If an attacker or an infected laptop reaches the turbine controls, the result can be a trip, a failed start or equipment damage at the worst moment. A plant without tested backups can stay down long after the incident, and your campus carries that outage.
USP&E Helps You Secure Compute Campus GT Controls
We understand that your operators want reliable power first, and that security rules which slow them down will be worked around. USP&E brings 150+ power projects in 45+ countries and 25,000 MW contracted since 2002, and our 400+ engineers and project managers design, commission and maintain turbine control systems with network zones, remote access rules and recovery plans built in. We work under ISO 9001 and ISO 45001 certified systems with FCPA and OFAC controls. USP&E is a full-service EPC and O&M contractor, not a broker.
Good operational technology security is not about blocking everything. It is about knowing every device, controlling every connection and being able to recover quickly. Your cyber specialists and your plant team should agree the rules together.
Know Every Device and Every Connection
Start with an inventory: every PLC, turbine controller, protection relay, HMI, engineering workstation, network switch and remote link in the power plant. Record firmware versions, who supports each device and how it connects to anything else.
Draw the real network, not the one on the original drawing. Temporary modems, vendor laptops and links added during commissioning often stay long after they were needed, and each one bypasses the controls you thought you had.
Separate the plant into zones with controlled connections between them. The turbine control network, the protection network, the campus building systems and the corporate network should never be one flat network. Recognised industrial security standards give your specialists a structure to work from.
Control Remote Access and Patching
Remote support is valuable, but it must be controlled. Use named accounts, approval before each session, multi-factor authentication where possible and logging of every connection. Shared passwords and always-on vendor links are among the most common weaknesses in plant networks.
Agree a patch and update routine with each control system supplier. Not every patch is safe to install on a running turbine, so test updates where you can and schedule them in planned outages. Where a patch cannot be installed, add other protections and record the reason.
Control removable media and laptops. A USB stick brought in to copy a trend file can carry malware past every firewall. Give your technicians clean, approved tools and a clear rule for anything that connects to the plant network.
Back Up, Monitor and Drill the Incident Plan
Keep tested backups of controller logic, HMI configurations and relay settings, stored offline and updated after every change. A backup that has never been restored is a hope, not a plan.
Write an incident plan with your cyber team, your plant operators and your suppliers. It should say who decides to isolate a network, how the plant keeps running or shuts down safely, and how you restore power to critical load. Drill it, then fix what the drill shows.
Apply the same rules to every power source on the campus. A remanufactured GE Frame 6B, verified used/new gas turbines and natural gas engines/stations used as bridge capacity often arrive with older controls that need extra care. A hyperscale EPC/O&M team brings AI gas turbines, hyperscale generators and gas turbines for compute into one security design, and each New USP&E FX-45 45MW Modular Gas Turbine for the Hyperscale Data Center sector in the USA block is commissioned into its own network zone. That way your gas turbine generators stay protected as the fleet grows.
Local Teams Near Your Compute Campus Power Site
Data-centre schedules are won or lost in permitting, gas supply and interconnection, so USP&E puts its US offices first. Colorado Springs (1755 Telstar Dr, Suite 300) and Knoxville (800 S Gay St, Suite 700) give you two US bases for engineering reviews, procurement follow-up and site visits, and both teams work your compute campus black-start plan alongside you rather than from a sales desk.
Behind them, London (162-168 Regent Street) handles structuring, bonding and finance; Johannesburg (22 Kildoon Rd, Bryanston) owns engineering and project controls for black-start gensets, Frame 6B units and gas turbine generators; Cape Town (31 Brickfield Road, Woodstock) supports design and commissioning; and Wuxi, China (No. 1, Ningzhou Road, Wuxi) manages China manufacturing and supply-chain follow-up.
For compute campus control security, Colorado Springs and Knoxville engineers can review your plant network drawings and remote access set-up with your cyber team, then walk the plant to find links nobody recorded. Regions served: USA | AFRICA | UK | UAE | CHINA. That network stands behind 150+ power projects in 45+ countries and 25,000 MW contracted since 2002, run under ISO 9001 and ISO 45001 certified systems.
USP&E Track Record for Compute Campus Power
You want proof that USP&E has delivered and commissioned gas turbine power for demanding US compute campuses. These projects show that record.
- USP&E has refurbished seven GE Frame 6B gas turbines to zero hours in-house for major US hyperscale data-centre developers.
- Zondereinde platinum mine, South Africa: USP&E supplied, packaged and serviced six zero-hour surplus Wabtec GE16V250 gensets, giving the mine 25 MW of base-load power through Eskom load shedding. Read the case study.
- MAN redeployment, Iraq: USP&E moved a stranded 32 MW MAN plant, plus two surplus MAN generators, across four countries to an industrial buyer facing 12 to 18 month lead times for new engines. Read the case study.
HowTo: Secure Compute Campus GT Controls
Your 3-step plan: 1. Share network drawings, device lists and remote access rules under NDA. 2. Receive a zone plan, access rules and backup routine. 3. Commission the controls, then drill and maintain them under accountable O&M.
- List every control system, PLC, HMI, relay and remote link in the power plant.
- Separate plant networks into zones with controlled connections to the campus and the outside world.
- Control remote access with named accounts, approvals and logging.
- Agree a patch and update routine with the control system suppliers.
- Keep tested backups of control configurations and logic.
- Write and drill an incident plan that keeps the plant running or shuts it down safely.
Resources and live pathway
Data centres · EPC · O&M · About USP&E · Contact.
FAQ: Compute Campus OT Cyber Security GT
Why are gas turbine controls a cyber risk on compute campuses?
USP&E treats turbine controls as part of your critical infrastructure because they link to campus systems and remote support. Any weak connection can let malware or an unauthorised user reach controllers and relays. The result can be a trip, a failed start or damaged equipment.
What is network zoning for a power plant?
USP&E designs network zones that separate turbine controls, protection, campus building systems and corporate networks, with controlled connections between them. If one zone is compromised, the others stay protected. Your cyber specialists can base the zones on recognised industrial security standards for operational technology.
How should vendor remote access be controlled?
USP&E recommends named accounts, approval before each session, multi-factor authentication where possible and a log of every connection. Always-on links and shared passwords should be removed. Your suppliers still get the access they need, but only when you allow it and with a record of what they did.
Can you patch a running gas turbine control system?
USP&E plans patches with each control system supplier because not every update is safe on a running unit. You test where possible, schedule installation in planned outages and add other protections where a patch cannot be applied. Every decision should be recorded for audits.
Where are USP&E’s offices that support compute campuses?
USP&E supports US compute campuses from Colorado Springs and Knoxville, where engineers can work with your cyber and operations teams on site. Johannesburg leads engineering and project controls, Cape Town adds commissioning depth, London covers contracts and finance, and Wuxi follows up China-made switchgear and panels.
Has USP&E delivered gas turbine power for compute campuses?
USP&E has refurbished seven GE Frame 6B gas turbines to zero hours in-house for major US hyperscale data-centre developers. Public case studies also cover NEOM, where USP&E supplied zero-hour gas turbines and served as the single technical and commercial interface. You can read each case study yourself.
Is USP&E a broker for turbine controls or equipment?
USP&E is not a broker. USP&E engineers, commissions and maintains power plants with its own people, so the team that sets up your control networks and backups is the same team that answers for the plant’s reliability once your campus is running.
How fast can USP&E respond to a controls security review?
USP&E can start reviewing your network drawings, device lists and remote access rules as soon as you share them under NDA. Engineers flag flat networks, open vendor links and missing backups first, then plan a site walk with your cyber and operations teams.
Keep Your Campus Power in Your Control
Secure your turbine controls and your plant keeps running even when someone tries the door. Leave them open and one bad connection can trip the campus. USP&E will help you zone, protect and recover your controls with confidence.
Request a fast quote for your compute campus black-start plan on the USP&E contact page, call +27 10 822 2324 or email info@uspeglobal.com. Want to see what is available today? Search the USP&E inventory.
Powering Possibility. Built for the Frontier.