Electrical Power Systems Engineering Risk Assessment: Faults, Protection and Maintenance Controls

This assessment shows how an engineering team can find, rate and control the risks in a medium voltage power system and its substation. Eight hazards were chosen because they are plausible in design, operation and maintenance work. Arc flash during switching is the most severe, with an inherent score at the top of the Critical band, because the energy released can injure people and destroy equipment in a moment. Protection miscoordination, ageing transformers and switchgear, specification mismatch, supplier delays for spares, maintenance deviations, oil and gas leaks, and control data errors fill the rest of the register. Each risk is scored before controls and again after existing and added controls. Most risks fall to Medium or Low once added controls are in place, but arc flash remains High because its consequences stay severe. The first actions are a verified isolation procedure, a protection settings review, a critical spares agreement and a dated check of the as built drawings. The scores illustrate method only.

Scope

This assessment covers the design, commissioning, operation and maintenance of an electrical distribution system for a small industrial site, including a medium voltage incoming supply, a substation with switchgear and transformers, protection relays, low voltage distribution and the control systems that monitor them. It does not cover generation, grid transmission or any real installation. Voltage level, jurisdiction, plant age and supplier arrangements are assumptions made for teaching.

Context

The site has a grid connection at medium voltage, a main substation with two incoming feeders and a bus section, two power transformers, metal enclosed switchgear, protection relays with settings files, a standby generator and a supervisory control system. An in-house electrical engineering team designs changes and manages specifications, while a contractor carries out routine testing and maintenance under a permit to work system. Equipment comes from several suppliers with varying lead times. Each hazard is scored before controls to show its natural level, then again after existing controls and the additional controls that should be added.

Objectives, assets and stakeholders

The objective is to supply power safely and reliably, protect people and equipment, meet the legal duties that apply to the network, and keep the plant available for the process it serves. The assets in scope are the incoming supply, switchgear, transformers, cables, protection relays and their settings, the control and monitoring system, standby generation and the records that describe the plant. Stakeholders include operations and maintenance staff, contractors, the engineering design team, the site manager, production users, the network operator, insurers and regulators. Each risk has one owner role, and the engineering manager keeps the register current and reports to site leadership each quarter.

Each hazard is rated on two five-point scales. Likelihood runs from 1, rare, to 5, almost certain, and severity runs from 1, negligible, to 5, catastrophic. Severity considers harm to people first, then damage to plant, loss of supply, environmental effects and cost. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. Inherent risk is the score before any controls, judged as if the existing controls were absent. Residual risk is the score after existing controls and the additional controls in the plan are in place. A residual score can never be higher than the inherent score, and any hazard that starts at 10 or more must show a lower residual score. Critical risks need immediate action and senior sign off before work continues. High risks need a dated plan approved by the engineering manager. Medium risks need routine controls with a named owner. Low risks are accepted and watched. Ratings are challenged by the people who do the work, by a second engineer who was not involved in the design, and by a review after any incident, near miss or failed test. A rating that cannot be justified with evidence is raised until it can be.

Contingency arrangements

If an arc flash, insulation failure or loss of a transformer occurs, the operator isolates the affected section using the approved procedure, makes the area safe and calls the emergency response team. The duty authority is informed, and the engineering manager decides on any restart only after inspection and testing by a competent person. Standby generation is started where it is safe to do so, and critical loads are shed in the agreed order. Spares are drawn from the store, and a temporary supply plan is agreed with the network operator. Injured people receive first aid and medical care, and the incident is reported and investigated under the site procedure.

Conclusion

Safe and reliable power depends on a few disciplined habits: verified isolation before any work, settings that are reviewed and tested, specifications checked against the real plant, spares that can be delivered on time and records that match the plant as built. The highest score sits with arc flash, and each hazard has actions that bring the residual score down. Treat the register as a living record, review it on the stated cycle, and seek qualified engineering and legal advice before any real design, change or regulated work.