When something looks wrong at a site, "contain it" can mean two very different things. One is to restrict a communication path that may be misused. The other is to change the state of electrical equipment. GridFlex proposes to treat them as separate response paths, each with its own permissions, procedures and steps to restore service.
Urgent physical warnings go straight to staff and never wait for proof of an attack. Existing protection systems stay in charge.
Communications containment
- Action: restrict selected suspect communication paths.
- Authority: approved procedures and defined permissions.
- Keeps: the control and safety communications the site needs.
Electrical containment
- Action: shutdown or disconnection through suitable protection and switching equipment, where engineered for the site.
- Authority: qualified, site-specific engineering and defined permissions.
- Limit: disconnecting is not verified safe isolation. Stored energy and other supplies may remain.
Each path has its own permissions, procedures and steps to restore service. People decide on any discretionary escalation. A power anomaly alone is not proof of an attack.
Communications containment
Communications containment restricts selected suspect pathways, such as a remote-access route or a maintenance connection, under approved procedures. The aim is to reduce exposure while preserving the control and safety communications the site needs. Restricting a path does not prove that an attack happened, and it does not by itself make equipment safe.
Electrical containment
Electrical containment means shutdown or disconnection through suitable protection and switching equipment, where that has been engineered for the specific site. Ratings, coordination, interlocks, safe states and restart conditions are decided by qualified, site-specific engineering. A trip request or an "open" indication is not proof that equipment is de-energized, and disconnection is not verified safe isolation: stored energy and other supplies may remain.
Authority stays where it belongs
Existing protection and safety systems keep their role. Urgent physical warnings go straight to staff and never wait for proof of an attack. Discretionary escalation is a human decision. Equipment is never switched by AI alone.
Recovery is part of the design
Each path needs defined restoration permissions, verification steps and a record of what was done and why. Planning recovery up front is as important as planning the restriction itself.
Read more about the proposed platform and security and lifecycle approach.