Gabriel Mahia Systems · Power · Strategy

What Resilience Actually Requires

Resilience is not robustness. It is the ability to absorb disruption and return to function — which requires different investments than the ability to resist disruption.

The Resilience-Robustness Distinction

Robustness is the capacity to resist disruption — to maintain normal function in the face of stresses that would otherwise degrade performance. Resilience is the capacity to recover from disruption — to absorb the stress that exceeds the robustness threshold and return to function, possibly in a changed form. These are related but distinct capabilities that require different investments to develop. The robust institution invests in the defences and buffers that prevent disruption from penetrating to its core functions. The resilient institution invests in the recovery capacity that allows it to reconstitute function after disruption has occurred.

The distinction matters because robustness and resilience are partially in tension. The investment in maximum robustness — in the thickest possible defences against disruption — consumes resources that could have been invested in recovery capacity, and may produce an institution that is very effective at preventing disruptions within its design envelope but very poor at recovering from disruptions that exceed that envelope. Maximum robustness can actually reduce resilience by creating an institution that is brittle outside its protective envelope rather than adaptable.

The Components of Genuine Resilience

Genuine resilience has several components that are each necessary and none sufficient alone. Absorptive capacity: the ability to continue delivering core functions at reduced but acceptable levels during and immediately after a disruption, while the recovery process is underway. Recovery capacity: the ability to restore full function within a timeframe that does not allow the disruption's consequences to compound beyond the recoverable threshold. Adaptive capacity: the ability to restore function in a changed form that is more appropriate to the post-disruption environment rather than simply restoring the pre-disruption form that was vulnerable to the disruption in the first place. And learning capacity: the ability to extract from the disruption experience the lessons that prevent recurrence of the specific failure mode that the disruption exposed.

Resilience is not the ability to pretend disruption did not happen. It is the ability to absorb what happened, keep functioning while doing so, recover fully, and come out of the experience better positioned against the next disruption. The institution that confuses robustness with resilience will protect itself from the disruptions it anticipated and be destroyed by the ones it did not.

Discussion