Skip to content

GCRI · Engineering

Reliability and resilience engineering

Reliability and resilience engineering studies how systems fail, how failures can be prevented and how systems absorb, adapt and recover from disruption. It addresses both technical components and the organisations that operate them. Critical Infrastructure stewards this page for the Nexus Consortium.

01Workspace

The workspace for reliability and resilience engineering.

Reliability model

The Global Centre for Risk and Innovation (GCRI) · Reliability and resilience · Run R-3730 · Example interface, not a record

Single point of failureGCRI · GCRI

Dependency graph

nodes: assets · edges: dependencies

Failure modes

N388118Critical
N4531725Normal
N5498414Normal
N6536742Normal

Cascade size under removal

Reliability model.Illustrative interface; not live data.

GCRI · Reliability model. Reliability model: example names and illustrative values, not a record.

02The method

What reliability and resilience engineering covers.

  1. 01

    Core methods

    failure modes and effects analysis; fault tree analysis; reliability block diagrams; resilience metrics; maintenance optimisation; post-incident analysis.

  2. 02

    Data and instruments

    failure and maintenance records; incident databases; condition monitoring data; component test data; operator logs.

  3. 03

    Validation

    Reliability predictions are compared with field failure data. Exercises and post-event reviews check whether recovery performed as planned.

  4. 04

    Limits

    Common-cause failures and rare events are hard to estimate from limited data. Human and organisational factors resist quantification.

  5. 05

    Use in risk decisions

    Resilience engineering identifies critical components and recovery bottlenecks across connected systems. It informs redundancy, spares and restoration priorities.

03Reference practice

Resilience engineering extends reliability practice to whole systems.

ReferenceWhat it sets
ISO 22301Business continuity management
IEC 60300 dependability managementReliability and availability
Sendai target DDamage to critical infrastructure and disruption of basic services
04Process

How the process runs.

Process

Reliability and resilience engineering: Operational resilience

Basel defines operational resilience as delivering critical operations through disruption; the UK PRA uses important business services and impact tolerances.

  1. 01 Services and tolerance

    1. 01Important business services or critical operationsDataset · Programme ownerUnder PRA rules a firm identifies its important business services; Basel says critical operations. Resilience delivers them in disruption.
    2. 02Set impact toleranceStep · Programme ownerFor each important business service the firm sets an impact tolerance, the maximum tolerable disruption.
  2. 02 Map and test

    1. 03MappingStep · Programme ownerThe firm documents what it needs to deliver each important business service. Basel asks banks to map interconnections and interdependencies.
    2. 04Severe but plausible scenariosModel · Programme ownerScenarios are severe but plausible disruptions. Basel names pandemics, cyber incidents, technology failures and natural disasters.
    3. 05Scenario testingExercise · Programme ownerThe firm regularly tests whether each important business service stays within its impact tolerance in a severe but plausible disruption.
  3. 03 Fix

    1. 06Identify vulnerabilitiesStep · Programme ownerWhere capabilities cannot meet the stated tolerance, policies should address the gap. Basel gives this task to board oversight.
    2. 07Act to remain within toleranceStep · Programme ownerThe firm must ensure it can remain within its impact tolerance for each important business service.
  4. 04 Governing body

    1. 08Self-assessment and management body approvalDecision · Management bodyThe firm prepares and regularly updates a written self-assessment. Its management body approves the services and the self-assessment.

Outline of an external standard or method, from its public sources. It describes what the framework says, not a record of any run. It does not show that Nexus or any partner performs, certifies or approves a step. A gate is a step of the method, never a Nexus approval. The two vocabularies differ; the outline names both.

05In systemic risk work

Absorb, adapt, recover.

Reliability asks how often a component fails; resilience asks how a system performs during and after disruption. The resilience curve (performance against time through a disruption) makes recovery speed and degraded performance explicit. Interdependent networks need joint restoration planning, because one network’s recovery waits on another’s.

  • Measure recovery time and degraded service, not only failure probability.
  • Plan restoration order across networks.
  • Test assumptions with exercises.
  • Applications on Critical Infrastructure and Energy Nexus.
07Stewardship

Who maintains this page.

Critical Infrastructure stewards reliability and resilience engineering: it keeps this description current and reviews how the method is applied across the platforms.

08Sources

Where this page’s references lead.

The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.

09Questions

Questions and answers.

Why does one institution host every method page?
GCRI hosts the STEM Commons so that each method has one canonical description. Platforms link to it rather than repeat it, which keeps definitions consistent.
How do I suggest a correction to a method page?
Write to the integrity concern form with the passage and the reason.
ReportsContribute

Contribute evidence from this page.

Reports is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.

GCRI
The Global Centre for Risk and Innovation

Bring a method, a dataset or a question.

Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.