A Generic State‐Machine Model of System Resilience

Risk Management Limbo: How Low Can You Go?

“…The Jackson, Cook, and Ferris model shows seven possible states including four functional, but damaged or disrupted, states. Those states include, "Damaged but functional," "Non-Functional Disrupted State," "Agreed (or accepted) Diminished State," and "Partially Functional Disrupted State" [Jackson, Cook, and Ferris, 2015]. While it may not be possible for a system to return to nominal operation after exposure to threat, the system designer should make every attempt to make this the result.…”

“…The "Detecting Threat" state may transition to either allow the system to self-correct or to enter a safe state and wait for an operator to resolve the threat. Jackson, Cook, and Ferris also describe a "Heightened Awareness Operational State" [Jackson, Cook, and Ferris, 2015]. The Heightened Awareness Operational State's functionality has been distributed between the "Detecting Threat" and "Evaluating Threat" states in Figure 3.…”

“…Jackson and Ferris describe fourteen resilience principles and their interactions and dependencies [Jackson and Ferris, 2012]. Additionally, Jackson, Cook, and Ferris describe seven system states through which a system may transition in response to a threat [Jackson, Cook, and Ferris, 2015].…”

Quantitative Resiliency Analysis of Microgrids

“…Where • Rs, MOP is the system resiliency measure for the microgrid measure of performance Ferris, 2015) to describe resiliency in terms of a series of states starting with the unperturbed configuration and then moving through states of degradation and recovery. Quantitatively modeling the resilience of a system using this definition involves 1.…”

System Scenario Selection Method for Faster Analysis

“…For example, a system which is intended to operate with full performance under some range of environmental conditions may also be expected to operate with defined levels of degradation over a further, extended, range of environmental conditions outside the 'full operation' range. Similarly, the scenarios must include consideration of resilience, and so scenarios should include defining acceptable systems behavior under various classes of degradation caused by threat events (Jackson, Cook, Ferris, 2015). Huss (1988) suggests that scenarios can be classified into three types: intuitive logic, trend analysis, and cross-impact analysis.…”