At 12:33 p.m. native time on a crystal blue Monday, the system that gives the facility important to the day by day lives of fifty million-plus individuals collapsed. The lights went out from Lisbon to Barcelona; trains stopped, air visitors controllers went offline and hospital employees scrambled to maintain sufferers alive. Two extremely fashionable, eminently civilized nations had been plunged into chaos.
Whereas comprehensible, the instant obsessive seek for the trigger — whether or not cyberattack, software program error or uncommon atmospheric phenomenon — missed the purpose. In tightly coupled, extremely advanced techniques just like the European power grid, the following disaster shouldn’t be prompted. It’s triggered.
Over the previous 2½ many years within the catastrophe enterprise in New York Metropolis, I’ve watched climate techniques, electrical grids, transit techniques and terrorist networks overwhelm the best-laid plans. And I’ve come to know what physicists and techniques theorists have identified for years: In advanced techniques, catastrophe shouldn’t be the exception; it’s the vacation spot.
Again within the Nineteen Nineties, Danish physicist Per Bak proposed a idea he known as self-organized criticality. His perception was that advanced techniques — whether or not electrical energy techniques, cities, economies and even ecosystems — inevitably manage themselves into fragile states. As connections develop and effectivity will increase, the margin for error disappears. One small, nearly trivial fault can immediately cascade right into a continent-wide collapse. Not as a result of the fault is catastrophic — however as a result of the system itself evolves into the crosshairs of disaster.
That is what occurred in Spain and Portugal. And it’ll occur once more.
In his landmark work “Regular Accidents,” sociologist Charles Perrow defined why. Programs like telecommunications networks or nationwide energy grids aren’t simply sophisticated — they’re “tightly coupled,” which means that one failure quickly impacts the following. The result’s failure that isn’t solely possible — however regular. Looking for and eradicate each attainable fault is a idiot’s errand. You possibly can’t debug your method out of systemic threat.
This idea may appear summary until you occur to be on the hook to resolve the problems and unmet wants of the tens of millions trapped within the blackout. The aged affected person whose ventilator shut down. The practice passenger caught underground. The nurse working by flashlight. The grocery retailer that misplaced every part at the hours of darkness.
We’re used to pondering of disasters as exterior shocks — terrorist assaults, hurricanes, pandemics. However increasingly, the disasters we face are emergent properties of the techniques we’ve constructed. Lean, environment friendly, interconnected infrastructures may match fantastically on day. However they break spectacularly on a foul one.
Statistician Nassim Nicholas Taleb, in his influential work “The Black Swan,” calls the world the place low-probability, high-impact occasions dominate “Extremistan.” In Extremistan, what appears unbelievable occurs commonly. What appears steady collapses with out warning. And what appears remoted is deeply, dangerously related. I hate to interrupt it to you, however we dwell in Extremistan now. So what ought to we be doing about it?
First, we should cease debating chances. Catastrophic failures aren’t uncommon. They’re inbuilt. The query shouldn’t be if one other system will collapse — however when and what number of others will collapse with it.
Second, we should shift from an optimization to a resilience mindset. The essential infrastructure that sustains day by day life — transportation, communications, water and wastewater, power, meals, well being care — should be rendered in a position to take in shocks and hold functioning, not simply on paper however in apply. Which means slack within the system. Redundancy. Cross-training. Handbook overrides. And an expert emergency administration class empowered to plan, rehearse and lead.
And at last, we should put together for the second of reality — that first hour when the system breaks, and the response begins. That hour shouldn’t be a drill. It’s life or dying for the susceptible, the aged, these with entry and useful wants, the remoted. And if we’re not prepared, it will likely be too late.
The Iberian blackout was not a one-off. It was not a fluke. It was a sign from the long run, despatched within the language of darkness. Our job is to pay attention — and act — earlier than the following black swan comes.