Operationalising Critical Infrastructure Resilience. From Assessment to Management
Over recent decades, it has been evident that society relies heavily on critical infrastructures (CIs) to provide and maintain vital societal functions, such as water, electricity and transportation. Traditionally, in order to ensure the delivery of such functions, the focus has been on protecting t...
Main Author: | |
---|---|
Format: | Doctoral or Postdoctoral Thesis |
Language: | English |
Published: |
UiT Norges arktiske universitet
2020
|
Subjects: | |
Online Access: | https://hdl.handle.net/10037/18964 |
id |
ftunivtroemsoe:oai:munin.uit.no:10037/18964 |
---|---|
record_format |
openpolar |
institution |
Open Polar |
collection |
University of Tromsø: Munin Open Research Archive |
op_collection_id |
ftunivtroemsoe |
language |
English |
topic |
VDP::Matematikk og Naturvitenskap: 400::Matematikk: 410::Forsikringsmatematikk og risikoanalyse: 417 Risikostyring- og vurdering VDP::Teknologi: 500::Industri- og produktdesign: 640 Samfunssikkerhet VDP::Teknologi: 500::Bygningsfag: 530 Kritisk Infrastruktur DOKTOR-004 |
spellingShingle |
VDP::Matematikk og Naturvitenskap: 400::Matematikk: 410::Forsikringsmatematikk og risikoanalyse: 417 Risikostyring- og vurdering VDP::Teknologi: 500::Industri- og produktdesign: 640 Samfunssikkerhet VDP::Teknologi: 500::Bygningsfag: 530 Kritisk Infrastruktur DOKTOR-004 Rød, Bjarte Operationalising Critical Infrastructure Resilience. From Assessment to Management |
topic_facet |
VDP::Matematikk og Naturvitenskap: 400::Matematikk: 410::Forsikringsmatematikk og risikoanalyse: 417 Risikostyring- og vurdering VDP::Teknologi: 500::Industri- og produktdesign: 640 Samfunssikkerhet VDP::Teknologi: 500::Bygningsfag: 530 Kritisk Infrastruktur DOKTOR-004 |
description |
Over recent decades, it has been evident that society relies heavily on critical infrastructures (CIs) to provide and maintain vital societal functions, such as water, electricity and transportation. Traditionally, in order to ensure the delivery of such functions, the focus has been on protecting the infrastructures’ systems from adverse and extreme events. However, large-scale events, such as hurricanes, floods, cyberattacks and the ongoing coronavirus pandemic, illustrate that is not always feasible to protect infrastructures from all types of threats; it can be technologically impossible and extremely costly. Hence, the concept of critical infrastructure resilience (CIR) has been introduced, in order to enable CIs and their surrounding organisations to bounce back and cope with surprises and high-consequence events. CIR has been the subject of vibrant scholarly discussion for over a decade. Yet there is no consensus on some fundamental questions, most importantly on how CIR could be measured, analysed, evaluated, and enhanced. In other words, a proper approach to CIR management is missing. The aim of this thesis is to solve this challenge. From a theoretical and practical perspective, I review current literature and practices, to explore and justify the need and objectives for operationalising CIR and, thus, improve the understanding of the application and interaction of different resilience concepts. Moreover, methodologically, I review scientific literature, constituting state of the art in real-life application to CIs. I further proceed, through demonstration, evaluation and implementation in a real-life environment, to develop new methods and techniques for CIR assessments. Finally, to facilitate the operationalisation of CIR, based on the feedback from operators through the implementation and demonstration, I develop an overall CIR management framework that is compatible with a variety of CIR assessment techniques, which can be integrated into existing risk management practices. The results of this study show that the CIR concept goes beyond traditional risk management and covers more than pre-event capabilities, acknowledging that protection of CIs can never be guaranteed. Based on the results from the demonstration, evaluation, and implementation of resilience assessment techniques and methods, I defend the plurality of techniques and methods, emphasising the need for measurability and comparability. Currently, there is no single approach, method or technique that would provide all the answers for all sectors, conditions, situations, needs or resources for a CI risk and resilience assessment. In addition, the latter part of a CI resilience assessment – namely, how to evaluate the results and compare them against public tolerance levels – seems to be largely underdeveloped. The study shows that research regarding CI resilience of real-life infrastructures, and especially towards how to enhance CI resilience, is still in its infancy, where substantial efforts are needed towards drawing informed conclusions with respect to their level of resilience and the effect of interdependencies. The structures and processes of the proposed CIR management framework are proved to effectively facilitate the plurality of assessment techniques and methods, helping to conceptualise, operationalise and methodologically enhance CIR. The framework utilises the often-used practices of risk management, thus modifying the current international management standard towards that of CIR management. To this end, I present a framework that closely follows the standard risk management typology, but adapted to CIR. For successful CIR management, I conclude with five maxims: no duplicate practices; tailorability and plurality of assessment techniques and methods; measurability; and relative ease of use. Keywords: critical infrastructure; resilience; real-life; case studies; organizational resilience; technological resilience; risk management; ISO 31000; resilience management; resilience assessment; recoverability; operationalisation. |
format |
Doctoral or Postdoctoral Thesis |
author |
Rød, Bjarte |
author_facet |
Rød, Bjarte |
author_sort |
Rød, Bjarte |
title |
Operationalising Critical Infrastructure Resilience. From Assessment to Management |
title_short |
Operationalising Critical Infrastructure Resilience. From Assessment to Management |
title_full |
Operationalising Critical Infrastructure Resilience. From Assessment to Management |
title_fullStr |
Operationalising Critical Infrastructure Resilience. From Assessment to Management |
title_full_unstemmed |
Operationalising Critical Infrastructure Resilience. From Assessment to Management |
title_sort |
operationalising critical infrastructure resilience. from assessment to management |
publisher |
UiT Norges arktiske universitet |
publishDate |
2020 |
url |
https://hdl.handle.net/10037/18964 |
genre |
Arctic |
genre_facet |
Arctic |
op_relation |
Paper I: Rød, B., Barabadi, A. & Gudmestad, O.T. (2016). Characteristics of arctic infrastructure resilience: Application of expert judgement. Proceedings of the Twenty-sixth International Ocean and Polar Engineering Conference, Rhodes, Greece, June 26-July 1, 2016 (pp. 1226 – 1233). Cupertino, CA, USA: International Society of Offshore and Polar Engineers. ISBN 978-1-880653-88-3; ISSN 1098-6189. Not available in Munin due to publisher’s restrictions. More information on the Proceedings available on http://publications.isope.org/proceedings/ISOPE/ISOPE%202016/index.htm . Paper II: Pursiainen, C., Rød, B., Baker, G., Honfi, D. & Lange, D. (2017). Critical Infrastructure Resilience Index. In Walls, Revie & Bedford (Eds.), Risk, Reliability and Safety: Innovating Theory and Practice. Proceedings of the 26th European Safety and Reliability conference, ESREL, Glasgow, Scotland, September 25-19, 2016 (pp. 2183 – 2189). London, UK: Taylor & Francis Group. ISBN 978-1-138-02997-2. Paper III: Rød, B., Pursiainen, C., Reitan, N.K., Storesund, K., Lange, D. & Mira da Silva, M. (2018). Evaluation of resilience assessment methodologies. In M. Cepin & R. Bris (Eds.), Safety and Reliability – Theory and Applications. Proceedings of the 27th European Safety and Reliability Conference, ESREL, Portoroz, Slovenia, June 18-22, 2017 (pp. 1039 - 1051). London, UK: Taylor & Francis Group. ISBN 978-1138629370. Paper IV: Storesund, K., Reitan, N.K., Sjøstrøm, J., Rød, B., Guay, F., Almeida, R. & Theocharidou, M. (2018). Novel methodologies for analysing critical infrastructure resilience. In S. Haugen, A. Barros, C. van Gulijk, T. Kongsvik & J.E. Vinnem (Eds.), Safety and Reliability – Safe Societies in a Changing World. Proceedings of the 28th European Safety and Reliability Conference, ESREL, Trondheim, Norway, June 17-21, 2018 (pp. 1221 – 1229). London, UK: Taylor & Francis Group. Also available at https://doi.org/10.1201/9781351174664 . Paper V: Rød, B., Lange, D., Theocharidou, M. & Pursiainen, C. (2020). From risk management to resilience management in critical infrastructure. Journal of Management in Engineering, 36 (4), 04020039. Not available in Munin due to publisher’s restrictions. Available at https://doi.org/10.1061/(ASCE)ME.1943-5479.0000795 . Paper VI: Rød, B., Barabadi, A. & Naseri, M. (Forthcoming 2020). Recoverability modelling of power distribution networks using accelerated life models: The case of power cut due to extreme weather events in Norway. (Accepted manuscript). Now published in the Journal of Management in Engineering, 36 (5), available at https://doi.org/10.1061/(ASCE)ME.1943-5479.0000823 . Paper VII: Rød, B. & Johansson, J. Critical Infrastructures: How resilient are they? (Manuscript). Paper V: All data, models, or code generated or used during the study are available from the corresponding author on request. Paper VI: Some data, models, or code generated or used during the study are available from the corresponding author by request: - Extracted and coded data from the 73 interruptions reports - Stata software analysis code Some data, models, or code generated or used during the study are proprietary or confidential in nature and may only be provided with restrictions (e.g. anonymised data): - The interruption reports completed by the distribution companies, as they include sensitive information. Data from these reports can, to a large extent, be provided in coded/anonymised form (as indicated above). Paper VII: All data, models, or code generated or used during the study are available from the corresponding author on request. info:eu-repo/grantAgreement/EC/H2020/653390/EU/Improved risk evaluation and implementation of resilience concepts to critical infrastructure/IMPROVER/ 978-82-8236-402-7 (print), 978-82-8236-403-4 (PDF) https://hdl.handle.net/10037/18964 |
op_rights |
embargoedAccess Copyright 2020 The Author(s) |
_version_ |
1766302523779448832 |
spelling |
ftunivtroemsoe:oai:munin.uit.no:10037/18964 2023-05-15T14:28:21+02:00 Operationalising Critical Infrastructure Resilience. From Assessment to Management Rød, Bjarte 2020-09-03 https://hdl.handle.net/10037/18964 eng eng UiT Norges arktiske universitet UiT The Arctic University of Norway Paper I: Rød, B., Barabadi, A. & Gudmestad, O.T. (2016). Characteristics of arctic infrastructure resilience: Application of expert judgement. Proceedings of the Twenty-sixth International Ocean and Polar Engineering Conference, Rhodes, Greece, June 26-July 1, 2016 (pp. 1226 – 1233). Cupertino, CA, USA: International Society of Offshore and Polar Engineers. ISBN 978-1-880653-88-3; ISSN 1098-6189. Not available in Munin due to publisher’s restrictions. More information on the Proceedings available on http://publications.isope.org/proceedings/ISOPE/ISOPE%202016/index.htm . Paper II: Pursiainen, C., Rød, B., Baker, G., Honfi, D. & Lange, D. (2017). Critical Infrastructure Resilience Index. In Walls, Revie & Bedford (Eds.), Risk, Reliability and Safety: Innovating Theory and Practice. Proceedings of the 26th European Safety and Reliability conference, ESREL, Glasgow, Scotland, September 25-19, 2016 (pp. 2183 – 2189). London, UK: Taylor & Francis Group. ISBN 978-1-138-02997-2. Paper III: Rød, B., Pursiainen, C., Reitan, N.K., Storesund, K., Lange, D. & Mira da Silva, M. (2018). Evaluation of resilience assessment methodologies. In M. Cepin & R. Bris (Eds.), Safety and Reliability – Theory and Applications. Proceedings of the 27th European Safety and Reliability Conference, ESREL, Portoroz, Slovenia, June 18-22, 2017 (pp. 1039 - 1051). London, UK: Taylor & Francis Group. ISBN 978-1138629370. Paper IV: Storesund, K., Reitan, N.K., Sjøstrøm, J., Rød, B., Guay, F., Almeida, R. & Theocharidou, M. (2018). Novel methodologies for analysing critical infrastructure resilience. In S. Haugen, A. Barros, C. van Gulijk, T. Kongsvik & J.E. Vinnem (Eds.), Safety and Reliability – Safe Societies in a Changing World. Proceedings of the 28th European Safety and Reliability Conference, ESREL, Trondheim, Norway, June 17-21, 2018 (pp. 1221 – 1229). London, UK: Taylor & Francis Group. Also available at https://doi.org/10.1201/9781351174664 . Paper V: Rød, B., Lange, D., Theocharidou, M. & Pursiainen, C. (2020). From risk management to resilience management in critical infrastructure. Journal of Management in Engineering, 36 (4), 04020039. Not available in Munin due to publisher’s restrictions. Available at https://doi.org/10.1061/(ASCE)ME.1943-5479.0000795 . Paper VI: Rød, B., Barabadi, A. & Naseri, M. (Forthcoming 2020). Recoverability modelling of power distribution networks using accelerated life models: The case of power cut due to extreme weather events in Norway. (Accepted manuscript). Now published in the Journal of Management in Engineering, 36 (5), available at https://doi.org/10.1061/(ASCE)ME.1943-5479.0000823 . Paper VII: Rød, B. & Johansson, J. Critical Infrastructures: How resilient are they? (Manuscript). Paper V: All data, models, or code generated or used during the study are available from the corresponding author on request. Paper VI: Some data, models, or code generated or used during the study are available from the corresponding author by request: - Extracted and coded data from the 73 interruptions reports - Stata software analysis code Some data, models, or code generated or used during the study are proprietary or confidential in nature and may only be provided with restrictions (e.g. anonymised data): - The interruption reports completed by the distribution companies, as they include sensitive information. Data from these reports can, to a large extent, be provided in coded/anonymised form (as indicated above). Paper VII: All data, models, or code generated or used during the study are available from the corresponding author on request. info:eu-repo/grantAgreement/EC/H2020/653390/EU/Improved risk evaluation and implementation of resilience concepts to critical infrastructure/IMPROVER/ 978-82-8236-402-7 (print), 978-82-8236-403-4 (PDF) https://hdl.handle.net/10037/18964 embargoedAccess Copyright 2020 The Author(s) VDP::Matematikk og Naturvitenskap: 400::Matematikk: 410::Forsikringsmatematikk og risikoanalyse: 417 Risikostyring- og vurdering VDP::Teknologi: 500::Industri- og produktdesign: 640 Samfunssikkerhet VDP::Teknologi: 500::Bygningsfag: 530 Kritisk Infrastruktur DOKTOR-004 Doctoral thesis Doktorgradsavhandling 2020 ftunivtroemsoe 2021-06-25T17:57:34Z Over recent decades, it has been evident that society relies heavily on critical infrastructures (CIs) to provide and maintain vital societal functions, such as water, electricity and transportation. Traditionally, in order to ensure the delivery of such functions, the focus has been on protecting the infrastructures’ systems from adverse and extreme events. However, large-scale events, such as hurricanes, floods, cyberattacks and the ongoing coronavirus pandemic, illustrate that is not always feasible to protect infrastructures from all types of threats; it can be technologically impossible and extremely costly. Hence, the concept of critical infrastructure resilience (CIR) has been introduced, in order to enable CIs and their surrounding organisations to bounce back and cope with surprises and high-consequence events. CIR has been the subject of vibrant scholarly discussion for over a decade. Yet there is no consensus on some fundamental questions, most importantly on how CIR could be measured, analysed, evaluated, and enhanced. In other words, a proper approach to CIR management is missing. The aim of this thesis is to solve this challenge. From a theoretical and practical perspective, I review current literature and practices, to explore and justify the need and objectives for operationalising CIR and, thus, improve the understanding of the application and interaction of different resilience concepts. Moreover, methodologically, I review scientific literature, constituting state of the art in real-life application to CIs. I further proceed, through demonstration, evaluation and implementation in a real-life environment, to develop new methods and techniques for CIR assessments. Finally, to facilitate the operationalisation of CIR, based on the feedback from operators through the implementation and demonstration, I develop an overall CIR management framework that is compatible with a variety of CIR assessment techniques, which can be integrated into existing risk management practices. The results of this study show that the CIR concept goes beyond traditional risk management and covers more than pre-event capabilities, acknowledging that protection of CIs can never be guaranteed. Based on the results from the demonstration, evaluation, and implementation of resilience assessment techniques and methods, I defend the plurality of techniques and methods, emphasising the need for measurability and comparability. Currently, there is no single approach, method or technique that would provide all the answers for all sectors, conditions, situations, needs or resources for a CI risk and resilience assessment. In addition, the latter part of a CI resilience assessment – namely, how to evaluate the results and compare them against public tolerance levels – seems to be largely underdeveloped. The study shows that research regarding CI resilience of real-life infrastructures, and especially towards how to enhance CI resilience, is still in its infancy, where substantial efforts are needed towards drawing informed conclusions with respect to their level of resilience and the effect of interdependencies. The structures and processes of the proposed CIR management framework are proved to effectively facilitate the plurality of assessment techniques and methods, helping to conceptualise, operationalise and methodologically enhance CIR. The framework utilises the often-used practices of risk management, thus modifying the current international management standard towards that of CIR management. To this end, I present a framework that closely follows the standard risk management typology, but adapted to CIR. For successful CIR management, I conclude with five maxims: no duplicate practices; tailorability and plurality of assessment techniques and methods; measurability; and relative ease of use. Keywords: critical infrastructure; resilience; real-life; case studies; organizational resilience; technological resilience; risk management; ISO 31000; resilience management; resilience assessment; recoverability; operationalisation. Doctoral or Postdoctoral Thesis Arctic University of Tromsø: Munin Open Research Archive |