Blackouts, Cascading Failures and Restoration

Learning objectives

By the end of this lesson you should be able to:

Explain what causes electricity blackouts.
Understand how relatively small disturbances can develop into widespread cascading failures.
Describe the role of protection systems during major disturbances.
Explain what happens after a blackout occurs.
Understand why restoring an electricity system is a complex engineering process.
Appreciate why restoration capability is an important form of system value.

Introduction

Electricity systems are designed to be highly reliable.

Most consumers experience uninterrupted electricity for almost the entire year.

Nevertheless, no electricity system is completely immune to failure.

Extreme weather, equipment faults, cyber incidents, operational errors or unexpected combinations of events can occasionally trigger widespread outages.

When these occur, the challenge is no longer simply balancing supply and demand.

Instead, engineers must prevent the disturbance from spreading and, if necessary, rebuild the electricity system from almost nothing.

Understanding how blackouts occur—and how systems recover from them—is one of the most fascinating aspects of power system engineering.

What is a blackout?

A blackout occurs when electricity supply is interrupted for consumers.

Blackouts vary enormously in scale.

A blackout may affect:

A single street.
A neighbourhood.
An entire city.
A whole country.
Multiple interconnected countries.

Most blackouts are local and relatively short.

Large-scale system blackouts are extremely rare but can have severe economic and social consequences.

Blackouts rarely have a single cause

Many people imagine that blackouts occur because:

"A power station stopped working."

In reality, major blackouts are usually the result of several events occurring in sequence.

For example:

Extreme weather damages transmission equipment.
A transmission line disconnects.
Power flows redistribute onto neighbouring circuits.
Additional lines become overloaded.
Protection systems disconnect overloaded equipment.
Generation becomes separated from demand.
Frequency falls rapidly.
Further generators disconnect.
Parts of the network lose synchronism.

Each individual event may be manageable.

Together they can produce a much larger disturbance.

Protection systems

It may seem strange that equipment deliberately disconnects during a fault.

Surely this makes the situation worse?

In fact, protection systems exist to prevent much greater damage.

Protection relays continuously monitor the network.

If dangerous conditions occur, they automatically disconnect equipment to protect:

Generators.
Transformers.
Transmission lines.
Consumers.

Without protection systems:

Equipment could suffer permanent damage.
Faults could spread much further.
Restoration could take weeks instead of hours.

Protection systems sacrifice part of the network to protect the whole system.

Cascading failures

Sometimes one disturbance creates another.

That disturbance creates another.

Then another.

This process is known as a cascading failure.

Consider a simplified example.

A transmission line trips unexpectedly.

The electricity flowing through that line must immediately find alternative paths.

Neighbouring lines now carry additional power.

One of those lines exceeds its thermal limit.

Protection disconnects it.

The remaining lines now carry even more power.

Further overloads occur.

Within seconds, what began as a single equipment fault has spread across a large part of the network.

This is a cascading failure.

Why cascading failures happen

Electricity systems are highly interconnected.

Every generator, transmission line and consumer influences the behaviour of the wider network.

Because electricity automatically follows physical laws, changing one part of the network immediately affects many others.

This interconnectedness provides enormous reliability under normal conditions.

However, it also means disturbances can propagate rapidly if not controlled.

Frequency collapse

One common mechanism behind major blackouts is frequency collapse.

Suppose several large generators disconnect unexpectedly.

Generation immediately becomes less than demand.

Frequency begins to fall.

Initially:

Inertia slows the decline.

Then:

Frequency response activates.

If the imbalance is too large:

Frequency continues falling.

Eventually:

Protection systems disconnect additional generators.
Some consumer demand may be automatically disconnected.

If frequency falls below safe operating limits, large parts of the electricity system may shut down completely.

Voltage collapse

Not every blackout begins with frequency.

Some begin with voltage problems.

As electricity demand increases, voltage levels may gradually decline.

Generators and other equipment attempt to provide additional reactive power to support the voltage.

Eventually these resources become exhausted.

Voltage falls further.

Motors begin drawing higher currents.

Network loading increases.

Equipment disconnects.

The voltage falls even further.

This positive feedback process is known as voltage collapse.

Like frequency collapse, it can develop surprisingly quickly once critical limits are reached.

Islanding

Sometimes the electricity network separates into several independent sections.

This is known as islanding.

Each island must immediately balance its own generation and demand.

Some islands may contain:

Sufficient generation.
Stable frequency.
Secure operation.

Other islands may contain:

Too little generation.
Excessive demand.
Rapid frequency decline.

Some islands survive.

Others shut down.

Following the disturbance, surviving islands may later be reconnected once stability has been restored.

Why blackouts are difficult to prevent completely

Power engineers often talk about designing systems to withstand credible contingencies.

Examples include:

A transmission line failure.
A generator outage.
A transformer fault.

These events are anticipated during planning.

However, extremely unusual combinations of multiple failures cannot always be prevented economically.

There is always a balance between:

Cost.
Reliability.
Risk.

The objective is not to eliminate all possibility of failure.

Instead, it is to make major failures extremely unlikely while ensuring rapid recovery if they do occur.

What happens after a blackout?

Many people imagine that electricity simply needs to be switched back on.

Unfortunately, restoration is far more complicated.

A fully de-energised electricity network cannot simply restart itself.

Many generators require electricity before they can begin generating.

For example, large thermal power stations need electricity for:

Pumps.
Fans.
Cooling systems.
Control systems.
Fuel handling equipment.

If the network is already blacked out, where does that electricity come from?

This is one of the central challenges of power system restoration.

Black start capability

Some generating resources are capable of starting without an external electricity supply.

This is known as black start capability.

Examples may include:

Hydroelectric stations.
Battery energy storage.
Small diesel generators.
Some gas turbines.

These resources provide the initial electricity needed to restart larger generating stations.

Without black start resources, restoring the electricity system would be much more difficult.

Restoring the electricity system

Restoration usually follows a carefully planned sequence.

First:

Small black start generators energise part of the network.

Additional generators are started.

Transmission lines are progressively energised.

Voltage and frequency are carefully monitored.

Demand is reconnected gradually.

More generation is synchronised.

Eventually separate parts of the network are reconnected.

Finally:

The complete electricity system returns to normal operation.

Depending upon the size of the disturbance, this process may take anywhere from minutes to many hours.

Why restoration is slow

Consumers often ask:

"Why can't engineers just reconnect everyone immediately?"

The answer is that restoring electricity too quickly can create new disturbances.

Large blocks of demand may:

Cause excessive voltage drops.
Overload equipment.
Destabilise frequency.
Trip generators.

Restoration therefore proceeds cautiously.

Every reconnection changes the balance of the system.

Engineers must continually verify that the system remains stable before restoring additional consumers.

Restoration capability is valuable

Consider two generators.

Generator A produces large quantities of energy every year.

Generator B produces relatively little energy.

However, Generator B has black start capability.

Following a major blackout, Generator B becomes essential.

Its contribution to system reliability is therefore much greater than annual energy production alone would suggest.

This illustrates another recurring theme of this module:

Different resources provide different forms of system value.

Some provide energy.

Others provide flexibility.

Others provide reserves.

Some provide restoration capability.

All contribute to reliability.

Why this matters for electricity markets

Fortunately, major blackouts are rare.

As a result, restoration capability may only be required a handful of times over many decades.

Nevertheless, when it is needed, it becomes indispensable.

Electricity markets increasingly recognise this by procuring black start services separately from ordinary energy production.

Generators providing restoration capability are therefore rewarded not because they generate large quantities of electricity every day, but because they provide an essential insurance service for the entire electricity system.

A key insight

Perhaps the most important lesson is this:

Reliable electricity systems are designed not only to avoid failure, but also to recover from failure.

No engineering system can eliminate all risk.

The hallmark of a resilient electricity system is its ability to limit disturbances, prevent cascading failures where possible, and restore electricity quickly when outages occur.

Key takeaways

Blackouts are interruptions to electricity supply that may range from local outages to nationwide system failures.
Major blackouts are usually caused by a sequence of interacting events rather than a single failure.
Protection systems deliberately disconnect equipment to prevent more severe damage.
Cascading failures occur when one disturbance triggers further disturbances across the network.
Frequency collapse and voltage collapse are two common mechanisms leading to widespread outages.
Black start capability allows certain generators to restart without an external electricity supply.
Restoring an electricity system is a carefully controlled engineering process that may take many hours.
Restoration capability is an important form of system value and contributes directly to overall reliability.

Looking ahead

Throughout this module we have seen that electricity resources contribute many different forms of value.

Some provide energy.

Others provide capacity, flexibility, reserves, inertia or restoration capability.

In the final lesson, we bring these ideas together and explore how modern electricity markets attempt to recognise and reward these different forms of system value, and why this remains one of the central challenges in electricity market design.