CRITICAL INFRASTRUCTURE RESILIENCE INDEX (CIRI) LESSON X CRITICAL INFRASTRUCTURE RESILIENCE INDEX (CIRI)

Objective Understand the methdology How to use CIRI as an CI operator www.improverproject.eu

What is CIRI? Holistic, easy-to-use computable self-assessment methodology Applicable to all types of critical infrastructures Gives and and indicator of the resilience level of the asset Based on indicators Can be used as a basis for further detailed analysis, i.e: ITRA – Technological resilience analysis IORA – Organisational resilience analysis Inspired by the crisis management cycle www.improverproject.eu

CIRI – a resileince assesment methodology in the ICI-REF framework www.improverproject.eu

1. The phases of resilience The backbone of the resilience analysis www.improverproject.eu

The phases of resilience Risk management Prevention Preparedness Warning Response Recovery Learning Inspired and adapted from the crisis management cycle The backbone for the resilience assessment Each phase is broken down in measurable indicators Illustrate the temporal dimensions of resilience www.improverproject.eu

The phases of resilience Risk management Risk identification Risk analysis Risk evaluation Risk treatment Needs to know what to Prevent and mitigate Prepare for Monitor Respond to Focuses on the quality of the risk assessment rather than the results The phases of resilience Risk management Prevention Preparedness Warning Response Recovery Learning www.improverproject.eu

The phases of resilience Prevention Measures that enable an organization to avoid, preclude or limit the impact of a disruption “Activities and measures to avoid existing and new disaster risks” (UNISDR, 2017) Complete avoidance of losses is not always feasible  the task very often reverts to that of mitigation The phases of resilience Risk management Prevention Preparedness Warning Response Recovery Learning www.improverproject.eu

The phases of resilience Preparedness “The knowledge and capacities developed by (…) to effectively anticipate, respond to and recover from the impacts of likely, imminent or current disasters" (UNISDR, 2017) Continuous building of consequence reducing barriers Key processes: Planning og organization, capacity and capability building The phases of resilience Risk management Prevention Preparedness Warning Response Recovery Learning www.improverproject.eu

The phases of resilience Warning Monitoring events to spot signals and indicators that predict the location, timing and magnitude of future or immediate disruptions Starting point for crisis response Provide extra room for preparatory or mitigating measures Key components Detection Analysis and forecasting Dissemination of alerts and warnings The phases of resilience Risk management Prevention Preparedness Warning Response Recovery Learning www.improverproject.eu

The phases of resilience Response “Actions taken directly before, during or immediately after a disaster in order to save lives, reduce health impacts, ensure public safety and meet the basic subsistence needs of the people affected”. (UNISDR, 2017) Damage limitation Crisis decision-making Activation of preparedness plans and actions The phases of resilience Risk management Prevention Preparedness Warning Response Recovery Learning www.improverproject.eu

The phases of resilience Recovery The act or process of returning to a normal state after a period of difficulty Restoration, and improvements where appropriate, of facilities, livelihoods and living conditions of disaster-affected communities, including efforts to reduce disaster risk factors The phases of resilience Risk management Prevention Preparedness Warning Response Recovery Learning www.improverproject.eu

The phases of resilience Learning Post-crisis learning: Evaluation and implementation of lessons Reduce long-term consequences Relates to all resilience phases The phases of resilience Risk management Prevention Preparedness Warning Response Recovery Learning Network learning Organisational learning Collective learning Individual learning Lessons institutionalised Lessons learned Lessons identified CRISIS www.improverproject.eu

2. CIRI structure How is the methodology structured ? How is the resilience score calculated? www.improverproject.eu

The phases of resilience CIRI - hierarchy Built on the phases of resilience (Level 1) The phases of resilience Risk management Prevention Preparedness Warning Response Recovery Learning www.improverproject.eu

Level 2 Each resilience phase is broken down in components, structures and process (Level 2) www.improverproject.eu

Level 3 Measurable indicators Technological Organisational … www.improverproject.eu

Level 4: Measured indicators Level 4 – Sector / application specific measurable indicators Quantitative, semi-quantitative and/or qualitative data which are transformed through a maturity scale www.improverproject.eu

Level 4: Measured indicators Maturity scale Non-existent 1 Initial/Ad hoc Unacceptable 2 Repeatable but intuitive Poor 3 Defined process Average 4 Managed and measureable Good 5 Optimised Excellent Presented in indicator cards www.improverproject.eu

Level 4: Indicator cards Indicator identifier Level 1 1 Risk Management Level 2 3 Risk identification Level 3 Historical data Level 4 Historical incidents Context Domain Technological Hazard Type Multi-hazards Situational factors  N/A Applicable sectors: All Generic or scenario specific ? Generic Indicator description and assessment Rationale If there is information about past incidents , these will help the risk management to do vulnerability assessments based on these data and previous experience of the impact on your system. Question: Do you have information about past incidents in your highway system? Answer modalities No information No documanted but oral information 2 Some information documented but most is only forwarded orally. Yes, but the available information about past incidents are not complete to assess the risks today. 4 Yes, most information about past incidents are documented and available. 5 Yes, all information is available and well documented. References:   Evaluation score www.improverproject.eu

Analysis Aggregated scores for each resilience phase Starts from Level 4 Gives score to next level Presented in a radar charts Possibility present radar charts for the components, structures and process at Level 2, corresponding to the resilience phases www.improverproject.eu

Analysis Aggregated scores for each resilience phase Starts from Level 4 Gives score to next level Presented in a radar charts Possibility present radar charts for the components, structures and process at Level 2, corresponding to the resilience phases www.improverproject.eu

Illustrating example Resilience phase: Prevention Prevention have four key processes, structures and components (Level 2): Safety and security culture Robustness Redundancy Acess control Consider the Level 2 component ‘Redundancy’ ‘Redundancy’ is broken down to measurable indiactors(Level 3) System capacity Back-up facilities and equipment Flexibility How the this measured depend on the sector www.improverproject.eu

Illustrating example System capacity is in this example measured with three sector specific indicators. They are assigned score 3, 2, and 1. This gives the score of system capacity: 2 www.improverproject.eu

Illustrating example Back-up facilities and equipment is in this example measured with three sector specific indicators. They are assigned score 4, 2, and 3. This gives the score of system capacity: 3 www.improverproject.eu

Illustrating example Flexibility is in this example measured with three sector specific indicators. They are assigned score 5, 1, and 2. This gives the score of system capacity: 2,67 www.improverproject.eu

Illustrating example The scores on Level 3 is then aggregated and give the score for ‘Redundancy’ at Level 2. If safety and security culture has score = 4, robustness has score = 2, and Acess control score=2, what will be the score for Prevention? www.improverproject.eu

Illustrating example www.improverproject.eu

With some illustrative applications 3. CIRI work flow How to use CIRI With some illustrative applications www.improverproject.eu

Step wise description 1. Establish the context 2. Identification and development of an initial set of indicators 3. Ranking of the indicators according to how well they are understood and perceived by the operator 4. Development of (sector specific) indicator cards 5. Assess the indicators and complete the analysis 6. Review and discussion with the operator 7. Identification of missing or out of context cards 8. Evaluation and review of final assessment results. NOT FINSISHED, STILL UNDER DEVELOPMENT www.improverproject.eu

SlidesCarnival icons are editable shapes. This means that you can: Resize them without losing quality. Change fill color and opacity. Change line color, width and style. Isn’t that nice? :) Examples: