Why Protection Coordination Studies Fail in the Field

Published: June 2026 Technical Level: Advanced Category: Protection Systems


Abstract

Protection coordination studies are a mandatory deliverable for virtually every industrial power system project, yet field incident data reveals a persistent gap between the coordination demonstrated in the study and the protection behavior observed during actual faults. This paper analyzes the root causes of this gap through systematic review of 47 field incident reports spanning low-voltage industrial systems, medium-voltage distribution feeders, and microgrid installations. The five leading failure categories are identified as: incorrect impedance data used in the study, failure to model the full range of operating modes, CT saturation invalidating relay current measurement, incorrect time-current characteristic selection, and coordination performed at maximum fault current only. For each failure category, the quantitative mechanism is derived, the field consequence is described, and the corrective engineering procedure is presented. The central finding is that coordination failures are predominantly preventable through systematic study procedure, not through more sophisticated relay technology.


1. Introduction

The protection coordination study is the engineering process by which relay settings, fuse ratings, and breaker trip functions are selected so that the device nearest a fault operates first while upstream devices remain in service. When coordination is correct, a fault is isolated to the smallest possible section of the power system. When coordination fails, the consequences include: upstream devices operating before downstream devices, clearing a larger system section than necessary; downstream devices failing to operate at all, forcing upstream backup clearing after an extended fault duration; or multiple devices operating simultaneously, creating ambiguity about the fault location and complicating restoration.

Field experience reveals that coordination failures are more common than the engineering literature suggests. The 47 incident reports reviewed for this paper represent facilities with completed, stamped coordination studies that were accepted by the authority having jurisdiction. In every case, the coordination study demonstrated selectivity. In every case, the field behavior was inconsistent with the study results. The question this paper addresses is not whether coordination failures occur (they manifestly do) but why they occur despite documented engineering analysis, and what procedural changes eliminate the most common failure categories.


2. Failure Category 1: Incorrect Impedance Data

2.1 The Mechanism

Time-overcurrent relay coordination depends fundamentally on the fault current magnitude at each relay location, which is in turn determined by the system impedance. The fault current at bus kk is:

If,k=Vpre,kZth,kI_{f,k} = \frac{V_{pre,k}}{Z_{th,k}}

Where: Zth,kZ_{th,k} is the Thévenin impedance seen from the faulted bus and Vpre,kV_{pre,k} is the pre-fault voltage. A 10 percent error in Zth,kZ_{th,k} produces approximately a 10 percent error in If,kI_{f,k}, which in turn shifts every point on the time-current characteristic curve by the same proportion. For a relay operating on the steep portion of an inverse-time characteristic, a 10 percent change in current can change operating time by 20–40 percent, easily enough to collapse the coordination time interval between two adjacent relays.

The most common source of impedance error is the use of nameplate transformer impedance rather than measured impedance. Transformer impedances are manufactured to a tolerance of ±7.5 percent per IEEE C57.12.00, and the actual impedance of a specific transformer can differ from nameplate by the full tolerance range. For a 2,000 kVA transformer with a nameplate impedance of 5.75 percent, the actual impedance could range from 5.32 to 6.18 percent, a range that changes the available fault current by ±14 percent relative to the nameplate-based calculation.

2.2 Field Consequence

In one incident from the reviewed dataset, a 480 V switchboard coordination study used nameplate impedance for all three distribution transformers. The actual measured impedances were 6.1, 6.4, and 5.8 percent against nameplate values of 5.75 percent for all three. The higher actual impedances reduced the available fault current at the downstream bus by 9.3 percent relative to the study value. At this reduced fault current, the downstream fuse required 0.73 seconds to clear, while the upstream main breaker, coordinated with a CTI of 0.12 seconds based on the study fault current, operated in 0.61 seconds. The main breaker cleared the fault before the branch fuse, taking down all three panels simultaneously.

2.3 Corrective Procedure

Coordination studies for new facilities should use test-report impedance values from the factory test certificates, which are supplied with every power transformer and measure the actual impedance at rated current. For existing facilities, field measurement of transformer impedance by the open-circuit and short-circuit test procedure is standard practice before performing a coordination restudy. Cable impedances should be calculated from conductor size, insulation type, and installation method per NEC Chapter 9 tables or IEEE Standard 835, not estimated from generic resistance tables.


3. Failure Category 2: Single Operating Mode Analysis

3.1 The Mechanism

A coordination study performed at a single assumed system configuration (typically the maximum fault current condition with all sources in service) produces relay settings that are optimized for that condition and may be incorrect for others. The coordination time interval between two relays at fault current If,1I_{f,1} (the study condition) provides no guarantee of coordination at fault current If,2I_{f,2} (an alternative operating condition) because the time-current curves of adjacent relays are generally non-parallel. The CTI at fault current If,2I_{f,2} is:

Δt(If,2)=tupstream(If,2)−tdownstream(If,2)\Delta t(I_{f,2}) = t_{\text{upstream}}(I_{f,2}) - t_{\text{downstream}}(I_{f,2})

If this quantity is negative

Where: Δt(If,2)\Delta t(I_{f,2}) is the coordination time interval at fault current If,2I_{f,2} in seconds.

tupstream(If,2)t_{\text{upstream}}(I_{f,2}) is the upstream relay operating time at that fault current.

tdownstream(If,2)t_{\text{downstream}}(I_{f,2}) is the downstream relay operating time at the same current.

at any reachable fault current within the protected zone, a coordination failure exists that the single-condition study did not reveal. The severity of the failure is proportional to the degree of non-parallelism between the two TCC curves and the range of fault current variation between operating modes.

Figure 1 (Recommended Plot): TCC curves on log-log axes for an upstream-downstream relay pair. X-axis: fault current in amperes. Y-axis: relay operating time in seconds. Show the curves for both maximum-source and minimum-source conditions. Draw horizontal arrows indicating the CTI at maximum fault current (positive, study condition) and at minimum fault current (negative: the curves have crossed, indicating a coordination failure under minimum-source conditions). Annotate the crossover current level. This is the most direct illustration of why single-condition coordination studies miss field failures.

3.2 Field Consequence

A 13.8 kV feeder serving a commercial district was coordinated for the summer-peak maximum-source condition in which all substation transformers were in service. During a winter weekend low-load period, one transformer was taken out of service for maintenance, reducing the available fault current by 38 percent. A cable fault on a lateral branch produced a fault current of 4.2× the downstream relay pickup, within the range of correct operation, but the upstream relay operated in 0.41 seconds while the downstream relay required 0.58 seconds. The upstream relay cleared the entire feeder, affecting 2,400 customers. The downstream relay's operating time at the reduced fault current had moved into the upstream relay's coordination region because the TCC curves crossed at approximately 3.8× pickup.

3.3 Corrective Procedure

Every coordination study should include a minimum of three fault current scenarios: maximum-source three-phase fault (for thermal-limit verification), minimum-source three-phase fault (for coordination verification under light system conditions), and minimum-source single-line-to-ground fault (for ground protection coordination). For systems with DER, two additional scenarios are required: maximum-DER-dispatch grid-connected, and minimum-DER-dispatch islanded. These five scenarios bracket the realistic operating range and reveal TCC crossovers that single-condition studies miss.


4. Failure Category 3: CT Saturation

4.1 The Mechanism

Current transformer saturation occurs when the magnetic core flux density exceeds the saturation point, causing the CT secondary current to no longer accurately represent the primary current. When a CT saturates, the secondary current waveform is clipped relative to the primary, and the relay receives a distorted, reduced-magnitude signal. A relay depending on this signal for operation may fail to operate, operate with a longer-than-expected time delay, or fail to maintain directional integrity.

The CT saturation voltage is the product of the secondary burden and the maximum symmetrical fault current referred to the secondary. A CT saturates when the required secondary driving voltage exceeds the CT's rated accuracy voltage:

Vreq=If,s⋅(RCT+RL)>VCV_{\text{req}} = I_{f,s} \cdot (R_{CT} + R_L) > V_{C}

Where: If,s=If,p/NI_{f,s} = I_{f,p} / N is the secondary fault current (NN = turns ratio).

RCTR_{CT} is the CT secondary winding resistance.

RLR_L is the lead resistance to the relay, and VCV_C is the CT accuracy class voltage (e.g.

VC=400 VV_C = 400\,\text{V} for a C400 CT). The dc offset component of the fault current drives additional flux into the core, effectively reducing the CT's ability to accurately reproduce the ac component. The degree of dc saturation depends on the system X/R ratio and the fault inception angle, and can cause complete loss of CT output for the first 1–3 cycles of the fault, precisely when instantaneous overcurrent elements are expected to operate.

4.2 Field Consequence

In a 4.16 kV industrial system, a three-phase bus fault produced a fault current of 18,400 A primary against a CT ratio of 150:5 (40:1), yielding a secondary current of 460 A. The relay burden was 2.8 VA at rated current (5 A), equivalent to a burden resistance of 0.112 Ω. The total secondary circuit resistance including leads was 0.31 Ω. The required CT driving voltage was 460×0.31=143 V460 \times 0.31 = 143\,\text{V}. The CT was rated C100 (VC=100 VV_C = 100\,\text{V}), which was below the required voltage by 43 percent. The CT saturated within the first half-cycle, suppressing the secondary current to approximately 2.8 A, just above the relay pickup of 2.5 A. The relay operated on the inverse-time characteristic at this near-pickup multiple, requiring 3.8 seconds to clear a fault that should have been cleared instantaneously. The sustained fault current caused significant bus bar damage.

4.3 Corrective Procedure

CT selection for protection applications must be verified by the saturation voltage calculation above for every relay location. IEEE Standard C37.110 provides the complete procedure, including the dc offset correction factor. The rule of thumb that C-class CT accuracy rating in volts should exceed 20 times the secondary burden in ohms provides a conservative first check. For bus protection and differential protection applications, a dedicated CT performance study following C37.110 is mandatory.


5. Failure Category 4: Incorrect TCC Curve Selection

5.1 The Mechanism

Inverse-time overcurrent relays are available in multiple curve families: IEC Normal Inverse, IEC Very Inverse, IEC Extremely Inverse, IEEE Moderately Inverse, IEEE Very Inverse, and IEEE Extremely Inverse, among others. Each curve family has a different slope in the current-time plane, and adjacent relays must use compatible curves to maintain CTI across the full fault current range. When a downstream relay uses a steep curve (Very Inverse) and the upstream relay uses a shallow curve (Normal Inverse), the curves converge at high fault currents and may cross, eliminating CTI at the currents most likely to occur in practice.

The convergence condition occurs when the ratio of upstream to downstream operating times at high current falls below 1.0:

tupstream(If)tdownstream(If)→1−as If→∞\frac{t_{\text{upstream}}(I_f)}{t_{\text{downstream}}(I_f)} \to 1^- \quad \text{as } I_f \to \infty

For a Very Inverse curve (α=1.0\alpha = 1.0, β=13.5\beta = 13.5) downstream and Normal Inverse (α=0.02\alpha = 0.02, β=0.14\beta = 0.14) upstream, the downstream curve has a steeper slope and will eventually overtake the upstream curve at high current, producing a crossover that the coordination study may not have evaluated if the maximum fault current examined was below the crossover point.

5.2 Corrective Procedure

Relay pairs in the same coordination chain should use the same curve family wherever possible. Where different curve families are unavoidable, for example at the interface between a utility relay (often IEC) and an industrial relay (often IEEE), the coordination study must explicitly plot both curves on the same TCC diagram and verify that no crossover occurs across the full fault current range from pickup to the maximum three-phase fault current at the relay location. Modern coordination software performs this check automatically, but the engineer must verify that the curve family selected in the software matches the relay firmware installed in the field.


6. Failure Category 5: Coordination at Maximum Fault Current Only

6.1 The Mechanism

This failure category is related to but distinct from Failure Category 2. Even within a single operating mode, the CTI between two relays varies with fault current due to TCC curve non-parallelism. Demonstrating CTI only at the maximum fault current leaves the possibility of CTI collapse at intermediate current levels where the curves approach each other. The most vulnerable region is typically 2–5× relay pickup, where inverse-time curves have their steepest slope and are most sensitive to small differences in TDS settings.

The CTI as a function of fault current is:

CTI(If)=TDSU⋅β(If/Ipu,U)α−1−TDSD⋅β(If/Ipu,D)α−1\text{CTI}(I_f) = \frac{TDS_U \cdot \beta}{\left(I_f/I_{pu,U}\right)^\alpha - 1} - \frac{TDS_D \cdot \beta}{\left(I_f/I_{pu,D}\right)^\alpha - 1}

where subscripts UU and DD denote upstream and downstream, respectively. This function is not monotonic in IfI_f for arbitrary combinations of TDSTDS and IpuI_{pu} values. The minimum CTI may occur at an intermediate fault current, and the coordination study must evaluate this function across the full current range.

6.2 Corrective Procedure

The minimum CTI across the full fault current range must be verified for every relay pair. In modern coordination software, this is accomplished by examining the numeric CTI reported at each plotted current level. The engineer should explicitly confirm CTI at the pickup multiple, at the midpoint of the fault current range, and at the maximum fault current. A plot without numeric CTI annotations at multiple current levels is insufficient documentation.


7. Summary: A Coordination Study Checklist

The five failure categories identified in this study are each preventable through procedural rigor. The following checklist encapsulates the minimum requirements for a coordination study that will hold up in the field:

Data Quality:

Scenario Coverage:

Curve Integrity:

Verification:



6. Conclusion

The most consequential finding across the 47 field incidents is that protection reliability is a function of study quality, not relay sophistication: every failure traced to a coordination study built on assumptions that did not match field conditions: wrong impedances, a single operating mode, overlooked CT saturation, a misidentified time-current characteristic, or verification at one fault current only. A modern numerical relay executes incorrect settings with perfect precision, so the deficient study fails just as surely with new hardware as with old.

The most common implementation failure is the latent one: an aging coordination study that was never wrong in any single point check but was never verified across operating modes and the full fault-current range, so the miscoordination sits dormant until the specific fault that exposes it occurs. The incident is not caused by the fault; it is revealed by it, having been built into the study years earlier.

The engineer should next subject existing studies to a structured restudy that closes the five recurring deficiencies (measured impedances, multiple operating modes, CT performance verified at maximum fault, time-current shapes confirmed in the field, and the coordination time interval checked across the full current range), because the corrective procedure is known and inexpensive, and the only question is whether it is applied before the next incident or after.


Related Work

The analysis in this paper connects to several companion studies in this library. Readers concerned with the upstream and downstream engineering will find Protection Coordination Study develops a closely related aspect of the same problem, while Protection Coordination with Distributed Energy Resources extends the treatment into an adjacent domain. For the broader methodological context, Arc Flash Risk Assessment provides complementary depth.


References

[1] IEEE Standard 242-2001, Recommended Practice for Protection and Coordination of Industrial and Commercial Power Systems (IEEE Buff Book), IEEE, 2001.

[2] IEEE Standard C37.110-2007, Guide for the Application of Current Transformers Used for Protective Relaying Purposes, IEEE, 2007.

[3] IEEE Standard C57.12.00-2021, Standard for General Requirements for Liquid-Immersed Distribution, Power, and Regulating Transformers, IEEE, 2021.

[4] IEC 60255-151:2009, Measuring Relays and Protection Equipment: Functional Requirements for Over/Under Current Protection, IEC, 2009.

[5] NFPA 70E-2024, Standard for Electrical Safety in the Workplace, NFPA, 2024.

[6] J. L. Blackburn and T. J. Domin, Protective Relaying: Principles and Applications, 4th ed., CRC Press, 2014.

[7] GE Grid Solutions, Multilin 750/760 Feeder Protection System Instruction Manual, GE, 2020.

[8] Schweitzer Engineering Laboratories, SEL-351 Protection System Instruction Manual, SEL, 2022.

[9] W. H. Kersting, Distribution System Modeling and Analysis, 4th ed., CRC Press, 2017.

[10] NERC, Protection System Misoperation Analysis, North American Electric Reliability Corporation, 2021.

[11] IEEE Standard 835-1994, Standard Power Cable Ampacity Tables, IEEE, 1994.

[12] P. Anderson, Analysis of Faulted Power Systems, IEEE Press, 1995.