Substation protection relay settings

Identifies substantive substation protection-relay settings and coordination records. Topic phrases are retained for discovery; enforcement requires a populated current, voltage, impedance, timing, or zone value, and high confidence also requires a substation, feeder, breaker, relay model, or device ID.

Type: regex
Engine: boost_regex
Confidence: medium
Confidence justification: Medium confidence requires a populated electrical or timing setting rather than relay terminology alone. High confidence adds a live device, feeder, breaker, or substation reference.
Detection quality: Topic false positive
Jurisdictions: global
Regulations: GDPR
Data categories: security
Scope: wide
Risk rating: 10
Platform compatibility: Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Degraded, Netskope: Unsupported

Pattern

(?is)\b(?:substation\s+protection\s+relay\s+settings|protection\s+relay\s+settings|distance\s+relay\s+settings|pickup\s+setting|trip\s+setting|relay\s+coordination\s+settings|IED\s+settings)\b

Corroborative evidence keywords

substation protection relay settings, substation, protection, relay, settings, critical, infrastructure, systems

Proximity: 300 characters

Should match

substation protection relay settings — Low-tier probe - topic without populated relay values
Protection relay settings: pickup 850 A, time delay 250 ms, and zone 1 reach 2.8 ohms — Medium-tier probe - populated relay values without a live device or site reference
Substation protection relay settings for feeder F12 at North Substation, relay SEL-411L: pickup 850 A and trip delay 250 ms — High-tier probe - populated settings with feeder, substation, and relay-model detail

Should not match

unrelated generic text without domain phrases — No relevant topic phrases present
placeholder value 12345 — Random text should not match topic-specific regex
protection relay substation — Generic word pair from old broad template should not match
The power-engineering textbook explains distance-relay coordination. — Educational relay theory without populated settings
Training example: substation protection relay settings for feeder F12, SEL-411L pickup 850 A — Explicit training content must not enforce

Known false positives

Grid standards, relay manuals, and protection-engineering courses discuss pickup, trip, distance, impedance, and coordination concepts without exposing deployed settings. Mitigation: Keep topic-only matches discovery-only and require a populated electrical or timing value for enforcement.
Worked examples can contain realistic feeder IDs, relay models, settings, and timing values. Mitigation: Reject explicit template, demo, tutorial, sample-data, and training-example framing from enforcing tiers.

References

https://www.legislation.gov.au/C2018A00029/latest/text
https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/ism