ChapterPDF Available

Resilience is a Verb

Authors:

Abstract

SNAFU is natural state of systems & SNAFU Catching is essential for viability of systems in complex worlds. But organizations rationalize this core finding away. Available on irgc.epfl.ch and irgc.org.
!"#$%$"&'"($#()(*"+,(
-).$/(-0(122/# (
$
Keywords(!"#$%$"&'"("&3$&""+$&34()/)56."(')5)'$6"#4(3+)'"78%("9:"&#$,$%$:;4()/)5:)62&(
Introduc.on:0Poised0to0adapt000
<="(6:%"(27(:=$#(5)5"+()55")+#(:2(.$2%):"(3+)>>)+(+8%"#0(?8:(:="(.$2%)62&(+8&#($&(:="(2552#$:"(
/$+"'62&(@(>8'=(:22(2A"&(B"(#""(+"#$%$"&'"()#()(#:):"(:2(,"()'=$"."/(@(#2>":=$&3()(#;#:">(=)#4(
B="&($:(+"7"+#(:2()(#":(27(')5),$%$6"#(72+()'62&4()':8)%%;(78:8+"()'62&(B="&('2&/$62&#4('=)%%"&3"#4(
2552+:8&$6"#('=)&3"0(C#(D+$E(F2%%&)3"%(=)#(#)$/(+"5"):"/%;(#$&'"(!"#$%$"&'"(D&3$&""+$&3(,"3)&(
GF2%%&)3"%(H(122/#4(IJJKL4(+"#$%$"&'"($#(),28:(B=):()(#;#:">(')&(/2(@($&'%8/$&3($:#(')5)'$:;M((
:2()&6'$5):"(@(#""$&3(/"."%25$&3(#$3&#(27(:+28,%"()=")/(:2(,"3$&(:2()/)5:(")+%;()&/(+"/8'"(
:="(+$#E(27(/"'2>5"&#)62&(
:2(#;&'=+2&$N"(@()/O8#6&3(=2B(/$P"+"&:(+2%"#():(/$P"+"&:(%"."%#('22+/$&):"(:="$+()'6.$6"#(
:2(E""5(5)'"(B$:=(:">52(27("."&:#()&/(+"/8'"(:="(+$#E(27(B2+E$&3():('+2##(58+52#"#((
:2(,"(+")/;(:2(+"#52&/(@(/"."%25$&3(/"5%2;),%"()&/(>2,$%$N),%"(+"#52&#"(')5),$%$6"#($&(
)/.)&'"(27(#8+5+$#"#()&/(+"/8'"(:="(+$#E(27(,+$Q%"&"##(
72+(5+2)'6."(%")+&$&3(@(%")+&$&3(),28:(,+$Q%"&"##()&/(#28+'"#(27(+"#$%$"&:(5"+72+>)&'"(
,"72+"(>)O2+('2%%)5#"#(2+()''$/"&:#(2''8+(,;(#:8/;$&3(=2B(#8+5+$#"#()+"(')83=:()&/(+"#2%."/(
!"#$%$"&'"('2&'"+&#(:="(')5),$%$6"#()(#;#:">(&""/#(:2(+"#52&/(:2($&".$:),%"(#8+5+$#"#0(C/)56."(
')5)'$:;($#(:="(52:"&6)%(72+()/O8#6&3(5)Q"+&#(27()'6.$6"#(:2(=)&/%"(78:8+"('=)&3"#($&(:="(E$&/#(27(
"."&:#4(2552+:8&$6"#()&/(/$#+8562&#("95"+$"&'"/0(<="+"72+"4()/)56."(')5)'$6"#("9$#:(,"72+"(
'=)&3"#()&/(/$#+8562&#(')%%(852&(:=2#"(')5)'$6"#0(R;#:">#(52##"##(.)+$"6"#(27()/)56."(')5)'$:;4(
)&/(!"#$%$"&'"(D&3$&""+$&3(#""E#(:2(8&/"+#:)&/(=2B(:="#"()+"(,8$%:4(#8#:)$&"/4(/"3+)/"/4()&/(%2#:0((
C/)56."(')5)'$:;(>")&#()(#;#:">($#(!"#$%&'("')&)!(4($:(=)#(#2>"(+")/$&"##(2+(52:"&6)%(:2('=)&3"(
=2B($:('8++"&:%;(B2+E#@($:#(>2/"%#4(5%)&#4(5+2'"##"#4(,"=).$2+#(G122/#4(IJSTU(IJSVL0(C/)5:)62&($#(
&2:(),28:()%B);#('=)&3$&3(:="(5%)&4(>2/"%4(2+(5+".$28#()55+2)'="#4(,8:(),28:(:="(52:"&6)%(:2(
>2/$7;(5%)&#(:2('2&6&8"(:2(W:('=)&3$&3(#$:8)62&#0(R5)'"(>$##$2&('2&:+2%($#()(52#$6."(')#"(#:8/;(72+(
:=$#(')5),$%$:;4("#5"'$)%%;(=2B(#5)'"(#=8Q%"(>$##$2&('2&:+2%(/"."%25"/($:#(#E$%%(27(=)&/%$&3()&2>)%$"#4(
"."&()#(:=";("95"':"/(:=):(:="(&"9:()&2>)%;(:2(,"(=)&/%"/(B28%/(&2:(>):'=()&;(27(:="(2&"#(:=";(
=)/(5%)&&"/()&/(5+)'6'"/(72+(G1)Q#XY"+2Z(H(122/#4(IJJ[L0(R:8/$"#(27(=2B(#8''"##78%(>$%$:)+;(
2+3)&$N)62&#()/)5:"/(:2(=)&/%"(#8+5+$#"#(5+2.$/"()&2:="+(+$'=(#":(27('2&:+)#6&3(')#"#(G\$&E"%4(
IJSSL0(
C/)56."(')5)'$:;(/2"#(&2:(>")&()(#;#:">($#('2&#:)&:%;('=)&3$&3(B=):($:(=)#(5%)&&"/(2+(/2"#(#2()**'
(+%',-%4(,8:(+):="+(:=):(:="(#;#:">(=)#(#2>"(),$%$:;(:2(+"'23&$N"(B="&($:]#()/"^8):"(:2('2&6&8"(:="(
5%)&4(:2('2&6&8"(:2(B2+E($&(:="(8#8)%(B);4()&/(B="&($:($#(&2:()/"^8):"(:2('2&6&8"(2&4(3$."&(:="(
/">)&/#4('=)&3"#()&/('2&:"9:(2&32$&3(2+(85'2>$&30(C/)5:)62&(')&(>")&(."/,/0#/1'("'2"34'("'
(-"5)+:>"&:(27(_&:"3+):"/(R;#:">#(D&3$&""+$&34(<="(`=$2(R:):"(a&$."+#$:;(
$
R833"#:"/('$:)62&M(122/#4(-0(-0(GIJSVL0(!"#$%$"&'"($#()(."+,0(_&(<+8>54(?0(-04(\%2+$&4(b0X*04(H(c$&E2.4(_0(
GD/#0L0'5678'3%$"03.%'10#&%'"/'3%$#*#%/.%'9:"*;'<=>'?"-)#/$'"@'3%$#*#%/.%'@"3'."-!*%A'#/(%3."//%.(%&'
$B$(%-$;(c)8#)&&"4(dFM(DY\c(_&:"+&)62&)%(!$#E(e2."+&)&'"(d"&:"+0(C.)$%),%"(2&($+3'0"5f0'=()&/($+3'02+30(
g (S
!*)/4(,8:4()&/(:=$#($#()(."+;($>52+:)&:(C0(4(B$:=(:="('2&6&8$&3(),$%$:;(:2(+"X)##"##(B=":="+(:="(5%)&(
W:#(:="(#$:8)62&('2&7+2&:"/@"."&()#(".$/"&'"(),28:(:="(&):8+"(27(:="(#$:8)62&('=)&3"#()&/(
".$/"&'"(7+2>(:="("P"':#(27($&:"+."&62&#('=)&3"#0(<="(),$%$:;(:2(+"'23&$N"()&/(:2(#:+":'=4("9:"&/4(2+(
'=)&3"(B=):(;28]+"(/2$&3hB=):(;28(=)."(5%)&&"/(=)#(:2(,"(:="+"($&()/.)&'"(27()/)56&30(<=$#(
')5),$%$:;(')&(,"("9:"&/"/(2+('2&#:+$':"/()#('=)%%"&3"#()+$#"4("95)&/"/(2+(/"3+)/"/(2."+(';'%"#(27(
'=)&3"4()&/(+"/$+"':"/(2+(,"'2>"(#:8'E()#('2&/$62&#(".2%."($&:2(&"B('2&W38+)62&#0(D9:"&#$,$%$:;($#(
78&/)>"&:)%(:2()/)56."(')5)'$6"#(:=):(#8552+:(+"#$%$"&:(5"+72+>)&'"(B="&(78:8+"('=)%%"&3"#()+$#"(
G122/#4(IJSTU(IJSVL0((
Systems0are0messy(
C%%(#;#:">#()+"(/"."%25"/()&/(25"+):"(3$."&(W&$:"(+"#28+'"#()&/(%$."($&()('=)&3$&3("&.$+2&>"&:0(C#(
)(+"#8%:4(5%)&#4(5+2'"/8+"#4()8:2>)62&4()3"&:#()&/(+2%"#()+"($&="+"&:%;(%$>$:"/()&/(8&),%"(:2(
'2>5%":"%;('2."+(:="('2>5%"9$:;(27()'6.$6"#4("."&:#4(/">)&/#0(C%%(#;#:">#(25"+):"(8&/"+(5+"##8+"#(
)&/($&(/"3+)/"/(>2/"#(Gd22E4(S[[VL0(Y"25%"()&/(25"+)62&#()/)5:(:2(>"":(:="($&".$:),%"(
'=)%%"&3"#4(5+"##8+"#4(:+)/"X2P#4(+"#28+'"#(#')+'$:;4()&/(#8+5+$#"#0(<2(#8>>)+$N"(:="(52$&:(.$.$/%;4(
d22E()&/(122/#(GIJSKL(8#"()('2$&)3"(7+2>(:="(C>"+$')&(#2%/$"+($&(11__M(RiC\a($#(:="(&2+>)%(#:):"(
27(#;#:">#@B="+"(RiC\a(#:)&/#(72+(R$:8)62&(i2+>)%(C%%(j\28%"/k(a50((1$:=(RiC\a(&2+>)%4(RiC\a(
d):'=$&3($#("##"&6)%@(+"#$%$"&:(5"+72+>)&'"(/"5"&/#(2&(:="(),$%$:;(:2()/)5:(28:#$/"(27(:="(#:)&/)+/(
5%)&#()#(:="#"($&".$:),%;(,+")E(/2B&0(RiC\a(d):'=$&34(=2B"."+(:"'=&2%23$')%%;(7)'$%$:):"/4($#()(
78&/)>"&:)%%;(=8>)&(')5),$%$:;("##"&6)%(72+(.$),$%$:;($&()(B2+%/(27('=)&3"()&/(#8+5+$#"(G122/#4(
IJSlL0(R2>"(5"25%"($&(#2>"(+2%"#(5+2.$/"(:="("##"&6)%()/)56."(')5)'$:;(72+(RiC\a(d):'=$&34(
:=283=(:=$#(>);(,"(%2')%4(8&/"+3+28&/4()&/($&.$#$,%"(:2(/$#:)&:(5"+#5"'6."#(GY"++;(H(1")+#4(IJSIL0(
C%%(2+3)&$N)62&#()+"()/)56."(#;#:">#4('2&#$#:(27()(&":B2+E(27()/)56."(#;#:">#4()&/("9$#:($&()(B",(
27()/)56."(#;#:">#0(<="(5)'"(27('=)&3"($#()''"%"+):"/(,;(5)#:(#8''"##"#4()#(3+2B:=(#6>8%):"#(>2+"(
)/)5:)62&(,;(>2+"(5%);"+#($&()(>2+"($&:"+'2&&"':"/(#;#:">0(e+2B$&3(:"'=&2%23$')%()&/(5+2/8'6.$:;(
')5),$%$6"#()%#2(3+2B($&:"+/"5"&/"&'$"#()&/(#')%"#(27(25"+)62&(:=):($&.2E"('2>5%"9$:;(5"&)%6"#(
)&/(+"^8$+"(:+)/"X2P#(:2('25"(B$:=(W&$:"(+"#28+'"#0(<="('2>5%"9$:;(5"&)%6"#(2''8+($&(:="(72+>(27(
'=)&3$&3(5)Q"+&#(27('2&f$':4('2&3"#62&4(')#')/"()&/(#8+5+$#"0(!"3)+/%"##(27(:="()/.)&'"4(RiC\a(
B$%%(+"X">"+3"0((
_>5+2.">"&:#(/+$."()(5)Q"+&($&()/)56."(';'%"#M("P"'6."(%")/"+#(:)E"()/.)&:)3"(27($>5+2.">"&:#(
:2(/+$."(#;#:">#(:2(/2(>2+"4(/2($:(7)#:"+4()&/($&(>2+"('2>5%$'):"/(B);#0(e+2B:=('+"):"#(
2552+:8&$6"#(72+(2:="+#(:2(=$O)'E(&"B(')5),$%$6"#()#(:=";(58+#8"(:="$+(32)%#0(R8''"##(/+$."#(
$&'+")#$&3(#')%"('2>5%"9$:;(B=$'=(%")/#(:2(:="(">"+3"&'"(27(&"B(72+>#(27(RiC\a()&/(RiC\a(
d):'=$&34()#(#;#:">#(,"'2>"(>"##;()3)$&0(<=$#(')&(,"(2,#"+."/($&(:="(+$#"(27(=$3=(7+"^8"&';(:+)/$&3(
$&(W&)&'$)%(>)+E":#4($&(+)&#2>B)+"4()&/(:="($&f8"&'"(27($&:"+&":(,2:#($&("%"'62&#4()>2&3(2:="+#0(
RiC\a(d):'=$&3($#("##"&6)%(72+(:="(.$),$%$:;(27()/)56."(#;#:">#($&('2>5%"9(B2+%/#0(?8:(2+3)&$N)62&#(
+)62&)%$N"(:=$#('2+"(W&/$&3()B);(2&(3+28&/#(27(+)+$:;4(5+"."&62&4('2>5%$)&'"0(<="(W+#:('%)$>($#M(
RiC\a#(2''8+(+)+"%;(3$."&(:="(2+3)&$N)62&k#(/"#$3&(:=8#($&."#6&3($&(RiC\a(d):'=$&3($#()(&)++2B(
$##8"(27(%2B(5+$2+$:;0(<="(#"'2&/('%)$>($#M(:="+"($#()(+"'2+/(27($>5+2.">"&:(:=):(+"/8'"#(:="(
%$E"%$=22/h#"."+$:;h/$m'8%:;(27(RiC\a#0(<=$+/4(B="&(RiC\a#(2''8+4(522+(+"#52&#"($#(/8"(:2(5"25%"(
B=2(7)$%(:2(B2+E(:2(:="(+8%"#(72+(:="$+(+2%"(B$:=$&(:="(2+3)&$N)62&k#(/"#$3&0(
<="#"(+)62&)%$N)62&#()+"(B+2&3(">5$+$')%%;4(:"'=&$')%%;4()&/(:="2+"6')%%;0(C#(2+3)&$N)62&#(72'8#(2&(
>)E$&3(#;#:">#(B2+E(7)#:"+4(,"Q"+4()&/('=")5"+4(:=";(/"."%25(&"B(5%)&#(">,2/$"/($&(5+2'"/8+"#4(
)8:2>)62&4(52%$'$"#4()&/(72+'$&3(78&'62&#0(<="#"(5%)&#()+"(#""&()#("P"'6."(#$&'"(:=";(+"5+"#"&:(
$>5+2.">"&:#(+"%)6."(:2(=2B(:="(#;#:">(B2+E"/(5+".$28#%;0(1="&(#8+5+$#$&3(+"#8%:#(2''8+4(:="(
g (I
2+3)&$N)62&($&:"+5+":#(:="(#8+5+$#"#()#(/".$)62&#@"++)6'(5"25%"(B"+"(8&),%"(:2(B2+E(:2(5%)&4(:2(
B2+E(:2(:="$+(+2%"(B$:=$&(:="(5%)&4()&/(:2(B2+E(:2(:="(+8%"#(5+"#'+$,"/(72+(:="$+(+2%"0(<="(
'28&:"+>")#8+"#(,"'2>"(>2+"(#:+$&3"&:(5+"##8+"#(:2(B2+EX:2X5%)&4(B2+EX:2X+2%"()&/(B2+EX:2X+8%"(
G-"EE"+4(IJSVL0(<="('2>5%$)&'"(5+"##8+"(8&/"+>$&"#(:="()/)56."(')5)'$6"#(&""/"/(72+(RiC\a(
d):'=$&3(G#8'=()#($&$6)6."L4('+"):"#(/28,%"(,$&/#(:=):(/+$."()/)5:)62&#(:2(>)E"(:="(#;#:">(B2+E(
j8&/"+3+28&/4k()&/(3"&"+):"#(+2%"(+":+"):(:=):(8&/"+>$&"#('22+/$&):"/()'6.$6"#0(((
_&("."+;(+$#E;(B2+%/4($>5+2.">"&:#('2&6&8"4(;":(B"()%#2('2&6&8"(:2("95"+$"&'"(>)O2+(7)$%8+"#(:=):(
58NN%"(2+3)&$N)62&#4($&/8#:+$"#4()&/(#:)E"=2%/"+#0((RiC\a(+"'8+#(.$#$,%;@$&(n8&"(IJSV(_<(7)$%8+"#(
#:255"/(2&%$&"(W&)&'$)%(:+)/$&3(G<R?($&(:="(ao()&/(d)&)/$)&(R:2'E("9'=)&3"#L0(?"78//%">"&:()+$#"#(
7+2>()(,)'E3+28&/(27('2&6&8"/($>5+2.">"&:(2&(#2>"($&/$'):2+#4('285%"/(B$:=(#8+5+$#$&3(#8//"&(
5"+72+>)&'"('2%%)5#"#0(((
<=$#('2>,$&)62&(_R(:="(#$3&):8+"(27()/)56."(#;#:">#($&('2>5%"9("&.$+2&>"&:#0(<="($.)*%'."-!*%A#(B(
:=):()+$#"#(7+2>('=)&3"#(:2($&'+")#"(256>)%$:;('2>"#():(:="('2#:(27($&'+")#"/(,+$Q%"&"##(%")/$&3(:2(
#;#:">#(pB=$'=()+"(+2,8#:(:2(5"+:8+,)62&#(:=";(B"+"(/"#$3&"/(:2(=)&/%"4(;":(7+)3$%"(:2(8&"95"':"/(
5"+:8+,)62&#()&/(/"#$3&(f)B#q(Gd)+%#2&(H(-2;%"4(IJJJ4(50(ITI[L0(C#(#')%"()&/($&:"+/"5"&/"&'$"#(
$&'+")#"4()(#;#:">k#(5"+72+>)&'"(2&()."+)3"($&'+")#"#4(,8:(:="+"($#()%#2()&($&'+")#"($&(:="(
5+252+62&(27(%)+3"('2%%)5#"#h7)$%8+"#0((
e$."&(:=):(58+#8$:(27(256>)%$:;($&'+")#"#(,+$Q%"&"##4(B=;(/2&k:(7)$%8+"#(2''8+(>2+"(2A"&r@RiC\a(
d):'=$&30(C/)56&3(:2(=)&/%"(:="(+"38%)+(2''8++"&'"(27(RiC\a#(>)E"#(:="(B2+E(27(RiC\a(d):'=$&3(
)%>2#:($&.$#$,%"(G122/#4(IJSlL0(<="(f8"&';(%)B(#:):"#M(2%**')&)!(%&').,:#(B'"..03$'2#(+')'@).#*#(B'
(+)('C%*#%$'(+%'&#D.0*(B'"@'(+%'&%-)/&$'3%$"*:%&')/&'(+%'&#*%--)$'C)*)/.%&(G122/#4(IJSVL0(R;#:">#(
:=):('2&6&8"(:2()/)5:(:2('=)&3$&3("&.$+2&>"&:#4(#:)E"=2%/"+#4(/">)&/#4('2&:"9:#4()&/('2&#:+)$&:#(
)+"(52$#"/(:2()/)5:(:=+283=("&),%$&3(RiC\a(d):'=$&3(Gd22E(H(122/#4(IJSKL0(
Con.nuous0adaptability(
F2B(')&(2+3)&$N)62&#(f28+$#=(/"#5$:"('2>5%"9$:;(5"&)%6"#r(C&#B"+#(:2(:=$#(^8"#62&(=)."(">"+3"/(
7+2>(+"#")+'=(2&(+"#$%$"&:(5"+72+>)&'"(27(=8>)&()/)56."(#;#:">#0(\2+(2+3)&$N)62&#(:2(f28+$#=(
:=";(&""/(:2(,8$%/()&/(#8#:)$&(:="(),$%$:;(:2(."/,/0"0$*B')&)!(0(<2/);(:=$#(5)+)/$3>("9$#:#($&(B",(
"&3$&""+$&3()&/(25"+)62&#(,"')8#"($:(B)#(&"'"##)+;(:2(E""5(5)'"(B$:=(:="()''"%"+)6&3(
'2&#"^8"&'"#(27('=)&3"()#(&"B(E$&/#(27(#"+.$'"#()+2#"(7+2>($&:"+&":(78"%"/(')5),$%$6"#(GC%%#5)B4(
IJSTL0(1",X,)#"/('2>5)&$"#(%$."(2+(/$"(,;(:="(),$%$:;(:2(#')%"(:="$+($&7+)#:+8':8+"(:2()''2>>2/):"(
$&'+")#$&3(/">)&/()#(:="$+(#"+.$'"#(5+2.$/"(.)%8"0(Y%)&&$&3(72+(#8'=(3+2B:=(+"^8$+"#(2+3)&$N)62&#(:2(
,"(f8"&:():('=)&3"()&/(52$#"/(:2()/)5:0(?"')8#"(:="#"(2+3)&$N)62&#(+"'23&$N"(:=):(:=";(25"+):"():(
#2>"(."%2'$:;4(:=";(E&2B(:=";(B$%%("95"+$"&'"()&2>)%$"#(:=):(:=+"):"&(:=2#"(#"+.$'"#0((
1",("&3$&""+$&3()&/(25"+)62&#(=)#(#"+."/()#(2&"(&):8+)%(%),2+):2+;(72+(#:8/;$&3(+"#$%$"&'"X$&X
)'62&(G">"+3"&';(>"/$'$&"()&/(#5)'"(>$##$2&(>)&)3">"&:()+"(2:="+("9)>5%"#L0(`8:)3"#()&/(&")+(
28:)3"#()+"('2>>2&("."&():(:="(,"#:X$&X'%)##(5+2.$/"+#0(Y)#:(#8''"##(78"%#(:="(5)'"(27('=)&3"0(
R;#:">#(B2+E():($&'+")#$&3(#')%"($&()('2&#:)&:%;('=)&3$&3("&.$+2&>"&:(27(2552+:8&$:;()&/(+$#E0(1",(
"&3$&""+$&3()&/(25"+)62&#($#($>52+:)&:()%#2(,"')8#"()%%(2+3)&$N)62&#()+"(2+()+"(,"'2>$&3(/$3$:)%(
#"+.$'"(2+3)&$N)62&#0(\2+("9)>5%"4(+"'"&:%;(>8%65%"()$+%$&"#(=)."(#8P"+"/(>)O2+("'2&2>$'(%2##"#(
B="&(_<(#"+.$'"(28:)3"#(%"/(:2(:="('2%%)5#"(27(:="()$+%$&"#(),$%$:;(:2(>)&)3"(f$3=:#0(!"#8%:#(7+2>(:=$#(
&):8+)%(%),2+):2+;(="%5(+".")%(78&/)>"&:)%('2&#:+)$&:#(2&(=2B(=8>)&()/)56."(#;#:">#(78&'62&0(
`+3)&$N)62&)%(#;#:">#(#8''""/(/"#5$:"(:="(,)#$'(%$>$:#(27()8:2>):)()&/(5%)&#($&()('2>5%"94(
$&:"+/"5"&/"&:()&/('=)&3$&3("&.$+2&>"&:(,"')8#"(+"#52&#$,%"(5"25%"()/)5:(:2(>)E"(:="(#;#:">(
B2+E(/"#5$:"($:#(/"#$3&@RiC\a(d):'=$&30((
g (s
\28+(')5),$%$6"#(5+2.$/"(:="(,)#$#(72+('2&6&828#()/)5:)62&0(5/#,),:%($#("##"&6)%(72+()/)5:)62&(:2(
'2&f$'6&3(5+"##8+"#4('2&#:)&:(+$#E(27(2."+%2)/4()&/($&".$:),%"(#8+5+$#"#(G122/#4(IJSVL0(
`+3)&$N)62&#(&""/(:2(38$/"(:="(%A!3%$$#"/'"@'#/#,),:%(:2("&#8+"(#;&'=+2&$N)62&()'+2##(+2%"#(
:)$%2+"/(:2('=)&3$&3(#$:8)62&#0(<=$#(+"^8$+"#(58#=$&3($&$6)6."(/2B&(:2(8&$:#(27()'62&(G\$&E"%4(
IJSSL0(_&$6)6."(')&(+8&(:22(B$/"(B="&(8&/$+"':"/(%")/$&3(:2(7+)3>"&:)62&4(B2+E$&3():('+2##X
58+52#"#4()&/(>$#X#;&'=+2&$N)62&()'+2##(+2%"#0(F2B"."+4($&$6)6."($#(+"/8'"/(2+("%$>$&):"/(,;(
5+"##8+"(:2(B2+EX:2X+8%"hB2+EX:2X5%)&4("#5"'$)%%;(,;(:=+"):#(27(#)&'62&#(#=28%/()/)5:)62&#(5+2."(
$&"P"'6."(2+("++2&"28#($&(=$&/#$3=:0(D>5=)#$#(2&(B2+EX:2X+8%"hB2+EX:2X5%)&('2>5%$)&'"('8%:8+"#(
%$>$:#()/)56."(')5)'$:;(B="&("."&:#(2''8+(:=):(/2(&2:(>"":()##8>562&#($&(:="(5%)&4($>5)##"#(,%2'E(
5+23+"##4(2+(B="&(2552+:8&$6"#()+$#"0(((
!"#$%$"&'"("&3$&""+$&3($#(:="&(%"A(B$:=(:="(:)#E(27(#5"'$7;$&3(B=$'=(#;#:">()+'=$:"':8+"(,)%)&'"#(:="(
"95+"##$2&(27($&$6)6."()#(:="(52:"&6)%(72+(#8+5+$#"(B)9"#()&/(B)&"#0(<="(5+"##8+"#(3"&"+):"/(,;(
2:="+($&:"+/"5"&/"&:(8&$:#("$:="+("&"+3$N"#(2+(+"/8'"#($&$6)6."()&/(:="+"72+"(:="(')5)'$:;(:2(
)/)5:0(<="#"(5+"##8+"#()%#2('=)&3"(=2B($&$6)6."($#(#;&'=+2&$N"/()'+2##(+2%"#()&/(%"."%#0(<="(
5+"##8+"#('2&#:+)$&()&/(/$+"':(=2B(:="("95+"##$2&(27($&$6)6."(!3#"3#,E%$(#2>"(32)%#()&/'$).3#F.%$(
2:="+(32)%#(B="&('2&f$':#()'+2##(32)%#($&:"&#$7;0(
DP"'6."(2+3)&$N)62&#(,8$%/(3%.#!3".#(B()'+2##(+2%"#()&/(%"."%#(G`#:+2>4(IJJsL0(!"'$5+2'$:;($&(
'2%%),2+)6."(B2+E($#('2>>$:>"&:(:2(>8:8)%()##$#:)&'"0(1$:=(+"'$5+2'$:;4(2&"(8&$:(/2&):"#(7+2>(:="$+(
%$>$:"/(+"#28+'"#(&2B(:2(="%5()&2:="+($&(:="$+(+2%"4(#2(,2:=()'=$"."(,"&"W:#(72+(2."+)+'=$&3(32)%#4(
)&/(:+8#:#(:=):(B="&(:="(+2%"#()+"(+"."+#"/4(:="(2:="+(8&$:(B$%%('2>"(:2($:#()$/0(
D)'=(8&$:(25"+):"#(8&/"+(%$>$:"/(+"#28+'"#($&(:"+>#(27("&"+3;4(B2+E%2)/4(6>"4()Q"&62&(72+(')++;$&3(
28:(")'=(+2%"0(-$."+6&3(#2>"(27(:="#"(+"#28+'"#(:2()##$#:('+"):"#(2552+:8&$:;('2#:#()&/(B2+E%2)/(
>)&)3">"&:('2#:#(72+(:="(/2&)6&3(8&$:0(a&$:#(')&($3&2+"(2:="+($&:"+/"5"&/"&:(+2%"#()&/(72'8#(:="$+(
+"#28+'"#(2&(>""6&3(O8#:(:="(5"+72+>)&'"(#:)&/)+/#(#":(72+(:="$+(+2%"()*"/%0(Y+"##8+"#(72+(
'2>5%$)&'"(8&/"+>$&"(:="(B$%%$&3&"##(:2(+")'=()'+2##(+2%"#()&/('22+/$&):"(B="&()&2>)%$"#()&/(
#8+5+$#"#(2''8+0(<=$#($&'+")#"#(,+$Q%"&"##()&/(8&/"+>$&"#('22+/$&):"/()'6.$:;0(!"'$5+2'$:;(
2."+'2>"#(:=$#(:"&/"&';(:2()':(#"%W#=%;()&/(&)++2B%;0(_&:"+/"5"&/"&:(8&$:#($&()(&":B2+E(#=28%/(
#=2B()(B$%%$&3&"##(:2($&."#:("&"+3;(:2()''2>>2/):"(2:="+(8&$:#4(#5"'$W')%%;(B="&(:="(2:="+(8&$:#k(
5"+72+>)&'"($#():(+$#E0(
<=$+/4()(E";(%"##2&(7+2>(#:8/$"#(27(+"#$%$"&'"($#(:=):(:)&3$,%"("95"+$"&'"#(27(#8+5+$#"()+"(52B"+78%(
/+$."+#(72+(%")+&$&3(=2B(:2(38$/"()/)5:),$%$:;0(<)&3$,%"("95"+$"&'"(B$:=(#8+5+$#"#(="%5#(2+3)&$N)62&#(
#""(RiC\a('2&'+":"%;()&/(:2(#""(=2B(5"25%"()/)5:()#(/$m'8%6"#()&/('=)%%"&3"#(3+2B(2."+(6>"0(
D5$#2/"#(27(#8+5+$#"(5+2.$/"(:="(2552+:8&$:;(:2(#""(B="&()&/(=2B(5"25%"(+"X5+$2+$6N"()'+2##(
>8%65%"(32)%#(B="&(25"+)6&3($&(:="(>$/#:(27(8&'"+:)$&6"#4('=)&3$&3(:">52#()&/(5+"##8+"#0(
\28+:=4(5+2)'6."(%")+&$&3(7+2>(B"%%X=)&/%"/(#8+5+$#"#('2&:+$,8:"#(:2(+"X')%$,+)62&()&/(>2/"%(
85/)6&3(G122/#4(IJSlL0(<=$#(#:)+:#(B$:=(')+"78%(#:8/;(27(#":#(27($&'$/"&:#(:=):(+".")%(RiC\a(
d):'=$&3(GC%%#5)B4(IJSTL0(1=):('2&#6:8:"#()&(j$&:"+"#6&3k($&'$/"&:('=)&3"#0(`+3)&$N)62&#(8#8)%%;(
+"#"+."(%$>$:"/(+"#28+'"#(:2(#:8/;("."&:#(:=):(:=+"):"&"/(2+(+"#8%:"/($&(#$3&$W')&:("'2&2>$'(%2##(2+(
=)+>(:2(5"25%"0(?8:(:=$#($#($&="+"&:%;(+")'6."()&/(>)&;(7)':2+#(&)++2B(:="(%")+&$&3(52##$,%"0(<2(,"(
5+2)'6."($&(%")+&$&3(),28:(+"#$%$"&'"(#=$A#(:="(72'8#M(#:8/;(=2B(#;#:">#(B2+E(B"%%(8#8)%%;(/"#5$:"(
/$m'8%6"#4(%$>$:"/(+"#28+'"#4(:+)/"X2P#4()&/(#8+5+$#"#@RiC\a(d):'=$&30(_&()//$62&4("P"'6."(
%")+&$&3(+"^8$+"#(2+3)&$N)62&#(:2(/"."%25(%$3=:B"$3=:(>"'=)&$#>#(:2(72#:"+(:="(#5+")/(27(%")+&$&3(
),28:(RiC\a(d):'=$&3()'+2##(+2%"#()&/(%"."%#0(
g (t
!"#$%$"&'"($#()(."+,(:=):(+"7"+#(:2(')5),$%$6"#(:=):(,8$%/()&/(#8#:)$&(:="(52:"&6)%(72+('2&6&828#(
)/)5:),$%$:;0(`&%;(7"B(2+3)&$N)62&#(')&(j/2k(+"#$%$"&'"4(,8:(:="#"(#;#:">#(5+2.$/"(:="(j5+227#k(27(
'2&'"5:(:=):(')&(38$/"()%%(2+3)&$N)62&#(:2(/"."%25(:="()/)56."(')5)'$6"#(&""/"/(:2(f28+$#=($&()&(
$&'+")#$&3%;($&:"+/"5"&/"&:(B2+%/()#(:="(."%2'$:;(27('=)&3"()''"%"+):"#0((
Annotated0bibliography00
C%%#5)B4(n0(GIJSTL0(G3)&%H"I$'0/&%3'!3%$$03%>'J%03#$,.$')/&'"C$%3:),"/$'"@'(%)-$'3%$"*:#/1'5/(%3/%('
$%3:#.%'"0()1%$(Gb)#:"+k#(:="#$#L0(c8&/(a&$."+#$:;4(RB"/"&0(!":+$"."/(7+2>(=Q5#Mhh
%850%8,0%80#"h#:8/"&:X5)5"+#h#")+'=h58,%$')62&hVJVtTIJ0(_%%8#:+)62&(27(RiC\a#4(RiC\a(
'):'=$&3($&(+"#$%$"&'"(>)&)3">"&:(72+('+$6')%(/$3$:)%($&7+)#:+8':8+"0(
d)+%#2&(n0(b04(H(-2;%"4(n0(d0(GIJJJL0(F$3=%;(256>$N"/(:2%"+)&'"M(!2,8#:&"##()&/(/"#$3&($&('2>5%"9(
#;#:">#;'K+B$#.$'6%:#%2'L%M%3$N'OPGSSL4(ITI[XsI0(=Q5#Mhh/2$02+3hSJ0SSJshY=;#!".c"Q0
Vt0ITI[0(R=2B#(:="+"($#()(:+)/"X2P(,":B""&(58+#8$:(27(256>)%$:;()&/(,+$Q%"&"##(:2(#8+5+$#"(
"."&:#()&/(:=):(:=$#(:+)/"X2P($#()(78&/)>"&:)%('=)+)':"+$#6'(27(#;#:">#0((
d22E4(!0(_0(GS[[VL0(F2B('2>5%"9(#;#:">#(7)$%0(d=$')32(_cM(d23&$6."(<"'=&2%23$"#(c),2+):2+;0(=Q5#Mhh
BBB0+"#")+'=3):"0&":h5+2W%"h!$'=)+/ud22Esh58,%$')62&h
IIVl[lSTVuF2Bu'2>5%"9u#;#:">#u7)$%h%$&E#hJ'[KJTstSJ/,[K)V['JJJJJJ05/7(v8$'E(
#8>>)+;(27(W&/$&3#(),28:(=2B(#;#:">#(25"+):"(2&(:="(+)33"/("/3"(78%%(27(3)5#(:=):(+"^8$+"(
=8>)&("95"+6#"0(
d22E4(!0(_04(H(122/#4(-0(-0(GIJSKL0(R$:8)62&(&2+>)%M(C%%(728%"/(850(*"%2'$:;M(1",(Y"+72+>)&'"()&/(
`5"+)62&#(d2&7"+"&'"4(i"B(w2+E0(!":+$"."/(7+2>(=Q5#MhhBBB02+"$%%;0'2>h$/")#h#$:8)62&X
&2+>)%X)%%X728%"/X850(F2B(#;#:">#()+"(>"##;4(RiC\a($#(:="(&):8+)%(#:):"(27(#;#:">#4()&/(
#8552+6&3(RiC\a(d):'=$&3($#("##"&6)%0(
-"EE"+4(R0(10(C0(GIJSVL0(G+%'$)@%(B')/)3.+#$(;'6%*B#/1'"/'+0-)/'%A!%3,$%')/&'#//":),"/N'3%&0.#/1'
C03%)0.3).B')/&'."-!*#)/.%0(i"B(w2+EM(!28:%"/3"0(F2B(5+"##8+"(72+('2>5%$)&'"(8&/"+>$&"#(
)/)56."(')5)'$:;()&/(8&/"+>$&"#(#;#:">(5"+72+>)&'"()&/(+"#$%$"&'"(
\$&E"%4(b0(GIJSSL0(Q/'R*%A#C#*#(B>'6%.":%3B'@3"-'G%.+/"*"1#.)*')/&'?".(3#/)*'S03!3#$%'"/'(+%'
T)M*%F%*&0(R:)&72+/M(R:)&72+/(a&$."+#$:;(Y+"##0(d2&:+)#:#(>):'=(')#"#(27(+"#$%$"&'"($&()'62&(
."+#8#(,+$Q%"&"##($&()'62&(7+2>(>$%$:)+;(=$#:2+;0(
(F2%%&)3"%4(D04(H(122/#4(-0(-0(GIJJKL0(D5$%238"M(!"#$%$"&'"("&3$&""+$&3(5+"'"5:#0(_&(D0(F2%%&)3"%4(-0-0(
122/#4(H(i0(c"."#2&(GD/#0L4(6%$#*#%/.%'%/1#/%%3#/1>'8"/.%!($')/&'!3%.%!($(G550(ISXstL0(
C%/"+#=2:4(aoM(C#=3):"0(!"#$%$"&'"()#(:="(')5),$%$:;(72+(78:8+"()/)56."()'62&0((
`#:+2>4(D0(GIJJsL0(<2B)+/()(,"=).$2+)%(:="2+;(%$&E$&3(:+8#:4(+"'$5+2'$:;4()&/(+"58:)62&0(_&(D0(`#:+2>(
H(n0(1)%E"+(GD/#0L4(G30$(')/&'3%.#!3".#(B>'5/(%3&#$.#!*#/)3B'*%$$"/$'@3"-'%A!%3#-%/()*'3%$%)3.+0(
!8##"%%(R)3"(\28&/)62&4(iw0(F2B(+"'$5+2'$:;($#("##"&6)%(:2(#;&'=+2&$N"()'+2##(+2%"#()&/(%"."%#(
$&()/)56."(#;#:">#0(
Y"++;4(R04(H(1")+#4(!0(GIJSIL0(a&/"+3+28&/()/)5:)62&#M(d)#"#(7+2>(=")%:=(')+"0(8"1/#,"/'
G%.+/"*"1B')/&'12+4N'UP4(ITsXKJ0(=Q5Mhh/90/2$02+3hSJ0SJJlh#SJSSSXJSSXJIJlXI0(e"&"+)%(
5)Q"+&#(27(+"#$%$"&'"X$&X)'62&()+"(".$/"&:($&(=2B(D>"+3"&';(!22>#()/)5:(:2('=)&3$&3(
5)6"&:(%2)/#0(
1)Q#XY"+2Z4(n0()&/(122/#4(-0(-0(GIJJ[L0(d225"+)6."(C/.2')';M(C(R:+):"3;(72+(_&:"3+)6&3(-$."+#"(
Y"+#5"'6."#($&(C&2>)%;(!"#52&#"0(8"-!0(%3'S0!!"3(%&'8""!%3),:%'V"34>'G+%'W"03/)*'"@'
8"**)C"3),:%'8"-!0,/14(SVGIL4(SlTXS[V0(F2B(>8%65%"(3+285#('22+/$&):"/()&/()/)5:"/(:2(
>)&)3"()&()':8)%(#8+5+$#$&3()&2>)%;($&(#5)'"(#=8Q%"(>$##$2&#0(
122/#4(-0(-0(GIJSTL0(\28+(d2&'"5:#(72+(+"#$%$"&'"()&/(:="$+($>5%$')62&#(72+(#;#:">#(#)7":;($&(:="(7)'"(
27('2>5%"9$:;0(6%*#)C#*#(B'X/1#/%%3#/1')/&'SB$(%-'S)@%(B4(UPU4(TX[0(=Q5Mhh/90/2$02+3hSJ0SJSKh
g (T
O0+"##0IJST0Js0JSV0(_&:+2/8'"#(+"#$%$"&'"()#(3+)'"78%("9:"&#$,$%$:;()&/('2&:+)#:#(:=$#(B$:=(2:="+(
8#"#(27(:="(%),"%(+"#$%$"&'"(72+(+",28&/()&/(+2,8#:&"##0(
122/#4(-0(-0(GD/0L0(GIJSlL0(R<DccC(!"52+:(7+2>(:="(RiC\a'):'="+#(B2+E#=25(2&('25$&3(B$:=(
'2>5%"9$:;0(RiC\a(d):'="+#(d2&#2+68>0(!":+$"."/(7+2>(=Q5#Mhh/+$."03223%"0'2>hW%"h/h
J?lE\E:T19c"-<>%T'<\#1x\d,Sah.$"B0((Y)Q"+&#(7+2>(')#"#(27(RiC\a(d):'=$&3($&(B",(
"&3$&""+$&3()&/(25"+)62&#0(
122/#4(-0(-0(GIJSVL0(<="(:="2+;(27(3+)'"78%("9:"&#$,$%$:;0(X/:#3"/-%/('SB$(%-$')/&'?%.#$#"/$N'
sVMtssytTl0((=Q5Mhh/90/2$02+3hSJ0SJJlh#SJKK[XJSVX[lJVXs0(\8&/)>"&:)%('2>5+"="&#$."(
:="2+;(),28:(+"#$%$"&'"()&/(,+$Q%"&"##(27(%);"+"/(&":B2+E#(:=):($&'%8/"(=8>)&(#;#:">#0(
g (K
... Many scholars understand resilience as a mechanism for coping with complexity (Berkes, 2007;Brand & Jax, 2007;Chandler, 2014;Folke, 2006;Holling, 1973;Hollnagel et al., 2006;Walker, 2020;Woods, 2019). At the same time, most resilience scholars see adaptive capacity as the essential characteristic of resilience (Alexander, 2013;Edwards, 2009;Folke et al., 2002;Folke, 2006;Holling, 1973;Hollnagel et al., 2006;Luthar & Cicchetti, 2000;Provan et al., 2020;Walker et al., 2004;Walker, 2020;Woods, 2005Woods, , 2015Woods, , 2018. This article shares both assumptions. ...
... Following the tradition of Holling and other scholars, this article focuses on resilience thinking as prevalent in fields such as socio-ecological resilience research and resilience engineering research from organizational studies (Berkes, 2007;Carpenter et al., 2001;Folke, 2006;Folke et al., 2002;Holling, 1973Holling, , 1996Hollnagel et al., 2006;Provan et al., 2020;Walker, 2020;Walker et al., 2004;Woods, 2005Woods, , 2015Woods, , 2018Woods, , 2019Woods et al., 2017). Their basic commonality-despite being very distinct fields-is the importance of complexity when analyzing resilience. ...
Article
Full-text available
The concept of resilience intrinsically links with both complexity and adaptive capacity. Scholars from different fields agree on this. Still, the detailed relations between resilience, complexity, and adaptive capacity need a more thorough theoretical analysis. This article analyses resilience with the help of assumptions from complex adaptive systems (CAS) theory to answer two questions in more detail: What is the relation between resilience and complexity? How can adaptive capacity contribute to resilience? By applying basic ideas from CAS theory to the resilience discourse, the article deduces that complexity of a system is a necessary condition for resilience because complex systems consist of agents that possess adaptive capacity, whereas simple systems consist of mere elements that cannot adapt to unexpected disruptions. The relation between complexity and resilience is multidimensional. Growing complexity leads to a growing need for resilience because the chances for severe, unexpected disruptions increase. The analysis of adaptive capacities revealed that systems and the agents they consist of can possess of specialized and general adaptive capacity. General adaptive capacity is the core feature of resilience because it enables systems to cope with unexpected disruptions. System design principles such as diversity within functional groups and redundancy help to increase general adaptive capacity. The same is true on the community level for social capital and on the individual level for disaster preparedness measures because they increase coping capacities independent of specific hazards.
... At this juncture, and for some finite duration (e.g., seconds, minutes, hours, or even permanently, according to the relevant timescale of the system to hand), the system is unable to cope and is propelled to explore innovative paths toward a novel state of stability. In this way, with timescales than can differ significantly from that of human perception, resilience can be seen as a constant state of becoming [134]. Of course, the system may simply fail altogether, and frequently does, although this runs counter to the standard human narrative of success. ...
Article
Changes in technology, particularly for example in commercial air operations, have led to incremental increases in the number and variety of associated safety procedures and checklists. This work addresses concerns about how people and systems respond to unanticipated events, as applicable to such commercial air operations, and to examine whether these “ if–then ” approaches prove sufficient to respond to prospective operational uncertainties. The current work draws from the literature on systems resilience, cognitive flexibility, and adaptation to consider how response strategies that are integrated into human–machine training at all levels of operation can aid in effective resolution to such unanticipated events. A number of scientific insights, methods, and domains are identified as being able to be employed to avoid catastrophic failure in current and prospective operational environments. While heuristics for advisement do provide an initial level of defensive protection, evolving airspace operations need to be adaptive to, and resilient in respect of, emerging and even unanticipated challenges. Prospective response strategies need to encompass both the demands that can be evidently foreseen and those that remain at present, indeterminate. Resilience in responding appears to be a primary dimension of success in relation to these challenges. The information herein distilled can increase operator performance and aviation systems’ response to nonproceduralized and unanticipated events as well as being applied to a vast array of other safety-critical operations beyond this one realm.
... Noch direkter definiert er schon 2005 Resilienz als Fähigkeit, sich Störungen und Disruptionen anzupassen oder diese zu absorbieren (Woods 2005: 302). Passend zur Betonung von überraschend auftretenden Ereignissen spezifiziert Woods seine Definition im Hinblick darauf, dass die Resilienz eines Systems sich darin ausdrücke, wie gut es sich an Störungen und Veränderungen anpassen könne, die außerhalb dessen liegen, wofür das System ursprünglich ausgelegt wurde (Woods 2018(Woods : 2, 2006. Anpassungsfähigkeit an widrige Umstände und Ereignisse wird auch von anderen Autoren als charakteristisch für Resilienz skizziert (Dekker/Woods 2010: 134, Fujita 2006: 67, Hale/Heijer 2006b: 132, Hollnagel/Sundström 2006: 343, Hollnagel/Woods 2006: 357, Leveson et al. 2006 (Hollnagel 2006: 16). ...
Thesis
Die zunehmende Komplexität unserer Welt macht das Auftreten disruptiver Ereignisse mit unvorhersehbaren Folgen wahrscheinlicher. Die Zukunft ist durch Unsicherheit gekennzeichnet. Deshalb brauchen Gesellschaften und ihre kritische Infrastrukturen Resilienz, verstanden als generische Anpassungsfähigkeit dank Flexibilität und loser Ressourcen. Der Autor argumentiert in diesem Buch, dass Resilienz durch das Zusammendenken von individueller Freiheit und Sicherheit normativ wünschenswert sein kann. Davon ausgehend entwickelt er ein neues Resilienz-Konzept für die zivile Sicherheitsforschung und zeigt, wie die Ingenieurwissenschaften dieses durch Systemprinzipien wie Diversität, Modularität, Dezentralität und Redundanz umsetzen können.
... These dehumanising practices, in terms of treatment, social interaction, guarantee of rights, valuation or recognition of work, undermine any possibility of building resilient systems. Resilience requires initiative and proactivity, as they are needed to develop adaptive systems that can respond to unavoidable events [19], and these elements are not likely to be developed in environments that dehumanise work teams. The question 'is it possible to deal or not?' found in the system map (Figure 1), was proposed to raise the problem of the secular social paradigm established between managers and employees (dominant and dominated, respectively) on power issues, with the intention of overcoming it and subsequently achieving a desirable level of system resilience. ...
Chapter
Full-text available
Download for free: https://www.intechopen.com/online-first/79696 In this chapter, food safety is portrayed as an intrinsic component of food security and food systems. The objective is to discuss the ‘commercial restaurant’ system and the ‘kitchen worker’ subsystem from the perspective of building resilience in food safety. Relationship maps built for the system and subsystem guide the presentation and discussion of structural, organisational, social and symbolic aspects and elements. Resilience investigation is based on the references of the International Risk Governance Centre Resource Guide on Resilience and current and emerging topics related to food safety, such as risk perception of foodborne diseases, cognitive illusions, sociological aspects, social dimension of taste, humanisation and working conditions and precariousness of work in kitchens. In the final section, a list of recommendations for building resilience in commercial restaurants is presented to help researchers, decision-makers and practice agents apply this concept in their fields of expertise.
Article
Full-text available
The pressures of an everchanging world have impacted the ways in which service-based systems operate, along with their forms and boundaries. Resilience and survivability have been treated interchangeably when readying a system to remain true to its functions despite disturbances. Some situations prove the concepts may not always be the equivalent of the other, not even the consequence of the other. There may come scenarios where system components fail to adhere to certain predefined thresholds and cross a breaking point. It is therefore proposed in this study that systems can be survivable, instead of resilient, when they comply in time with the resurgence property. This property signifies the systematic behavior of overcoming a certain stagnation period and, after a time range, return as a transformed system with new functions and challenges. Through this study, it was detected that the symmetries between resilience and survivability are only superficial if systems suffer breakages after misconceiving the true causes of failure. Still, a lack of consensus among scientists and practitioners remains an issue when applying resilience and survivability in their own problems. Although workful, pushing to achieve a greater consensus would signify optimal performance in multifaceted systems involving technical, social, and economic challenges.
Article
Full-text available
The aim of this concept article is to articulate multiple contributions from sociotechnical fields into an approach for sustaining human-centred lifecycle management of industrial systems. Widespread digitalization and advanced robotics have fostered interest on innovative human-machine integration and sophisticated organizational transformation that is conducive to meeting the challenges of sustainability. Complementing technology-driven and data-driven approaches to industrial systems development, the human factors approach offers a systems perspective that is at once human-centred while striving for overall system performance, by considering technological and organizational perspectives alike. The paper presents a set of recent human factors developments, selected based on their potential to advance sustainability in industrial systems, including an activity-centred design perspective of industrial systems, and a unified and entangled view on organizational goals yielding a dynamic change approach to socio-technical systems management. Moreover, developments in organizational resilience are coupled with recent breakthrough empirical understanding of conditions conducive to attaining resilience in operations. The cross-pollination of the human factors developments is further pursued, resulting in a proposal of combined key organizational vectors that can mutually leverage and sustain human-centred design and management of industrial systems (production and logistics systems alike) for resilience. Systems thinking encompassing human, organizational and technological perspectives supports integration of insights across entangled domains; this can leverage both system enhancements that promote the satisfaction of dynamic situation-dependent goals, as well as the fulfilment of objectives derived from long-term values of an organization.
Chapter
Full-text available
The increasing complexity of our world makes the occurrence of disruptive events with unforeseeable consequences more likely. The future is characterised by uncertainty; therefore, societies and their critical infrastructures need resilience, understood as generic adaptability thanks to flexibility and loose resources. In this book, the author argues that resilience can be normatively desirable if it is used to combine individual freedom and security. Using this as his premise, he develops a new concept of resilience for civil security research and shows how the engineering sciences can implement it through system principles such as diversity, modularity, decentralisation and redundancy.
Article
Full-text available
Infrastructure are at the center of three trends: accelerating human activities, increasing uncertainty in social, technological, and climatological factors, and increasing complexity of the systems themselves and environments in which they operate. Resilience theory can help infrastructure managers navigate increasing complexity. Engineering framings of resilience will need to evolve beyond robustness to consider adaptation and transformation, and the ability to handle surprise. Agility and flexibility in both physical assets and governance will need to be emphasized, and sensemaking capabilities will need to be reoriented. Transforming infrastructure is necessary to ensuring that core systems keep pace with a changing world.
Article
Full-text available
The paper introduces the theory of graceful extensibility which expresses fundamental characteristics of the adaptive universe that constrain the search for sustained adaptability. The theory explains the contrast between successful and unsuccessful cases of sustained adaptability for systems that serve human purposes. Sustained adaptability refers to the ability to continue to adapt to changing environments, stakeholders, demands, contexts, and constraints (in effect, to adapt how the system in question adapts). The key new concept at the heart of the theory is graceful extensibility. Graceful extensibility is the opposite of brittleness, where brittleness is a sudden collapse or failure when events push the system up to and beyond its boundaries for handling changing disturbances and variations. As the opposite of brittleness, graceful extensibility is the ability of a system to extend its capacity to adapt when surprise events challenge its boundaries. The theory is presented in the form of a set of 10 proto-theorems derived from just two assumptions-in the adaptive universe, resources are always finite and change continues. The theory contains three subsets of fundamentals: managing the risk of saturation, networks of adaptive units, and outmaneuvering constraints. The theory attempts to provide a formal base and common language that characterizes how complex systems sustain and fail to sustain adaptability as demands change.
Article
Full-text available
Safety is Not a System Property One of the recurrent themes of this book is that safety is something a system or an organisation does, rather than something a system or an organisation has. In other words, it is not a system property that, once having been put in place, will remain. It is rather a characteristic of how a system performs. This creates the dilemma that safety is shown more by the absence of certain events – namely accidents – than by the presence of something. Indeed, the occurrence of an unwanted event need not mean that safety as such has failed, but could equally well be due to the fact that safety is never complete or absolute. In consequence of this, resilience engineering abandons the search for safety as a property, whether defined through adherence to standard rules, in error taxonomies, or in 'human error' counts. By doing so it acknowledges the danger of the reification fallacy, i.e., the tendency to convert a complex process or abstract concept into a single entity or thing in itself (Gould, 1981, p. 24). Seeing resilience as a quality of functioning has two important consequences. • We can only measure the potential for resilience but not resilience itself. Safety has often been expressed by means of reliability, measured as the probability that a given function or component would fail under specific circumstances. It is, however, not enough that systems are reliable and that the probability of failure is below a certain value (cf. Chapter 16); they must also be resilient and have the ability to recover from irregular variations, disruptions and degradation of expected working conditions.
Article
Full-text available
1) Complex systems are intrinsically hazardous systems. All of the interesting systems (e.g. transportation, healthcare, power generation) are inherently and unavoidably hazardous by the own nature. The frequency of hazard exposure can sometimes be changed but the processes involved in the system are themselves intrinsically and irreducibly hazardous. It is the presence of these hazards that drives the creation of defenses against hazard that characterize these systems. 2) Complex systems are heavily and successfully defended against failure. The high consequences of failure lead over time to the construction of multiple layers of defense against failure. These defenses include obvious technical components (e.g. backup systems, 'safety' features of equipment) and human components (e.g. training, knowledge) but also a variety of organizational, institutional, and regulatory defenses (e.g. policies and procedures, certification, work rules, team training). The effect of these measures is to provide a series of shields that normally divert operations away from accidents. 3) Catastrophe requires multiple failures – single point failures are not enough..
Article
Clinical work is accomplished by complex, highly distributed, joint cognitive systems, and involves high levels of uncertainty and ambiguity. Hospital emergency departments (EDs) in particular must adapt to uncertainty, ambiguity and change on a variety of different temporal scales. Many of these adaptations are unofficial, in part because they cannot be specified in advance and because the official models of healthcare work do not include or acknowledge them. This paper presents two case studies of reactive adaptation within the ED setting and uses these to explore their implications for cognitive engineering and design.
Article
Acentral question has overshadowed the thinking of social scientists at least since the work of Thomas Hobbes (1960 [1651]): How do communities of individuals sustain agreements that counteract individual temptations to select short-term, hedonistic actions when all parties would be better off if each party selected actions leading to higher group and individual returns? In other words, how do groups of individuals gain trust? Hobbes's answer is that communities have to rely on an authority external to themselves to impose and enforce commands that extricate them from the traps of their own making. Hobbes considers it impossible for individuals to escape from what we now call social dilemmas and argues that a strong, centralized, and external authority is therefore necessary. Thus, for Hobbes, trust is created by the presence of strong external actors.
Retrieved from hQps:// lup.lub.lu.se/student-papers/search/publica6on/8084520. Illustra6on of SNAFUs, SNAFU catching in resilience management for cri6cal digital infrastructure
  • J Allspaw
Allspaw, J. (2015). Trade-offs under pressure: Heuris,cs and observa,ons of teams resolving Internet service outages (Master's thesis). Lund University, Sweden. Retrieved from hQps:// lup.lub.lu.se/student-papers/search/publica6on/8084520. Illustra6on of SNAFUs, SNAFU catching in resilience management for cri6cal digital infrastructure.
Shows there is a trade-off between pursuit of op6mality and briQleness to surprise events and
  • J M Carlson
  • J C Doyle
Carlson J. M., & Doyle, J. C. (2000). Highly op6mized tolerance: Robustness and design in complex systems. Physics Review LeMers, 84(11), 2529-32. hQps://doi.org/10.1103/PhysRevLeQ. 84.2529. Shows there is a trade-off between pursuit of op6mality and briQleness to surprise events and that this trade-off is a fundamental characteris6c of systems.
Retrieved from hQps://www.oreilly.com/ideas/situa6on-normal-all-fouled-up. How systems are messy, SNAFU is the natural state of systems
  • R I Cook
  • D D Woods
Cook, R. I., & Woods, D. D. (2016). Situa6on normal: All fouled up. Velocity: Web Performance and Opera6ons Conference, New York. Retrieved from hQps://www.oreilly.com/ideas/situa6on-normal-all-fouled-up. How systems are messy, SNAFU is the natural state of systems, and suppor6ng SNAFU Catching is essen6al.