An illustrative scenario

This is a constructed example, not a real incident. A tap-changer develops a fault. The monitoring system logs a rising gas trend, nobody is assigned to review it, and the alarm sits at low priority. The voltage regulator keeps commanding tap changes. The tap-changer’s oil surge relay operates, but its contact is wired to an alarm point that was never mapped to a trip. The control room sees an unfamiliar alarm and calls the maintenance team.

Every device did its job. The failure was in how they were connected.

The three loops that need to work together

Visibility. Temperature, load, moisture and gas trends, plus tap-changer position and operation counts, sent to the control system through standard protocols such as IEC 61850 or IEC 60870-5-104.

Voltage control. An automatic voltage regulator commanding an on-load tap-changer to keep the secondary voltage in band without interrupting supply.

Fault isolation. Protective devices that trip the breaker. For the tap-changer compartment, an oil surge relay installed in the pipe between the tap-changer and the conservator responds to abnormal oil movement. It supplements main-tank protection and doesn’t replace it.

Where siloed purchasing goes wrong

• No shared signal list: alarms use different names and priorities across devices.
• Unmapped trips: a relay contact exists, but nobody wired it to the breaker or the SCADA point.
• Mismatched protocols: devices support different standards, and mapping effort is unplanned.
• No time synchronisation: event sequences can’t be reconstructed.
• Interlock gaps: the voltage regulator keeps operating the tap-changer after a protection alarm, unless blocking is designed in.

A unification checklist

1. Write one signal list for the whole transformer, with owner, name, priority and destination for each point.
2. Decide which signals trip, which alarm and which only record, together with the customer’s protection engineers.
3. Specify protocols and who is responsible for mapping.
4. Define voltage-regulator blocking on selected alarms.
5. Test the chain from sensor to breaker and from sensor to control room, not just each device alone.
6. Agree who retests, how often, and who signs off.

IEC 61850 (substation communication) and IEC 60255 (protection relays) provide the framework, and your project specification decides what applies.

For the supplier’s own framework, see EMR Global’s page on how to monitor, control and protect transformers.