IEC 60909's Conservative Design Philosophy — Why 'Worst Case' Is the Right Answer for Protection Engineers

Ask a working engineer why IEC 60909 includes the voltage factor c, and you will frequently hear: “It’s just a safety factor — the real fault current is lower.” This answer is dangerously incomplete.

The voltage factor exists because the simplified equivalent voltage source method deliberately ignores several real-world conditions that increase fault current above what a naive calculation would predict. It is compensation, not conservatism. The distinction matters because it determines whether you treat the factor as negotiable or non-negotiable.

IEC 60909-0:2016, Clause 6.2, defines the equivalent voltage source as cU_n/√3 applied at the fault location. The standard explicitly states in Note 1 that this voltage source replaces all network feeders, generator voltages, and motor EMFs. The factor c accounts for:

• Voltage variations across the network (statutory limits typically ±10%)
• Transformer tap changer positions (a transformer set to +5% tap delivers higher fault current)
• Subtransient behaviour of generators and motors not explicitly modelled
• Load shedding transients that temporarily raise bus voltage before the fault is cleared

Each of these is a real physical phenomenon, not an imaginary worst case.

IEC 60909-0:2016, Table 1 provides the voltage factors for different voltage levels and calculation purposes:

Note the asymmetry: c_max is used when calculating maximum fault current for protective device rating, while c_min is used when calculating minimum fault current for protection sensitivity. This dual approach is intentional — you need the worst case in both directions.

For maximum fault current calculations, the 1.05 or 1.10 factor means you are calculating the fault current that would flow if the pre-fault voltage were at the upper statutory limit, transformers were on the highest tap position, and all other conditions conspired to maximise current. This is not hypothetical. On a real network, these conditions occur simultaneously more often than engineers expect — particularly after load shedding events when voltage regulation has not yet responded.

For minimum fault current calculations, c_min = 0.95 or 1.00 means you need to verify that protective devices will still operate when fault current is at its lowest. This is where many protection coordination failures originate — the fault current is too low to trip the upstream device in the required time.

Engineers who commission switchboards and perform fault-level verification tests frequently observe that measured prospective fault currents are 10–25% lower than IEC 60909 calculated values. This observation reinforces the “too conservative” narrative, but the explanation is straightforward:

1. Measurement timing. Fault level tests are performed at a specific instant when the network is in a specific state. The IEC 60909 calculation accounts for the worst credible state, not the average state.
2. Network impedance variation. Utility source impedance varies with generation dispatch, network topology, and load. The declared fault level from the utility is itself a maximum value; the actual impedance at the time of measurement may be 15–30% higher (meaning lower fault current).
3. Tap changer position. During testing, transformer taps are typically at nominal. Under high-load conditions, automatic tap changers may be at the +5% or +7.5% position, increasing fault current.
4. Motor contribution. During a real fault, all connected motors contribute subtransient current for the first 3–5 cycles. During a controlled test, the motor fleet may not be running or may be at part load.
5. Arc resistance. Real faults have arc resistance that reduces current. The IEC 60909 bolted fault calculation intentionally omits arc resistance for maximum fault current to ensure switchgear is rated for the worst case.

The gap between calculated and measured values does not indicate over-engineering — it indicates that the measurement was taken under non-worst-case conditions, which is exactly the point of the calculation method.

Three real failure modes emerge when engineers treat IEC 60909 results as “too high” and manually reduce them:

1. Under-rated switchgear

A 25 kA rated switchboard installed where the IEC 60909 calculation yields 27 kA. The engineer argues that “real” fault levels are only 22 kA based on a single measurement. Three years later, a utility network upgrade reduces source impedance, and the actual prospective fault current reaches 26.5 kA. The switchboard is now operating beyond its rated short-circuit withstand capacity.

2. Protection grading failure

Discrimination studies performed using “realistic” lower fault currents show adequate grading margins. When a fault occurs at higher current (due to conditions not present during the study), the grading margin disappears and both upstream and downstream devices trip simultaneously. The result: a wider outage than designed for.

3. Cable thermal withstand violation

The adiabatic equation I²t = k²S² determines whether a cable can survive a fault without its insulation exceeding its limiting temperature. If the actual fault current exceeds the value used to verify the cable, the insulation temperature may exceed the design limit (typically 250°C for XLPE, 160°C for PVC). The cable does not fail immediately — it suffers accelerated ageing and may fail months or years later under normal load.

The IEC 60909 equivalent voltage source method is not the only fault calculation approach. Understanding the alternatives clarifies why IEC 60909’s conservatism is a deliberate design choice:

• IEC 61363-1 (Short circuits in ship installations): Uses the direct method with actual generator EMFs and loads. More accurate for isolated networks but requires detailed machine data rarely available for utility-connected installations.
• Direct method (superposition): Calculates pre-fault load flow, then superimposes the fault. Requires complete network data including all generator AVR settings, load models, and real-time operating states. Gives more accurate results for a specific operating condition but does not inherently account for the range of conditions the network will experience.
• IEC 60909 equivalent voltage source: Replaces all complexity with a single voltage source at the fault point. Eliminates the need for detailed operating data. The voltage factor c then compensates for the simplification.

The genius of IEC 60909 is that it gives a reliable upper bound without requiring data that most engineers do not have. You do not need to know the generator AVR setpoint, the real-time tap position, or the motor fleet composition. The voltage factor handles all of it.

For engineers working on industrial or utility-connected installations, the IEC 60909 method with c_max is not just acceptable — it is the only responsible choice when detailed real-time operating data is unavailable.

There are legitimate cases where the IEC 60909 result may lead to unnecessarily expensive equipment selection, and a more detailed analysis is warranted:

• Switchgear at or near the standard rating boundary. If IEC 60909 yields 26 kA and the next standard rating is 31.5 kA (a significant cost step), a detailed load-flow-based fault study may demonstrate that 25 kA equipment is adequate. This analysis must account for all credible operating scenarios, not just the current state.
• Isolated networks (islands, ships, data centres on generator): IEC 61363-1 gives more appropriate results because the source impedance is well-defined and does not change with external network conditions.
• Existing installations where the utility has confirmed a reduction in fault level: If the utility provides a written revised fault level declaration, the IEC 60909 calculation should use the updated source impedance. The voltage factor c still applies.

In all cases, the burden of proof is on the engineer choosing to use a lower value. The IEC 60909 c_max result is the default position, and departing from it requires documented justification.

ECalPro’s short-circuit calculator implements IEC 60909-0:2016 with the following defaults:

• c_max is applied automatically based on the voltage level selected
• Both maximum and minimum fault current results are displayed, with the purpose of each clearly stated
• The voltage factor is shown as an explicit line item in the calculation report, not buried in intermediate steps
• Where the result crosses a standard switchgear rating boundary, a note highlights the cost implication and suggests when a detailed study may be justified

The calculation report references IEC 60909-0:2016, Table 1 for the voltage factor and Clause 6.2 for the equivalent voltage source method. This ensures that anyone reviewing the calculation understands exactly what assumptions have been made and can trace them to the standard.

Standards referenced: IEC 60909-0:2016, IEC 61363-1:1998. Equipment ratings per IEC 62271-200:2021 (MV switchgear) and IEC 61439-1:2020 (LV switchgear assemblies).