HLSSS3

COMMENTARY Open Access

Maintaining critical infrastructure resilience to natural hazards during the COVID-19 pandemic: hurricane preparations by US energy companies Aaron Clark-Ginsberg1* , Ismael Arciniegas Rueda2, Jonathon Monken3, Jay Liu3 and Hong Chen3

Abstract

The COVID-19 pandemic has the potential to compromise the ability of critical infrastructure utilities to respond to or mitigate natural hazards like wildfires and hurricanes. This article describes the ways that an energy organization, the regional transmission operator PJM, is preparing for hurricanes during the COVID-19 pandemic. PJM is using a combination of technological and organizational processes to prepare for hurricanes during the pandemic. Activities include the development of a third control room to increase redundancy and maintaining social distance at control center, investment in more resilient communications technology to maintain connectivity, and taking a holistic approach to identifying issues related to supply chain and fuel security. With this mix of organizational and technological processes, we argue that critical infrastructure resilience should be understood as a sociotechnical construct and identify several recommendations for improving resilience. The article has implications for policymakers working to maintain infrastructure resilience to natural hazards during the COVID-19 pandemic.

Keywords: COVID-19, Critical infrastructure protection, Utilities, Sociotechnical resilience, Multi-hazard disasters, Hurricanes, Concurrent disaster, Energy resilience

Introduction Maintaining critical infrastructure resilience to nat- ural hazards during the novel coronavirus outbreak (COVID-19) is crucial yet challenging. The US De- partment of Homeland Security (DHS), understands critical infrastructures as infrastructure sectors such as water supply, public health, transportation, and energy that are considered essential to national se- curity, economy security, public health or the safe functioning of a society [3]. While the COVID-19 virus itself has no impact on the physical architec- ture of these infrastructures, policymakers suggest that it appears to be straining the various organizational and social practices necessary for

their operation. For instance, the US energy sector’s Electric Sector Coordinating Council has described how workers responsible for maintaining business continuity and reacting to natural hazards, the sup- ply chains used to secure crucial equipment and supplies, and the mutual aid that utilities rely on, are being compromised [7]. Similarly, the lead US agency responsible for critical infrastructure secur- ity, the DHS’s Cybersecurity and Infrastructure Se- curity Agency, recently described how it was “imperative” to maintain critical infrastructure dur- ing the pandemic and outlined several strategies for doing so [6]. This commentary describes how policymakers can

maintain critical infrastructure resilience to natural haz- ards during the COVID-19 pandemic. Literature on multi-hazard events, including concurrent disasters and

© The Author(s). 2020 Open Access This article is licensed under a Creative Commons Attribution 4.0 International License, which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons licence, and indicate if changes were made. The images or other third party material in this article are included in the article's Creative Commons licence, unless indicated otherwise in a credit line to the material. If material is not included in the article's Creative Commons licence and your intended use is not permitted by statutory regulation or exceeds the permitted use, you will need to obtain permission directly from the copyright holder. To view a copy of this licence, visit http://creativecommons.org/licenses/by/4.0/.

* Correspondence: [email protected] 1RAND Corporation, 1200 S. Hayes St, Arlington, VA 22202, USA Full list of author information is available at the end of the article

Journal of Infrastructure Preservation and Resilience

Clark-Ginsberg et al. Journal of Infrastructure Preservation and Resilience (2020) 1:10 https://doi.org/10.1186/s43065-020-00010-1

cascading crisis, indicates that, especially when vulner- abilities are shared, the confluence of multiple hazards can pose additional challenges compared to managing a single hazard alone [5, 17, 18]. Already under strain from the COVID-19 pandemic, there are real questions about how policymakers can keep critical infrastructure up and running during a natural hazard event. To do so, the commentary focuses on the steps that

one energy organization, the US regional electric transmission operator (RTO) PJM, is taking to ensur- ing critical infrastructure resilience during the upcom- ing hurricane season in light of the COVID-19 pandemic. A resilience orientation may be a necessary approach for maintaining continuity of operations during the confluence of the COVID-19 pandemic and a natural hazard event. Resilience generally refers to the ability of a system to resist, absorb, accommo- date, recover, and transform in the face of a shock, stress, or other crisis [12]. Resilience has been grow- ing as a policy solution for critical infrastructure [11], and for good reason: the increasing complexity and interconnections of infrastructure systems coupled with growing hazard uncertainties means that un- avoidable complexity and coupling induced “normal accidents” [16] are becoming increasingly likely. By emphasizing the need to invest in mitigation and other forms of hazard prevention but also be pre- pared to react quickly and decisively to limit damages, recover, and learn from and adapt when disasters do occur, resilience seems to be an ideal paradigm for maintaining critical infrastructure in an increasingly hazardous world. The electric grid is a useful infrastructure to focus

on for this study because of its criticality and com- plexity. Energy is crucial for a functioning society: not only is the energy sector a critical infrastructure, but it is arguably the most critical infrastructure, with all other infrastructure dependent on energy systems [21]. Furthermore, the sheer scale and com- plexity of energy systems combined with their tight coupling makes maintaining energy resilience par- ticularly challenging. Electric grids are dispersed ‘sys- tem of systems’: the North American electric grid is comprised of thousands of utilities that run the gen- eration, transmission, and distribution systems across North America. Likewise, the synchronous grid of Continental Europe is operated by public and private entities and stretches across 24 countries to supply over 400 million customers with power. Interdepend- encies mean that energy grids could be vulnerable to cascading events. In Europe, natural hazards, cyber- attacks, space weather, and other disasters have the potential to trigger widespread and far reaching system-level cascades [9]. In North America, these

cascades have been observed as large grid failures such as the 2003 Northeast blackout, a cascading scenario triggered when a loss in system visibility meant that control center operators were not alerted to a failure in a transmission line. The cascading voltage collapse on the transmission system rippled across the Northeast US and southern Canada, caus- ing a blackout covering 11 states and the Canadian province of Ontario that left an estimated 55 million people without power [24]. It is no wonder that the US electric grid is described as “the most complex machine ever made” [13]. As a regional transmission operator, PJM is at the

heart of this complex machine. PJM is responsible for reliable power grid operations, efficient wholesale mar- kets, and infrastructure development in 13 states and the District of Columbia. PJM’s footprint alone is comprised of more than 1300 generation facilities producing power and 84,000 miles of transmission lines delivering it across 243,417 mile2 of territory, and distribution assets that bring power to more than 65 million customers. PJM works with the owners and operators managing these assets to ensure reliability and resilience. We identify and describe several strategies that PJM is

taking to prepare for hurricane season in the light of the COVID-19 pandemic. These involve actions of PJM itself as well as support to owners and operators within PJM’s footprint and include developing a third redundant con- trol room and working to invest in more resilient commu- nications technology to maintain connectivity for essential operations. They also involve both technological and organizational processes: we therefore argue that infra- structure resilience to hurricanes and COVID-19, like other hazards, is a sociotechnical construct [1, 4, 8], with resilience dependent not just technology but also social and organizational factors. The commentary has implica- tions for policymakers concerned with maintaining the re- silience of large, interconnected and interdependent critical infrastructure similar to the electric grid such as water, communications, and oil and gas.

PJM, COVID-19, and the 2020 hurricane season Similar to general definitions of resilience [12], PJM un- derstands energy resilience as the ability of the energy system to withstand and reduce the magnitude or dur- ation of disruptive events [2]. A resilient energy infra- structure is an infrastructure that can withstand negative events with minimal loss of load and few disruptions to water, communications, transportation, and other crit- ical infrastructure. Ensuring energy system resilience in- volves reducing the overall number of system disruptions and through mitigation activities like infra- structure hardening, and improving the speed of post- event response through activities like contingency

Clark-Ginsberg et al. Journal of Infrastructure Preservation and Resilience (2020) 1:10 Page 2 of 6

planning. Since events are often difficult to predict and their impacts cannot always be anticipated, resilience also involves adaptation to a rapidly changing oper- ational environment. PJM has several measures in place to ensure energy re-

silience to hurricanes, many of which focus on improv- ing response through quickly deploying crews and replacing essential grid components after hurricanes. To maintain a flow of energy, PJM maintains a reserve mar- gin of generation assets to supply energy when other fa- cilities are impacted and has plans in place for directing power flows in real-time from stable portions of the grid to impacted areas. To ensure it is able to balance energy loads, it has redundant control room facilities that staff can use if one is compromised. To get impacted areas up and running quickly, PJM works to reduce potential supply chain lags by pre-staging critical assets like extra high voltage transformers and other spare equipment, and has established plans designed to facilitate rapid response. The COVID-19 pandemic may already be affecting

PJM’s ability to respond to hurricanes in two important ways. First, the pandemic is impacting the supply chains that PJM relies on for equipment, especially equipment with long production lead times that is typically manu- factured internationally. Having the right replacement equipment is crucial for mitigating damages and restor- ing power in a timely manner. The pandemic is impact- ing the ability of manufacturing companies to maintain personnel and raw material necessary for producing equipment, which is slowing down equipment produc- tion across the world. PJM and the utilities that it works with already have some spare equipment that can be used in in emergency, but excess margins are thin so PJM and utilities remain by in large reliant on just-in- time delivery for spares. A large hurricane could result in a sudden and dramatic increase in demand for re- placement equipment beyond the current ability of sup- ply chains. Second, the pandemic is creating personnel issues that have the potential to disrupt response cap- acity. The pandemic is reducing the available workforce and affecting the ability of utilities to implement typical response strategies, which involve putting people in close quarters and moving them long distances, e.g. close-proximity crew staging and transporting personnel outside the affected area to response sites. Maintaining control rooms is also particularly challenging: crucial for managing load in real time as disasters unfold, control room operators work together in close quarters, which increases chances for exposure, and are highly special- ized, so would not be easy to replace if infected with coronavirus. PJM is taking several steps to respond to these chal-

lenges. First, is limiting maintenance activities that might

create outages to reduce the chances of large-scale out- ages. The spring season is typically the maintenance out- age season, but PJM is working with generation and transmission owners to reschedule these planned out- ages to prevent them from potentially turning into larger disruptions. Second, to address equipment issues, PJM has issued guidance for utilities stating that utilities should “… not be reliant on another party or even the vendor for immediate spare support” [20] and recom- mends that they review their plans and check with ven- dors on delivery lead time in light of COVID-19. Third, PJM working with utilities to help them modify

their hurricane response staffing plans. Staff are follow- ing CDC and state agency COVID-19 workplace recom- mendations, utilizing appropriate personal protective equipment (PPE) and maintaining social distancing as the “new normal” at job sites. Specialized PPE, such as flame-resistant rated face masks, are available. Utilities are also adopting new telecommunication tools and cloud-based restoration plans and work orders to sup- port telework for functions that were previously done by personnel on-site. PJM suspended its own staff travel in January and implemented company-wide work from home guidelines in early March. PJM is also working to ensure control center continu-

ity during the pandemic. To reduce staff risk of expos- ure, PJM suspended all in-person access to the control centers except for control room staff (including staffing real-time reliability engineers outside rather than within control rooms), has increased control center staff shift length to 12-h to reduce exposure during staff change- overs, and is performing outage studies remotely. PJM also converted its control room training simulator to a third control center to increase control room redun- dancy and reduce staff exposure. All three control rooms can now function together as a single virtual control room, and each facility is capable of operating the entire system independently if the others are compromised. As part of this, in mid-April PJM also sequestered a group of dispatchers to operate from the newly-created control room to ensure the availability of a full shift if the virus were to spread within PJM. Response-based activities are only one part of COVID-19

and hurricane resilience; resilience is also being facilitated through mitigation activities focused on grid modernization and infrastructure hardening. PJM is using a standard and modularized design to modernize aging infrastructure, which makes having unique spare equipment on hand less necessary, reducing the impact of supply chain shortages and down time for repair and restoration. Substation auto- mation at critical and remote sites integration with internet of things technologies reduces the need people to be phys- ically present for real-time equipment condition diagnoses and reconfigurations, reducing impacts from workforce

Clark-Ginsberg et al. Journal of Infrastructure Preservation and Resilience (2020) 1:10 Page 3 of 6

restrictions. New equipment is also more robust, meaning it can more easily stand up to hurricanes and other disasters. Sensemaking is a crucial part of all of this. Sensemak-

ing refers to the ability to see the ‘big picture’ by putting all the disjointed elements of information together, find- ing relationships between them, and assigning meaning to the scenario [25]. Unlike hurricanes and storms, which occur with relative regularity and can therefore often be managed in a somewhat ‘routine’ manner, sen- semaking is particularly critical for novel threats with high degrees of uncertainty [25]. PJM’s sensemaking ac- tivities include conducting studies on specific risks within its infrastructure and engaging in collaboration with networks of other actors to determine broader trends and develop more general strategies. Some of PJM’s studies include stress-test studies of systems under extreme situations. PJM has developed and analyzed over 8000 different contingencies, such as gas pipeline disruptions that could impact the availability of fuel for generators, or the loss of multiple generation units and transmission facilities within a disaster impacted area. It also conducts cascade analyses to help understand how large cascading outages like the 2003 blackout might manifest and identify how they can be contained. Sensemaking is partly also a networked property for

PJM, and PJM maintains a close collaboration with a net- work of stakeholders to understand resilience related is- sues. PJM has a long history of collaborating with many organizations to understand how to support resilience. These include generation, transmission, and distribution utilities; other RTOs and independent system operators; the industry body for the bulk electric system, the North American Electric Corporation; the Electricity Subsector Coordinating Council (ESSC); and the North American Transmission Forum. For the COVID-19 pandemic, PJM is leveraging this network to learn from utilities that have had to respond to extreme weather during the outbreak, such as lessons that the ESCC has collected following the spring tornado season in the southeast and other small- scale events impacting the grid [7]. It has also come together with other organizations within its network to rapidly develop “crowdsourced” pandemic guidelines based on their collective experiences and knowledge. This resulted in several resource guides, such as a guide on nat- ural hazard and COVID-19 response published by the IEEE Power and Energy Society designed to be shared widely across the industry, be adapted to company- specific needs, and amended as circumstances shift during and the pandemic evolves [15].

Discussion Policymakers working to maintain critical infrastructure resilience to natural hazards during the COVID-19

pandemic can take several lessons from PJM’s experi- ence preparing for the hurricane season and use them to enhance resilience. First, policymakers working towards natural hazard resilience may need to assess and inter- vene on the resilience of systems not from a perspective of technology alone, nor from a perspective of organizational activities, but from a sociotechnical per- spective that emphasizes both the technological and organizational dimensions of utility resilience. The abil- ity of PJM to adapt its hurricane response systems for the COVID-19 pandemic appears dependent on its phys- ical infrastructure such as control centers, grid modernization technologies, and technologies that allow for remote work, as well as organizational changes in- cluding changing shift lengths, work habits, sequestering workers to reduce exposure—all of which is buffered and supported by an organizational focus on sensemak- ing and adaptation. Indeed, the RTO’s response ability relies largely on organizational activities, including emer- gency response guidelines, situation awareness, and transmission operator field responses. Its resilience is a function of natural uncertainties and human decisions through the event, where teamwork and collaborations are core control factors shaping grid resilience. Second, the experience of PJM also indicates that vul-

nerability and resilience of critical infrastructure to con- current disasters that include a new hazard such as COVID-19 is partially shaped by its previous vulnerabil- ity and resilience activities and processes. Vulnerabilities shaping the potential for hurricane and COVID-19 to interact and cascade, such as a reliance on globalized just-in-time supply chains and on highly specialized staff that are difficult to replace, exist before COVID-19 and influence hurricane risk. Likewise, many of PJM’s sys- tems for other hazards – like the preparedness plans it had in place, its methods of working with other utilities and policymakers for information sharing and adaptive- ness, and its multiple redundant technological systems – are being harnessed for a concurrent COVID-19 pandemic and hurricane season. Further, the institu- tional culture of reliability appears agnostic to hazard compromising reliability, with PJM staff and leadership as concerned with the impacts of COVID-19 comprom- ising its operations as hurricanes and storms. PJM’s abil- ity to address duel threats of hurricanes and COVID-19 is predicated on strong existing systems for mitigation, preparedness, and adaptation, supported by sensemak- ing. Resilience to one threat is not created in a vacuum; instead broader hazard-agnostic processes can be lever- aged. Thus, policymakers may need to leverage their existing multi-hazard activities for hurricane prepared- ness, particularly to reduce vulnerabilities that appear to link these hazards and spur on cascading crises. We therefore reiterate calls made by Pescaroli et al. [19] to

Clark-Ginsberg et al. Journal of Infrastructure Preservation and Resilience (2020) 1:10 Page 4 of 6

place vulnerability reduction front and center as part of addressing cascading crises and supporting critical infra- structure resilience. Given standards and regulations play a crucial role in shaping critical infrastructure vul- nerability and resilience [4, 10], as part of this process relevant critical infrastructure benchmarks and stan- dards – such as NFPA 1600:2019, ISO 22301:2019, NERC’s Reliability Standards, and Section 1235(b) of the Disaster Recovery Reform Act of 2018 – may need to be refined to move away from focusing on single hazards to emphasize vulnerability reduction and resilience to cas- cading crises. Third, PJM’s experience in resilience is not just the

sole outcome of PJM but rather the product of a broad network of activities. This is unsurprising given high re- liability theorists and other organizational scholars have identified the networked nature of certain critical infra- structure as not just a factor leading to disaster cascades, but as a crucial variable for maintaining ‘networked reli- ability’ [22, 23]. What is surprising here is just how much of the network benefits were not just for sharing equipment and other resources and responding to disas- ters in real time, but were focused on epistemic net- works of people working together to collectively to understand how to prepare for hurricanes during the COVID-19 pandemic. Such epistemic networks, seen in PJM’s engagement with other utilities and sector-level coordinating groups, appear crucial for adaptiveness and sensemaking for novel, emergent threats. Although this case study sheds some light on how util-

ities are preparing for natural hazards during the COVID-19 crisis, there are also core research questions that still need to be understood. First, consider that PJM has taken steps to mitigate the impact of COVID-19 on the global supply chain, however this epidemic has iden- tified vulnerabilities on the US Bulk Power system that should be corrected. Thus, an area of research would be to identify alternatives to the procurement of key electric equipment considering that COVID-19 duration is un- known, it has a global scope and it may take several years to be resolved. Since reliance on just-in-time deliv- ery mechanisms and global supply chains also contrib- utes to vulnerability to hurricanes and other natural hazards, identifying alternative procurement mecha- nisms could also reduce natural hazard risk more gener- ally and prevent cascades between hazards. Next, consider that COVID-19 is just one more on a list of re- lated viruses such as SARS and MERS, it is likely that similar events would happen in the future. Thus, one recommendation is to expand the cascade analysis event tools to also include pandemics impact of load suppres- sion and increased remote work on rapidly identifying and acting on grid dispatching. As reported by NERC, bulk power system organizations have been responding

appropriately [14], however what would be the impact on accumulation of stresses on the system sociotechnical capabilities needs to be studied. Given the parallels be- tween the US electric grid and other critical infrastruc- ture inside and outside of the United States, answering these questions could help improve critical infrastruc- ture resilience to concurrent crisis and disasters broadly, across multiple infrastructures and geographic locations.

Conclusion This commentary overviewed how policymakers can maintain critical infrastructure resilience to natural haz- ards during the COVID-19 pandemic by describing the activities that PJM was undertaking to prepare for the upcoming hurricane season. PJM is taking several activ- ities that involve both organizational and technological changes, working with other electric grid stakeholders and supported by an organizational and institutional cul- ture that promotes sensemaking and values resilience. We therefore argue that policymakers looking to main- tain critical infrastructure to natural hazards during COVID-19 pandemic should 1) approach resilience from a sociotechnical perspective, 2) enhance existing resili- ence processes that may be hazard agnostic, particularly those that reduce vulnerability common to multiple threats, and 3) leverage network of stakeholders to share information, support adaptiveness, and coordinate phys- ical resources. Although these actions are going far to ensure resilience during the COVID-19 pandemic, ser- ious research must still be undertaken to prepare for the hazard season.

Abbreviations DHS: Department of Homeland Security; ESSC: Electricity Subsector Coordinating Council; IEEE: Institute of Electrical and Electronics Engineers; PPE: Personal protective equipment; RTO: Regional transmission operator; SARS: Severe Acute Respiratory Syndrome; MERS: Middle East Respiratory Syndrome

Acknowledgements The authors are grateful to Kelly Klima for her comments and feedback.

Authors’ contributions All authors contributed to the design and writing of the manuscript. The authors read and approved the final manuscript.

Funding Not applicable.

Availability of data and materials Not applicable.

Competing interests J.M., J.L., and H.C. are employees of PJM. There are no other competing interests.

Author details 1RAND Corporation, 1200 S. Hayes St, Arlington, VA 22202, USA. 2RAND Corporation, Arlington, VA, USA. 3PJM, Norristown, USA.

Clark-Ginsberg et al. Journal of Infrastructure Preservation and Resilience (2020) 1:10 Page 5 of 6

Received: 12 June 2020 Accepted: 28 July 2020

References 1. Amir S, Kant V (2018) Sociotechnical resilience: a preliminary concept. Risk

Anal 38(1):8–16 2. Chen H, Bresler FS III, Bryson ME, Seiler K, Monken J (2020) Toward bulk

power system resilience. In: IEEE Power & Energy Magazine 3. CISA. (2020). Critical Infrastructure Sectors. Retrieved from https://www.cisa.

gov/critical-infrastructure-sectors 4. Clark-Ginsberg A, Slayton R (2018) Regulating risks within complex

sociotechnical systems: evidence from critical infrastructure cybersecurity standards. Sci Public Policy 46(3):339–346

5. de Ruiter MC, Couasnon A, van den Homberg MJ, Daniell JE, Gill JC, Ward PJ (2019) Why we can no longer ignore consecutive disasters. In: Earth's future

6. DHS (2020) Guidance on the essential critical infrastructure workforce: ensuring community and National Resilience in COVID-19 response version 2.0 Retrieved from https://www.cisa.gov/sites/default/files/publications/Version_3. 0_CISA_Guidance_on_Essential_Critical_Infrastructure_Workers_1.pdf

7. ESCC (2020) Assessing and mitigating the novel coronavirus (COVID-19): a resource guide Retrieved from https://www.electricitysubsector.org/-/media/ Files/ESCC/Documents/ESCC_Coronovirus_Resource_Guide_031020.ashx

8. Hughes TP (1987) The evolution of large technological systems. In: The social construction of technological systems: new directions in the sociology and history of technology, p 82

9. Karagiannis GM, Chondrogiannis S, Krausmann E, Turksezer ZI (2017) Power grid recovery after natural hazard impact Joint Research Center. Luxembourg: European Union. https://publications.jrc.ec.europa.eu/ repository/bitstream/JRC108842/jrc108842kjna28844enn.pdf

10. Lampland M, Star SL (2009) Standards and their stories: how quantifying, classifying, and formalizing practices shape everyday life. Cornell University Press

11. Linkov I, Palma-Oliveira JM (2017) An introduction to resilience for critical infrastructures. In: Resilience and risk. Springer, pp 3–17

12. Manyena SB (2006) The concept of resilience revisited. Disasters 30(4): 434–450

13. National Research Council (2007) The grid: a journey through the heart of our electrified world. National Academies Press, Washington, DC

14. NERC (2020) Special report: pandemic preparedness and operational assessment: spring 2020 Retrieved from https://www.nerc.com/pa/rrm/ bpsa/Alerts%20DL/NERC_Pandemic_Preparedness_and_Op_Assessment_ Spring_2020.pdf

15. Paaso A, Bahramirad S, Beerten J, Bernabeu E, Chiu B, Enayati B et al (2020) Sharing knowledge on electrical energy Industry's first response to COVID- 19 Retrieved from https://resourcecenter.ieee-pes.org/technical-publications/ white-paper/PES_TP_COVID19_050120.html

16. Perrow C (1984) Normal accidents: living with high risk technologies. Basic Books, New York

17. Pescaroli G, Alexander D (2015) A definition of cascading disasters and cascading effects: going beyond the ‘toppling dominos’ metaphor. Planet@ Risk 3(1):58–67. https://pdfs.semanticscholar.org/0607/4f128dfc90ea9adb5 d54b629bcc586199089.pdf.

18. Pescaroli G, Alexander D (2018) Understanding compound, interconnected, interacting, and cascading risks: a holistic framework. Risk Anal. 2018;38(11): 2245–57. https://onlinelibrary.wiley.com/doi/full/10.1111/risa.13128.

19. Pescaroli G, Wicks R, Giacomello G, Alexander D (2018) Increasing resilience to cascading events: the M. OR D OR scenario. Saf Sci 110:131–140

20. PJM Transmission and Substation Subcommittee (2017) Transmission owner guidelines Retrieved from https://www.pjm.com/planning/design- engineering/maac-to-guidelines.aspx

21. Rinaldi SM, Peerenboom JP, Kelly TK (2001) Identifying, understanding, and analyzing critical infrastructure interdependencies. IEEE Control Syst 21(6): 11–25

22. Schulman P, Roe E (2016) Reliability and risk: the challenge of managing interconnected infrastructures. Stanford University Press

23. Schulman P, Roe E, Eeten M v, Bruijne M d (2004) High reliability and the management of critical infrastructures. J Contingencies Crisis Management 12(1):14–28

24. U.S.-Canada Power System Outage Task Force (2004) Final report on the august 14, 2003 blackout in the United States and Canada: causes and

recommendations Retrieved from https://www3.epa.gov/region1/npdes/ merrimackstation/pdfs/ar/AR-1165.pdf

25. Weick KE, Sutcliffe KM, Obstfeld D (2005) Organizing and the process of sensemaking. Organ Sci 16(4):409–421

Publisher’s Note Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.

Clark-Ginsberg et al. Journal of Infrastructure Preservation and Resilience (2020) 1:10 Page 6 of 6