Understanding resilience outcomes

Start with the intended service

Specify what must continue, for whom, under which conditions and within what agreed limits. The eight capability domains describe what an organisation needs to be able to do. The six outcome domains help assess what those capabilities achieve. A single intervention can affect several outcomes, so its consequences should be considered together.

Operational effectiveness

Can the service continue within agreed performance bounds, and can it recover when those bounds are exceeded?

Define the service, the people or activities it supports and the capacity or quality required. Assess reduced performance as well as complete failure. An asset may be running while the service is unavailable, or a service may continue through an alternative arrangement. Review the operating context, available alternatives and the time needed to restore an acceptable level of performance.

In practice. For a transport route, assess the movement of passengers or freight maintained through alternatives as well as the time taken to repair the impaired asset.

Consider alongside other outcomes. Increasing output or maintaining normal activity must be considered alongside safe operating limits and the capacity of supporting systems.

Safety & integrity

Are the conditions and protective measures needed for safe operation understood and maintained?

Relate asset condition and operating changes to the people and environments exposed to their consequences. Include the condition of protective systems, the competence needed to act and the authority to stop or restrict use. Recovery should establish that the asset can safely support its intended function, with the relevant technical and operational responsibilities involved.

In practice. After a residential lift repair, evidence should address the checks required for safe use and the restoration of access for affected residents.

Consider alongside other outcomes. A quicker return to service is valuable only where the conditions for safe use have been established.

Security & trust

Can the organisation trust the state of its assets, the information it uses and the actions taken through connected systems?

Consider physical access, digital access, configuration, data integrity and the availability of trusted communications. Establish who can make changes and how those changes are traced. Confidence in a decision depends on the quality, origin and currency of its information, particularly when monitoring is incomplete or normal systems are impaired.

In practice. For a building-control incident, examine whether operators can establish trustworthy conditions and regain authorised control of the services affected.

Consider alongside other outcomes. Additional controls should be assessed alongside their effect on authorised operation, emergency access and recovery.

Sustainability & adaptation

Can the asset-supported service remain viable under changing environmental conditions and resource constraints?

Consider both current operation and the conditions expected over the asset lifecycle. Energy, water, materials, emissions and exposure to environmental hazards can affect the suitability of an intervention. Examine how adaptation changes dependencies and whether an improvement in one area creates a constraint elsewhere. Record assumptions and uncertainty so that decisions can be reviewed as conditions develop.

In practice. When reviewing cooling options, compare service performance with energy demand, water use and the conditions under which each option remains effective.

Consider alongside other outcomes. Efficiency gains and additional reserve capacity may pull in different directions; document how the chosen balance supports the intended service.

Compliance & assurance

Can the organisation demonstrate that relevant obligations, controls and decisions have been addressed?

Identify the obligations applicable to the asset, service and location, then connect them to accountable owners and current evidence. Distinguish a completed activity from proof that its intended result was achieved. Assurance should expose gaps, uncertainty and overdue actions, and provide a clear basis for review by the people responsible for accepting the outcome.

In practice. A maintenance record can show that work occurred. Assurance also asks whether the required checks were completed and the affected function was restored.

Consider alongside other outcomes. Evidence should be proportionate to the consequence and decision while remaining sufficient for applicable obligations and accountable review.

Lifecycle value & adaptability

Does the intervention balance cost, risk, performance and the ability to accommodate future change?

Compare options across their expected life, including upkeep, disruption during implementation, resource needs and future adaptability. Make assumptions about demand, useful life and uncertainty visible. Review whether an intervention preserves practical options for later change, and compare actual performance with the reasons it was selected.

In practice. A campus plant replacement can be assessed against current service needs, phased implementation, maintenance access and the ability to accommodate future estate changes.

Consider alongside other outcomes. The lowest initial cost may leave different long-term risks and constraints; assess those effects explicitly when selecting an option.

Worked example: cooling capacity in a data centre

Illustrative scenario: a cooling component becomes unavailable while another is undergoing planned maintenance. Available capacity is reduced during a period of high demand. The following discussion shows how the six outcome domains inform one decision; it does not report a measured result or prescribe an operating procedure.

Assess the connected consequences

Operational effectiveness asks which digital services can continue within agreed conditions. Safety and integrity examines the limits needed to protect equipment and people. Security and trust considers whether monitoring and control information is reliable. Sustainability and adaptation examines the resource implications of temporary operation. Compliance and assurance identifies approvals and evidence requirements. Lifecycle value and adaptability considers repair, replacement and future capacity needs.

Make the decision and verify its result

The accountable decision owner brings facility and digital service teams together, supported by the relevant safety, security and assurance roles. They assess available capacity, service commitments, current conditions and uncertainty; agree an appropriate intervention and the conditions for review; and record responsibilities. Evidence after action should show service performance, operating conditions, restoration of capacity and any remaining constraints. The review then updates maintenance assumptions and recovery arrangements.

Use evidence in context

The measures described here are illustrative. Their suitability, measurement period and acceptable limits depend on the service, environment, relevant obligations and accountable owners. Record the baseline, data source, assumptions and uncertainty. Evidence should distinguish tested capability from expectations and show whether an intervention delivered its intended outcome.