In short. Integrated critical-load architecture starts by classifying loads, then layers surge protection, voltage correction, UPS, generator and monitoring so no single failure drops the critical load. Redundancy only counts where failure paths are independent.
Step 1: classify loads
| Class | Example | Needs |
|---|---|---|
| Critical no-break | Servers, controls, life-support | UPS plus generator |
| Essential | Lifts, pumps, lighting | Generator with short break |
| Deferrable | Comfort loads | Shed during outage |
See load shedding and load list.
Step 2: layer the protection
- Surge protection. See surge protection.
- Voltage correction. See stabilisers.
- Isolation where noise or earth issues exist.
- UPS for no-break loads. See UPS.
- Generator with ATS. See architecture.
- Monitoring. See monitoring.
Step 3: hunt single points of failure
- One ATS, one breaker or one cable route.
- One battery string.
- One control power supply.
- One person who knows the procedure.
Redundancy needs independent failure paths. See N+1.
Step 4: maintenance and testing
Design bypasses so each part can be serviced without dropping the critical load, and schedule on-load tests. See AMC and load bank testing.
Illustrative example
A diagnostic hospital wing is classified, with imaging and monitors on UPS, lifts and pumps on the generator with short break, and comfort loads shed during outages. A review finds a single control power supply feeding ATS logic and adds a redundant supply.
Reliability thinking
A chain is as reliable as its weakest link. If the generator starts 98 times in 100 and the ATS transfers 99 times in 100, the combination works about 97 times in 100, assuming independence. Each added series element lowers the figure; each independent parallel path raises it. Use this simple arithmetic to see where a redundant element gives most benefit. The numbers above are illustrative, not data about any product.
Tiers of resilience
| Level | Typical arrangement |
|---|---|
| Basic | Single UPS, single generator, single ATS |
| Enhanced | N+1 UPS and generator, maintenance bypass |
| High | Two independent paths to dual-corded loads, tested regularly |
Choose the level in proportion to the cost of downtime.
Example: a clinic
- Class 1: operation-theatre lights and monitors on UPS plus generator.
- Class 2: lifts, pumps and medical air on generator with short break.
- Class 3: comfort loads shed during generator operation.
A review finds that both UPS units share one battery cabinet and one input breaker. Splitting these removes the common point.
Operational readiness
- Written procedures for failures.
- Trained staff on each shift.
- Spare parts and service contracts. See AMC.
- Regular on-load tests.
- Records and drills.
Reviewing the architecture
Review whenever loads, rules or equipment change. Update the single-line diagram, load classification, and test plan together. A documented architecture is easier to maintain, and to improve.
The master engineering question
What is the one failure that would take down the critical load, and what have we done about it?
What to send us
Send site classification and drawings. Send your application details.
Questions engineers ask
Do I need every layer?
No. Use layers that the risk justifies.
How do I prove redundancy?
Fault-test each path in a planned way.
Who owns the procedure?
Assign and train more than one person.
How often to review?
When loads change and at regular intervals.
Values are illustrative. Design needs a site study.