1. CRITICAL INFRASTRUCTURE RESILIENCE INDEX (CIRI)
LESSON X
CRITICAL INFRASTRUCTURE RESILIENCE INDEX (CIRI)

2. Objective Understand the methdology How to use CIRI as an CI operator

3. What is CIRI?
Holistic, easy-to-use computable self-assessment methodology
Applicable to all types of critical infrastructures
Gives and and indicator of the resilience level of the asset
Based on indicators
Can be used as a basis for further detailed analysis, i.e:
ITRA – Technological resilience analysis
IORA – Organisational resilience analysis
Inspired by the crisis management cycle

4. CIRI – a resileince assesment methodology in the ICI-REF framework

5. 1. The phases of resilience
The backbone of the resilience analysis

6. The phases of resilience
Risk management
Prevention
Preparedness
Warning
Response
Recovery
Learning
Inspired and adapted from the crisis management cycle
The backbone for the resilience assessment
Each phase is broken down in measurable indicators
Illustrate the temporal dimensions of resilience

7. The phases of resilience
Risk management
Risk identification
Risk analysis
Risk evaluation
Risk treatment
Needs to know what to
Prevent and mitigate
Prepare for
Monitor
Respond to
Focuses on the quality of the risk assessment rather than the results
The phases of resilience
Risk management
Prevention
Preparedness
Warning
Response
Recovery
Learning

8. The phases of resilience
Prevention
Measures that enable an organization to avoid, preclude or limit the impact of a disruption
“Activities and measures to avoid existing and new disaster risks” (UNISDR, 2017)
Complete avoidance of losses is not always feasible  the task very often reverts to that of mitigation
The phases of resilience
Risk management
Prevention
Preparedness
Warning
Response
Recovery
Learning

9. The phases of resilience
Preparedness
“The knowledge and capacities developed by (…) to effectively anticipate, respond to and recover from the impacts of likely, imminent or current disasters" (UNISDR, 2017)
Continuous building of consequence reducing barriers
Key processes: Planning og organization, capacity and capability building
The phases of resilience
Risk management
Prevention
Preparedness
Warning
Response
Recovery
Learning

10. The phases of resilience
Warning
Monitoring events to spot signals and indicators that predict the location, timing and magnitude of future or immediate disruptions
Starting point for crisis response
Provide extra room for preparatory or mitigating measures
Key components
Detection
Analysis and forecasting
Dissemination of alerts and warnings
The phases of resilience
Risk management
Prevention
Preparedness
Warning
Response
Recovery
Learning

11. The phases of resilience
Response
“Actions taken directly before, during or immediately after a disaster in order to save lives, reduce health impacts, ensure public safety and meet the basic subsistence needs of the people affected”. (UNISDR, 2017)
Damage limitation
Crisis decision-making
Activation of preparedness plans and actions
The phases of resilience
Risk management
Prevention
Preparedness
Warning
Response
Recovery
Learning

12. The phases of resilience
Recovery
The act or process of returning to a normal state after a period of difficulty
Restoration, and improvements where appropriate, of facilities, livelihoods and living conditions of disaster-affected communities, including efforts to reduce disaster risk factors
The phases of resilience
Risk management
Prevention
Preparedness
Warning
Response
Recovery
Learning

13. The phases of resilience
Learning
Post-crisis learning: Evaluation and implementation of lessons
Reduce long-term consequences
Relates to all resilience phases
The phases of resilience
Risk management
Prevention
Preparedness
Warning
Response
Recovery
Learning
Network learning Organisational learning Collective learning
Individual learning
Lessons institutionalised
Lessons learned
Lessons identified
CRISIS

14. 2. CIRI structure How is the methodology structured ?
How is the resilience score calculated?

15. The phases of resilience
CIRI - hierarchy
Built on the phases of resilience (Level 1)
The phases of resilience
Risk management
Prevention
Preparedness
Warning
Response
Recovery
Learning

16. Level 2
Each resilience phase is broken down in components, structures and process (Level 2)

17. Level 3 Measurable indicators Technological Organisational …

18. Level 4: Measured indicators
Level 4 – Sector / application specific measurable indicators
Quantitative, semi-quantitative and/or qualitative data which are transformed through a maturity scale

19. Level 4: Measured indicators
Maturity scale
Non-existent 1
Initial/Ad hoc
Unacceptable 2
Repeatable but intuitive
Poor 3
Defined process
Average 4
Managed and measureable
Good 5
Optimised
Excellent
Presented in indicator cards

20. Level 4: Indicator cards
Indicator identifier
Level 1 1
Risk Management
Level 2 3
Risk identification
Level 3
Historical data
Level 4
Historical incidents
Context
Domain
Technological
Hazard Type
Multi-hazards
Situational factors
 N/A
Applicable sectors:
All
Generic or scenario specific ?
Generic
Indicator description and assessment
Rationale
If there is information about past incidents , these will help the risk management to do vulnerability assessments based on these data and previous experience of the impact on your system.
Question:
Do you have information about past incidents in your highway system?
Answer modalities
No information
No documanted but oral information 2
Some information documented but most is only forwarded orally.
Yes, but the available information about past incidents are not complete to assess the risks today. 4
Yes, most information about past incidents are documented and available. 5
Yes, all information is available and well documented.
References:
Evaluation score

21. Analysis Aggregated scores for each resilience phase
Starts from Level 4
Gives score to next level
Presented in a radar charts
Possibility present radar charts for the components, structures and process at Level 2, corresponding to the resilience phases

22. Analysis Aggregated scores for each resilience phase
Starts from Level 4
Gives score to next level
Presented in a radar charts
Possibility present radar charts for the components, structures and process at Level 2, corresponding to the resilience phases

23. Illustrating example Resilience phase: Prevention
Prevention have four key processes, structures and components (Level 2):
Safety and security culture
Robustness
Redundancy
Acess control
Consider the Level 2 component ‘Redundancy’
‘Redundancy’ is broken down to measurable indiactors(Level 3)
System capacity
Back-up facilities and equipment
Flexibility
How the this measured depend on the sector

24. Illustrating example
System capacity is in this example measured with three sector specific indicators. They are assigned score 3, 2, and 1. This gives the score of system capacity: 2

25. Illustrating example
Back-up facilities and equipment is in this example measured with three sector specific indicators. They are assigned score 4, 2, and 3. This gives the score of system capacity: 3

26. Illustrating example
Flexibility is in this example measured with three sector specific indicators. They are assigned score 5, 1, and 2. This gives the score of system capacity: 2,67

27. Illustrating example
The scores on Level 3 is then aggregated and give the score for ‘Redundancy’ at Level 2.
If safety and security culture has score = 4, robustness has score = 2, and Acess control score=2, what will be the score for Prevention?

28. Illustrating example

29. With some illustrative applications
3. CIRI work flow
How to use CIRI
With some illustrative applications

30. Step wise description 1. Establish the context
2. Identification and development of an initial set of indicators
3. Ranking of the indicators according to how well they are understood and perceived by the operator
4. Development of (sector specific) indicator cards
5. Assess the indicators and complete the analysis
6. Review and discussion with the operator
7. Identification of missing or out of context cards
8. Evaluation and review of final assessment results.
NOT FINSISHED, STILL UNDER DEVELOPMENT

31. SlidesCarnival icons are editable shapes.
This means that you can:
Resize them without losing quality.
Change fill color and opacity.
Change line color, width and style.
Isn’t that nice? :)
Examples: