Prepared by SawangVille Tech Ventures Sdn Bhd Reg. No. 202601003133 (1665230-D) Confidential proposal for Oil & Gas Management (M) Sdn Bhd. Not for redistribution or reuse without permission.
OGM logo Prepared for Puan Ros & Mr Quek · Proposal

ACIA, from a Windows desktop to a secure web platform your engineers can open anywhere.

A proposal to rebuild ACIA (Asset Condition Integrated Analysis) as a modern web application: no installation, no Citrix, one shared database and today's security standards. It is based on a full review of the training material, the RBMI user manual and the ACIA v3.2 source code and databases you shared with us.

Draft 5 · 14 October 2026 · Colours taken from the OGM logo
Inspection engineer with a tablet at a gas processing plant
12 tasks due this monthUnit 200 · Gas compression
MH
V-2101 · HP SeparatorCriticality updated after UT inspection
Sample photo · AI-generated
NEW — not in the current system UPGRADED — same purpose, rebuilt better COMBINED — several screens merged into one KEPT — same behaviour, same results
01

The short version

For readers who want the answer first. Each point is explained in detail further down.

Can it be done?

Yes. Every ACIA module can move to the web. Users open it in Chrome or Edge, from the office or the plant.

Will results change?

No. Phase 1 keeps the existing calculation engine, so criticality results stay exactly the same as today.

Investment

RM 180,000 for the core system, or RM 280,000 for the complete system.

Timeline

5 – 6 months for the core system, 9 – 12 months for the complete system.

Before work starts, we ask OGM to confirm its rights to modernise ACIA (see section 10). Everything else can be settled in the first four weeks.

02

What we studied

This proposal is built on your own material, not assumptions. We read every source below before estimating any effort.

RBMI / P-RBI training slidesMethodology, criticality matrix, inspection planning and data management modules.
RBMI user manual (479 pages)Every screen, field and workflow, including inspection confidence tables and consequence rules.
ACIA v3.2 source codeVB.NET desktop application, Crystal Reports, IOW module and project-specific additions.
SQL Server databasesData and Security databases, schema scripts and the reference tables used by the calculations.
90Screens
63Report designs
135Database tables
~232kLines of code
All calculation reference data (corrosion factors, fluids, materials, toxic dispersion) already sits in the database, so it moves across intact.
Pressure vesselPressure vessels & columns
Heat exchanger bundleHeat exchangers
Corrosion under insulation on pipingPiping circuits
Pressure relief valveRelief devices

Equipment covered by ACIA today. Photos are AI-generated samples, used only to set the mood.

03

How users work: today vs proposed

A typical day for an inspection engineer, from start to finish. The engineering steps stay the same. What changes is how people reach the system, how safely it holds the data, and how quickly they find what is due.

Today — ACIA v3.2 on Windows

1
Install on each PC

Setup, Crystal Reports runtime and a connection file per computer

▼
2
Log in
▼
3
Equipment Explorer
▼
4
Data sheets

Separate forms per equipment type

▼
5
Criticality

Engine runs on the user's own PC

▼
6
Inspection planning
▼
7
NDE · Visual · Other inspections
▼
8
Non-conformance · Tasks due
▼
9
Reports

Crystal Reports on each PC

Remote users reach it through Citrix or remote desktop. Each new PC needs a full installation.

Proposed — ACIA Web

1
Open a browser

One web address for every user and every site. Nothing to install, nothing to update on PCs

▼
2
Secure sign-in

Two-factor authentication, optional Microsoft 365 single sign-on, access limited by organisation, plant and unit

▼
3
Integrity dashboard

Risk matrix, tasks due, open non-conformances and items about to change risk category, on one screen

▼
4
Equipment workspace

Explorer and data sheets combined: pick an asset on the left, every tab on the right

▼
5
Criticality on the server

Same engine and same results, run centrally. Every run keeps its inputs and engine version for audit

▼
6
Inspection planning

Same strategy rules, with due dates on a timeline view

▼
7
NDE · Visual · Other inspections

Faster data entry grids, live corrosion-rate charts, photos uploaded from the field

▼
8
Non-conformance · Tasks due

With email reminders

▼
9
Reports

PDF and Excel straight from the browser, with the client's own logo

▼
10
Audit trail

Who changed what, when, and the previous value, for every engineering record

newupgradedcombined

What gets better

No more installations. A new engineer, a new laptop or a new site only needs the web address and a login.

One source of truth. Every user works on the same live data, so there is no copying databases between offices or waiting for Citrix.

The engineering stays the same. Data sheets, criticality, strategy rules and inspection planning keep their current logic and results, so engineers do not need to relearn the method.

Easier to see what needs attention. A dashboard shows what is due, what is high risk and what is about to change category, without running a report first.

Built for audits. Every criticality run and every change is recorded, which supports DOSH and client audits.

04

Early observations from the review

ACIA has served its users for many years and its engineering logic is sound. These observations are about the technology around it, which has aged since the original platform was built in the 2000s. Each one is addressed in the new design.

Security
  • User passwords are stored as readable text rather than encrypted.
  • The login check builds its database query directly from what the user types, which modern systems avoid.
  • Database connection details, including passwords, are stored in readable form in configuration tables and files.
  • Permissions hide buttons on screen but are not re-checked by the database.
New system: encrypted passwords, two-factor login, every permission checked on the server, connection secrets kept outside the database.
Calculation engine
  • Criticality is calculated by two 32-bit components from 2004, built with Visual Basic 6.
  • They only run on Windows and must be installed on every PC.
  • The formulas are compiled inside, so they cannot easily be reviewed or extended.
New system: the engine runs once, on the server (Phase 1), then is replaced by a modern, documented engine verified against it (Phase 2). See section 06.
Ageing components
  • The project started in Visual Studio 2008 and now targets .NET Framework 4.5.2.
  • It depends on several third-party desktop components (Crystal Reports, 10Tec iGrid, Acrobat, FastLook, XArrayDB) that each need licences and installation.
  • Supporting both SQL Server and Oracle doubles part of the code.
New system: standard web technology with no desktop add-ons, one database engine, and reports generated on the server.
Database
  • The data is well structured: 135 tables plus views that hold part of the reporting logic.
  • Databases from different years use SQL Server 2000, 2008 R2 and 2014 formats.
  • Each organisation has its own database, which is a strong base for serving several clients.
New system: keeps one database per organisation, with a tested migration path and reconciliation reports (section 07).
A note on the shared files
  • The shared folder includes databases and backups that appear to contain real production data from client organisations, and stored database login details.
  • We have used them only to size this proposal. We will keep them confidential and delete our copy once the evaluation is complete, unless OGM asks us to keep them under an NDA.
  • As a precaution, we recommend changing the database passwords that appear in those files, and using a sanitised sample database for future sharing.
05

How ACIA Web will look

Seven key screens, shown with sample data so the layout reads like the real thing. Every module keeps the same fields and logic as today; only the layout, navigation and speed are new. Final design is agreed in the Discover stage.

On a phone, swipe sideways inside the screens below. They are designed for a desktop browser.

acia.[your-domain].com.my
Sample data for illustration only. Equipment tags, figures and photos are not from any real facility.
A · DASHBOARDNEWFirst screen after login
Plant A · All units

Integrity dashboard

Search tag, circuit or NCR…
NA
42High-risk items
318Tasks due · 90 days
17Overdue tasks
9Open NCRs
Risk matrix · 1,284 components Click a cell
1
3
5
8
6
2
2
11
19
24
14
12
3
46
71
58
33
10
4
128
166
142
61
9
5
203
121
88
39
5
E
D
C
B
A
↑ Probability (1 = very high)Consequence (A = catastrophic) →
Needs attention
V-2101 · HP SeparatorMoves to High in 4 monthsMH → H
P-2040 · Gas line 8"Remaining life 2.1 yearsLow life
E-2203 · Lean amine coolerBundle inspection overdue 21 daysOverdue
IOW · Amine loading, T-2301Limit exceeded 3 times this weekIOW
Tasks due by unit · 90 days
Unit 10096
Unit 200134
Unit 30061
Utilities27
B · EQUIPMENT WORKSPACECOMBINEDExplorer + data sheets in one view
Plant A › Unit 200 · Gas compression › Separation

V-2101 · HP Production Separator

History Save
Explorer
Plant A
Unit 200 · Gas compression
Separation
V-2101
Top head
Shell
Bottom head
V-2102
P-2040 circuit
E-2203
Asset dataComponentsCorrosion studyEnv. crackingCriticalityPlanNDEVisualNCRDocs
V-2101
Pressure vessel
ASME VIII Div. 1
8,200 kPa
120 °C
12 Mar 1998
SA-516 Gr. 70
Yes · Mineral wool
C1–C2 gas
Pressure vessel photoPhoto · 2025 turnaround
MHDriving risk 2C
Next inspection Mar 2027
Units follow each user's preference (metric or imperial) and are stored once in a single standard.
C · CRITICALITYUPGRADEDSame inputs, same engine, same results
V-2101 › Shell

Criticality run

Mass criticality Calculate
Driving RiskWhat-if Analysis date: 14 Oct 2026 Performed by: N. Aziz Approved by: Lead engineer
Internal corrosionExternal / CUIEnv. crackingOtherConsequenceProduction loss
Long-term · 0.09 mm/y
28.0 mm
21.6 mm
3
High
18 Jun 2025
3Internal
2External / CUI
4Env. cracking
5Other
Result
MH
2CProbability 2 · Consequence C
Remaining wall / min wall1.21 Flammable affected area196,000 ft² Time to next category4 months Recommended interval2 years
Engine v3.03 · inputs saved for audit
D · NDEUPGRADEDSpreadsheet-style entry, live calculations
V-2101 › NDE › UT 2026-10

Thickness readings

Import Excel New inspection
LocationPrev (mm)Now (mm)ST rateLT rateRem. life
TML-01 · Top head26.4226.310.110.0839.1 y
TML-02 · Shell N25.1024.880.220.1214.4 y
TML-03 · Shell S24.3624.02▍0.340.157.5 y
TML-04 · Nozzle N111.8011.740.060.0533.0 y
TML-05 · Bottom head26.9026.850.050.04>50 y
UT thickness gauge on pipeReadings can be typed, pasted from Excel or imported from the gauge's export file. Rates and remaining life recalculate as you type.
TML-03 · Thickness vs time Rem. life 7.5 y
T-min 21.6 2014201820222026282422
E · VISUAL INSPECTION & NCRUPGRADEDPhotos from the field, findings pinned on the photo
P-2040 circuit › Visual › External · CUI

External visual inspection

Add photos Submit
Corrosion under insulation12
Checklist
Insulation jacket conditionDamaged
Coating under insulationFailed
1 · Wall loss at 6 o'clockSevere
2 · Scale at weld toeModerate
Supports and clampsGood
NCR-2026-041 raised automatically · follow-up UT scan added to the inspection plan
F · INSPECTION PLAN & TASKS DUECOMBINEDSame strategy rules as today
Unit 200 › Inspection plan › 2027

Tasks due

Export to ERP Update plan
JanFebMarAprMayJunJulAugSepOctNovDec
V-2101 · UT thickness
MH
P-2040 · CUI strip & inspect
Overdue
E-2203 · Bundle IRIS
MH
V-2102 · Internal visual
L
PSV-2101A · Relief test
M
NDEVisualBundleOverdue
Email reminders before tasks fall due, using the advance-notice period each organisation sets today.
G · REPORTSUPGRADEDGenerated on the server · PDF and Excel
Reports

Report library

Find a report…
Data sheets7 equipment types
PDFExcel
CriticalityReport, summary, matrix
PDFExcel
Inspection planPer type and summary
PDFExcel
NDEReadings, evaluation, summary
PDFExcel
Each organisation can upload its own logo for the report header, as in ACIA today. Visual inspection, inspection history, non-conformance and relief device reports follow the same pattern.
06

Keeping the calculations exact

Criticality results drive inspection decisions, so they must not change because the software changed. We handle the engine in two stages.

Phase 1 · in both packages

Same engine, now on the server

The existing calculation components run once, on a small Windows server, behind the web application. Users get the web experience immediately, and every result matches ACIA v3.2 exactly.

Web app→ Existing engine→ Reference tables
Phase 2 · Complete package

A modern engine of your own

A new, documented engine, written from the RBMI methodology and the reference tables already in your database. It runs on any server, can be extended (for example new consequence types), and removes the dependency on the 2004 components.

Web app→ New engine→ Reference tables

How we prove the new engine is right. During Phase 1 we record thousands of real input-and-result pairs from the existing engine, covering every equipment type, damage mechanism and consequence case. The new engine only goes live when it reproduces every one of them, and your engineers sign off the comparison report.

100%Match required
07

Technology, security and data

Proven, widely supported technology, so OGM is never locked to one vendor or one developer.

Application

  • Laravel (PHP) application server
  • React interface that feels like a desktop app
  • PostgreSQL database, one per organisation
  • Redis for caching and background jobs
  • PDF and Excel reports generated on the server

Security

  • Two-factor login, optional Microsoft 365 single sign-on
  • Encrypted passwords and encrypted connections (HTTPS)
  • Roles and access by organisation, plant and unit, checked on the server
  • Full audit trail of engineering changes
  • Daily encrypted backups, kept 30 days, with an off-site copy

Hosting

  • Cloud: a Malaysian data centre, managed by us
  • Or on-premise: packaged to install on the client's own servers
  • Data stays in Malaysia (PDPA)
  • Separate staging and live environments
  • Uptime and error monitoring

Data migration path

1 · CollectCurrent SQL Server databases from each organisation
2 · RestoreOn a modern SQL Server, in a secure environment
3 · TransferScripted transfer to PostgreSQL, unit standardisation
4 · ReconcileCounts and spot checks, old vs new, signed off by OGM
LiveUsers set new passwords on first login
08

Packages and investment

Two ways to start. The Core package can be extended to Complete later without redoing any work.

Package A

Core

RM 180,000Fixed, one-off development fee
5 – 6 months
  • Web platform: secure login, roles, multi-organisation, audit trail
  • Integrity dashboard and equipment workspace
  • Data sheets for the four main types: pressure vessel, column, piping, shell & tube exchanger
  • Criticality and mass criticality, using the existing engine (Phase 1)
  • Inspection planning, tasks due and email reminders
  • NDE, visual inspection and non-conformance
  • Core reports (data sheet, criticality, inspection plan, NDE, NCR) in PDF and Excel
  • Data migration for one organisation

Best for launching quickly with the most-used modules, then growing.

Package BRECOMMENDED

Complete

RM 280,000Fixed, one-off development fee
9 – 12 months
  • Everything in Core, plus:
  • All seven equipment types, including air cooled exchangers, fired heaters (creep) and storage tanks (shell and bottom)
  • Relief devices, relief tests and other inspections
  • IOW module, environmental and reputation consequences, custom risk matrix
  • The full report library, document and drawing viewer, ERP export
  • Migration of all organisations
  • New calculation engine (Phase 2), verified against the existing one

Best for replacing ACIA v3.2 completely, and for offering ACIA Web to more clients.

Hosting, support and maintenance

RM 3,000 – 5,000 / month

Cloud hosting in Malaysia, backups, security updates, monitoring, bug fixes and user support. The final figure depends on the number of organisations and users.

If ACIA Web is offered to more clients

If OGM plans to license ACIA Web to its clients, we can also discuss a lower development fee combined with a per-site licence share. We are happy to propose figures once the target client list is known.

09

Timeline and payment

Three stages, with a working demo every two weeks so OGM sees progress early and can steer it. Payments follow the same stages, so each one is tied to something OGM has seen and signed off.

01

Discover

Workshops with OGM engineers, the server set-up for the existing engine, the data mapping and approval of the screen designs.

About 4 weeks · design sign-off
02

Build

Module by module, in two-week cycles, each ending with a demo on the test server. Data migration is rehearsed along the way.

Core: months 2 – 5 · Complete: months 2 – 10
03

Launch

User acceptance testing by OGM engineers, final migration, training, go-live and close support in the first weeks.

Core: month 6 · Complete: months 11 – 12

Projected timeline · Package A, Core About 6 months

M1M2M3M4M5M6
DiscoverWorkshops, engine server, designs
Design sign-off
Platform & equipmentLogin, roles, dashboard, data sheets
Build
Criticality & planningEngine on server, plans, tasks due
Build
NDE, visual, NCR, reports
Build
Data migrationOne organisation, rehearsed
Migrate
LaunchUAT, training, go-live
Go-live
PaymentsAt the end of the month shown
1234

Projected timeline · Package B, Complete About 12 months

M1M2M3M4M5M6M7M8M9M10M11M12
DiscoverWorkshops, engine server, designs
Sign-off
Core modulesEverything in Package A
Build · core
Extended modulesAll equipment types, relief devices, IOW, full reports
Build · extended
New calculation engineGolden tests against the existing engine
Engine Phase 2 · verify
Data migrationAll organisations, rehearsed
Migrate
LaunchUAT, training, go-live
UAT · go-live
PaymentsAt the end of the month shown
12345

M1 starts on the date the agreement is signed. Durations assume OGM reviews each demo and supplies data within one week; delays in reviews or data move later milestones by the same amount.

Payment schedule · Package A, Core

MilestoneWhen%Amount (RM)
1Agreement signedStart30%54,000
2Discover complete, designs signed offEnd M120%36,000
3Core modules demonstrated on the test serverEnd M430%54,000
4Go-live after UAT sign-offEnd M620%36,000
Total100%180,000

Payment schedule · Package B, Complete

MilestoneWhen%Amount (RM)
1Agreement signedStart25%70,000
2Discover complete, designs signed offEnd M115%42,000
3Core modules demonstrated on the test serverEnd M520%56,000
4Extended modules complete, new engine verifiedEnd M1020%56,000
5Go-live after UAT sign-offEnd M1220%56,000
Total100%280,000

Both packages are fixed-price for the scope described in section 08. Hosting, support and maintenance are billed monthly from go-live.

Engineers reviewing charts on a laptopYour engineers review every module before it goes live.
10

Assumptions and conditions

These shape the price and timeline above. If any of them differ, we will adjust together during the Discover stage.

Rights to modernise ACIAOGM confirms it holds the rights, including any rights from the original software principal, to modernise ACIA and its calculation components, and takes responsibility for any third-party claims.
Server for the existing engineFor Phase 1, OGM or the client provides a Windows server, or we provide one at hosting cost.
Engineering reviewOGM engineers take part in workshops, review demos and sign off calculation results. Engineering decisions remain with OGM and its clients.
Data supplied by OGMOGM provides the databases to migrate, under an NDA, and confirms which organisations move first.
English interface and reportsOther languages (for example the Chinese report titles) can be added as an option.
PaymentStaged by phase as set out in section 09. Each invoice is due within 14 days of the milestone being signed off.

Not included unless agreed separately: third-party penetration testing, live two-way ERP integration, a live connection to DCS or process historian data for IOW (readings are entered or imported), an offline mobile app for field inspectors, server or software licence purchases, and changes to the RBMI methodology itself.

Next steps

Let's walk you through it.

  1. A short meeting to go through this proposal and answer questions.
  2. Choose a package and confirm the rights to modernise (section 10).
  3. Sign the agreement and NDA, then start the Discover stage.
Safuan Shaharum Director, SawangVille
safuan@sawangville.com
+60 19-521 4104
sawangville.com
This proposal is a concept for discussion. Screens are shown with sample data in colours taken from the OGM logo; final design and branding are agreed in the Discover stage. Photos are AI-generated sample images used only to show the setting. Prices are in Malaysian Ringgit, exclude SST, and are valid for 60 days from the date above. Figures about the current system come from our review of the material OGM shared and will be confirmed during Discover.

SawangVille Tech Ventures Sdn Bhd · 202601003133 (1665230-D) · 40-01, Masreca 19, Persiaran Rimba Permai, 63000 Cyberjaya, Selangor · sawangville.com