How Much Generator Redundancy Do Secure Facilities Need?

A secure facility's generator plant is sized for the real critical load: security electronics and door control, fire alarm and smoke control, housing ventilation and life-safety HVAC, control room conditioning, and supervision lighting. N+1 redundancy means losing the largest generator still leaves the emergency load carried. Automatic transfer switches pick up the load in seconds, UPS bridges the gap for electronics, and fuel storage covers multi-day outages — because a detention population can't be relocated while the utility restores service. The design includes the load-shedding sequence — what stays on, what drops, in what order — written into the controls, and test provisions that prove the system under real load. Emergency power in a locked facility isn't a code checkbox; it's the last line of defense for security, habitability, and control.

Load prioritization is the core discipline. I build the emergency load list with the facility operator, in priority order, with real wattages — not rules of thumb. Security and life-safety loads are non-negotiable; habitability loads get sized honestly; everything else sheds. The generator plant, transfer switches, and distribution are then sized for that defined load with N+1 redundancy, and the load-shedding controls execute the priority list automatically. Fuel and testing are the second discipline. Fuel storage calculated from the real emergency load profile over the required runtime, with refueling logistics planned for regional outages. Test provisions — load bank connections or building-load transfer — designed into the electrical system so the plant gets proven under load on a schedule. A generator that starts monthly but has never carried the building is untested where it matters.

Undersized plants and untested plants — the two classic failures. Both come from designing to a generic load estimate instead of the facility's real emergency profile, and from treating testing as someone else's problem. For secure-facility emergency power, here's what I require.

• Build the emergency load list with the operator in priority order, with real wattages
• Size the plant N+1 for that defined load — losing one generator must not drop the emergency system
• Write the load-shedding sequence into the controls; never improvise it during an outage
• Store fuel for multi-day runtime at the real emergency load, with refueling logistics planned
• Design test provisions in from the start and prove the plant under real load on schedule