RAIN – Risk Analysis of Infrastructure Networks in Response to Extreme Weather
Project Reference: 608166
FP7-SEC-2013-1 Impact of extreme weather on critical infrastructure
Project Duration: 1 May 2014 – 30 April 2017
Security Sensitivity Committee Deliverable Evaluation
Deliverable Reference D 6.3 Deliverable Name Report on benefits of critical infrastructure protection Contributing Partners ROD, ISIG, HI, Dragados, UNIZA, AIA Date of Submission May 2017
The evaluation is: • The content is not related to general project management • The content is not related to general outcomes as dissemination and communication • The content is related to critical infrastructure vulnerability or sensitivity • The content is not publicly available or commonly known • The content does not add new information that might be misused by possible criminal offenders to exploit vulnerabilities • The content does not cause any harm to essential interests of EU or one or more member states • The content does not cause societal anxiety or social unrest • There are no uncertainties that might need to contact the National Security Authority • Diagram path 1, 2, 3, 4, 6, 7, 8, 9. Therefore, the evaluation is Public.
Decision of Evaluation Public Confidential Restricted
Evaluator Name P.L. Prak, MSSM Evaluator Signature Signed by the chairman of the SSC Date of Evaluation 2017-05-29
This project has received funding from the European Union’s Seventh Framework Programme for research, technological development and demonstration under grant agreement no 608166
RAIN – Risk Analysis of Infrastructure Networks in Response to Extreme Weather
Project Reference: 608166
FP7‐SEC‐2013‐1 Impact of extreme weather on critical infrastructure
Project Duration: 1 May 2014 – 30 April 2017
Deliverable 6.3‐Report on benefits of critical infrastructure protection
Authors Ciaran Carey* (Roughan & O’Donovan) Julie Clarke (Roughan & O’Donovan) Robert Corbally (Roughan & O’Donovan) Lorcan Connolly (Roughan & O’Donovan) Donya Hajializadeh (Roughan & O’Donovan) Mark Tucker (Roughan & O’Donovan) Chiara Bianchizza (ISIG) Olivia Ferrari (ISIG) Timo Hellenberg (Hellenberg) Carlos Barcena, (Dragados) Maria Luskova (University of Zilina) Xavier Clotet (Groupo AIA)
*Correspondence author: Arena House, Arena Road, Sandyford, Dublin 18,
[email protected], +35312940800 D6.3‐Report on benefits of critical infrastructure protection
DOCUMENT HISTORY
Index Date Author(s) Main modifications
E01 11/04/2016 DH, CC and MT First Draft
E02 12/05/2017 CC, JC, RC and LC, MT Second Draft
E03 18/05/2017 CC, RC Addressing Comments Form GDG And UNIZA reviews
Document Name: Report on benefits of critical infrastructure protection
Work Package: 6
Task: 6.5
Deliverable: 6.3
Deliverable scheduled date (35th Month) 31st March 2017
Responsible Partner: Roughan & O’Donovan
D6.3‐Report on benefits of critical infrastructure protection
Table of Contents
Table of Contents ...... 3 General Glossary ...... 6 1. Introduction ...... 9 1.1. Motivation ...... 9 1.2. Aims and Objectives ...... 9 1.3. Deliverable Structure...... 10 2. Risk‐Based Decision Making Framework ...... 12 2.1. Bayesian Network Modelling ...... 13 2.1.1. Multi‐Mode Risk Model ...... 13 2.1.2. Risk Models and Bayesian Network Nodes ...... 14 3. Case Study 1 ‐ Alpine Region, Italy ...... 16 3.1. Emergency response to Extreme Weather Event ...... 16 3.1.1. The framework for civil protection at national level ...... Error! Bookmark not defined. 3.1.2. The civil protection framework in the Friuli Venezia Giulia RegionError! Bookmark not defined. 3.1.3. Procedures in decision making ...... Error! Bookmark not defined. 3.1.4. Situational awareness and communications in civil protection at national level ... Error! Bookmark not defined. 3.1.5. Civil protection and flash flood of 29th August 2003 ...... Error! Bookmark not defined. 3.2. Application of Risk Analysis Framework ...... 27 3.2.1. Enumeration ...... 28 3.2.1.1 Extreme Weather Events: ...... 28 3.2.1.2 Hazards ...... 29 3.2.1.3 Network Vulnerability ...... 30 3.2.1.4 Consequences ...... 31 3.2.2. Quantification of Likelihoods ...... 32 1.1.1.1 Likelihood of EWEs ...... 32 3.2.2.1 Likelihood of Hazards ...... 33 3.2.3. Consequence Analysis ...... 41 3.2.3.1 Direct economic risks of Landslides ...... 42 3.2.3.2 Direct societal risks of Landslides ...... 43 3.2.3.3 Direct economic risks of Inundation ...... 44 3
D6.3‐Report on benefits of critical infrastructure protection
3.2.3.4 Direct societal risks of Inundation ...... 45 3.2.3.5 Direct economic risks of Bridge Scour ...... 46 3.2.3.6 Direct societal risks of Bridge Scour ...... 46 3.2.3.7 Direct security risks of Landslides, Inundation & Bridge Scour ...... 47 3.2.4. Bayesian Network Modelling for Economic and Societal Risks ...... 47 3.2.4.1 Debris Flows ...... 47 3.2.4.2 Flooding ...... 48 3.2.5. BN Modelling for Security Risks...... 50 3.2.5.1 Land‐Transport Cut‐Off ...... 50 3.2.5.2 Electricity Supply Cut‐Off ...... 53 3.2.6. Construct Outcome/Utility Probability Distributions ...... 54 3.2.6.1 Direct Economic Risks ...... 54 3.2.6.2 Direct Societal Risks ...... 55 3.2.6.3 Direct Security Risks ...... 56 3.2.7. Optimising Mitigation Strategies ...... 57 3.2.8. Conclusions ...... 60 4. Case Study 2 ‐ Uusimaa Storm Surge, Finland ...... 62 4.1. Introduction ...... 62 4.2. Context ...... 62 4.2.1. Storm Surge Event, January 2005 ...... 63 4.2.2. Impact of Storm Surge Event ...... 64 4.2.3. Emergency management cycle ...... 67 4.2.3.1 Introduction ...... 67 4.2.3.2 National and Government Level Response ...... 68 4.2.4. Consequence Management ...... 70 4.2.5. Material Damage ...... 73 4.2.6. Nuclear Power Plant ...... 77 4.2.7. Lessons Learned, Improvements and Guidelines ...... 79 4.3. Application of Risk Analysis Framework ...... 82 4.3.1. Enumeration ...... 82 4.3.2. Quantification of Likelihoods ...... 85 4.3.2.1 Likelihood of EWEs ...... 85 4.3.2.2 Likelihood of Hazards ...... 86
4
D6.3‐Report on benefits of critical infrastructure protection
4.3.3. Critical Infrastructure ...... 93 4.3.3.1 Land Transport Infrastructure ...... 94 4.3.3.2 Energy and Telecommunication infrastructure...... 95 4.3.4. Modelling Approach for Uusimaa Case Study Region ...... 97 4.3.5. Consequence Analysis ...... 107 4.3.5.1 Direct economic risks of inundation to roads ...... 108 4.3.5.2 Direct economic risk due to of inundation to rail ...... 110 4.3.5.3 Direct economic risks of high winds to power lines ...... 110 4.3.5.4 Indirect economic risks of high winds to power lines ...... 112 4.3.5.5 Results & Discussion ...... 114 5. Conclusions ...... 116 6. References ...... 117 Appendix A Methodology for provision of inputs for Risk Assessment framework ...... 125 A.1 Methodology ...... 125 A.2 BRIDGE EXAMPLES ...... 136 Appendix B Indirect consequences and Indirect mitigation ...... 144 B.1 Indirect consequences ...... 144 B.2 Indirect mitigation ...... 145
5
D6.3‐Report on benefits of critical infrastructure protection
Executive Summary
This report demonstrates the benefits of providing critical infrastructure protection from extreme weather through the application of the RAIN Risk‐Based Decision Making Framework in the context of two case studies. As well as this, the report also describes the emergency management of the case study countries, detailing the response to the extreme weather events upon which the case studies are built.
Case study 1 is based on a 2003 event in the alpine area of the Friuli Venezia Giulia Region located in North Eastern Italy in which extreme rainfall caused flooding and landslides which resulted in widespread damage to the critical infrastructure in the area. The civil protection in the region comprises of institution, civil society, volunteering associations and the government with focus at a local level. The local presence of the volunteers of the civil protection was key feature in the management of the 2003 event. In applying the Risk‐Based Decision Making Framework the direct consequences of damage to road segments and bridges, rail lines, and electrical lines caused by landslides and flooding induced by extreme rainfall is examined using Bayesian Network modelling. The optimal strategy for mitigating the risk to critical infrastructure, given a budgetary constraint, is chosen and the benefits of protecting critical infrastructure are shown.
The second case study focuses on the risk posed to the Uusimaa region for Southern Finland by storm surge events. A 2005 storm surge hit the region causing major disruption and damage. The Finnish emergency response community, who were alert due to other recent events and weather forecasting, began preparations in the days preceding the event. In a manner similar to case study 1 the responsibility of the emergency response falls firstly on the local and regional authorities. The Risk‐Based Decision Making Framework application analyses the risk to both the land transport and electricity networks posed by sea water flooding and high wind speeds.
6
D6.3‐Report on benefits of critical infrastructure protection
General Glossary
This section presents the terminology employed throughout the report.
Climate Change A change in the state of the climate that can be identified (e.g. by using statistical tests) by changes in the mean and/or the variability of its properties and that persists for an extended period, typically decades or longer. Climate change may be due to natural internal processes or external forcings, or to persistent anthropogenic changes in the composition of the atmosphere or in land use (IPCC, 2012).
Critical Infrastructure An asset belonging to the surface transport network (road and/or rail) system or part thereof located in Member States that is essential for the maintenance of vital societal functions, transport, health, safety, security, economic or social well‐being of people, and the disruption or destruction of which would have a significant impact on a Member State as a result of the failure to maintain those functions (European Commission, 2015).
Direct Losses Costs or losses that are a direct consequence of the extreme weather event and refer to the physical impacts on land‐based transport, energy and telecommunications infrastructure.
Disaster Severe alterations in the normal functioning of a community or a society due to hazardous physical events interacting with vulnerable social conditions, leading to widespread adverse human, material, economic, or environmental effects that require immediate emergency response to satisfy critical human needs and that may require external support for recovery (IPCC, 2012).
Disaster Risk Management The process for designing, implementing, and evaluating strategies, policies, and measures to improve the understanding of disaster risk, foster disaster risk reduction and transfer, and promote continuous improvement in disaster preparedness, response, and recovery practices, with the explicit purpose of increasing human security, well‐being, quality of life, and sustainable development.
Economic Risk The probability of monetary losses associated with the occurrence of an extreme weather event. Notably, many of the impacts associated with disaster events cannot be quantified in monetary terms, e.g. loss of human lives, cultural heritage and ecosystems.
Exposure The presence of people, livelihoods, environmental services and resources, infrastructure, or economic, social, or cultural assets in places that could be adversely affected (IPCC, 2012).
Extreme Weather Event The occurrence of a value of a weather or climate variable above (or below) a threshold value near the upper (or lower) ends (‘tails’) of the range of observed values of the variable (IPCC, 2012).
Hazard The possible future occurrence of natural or human‐induced physical events that may have adverse effects on vulnerable and exposed elements. D6.3‐Report on benefits of critical infrastructure protection
Indirect Losses Costs or losses that arise due to the disruption caused to land‐based transport, energy and telecommunications infrastructure due to an extreme weather event.
Mitigation The amelioration of disaster risk through the reduction of existing hazards, exposure, or vulnerability including the use of different disaster preparedness measures (IPCC, 2012).
Preparedness Measures that may include early warning and the development of contingency or emergency plans.
Resilience The ability of a system and its component parts to anticipate, absorb, accommodate, or recover from the effects of a hazardous events in a timely and efficient manner, including through ensuring the preservation, restoration, or improvement of its essential basic structures and functions (IPCC, 2012).
Risk UN‐ISDR: ‘Risk is the probability of harmful consequences, or expected losses from death, injuries, property, livelihoods, economic activity disrupted security or environment damaged resulting from interactions between (natural, human‐induced or man‐made) hazards and vulnerable conditions.’ (Hajializadeh et al. 2015)
Risk Assessment A methodology to determine the nature and extent of risk by analysing potential hazards and evaluating existing conditions of vulnerability that could pose a potential threat or harm to people, livelihoods and the environment on which they depend. (Hajializadeh et al. 2015)
Security Risk The probability of chronic threats to humans, such as hunger, disease, and repression, associated with the occurrence of an extreme weather event (IPCC, 2012).
Societal Risk The probability of injury of death of humans due to the impact of an extreme weather event on land‐based transport, energy and telecommunications infrastructure.
Susceptibility A physical predisposition of human beings, infrastructure and environment to be affected by a dangerous phenomenon due to lack of resistance and predisposition of society and ecosystems to suffer harm as a consequence of intrinsic and context conditions making it plausible that such systems once impacted will collapse or experience major harm and damage due to the influence of a hazard event (IPCC, 2012).
Vulnerability The degree to which a system is susceptible to and unable to cope with adverse effects of climate change, including climate variability and extremes. Vulnerability is a function of the character, magnitude, and rate of climate change and variation to which a system is exposed, its sensitivity, and its adaptive capacity (IPCC, 2012).
8
D6.3‐Report on benefits of critical infrastructure protection
1. Introduction
1.1. Motivation
Extreme weather events such as floods, droughts, windstorms, thunderstorms, snow storms, wildfires, as well as others, have the potential to cause significant disruption to critical infrastructure, resulting in considerable losses. Over the past number of decades, a significant increase in the number of extreme weather events and the associated losses has occurred due to changing climatic conditions, land‐use changes and increasing exposure.
RAIN WP2 Deliverable D2.2 has documented 21 past cases of extreme weather events, describing the meteorological conditions that gave rise to the weather and the impact on critical infrastructure. These events included the following: an extreme wind event in 2007 that resulted in 47 fatalities and billions of Euros of damage across Europe; an extreme rainfall event in 2010 that resulted in the death of 45 people and €1.5 billion worth of damage on the island of Madeira, Portugal; thunderstorms in Germany in 2004 that resulted in €880 million worth of damage and 6 fatalities; a snow storm in Finland in 2005 that resulted in 60 people being injured and 3 fatalities; coastal flooding in 2010 that resulted in 41 fatalities and contributed to €2.5 billion worth of damage.
Risk assessment for extreme weather events is a complex process that requires an understanding of weather phenomena affected by climate change, an ability to identify critical infrastructure elements that will be affected and, furthermore, requires an insight into the consequences of critical infrastructure failure. Reliable risk assessments for distributed infrastructure due to extreme weather events can assist in the protection of critical infrastructure, as well as the minimisation of losses.
1.2. Aims and Objectives
The objective of this deliverable is to demonstrate the systematic application of the Risk‐Based Decision Making Framework that has been outlined in RAIN Deliverables D5.1 (van Erp & van Gelder 2015) and D5.2 (van Erp et al. 2017), as a means for providing a quantifiable measure of resilient infrastructure. The proposed framework has been applied to two case studies and, in that application, methodologies and tools that have been presented in work packages 2, 3, 4, 5, 6 and 7 of the RAIN project are brought together. In this the various project outputs have been merged to provide an operational analysis framework that can be used to assist in decision‐making with regard to the protection of European infrastructure networks against extreme weather events.
1.3. Scope
Extreme weather affects critical infrastructure in two ways. Either extreme weather can damage components of the infrastructure, or impair its functioning without causing structural damage (Groenemeijer et al. 2015). The work herein, as outlined in Deliverables 6.1 (Hajializadeh et al. 2015) and 6.2 (Hajializadeh et al. 2016) considers the impacts of extreme weather events on critical infrastructure i.e. damage to the components, and the direct consequences that result.
9
D6.3‐Report on benefits of critical infrastructure protection
Similarly, the mitigation actions discussed are direct engineering interventions that are employed to reduce 1) the probability of hazard occurrence 2) the impact of the hazard on the critical infrastructure or 3) the consequence of the impact on the critical infrastructure. What measures to employ and the basis for how to judge the effectiveness of the measures are taken from RAIN Deliverable D7.2 (Gavin & Murphy 2016). The mitigation measures in this document fall into the second of Deliverable D2.3 (Groenemeijer et al. 2015) categories of measures employed by critical infrastructure operators: preventive measures and measures taken once a warning for extreme weather has been issued. Details on warning systems for extreme weather and infrastructure failure can be found in RAIN Deliverable D2.3 (Holzer et al. 2015) and Deliverable D7.5 (Murphy & Gavin, 2017) respectively. The infrastructure networks included in the RAIN project include land transport, electrical and telecommunications networks. The case studies in Sections 3 and 4 analyse the consequence of impacts of extreme weather on land transport and electrical networks present in the case study areas.
Appendix B describes the basis of methodologies to consider indirect impacts and indirect mitigation measures. Neither of which are used in the analysis carried out in Sections 3 and 4 as the methodologies were not fully developed in time for data collection and modelling. Similarly, there are aspects of the work described in RAIN Deliverable D5.2 (van Erp et al. 2017) that could not be included in the analysis carried out herein. The case study demonstration employs the probability sort algorithm discussed in Section 4 of that deliverable but the modelling of cascade effects and the time dependant consequences could not be incorporated.
As mentioned, the choice and effectiveness individual mitigation measure assessment is based on the work completed in RAIN Deliverable D7.2 (Gavin & Murphy 2016). For one of the case studies, in order to assess the benefits of a broader strategy of securing various components of the critical infrastructure networks a wider mitigation strategy is modelled in which combinations of various measures, constrained by a budget, are compared. The comparison is carried out by applying the WP5 criterion of choice methodology instead of a traditional cost benefit analysis.
1.4. Deliverable Structure
The two case studies help to demonstrate how various aspects of the work carried out in other RAIN work packages can be applied and demonstrate the benefits of providing critical infrastructure protection. Central in these is the RAIN Risk‐Based Decision Making Framework presented in WP5 Deliverable D5.1 (van Erp & van Gelder 2015). Section 2 discusses the Framework and briefly describes how the probability models developed in the case study analyses fit into the Framework.
Both case studies assess the risk associated with a specific extreme weather event. The two case studies are also quite different in terms of geographic scale and the density of the transport, electrical and societal networks within each case study area. These differences highlight the flexibility of the RAIN Risk‐Based Decision Making Framework.
A Section is given each of the two case studies undertaken in this deliverable. The first case study, discussed in Section 3, centres around a 2003 extreme rainfall event which took place within the Friuli Venezla Giulia Region of North Eastern Italy. The extreme rainfall caused landslides and river flooding and resulted in damage to critical infrastructure in the area. In Section 4, case study two is 10
D6.3‐Report on benefits of critical infrastructure protection
presented. The case study examines a part of the Usiimaa region in Finland and the Risk‐Based Decision Making Framework is used to evaluate the impact of an extreme storm event on infrastructure in this region. A storm surge event which occurred in 2005 acts as the basis for this case study.
Both case study Sections follow a similar structure – beginning with an overview of the emergency management of the respective country in the context of the historical events before elaborating on how the RAIN Risk‐Based Decision Making Framework (Figure 1) was applied to provide a measure on the benefit of critical infrastructure protection.
11
D6.3‐Report on benefits of critical infrastructure protection
2. Risk‐Based Decision Making Framework
A primary goal of Work Package (WP) 6 has become the demonstration of the implementation of the Risk‐Based Decision Making Framework developed in WP5 (van Erp and van Gelder, 2015) in the analysis of the impact of extreme weather events (EWE) on critical infrastructure. The Framework proposed by van Erp and van Gelder (2015) is presented in Figure 1. The Framework consists of two main phases: 1) the inference phase, and 2) the decision phase.
Figure 1 Risk‐Based Decision Making Framework (van Erp and van Gelder, 2015)
The case study analyses in the latter half of Sections 3 and 4 are discussed in the context of working through the steps of the Framework:
Enumeration Quantification of Likelihoods 12
D6.3‐Report on benefits of critical infrastructure protection
Consequence Analysis Construction of Outcome Distribution(s) Application of Criterion of Choice (Case Study 1)
Detail on the Framework can be found in RAIN Deliverable D5.1 (van Erp and van Gelder, 2015).
2.1. Bayesian Network Modelling
To implement the inference phase of the Risk‐Based Decision Making Framework proposed by van Erp and van Gelder (2015), Bayesian Network (BN) modelling is employed for the case studies. BN modelling is a graphical method that employs Bayesian probability theory to graphically represent complex processes or networks (Aguilera, et al., 2011). BN modelling facilities the combination of information from various sources and is an appropriate method for dealing with multi‐disciplinary complex problems, such as the risk due to the impact of an EWE on infrastructure networks. Such an approach allows the interactions between elements to be clearly visualised, with values assigned to these interactions to allow the model to be numerically evaluated.
For the Alpine case study a BN is configured to determine the risk due to heavy rainfall while in the Finnish case study, BN modelling is used to determine the risk due to an extreme storm surge event in the Gulf of Finland.
The main steps involved in the development of a BN model are as follows:
Define the nodes, i.e. random variables. Construct the Directed Acyclic (DAG) graph, i.e. the BN model.
Assign a Conditional Probability Distribution (CPD) to each node, i.e. the distribution P(Xi|Pai)
where Xi represents the node i and Pai are its parents. Employ an inference algorithm to compute a set of hidden variables given a set of observed variables, i.e. the probable economic losses due to an extreme storm surge event.
The Bayesian Network software employed in the case study analysis is GeNIe1.
2.1.1. Multi‐Mode Risk Model
Sections 3 and 4 analyse the consequences of multi‐mode risks in the case study analysis carried out in the latter half of Sections 3 and 4. As described in RAIN Deliverable D6.1 (Hajializadeh et al. 2015), a single risk assessment is a risk of particular hazard occurring in a particular geographical area, while, the multi‐risk concept, discussed in RAIN Deliverable D6.2 (Hajializadeh et al. 2016), refers to various combinations of hazards and various combinations of vulnerabilities. Figure 2 illustrated the multi‐risk concept can be modelled using a Bayesian Network. The multi‐hazard concept may refer to:
a) Different hazards may threaten the same exposed elements. b) Hazardous event can be triggered (cascade effects).
1 GeNIe Modeler from BayesFusion, LLC ‐ available at http://www.bayesfusion.com/ 13
D6.3‐Report on benefits of critical infrastructure protection
The multi‐vulnerability perspective may refer to:
a) Various exposed sensitive element with possible different vulnerability to the various hazards. b) Time‐dependent vulnerabilities, in which the vulnerability of a specific class of exposed elements may change with time as a consequence of difference factors.
Figure 2 Multi‐mode risk
2.1.2. Risk Models and Bayesian Network Nodes
Each component in the above figure has a number of possible states – represented by three colours in the figure. In employing the Framework we must enumerate all possible states that might arise.
For instance, each element of indentified critical infrastructure (e.g. a bridge) can be in one of a number of damage states ranging from healthy to, say, destroyed. The probability that the infrastructure is in each state is calculated in the application of the Risk‐Based Decision Making Framework. The term risk model is used to refer to how the calculation for each component is carried out. The risk models employed to calculate the risk to elements from hazards, e.g. road from landslide, are described in the manner of a formula of the product of the probability times the consequence.
For example, the risk of damage to roads from a landslide of a certain magnitude is described as