Select Before Operate (SBO) is a control security mechanism that mandates a two-step command sequence: an operator must first select a specific switchgear object and receive a positive status feedback confirmation before the system will accept the final operate command. This enforced sequence prevents catastrophic misoperations caused by accidental clicks or selecting the wrong device from a list.
Glossary
Select Before Operate (SBO)

What is Select Before Operate (SBO)?
A mandatory two-step process in substation automation that prevents inadvertent switching by requiring explicit selection and confirmation before executing a control command.
In IEC 61850 systems, SBO is implemented using the SBOw (Select Before Operate with enhanced security) control model, which reserves the selected object exclusively for the issuing client. The Logical Node representing the circuit breaker or disconnector transitions through defined states—blocked, selected, and operated—with a strict timeout that automatically cancels the selection if the operate command is not issued within a configured window.
Core Characteristics of SBO
Select Before Operate (SBO) is a mandatory two-step control sequence that enforces operator intent verification before executing critical switchgear commands, forming the backbone of substation safety interlocks.
Two-Step Command Model
SBO enforces a strict Select then Operate sequence. The operator first issues a select command to a specific Logical Node (e.g., XCBR for a circuit breaker). The Intelligent Electronic Device (IED) validates the selection and returns a positive confirmation. Only after this acknowledgment can the operate command be issued. Any intervening selection of a different object or a timeout automatically cancels the first selection, preventing misdirected operations.
IEC 61850 Protocol Implementation
Within the IEC 61850 standard, SBO is modeled using the Operate service with the ctlModel data attribute set to sbo-with-enhanced-security or sbo-with-normal-security.
- Normal Security: The IED validates the selection based on current interlocking conditions.
- Enhanced Security: Requires an additional Check service response, verifying that the control command parameters (e.g., setpoint values) match exactly between the select and operate steps before execution.
Interlocking Integration
The select step triggers a real-time evaluation of the substation's interlocking logic. The IED checks the status of all associated switchgear—such as disconnectors, earthing switches, and circuit breakers—to ensure the requested operation does not create a hazardous condition. If the interlocking conditions are violated (e.g., opening an isolator under load), the selection is immediately rejected with a negative response and a cause code, blocking the operate command entirely.
Timeout and Cancellation Mechanisms
SBO incorporates strict temporal constraints to prevent stale selections from persisting in the system. A configurable selection timeout (typically 10-30 seconds) automatically cancels the selection if no operate command is received. Additionally, selecting a new control object implicitly cancels the previous selection. Operators can also issue an explicit Cancel service request to release a selection without executing the command, returning the control point to a quiescent state.
Client-Server Control Authority
SBO manages control authority to prevent conflicting commands from multiple clients. When a client (e.g., SCADA HMI or local engineering workstation) successfully selects a control point, that client holds exclusive authority to issue the subsequent operate command. Other clients attempting to select or operate the same point receive a control-blocked rejection until the first client's selection times out or is cancelled. This mechanism is critical in environments with both local and remote operators.
Cybersecurity Implications
The SBO sequence provides an inherent layer of defense against accidental or malicious single-packet attacks. A spoofed or replayed operate command without a preceding valid select is automatically rejected by the IED. Under IEC 62351 security guidelines, the select and operate messages should be authenticated and integrity-protected to prevent man-in-the-middle manipulation of the two-step sequence, ensuring the operate command corresponds exactly to the intended selection.
Enabling Efficiency, Speed & Accuracy
Intelligent Analysis, Decision & Execution
We build AI systems for teams that need search across company data, workflow automation across tools, or AI features inside products and internal software.
Talk to Us
Search across company data
Give teams answers from docs, tickets, runbooks, and product data with sources and permissions.
Useful when people spend too long searching or get different answers from different systems.

Automate internal workflows
Use AI to route work, draft outputs, trigger actions, and keep approvals and logs in place.
Useful when repetitive work moves across multiple tools and teams.

Add AI to products and internal tools
Build assistants, guided actions, or decision support into the software your team or customers already use.
Useful when AI needs to be part of the product, not a separate tool.
Frequently Asked Questions
Clear, technically precise answers to the most common questions about the Select Before Operate control mechanism in substation automation systems.
Select Before Operate (SBO) is a two-step control security mechanism mandated by the IEC 61850 standard that requires an operator to first select a switchgear object—such as a circuit breaker or disconnector—and receive a positive confirmation of that selection before issuing the final operate command. The process begins when a control client sends a SelectWithValue request to the target Logical Node (e.g., XCBR for a circuit breaker). The Intelligent Electronic Device (IED) validates the request against its interlocking logic, checks for conflicting selections, and returns a Select response with status. Only after this positive acknowledgment can the client send the Operate command, which must match the previously selected object and value. This mechanism prevents unintended operations caused by misclicks, communication errors, or unauthorized commands, making it a foundational safety requirement in Substation Automation Systems (SAS).
Related Terms
Core mechanisms and protocols that interact with or parallel the Select Before Operate (SBO) control model to ensure safe, deterministic switching in high-voltage environments.

About the author
Prasad Kumkar
CEO & MD, Inference Systems
Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.
His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.
Partnered with leading AI, data, and software stack.
How We Work
Custom AI workflows for your Business
One-fit-all AI don't work for modern businesses. At Inferensys, we aim to understand your business & custom requirements; which we use to define most efficient agentic workflows, the data, and the tools for your business.
01
Review the use case
We understand the task, the users, and where AI can actually help.
Read more02
Pick the right approach
We define what needs search, automation, or product integration.
Read more03
Build the first useful version
We implement the part that proves the value first.
Read more04
Improve from there
We add the checks and visibility needed to keep it useful.
Read moreThe first call is a practical review of your use case and the right next step.
Talk to Us