UKOilWatch Analysis — an audit of eight jurisdictions on a single question, beginning with the one where the answer is most nearly knowable: can the public find out whether the grid can be rebuilt?
The title is not literally true, and it is worth conceding that in the first paragraph rather than the last.
Electricity companies do hold spare transformers. Britain has a "Strategic Spares" policy for network operators, developed jointly by industry, the energy department and the security services. Some transmission owners maintain substantial strategic inventories, and at least one has published evidence that they work.
What nobody appears to have built is a transparent public standard by which any of this can be judged sufficient.
We are told that equipment exists. We are not told what proportion of critical infrastructure is covered, what level of simultaneous damage the arrangements are designed to withstand, whether smaller operators are included, or what restoration time the public should expect. The location and specification of individual assets may properly remain confidential.
Aggregate adequacy need not.
The missing reserve is therefore not necessarily a warehouse full of machinery. It is a measurable guarantee that the system can be rebuilt.
What a spare is actually worth
Start with the number, because Britain is the only country in this audit where a number exists at all.
In its most recent asset management strategy, SSEN Transmission — which operates the north of Scotland — published two case studies. In the first, a strategic spare circuit breaker and rapid mobilisation returned a circuit to full service in six weeks, against a typical minimum of three to six months. In the second:
**"The failure of a relatively young transformer (<10 years old)… was rectified within 8 weeks due to the decision to hold a strategic spare transformer. The Grid Supply Point could have been at risk for 2 to 3 years based on the order time for asset replacement."**
Eight weeks, against two to three years. The difference between a manageable outage and a regional supply point compromised for the better part of a parliament — decided entirely by whether one company had chosen, in advance, to hold one transformer.
That is the stake. And every element of how we know it is instructive. It was published voluntarily. It was required by nothing. No obligation exists to repeat it. The regulator's word for adequacy appears zero times in that same document.
And no other British transmission owner publishes anything comparable. One discloses the opposite posture, warning that a strategic cable stock "will be exhausted with no replenishment available" and that where components are unavailable, "spares are recovered from assets being removed from the system."
So within a single country, under a single regulator: one operator builds warehouses with a dedicated transformer hall and documents eight-week recoveries; another cannibalises decommissioned assets. Neither is measured against any standard, because no standard exists.
This is the argument at its sharpest. A recovery regime is not defined by the preparedness of its strongest members. It is defined by the least recoverable critical node on which the rest of the system still depends.
Why this question exists at all
Energy security is measured in stocks and flows. Days of supply. Installed capacity. Reserve margins. Barrels, cubic metres, gigawatts.
Almost nobody asks the other question: if a critical component is destroyed tomorrow, how long until it is replaced?
That question has become urgent for an unglamorous reason. The machinery that moves and converts energy has developed lead times measured in years. The International Energy Agency reports that waiting times for transformers and cables doubled in three years, and that procurement now runs to two or three years for cables and up to four years for large power transformers — twice as long as in 2021.
Britain's own ministers put it plainly. In January 2025, Lord Hunt of Kings Heath told Parliament that lead times had reached 24 months for 132kV transformers and four years for 400kV transformers and network cabling.
A grid can hold ninety days of fuel and still be uninsurable against a component that takes four years to arrive.
The word that means everything except this
Search for "strategic reserve" in any European grid context and you will find something. In Britain and Spain it means gas and oil stocks. In the Netherlands and Sweden it means a generation capacity mechanism. In Germany it means frequency reserve.
The vocabulary of preparedness is everywhere. It is attached to fuel, to megawatts, to frequency — to everything except the physical equipment that takes four years to replace.
This is not a linguistic curiosity. It is the shape of the blind spot. Britain's 2015 government response to the House of Lords on electricity system resilience uses the word "adequacy" three times, and all three refer to generation capacity adequacy under the Capacity Market. In the same document, the words transformer, spares, stockpile, black start, restoration and lead time appear zero times.
A formal framework exists for asking whether there is enough generation. There is no counterpart for asking whether there is enough equipment.
Even the phrase itself is unstable. "Strategic Spares" appears in Hansard with at least three distinct meanings: a gas distribution regime, the 2014 electricity policy for network operators, and — in two ministerial winter-preparedness answers — generic mobile plant, "generators and compressors… diesel stocks." The words are doing different work in each case, and no document reconciles them.
What the audit found
We put eight questions to eight jurisdictions — the United States, Great Britain, France, Germany, Italy, the Netherlands, Poland and Spain — and to the European Union's own instruments. The questions were not about inventories. They were about disclosure: is a regime acknowledged; is its scope defined; is participation mandatory; is a minimum adequacy requirement published; is a restoration-time objective published; are exercises reported; is there independent oversight; is aggregate adequacy assessed in public?
Two results were uniform.
Not one jurisdiction publishes a minimum adequacy requirement for spare equipment. Eight out of eight.
Not one publishes a replacement-time objective for destroyed equipment. Also eight out of eight.
Several publish something that looks like it and is not. Britain's Electricity System Restoration Standard requires 60% of regional demand restored within 24 hours and 100% of Great Britain within five days, binding from the end of 2026. Germany raised the European floor for black-start ride-through endurance from 24 to 72 hours. France requires 1,000 sites to hold 24 hours of autonomy and 1,800 to hold ten.
Every one of those is real, quantified and enforceable. And every one of them measures how long something survives without power, or how fast an intact system restarts. None measures how quickly a destroyed thing is replaced.
### Restarting the grid is not the same as rebuilding it Black-start capability restores a system that is intact but de-energised. Strategic spares restore a system that is physically damaged. A country can hold excellent black-start resources and still be unable to re-energise a region whose transformer has been destroyed — and replacing that transformer does not, by itself, mean the wider network can be synchronised and restarted. The two capabilities are complementary and are routinely conflated. Only one of them is measured in public.
The regulator's own scoring line
If adequacy is delegated, the obvious question is what the regulator does with it.
Across Ofgem's RIIO-3 final determinations, the word "spares" appears exactly once in each of the determinations for National Grid Electricity Transmission, SP Transmission and Scottish Hydro Electric Transmission — and in every case it appears solely as a category weighting inside the Business Plan Incentive scoring table. It appears zero times in the sector-wide electricity transmission determination. The word "adequacy" appears zero times in all four.
Spares are not a Price Control Deliverable. They carry no reporting output.
The scoring itself is the finding. The spares category was weighted at 2.0% for National Grid Electricity Transmission — which scored zero basis points on it. SP Transmission was weighted 1.3% and scored 0.1. Scottish Hydro Electric Transmission was weighted 1.1% and scored 0.1.
Set that against what the same regulator does when a resilience question is measurable. Ofgem's director for cyber regulation told Parliament in June 2026 that roughly £2 billion was allocated to cyber across the RIIO-2 and ED2 price controls, £1.2 billion in RIIO-3, and that forty deep-level inspections had led to £30 million in fines under the network and information systems regulations.
Cyber has money, inspections and enforcement, because it has a framework. Spares have a scoring line worth two per cent on which the operator of the English and Welsh transmission network scored nothing at all.
Nobody's auditor has ever asked
If the regulator does not measure adequacy, does anyone audit the regulator?
In March 2026 the National Audit Office published a report on the United Kingdom's resilience to severe space weather — a scenario whose consequences it describes in its own words as "multi-month outages from transformer damage." Across those 44 pages, the words spare, stockpile, replacement, lead time, restoration and inventory appear zero times each.
The report examined forecasting, governance and response plans. Its transformer finding concerns design standards — that since 2003 new transformers have been specified to resist geomagnetically induced currents — not how many replacements exist. Three further NAO reports, on electricity networks, decarbonisation and extreme-weather resilience, contain no such examination either.
Nor is the question scheduled to be asked. The NAO has a further report on upgrading the electricity transmission network due in autumn 2026, and the Public Accounts Committee opened an inquiry — Clean power by 2030: Upgrading the grid — on 3 July 2026, which will not take evidence until the autumn either. Both are live, and it would be wrong to say nothing is in train. But the published scope of each concerns the value-for-money case, programme design and delivery. Neither names spare equipment, replacement lead times or recovery capability as a focus. The machinery to ask is assembled and pointed somewhere else.
Compare the United States. In August 2023 the Government Accountability Office reported that the Department of Energy had failed to carry out a transformer-reserve adequacy assessment that Congress had required by law, due in May 2022 and not delivered until July 2024. America, in short, has publicly measured its own ignorance.
Britain had no such duty to fail. There is instead a parliamentary answer. In March 2014, Sir Nicholas Soames asked directly how many spare generator step-up and transmission transformers are held in the UK. Michael Fallon, then Minister of State at the Department of Energy and Climate Change, replied that decisions rest with private businesses, and that "the Department of Energy and Climate Change does not hold data on generator step-up transformer or transmission connected transformer quantities held as spares by industry."
That answer has never been superseded. Twelve years on, ministers have asserted improvement without a figure — "increasing the number of transformer spares" (2020), "has increased the number of spare transformers that they hold" (2021) — while the record shows adequacy was consciously delegated. Having developed the "Strategic Spares" policy with the department and the security services, the Energy Emergencies Executive Committee recorded that the cost of individual enhancements "was left to them and the regulatory authority (namely Ofgem)."
The most recent answer, from February 2026, concedes the shape of the gap plainly: "While no plans exist specifically for a Carrington scale event, any large-scale outage would follow established national arrangements."
The people inside are asking for it too
There is a version of this argument that would be easy to dismiss: outsiders demanding a standard that practitioners know to be unworkable. The record does not support that reading. In the most recent evidence to Parliament, the request for a published benchmark comes from the regulated side.
On 3 June 2026 the Energy Security and Net Zero Committee took evidence for its Energy resilience inquiry. Offshore Energies UK's health, safety and security policy manager was asked whether industry was prepared for an escalating threat. His answer was that preparedness cannot be assessed without a standard to assess it against:
**"Preparedness for the future requires us to first understand what the benchmark for resilience is that is expected by Government. For example, do we have certain performance standards and expectations for uptime and speed to prepare, and what might we need to do, whether it is a national resource for cable repair or piping repair?"**
He closed on the question this whole audit circles: "ultimately we will end up talking about who runs the risk."
That session also supplied the thing this subject has mostly lacked — a case where the gap stopped being theoretical. Subsea data cables are covered by what one witness called an "ambulance service": a subscription arrangement guaranteeing a repair vessel. Interconnectors, which take longer and cost more to repair, have no equivalent:
**"If you don't have an ambulance service, it really is a free-for-all and you have to fight to find a repair vessel, which is exactly what happened to Fingrid in Finland. When EstLink 2 was struck on Christmas day, they had to call around to find a repair vessel. It took them a long time and they could not find a repair vessel."**
And the constraint this audit has argued from the outside — that a recovery regime is defined by what happens when damage arrives in more than one place at once — was put to the Committee from the inside, by a maritime lawyer who negotiates these contracts. Operators do hold repair contracts. The problem is that they all hold them with the same people:
**"It is likely to be the same people running those services… so the worry becomes: what if there is a volume situation or what if there are two situations? … the call down would be for the same repair company or the same crew, the same spread, perhaps the same vessels, and they would be needed in two places."**
Her explanation for why no shared prioritisation framework exists is the conflation this article was written to challenge: "it would be quite difficult to negotiate that ambulance service because all of this is commercial information, it is sensitive and there are competing operators."
Nor is the missing reserve only made of metal. The same panel identified crews as the binding constraint — that there are "not enough crew members skilled in the repair of undersea cables," that training them takes years, and that Government might usefully own "a repair vessel or two, but it will be futile without experienced people serving on those vessels."
And the pattern is not confined to spare equipment. Written evidence to the same inquiry, from a former National Grid and Ofgem employee with six years in cyber risk teams at both, describes structurally the same failure in a different domain:
**"The NIS regulations devolve responsibility for cyber risk management to the Operators of Essential Services… but, to my knowledge, how much risk they are entitled to accept on behalf of UK citizens is not defined."**
**"After 6 years working in cyber risk teams at Ofgem and National Grid it is not clear to me what types of cyber-attacker HMG now expects OESs to protect the energy networks from."**
His proposed remedy is this article's remedy, transposed: that the department "clearly state a security objective."
That matters more than any single quotation, because it answers the charge that this audit has cherry-picked one obscure corner of grid policy. Adequacy delegated to operators without a published standard of sufficiency is not a quirk of spare transformers. It appears to be how the system devolves risk generally.
What should exist
One qualification first, because the record has moved. It would be wrong to say nobody is looking at this. NESO's director of resilience told the same Committee that the organisation had "literally just been given the resource to create a new team, to look at cascade and compounding risk," and framed the underlying problem in terms this publication has used elsewhere: "the grid has been designed and our markets have been designed to drive efficiency and lower cost," and "we need to build in deep, increasing redundancy… there is an active conversation at the moment about whether we can justify that investment."
The claim here is not that the institutions are inert. It is that after that work concludes, there is still no published standard against which the public can judge the result.
And the strongest objection comes from the regulator. Ofgem's director for cyber regulation, asked about the forthcoming resilience legislation, cautioned against exactly the kind of specification this article calls for:
*"Do not be too prescriptive. There is always this challenge… to write everything down and to specify what every organisation should do. The problem with that is that we move so fast or whatever is written is out of date as soon as you write it, so be high level."*
He is right about equipment schedules and wrong about outcomes. An adequacy standard and a replacement-time objective are high level — they specify what the system must be able to do, not what any company must buy.
None of this requires publishing a map of vulnerable assets. The distinction the entire debate has failed to make is between operational secrecy, which is legitimate, and aggregate accountability, which is not the same thing.
A regulator need not disclose where a transformer is stored in order to report that all designated critical operators must meet a defined recovery standard, that coverage extends to a stated proportion of critical nodes, and that compliance has been independently tested.
What is missing, and could be created without disclosing anything sensitive:
- a defined adequacy standard — what level of simultaneous loss the arrangements are designed to withstand;
- a published restoration-time objective for destroyed equipment, as distinct from black-start endurance;
- stated institutional scope — transmission only, or also distribution, generation step-up transformers and interconnectors;
- reported testing, so that capability is demonstrated rather than asserted;
- independent audit against that standard — which the NAO and the Public Accounts Committee already have every institutional means to perform;
- and an aggregate assurance statement — not an inventory, simply a public answer to the question of whether it is enough.
Method, and an invitation to be corrected
This audit records four possible findings for each question — yes, partial, no public evidence found, and not applicable — deliberately avoiding a binary.
A "no public evidence found" rating does not assert that a capability or requirement does not exist. It means we could not identify a publicly accessible document demonstrating that it does. Regulators, system operators and utilities are invited to provide a source, after which this audit will be amended and the change logged.
That care is not decorative. This research caught eight separate instances of a document appearing to contain nothing when in fact the text had never been read: a PDF that extracted as font binary; an HTML error page saved with a .pdf extension; a corrupted character mapping that rendered ordinary German words as gibberish; a text-search tool silently refusing to match on a document containing invalid byte sequences; two encrypted annual reports that yielded 4,906 characters of noise from 218 pages until decrypted; an extractor that silently dropped umlauts; and two documents rendered as binary garbage by an automated retrieval tool that reported "no such text found" — one of which contained a genuine finding.
Each would have produced a confident and entirely false "no public evidence found."
Two institutional search engines also had to be assessed rather than trusted. Germany's federal audit office indexes the full text of its PDFs, verified by searching for a term appearing only once deep in a document body. The National Audit Office's search engine indexes titles and metadata only — it returned no results for a term appearing nine times in the body of its own report. Its nulls are therefore worthless as evidence, and none is relied on here. Every NAO finding above rests on downloading the reports and extracting their full text directly.
A final trap, in the other direction: a plain search for "spare" returns matches inside the word transparent, and did so in five separate documents here. Every hit was read in context before it was counted.
**Security boundary.** This project does not attempt to identify the location, specification, quantity or vulnerability of individual spare transformers or critical grid assets. It audits only what responsible institutions publicly disclose about governance, minimum standards, testing and aggregate adequacy. It is an accountability exercise, not an inventory or a vulnerability map.
The reserve that was never the point
The energy debate measures security in days of supply. It should also measure it in days to repair.
Britain may hold ninety days of oil, ample gas contracts and a comfortable reserve margin, and remain profoundly vulnerable if it cannot replace a large power transformer inside four years — or cannot say, when asked, how many it has. Twelve years ago it was asked, and it could not say.
The institutions responsible have not been negligent in the way the headline suggests. They built a Strategic Spares policy, private inventories, licence conditions and a restoration standard. What they never built was the part that lets anyone outside check the work.
We know reserves exist. One operator has told us they are worth eight weeks against two to three years. We do not know how much of the grid they could restore, how quickly, or whether they would survive a national emergency arriving in more than one place at once.
The missing strategic reserve is not the machinery. It is the measurable guarantee.
This is a worked application of the framework set out in Why Cheap Energy Isn't Always Cheap — that a system optimised for efficiency cannot improvise redundancy once a crisis has begun. It shares its central proposition with Bypassing a Chokepoint 135 Barrels at a Time: nominal capacity is irrelevant when the narrowest indispensable link cannot carry — or restore — the flow. There, the constraint was throughput. Here, it is recoverability.
Audit conducted and sources checked 20 July 2026. Findings are date-stamped and will be amended on evidence.