Energy infrastructure security: substations, tanks, networks
Energy infrastructure — substations, fuel tank farms, lines and networks — is usually remote, spread out and unstaffed. It is protected by three layers working together: a perimeter that delays, detection that alerts at once, and a response that arrives with a plan. Contractors get in only with a permit, a log entry and, where needed, an escort. Cable theft is treated as a risk category of its own, because it causes both outages and danger to people. And every incident is documented so it stands up in front of the operator, the insurer and the authorities.
Updated: 5 min readSources: 1
Why is energy infrastructure hard to protect?
Because there are many sites, far apart and usually unstaffed, so an incident can go unseen for hours. Security is designed for the network as a whole, not site by site.
- Distance: the time it takes someone to arrive is part of the risk and is measured in advance.
- Number of sites: substations, kiosks, pumping stations, tanks and cable routes — each needs a risk rating.
- Priorities: the sites where damage has the biggest consequence get the most measures.
- People’s safety: guards never approach live equipment; they follow the operator’s safety rules.
Solar parks have their own guide — see solar park security. This one covers substations, tanks and networks.
How do perimeter, detection and response work together at a substation?
The perimeter delays an intruder, detection alerts the moment an attempt starts, and the response arrives before it is finished. If one layer is missing, the other two are not enough: a fence without detection only delays someone nobody can see.
- Perimeter: a fence in good repair, locks and gates checked on every round, lighting where it makes sense.
- Detection: perimeter sensors or cameras with video analytics, connected to an alarm receiving centre or to remote video monitoring.
- Verification: before a patrol is sent, the operator sees what is happening, so an animal is not mistaken for a person.
- Response: a patrol with a known route and time, a call to the police, the network operator informed.
Ask to see the response time written down for every site. A plan that does not say how long the patrol takes is not a plan.
How do you control contractor access to energy sites?
With a work permit from the operator before every visit, identification and logging at the gate, keys handed over by name, and a check that the site was closed properly after they leave. Contractors are the most common legitimate reason for an open gate.
- Before: the operator notifies who is coming, when, to which site and for what work.
- At the gate: ID, vehicle, time in, tools and materials going in.
- Keys and codes: by name, with times of hand-over and return; codes changed after each contract.
- After: time out, door and fence checked, materials taken out.
For access hardware — cards, codes, biometrics — see the guide to access control.
How do you deal with cable theft on energy networks?
As a risk category of its own, because copper has value, routes are long, and theft brings outages and a risk of electrocution. Measures: map the exposed points, detection at manholes and stores, and patrols at unpredictable times.
- Exposed points: manholes, open trenches, earthing, material stores, expansion works.
- Stores and works: cable drums waiting to be installed are a target — the guide to construction site theft applies.
- Signs of preparation: moved manhole covers, cut fencing, vehicles parked for no reason.
- Keep away: guards never touch cut or exposed cables; they alert the operator and the police.
A cut cable may still be live. The post orders say “no contact” in plain words.
What does guarding a fuel tank farm need in particular?
A guard who follows the site’s safety rules first — ignition sources, no-go zones, the spill procedure — and then patrols, checks valves and gates, and controls loadings. At a tank farm, a mistake by the guard is itself part of the risk.
- Site rules: the operator sets what equipment a guard may carry in each zone and how they move.
- Rounds: perimeter, bunds, valves and caps, signs or smell of a leak.
- Loadings: driver and vehicle identified, time, matched against the operator’s schedule.
- Leak or fire: fire service and operator alerted, people moved away, no action beyond the guard’s training.
How should an incident at an energy site be documented?
With a report made at the time: the site by coordinates or code, time of detection and time of arrival, what was found, photos, who was alerted. Those two times — detection and arrival — are the proof the plan worked.
- Site reference: the operator’s own code, so the report matches their system.
- Timeline: alarm, verification, dispatch, arrival, actions, restoration.
- Evidence: photos before anything is touched, a video clip kept as an incident.
- Report: structured as in the guide to the incident report.
The guard works for a company under Law 2518/1997 and needs a personal work licence, category A or B (article 3). OVIT records rounds, incidents and actions with time stamps, and the operator sees patrols, incidents and reports in one live picture through the Guardly platform. For your sites, see industrial security and request a proposal.
At a glance
- Design security for the whole network and rank sites by the consequence of damage.
- Perimeter, detection and response only work together; the response time is written down for every site.
- Contractors get in with a permit, a log entry and keys by name, and the site is checked after they leave.
- Cable theft is a risk category of its own; a guard never touches a cut cable.
- Every incident is documented with time of detection, time of arrival, photos and the site code.
Frequently asked questions
Is a fence enough to protect a substation?
No. A fence only delays. You need detection that alerts at the moment of the attempt and a response that arrives before it is finished — the three layers only work together.
What should a guard do on finding a cut cable?
Not touch it, because it may be live. Move people away, alert the operator and the police, photograph from a distance and record the incident.
How is contractor access to a substation controlled?
With notice from the operator before every visit, identification and logging at the gate, keys and codes issued by name, and a check of the site after the contractor leaves.
Sources
Every legal or pay point in this guide was checked against the official sources below.
Want us to look at your site?
Talk to the OVIT operations team — a real person answers.