8.6.2 — Infrastructure Threat Monitoring — maturity: live
Power Grid Threat Surveillance
Persistent satellite monitoring of high-voltage transmission infrastructure to detect physical encroachment, thermal anomalies, and deliberate sabotage before outages cascade.
When adversaries or extreme weather threaten the transmission towers, substations, and switching yards that keep a nation's lights on, satellite surveillance delivers the persistent, unjammable oversight that ground sensors alone cannot.
A national power grid is the single asset whose failure collapses every other critical system simultaneously. Transmission towers, substations, and converter stations are spread across thousands of kilometres of terrain that ground patrols cannot cover continuously, and adversaries — state and non-state alike — have demonstrated that a handful of targeted strikes can black out entire regions. No commercial utility has the mandate or the budget to monitor its full asset base from space; that gap is a standing invitation.
A LEO constellation equipped with thermal infrared and shortwave-infrared imagers detects hotspots at transformer banks and cable junctions that precede failure, while SAR passes confirm structural changes to pylons and substations between optical revisits. RF survey payloads add a third layer, flagging anomalous emissions consistent with jamming or drone reconnaissance activity near sensitive switching yards. The fusion of these three streams — thermal, radar, and RF — produces an alert quality no single modality can match.
The operational output is a cueed response system: grid operators receive a prioritised fault map sorted by severity and confidence, security services receive geofence-breach alerts around critical substations, and emergency repair crews are pre-positioned before a fault becomes a blackout. Sovereign ownership of the sensing layer means classification levels, data-retention rules, and escalation paths are set by national policy, not by a commercial vendor's terms of service.
Frequently asked
Why can't we just rely on commercial satellite providers like Planet or ICEYE instead of building sovereign assets?
Commercial providers offer excellent baseline imagery, but their tasking priorities, data-sharing terms, and shutter-control decisions are governed by their home-country governments — not yours. During a national emergency or armed conflict, a foreign operator can be legally compelled to deny your access or downgrade your resolution. A sovereign constellation answers only to your national command authority, ensuring availability exactly when geopolitical pressure peaks.
What satellite sensor types are most effective for power grid surveillance?
The most capable systems layer three sensor modalities: synthetic-aperture radar (SAR) for all-weather structural-change detection at transformer yards and tower lines; mid-wave infrared (MWIR) for thermal anomaly detection at substations and cable joints; and high-resolution electro-optical (EO) for daytime visual confirmation of physical damage or vehicle activity. A sovereign constellation should carry at least SAR and MWIR; EO can initially be sourced commercially and migrated sovereign over time.
What orbital regime is best — LEO, MEO, or GEO?
LEO at 450–600 km altitude is the correct primary choice: it delivers sub-metre resolution, 15–30 minute revisit with a modest constellation of 20–40 satellites, and low signal latency. GEO provides continuous stare over a fixed footprint but resolution is inadequate for identifying individual tower or substation anomalies at continental-infrastructure scale. MEO offers no meaningful advantage for this application.
How many satellites are needed for operationally useful coverage of a medium-size nation?
A pragmatic sovereign baseline for a country with 500,000–1,000,000 km² territory is 12–16 SAR microsatellites in two complementary orbital planes, achieving a 30-minute maximum revisit gap over any monitored site. Expanding to 24–30 satellites compresses that gap to under 20 minutes and enables simultaneous multi-site surge monitoring during crisis events. Nanosatellites below 12U are currently insufficient for the 0.5–1 m resolution required to detect substation-level structural change.
How do we integrate satellite alerts into our existing grid SCADA and security operations centre workflows?
The standard integration path uses IEC 62351-compliant secure data feeds piped through an API gateway into the national SCADA-adjacent situational-awareness layer, with geofenced alerts triggering tickets in the SOC's SIEM platform. CCSDS 132.0-B-3 governs the downlink integrity layer from satellite to ground station. Critically, the classification and alert logic must be owned and operated within national jurisdiction — outsourcing this processing layer to a foreign cloud provider recreates the sovereignty vulnerability you are trying to eliminate.
Can satellites detect a pre-attack reconnaissance pattern near grid infrastructure?
Yes, with caveats. Persistent SAR and EO surveillance can detect anomalous vehicle loitering, the creation of new tracks or cleared ground near protected perimeters, and unusual human activity patterns. However, distinguishing reconnaissance from routine maintenance requires fusion with other intelligence streams and carries legal constraints in most jurisdictions regarding automated suspicion-scoring of individuals without judicial authorisation.
What is the realistic latency between a physical event at a substation and a satellite-derived alert reaching an operator?
With a direct-downlink architecture — where the satellite passes data to a national ground station within line-of-sight and onboard AI pre-screens for anomalies — end-to-end latency of under 15 minutes is achievable for thermal events. Structural-change detection (e.g., a toppled tower) requires a before/after SAR comparison and typically adds one to two revisit cycles, making the practical alert window 30–60 minutes post-event.
How does this application relate to compliance with NIS2 or equivalent national critical infrastructure protection law?
Under the EU NIS2 Directive (2022/2555), energy-sector operators classified as 'essential entities' must implement technical and organisational measures to manage physical security risks to network integrity. Satellite-derived surveillance data, when integrated into documented risk-management procedures, constitutes a qualifying compensating control. Nations with equivalent domestic frameworks — such as the US NERC CIP-014-3 standard for transmission physical security — similarly recognise spaceborne monitoring as an eligible protective measure, though formal certification of specific systems still rests with national regulators.