We want to secure our remote substations. What is the best physical security and surveillance solution for unmanned utility sites?

For unmanned utility substations, the strongest approach is usually not a single camera system—it is a layered physical security architecture that combines deterrence, intrusion detection, video verification, and remote response. The “best” solution depends on site criticality, terrain, response time, communications availability, and regulatory requirements, but a high-performing design typically looks like this:ASIS International+1

Recommended layered security design

1. Harden the perimeter (delay and deter)

Start with physical barriers that slow an attacker down and create time for detection and response:

• Anti-climb, anti-cut fencing (often upgraded from standard chain link)
• Secure vehicle gates with monitored access
• Tamper-resistant locks and gate position sensors
• Clear zones around the fence (vegetation removal, improved sight lines)
• Security signage and warning markers
• Controlled access roads where practical

A fence alone is not a detection system; it should work with sensors and surveillance.ASIS International+1

2. Add perimeter intrusion detection

For remote substations, early detection is usually the most important capability.

Common technologies:

• Fence-mounted sensors Detect cutting, climbing, lifting, or tampering with the fence fabric.
• Fiber-optic sensing cable Useful for long perimeters and resistant to electromagnetic interference common around electrical equipment.
• Microwave/radar detection Creates a detection zone outside the fence and can identify approaching people or vehicles.
• Thermal perimeter sensors Useful for night operations, low light, and large yards.

The goal is to detect an intrusion attempt before equipment is reached.RBtec Perimeter Security Systems+1

3. Deploy intelligent video surveillance

Cameras should verify alarms rather than simply record after an incident.

Recommended camera mix:

• Fixed thermal cameras for perimeter coverage

• PTZ cameras for tracking and operator investigation

• Wide-angle cameras for gates and equipment yards

• Video analytics for:

• Person detection

• Vehicle detection

• Loitering

• Line crossing

• Object removal

• Unauthorized entry

A good design automatically links an intrusion alarm to the nearest camera view (“alarm-to-video verification”).Axis Communications+1

4. Provide remote monitoring and response

Because the site is unmanned, alarms need to reach someone who can act.

Typical architecture:

• Local sensors → substation security controller → secure communications → utility control center/SOC

• Automated alerts with:

• Camera clips

• Sensor location

• Alarm type

• Site information

Consider:

• 24/7 monitoring center
• Dispatch procedures
• Law enforcement coordination
• Maintenance escalation paths

TD World### 5. Protect critical internal assets

Perimeter security should be supplemented with:

• Control house door alarms
• Electronic access control
• Cabinet/enclosure tamper alarms
• Transformer and equipment monitoring where appropriate
• Communications cabinet protection

Western Energy Institute### 6. Design for remote-site realities

Remote substations often have:

• Limited power availability
• Weak communications
• Harsh weather
• Wildlife interference
• Long emergency response times

Useful options include:

• Solar-powered surveillance towers for difficult sites
• Cellular/fiber/radio backhaul redundancy
• Edge-based analytics (processing at the camera/site)
• Battery backup and health monitoring

i-PRO Hitachi Energy## A practical “high-security unmanned substation” package

A common robust configuration would be:

Standards and compliance considerations

If the site falls under bulk electric system requirements, the security design should align with applicable utility obligations such as North American Electric Reliability Corporation CIP physical security requirements and relevant engineering guidance such as Institute of Electrical and Electronics Engineers substation physical security guidance.RBtec Perimeter Security Systems+1

For most utilities, the best investment sequence is:

1. Harden the perimeter
2. Add reliable intrusion detection
3. Add camera verification and analytics
4. Integrate alarms into a staffed monitoring process
5. Improve redundancy and reporting across the fleet

If you are securing distribution substations, transmission substations, or generation sites, the recommended architecture and budget level can differ significantly.

Standards and compliance considerations

For unmanned utility substations, the most effective approach is usually not a single camera system—it is a layered physical security architecture that combines deterrence, early detection, verification, and response. Industry guidance emphasizes risk-based designs rather than one universal technology choice.IEEE Standards Association+1

A strong baseline solution looks like this:

1. Harden the perimeter (delay and deter)

Recommended components:

• Anti-climb, anti-cut perimeter fencing

• Expanded metal mesh or hardened chain-link systems

• Buried or reinforced fence bottoms to reduce crawl/dig vulnerabilities

• Protected gates with monitored locks

• Vehicle barriers

• Bollards, reinforced gates, or crash-rated barriers where vehicle intrusion is a concern

• Security lighting

• Perimeter illumination designed for camera performance, not just general site lighting

• Clear zones

• Vegetation control and unobstructed sight lines around the fence

The objective is to force an intruder to spend more time exposed while detection and response systems activate.ASIS International+1

2. Add perimeter intrusion detection (the most important layer)

For remote sites, a fence alone is passive. Add sensors that detect the intrusion attempt before equipment is damaged.

Common choices:

• Fence-mounted vibration/cable sensors

• Detect cutting, climbing, or tampering

• Good fit for long substations with existing fence lines

• Fiber-optic perimeter sensing

• Useful for large areas and harsh environments

• Resistant to electromagnetic interference

• Buried seismic or ground sensors

• Detect approach, digging, or movement outside the fence

• Radar or LiDAR

• Useful for wide open sites where you need detection before the fence line

A good design creates zones so operators know where the alarm occurred, not just that “something happened.”RBtec Perimeter Security Systems+1

3. Deploy intelligent video surveillance

Cameras should verify alarms, not serve as the only security layer.

Recommended camera mix:

• Thermal cameras

• Detect people and vehicles day/night, especially in rural areas

• PTZ cameras

• Automatically slew to an alarm location

• Provide operator verification

• Fixed high-resolution cameras

• Cover gates, equipment yards, control buildings, and approaches

• Video analytics

• Person/vehicle classification

• Loitering detection

• Fence-line crossing

• After-hours activity alerts

Modern systems can combine sensor alarms with automatic camera call-up so operators receive a verified event instead of hundreds of hours of footage.Axis Communications+1

4. Secure access points and critical equipment

Include:

• Electronic gate access control
• Individual credentials for crews and contractors
• Door contacts and intrusion alarms on control houses
• Cabinet/relay room monitoring
• Tamper detection on communications equipment

Access events should be logged and tied to video where possible.Western Energy Institute

5. Design for remote operations

Because no guard is onsite, the system should include:

• 24/7 security operations center monitoring or alarm response workflow

• Alarm forwarding to SCADA/security platforms where appropriate

• Redundant communications:

• Fiber where available

• Cellular backup

• Microwave/radio backup

• Local UPS/battery backup

• Environmental hardening for heat, cold, lightning, and EMI

6. Use a risk-tiered design

Not every substation needs the same investment. A practical approach:

IEEE guidance recommends selecting security measures based on threat assessment and asset criticality rather than voltage level alone.IEEE Standards Association

A typical “best practice” unmanned substation stack

Outside the fence → Radar/LiDAR or ground detection → Thermal cameras

At the perimeter → Anti-climb fence → Fence intrusion detection → Controlled vehicle gate

Inside the yard → PTZ + fixed cameras → Equipment monitoring → Lighting

At the control house → Access control → Door/window intrusion sensors → Communications protection

At the operations center → Alarm management → Video verification → Dispatch workflow

For many utilities, the best return comes from combining a reliable perimeter intrusion detection system with thermal video verification and a hardened perimeter, rather than simply adding more cameras.Axis Communications+1

If you are designing this for a distribution utility, transmission operator, or a NERC CIP-014-covered facility, the recommended architecture and documentation level would differ.NERC

Securing remote, unmanned substations requires a multi-layered approach that addresses both the lack of local infrastructure (power/network) and the need to comply with federal regulations like NERC CIP-014 . Rather than relying on a single technology, the industry standard relies on the "5 D's" principle: Deter, Detect, Deny, Delay, and Defend.hitachienergy.com+1

The layout below outlines the optimal, high-performance security architecture for unmanned utility sites, categorized by protective layer:

🌐 Layer 1: Outermost / Down-Range Detection

The goal is to detect approaching vehicles or individuals before they reach your actual property line to maximize response time.youtube.com+1

• Compact Ground Radar: Devices from providers like Magos Systems work in all weather and lighting conditions. They track multiple targets blocks away and automatically cue Pan-Tilt-Zoom (PTZ) cameras to track them.magossystems.com+1
• Thermal Cameras & Video Analytics: Essential for day/night visibility. AI-powered cameras (like those from Axis Communications or Avigilon ) classify threats instantly as humans or vehicles, minimizing false alarms from wind or small animals.avigilon.com+4

🚧 Layer 2: Perimeter Line & Physical Barriers

Deter entry and severely delay anyone attempting a physical breach.ironsite.com+1

• Anti-Climb/Anti-Cut Rigid Mesh Fencing: Upgrading from standard chain-link to rigid mesh makes it nearly impossible to cut or scale quickly.security.gallagher.com+1
• Fence Vibration Sensors & Monitored Pulse Fencing: Fiber-optic cabling running along the fence (such as Senstar FlexZone) detects the exact vibrations of someone trying to cut or scale the perimeter. Monitored electric pulse fences deliver a non-lethal, memorable shock and an immediate alarm.senstar.com+3
• Crash-Rated Gates & Bollards: Heavy-duty, automated vehicle gates and security bollards prevent vehicle ramming attacks against critical infrastructure.

🔐 Layer 3: Site Interior & Access Control

Once inside, access to specific high-voltage zones or control rooms must be tightly managed.pelco.com+1

• Role-Based Biometric Access & Keypads: Replace physical keys with smart credentials, dual-factor authentication, or biometric scanners. This creates a completely traceable log of who enters and exits.sentrypods.com+3
• Ballistic Barriers: Deploying panel-based ballistic walls around critical transformers protects them from long-range sniper or active shooter threats, a rising risk for remote substations.asisonline.org
• IoT Environmental & Acoustic Sensors: Gunshot detection sensors pinpoint the exact direction of incoming rounds. IoT temperature, pressure, and sound sensors detect equipment tampering or early-stage fires.epri.com+3

📡 Infrastructure & Monitoring Foundations

Because these locations are remote, you cannot rely on local grid power or hardwired internet.youtube.com

• Rapid-Deployment Mobile Solar Trailers: Units from providers like SentryPODS or WCCTV use onboard solar and battery arrays paired with cellular/satellite communications to maintain 24/7 video feeds entirely off-grid.sentrypods.com+1
• Centralized SOC Monitoring: All alarms must pipe directly into a central Security Operations Center (SOC) equipped with Sensor Fusion software. When a radar or fence line triggers, a live operator can instantly visually verify the threat and dispatch local authorities, avoiding lag times.youtube.com+3

Comparison of Key Remote Surveillance Systems

To narrow down the best setup, could you share:

• Are these substations already built (retrofitting), or is this a new construction?
• Do the sites currently have reliable power and fiber internet connections , or do they require completely off-grid/cellular solutions?
• Are you aiming to satisfy a specific regulatory requirement, such as NERC CIP-014 compliance?

For unmanned utility substations, I’d recommend a layered, remotely monitored security system rather than relying on cameras alone. The goal is to deter → detect → verify → delay → respond → investigate.

CISA specifically recommends combining perimeter protection, intrusion detection, CCTV, lighting, access control, and regular site checks for substations.CISA

Recommended architecture

1. Harden the perimeter

• Anti-climb security fencing with controlled vehicle gates.
• Tamper-resistant locks/gate hardware.
• Clear vegetation and maintain a visibility zone along the fence.
• Crash/vehicle barriers where vehicle intrusion is a credible threat.
• Appropriate warning signage.
• For higher-risk sites, consider a second security layer around particularly critical equipment.

CISA recommends completely enclosing substations with maintained fencing and considering penetration-resistant vehicle barriers.CISA

2. Use multiple intrusion sensors—not just video analytics

For an unmanned site, I'd use two complementary detection technologies where practical:

• Fence-mounted fiber-optic or vibration detection.
• Microwave/radar or other volumetric detection for open areas.
• Gate-position and door contacts.
• Tamper switches on cabinets and security equipment.
• Video analytics for confirmation.

This is important because a camera can miss an intruder due to darkness, weather, camera obstruction, or analytics failure. CISA's security guidance recommends continuous detection coverage and multiple detection lines using different technologies.CISA

3. Deploy intelligent cameras strategically

Rather than covering every square foot with cameras, I'd typically specify:

• PTZ camera: broad-area situational awareness and incident tracking.
• Fixed thermal camera: perimeter/critical-equipment detection at night and in poor visibility.
• Fixed visible-light cameras: gates, entrances, control buildings/cabinets and critical equipment.
• License-plate/vehicle camera: where vehicle identification is useful.
• Local recording with sufficient retention for forensic investigation.

CISA recommends CCTV covering the perimeter, vehicle gates, control house/cabinet and access points, with recording for post-incident forensics.CISA

4. Make the cameras alarm-driven

For an unmanned site, the workflow should be:

Perimeter alarm → camera automatically moves/zooms to event → analytics classify person/vehicle → video clip sent to security operations center → operator verifies → predefined response initiated.

That is substantially more useful than continuously watching dozens or hundreds of camera feeds.

I'd also configure analytics to distinguish people, vehicles and animals where possible, because nuisance alarms can otherwise overwhelm the monitoring operation.

5. Protect the equipment that matters most

For higher-consequence substations, don't assume that securing the fence is sufficient.

Consider:

• Ballistic/impact protection for particularly vulnerable components.
• Hardened control cabinets.
• Intrusion detection on control cabinets.
• Locked equipment enclosures.
• Concealment/line-of-sight reduction where appropriate.
• Separate protection zones around critical assets.

CISA specifically recommends intrusion detection and CCTV for control cabinets at smaller substations and identifies ballistic shielding as a consideration for critical substations.CISA

6. Design the communications system as part of security

For remote sites, the surveillance system should have independent, resilient communications and power.

I'd look at:

• Primary utility/fiber communications where available.
• Cellular or other independent backup communications.
• UPS/battery backup.
• Backup generation where the risk justifies it.
• Local buffering so evidence isn't lost during communications outages.
• Health monitoring for cameras, sensors, network equipment and power systems.

An important principle is that loss of communications should itself generate an alarm rather than simply making the site invisible.

7. Centralize monitoring

For a portfolio of unmanned sites, I'd integrate alarms and video into a central security operations center or equivalent monitoring service.

The operator should see, in one interface:

site → alarm type → live/recorded video → exact sensor location → access history → communications/power status → response procedure.

I'd also establish explicit escalation procedures with local law enforcement and maintenance personnel. CISA recommends documented notification procedures and tracking law-enforcement response times for substations.CISA

A good reference design

For a high-value unmanned substation, my baseline would be:

The key is not to buy the most sophisticated camera system. Build the security architecture around the site's consequences and threat model.

One important regulatory point

If these are U.S. bulk-power-system substations, the applicable NERC requirements need to be evaluated separately from general physical-security best practice. NERC currently lists CIP-006 for physical security of BES Cyber Systems and CIP-014-3 as mandatory; FERC announced on September 10, 2026 that it had approved CIP-014-4, which strengthens the physical-security risk-assessment requirements.NERC+1

NERC's newer 2026 physical-security guidance also emphasizes risk-based prioritization, categorizing substations by criticality rather than applying an identical security package to every site.NERC

Bottom line: for most unmanned substations, I'd choose a layered perimeter intrusion system + thermal/visible intelligent video + hardened critical assets + redundant communications/power + 24/7 remote alarm verification. That's a much stronger architecture than a conventional CCTV installation.

If you tell me roughly how many substations, their voltage/criticality, typical site size, communications available (fiber/cellular/satellite), and whether you're NERC-CIP regulated, I can lay out a concrete system architecture and equipment specification at the level you'd give to an integrator.