What Is Resiliency?

Resiliency is a property of engineering systems, networks, and infrastructure that describes the degree to which they can continue to function, degrade gracefully, or recover rapidly when subjected to disruptions, faults, or adverse operating conditions. As a technical attribute, resiliency is treated as a measurable system characteristic rather than a binary pass-fail state, distinguishing it from simple reliability. A system with high resiliency does not merely avoid failure under normal conditions; it maintains an acceptable level of service delivery across a spectrum of degraded conditions and restores full capability within a defined recovery window. In cybersecurity and information systems, NIST SP 800-160 Vol. 2 Rev. 1 formalizes resiliency as a design property of trustworthy systems, characterizing it through goals of anticipation, withstanding, recovery, and adaptation.

The term "resiliency" is used interchangeably with "resilience" in many engineering contexts, though some standards bodies distinguish them by scope. In power systems engineering, resiliency often refers specifically to the ability of the grid to recover from high-impact, low-frequency events such as major storms or geomagnetic disturbances, while reliability addresses the more frequent, lower-magnitude outages managed through standard maintenance and redundancy practices. This distinction reflects a shift in how grid operators and regulators assess the adequacy of the bulk power system.

Resiliency in Power and Energy Infrastructure

The electric power grid is one of the most studied systems in the context of resiliency. Grid resiliency encompasses the ability to absorb the impact of a major disruption, limit the extent and duration of service interruption, and restore power to affected areas as rapidly as possible. Events such as Hurricane Sandy in 2012, the Texas winter storm of 2021, and geomagnetic storms associated with solar activity have prompted regulators and utilities to systematically quantify grid resiliency and invest in hardening measures. The North American Electric Reliability Corporation (NERC) and the Federal Energy Regulatory Commission (FERC) have both issued guidance on resiliency assessment, and NERC's reliability standards form the basis for mandatory performance requirements across the interconnected grid.

Resiliency in Cyber and Information Systems

In the information technology and cybersecurity domain, resiliency refers to the ability of systems to maintain critical functions under cyberattack, hardware failure, or unexpected software errors. Cyber resiliency engineering, as defined in the NIST SP 800-160 framework, addresses the design and operation of systems that must continue operating even when components are compromised. Key techniques include redundancy (maintaining backup systems that activate automatically on primary failure), diversity (using different hardware or software stacks for redundant components to prevent common-mode failures), and segmentation (isolating failures so that a compromised subsystem cannot propagate faults to adjacent ones). NIST's broader resilience research portfolio extends these principles to physical infrastructure, connecting the cyber and physical dimensions of resiliency as critical systems become increasingly dependent on both.

Quantifying and Engineering for Resiliency

Resiliency is quantified through performance metrics that capture system behavior across the full disruption-and-recovery lifecycle. Metrics include the maximum tolerable performance degradation, the time required to reach the nadir of performance after a disruption event, and the time required to return to pre-disruption performance levels. Engineers design for resiliency by specifying acceptable values for these metrics and then selecting system architectures, redundancy levels, and recovery procedures that meet the specifications under credible threat scenarios. Simulation tools, including Monte Carlo methods and agent-based models, are used to estimate resiliency metrics for complex infrastructure systems where analytical solutions are intractable.

Applications

Resiliency is a design and operational concern across a wide range of engineering domains, including:

• Electric power transmission and distribution systems
• Telecommunications networks and data center infrastructure
• Water and wastewater treatment systems
• Transportation network management under disruption
• Industrial control systems for manufacturing and process plants
• Emergency management and public safety communications