Architecting Resilient Systems

Scott Jackson is a Principal Engineer at Burnham Systems Consulting, assisting commercial aircraft companies throughout the world in adapting and implementing systems engineering processes across their organizations. He also has taught graduate-level systems engineering courses at the University of Southern California, relying on his experience in systems engineering and engineering leadership roles at Boeing, McDonnell Douglas, and Douglas Aircraft.

• Preface or How This Book Came Into Being xiiiAcknowledgment xv1 Introduction -- On Resilience 11.1 The Multidisciplinary Challenge 21.2 The Concept of the System 31.3 The Paradox of Humans in the System 31.4 The Infrastructure as a System 41.5 The Architecture of a System 51.6 Disruptions 61.7 Adaptability 71.8 Culture 71.9 Measuring Resilience 81.10 The Challenges 91.11 Identification of Resilience Techniques 91.12 Evaluation of Resilience Techniques Through Case Studies 101.13 Evaluation of the Techniques 101.14 What Is a Technique? 121.15 How Statements of Resilience Techniques are Synthesized 132 Resilience Literature 153 Terms and Definitions 173.1 Objective 173.2 What Is an Adversity? 173.3 Traditional Definitions of Resilience 183.4 A Brief Lesson in Abstractions 183.5 General features 193.6 Glossary of Symbols and Mathematical Characters 194 Resilience Abstractions 294.1 Objective 294.2 What Is System Resilience? 294.3 Traditional Definitions of Resilience 304.4 Encounter 304.5 Abstraction Properties 304.6 Concrete Entities 315 Methodology 355.1 Overview of Methodology 355.2 Qualitative Research 355.3 Qualitative Interpretation of Solutions Proposed by Domain Experts 355.4 Qualitative Judgments of Dependencies Among Resilience Techniques 365.5 Qualitative Judgments of Grouping of Resilience Techniques 365.6 Interpretation of Historical Events 365.7 Objectives of System Resilience 376 Techniques 396.1 The Robustness Attribute 396.2 The Absorption Design Technique 396.3 The Physical Redundancy Design Technique 506.4 The Functional Redundancy Resilience Technique 576.5 The Drift Correction Resilience Technique 646.6 The Restructuring Resilience Technique 756.7 The Repairability Resilience Technique 836.8 The Human Involvement Resilience Technique 896.9 The Reduce Hidden Interactions Resilience Technique 986.10 The Distributed Capacity Technique 1036.11 The Neutral State Technique 1046.12 The Loose Coupling Technique 1046.13 The Layered Defense Resilience Technique 1046.14 The Internode Interaction Technique 1136.15 The Complexity Technique 1247 Case Studies 1338 State Model 1459 Organizational Factors 1479.1 Loose Coupling in Organizational Systems 1479.2 Observability Plus Decisions 1479.3 Organizational Decision-Making 1489.4 Informed Operator 14910 Culture 15110.1 The Culture Management Rule 15110.2 The Cultural Change Rule 15211 Executing Resilience 15312 Governance 15512.1 Inspecting in Quality 15612.2 Independent Reviews 15612.3 Governance and Culture 15812.4 A Three-Tiered View of Technical Reviews 15812.5 System-Level Review 15912.6 Foreign Object Debris (FOD) 16112.7 Responsibilities for Governance 16212.8 Resilience Node 16212.9 Program System Resilience Team 16312.10 Program Management 16313 Infrastructure 16513.1 The Architecture of an Infrastructure System 16513.2 Operational View 16613.3 Organizational View 16613.4 The Organization and Latent Conditions 16713.5 The Integrated Product Team (IPT) Concept 16813.6 Infrastructure Architecting 16913.7 The Infrastructure as a System of Systems 16913.8 Network-Based Infrastructures 17114 Cost 17314.1 Miracle on the Hudson 17314.2 Space Shuttle Flights 17314.3 New York Power Restoration 17414.4 Summary 17415 A Summary of Themes 175References 18016 A Final Word 18116.1 The Challenges 183Appendix A: Resilience of a Fire Protection System 185Appendix B: Resilience of Metrolink 111 195Appendix C: Resilience Architecting -- A Review 211Index 243