-SIT-016System Sequence Verification
Verification Checks
  • Verify correct sequence and correct timing where specified
  • Verify correct equipment, correct intensity, and correct feedback
  • Verify correct alarms and confirm no unintended operation
  • Test applicable sequences — runway lighting, taxiway lighting, approach-light, stop-bar, emergency, intensity-transition
Note

Example: Runway Lighting Command → ALCMS → PLC → CCR → Series Circuit → Runway Fixtures → Status Feedback → ALCMS Indication

Acceptance / Record

Acceptance Criteria: every predefined sequence involving multiple systems executes correctly, in the correct order, with correct feedback and no unintended operation.

E

Emergency & Final Acceptance

2 topics
TC-SIT-017Integrated Emergency Operation
Verification Checks
  • Verify emergency command and control priority
  • Verify required lighting response, CCR response, and ALCMS response
  • Verify alarm response, status feedback, and communication
  • Verify emergency indication and recovery
Note

Test Chain: Emergency Condition/Command → Emergency Logic → PLC/Control System → CCR/AGL Equipment → Field Response → ALCMS Feedback → Alarm/Event

Hold Point

Hold Point: emergency testing must be carefully coordinated with airport operations and ATC where the test could affect operational lighting.

TC-SIT-018Complete System Integration Test
Verification Checks
  • Select the required AGL system/circuit through the approved control interface and issue the command
  • Verify communication reaches the intended controller/CCR and the correct equipment responds
  • Verify the correct AGL fixtures respond in the field
  • Verify feedback returns and HMI/SCADA displays the correct status
  • Where a controlled test condition is introduced, verify alarm transmission and event recording
  • Test applicable systems — runway, taxiway, approach, PAPI, stop bar, signage, emergency, and communication-failure conditions
  • Restore the system to its approved normal operating condition
Acceptance / Record

Acceptance Criteria: this is the highest-level test in Division 19 — the complete integrated AGL control, monitoring, and field system is demonstrated to operate correctly across the full command → communication → control logic → equipment response → field response → feedback → monitoring → alarm/event chain, and is restored to its approved normal condition.

Complete Integration Test Sequence

Topic 18 runs as a single continuous 10-step sequence per system/circuit, and is the final gate before integration acceptance is issued.

1
Select System

Select the required AGL system/circuit through the approved control interface.

2
Issue Command

Send the required ON/OFF/intensity command.

3
Verify Communication

Confirm the command reaches the intended controller/CCR.

4
Verify Equipment Response

Confirm the correct equipment operates.

5
Verify Field Response

Confirm the correct AGL fixtures operate.

6
Verify Feedback

Confirm actual equipment status returns to the control system.

7
Verify HMI/SCADA

Confirm the correct status appears on all applicable interfaces.

8
Verify Alarm

Where a controlled test condition is introduced, verify alarm transmission.

9
Verify Event

Confirm the event is correctly recorded.

10
Restore Normal Condition

Restore the system to the approved normal operating condition.

Frequently Asked Questions

Quick answers about Division 19 — System Integration Testing in the AGL Testing & Commissioning Manual.

Q1What is Division 19 — System Integration Testing in the AGL Testing & Commissioning Manual?

Division 19 of the AGL Testing & Commissioning Manual covers System Integration Testing. Individual equipment can pass every test in isolation and the AGL system can still fail as a whole. Division 19 verifies that all major AGL subsystems — CCRs, PLCs, SCADA, ALCMS, HMI, remote monitoring, and the communication network that ties them together — actually talk to each other, exchange commands correctly, provide correct status feedback, generate and transmit alarms, execute approved interlocks and sequences, and behave as one integrated airport lighting control and monitoring system. It contains 18 topics (TC-SIT-001 to TC-SIT-018) organised into 5 groups (A–E), each topic with its own verification checks.

Q2What is the philosophy behind Division 19 — System Integration Testing?

Division 19 is positioned after equipment-level testing, functional testing, and SAT, because its purpose is not to prove that individual equipment works — it is to prove that Command → Communication → Control Logic → Equipment Response → Field Response → Feedback → Monitoring → Alarm/Event works correctly across the complete integrated system.

Q3What is the step-by-step sequence in Division 19?

Every Division 19 test — whatever the subsystem — is proving the same underlying chain, from the moment a command is issued to the moment the system is confirmed to have recovered correctly. Steps: Command → Communication → Control Logic → Equipment Response → Field Response → Status Feedback → Alarm / Event → Operator Confirmation → Recovery. Focus areas: Subsystem interfaces; Command & feedback loop; Network & redundancy; Alarm, event & sequence logic; Emergency & full-system proof.

Q4Which topics does Division 19 cover?

Division 19 has 18 topics in 5 groups. A — Subsystem Integration: CCR-to-ALCMS Integration, PLC Integration, SCADA Integration, Remote-Monitoring Integration. B — Command & Control Verification: Alarm Communication, Control-Interface Verification, Interlocking Verification, Equipment-Status Feedback, Command-Feedback Verification. C — Network & Communication Resilience: Communication Redundancy, Network Communication, Remote-Control Response, Failure Communication. D — Alarm, Event & Sequence Verification: Alarm Prioritization, Event Logging, System Sequence Verification. E — Emergency & Final Acceptance: Integrated Emergency Operation, Complete System Integration Test.

Q5What is the chain of verification in Division 19?

The strongest Division 19 acceptance test is never just “the CCR switched ON” — every link below has to hold across the complete integrated system before a test is accepted. Command: The operator or upstream system issues the approved command through an authorized interface; Communication: The command is correctly transmitted across the network to the intended controller/equipment; Control Logic: The PLC/controller processes the command correctly, with no cross-wiring or cross-mapping; Equipment Response: The correct CCR or equipment operates — and only that equipment; Field Response: The correct AGL circuit and fixtures respond as commanded; Status Feedback: Actual equipment status returns accurately to the control system; Alarm / Event: Applicable alarms and events are correctly generated, transmitted, and logged; Operator Confirmation: HMI/SCADA/ALCMS displays the condition that actually exists in the field; Recovery: The system returns correctly to its approved normal operating condition.

Q6What must be in place before testing begins in Division 19?

Two things should be established before any Division 19 test is run — what this division is not repeating, and how alarm/priority and emergency conditions are to be handled. Division 19 Is Not a Repeat: Division 14 asks whether the ALCMS/control system itself works; Division 15 asks whether the complete installed system behaves correctly during operation; Division 18 (SAT) asks whether the installed system meets overall site acceptance requirements; Division 19 asks whether all independent systems communicate and work together correctly across their interfaces. Coordination & Priority Rules: Alarm priorities are never assigned during testing — they are verified against the approved alarm matrix/philosophy; Emergency-operation testing must be carefully coordinated with airport operations and ATC where the test could affect operational lighting; Every command test must confirm that only the intended equipment responds — no unintended operation; No integration test is closed until the system is restored to its approved normal operating condition.

Q7How does Division 19 differ from the neighbouring divisions?

Each division answers a different primary question. Division 14 — Monitoring, Control & ALCMS: Does the ALCMS/control system itself work?; Division 15 — Functional Testing: Does the complete installed system behave correctly during operation?; Division 18 — SAT: Does the installed system meet the overall site acceptance requirements?

Q8What is the Complete Integration Test Sequence in Division 19?

Topic 18 runs as a single continuous 10-step sequence per system/circuit, and is the final gate before integration acceptance is issued. (1) Select System — Select the required AGL system/circuit through the approved control interface; (2) Issue Command — Send the required ON/OFF/intensity command; (3) Verify Communication — Confirm the command reaches the intended controller/CCR; (4) Verify Equipment Response — Confirm the correct equipment operates; (5) Verify Field Response — Confirm the correct AGL fixtures operate; (6) Verify Feedback — Confirm actual equipment status returns to the control system; (7) Verify HMI/SCADA — Confirm the correct status appears on all applicable interfaces; (8) Verify Alarm — Where a controlled test condition is introduced, verify alarm transmission; (9) Verify Event — Confirm the event is correctly recorded; (10) Restore Normal Condition — Restore the system to the approved normal operating condition.

Go Further

Don't Just Integrate the System. Understand How the Parts Depend on Each Other.

System integration testing proves that independently commissioned subsystems work correctly together.

Build the technical knowledge to understand interface testing, data exchange verification, and how a fault in one subsystem can propagate through an integrated AGL system if integration testing is skipped.

Integrate with precision. Verify with confidence. Commission with certainty.

Build Complete AGL Testing & Commissioning Capability
AGL Fundamentals Installation Electrical Systems Pre-Commissioning Testing Photometry Commissioning Troubleshooting Maintenance

Talk to Precision AGL Academy

Follow the Academy