The Global Centre for Risk and Innovation (GCRI)
Resilience engineering studies how systems and organizations keep functioning when conditions exceed what designers expected. It looks at the capacity to anticipate, monitor, respond and learn, and at the margins that let people adapt when procedures run out. This page sets out how resilience is built and eroded, how it can be measured without false precision, and what the evidence serves for those who run critical systems.
GCRI · In development · service level R0
Resilience engineering is the study and design of how systems and organizations keep functioning when conditions exceed what designers expected. It focuses on the capacities to anticipate, monitor, respond and learn, and on margins that let people adapt. Most measures are proxies, because resilience shows itself fully only under stress.
For resilience engineering, in GCRI's spatial-intelligence reading, the map opens on population density, true-colour imagery and night lights, framed on Asia; every other NASA layer, live feed and forecast waits in the layer list.
The interactive map needs JavaScript; the layer list and sources are below.
Layers 3
Hazards and exposure, for this page
Keyboard, with the map focused
Hold Ctrl or ⌘ and scroll to zoom
Latest available
NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth
Loading the latest NASA imagery.
Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.
For resilience engineering, in GCRI's spatial-intelligence reading, the map opens on population density, true-colour imagery and night lights, framed on Asia; every other NASA layer, live feed and forecast waits in the layer list.Satellite and model products as NASA publishes them, each with its own date; indicators, not assessments of any place; claim ceiling INTEGRATED.
Layers and dates
Continuity, recovery and adaptive capacity. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.
Resilient systems watch for signals that conditions are changing and prepare before a threshold is crossed. Monitoring that only tracks normal performance misses the drift toward the edge of safe operation.
Efficiency pressure removes spare capacity, staff and stock that appear unused. Each removal is reasonable alone, but together they erode the margin that absorbs disruption.
When procedures do not fit the situation, operators adapt. That adaptive capacity is a source of resilience, and it depends on training, authority to act and time to think.
Organizations that study what went right and what nearly went wrong, as well as failures, adjust designs and procedures. Without learning, the same weaknesses recur.
Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.
| Term | Definition |
|---|---|
| Adaptive capacity | The ability of people and organizations to adjust their actions when procedures do not fit the situation. |
| Graceful degradation | A design property in which a system sheds lower-priority functions under stress and keeps essential ones. |
| Recovery time objective | The target time within which a service must be restored after disruption. |
Each indicator carries its unit, its cadence, the kind of source behind it and the evidence label a value would carry. No values are shown: a programme supplies them under its own authority.
| Indicator | Unit | Cadence | Source type | Label |
|---|---|---|---|---|
| Spare capacity | percent of peak demand available as reserve | monthly | Operational records | OBSERVED |
| Recovery time objective met | percent of tested services restored within objective | per exercise | Continuity test records | OBSERVED |
| Near misses reported | count per period | monthly | Safety and incident reporting systems | REPORTED |
| Lessons implemented | percent of recorded lessons with completed actions | quarterly | Learning and action tracking | REPORTED |
| Staff trained for degraded operation | percent of critical roles | annual | Training records | REPORTED |
| Single-skill critical roles | count of roles with one qualified holder | annual | Workforce records | OBSERVED |
The topic as a computational graph: named sources feed the methods, an evidence review gates the outputs, and the decisions stay with the authorities that hold them.
Fig. 02Nodes carry their type, two metric rows and a state; connectors show what feeds what; dashed frames name the owners; the timeline is the cadence. Design of the pipeline, not a record of a run.
Named public datasets and institutional records, each with its licence class. Sources by agreement are used only under their terms and never republished.
| Source | What it gives | Licence class |
|---|---|---|
| ISO 22301 Business continuity management systems | Requirements for continuity planning, objectives and exercises | Licensed standard, purchase required |
| ISO 22316 Organizational resilience principles and attributes | Principles and attributes of organizational resilience | Licensed standard, purchase required |
| Safety investigation reports from transport and industrial safety boards | Detailed accounts of failures, near misses and contributing factors | Public records, terms per board |
| Resilience Engineering Association publications | Research on adaptive capacity, the resilience potentials and safety | Licence per publication |
| National critical infrastructure resilience guidance | Government guidance on resilience planning for operators | Public records, licence per government |
Systemic Risk Management prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.
| Who decides | The question | Evidence this page serves |
|---|---|---|
| Operators of critical systems | Where to restore margins and invest in adaptive capacity | Margin inventories; recovery tests; single-skill roles |
| Safety and continuity managers | Which exercises and learning reviews to run | Near-miss patterns; lessons implemented |
| Regulators of critical sectors | What resilience expectations to set for operators | Resilience assessments against named standards |
Resilience research distinguishes the capacity to absorb a shock, the capacity to recover from it and the capacity to adapt so that the next shock does less harm. Different investments strengthen each, and an organization strong in one can be weak in another.
Spare capacity, stocks and slack that absorb shocks. Efficiency drives often remove them.
Plans, spares, skills and relationships that bring services back quickly.
The ability to change how the system works when conditions change, and to learn from near misses.
Reliability and resilience engineering analyses failure modes, redundancy and recovery times. It is strongest for technical systems with known failure data.
Identifies critical services, tolerances for disruption and dependencies. It depends on honest assessment of what is truly critical.
Measures such as time to recover and service level under stress. No single metric captures resilience, and metrics can be gamed.
Studies of how work is actually done, including successful adaptation, not only failures. They require a culture that does not punish honesty.
The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.