Detection of, and protection against faults within a restricted earth fault (REF) zone of a transformer or a generator is disclosed herein. Security of the REF protection element uses comparison of a negative-sequence reference quantity. The REF condition is only detected when there is sufficient ground involvement and a fault in the reverse detection has not been detected. Dependability of the REF protection element in low-impedance grounded systems is improved by ensuring that the element operates when a zero-sequence reference quantity and a neutral operate quantity are orthogonal to each other. The REF protection element further determines an open CT condition and blocks detection of an REF fault upon determination of the open CT condition. A tripping subsystem may issue a trip command based upon detection of the REF condition.