Architecting Resilient Systems: Accident Avoidance and Survival and Recovery from Disruptions (Wiley Series in Systems Engineering and Management)

323 Pages·2009·1.24 MB·English

by  Scott Jackson

ARCHITECTING RESILIENT
SYSTEMS

ARCHITECTING RESILIENT
SYSTEMS
Accident Avoidance and Survival
and Recovery from Disruptions
Scott Jackson
Copyrightr2010byJohnWiley&Sons,Inc.Allrightsreserved.
PublishedbyJohnWiley&Sons,Inc.,Hoboken,NewJersey.
PublishedsimultaneouslyinCanada.
Nopartofthispublicationmaybereproduced,storedinaretrievalsystem,ortransmittedinany
formorbyanymeans,electronic,mechanical,photocopying,recording,scanning,orotherwise,
exceptaspermittedunderSection107or108ofthe1976UnitedStatesCopyrightAct,without
eitherthepriorwrittenpermissionofthePublisher,orauthorizationthroughpaymentofthe
appropriateper-copyfeetotheCopyrightClearanceCenter,Inc.,222RosewoodDrive,Danvers,
MA01923,[phone],fax[phone],oronthewebatwww.copyright.com.Requeststo
thePublisherforpermissionshouldbeaddressedtothePermissionsDepartment,JohnWiley&
Sons,Inc.,111RiverStreet,Hoboken,NJ07030,[phone],fax[phone],oronlineat
http://www.wiley.com/go/permission.
LimitofLiability/DisclaimerofWarranty:Whilethepublisherandauthorhaveusedtheirbest
effortsinpreparingthisbook,theymakenorepresentationsorwarrantieswithrespecttothe
accuracyorcompletenessofthecontentsofthisbookandspecificallydisclaimanyimplied
warrantiesofmerchantabilityorfitnessforaparticularpurpose.Nowarrantymaybecreatedor
extendedbysalesrepresentativesorwrittensalesmaterials.Theadviceandstrategiescontained
hereinmaynotbesuitableforyoursituation.Youshouldconsultwithaprofessionalwhere
appropriate.Neitherthepublishernorauthorshallbeliableforanylossofprofitoranyother
commercialdamages,includingbutnotlimitedtospecial,incidental,consequential,orother
damages.
Forgeneralinformationonourotherproductsandservicesorfortechnicalsupport,pleasecontact
ourCustomerCareDepartmentwithintheUnitedStatesat(800)762-2974,outsidetheUnited
Statesat(317)572-3993orfax(317)572-4002.
Wileyalsopublishesitsbooksinavarietyofelectronicformats.Somecontentthatappearsinprint
maynotbeavailableinelectronicformats.FormoreinformationaboutWileyproducts,visitour
websiteatwww.wiley.com.
LibraryofCongressCataloging-in-PublicationData:
Jackson,Scott.
Architectingresilientsystems:accidentavoidanceandsurvivalandrecoveryfromdisruptions/
ScottJackson.
p.cm.—(Wileyseriesinsystemsengineeringandmanagement)
ISBN978-0-470-40503-1(pbk.)
1. Reliability(Engineering)2. Systemsengineering.3. Systemsafety.4. Industrialsafety.
I.Title.
TA169.J3342010
620.001u171—dc22
2009018436
PrintedintheUnitedStatesofAmerica
10 9 8 7 6 5 4 3 2 1
Finger in the Dyke
ythe boy clambered up the heights until he reached the hole. His chubby little
finger was thrust in, almost beforehe knewit. The flowingwas stopped! Ah! he
thought,withachuckleofboyishdelight,theangrywatersmuststaybacknow!
HaarlemshallnotbedrownedwhileIamhere!
—MaryElizabethMapesDodge,
HansBrinker(1865,p.158)

Contents
Preface ix
Acknowledgments xiii
Notes on Terminology xv
Chapter 1 On Resilience 1
Chapter 2 System Resilience and Related Concepts 11
Chapter 3 Disruptions 39
Chapter 4 Case Histories 55
Chapter 5 Culture 91
Chapter 6 Capabilities 121
Chapter 7 Infrastructure 151
Chapter 8 Resilience Architecting 159
Chapter 9 Governance 187
Chapter 10 Measuring Resilience 197
Chapter 11 Cost 211
Chapter 12 Implementation 225
Chapter 13 A Summary of Themes 239
Chapter 14 A Final Word 245
vii
viii CONTENTS
Appendix A Domain-Specific Example for Architecting a
Fire-Protection Infrastructure System 249
Appendix B A Resilience Analysis of Metrolink 111 259
References 273
Index 285