SCADA · Alarms

Alarm Management, Building Alarms People Still Believe

What this is
SCADA for CEA: the serving layer
Ring
Technology
Updated
2026-06-16

An alarm system is only worth anything if someone still listens to it. An alarm that cries wolf gets tuned out, and a tuned-out alarm is worse than none: it costs money to run and buys nothing.

The most important fact about an alarm system is not how many things it can alarm on. It's whether a human still believes it at 2 a.m. An alarm that cries wolf gets tuned out, and a tuned-out alarm is worse than no alarm at all. It costs money to run and buys nothing. Alarm fatigue is the single biggest reason alarms get ignored, in every industry that has ever used them. So the design goal is not "alarm on everything." It is "alarm on the right things, at the right urgency, so a human trusts every single interruption."

That trust is built on two things: a clear grammar of urgency, and a hard discipline against false alarms.

Four tiers, the grammar of urgency

Not every problem deserves the same volume. A four-tier hierarchy lets the operator tell, in a glance, the difference between "keep an eye on this" and "drop everything."

  • Advisory (blue). Something is trending but still inside the acceptable range. "Root-zone temperature has risen 2 °C in the last four hours." Logged and shown on the dashboard, no sound. It's a heads-up, not a call to action.
  • Caution (yellow). A reading has left the optimal range but is still acceptable. Act within one to four hours. "pH is at 6.4; target is 5.8–6.2." One alert, then it waits.
  • Alarm (orange). A reading is outside the acceptable range, or a cascade pattern has been detected. Act within fifteen to sixty minutes. "Dissolved oxygen below 5 mg/L in Zone 3." Persistent on the screen, plus a push to a phone.
  • Critical (red). A reading will damage the crop if it isn't corrected now, or there is a safety hazard. Immediate. "CO₂ over 5,000 ppm. Power failure, aeration offline." Every channel, up to and including a phone call, and it cannot be silenced until the condition actually clears.

The point of the tiers isn't ceremony. It's that an operator who gets a blue advisory and an operator who gets a red critical should feel the difference before they've read a word.

The discipline that actually keeps the system trusted

Tiers are the easy part. Beating alarm fatigue is the work, and it comes down to a handful of rules.

Suppress the alarms you expect. Twice a day, at lights-on and lights-off, temperature and VPD change fast on purpose. A naive system fires a rate-of-change alarm every time, and the operator learns, within a week, to ignore the one transition that's genuinely failing. During the transition window, suppress the alarms the transition is supposed to cause. Watch for the transition that goes wrong, not the ones that go right.

Quiet the night. During the dark period, normal parameter shifts will trip advisory-level alarms all night long. Dial them back so the only thing that wakes someone is something that should.

Nothing just disappears. A caution left unacknowledged for four hours escalates to an alarm. An alarm requires acknowledgment plus a logged corrective action (what you did, not just that you saw it). A critical can't be cleared until the condition resolves. An alarm that can be swiped away and forgotten is an alarm that will be.

Hunt the nuisance alarm. Once a week, count alarms by tier and by zone, and find the ones that fire often but never lead to an action. Those are not alarms. They are a miscalibrated threshold wearing an alarm's clothes. Fix the threshold. Do not train people to ignore the buzzer, because the day you train them to ignore one is the day they ignore the one that mattered.

Where this connects

This is the layer cascade detection escalates through, and the case where elevating an alarm and adding context earns its keep: not "dissolved oxygen is low" but "dissolved oxygen is low, root-zone temperature is climbing, this is the Pythium pattern." It also sits directly downstream of the Controls lesson in the Fundamentals, which draws the line that matters most here: when to let the system act on its own, and when a problem has to wait for a human hand. An alarm is what the system raises when it has decided the second case applies.

The measure of an alarm system is not how much it tells you. It's whether you still believe it at 2 a.m. Build it so every alarm has earned the interruption.

Frequently asked questions.

What is alarm fatigue?

Alarm fatigue is what happens when a monitoring system fires so many alarms, especially false ones, that the people responsible stop paying attention. An alarm that cries wolf gets tuned out, and a tuned-out alarm is worse than no alarm at all because it costs money to run and buys nothing. It is the single biggest reason alarms get ignored across every industry that uses them.

How do you prevent alarm fatigue?

You alarm on the right things at the right urgency so every interruption stays trusted. Suppress alarms you expect, such as the fast temperature swings at lights-on and lights-off. Quiet routine shifts during the night. Require that an alarm be acknowledged and a corrective action logged, not just swiped away. Once a week, count alarms and fix the thresholds behind ones that fire often but never need action.

What are the different priority levels for alarms?

A common approach uses four tiers. Advisory (blue) flags something trending inside the acceptable range, logged with no sound. Caution (yellow) means a reading left the optimal range but is still acceptable, act within one to four hours. Alarm (orange) means a reading is outside the acceptable range, act within fifteen to sixty minutes. Critical (red) means damage or a safety hazard is imminent and demands immediate action.

Should alarms wake you up at night?

Only the ones that matter. During a dark or off-shift period, normal parameter shifts will trip low-level advisory alarms constantly, so those should be dialed back so the only thing that wakes someone is a genuine problem. A well-built system reserves its loudest, unsilenceable critical alerts for conditions that will cause damage or pose a safety hazard right now.

Why should an alarm require a logged action instead of just being dismissed?

An alarm that can be swiped away and forgotten is an alarm that will be. Requiring acknowledgment plus a logged corrective action, a record of what was done and not just that someone saw it, keeps problems from disappearing quietly. Unacknowledged cautions can escalate to higher tiers, and critical alarms stay active until the underlying condition actually clears.