Why Singapore Works | Protection Selectivity — How One Electrical Fault Is Isolated Without Switching Off Everything Else

Circuit breaker selectivity, electrical protection coordination and selective coordination decide whether an electrical fault switches off one circuit or an entire section of a building. In a low-voltage electrical distribution system, several circuit breakers, fuses, residual-current devices and protective relays can all detect the same downstream short circuit, overload or earth fault. The engineering problem is therefore not simply whether protection will trip. It is whether the correct protective device trips first, fast enough to clear the fault, while upstream protection remains closed so unaffected loads keep their electricity supply.

In Singapore electrical installations, protection settings, incoming circuit breakers, short-circuit protection, earth-fault protection, protective relays, current transformers, fault-clearing time and switchgear withstand are not independent details. They form a coordinated protection system. SP Group’s current electricity-connection handbook places responsibility for proper specification, setting and commissioning of customer-incomer protection on the Licensed Electrical Worker, while the wider design must still satisfy the applicable Singapore standards, codes, equipment ratings and supply conditions. That makes electrical protection selectivity in Singapore a problem of system behaviour, not a shopping list of correctly rated breakers.

This 20,000+ word guide explains total selectivity, partial selectivity, time-current curves, prospective short-circuit current, current selectivity, time selectivity, energy selectivity, logic selectivity, zone selective interlocking, residual-current selectivity, backup protection, cascading, generator fault levels, multiple-source systems, critical loads, protection studies, commissioning and failure diagnosis. The central question is simple enough for a child to understand and difficult enough to occupy professional protection engineers: when a fault happens here, what exactly should switch off—and what must stay on?

Evidence checked against current Singapore and technical sources on 16 September 2026. This is an educational systems explanation, not a substitute for project-specific protection studies, manufacturer coordination data, statutory requirements or work by a suitably qualified Licensed Electrical Worker or professional engineer.

Quick answer: selectivity localises the electrical failure

A well-coordinated protection system tries to make the electrical network fail small. If a final circuit develops a fault, the protective device immediately upstream of that fault should clear it. The breaker feeding the larger distribution board should ideally remain closed. The main incoming breaker should remain closed. Unaffected circuits should continue operating.

The desired chain is:

fault occurs → every relevant protective device “sees” some version of the abnormal current → the nearest correctly coordinated device operates first → faulted section is disconnected → upstream devices remain closed → unaffected loads remain supplied → engineers verify the reason for the trip before restoring the faulted section.

Without selectivity, a small fault can create a large outage. A socket fault can drop a floor. A floor fault can drop a building. A local equipment failure can interrupt pumps, lifts, communications, laboratories, server rooms or other unrelated services. The fault did not physically reach those loads. The protection system exported the consequence to them.

Protection and selectivity are not the same thing

Protection asks whether dangerous electrical conditions are detected and cleared. Selectivity asks how much of the installation is sacrificed when protection acts.

A system can be strongly protected but poorly selective. Two breakers can both be correctly rated for their cables and both trip on the same downstream fault. The fault may be cleared safely, yet the outage is larger than necessary. Conversely, a design that tries too hard to preserve continuity by delaying upstream protection can become unsafe if fault-clearing time or equipment withstand is exceeded.

The engineering objective is therefore not “keep everything on.” It is:

clear the dangerous condition within the required protection envelope while disconnecting no more of the electrical system than necessary.

Why several breakers can see one fault

Imagine a simple radial system. A main incoming breaker feeds a main distribution board. A feeder breaker supplies a sub-distribution board. A final-circuit breaker supplies one machine. A short circuit develops inside the machine.

Fault current flows from the source through the main breaker, through the feeder breaker, through the final breaker and into the fault. All three breakers carry the fault current until one interrupts it. Electrically, the upstream devices are not blind merely because the fault is far downstream.

This is the first idea people often miss. Protection devices in series do not take turns observing the fault. They are exposed to the same current path. Selectivity comes from differences in pickup thresholds, operating times, current-limiting behaviour, logic or other coordinated characteristics—not from physical distance alone.

The nearest breaker does not automatically win

It feels intuitive that the smallest downstream breaker must trip first. That intuition is unreliable.

Two breakers can have overlapping instantaneous trip regions. A high downstream short-circuit current can cross both devices’ magnetic or electronic instantaneous thresholds. Manufacturing tolerance and operating time then matter. The upstream breaker can open with the downstream breaker, or even before it.

This is why professional coordination studies use manufacturer time-current curves, selectivity tables, device data and calculated fault levels. Nameplate ampere ratings alone do not prove discrimination.

Selectivity, discrimination and selective coordination

Different standards, countries and manufacturers use slightly different language. “Selectivity” and “discrimination” are commonly used for the same general idea: coordinate series-connected protective devices so the device closest to a downstream fault clears it while upstream protection remains unaffected, within the stated limits of the coordination.

“Selective coordination” is common in North American practice. “Selectivity” is common in IEC-oriented material. The words matter less than the engineering evidence. A designer should always ask what kind of fault, what current range, what devices, what source configuration and what claimed selectivity limit are actually being discussed.

Total selectivity means the claim extends through the required fault range

Total selectivity is the stronger claim. In simplified terms, the upstream device remains closed for downstream faults up to the relevant maximum fault current or the defined breaking-capacity boundary of the downstream device, according to the applicable manufacturer or standard definition.

The important phrase is “up to.” Selectivity is never an abstract adjective detached from current. It exists over a range. A pair of breakers can discriminate perfectly at lower fault currents and lose discrimination at higher ones when their instantaneous or energy responses overlap.

Therefore “these breakers are selective” is incomplete engineering language. Better language is: these devices are verified selective for this fault type and source condition up to this stated current or throughout this defined operating range.

Partial selectivity can still be useful—if the limit is understood

Partial selectivity means discrimination is maintained only up to a stated fault-current level. Below that limit, the downstream device clears the fault while the upstream device stays closed. Above it, simultaneous or upstream tripping may occur.

Partial selectivity is not necessarily a bad design. If the maximum prospective short-circuit current at the downstream point is comfortably below the verified selectivity limit under every relevant operating configuration, partial selectivity can be practically sufficient.

The danger begins when a table says “selective to 10 kA” and the actual installation can deliver 18 kA after a network upgrade, transformer change or generator configuration change. The paper claim stayed the same. The world moved past it.

Prospective short-circuit current is the pressure test

Prospective short-circuit current is the current that would flow at a point under a specified fault condition if the protective device did not yet interrupt it, subject to the source and circuit impedance. It tells the protection engineer how severe the electrical event could become.

The value changes with location. A board close to a large transformer can have a much higher fault level than a final circuit at the end of a long cable. Parallel transformers, generators, motors and multiple sources can increase available fault current. Long conductors and impedance reduce it.

Selectivity therefore cannot be studied without the fault-current map. A coordination table that is valid at 5 kA may be irrelevant at a bus where 40 kA is available.

The electrical network changes the fault seen by the protection

Protection devices do not respond to the abstract idea of a short circuit. They respond to electrical quantities produced by the actual network.

Source impedance matters. Transformer impedance matters. Cable resistance and reactance matter. Earthing arrangement matters. Fault type matters. Generator contribution matters. Motor contribution can matter during the first cycles. The operating state of tie breakers and parallel incomers matters.

This is why the same breaker settings can coordinate in one building configuration and fail in another. Protection belongs to a network model, not to an isolated panel schedule.

Current selectivity separates pickup thresholds

Current-based selectivity uses different trip thresholds. The downstream protective device is set or selected to operate at a lower current than the upstream device. For overloads and moderate overcurrents, this can create a clean hierarchy.

Imagine a final breaker that protects a small circuit and a feeder breaker protecting several final circuits. The final breaker should respond to abnormal current that belongs to its branch without forcing the feeder breaker to act immediately.

Current separation becomes harder at very high short-circuit currents because both devices may enter instantaneous operation. Once both devices are trying to trip with minimal intentional delay, threshold spacing alone may no longer preserve discrimination.

Time selectivity lets the downstream device move first

Time selectivity deliberately delays the upstream protective device for a defined range so the downstream device has time to clear the fault first.

The concept is easy to describe and dangerous to oversimplify. Delay preserves continuity only if the upstream switchgear, busbars, cables and protected equipment can safely withstand the fault energy for that additional time. The designer is trading fault-clearing speed at the upstream level for discrimination.

The upstream delay therefore has to sit inside several constraints at once: downstream clearing time, upstream short-time withstand, cable thermal limits, equipment damage curves, arc-flash implications and statutory or design requirements.

Time-current curves make invisible races visible

A time-current curve plots operating time against current, usually on logarithmic axes. It lets engineers see which protective device is expected to act first across a range of overcurrents.

For overloads, the curves may slope over seconds or minutes. For short-time protection, the curve may show a deliberate delay band. For instantaneous protection, operating time collapses dramatically.

Coordination is not proved because two lines look separated at one current. Engineers examine tolerances, actual settings, fault levels, downstream conductor limits and the full relevant range. Curves are a map of the race, not a decorative chart.

Why curve bands matter more than one ideal line

Real breakers do not trip at one mathematically exact time for every event. Standards and manufacturers permit tolerances. Temperature, prior loading, device technology and production variation can influence response.

Protection curves therefore often represent bands or limits rather than a single deterministic trace. If the downstream clearing band overlaps the upstream operating band, coordination may be uncertain in that region.

A protection study that ignores tolerance can create false precision: two beautiful computer curves separated by a few milliseconds that real devices are not obliged to respect.

Energy selectivity uses current limitation and let-through energy

At very high fault currents, modern current-limiting breakers can begin opening extremely quickly. Their contacts create arc voltage and limit the peak current and energy that pass downstream or upstream.

Energy selectivity uses coordinated device behaviour so the downstream breaker receives enough energy to complete its trip while the upstream device experiences a limited event that does not cross its own tripping energy threshold.

This behaviour cannot be inferred safely from ordinary time-current curves alone. Manufacturer-tested selectivity data and device combinations become especially important because the interaction occurs in the high-speed, current-limiting region.

Logic selectivity lets devices communicate

Logic selectivity or zone selective interlocking adds communication between protection devices. A downstream device that detects a fault can signal upstream equipment that the fault lies in a downstream zone.

The upstream device can then intentionally delay while the downstream device clears the event. If no downstream restraint signal arrives, the upstream device can trip faster for a fault in its own zone.

This solves a classic tension: fixed time grading can preserve selectivity but leave upstream faults exposed to unnecessary delay. Communication allows the system to distinguish “downstream fault—wait” from “my-zone fault—act fast.”

Zone selective interlocking is not magic

Communication adds capability and dependency.

The interlocking wiring or digital link must work. The protection logic must be configured correctly. The devices must agree on which zone each signal represents. Testing must prove that restraint is sent and received under the intended fault scenarios.

A communication-assisted protection scheme therefore creates a new failure question: if the communications channel fails, does the protection fail safe, fail slow, or fail non-selectively?

Backup protection and selectivity are related but different

Selectivity asks the upstream device not to trip when the downstream device is doing its job. Backup protection asks the upstream device to trip when the downstream device does not do its job.

Those requirements pull in opposite directions:

wait long enough to preserve downstream selectivity—but not so long that a failed downstream breaker leaves the fault energised dangerously.

Protection engineering therefore designs a hierarchy of primary and backup actions rather than one heroic breaker expected to solve every failure.

Breaker failure is a fault inside the protection system

A protective relay can correctly issue a trip command and the circuit breaker can fail mechanically or electrically to interrupt current. The original electrical fault remains energised.

In more sophisticated systems, breaker-failure protection detects that current continues after a trip command and escalates to upstream or adjacent breakers. The outage becomes larger because the preferred local isolation failed.

This is an important lesson: a larger outage is not always evidence of poor selectivity. Sometimes it is the designed backup response to a failed primary protective device.

Cascading is not another name for selectivity

Cascading or backup protection ratings can allow an upstream current-limiting device to help a downstream device withstand or interrupt a fault that exceeds the downstream device’s standalone breaking capacity, when the manufacturer has verified the combination.

The concept can reduce equipment cost, but it must not be confused with discrimination. Cascading focuses on combined interruption capability. Selectivity focuses on which device opens.

Some tested device families can achieve both enhanced breaking performance and good selectivity. That is a specific verified combination, not a reason to assume the two concepts are identical.

The protection zone is the real unit of failure containment

Protection becomes easier to reason about when the electrical system is divided into zones.

A transformer can be one zone. A busbar another. A feeder cable another. A motor another. A final circuit another. Each zone has boundaries defined by current transformers, breakers, relays or other protective interfaces.

Good selectivity tries to isolate the smallest zone consistent with safe fault clearance. Good backup protection ensures the fault is still removed if the first zone boundary fails to open.

SP Group’s protected-zone language shows why boundaries matter

SP Group’s January 2026 electricity-connection handbook uses explicit protected-zone thinking for higher-voltage connection protection. It states, for example, that specified cable terminations and metering instrument transformers at incomers must be included within the unit-protection zone so faults in those components are cleared quickly.

The public lesson is not to copy a transmission or 22 kV scheme into a low-voltage building. It is to see the architecture: protection is strongest when the designer knows exactly which physical assets each scheme owns and where the next scheme takes over.

Short-circuit protection and overload protection own different timescales

Overload is usually excess current flowing through an otherwise intact circuit. The current may be modestly above normal for seconds, minutes or longer. Conductors heat progressively.

A short circuit creates a much lower-impedance path and can produce very high current almost immediately. Mechanical forces and thermal energy rise quickly.

Protection curves therefore contain different response regions. Selectivity has to be considered across them. A pair of devices can coordinate beautifully in the overload region and lose selectivity in the instantaneous short-circuit region.

Earth-fault selectivity is its own problem

An earth fault may produce current very different from a phase-to-phase or three-phase short circuit, depending on the earthing arrangement and fault impedance.

Earth-fault relays and residual-current devices can therefore require their own coordination. A highly sensitive upstream residual-current device can trip for a downstream leakage event unless sensitivity and time delay are deliberately graded or circuits are subdivided appropriately.

This is why “the overcurrent breakers are selective” does not prove the whole installation is selectively protected against every relevant fault type.

Residual-current selectivity protects both people and continuity

Residual-current protection can operate at currents far smaller than ordinary overcurrent protection because its job includes detecting leakage to earth that may present shock or fire risk.

If multiple RCDs sit in series, a downstream fault can be seen by both. Selectivity may be created through circuit subdivision, different residual operating currents, time-delayed upstream devices where permitted, or combinations defined by the applicable design standards and manufacturer data.

The safety boundary remains non-negotiable: discrimination must never be achieved by weakening required shock protection or violating maximum disconnection times.

Critical loads make the consequence of poor selectivity visible

In an ordinary room, an unnecessary feeder trip is inconvenient.

In a hospital, data centre, tunnel, airport, process plant or high-rise building, the same unnecessary outage can interrupt systems whose availability matters materially to safety or operations.

This does not mean critical facilities should keep faulty circuits energised. It means the protection design should prevent one local electrical failure from creating unrelated service loss where practical and required.

Continuity of service is a design output, not a slogan

“High availability” can sound like management language. Protection selectivity shows what it means physically.

If one kitchen circuit fails, does the fire command centre stay supplied? If one office floor develops an earth fault, do essential pumps remain available? If one motor feeder shorts, does the entire production line collapse?

Availability emerges from thousands of local containment decisions. Protection selectivity is one of them.

Selective coordination does not mean zero interruption

The faulted circuit should still go off. That is the protection doing its job.

Selective coordination does not preserve continuity to the failed component. It preserves continuity around it.

This distinction is essential. A system that refuses to trip because continuity is valued above fault clearance is not selectively coordinated; it is under-protected.

The incoming breaker has the widest blast radius

The main incoming breaker sits at a high point in the distribution hierarchy. If it opens, everything downstream can lose supply unless another source or bus arrangement takes over.

That makes its protection settings consequential. It must protect the incoming circuit and downstream system against conditions it owns while avoiding unnecessary operation for faults that lower-level devices should clear.

SP Group’s current handbook therefore assigns proper specification, setting and commissioning of customer-incomer protection to the customer installation’s LEW. That responsibility sits at the boundary where a private installation meets a larger supply system.

Why the upstream device cannot simply be set “very high”

One naive route to selectivity is to push upstream thresholds so high or delays so long that the upstream breaker almost never interferes with downstream protection.

That can undermine protection of the upstream cable, busbar, transformer or incoming connection. A fault in the upstream zone may persist too long. Equipment may exceed thermal or short-time withstand. Arc energy may increase.

Selectivity is therefore constrained optimisation. The upstream device must be patient enough to let downstream protection work and decisive enough to protect its own zone.

Short-time withstand puts a ceiling on intentional delay

Switchgear has a finite ability to carry very high current for a short period without unacceptable damage. This is expressed through short-time withstand ratings and related manufacturer data.

If time-based discrimination requires an upstream breaker to wait, the equipment carrying that fault current during the wait must be able to survive it.

SP Group’s current handbook publishes short-time withstand requirements for customer switchgear at specified supply voltages and places protection-system requirements into the connection process. The exact values belong to the applicable project and current handbook; the broader lesson is universal: delay is only available if the hardware can afford the time.

Cable thermal limits create another boundary

Fault current heats conductors rapidly. For short durations, the thermal stress is often considered through an energy relationship involving current squared and time.

Longer clearing time means more energy deposited in the conductor. A protection setting that looks selective on a breaker curve can still be unacceptable if the cable cannot withstand the resulting fault energy.

The correct protection study therefore overlays device operation with the limits of what is being protected.

Arc energy creates a difficult trade-off

Intentional delay can increase the duration of an arcing fault and therefore the incident energy to which workers or equipment may be exposed.

This creates a genuine engineering tension. Selectivity favours allowing the downstream device time to operate. Arc-flash risk reduction often favours faster clearing.

Modern systems can use zone-selective interlocking, maintenance modes, differential protection or other techniques to reduce this conflict. The correct solution depends on the installation and standards. There is no universal setting that maximises both continuity and minimum fault duration simultaneously.

Differential protection changes the geometry of selectivity

Differential protection compares current entering and leaving a defined zone. Under normal load and external faults, the currents should balance within expected error. An internal fault produces a difference that can trigger fast isolation of that zone.

This creates selectivity through spatial definition rather than only time grading. Busbar differential protection can clear a bus fault quickly without waiting through several layers of overcurrent delay. Transformer differential protection can isolate internal transformer faults selectively.

The price is additional current transformers, relay logic, engineering and testing. Speed and selectivity often require more information about where the fault is.

Current transformers are part of protection truth

Protective relays often do not measure primary current directly. Current transformers reproduce the current at a safer scale.

If the CT saturates badly during a high fault, is wired incorrectly, has unsuitable ratio or class, or has a polarity problem, the relay’s picture of the fault can be distorted.

SP Group’s connection handbook specifies CT requirements for particular incoming-protection applications. Again, the public lesson is architectural: a protection algorithm can be correct and still fail if the measurement feeding it is wrong.

Protection settings are executable assumptions

A setting file is not just documentation.

It encodes assumptions about load current, fault current, device hierarchy, cable limits, transformer behaviour, generator contribution and the time another protective device needs to act.

When the network changes, those assumptions can become stale even though the relay still displays the same numbers. Protection management therefore needs change control.

A new transformer can silently destroy old selectivity

Suppose a building replaces an old transformer with a larger unit or changes transformer impedance. The maximum fault current at downstream boards can rise.

The existing breakers may still have adequate breaking capacity. That does not prove their previous selectivity limit still exceeds the new prospective fault current.

A capacity upgrade can therefore create a protection-coordination regression without changing a single downstream breaker.

Parallel transformers change more than capacity

Closing a bus-tie or operating transformers in parallel can increase fault level substantially. It can also create alternative current paths and change which protection devices contribute to a fault.

A scheme that is selective with the bus split may behave differently with the bus coupled. Both states need study if both are allowed operating conditions.

This is one reason protection engineers ask for operating scenarios, not only a one-line diagram frozen in one normal state.

Generator operation creates a second fault-current world

A standby generator can supply much lower short-circuit current than the utility network because generator subtransient reactance and control behaviour limit the available fault.

That can create the opposite problem. Protection that operates quickly and selectively under utility supply may become slow under generator supply because the fault current no longer reaches the expected pickup threshold.

Schneider’s current Electrical Installation Guide explicitly notes that selectivity should be checked for different sources such as grid and generator. The broader rule is critical: a protection design is only as complete as the operating modes it has actually studied.

Multiple sources make direction matter

In networks with generators, solar inverters, battery energy storage, parallel incomers or meshed distribution, fault current may arrive from more than one direction.

Simple radial grading assumptions can break. Directional relays, differential schemes, source-specific setting groups or other strategies may be needed.

The shift is conceptual: protection can no longer ask only “how much current?” It may also need to ask “from which direction, under which source configuration, and which zone should own this event?”

Inverter-based sources complicate fault signatures

Traditional synchronous machines can contribute large fault currents with characteristic decay. Power-electronic inverters often limit current actively and may behave according to control software and grid-code requirements.

As buildings add solar PV and battery systems, protection studies increasingly need to understand what those sources actually contribute during faults and how their protection coordinates with conventional devices.

The old assumption that every source produces a very large current until a breaker trips is becoming less universal.

Protection selectivity is a topology problem

Electrical topology describes how sources, buses, breakers, cables and loads are connected.

Open one tie breaker and the fault path changes. Close another and the path changes again. Transfer to generator and the source changes. Island a microgrid and the whole fault-current environment can change.

Protection selectivity therefore belongs to system state. A set of settings can be “correct” only relative to the topology and source assumptions under which they were designed.

Automatic transfer can change protection faster than a person can think

Automatic transfer schemes can move loads from utility to generator, from one incomer to another or between buses within seconds.

If protection needs different settings in the new configuration, the system may need setting groups or coordinated transfer logic rather than relying on an operator to reconfigure relays manually after the event.

This is where protection engineering meets automation. The safe setting has to follow the electrical state reliably.

Selectivity and redundancy solve different failure questions

Selectivity limits the outage created by one fault.

Redundancy provides another path or source when an important component is unavailable.

A building can have redundant generators and still suffer an unnecessarily broad trip if protection is poorly coordinated. It can have perfect selectivity and still lose a critical load if there is no alternative supply after the correctly isolated feeder fails.

Resilient power systems usually need both containment and alternative capacity.

Selectivity and fault tolerance meet at the outage boundary

Fault tolerance asks whether the larger service can continue when one component fails. Protection selectivity helps define how large “one component” becomes electrically.

If a local feeder fault trips the main incoming breaker, the effective failed unit is the whole installation. If the feeder alone trips, the failed unit remains the feeder.

This is why protection is not merely an electrical safety subsystem. It helps define the blast radius of infrastructure failure.

A data centre example: one rack PDU fault should not become one hall outage

Imagine a fault downstream in one rack power-distribution branch. The ideal protection sequence isolates the affected branch while upstream busways, UPS outputs and unrelated racks remain supplied, subject to the facility’s architecture.

If an upstream breaker trips unnecessarily, redundancy may be forced to carry a much larger load than the original fault required. The site can move from N+1 comfort to degraded state because of protection behaviour rather than physical damage.

The lesson generalises: selective fault isolation preserves reserve capacity for the failures that truly need it.

A hospital example: unrelated clinical spaces should not inherit one local fault

Hospitals divide power by essentiality, source and clinical function. A local electrical fault can occur in a non-critical branch while other areas still depend on power for medical equipment, lighting, communications and environmental control.

Selectivity helps keep the electrical response proportional to the physical fault. Where safety-services standards require specific coordination, the need becomes formal rather than merely operational.

The important public idea is not that hospitals never lose power. It is that protection architecture should avoid manufacturing extra clinical risk from an unrelated electrical event.

A high-rise example: one tenant fault should not erase the vertical city

A tall building contains many electrically dependent systems: lifts, pumps, smoke-control systems, access control, lighting, communications, tenant loads and building-management systems.

If one tenant distribution fault causes an upstream trip, the outage can cross ownership and functional boundaries. People far from the fault experience the consequence.

Selectivity keeps the electrical hierarchy aligned with the building hierarchy: local faults should remain local where safe and technically feasible.

A tunnel example: protection must preserve the systems that manage the incident

Transport tunnels depend on lighting, ventilation, communications, drainage and control systems. Some loads may themselves be safety services.

A local electrical fault is already an abnormal event. If protection unnecessarily removes unrelated safety systems, the protection system can make incident management harder.

This is why international guidance treats selectivity as especially important where safety services and critical infrastructure are involved.

Motor starting creates a benign current that protection must tolerate

Motors can draw high inrush current during starting. Transformers have magnetising inrush. Capacitor banks and power-electronic loads can create transient currents.

Protection must distinguish these expected events from faults sufficiently well to avoid nuisance trips. That means pickup settings and delays are influenced not only by fault discrimination but also by normal operating transients.

Selectivity is therefore nested inside a larger classification problem: normal, abnormal-but-tolerable, and dangerous conditions must not be confused.

Nuisance tripping destroys trust in protection

A breaker that trips frequently without a dangerous condition creates pressure for operators to reset repeatedly, increase settings casually, bypass alarms or blame the protection system.

This can be the first step toward a serious failure. The correct response to nuisance operation is diagnosis: load profile, transient current, wiring condition, device health, harmonic effects, leakage, coordination and actual trip cause.

Good protection earns trust by being sensitive to real faults and quiet during legitimate operation.

Trip records are evidence, not just alarms

Electronic trip units and relays can record event current, fault type, timestamps, waveform information, pickup element and breaker status.

After an outage, those records can answer a crucial question: did the protection operate according to the coordination study?

A system that was selective on paper but trips upstream in the field needs reconciliation. Perhaps the fault current exceeded the study assumption. Perhaps settings changed. Perhaps the downstream breaker failed. Perhaps the event was a different fault type. Protection records create the return path from real fault to design model.

Commissioning is where selectivity leaves the study and enters the switchboard

A coordination study can specify the correct settings.

Commissioning checks whether those settings were actually entered into the correct devices, whether CT ratios and wiring are correct, whether trip circuits operate, whether breakers open, and whether interlocking or communications behave as designed.

SP Group’s current handbook explicitly links protection responsibility with specification, setting and commissioning. The sequence matters. A correct design that is commissioned incorrectly becomes an incorrect installation.

Primary injection tests more of the chain

Primary injection drives substantial current through the primary path so CTs, relays or trip units and breakers can be tested together, depending on the test arrangement.

Secondary injection applies simulated signals to a relay or trip unit without reproducing the entire primary current path.

Both have value. The important systems idea is test coverage. A test that proves the relay algorithm does not automatically prove the CT polarity, breaker trip coil, wiring and mechanism. Engineers choose test methods according to what part of the protection chain needs evidence.

Trip-time measurement is the reality check on time grading

If selectivity relies on a downstream device clearing within a certain time and an upstream device waiting longer, actual operating time matters.

A sticky breaker mechanism can add delay. A trip coil can be weak. Lubrication can degrade. Stored-energy mechanisms can age.

Maintenance therefore protects coordination indirectly. The protection curve assumes a device that behaves within its specified operating envelope.

A maintenance setting can become an operating hazard

Some systems include maintenance modes that temporarily lower instantaneous trip thresholds to reduce arc energy while personnel work near energised equipment.

If the maintenance setting remains active afterward, normal selectivity can change. If it is not activated when required, arc risk may be higher than expected.

This is another example of protection state needing explicit operational control. The setting group is part of the live electrical topology.

Protection changes require configuration management

Who is allowed to change relay settings?

Where is the approved settings file?

How is a field change recorded?

Does the one-line diagram still match the switchboard?

Has the coordination study been updated after a new source, cable or breaker was added?

Protection systems become unreliable when configuration drift separates the engineered model from the installed system.

Manufacturer selectivity tables are powerful evidence—with boundaries

Manufacturers test combinations of their breakers and publish selectivity or discrimination tables. These can show verified selectivity limits beyond what a simple time-current plot would reveal, especially in current-limiting regions.

The table applies to the specific device families, ratings, trip units and conditions stated. A designer should not casually transfer a result to a different breaker generation or cross-brand combination.

Evidence is strongest when the installed catalogue numbers and settings match the tested combination exactly.

Cross-brand coordination needs stronger proof

Electrical installations often contain equipment from multiple manufacturers after years of expansion and replacement.

Time-current curves may support some coordination analysis, but high-current energy selectivity can depend on device interactions that are not reliably inferred from generic curves.

When manufacturer-tested combination data do not exist, the claim should become more conservative, not more confident.

The coordination study must know what is actually installed

An old study may list a breaker that was replaced five years ago.

The replacement can have the same ampere rating and a different instantaneous response. The maintenance team may consider it equivalent. The selectivity study may not.

Asset identity therefore matters. Protection coordination depends on model, trip unit, firmware where relevant, plug rating, settings and upstream/downstream relationships.

A one-line diagram is the map of protection ownership

A good single-line diagram shows sources, transformers, buses, breakers, cables and major loads in a compressed electrical map.

Protection engineers use it to understand series relationships and fault paths. Operators use it to understand what will be de-energised if a breaker opens.

If the one-line diagram is stale, the protection study can be logically perfect and physically wrong.

Coordination studies are decision documents, not decorative reports

A protection study should affect device selection, settings, breaker ratings, arc-flash controls, cable protection, operating modes and commissioning.

If a report is produced after equipment has already been purchased and no changes are allowed, it risks becoming a compliance narrative rather than a design tool.

The right time to discover that two breakers cannot discriminate is before the switchboard is frozen.

Protection selectivity and arc-flash studies should not live in separate universes

Coordination studies often reward upstream delay. Arc-flash studies often reward faster clearing. Equipment protection may impose another set of limits.

Optimising each study independently can create conflict. The final settings need to reconcile continuity, equipment protection, personnel risk and source conditions.

That reconciliation is professional judgement supported by analysis—not a single automatically generated curve.

Selective coordination is really consequence containment

Electrical language can hide the human purpose.

“Upstream breaker remains closed” means a lift can keep moving. A pump can keep running. A server can remain powered. A corridor can stay lit. A laboratory can preserve an experiment. A tenant on another floor may never know the fault occurred.

Selectivity is therefore a method for containing consequences at the same scale as the originating electrical failure.

Worked case 1: final-circuit fault with good selectivity

Consider a hypothetical office floor. A main distribution board feeds a floor distribution board. The floor board feeds a pantry socket circuit.

A damaged appliance creates a short circuit on the pantry circuit. Fault current flows through the main breaker, floor feeder breaker and final circuit breaker.

The final breaker detects the high current and opens within its verified operating region. The feeder breaker also sees the event but its coordinated characteristic keeps it closed. The main incoming breaker remains closed.

Result: pantry circuit goes dark. Office workstations, lighting and neighbouring circuits stay supplied. The fault is investigated locally. Protection has matched outage scale to fault scale.

Worked case 2: the same fault with failed selectivity

Now change one assumption. The prospective short-circuit current is higher than the selectivity limit between the final breaker and floor feeder.

Both enter instantaneous operation. The floor feeder trips with the final breaker.

The fault itself has not grown. The protection consequence has. Every circuit on the floor board loses power.

This is why outage size cannot be diagnosed from fault size alone.

Worked case 3: the downstream breaker fails

The final circuit breaker receives the trip command but its mechanism fails to open.

The fault current persists. After the designed backup delay, the feeder breaker opens. The outage is now larger.

From the occupant’s perspective, this looks like poor selectivity. From the protection engineer’s perspective, it may be successful backup protection after local isolation failed.

The event record and breaker inspection are needed to tell the difference.

Worked case 4: grid supply is selective, generator supply is too weak

A building is selective under utility supply. The utility source can deliver a strong downstream fault current that makes the final breaker operate rapidly.

During a blackout, the same board is supplied by a standby generator. The generator’s fault current is lower. The final breaker now sits in a slower part of its curve.

Fault clearing may still occur, but later than expected. Coordination and disconnection-time requirements must be rechecked for the generator state.

One physical installation has two electrical personalities.

Worked case 5: the bus tie closes

Two transformers normally feed separate bus sections. A bus-tie breaker is usually open.

During maintenance, the tie closes and one transformer supplies both sections—or both sources operate in parallel, depending on the permitted scheme.

Fault levels and current paths change. A breaker pair that was selective with the bus split can lose coordination.

Operating procedures therefore belong inside the protection study, not outside it.

Worked case 6: one setting changed in the field

A maintenance contractor raises the instantaneous pickup of one downstream breaker to stop nuisance trips, without updating the study.

The nuisance problem appears solved.

The next high-current fault remains energised longer or is cleared by an upstream breaker. The local operational fix has changed the protection hierarchy.

This is why settings are controlled engineering parameters, not user preferences.

Worked case 7: the replacement breaker is “the same rating”

An obsolete 250 A breaker is replaced with a modern 250 A breaker from another product family.

Load carrying is fine. Breaking capacity is adequate. The maintenance team closes the job.

But the original selectivity table applied to the old breaker combination. The new instantaneous characteristic overlaps the upstream device differently.

Functional equivalence in ampere rating did not imply coordination equivalence.

Failure mode: assuming bigger breaker means slower breaker

A larger frame or current rating does not guarantee longer operating time at every fault current. Instantaneous elements, trip-unit settings and current-limiting behaviour matter.

Protection hierarchy must be proved through device data, not guessed from physical size.

Failure mode: checking only one fault current

Two devices can be selective at 3 kA and non-selective at 15 kA. A study that checks only a nominal point can miss the region where curves overlap or instantaneous protection takes over.

The relevant range extends from minimum faults that must still operate protection to maximum faults that challenge breaking capacity and discrimination.

Failure mode: checking only maximum fault current

Minimum fault current matters too. Under generator operation, long cable runs or high-impedance faults, current can be too low to enter fast protection regions.

A system can survive the biggest fault on paper and still clear a smaller remote fault too slowly.

Failure mode: confusing equipment rating with coordination

Breaking capacity tells whether a breaker can safely interrupt a specified fault level under defined conditions. Selectivity tells which breaker interrupts first.

Both devices can have adequate breaking capacity and still trip together unnecessarily.

Failure mode: forgetting earth faults

A study can coordinate phase overcurrent perfectly while residual-current or earth-fault protection overlaps.

The complete protection review asks which fault families each device detects and coordinates each relevant function.

Failure mode: forgetting the generator

Emergency power is often the state in which protection performance matters most. Yet it can be the state with the most different fault current.

Coordination needs to be demonstrated for the source modes that the building is allowed to operate.

Failure mode: treating a manufacturer table as universal

A selectivity table is evidence for the devices and conditions stated. Change the upstream breaker, trip unit, rating, downstream device or sometimes setting, and the result can change.

The table should be traced to installed asset identity, not remembered as folklore.

Failure mode: delaying upstream protection beyond equipment withstand

Time grading can look elegant until the busbar, cable or breaker short-time withstand is checked.

Continuity has no value if the delay turns a recoverable fault into equipment damage.

Failure mode: forgetting arc-flash consequences

A deliberate delay that preserves selectivity can raise incident energy. Protection design must reconcile the needs rather than optimise one metric in isolation.

Where faster schemes such as differential protection or zone-selective interlocking can provide both selectivity and fast clearing, they may be valuable precisely because they reduce this conflict.

Failure mode: no one owns setting changes

If operations, maintenance contractors and project teams can all alter trip settings without one authoritative record, the protection study becomes historical fiction.

Ownership means approved values, access control, change records, post-change testing and updated drawings or studies.

Failure mode: protection works but indication lies

A breaker may trip correctly while the building-management system labels the wrong device or reports stale status. Operators then reset the wrong circuit or misunderstand the outage boundary.

Protection action and operational indication form separate evidence chains. Both matter during recovery.

Failure mode: re-energising before the fault is understood

A selective trip localises the fault. It does not prove the fault has disappeared.

Repeatedly re-closing a breaker into an unresolved short circuit can stress equipment and expose personnel. Restoration should follow competent diagnosis and the applicable operating procedure.

The receiver is the person who never notices the fault

The best evidence of selectivity can be absence.

A worker on another floor keeps typing. A pump continues. A server remains online. A lift group stays available. Nobody outside the faulted branch knows anything happened.

That invisibility is not luck. It is the operational consequence of a protection system that contained the event.

The second receiver is the engineer who must explain the trip afterward

After the event, engineering needs to reconstruct:

• what fault occurred;
• which devices detected it;
• which device tripped first;
• whether backup protection operated;
• what current actually flowed;
• whether settings matched the approved study;
• whether the outage boundary was expected.

Protection records turn a mysterious blackout into a test of the design model.

The third receiver is the future designer

Every trip teaches something about actual system behaviour.

If field evidence is preserved, the next upgrade can use real fault levels, device performance and failure history. If records disappear, future designers repeat old assumptions.

Protection engineering improves when operating events become institutional memory rather than isolated incidents.

Primary-school lens: one bad lamp should not darken the whole school

Imagine a school with ten classrooms.

One classroom has a faulty lamp. Would it make sense to switch off electricity to all ten classrooms to make the faulty lamp safe?

Sometimes a bigger shutdown is necessary. But if the system can safely switch off only the faulty classroom, everyone else can continue.

That is the child-sized idea behind selectivity: stop the problem where it is, without spreading the stop farther than needed.

Secondary-school lens: three breakers racing on one current

Draw three breakers in series and one short circuit downstream.

The same fault current passes through all three until interruption. Ask students why the smallest breaker does not automatically win.

Introduce thresholds and time delays. One device can react at 0.02 seconds, another at 0.10 seconds and another later—provided the equipment can withstand the wait.

The lesson connects circuits, current and timing to systems engineering.

JC lens: protection as constrained optimisation

At JC level, frame protection coordination as optimisation under competing constraints.

Minimise outage scope and fault-clearing time subject to:

• downstream device operating successfully;
• upstream device protecting its own zone;
• cable thermal limits;
• switchgear short-time withstand;
• breaking capacity;
• minimum fault current;
• multiple source states;
• shock-protection disconnection requirements;
• acceptable arc-energy exposure.

The problem is no longer “choose the biggest breaker.” It is design of a hierarchy whose timing remains valid over many physical states.

Thought experiment: perfect selectivity, no backup

The upstream breaker waits forever because selectivity is valued above all else.

The downstream breaker fails mechanically.

The fault remains energised.

Continuity design succeeds until the very moment protection needs redundancy.

The thought experiment shows why selectivity without backup is incomplete.

Thought experiment: perfect backup, no selectivity

Every protective device trips instantly for every downstream fault.

Faults are cleared.

The entire building blacks out each time.

Safety exists, but availability is needlessly poor. The system has backup everywhere and discrimination nowhere.

Thought experiment: selective on Monday, non-selective on Tuesday

Nothing breaks overnight.

On Tuesday, the bus tie is closed for maintenance.

The fault level increases. The same breaker settings now overlap in the instantaneous region.

The protection did not degrade. The network state changed.

Thought experiment: every curve is correct, the CT polarity is wrong

The engineer models the system perfectly.

During installation, a CT secondary is wired with incorrect polarity in a differential scheme.

The protection logic receives a false picture of current balance.

Analysis succeeds.

Commissioning fails.

Thought experiment: the study is perfect and the breaker is slow

The time-current coordination assumes a breaker clears within its specified mechanical opening time.

Years of poor maintenance make the mechanism sluggish.

The electrical relay responds correctly. Physical interruption arrives late.

Protection is an electromechanical chain; the curve is only as real as the equipment that executes it.

The fifteen-question protection-selectivity test

• Topology: What sources, buses and ties can be connected in each permitted operating state?
• Fault map: What are the minimum and maximum prospective fault currents at each important node?
• Ownership: Which protective device is primary for each zone?
• Overload: Are long-time functions coordinated?
• Short circuit: Are short-time and instantaneous functions coordinated?
• Earth fault: Are earth-fault or residual-current functions coordinated separately?
• Total or partial: What is the verified selectivity limit for every critical device pair?
• Withstand: Can upstream equipment survive intentional delay?
• Cables: Do conductor thermal limits remain protected?
• Arc energy: Does grading create unacceptable incident-energy consequences?
• Backup: What trips if the downstream breaker fails?
• Alternate source: Does coordination still work on generator, parallel source or island mode?
• Commissioning: Were CTs, settings, trip circuits and interlocks tested end to end?
• Change control: Does the current study match the actual installed breakers and settings?
• World return: When a real fault occurs, do event records show the outage stopped at the boundary the study predicted?

A 30-question deeper audit for engineers, owners and facilities teams

1. Is the latest single-line diagram verified against the physical switchboards?
2. Are breaker catalogue numbers, frame sizes, sensor ratings and trip units recorded?
3. Are all adjustable long-time, short-time, instantaneous and earth-fault settings documented?
4. Do seals or access controls prevent casual changes?
5. Are source impedances based on current utility and transformer data?
6. Has motor contribution been included where material?
7. Are generator subtransient conditions and control limits represented?
8. Are inverter-based sources represented realistically rather than as synchronous machines?
9. Are normal-open ties included in contingency studies if they can be closed?
10. Are maintenance operating states included?
11. Does the study distinguish protection selectivity from cascading?
12. Are manufacturer selectivity tables current for the installed product generation?
13. Are cross-brand combinations supported by defensible evidence?
14. Are partial-selectivity limits compared with actual maximum fault current?
15. Are minimum fault currents checked against pickup and disconnection requirements?
16. Are RCDs and earth-fault relays coordinated independently of phase overcurrent?
17. Are safety-service circuits treated according to applicable requirements?
18. Are short-time withstand ratings checked for every intentional delay?
19. Are cable damage curves or thermal withstand checked?
20. Are transformer through-fault limits checked where relevant?
21. Are relay communication paths supervised?
22. Is the failure mode of zone-selective-interlocking communications understood?
23. Is breaker-failure logic tested where provided?
24. Are primary or secondary injection tests selected to cover the intended chain?
25. Are mechanical breaker opening times maintained within specification?
26. Are event logs time-synchronised sufficiently for sequence-of-event analysis?
27. Does the building-management system display the correct breaker status and labels?
28. Is every field settings change incorporated into the authoritative study?
29. Are post-fault investigations fed back into maintenance and design?
30. Can the owner explain, in plain language, what should go dark for each major fault zone?

Why Singapore works does not mean every electrical installation is perfectly selective

Real installations contain legacy equipment.

They are expanded.

Fault levels change.

Devices age.

Maintenance introduces replacements.

Some device pairs will be only partially selective. Some operating modes create unavoidable compromises. Some old boards cannot support sophisticated interlocking. Some faults need broader backup isolation.

The serious claim is narrower:

Singapore’s electrical-connection framework assigns protection specification, settings and commissioning to qualified responsibility, while modern protection engineering provides established methods for coordinating devices so a fault is cleared by the smallest appropriate protective zone wherever the installation, equipment and operating conditions allow it.

The system does not work because every fault is prevented.

It works better when faults are prevented from becoming larger outages than the physics requires.

Frequently asked questions

What is circuit breaker selectivity?

It is coordination between protective devices so a downstream fault is cleared by the device closest to that fault while upstream devices remain closed within the verified selectivity range.

What is the difference between selectivity and discrimination?

They are commonly used as equivalent terms in protection engineering, with wording varying by region, standard and manufacturer.

What is total selectivity?

Total selectivity means the coordinated device pair remains selective throughout the stated relevant fault-current range under the applicable definition and conditions.

What is partial selectivity?

Partial selectivity means discrimination is verified only up to a stated current. Above that limit, upstream and downstream devices may both operate.

What is current selectivity?

Current selectivity separates the pickup thresholds of upstream and downstream devices so the downstream protection responds to lower fault or overcurrent levels first.

What is time selectivity?

Time selectivity deliberately delays upstream protection so a downstream device has time to clear a fault first, subject to equipment withstand, cable protection and other constraints.

What is energy selectivity?

Energy selectivity uses the high-speed current-limiting and let-through-energy behaviour of coordinated devices, usually supported by manufacturer test data.

What is zone selective interlocking?

It is a logic-assisted protection method in which downstream devices communicate fault-zone information upstream so upstream protection can wait for a downstream fault but operate faster for a fault in its own zone.

Is cascading the same as selectivity?

No. Cascading or backup ratings concern combined short-circuit interruption capability. Selectivity concerns which protective device opens.

Why can two correctly rated breakers still trip together?

Because rating for load and breaking capacity does not guarantee separation of their trip characteristics. Their instantaneous or other operating regions can overlap at the actual fault current.

Why does generator operation need a separate check?

Generator fault current is often lower and behaves differently from utility fault current, so protection can operate more slowly or coordinate differently.

Who is responsible for protection settings in Singapore customer installations?

SP Group’s current electricity-connection handbook states that the Licensed Electrical Worker of the customer installation is responsible for proper specification, setting and commissioning of the protection system at customer incomers, within the applicable connection requirements.

Can I copy breaker settings from this article?

No. Protection settings are installation-specific and depend on source conditions, equipment, cable protection, standards, utility requirements and engineering studies. This article explains mechanism and decision logic only.

Sources and further reading

• SP Group — Electricity Works resources and current electricity-connection guidance.
• SP Group — How to Apply for Electricity Connection, January 2026.
• Schneider Electric Electrical Installation Guide — Coordination between circuit breakers.
• ABB — International standard requirements for selectivity and IEC 60947-2 coordination context.
• eduKateSG — How HDB Electrical Distribution Installation and Energisation Work.
• eduKateSG — How Electricity Grids Work.

Final thought: civilisation is partly the art of failing at the right size

Electricity is powerful because one network can serve thousands of things at once.

That interconnectedness creates the risk that one failure can travel.

Protection selectivity is a quiet answer.

Do not ask the whole network to prove that one circuit has failed.

Let the nearest competent boundary act.

Let the healthy parts stay healthy.

Let backup protection wait nearby in case the first boundary fails.

Then use the real event to test whether the map, settings and physical system still agree.

That is why Singapore works, in another quiet way:

a reliable city does not merely try to prevent failure; it designs boundaries so the unavoidable failure of one small part does not automatically become the unnecessary failure of everything connected to it.