Craig L Stiegemeier; Technology Director, ABB Transformer ... - PhysicalSecurit… · © ABB...

© ABBSlide 1October 15, 2015

NERC GridSecCon 2015Transformer vulnerabilities and solutions for hardening & recovery

Craig L Stiegemeier; Technology Director, ABB Transformer Services; October 15, 2015


What could happen?

Consider the scenario in a large metropolitan area served by 10 major substations and more than one utility

60% of the peak load is carried by 11 transformers in four of the substations

A coordinated attack could significantly damage those transformers

The resulting outage would be catastrophic for that area both in terms of size and duration

Utilities need practical solutions to harden and recover


Protect your substation and minimize downtimeLayered approach

1. Assess the asset risk to extreme weather events, intentional criminal attacks,

geomagnetic disturbances (GMD), and electromagnetic pulses (EMP)

2. Harden substations & power equipment against malevolent attack, and

extreme environments

3. Remote Monitor the asset and surroundings and Automate response to

abnormalities

4. Rapidly Repair lightly damaged power equipment

5. Rapidly Replace severely damaged power equipment

Flexible options based on each unique situation

Assess Risk, Harden, Monitor & Automate, Rapidly Repair or Replace


Second step: Equipment hardeningPhysical protection of the transformer

1. *Hardened, ballistic protection system: ABB AssetShield™

2. *Cooling resiliency

3. Dry bushings

4. *External accessory protection

5. *Remote monitoring and Communications

*Patent Pending

1

2

3

4

5

According to a recent survey from Utility Dive, 15-20% of the utility

respondents are planning equipment hardening activities in

their substations


UL Level 8 is tested using a 30 caliber, M80 Ball Full Metal Jacket (FMJ) with 166 grains travelling at a velocity of 2750-3025 feet per sec. Five shots are fired into the sample placed 15 feet from the muzzle of the gun

UL Level 9 is tested using a 30 caliber, Armor Piecing (AP), M2 bullet with 166 grains travelling at velocity of 2715-2986 feet per second. One shot is fired into the sample placed 15 feet from the muzzle of the gun

UL Level 10 is tested using a 50 caliber, ball with 708 grains travelling at velocity of 2810-3091 feet per second. One shot is fired into the sample placed 15 feet from the muzzle of the gun

Ballistic test protocolUL 752, Level 8, 9 & 10


UL 8• Fail - Common transformer tanks: ⅜”, ½” mild steel - even w/ AssetShield™• Pass – 1) ⅜” armor steel w/ AssetShield™

2) ⅜” armor steel (but with potential collateral damage)

UL 9

• Fail - ⅜” armor steel • Pass - 1) ½” armor steel w/ AssetShield™

2) ½” armor steel w/o AssetShield™ (potential collateral damage)

UL 10• Fail - ⅜” armor steel w/ AssetShield™ • Pass - ½” armor steel w/ AssetShield™

Summary of ballistic testingSolution to meet UL 752, Level 10 requirements

ABB recommendation


Ballistic testingArmored steel - spalling


Ballistic testingAssetShield™ system – passed UL 10


New transformer applications

UL 10 - 1/2" Armor steel tank + AssetShield™

Retrofit applications for mild steel tank walls transformers

UL 10 - 1/2" Armor steel, with AssetShield™

attached to tank walls

Transformer ballistic resistant offeringsRecommendations


Cooling resiliencySensor & automated valve shut off

Install sensor Install automated valve shut off

Requires outage

Close valves, pump oil from radiators into conservator, remove radiators

Install shut off valve directly against old valve

Install back radiators

Oil back into radiators

Lowest cost solution If activated than investigation

and repairs would be done Prevents catastrophic failure /

fire


Cooling resiliencyAttaching military grade ballistic steel panels to fully dressed transformer in new or retrofit applications


Cooling resiliency exampleRetrofit coolers (or radiators) with ballistic coated protection plate

Metal plate with AssetShield™ is installed around the cooler, except for the air intake edge

Install plate against the blue arrow indicated edge and front of cooler

Add 45° angle baffles to front of fan, deflecting air upwards and bullet down


Cooling resiliencyRemote or secondary (redundant) cooling system options


It explodes due to internal pressure from an arc and the spring force on the porcelain

Porcelain shards are sent flying 40 yards or more Conductor, lead and the lower porcelain fall into the

transformer Electrical short ignites fire and can cause further

collateral damage within the substation

Equipment hardeningWhat happens when an oil-filled porcelain bushing is compromised?

Repair time and transformer and substation equipment damage can be

significantly minimized with the application of dry bushings.


Equipment hardeningDry bushings

Solid (oil free) construction eliminates risk of fire

Non-porcelain shed eliminates possible ballistic damage

To equipment

To personnel


Equipment hardeningDry bushings

All voltage and current ratings are available High-seismic zone rated


Tap changers

Control cabinet

Buchholz Relay

Oil level indicator

Valves

Entry points

Gas collection relay

External accessory protection

Temperature indicator

Oil expansion system

Nitrogen system

Sudden pressure relay

Gas monitors

Silica gel breathers

Current transformers

Key components available for fortification


Protection of external equipment and accessories


Third step: Remote monitoring and automationSupervision and monitoring of critical transformers

Incorporate a monitoring system into the transformer control system Standardize solution, custom configuration for different designs Monitor/assess service ready condition during storage Monitoring after placing in service for problem detection and

reliability assurance Supports communication over secure network

ABB ConfidentialSensitive material:

Distribution limited to those with a need to

know


Current methodology not enough

Absolute physical security is not practically achievable.

Vulnerabilities hinge on attackers’ intentions and resources.

There is no way to absolutely protect a substation transformer from severe damage from an intentional attack.

It is possible to make the damage less severe, prolong service and restore service more quickly.

Typical physical protection not possible


Fourth step: Rapid repairTrained field service personnel

Rapid response teams located in strategic geographic locations

Equipped with rapidly deployable spare parts

Emergency response for storms or disasters with expedited order process

Coordinated training with federal and state first responders

Excellent field safety performance

Familiarization with tools and equipment

Rapid repair strategies including access to knowledgeable service personnel and

availability of spare parts are key to restore service quickly when an incident occurs.


Rapid repairTrained field service personnel

Equipment experts can deal with the unique challenges created by an event

Damage will be minimized if dry bushings are already in place

Oil processing may be required

Repair scope can range from component replacement up to the replacement of windings

Testing can assure a smooth energization

Lessons learned can be incorporated into the repair to increase resiliency

When an event occurs, an immediate assessment by equipment experts is needed to

define and obtain material, personnel and equipment needed to repair the damage


Fifth step: Rapid replacement

Critical transformers as spares

Rapid assessment and replacement

HV transformer agnostic –universal spare

On the shelf design for critical assets

When damages exceed repair capabilities, rapid replacement

strategies play an important role in recovery


Case study: Rapid response exampleRecovery Transformer (RecX) Program

Began before 9/11 with EPRI’s Infrastructure Security Initiative (ISI)

ABB was asked to examine feasibility of a fast-to-install transformer design

DHS became involved after the project created a <1 week storage to transformer energization concept

Prototype 500/230kV and 345/138kV designs were developed, focused on transportation ease & installation speed

Utility host supported a trail deployment Concept demonstration exercise was

completed in March 2012 3-phase, 600MVA bank still providing

reliable service


Versatile recovery transformer (RecX) programTransportation

Smaller dimensions and lighter weights allow transformers to be shipped on trucks over US roadways

Transportation via truck: cuts transit time dramatically by creating direct path to site eliminates the need for & risk of heavy hauling from nearest rail

siding reduces cost by decreasing transportation time and offloading


Versatile recovery transformer (RecX) program

Transformer mounted on solid steel frame Ability to support fully

erected transformer Allows for easy:

Lifting Transporting Setting

Acts as transformer pad Transformer can be

placed anywhere in the substation

Transportation


Versatile recovery transformer (RecX) programRapid deployment – Assembly using pre-configured subassemblies


Rapid recovery programStorage to energization 5 days, 10 hours

According to a recent survey by Utility Dive, 26% of utility respondents are developing a modular rapid recovery transformer

standard.


SummaryLayered approach

1. Assess the asset risk to extreme weather events, intentional criminal attacks,

geomagnetic disturbances (GMD), and electromagnetic pulses (EMP)

2. Harden substations & power equipment against malevolent attack, and

extreme environmental challenges - in a practical way

3. Remote Monitor the asset and surroundings and Automate response to

abnormalities

4. Rapidly Repair lightly damaged power equipment

5. Rapidly Replace severely damaged power equipment

Flexible options based on each unique situation

Assess Risk, Harden, Monitor & Automate, Rapidly Repair or Replace

Craig L Stiegemeier; Technology Director, ABB Transformer ... - PhysicalSecurit… · © ABB...

Documents

Transcript of Craig L Stiegemeier; Technology Director, ABB Transformer ... - PhysicalSecurit… · © ABB...