Key takeaways
IEC 61850 is the digital backbone of modern substations. As the electricity system becomes increasingly digitalised, secure and deterministic communication between protection and control devices is critical for grid stability.
Cyber resilience is now an operational requirement. Standards such as IEC 62351 and IEC 62443 are essential to protecting digital substations, but their implementation must be validated to ensure protection performance is not compromised.
Testing digital architectures requires real-world environments. Security controls, timing behaviour and interoperability challenges cannot be fully validated through modelling alone.
PNDC provides a unique validation environment. Europe’s first digitised virtual substation allows utilities to test IEC 61850, SDN-enabled architectures and cyber-incident response under realistic operating conditions before deployment.
Digital substations will only be as resilient as the cyber-secure communication systems that underpin them—and validating that resilience requires testing at system scale. PNDC’s digitised virtual substation enables utilities to test cyber-secure architectures before deployment.
Why this matters now
The UK electricity system is entering a decisive period of network investment and digital transformation. Transmission operators are preparing for the delivery phase of T3, while distribution networks are planning for ED3, both of which will involve unprecedented levels of digitalisation across substations and control systems.
As substations evolve from analogue installations to fully digital environments, the resilience of the communication standards that underpin them—particularly IEC 61850—becomes critical to the secure operation of the grid. Ensuring that these digital architectures remain deterministic, interoperable and cyber-secure is therefore no longer a theoretical concern. It is a prerequisite for delivering a reliable Net Zero electricity system.
The invisible infrastructure of the grid
The energy transition is often framed in terms of cables, towers and planning zones. But the real foundation of a resilient Net Zero grid lies in something far less visible: the digital infrastructure that operates and protects our networks. At the centre of that digital layer sits IEC 61850 — the global standard that enables fast, interoperable communication within modern substations.
At the centre of this digitalisation is connectivity — and at the heart of that connectivity lies cyber security. We cannot advance digitalisation without ensuring the systems that enable it are secure. The increased reliance on interoperable, networked IEC 61850 architectures means that any weakness in cyber security is no longer an abstract IT concern; it becomes an operational risk that directly affects protection performance, automation integrity and grid resilience.
As the UK moves into the decisive delivery phases of T3 and ED3, the risks facing this digital layer are no longer theoretical. They are operational. Ensuring the security and resilience of IEC 61850 is now fundamental to the stability of the grid — and PNDC is uniquely positioned to provide the evidence the sector needs.
IEC 61850: Progress, but with new exposure
IEC 61850 has modernised protection, control and automation by replacing copper wiring with high-speed, networked communication. Protocols such as GOOSE (Generic Object Oriented Substation Events), MMS (Manufacturing Message Specification) and Sampled Values now carry critical signals that underpin the safe and reliable management of the network.
But as systems shift from analogue and isolated to digital and interconnected, they also become part of a much broader cyber-physical threat landscape. As digital substations expand, IEC 62351 and IEC 62443 provide the necessary security foundations — from message integrity and authentication to hardened system architectures — ensuring that IEC 61850 communication remains protected against spoofing, tampering and advanced cyberattacks. These standards are now fundamental—not optional—to ensuring a resilient digital grid.
Delays, manipulation or spoofing of digital protection messages can directly affect system stability and safety also could have direct operational consequences. Security mechanisms such as IEC 62351 are therefore essential — yet they introduce timing, interoperability and integration challenges that cannot be validated on paper.
A test environment built for the future
© UK Power Networks (Operations) Limited
To address these challenges, PNDC has invested in Europe’s first fully operational digitised virtual substation — a live digital twin environment integrating real primary and secondary plant, multi-vendor IEDs and advanced simulation capabilities.
One example that demonstrates PNDC’s expertise in this area is our collaboration with long-term strategic partner, UK Power Networks (UKPN), on the Constellation programme. A world-first initiative led by UKPN, Constellation deploys powerful computing platforms within substations, transforming them into intelligent hubs capable of analysing millions of data points in real time.
These smart substations can dynamically reconfigure the network to optimise performance, release additional capacity, and enable greater integration of renewable energy. The programme is developing a virtualised, interoperable and secure architecture for distributed grid intelligence that complements centralised network management and has the potential to transform how electricity networks operate.
How do authentication and encryption techniques affect protection timings?
What happens when modern IEC 61850 schemes interact with legacy SCADA and RTU estates?
How can operators maintain deterministic behaviour under fault conditions, congestion or cyberattack?
With this capability in place, PNDC can extend its work into emerging technologies such as SDN and cyber incident response.
Security, SDN & incident response readiness
In a fully digitalised grid, the combination of IEC 61850 based communication and Software Defined Networking (SDN) could form the backbone of modern substation automation. SDN allows the network to be programmable, enabling dynamic traffic control — but also introduces a new control surface that must be secured. But with this digitalisation comes a heightened responsibility: ensuring that both the communication layer and its programmable SDN control plane are secure, resilient, and able to withstand disruption. Cyber security is therefore not only about preventing attacks — it is about ensuring that systems can detect, respond, recover, and continue operating safely when incidents occur.
Precise timing — already critical for GOOSE and SV based protection schemes — becomes even more important during a cyber event, when congestion, link degradation, or malicious traffic can delay time critical messages. Likewise, SDN reconfiguration or flow isolation actions, while essential for defence, must maintain deterministic behaviour to avoid compromising protection integrity. Testing how substations behave under these stressed conditions — and validating backup paths, failover responses, and recovery procedures — is essential to ensuring the digital grid is genuinely incident ready.
PNDC provides a unique environment where operators can rehearse cyber physical incidents safely, observe real system behaviour across IEC 61850 and SDN enabled architectures, and gather the evidence required for a resilient, secure grid.
How can IEC 62351 security controls be implemented without compromising GOOSE and SV timing performance?
How can operators detect and mitigate spoofed or unauthorised GOOSE/SV messages in real time?
How can backup communication paths and secure MMS/GOOSE configurations be validated under protection critical conditions?
How can the SDN controller be secured to avoid becoming a single point of compromise in the substation network?
How can SDN policies maintain deterministic behaviour when isolating malicious flows or reconfiguring network paths during a cyber event?
PNDC’s environment allows these questions to be validated safely, repeatably and at full scale.
Evidence-led engineering: from theory to proven practice
The UK’s transition to a digital grid cannot be guided by vendor statements or untested assumptions. It must be driven by evidence. At PNDC, we combine digital simulation with Hardware-in-the-Loop (HIL) and Controller-in-the-Loop (CHIL) testing to validate real-world performance before investments are made.
This approach ensures that digital architectures — from control rooms to IEDs — are proven under realistic operating conditions, fault scenarios and cyber threats. It is essential preparation as operators move into the high-stakes commitments of T3 and ED3.
Where PNDC provides confidence
PNDC’s mission is to help the sector deploy IEC 61850 securely, effectively and with operational assurance. Our work includes:
- Validated configuration approaches: Testing governance models, security layers and operational workflows in representative environments.
- Reference architectures for secure digital substations: Providing practical, multi-layered designs that can be replicated across utilities.
- Interoperability and legacy integration: Addressing the challenges of mixing new IEC 61850 schemes with long-standing OT (operational technology) assets.
- Long-term cyber resilience: Evaluating solutions that protect assets through their entire lifecycle, not just at commissioning.
A whole-system view: transmission and distribution together
IEC 61850 is no longer a transmission-only topic. As distributed energy resources (DER) penetration accelerates, distribution networks now depend on the same speed, interoperability and cyber-resilience as the transmission grid.
PNDC’s configurable 11 kV and LV networks, combined with our high-voltage simulation capabilities, uniquely position us to assess whole-system impacts. Whether you are a transmission owner or distribution operator, PNDC provides the operational evidence needed before digital assets are deployed into critical infrastructure.
The path to a secure digital grid
National planning assumptions give the UK a roadmap. PNDC provides the engineering proof needed to follow it confidently. With Europe’s first digitised virtual substation now operational, the sector has an unprecedented opportunity to test digital substations at scale, validate cyber-physical resilience and accelerate secure adoption of IEC 61850.