A substation is a grid facility that switches, transforms, protects, and controls electric power as it moves through the network. It may contain relays, breakers, gateways, sensors, and remote terminal equipment that keep power flowing safely and allow operators to monitor and adjust the system.
In cyber security, substations matter because they sit at the boundary between physical process control and digital communications. A weak remote-access path, an exposed gateway, or a poorly segmented engineering network can let an attacker observe operations, change settings, or disrupt protection logic. Defenders focus on asset inventory, strict access control, network segmentation, logging, and safe maintenance procedures so that routine support tasks do not become attack paths. In practice, securing a substation means protecting both the equipment in the yard and the data paths that reach it.