Critical Infrastructure Duplication Requirements

Detailed Explanation With Case Laws

1. Introduction

Critical infrastructure duplication requirements refer to legal or regulatory requirements that important infrastructure should have backup, duplicate, redundant, or alternative systems so that an essential service can continue if the primary system fails.

In electricity law, duplication is closely connected with reliability, resilience, security and continuity of supply. For example, an electricity control centre may need a backup control facility, an important substation may require alternative supply arrangements, and critical communication systems may need independent backup channels.

The basic idea is simple: one failure should not bring down an essential service.

2. Meaning of Duplication and Redundancy

Duplication means having more than one system capable of performing an important function.

For example:

Primary electricity connection → Backup electricity connection

or:

Main control centre → Secondary control centre

or:

Primary communication network → Independent backup communication network

The purpose is to avoid a single point of failure.

Duplication does not always mean building an identical second facility. It can also involve:

alternative transmission routes;

reserve generating capacity;

backup transformers;

duplicate control systems;

emergency generators;

redundant telecommunications;

alternative fuel supplies; and

geographically separated facilities.

3. Duplication in Electricity Infrastructure

Electricity systems require redundancy because electricity supply must normally be maintained continuously.

Generation

System operators may maintain reserve generation so that failure of one generator does not immediately create a supply shortage.

Transmission

Transmission networks may be designed with alternative routes. If one transmission line fails, power can potentially be transferred through another route.

Substations

Important substations may require backup transformers or alternative arrangements to reduce the consequences of equipment failure.

Control Centres

System operators may maintain backup control facilities so that grid management can continue if the primary control centre becomes unavailable.

Communications

Electricity operators may use independent communication systems because loss of telecommunications can interfere with grid control.

4. Legal Purpose of Duplication

Duplication requirements generally pursue four objectives.

A. Continuity of Service

The most direct purpose is to maintain essential electricity services during failures.

B. Protection Against Cascading Failures

Redundancy can prevent a local failure from spreading through the wider electricity system.

C. Emergency Preparedness

Backup systems provide alternatives during natural disasters, cyber-attacks, equipment failures or other emergencies.

D. National and Energy Security

Major electricity infrastructure may have national-security importance. Redundancy therefore forms part of wider critical-infrastructure protection.

5. Proportionality of Duplication Requirements

Duplication can be expensive. Building two complete facilities instead of one may significantly increase infrastructure costs.

Therefore, regulation generally needs to consider:

the importance of the infrastructure;

probability of failure;

consequences of failure;

cost of redundancy;

availability of alternative arrangements;

technological options; and

the needs of electricity consumers.

A regulator does not necessarily need to require complete duplication everywhere. A risk-based approach may require stronger redundancy for particularly critical assets.

6. European and UK Approach

The EU's Critical Entities Resilience Directive (CER Directive 2022/2557) requires critical entities to adopt technical, security and organisational measures to improve resilience against various disruptive risks. These measures can include resilience arrangements and measures designed to reduce the consequences of incidents.

In the UK, electricity resilience is addressed through electricity-security regulation, network reliability requirements and cybersecurity frameworks. The UK's energy-sector cybersecurity strategy also recognises the importance of resilience, dependencies and protection of critical systems. (gov.uk)

Thus, duplication is generally part of a broader resilience framework, rather than an isolated legal requirement.

7. Relevant Case Laws

California Independent System Operator Corp. v FERC

This US litigation concerning electricity regulation illustrates the importance of system reliability and coordinated operation of interconnected electricity networks.

Its relevance to duplication is that electricity reliability cannot be achieved simply by protecting individual generators or lines. Operators and regulators must consider whether the wider system has sufficient alternatives when an important component fails.

FERC v Electric Power Supply Association (2016)

The US Supreme Court considered the Federal Energy Regulatory Commission's authority over demand-response participation in wholesale electricity markets.

The case is relevant because it demonstrates the importance of regulatory mechanisms that support the reliable and efficient operation of interconnected electricity markets. Reliability can be supported not only through physical duplication but also through alternative operational resources.

Hikvision USA, Inc. v FCC (D.C. Cir. 2024)

This case involved restrictions concerning communications equipment and critical infrastructure. The court examined the legal basis for government action concerning infrastructure-related security risks.

Its broader relevance is that security requirements imposed on infrastructure operators must have a proper legal foundation and rational connection with the identified risk.

8. Duplication and Cyber Resilience

Modern duplication requirements increasingly include digital redundancy.

For example, a critical electricity operator may need:

backup servers;

alternative communication links;

redundant control systems;

secure backup data;

separate recovery systems; and

independent operational technology.

This is important because a cyber-attack could compromise both a primary system and its backup if the two are connected in the same vulnerable network.

Therefore, effective resilience may require logical and physical separation, not merely two copies of the same system.

9. Challenges

Duplication requirements create several regulatory challenges.

Cost: Duplicate infrastructure can increase electricity-system costs.

Land and planning: Additional facilities may require land, planning permission and environmental assessment.

Maintenance: Backup systems must remain operational and regularly tested.

Cybersecurity: Poorly designed backup connections can create additional cyber vulnerabilities.

Coordination: Different network operators must ensure that backup arrangements work together.

10. Conclusion

Critical infrastructure duplication requirements are an important part of electricity-system resilience. Their purpose is to ensure that failure of one important component does not result in widespread loss of essential services.

Duplication can involve backup generation, alternative transmission routes, redundant substations, secondary control centres, emergency power and independent communication systems. Modern resilience law also extends the idea to digital and cybersecurity systems.

The most important legal principle is that duplication should be risk-based and proportionate. The higher the potential consequences of infrastructure failure, the stronger the justification for redundancy. In this way, duplication requirements help electricity systems remain reliable, secure and capable of recovering from major disruptions.