c-ECO INSTITUTESYSTEMIC INTELLIGENCE LIBRARY · EME

c-ECO SYSTEM / DOMAIN LIBRARY

EME · Domain knowledge

Emergency Services

Risks · Response · Governance · Calibration
Scenarios · Recovery · Sources

c-ECO Institute crest

A domain library connecting systemic risks, monitoring, governance and recovery. Explore nine parts and 35 sections with mechanisms, observations, evidence matrices and documented cases.

English research and learning edition · Scientific references, domain cases and reproducible exercises. Methodological notes →

READING AND EVIDENCE

How to use this library

The library combines domain research, a c-ECO analytical teaching structure and original exercises. References identify mechanisms, methods and documented cases; inclusion does not validate a complete TFP application.

N1 · Analytical and simulated material
The risk–TFP associations, candidate observations, scenario designs and exercise parameters organize inquiry. They are not measured local results, approved operational thresholds or estimates of event frequency. The case must define its function, observations and criteria.
N2 · Reproducible laboratory
Section 20 specifies a synthetic model, assumptions, dependence and random seed. Its Q output is a pedagogical index, separate from SPS. Numerical summaries describe only that declared experiment.
N3 · Sources and scope
Research papers, official documents and case records have distinct roles. This is a curated teaching library, not an exhaustive systematic review. Dynamic sources require a cited version or extraction date; applicability of a legal or technical instrument depends on the actual jurisdiction and activity.
N4 · Governance and learning
The library establishes no statutory power, quorum, emergency command, provider certification, partnership or institutional endorsement. A learning case may be real or simulated. Completion, optional credentialing, permission to submit and licensing remain distinct. Projects and data contributions to the SIL require an associated fellow and applicable review.

PART I

Domain intelligence profile

SECTION 01

Domain overview and system boundary

Define the protective function before assessing an emergency organization. The objective may be safe movement, rescue, accessible shelter or continuity of urgent care, each with a different deadline and evidence requirement. Include exposed people, likely barriers, hazard progression and dependencies that enable action. A functioning dispatch center does not establish that assistance can reach an isolated household. The case should state what protection means, who needs it and when an option ceases to be useful. This functional boundary keeps the analysis focused on outcomes rather than equipment counts or organizational charts. [E01] [E02] [E22]

Emergency services operate where the time available for protection is shorter than the time required by ordinary institutions to deliberate and deliver. This domain covers warning, dispatch, incident coordination, rescue, evacuation, shelter, emergency logistics and transition to recovery. The analytical object is the protective function, not only the responding organization. A timely forecast has little value if the message does not reach residents, if no safe route remains or if assistance is unavailable for those who cannot move independently. [E01] [E02] [E21]

A case should define the hazard, exposed people, protective options, response deadlines and agencies or community groups with relevant responsibilities. It should include accessibility, trust, responder safety and essential lifeline dependencies. Response capability is conditional: a vehicle requires fuel, a crew, communication and a usable route; a shelter requires safe water, staffing and accessible accommodation. The fellowship examines these chains through documented evidence and scenarios without purporting to issue operational orders or replace competent emergency authorities. [E03] [E07] [E22]

A domain label is not yet a case boundary. Separate the condition of a resource or asset from the function delivered to users. A nominally available installation may fail to deliver usable service, and a system-wide average can conceal localized loss. Preserve the original physical or institutional unit alongside any normalized representation. The boundary should make it possible to ask what enters, what changes, what leaves and who experiences the consequences.

Case-analysis method
Case fieldRecord
FunctionDescribe the outcome delivered, affected users and the minimum useful unit of service.
BoundaryRecord spatial, technical, organizational and temporal boundaries, including excluded processes.
Reference conditionState what counts as functional performance and which evidence defines that condition.
Exposure and distributionIdentify which groups, assets and ecological functions can be affected differently.
DependenciesIdentify prerequisites, substitutes and common points of failure.
ObservationConnect each important claim to a source, method, scale and update interval.

Section readings [E01; E02; E22]

SECTION 02

Historical development and changing conditions

Historical analysis should reconstruct what people and organizations knew at each stage, avoiding hindsight that assumes later findings were available during response. Trace hazard detection, warning, interpretation, mobilization, route conditions and protective outcomes on one timeline. Identify assumptions that persisted after contradictory evidence appeared. Compare formal plans with actual access to resources and authority. Past failures can reveal recurring mechanisms without proving that the same decision would be appropriate in another jurisdiction. The purpose is to understand how options narrowed and which earlier actions could have preserved safer alternatives. [E01] [E15] [E18]

A historical baseline must be examined for changes in exposure, technology, operating practice and observation. Compare episodes using their mechanisms and evidence, rather than treating all events with a similar label as exchangeable observations. A reconstruction should show what was known at each time; later explanations should not be presented as information available to the original decision maker. Recovery and long-term change may require a separate timeline from the initiating incident.

Historical comparison: documented records for further study
Case and periodMechanism to examineComparison questionSource
Camp Fire, California, 2018; NIST 2023Fire progression, notification, traffic and temporary refuge interacted under compressed timelinesCompare action duration with dynamic route loss; do not assume a warning alone guarantees safe movement[E15]
Grenfell Tower, London, 2017; inquiry 2024Building-safety governance and emergency arrangements require lifecycle analysisExamine how assumptions about building behavior shape protective instructions and revision decisions[E17]
Hurricane Katrina, 2005; federal review 2006Large-scale need, lifeline failure and coordination gaps exceeded planned response arrangementsTest assistance, communications and multiagency decision pathways under degraded conditions[E18]
Great East Japan earthquake and tsunami, 2011Multiple hazards and infrastructure failures created geographically distributed protective demandsExamine warning, evacuation and service dependencies while distinguishing preliminary from later evidence[E19]

Section readings [E01; E15; E18]

SECTION 03

Actors, institutions and decision responsibilities

Emergency institutions combine legal authority, professional capabilities and relationships with communities and other organizations. A chart of formal command is insufficient when useful information or equipment sits outside the hierarchy. Map who can issue warnings, authorize movement, open shelters, request assistance and revise an action. Identify boundary-spanning roles and backup decision routes. US incident-management doctrine offers a comparative example, not a universal rule. The fellowship case should describe the applicable local arrangements and demonstrate how coordination would work without claiming operational authority for c-ECO or its reviewers. [E03] [E09] [E13]

Map actors by the function they perform and the responsibility they actually hold in the case. The same organization may observe a condition, supply a service and participate in a decision; those roles should remain distinguishable. Examine information access, resources, expertise, affected users and accountability together. A list of institution names is not an operating governance arrangement. Record the evidence for each responsibility and the process for resolving a disagreement or correcting a record.

Case-analysis method
FunctionActors to identifyReviewable output
ObserveOperators, observation networks, laboratories and affected usersTimestamped records and methods.
InterpretAnalysts and relevant subject specialistsMechanism hypotheses, alternatives and uncertainty.
ReviewQualified reviewers with declared interestsDocumented assessment and unresolved disagreements.
Decide and executeThe actor with the applicable mandateReasons, authorized action and verifiable completion.
CommunicateResponsible institutions and accessible public channelsMessage, receipt, corrections and feedback.
UpdateData custodians and the review functionVersion, new evidence and conditions for revision.

Section readings [E03; E09; E13; C07]

PART II

Systemic risk intelligence

SECTION 04

Primary systemic risks

Primary risks arise where protective demand exceeds usable capability within the available time. A warning may arrive too late, a route may become unsafe, or rescue equipment may lack a qualified crew. Separate hazard exposure, requested assistance, verified need and completed protection. These quantities differ, especially where people cannot contact official systems. Prioritize consequences and time sensitivity rather than the visibility of an incident. The risk catalogue is a structured investigation aid: each entry should lead to evidence about a failure pathway, an accountable decision and a feasible improvement. [E02] [E08] [E15]

The inventory is a structured set of research hypotheses. It separates a threatening condition from the mechanism of loss and from its consequences. The proposed TFP association indicates which question to investigate; it is not evidence that a particular indicator predicts the event. Risk importance depends on the defined function, exposure, duration and usable alternatives. Do not infer frequency, severity or priority from the position of a row in the table.

Thirty domain-specific risk hypotheses
#Risk or threatening conditionMechanism to examineProposed TFP inquiry
1Warning not receivedThe protective message does not reach exposed peopleσ: coverage uncertainty
2Warning not understoodLanguage, format or content prevents actionable interpretationP: unprotected recipients
3Warning-action mismatchRecommended action cannot be completed before hazard arrivalΔV: closing action window
4Late detectionHazard observation arrives after feasible protective options narrowΔV: lead-time loss
5Dispatch overloadIncoming requests exceed triage and allocation capacityP: response backlog
6Communications outageResponders or residents lose essential information channelsLr: coordination capacity
7Incompatible agency systemsOrganizations cannot exchange operationally useful informationσ: shared-picture gap
8Unclear decision authorityAction stalls while responsibility is disputedLr: activation delay
9Single access routeHazard blocks simultaneous evacuation and responder entryP: isolation
10Evacuation congestionMovement demand exceeds safe time-dependent capacityΔV: clearance deficit
11Inaccessible evacuationPeople with assistance needs cannot use available optionsP: unmet protective need
12Shelter hazard exposureThe designated destination becomes unsafe under the same eventLr: independent refuge
13Shelter service failureWater, sanitation, power or staffing cannot sustain occupancyP: unmet shelter function
14Rescue equipment mismatchEquipment cannot operate safely in actual conditionsLr: usable capability
15Responder fatigueSustained operations reduce safe decision and task performanceP: workforce impairment
16Responder exposureHazard conditions exceed safe operating capabilitiesP: responder safety margin
17Fuel interruptionVehicles, generators and pumps cannot sustain operationLr: operating autonomy
18Medical surge bottleneckTriage, transport or receiving capacity limits careP: unmet urgent care
19Critical-facility evacuationDependent patients require movement under constrained capacityLr: assisted-transfer options
20Conflicting public messagesDifferent sources undermine a coherent protective decisionσ: interpretation uncertainty
21Misinformation feedbackUnverified claims redirect attention and resourcesσ: evidence reliability
22Unregistered population exclusionPeople outside official lists are missedP: hidden unmet need
23Volunteer convergenceUncoordinated assistance blocks access or creates safety burdensP: coordination load
24Relief delivery mismatchSupplies do not match actual recipient requirementsP: usable assistance deficit
25Common-mode mutual-aid lossNeighboring resources are affected by the same hazardLr: independent assistance
26Hazard cascadeLifeline or industrial failure creates additional response demandP: compounded exposure
27Data lossMissing logs obscure needs, decisions and accountabilityσ: reconstructability gap
28Premature re-entryResidents return before habitability and access are safeP: renewed exposure
29Prolonged temporary shelterTransition delays intensify health and social burdensLr: recovery options
30Demobilization gapFormal response ends while essential unmet needs persistP: continuing service deficit

Section readings [E02; E08; E15]

SECTION 05

Amplification mechanisms and secondary risks

Secondary mechanisms amplify the first impact through lifeline failures, growing backlogs and reduced responder capacity. An outage can disable communications and pumping while increasing medical and evacuation demand; prolonged sheltering can create sanitation and care pressures. Distinguish simultaneous common-cause failures from consequences that develop later. For each proposed link, ask what service is lost, which people depend on it and how long substitution remains possible. This prevents double counting a single unmet need across many sector labels and helps identify actions that protect several essential functions at once. [E11] [E22]

An amplifier changes the consequences of an initiating condition without necessarily causing the initiating event. Useful counterfactuals hold the threat constant and vary concentration, maintenance, access, information or response capacity. Document the mechanism and the observation that would distinguish it from an alternative explanation. Several amplifiers may share the same upstream cause; counting each one as independent evidence exaggerates confidence.

Amplification mechanisms
AmplifierPropagation mechanismEvidence or TFP inquiry
Compound hazardA second event removes the planned protective optionTest plausible concurrent failures [E11]
Power-dependent communicationsOne outage disables several nominal channelsVerify physical independence [E22]
Assistance barriersWarnings reach people who lack feasible actionMatch support to actual household circumstances [E02]
Organizational silosInformation and resources remain trapped within agenciesExercise boundary-spanning coordination [E03]
Responder depletionLong operations reduce safe capacity as demand persistsPlan rotations and relief [E01]
Shared regional exposureMutual-aid providers face simultaneous demandMap independent capacity and mobilization time [E07]
Distrust and inconsistent messagesPeople seek confirmation while the action window shrinksUse trusted, accessible two-way communication [E20]
Untracked displacementPeople disappear from local systems after leavingMaintain consent-based continuity and receiving-area links [E05]

Section readings [E11; E22]

SECTION 06

Emerging risks and research horizons

Emerging emergency challenges often involve new combinations of familiar constraints: overlapping hazards, digitally concentrated communication, rapidly produced false information and populations whose actual location differs from official records. Do not equate technological novelty with improved protection. A new alerting platform must still demonstrate receipt, comprehension and ability to act. Analyze failure modes, fallback channels and the burden placed on users. Scenario work should examine which decisions remain feasible when the preferred system fails and how uncertainty can be communicated without leaving people unable to choose a protective action. [E02] [E20] [E21]

A research horizon is tied to the time needed to investigate, prepare or change a system. It is not a date at which an emerging threat is predicted to occur. Record the reason for concern, the strength of evidence, the exposed function and the observation that would change the priority. Distinguish a newly observed mechanism from a known mechanism whose exposure, scale or institutional context is changing.

Emerging research agenda
Research topicMechanism or knowledge gapObservation or horizon question
Climate-driven compound demandHeat, flood, fire and lifeline failures overlapExercise cross-hazard protection choices [E11]
AI-generated misinformationPlausible false content obscures actionable messagesUse authenticated channels and rapid correction [E20]
Platform-dependent warningsAlert delivery relies on concentrated commercial infrastructurePreserve tested accessible alternatives [E21]
Energy-transition incident complexityNew equipment and materials change responder training needsUse hazard-specific competence verification [E01]
Remote and mobile populationsAdministrative residence differs from actual exposureUse time-sensitive and privacy-aware population evidence [E06]
Long-duration displacementShort response doctrine fails to cover continuing social needsTrack transition and household outcomes [E05]

Section readings [E02; E20; E21]

SECTION 07

Cascades and cross-domain dependencies

A cascade map should begin with a specified event and follow protective functions through time. For example, flooding may disable power, interrupt communications, reduce dispatch visibility and delay assisted evacuation. Each arrow requires evidence of dependency, tolerance time and available substitution. A separate hazard occurring at the same time is not automatically a cascade. Shared regional exposure can remove expected mutual aid without any direct causal link between agencies. Distinguishing these structures improves the scenario and prevents the model from attributing all losses to a single undifferentiated notion of complexity. [E11] [E22]

Warning is an end-to-end process: risk knowledge, detection and forecasting, communication, and preparedness for action. Failure in any link can prevent protection even if the technical forecast is accurate. A case must examine both lead time and the time people need to complete the protective action. [E02] [E21]

Protective decisions depend on attention, interpretation, perceived threat, perceived efficacy and practical barriers. Non-evacuation cannot be reduced to ignorance or irrationality when transport, caregiving, disability, livelihood or fear of losing a home constrains action. [E02] [E12]

Coordination is a changing network of organizations with different mandates, information and routines. A shared command vocabulary can help, but real performance also depends on working relationships and people who connect organizational boundaries. [E01] [E03] [E09]

For each directed dependency, specify the function supplied, the destination, the propagation time and the substitute. Shared-cause failure, interacting threats and cascading propagation are different structures. A directed arrow becomes an explanatory claim only when the timing and mechanism are supported. Test apparent redundancy by removing the common access route, platform, energy supply or specialist on which both alternatives depend.

Directed dependency hypotheses
DependencyMechanism and directionVerification or TFP inquiry
Digital communicationsWarnings, dispatch and coordination require usable channelsTest outages and common power exposure
EnergyVehicles, radios, shelters and medical equipment require fuel or powerRecord load-tested autonomy and resupply
TransportAccess determines feasible rescue and evacuationUse dynamic route conditions
Water and sanitationShelters and medical facilities require safe servicesVerify occupancy-specific continuity
HealthReceiving care constrains rescue and evacuation decisionsConfirm acceptance and specialist capacity
LogisticsSupplies must remain usable and arrive before need becomes harmTrack recipient outcomes
UrbanizationBuilding layout and occupancy shape exposure and egressLink plans to actual residents and accessibility
GovernanceMandates and accountability determine decisionsMap lawful authority and review routes
FinanceActivation and reimbursement affect deployable resourcesDocument arrangements without assuming commitments
Community institutionsTrust and local knowledge support protectionInclude feedback and avoid assuming unlimited volunteer capacity

Section readings [E11; E22; C01; C02]

PART III

Systemic response intelligence

SECTION 08

Readiness and response protocols

Protocols should link changing evidence to lawful, feasible action. Specify the observation, verification route, decision owner, protective task, time requirement and condition for revision. A threshold that triggers movement after the safe route is lost is operationally useless even if scientifically defensible as a hazard classification. Test the protocol under degraded communications and incomplete information. Keep a record of overrides and reasons, recognizing that professional judgment may be necessary. The purpose of the educational case is to make this chain inspectable, not to publish instructions that replace local emergency procedures. [E01] [E13] [E16]

Preparedness connects a signal to a responsible actor, an available measure and a condition of completion. This learning architecture does not grant emergency command or operational authority to the c-ECO Institute or a course participant. A useful protocol distinguishes checking the signal, protecting exposed functions and verifying recovery. A paper plan contributes to usable capacity only when its relevant assumptions have been tested.

Case-analysis method
StageAction to prepareEvidence
PrepareDefine critical functions, contacts, alternatives and observation coverage.A tested readiness record.
VerifyCheck the signal, the instrument and plausible alternative explanations.A traceable observation and uncertainty statement.
ProtectSelect and implement measures within the responsible actor’s authority.Coverage of priority functions and evidence of execution.
RecoverVerify usable performance before treating the function as restored.Recorded return criteria, monitoring and decision owner.

Section readings [E01; E13; E16]

SECTION 09

Scientific review and decision records

Review should focus on assumptions capable of changing a life-safety decision: population location, route availability, assistance needs, hazard arrival and realistic mobilization time. Independent scrutiny can reveal optimistic plans and incompatible responsibilities before an event. During response, a short documented review route must avoid becoming a delay that consumes the remaining protective window. Afterward, examine both outcomes and the information available at the time. Preserve dissent and uncertainty without presenting a preferred model as infallible. Institutional review within an educational exercise does not confer emergency authority or professional deployment qualifications. [E01] [E09] [E15]

A review record separates observation, inference and decision. Record the data version, methods, alternative explanations, relevant expertise, conflicts of interest and unresolved disagreement. Review should be matched to the question and its consequences. Scientific analysis can inform a competent actor without replacing that actor’s mandate. No membership size, quorum or institutional power is established by this teaching library.

Case-analysis method
Review itemQuestion and record
QuestionWhat specific claim is being evaluated?
EvidenceWhich observations, sources and transformations support it?
AlternativesWhat other process could explain the same observation?
IndependenceWhich interests or shared data origins affect review?
DecisionWho can act, on what basis and with which constraints?
RevisionWhat new observation or failure of an assumption reopens the analysis?

Section readings [E01; E09; E15; C05; C07]

SECTION 10

Communication and observation continuity

Effective communication is measured through usable understanding and protection, not messages sent. Ask whether the audience received the warning, understood the action, believed it was relevant and had a practical way to comply. Provide accessible formats and trusted channels, and maintain a route for questions and correction. People may need confirmation because messages conflict or because the instruction contradicts their experience. Treat these responses as evidence about communication design and barriers. A case should connect public messaging to transport, destinations, caregiving and other resources necessary to make the advice actionable. [E02] [E12] [E20]

Continuity of observation should be tested alongside continuity of the function itself. Losing data may increase uncertainty before the physical process visibly changes. Redundancy must be demonstrated against common causes, including power, location, communications, credentials and specialist availability. During disconnected operation, preserve the last reliable observation, record the uncertainty that follows and reconcile timestamps and authorship when information paths return.

Case-analysis method
Continuity capabilityTest
Observation pathTest sensor availability, power, timing and independent confirmation.
Alternative communicationTest actual reach, autonomy and the ability to contact responsible people.
Degraded operationSpecify what can remain usable safely under loss of information or connectivity.
Offline recordKeep controlled copies of essential maps, contacts, definitions and procedures.
Accessible messagesCheck language, disability access, delivery and routes for correction.
ReconciliationPreserve timestamps and authorship when disconnected records are merged.

Section readings [E02; E12; E20; C01]

PART IV

Governance and legal architecture

SECTION 11

International instruments and technical references

International frameworks support risk understanding, preparedness and inclusive warning systems, but they do not define every local operational power. Use Sendai and the WMO warning architecture to test whether the case covers knowledge, detection, communication and response capability. Then identify the actual domestic instruments that authorize action and protect rights. A framework commitment is different from demonstrated capability. The analysis should show how an international objective becomes a tested local arrangement, with responsible actors and evidence, rather than treating reference to a respected institution as proof of implementation. [E14] [E21]

Classify each instrument before using it. A scholarly article supports an inference, a technical guide describes a method, a standard has a defined scope, and a legal instrument may create obligations only where applicable. The case record should identify the specific provision or method, its version and the activity to which it relates. A source’s institutional reputation cannot by itself establish applicability or demonstrate compliance.

Technical and institutional documents: identify their actual function
ReferenceDocumentUse and scope
[E13]National Incident Management System, Third EditionUS-specific common incident-management framework; not a universal legal mandate.
[E14]Sendai Framework for Disaster Risk Reduction 2015–2030Risk governance, preparedness and recovery priorities.
[E15]A Case Study of the Camp Fire: Notification, Evacuation, Traffic, and Temporary Refuge Areas (NETTRA)Primary reconstruction of time-dependent life-safety conditions.
[E16]WUI Fire Evacuation and Sheltering Considerations: Assessment, Planning, and Execution (ESCAPE)Evacuation-planning methodology derived from case evidence; consult landing page for revisions.
[E17]Phase 2 ReportBuilding-safety institutions, response and accountability; separate investigation findings from recommendations.
[E18]The Federal Response to Hurricane Katrina: Lessons LearnedPrimary federal after-action perspective on coordination and response.
[E19]Great East Japan earthquake: preliminary observationsDated early observations, not a substitute for later detailed investigation.

Section readings [E14; E21]

SECTION 12

Jurisdiction-specific responsibilities and requirements

National and local law determines emergency declarations, evacuation authority, resource requests, privacy, procurement and professional practice. These arrangements vary by jurisdiction and sometimes by hazard. Record current primary rules and obtain qualified interpretation where a case decision depends on them. Do not import US incident-command terminology as if it were binding elsewhere. Compare authority with practical capacity: an agency may possess a mandate but lack transport or accessible warning channels. The educational product should identify these gaps clearly without attempting to resolve them through an invented institutional power. [E09] [E13] [E14]

The register should cover the actual activity and location, including interfaces between organizations and jurisdictions. Separate responsibility for observing, supervising, deciding and executing. Retain the official source, version consulted and evidence needed to assess a condition. Conflicting definitions and overlapping mandates are analytical findings to investigate. A general library cannot create a universal legal threshold for all settings.

Case-analysis method
Register fieldInformation to preserve
Instrument and versionOfficial title, scope, jurisdiction and date consulted.
Actor and functionThe competent authority, operator, owner or custodian for the relevant activity.
ConditionThe requirement, decision trigger or performance obligation actually applicable.
EvidenceThe observation or document needed to evaluate that condition.
InterfaceOverlaps, conflicts, shared duties and coordination procedures.
ReviewHow changes in the instrument, activity or evidence affect applicability.

Section readings [E09; E13; E14]

SECTION 13

Causation, accountability and cascading consequences

Accountability requires reconstructable decisions and a fair distinction between individual error, organizational conditions and unavailable resources. Record who knew what, when a request was made, what alternatives were feasible and why an instruction changed. Protect personal information while preserving evidence needed for review. Historical cases should rely on established inquiry findings and identify preliminary reports as such. A learning analysis should not assign unsupported blame or assume that a favorable outcome proves a decision process was sound. Near misses can expose serious weaknesses even when chance or improvisation prevented greater harm. [E01] [E17] [E23]

A technical chain of consequences is not automatically a legal allocation of liability. Separate evidence of causation from the duties, control and decisions relevant to each actor. A case may contain direct damage, dependent service interruption and persistent environmental or social consequences on different timescales. The analysis should show which links are documented and which need further investigation, without presuming an institutional restoration fund, mandatory levy or insurance mechanism.

Case-analysis method
LayerAnalytical question
Technical sequenceSeparate the initiating condition, failure mechanism, propagation and consequence.
Duty and controlIdentify the applicable responsibility and the actor able to influence the relevant process.
ExposureTrace the connection between a change of state and an affected function or population.
Alternative explanationsIdentify concurrent conditions and missing evidence relevant to attribution.
Recovery resourcesIdentify documented resources and their access conditions, without assuming an institutional fund or levy.

Section readings [E01; E17; E23]

SECTION 14

Cross-boundary coordination

Cross-boundary response depends on compatible information, explicit requests and a realistic means of delivering assistance. Neighboring jurisdictions may face the same hazard, while national resources may arrive after the local protective deadline. Examine border, licensing, transport and receiving arrangements where relevant. A case should identify which capabilities are genuinely independent and what happens if expected assistance is delayed. Communities receiving displaced people also become part of the response system, with their own shelter, health and service needs. Treat these consequences as part of the protective chain rather than an externality after evacuation. [E07] [E10] [E22]

Processes and dependencies often cross administrative, organizational or national boundaries. Coordination requires compatible definitions, useful timing, authorized exchange and an identifiable decision interface. Sharing data does not by itself resolve disagreements over objectives, risk allocation or resources. An exercise should expose which decision can be coordinated under existing arrangements and which would require an additional agreement or competent determination.

Coordination across functional boundaries
Boundary / dependencyMechanism to coordinateCase record
Digital communicationsWarnings, dispatch and coordination require usable channelsIdentify the actors, notification time, information definition and decision interface for this boundary.
EnergyVehicles, radios, shelters and medical equipment require fuel or powerIdentify the actors, notification time, information definition and decision interface for this boundary.
TransportAccess determines feasible rescue and evacuationIdentify the actors, notification time, information definition and decision interface for this boundary.
Water and sanitationShelters and medical facilities require safe servicesIdentify the actors, notification time, information definition and decision interface for this boundary.
HealthReceiving care constrains rescue and evacuation decisionsIdentify the actors, notification time, information definition and decision interface for this boundary.
LogisticsSupplies must remain usable and arrive before need becomes harmIdentify the actors, notification time, information definition and decision interface for this boundary.

Section readings [E07; E10; E22; C07]

PART V

TFP calibration intelligence

SECTION 15

Position (P): candidate observations

A TFP application needs an explicit meaning for P in the emergency case. Candidate measures include unmet protective need, backlog of urgent tasks or a capacity deficit relative to exposed demand. Keep these quantities separate before normalization and retain urgency and accessibility categories. A large number of low-priority requests is not equivalent to one time-critical rescue, and recorded calls may omit people unable to communicate. State the population and task denominator, observation window and worsening direction so a reviewer can interpret a change in the indicator without relying on the label alone. [E02] [E06] [E08]

P represents position relative to a specified loss of function. The raw observation, reference condition, direction of deterioration and boundary of failure must remain explicit. A candidate monotone transformation can help compare states within a defined case, but it does not establish the threshold or validate an aggregate index. Capacity, delivered performance and exposure may require different indicators even when they concern the same installation.

Thirty candidate observations for P and related case questions
#Candidate observationUnit or definitionInterpretation and data requirement
1Effective warning lead timeminutes or hoursCompare receipt and actionable understanding with hazard arrival
2Detection-to-authorization delayminutesRecord observation, verification and decision timestamps
3Warning receipt coverage% exposed populationUse sampled confirmation and inaccessible-group analysis
4Warning comprehension% tested recipientsAssess understood action and timing, not message recall alone
5Ability-to-act coverage% exposed householdsDocument transport, care, mobility and destination barriers
6Dispatch queueunassigned incidentsStratify urgency and duplicate reports
7Call-answer delaysecondsUse tail measures and abandoned calls as well as median
8Mobilization timeminutesSeparate crew notification, readiness and departure
9Travel time to priority incidentsminutesUse hazard-specific route availability
10Task completion timeminutes or hoursDefine actual protective outcome and event severity
11Qualified crew availabilityperson-hours by capabilityInclude shifts, fatigue, access and competing assignments
12Equipment operational readiness% tested assetsRequire crew, fuel, maintenance and suitable conditions
13Communication redundancyindependent usable channelsTest shared power and network common modes
14Interagency message latencyminutesMeasure usable receipt and acknowledgment
15Unresolved information conflictscount by consequenceTrack time to verification and correction
16Evacuation clearance timeminutes or hoursInclude preparation, assisted travel and dynamic route losses
17Safe route availabilitypassable capacityTimestamp road conditions and avoid static map assumptions
18Assisted evacuation demandpersons by support needUse consent-based accessible data practices
19Accessible evacuation capacityverified places/hourMatch vehicle and staffing to actual support needs
20Safe shelter availabilityusable placesVerify hazard independence, accessibility and staffing
21Shelter water and sanitation continuityhours or service coverageMeasure occupancy-dependent requirements
22Backup power autonomyhours at required loadInclude fuel quality, resupply and safe operation
23Rescue task backloguncompleted priority tasksSeparate verified needs from duplicate requests
24Urgent-care transfer delayminutesInclude receiving-facility acceptance and transport
25Unmet essential assistancerecipient-daysInclude households not registered in formal systems
26Responder shift burdenhours worked/rest ratioInterpret under applicable safety arrangements
27Mutual-aid activation timehoursCount arrival of usable capability, not request acceptance
28Relief delivery usefulness% usable on-time consignmentsConfirm receipt, specification and unmet demand
29Re-entry verification coverage% reopened areas or buildingsState checks and remaining restrictions
30Recovery-transition continuity% priority households with confirmed follow-upTrack unresolved needs after demobilization

A didactic monotone transformation for an indicator that worsens as it rises is p = clip[(x − x_ref)/(x_failure − x_ref), 0, 1]. Reverse the direction for a reserve that deteriorates as it falls. The expression makes the reference points visible; it does not choose those points, prove comparability or establish an operational aggregate. Retain x in its original unit and justify the function separately for each case.

Section readings [E02; E06; E08]

SECTION 16

Velocity (ΔV): rates and trajectory

Velocity captures the narrowing action window. Hazard arrival can approach while evacuation time grows, dispatch backlogs accumulate and qualified crews become unavailable. Measure these rates using aligned timestamps and distinguish new need from duplicate reports. Pair a worsening trend with the complete time required for authorization, mobilization, travel and task completion. A static resource count cannot show whether protection remains feasible. Avoid assuming a linear continuation when routes or hazard behavior can change abruptly; use scenario boundaries and refresh observations at a frequency proportionate to the decision. [E15] [E16] [E21]

ΔV describes direction and rate of change over a declared interval. Two systems at the same apparent position may have different reaction times because their trajectories differ. Compare rates using consistent units, observation windows and reference systems. Check seasonality, missing periods, reporting changes and process acceleration before extrapolating. A time-to-boundary calculation is conditional on its trajectory assumption; it is not a general forecast.

Ten families of rate-of-change observations
ProcessRate / unitInterpretation
Hazard arrival margin lossminutes/minuteCompare changing hazard forecast with remaining action duration
Dispatch backlog growthpriority incidents/hourSeparate new demand from triage and completion rates
Evacuation route capacity declinevehicles/hour²Use timestamped closures and speed changes
Warning coverage expansionpercentage points/minuteConfirm receipt across priority groups
Assisted evacuation completionpersons/hourCount safe arrival and required support continuity
Shelter occupancy growthpersons/hourCompare with usable staffed capacity
Crew availability declinequalified person-hours/hourInclude fatigue, access and concurrent tasks
Relief shortfall accumulationrecipient-days/dayMeasure unmet essential need rather than dispatch volume
Information correction ratematerial errors/hourTrack unresolved consequential claims and correction reach
Unresolved recovery need declinehouseholds/dayFollow original cohorts beyond formal response closure

Section readings [E15; E16; E21]

SECTION 17

Uncertainty (σ): evidence and model limits

Emergency uncertainty includes forecast spread, unknown population, conflicting reports, degraded communications and uncertain task duration. These sources affect different decisions and should not be compressed into an unexplained confidence score. Separate direct observations from inference and unverified messages. Record time and location because information can become obsolete quickly. Sensitivity analysis can identify whether a protective choice changes under plausible assumptions, while operational verification should target the most consequential gaps. Communicate what is known, what may change and what action remains useful rather than waiting for complete certainty that the situation cannot provide. [E01] [E20] [E21]

Uncertainty should be recorded by object and source. Measurement uncertainty, sampling limitations, parameter uncertainty, model structure, future scenarios and institutional ambiguity cannot be replaced by one unsupported percentage. More simulation samples can reduce numerical sampling error without resolving a missing mechanism. Identify which uncertainty changes the decision and which further observation, comparison or test could reduce it.

Case-analysis method
Source of uncertaintyObject affectedTreatment
MeasurementInstrument error, drift, reference system and quality controls.Calibration, cross-check and traceable metadata.
SamplingSpatial, temporal or population coverage.A design matched to the decision and exposed groups.
ParametersValues weakly identified by available observations.Estimation, sensitivity and alternatives.
Model structureProcesses excluded or represented inadequately.Competing models and tests outside the fitting conditions.
ScenarioUncertain future demand, environment or operating practice.A declared set of plausible trajectories.
DependenceCorrelated conditions or failures treated as independent.Joint analysis and explicit common-cause hypotheses.
InstitutionsUnverified duties, access or resource availability.Documentary checks and mobilization tests.
Unknown mechanismsA plausible process with insufficient evidence.A research question and decisions robust to the unresolved gap.

Section readings [E01; E20; E21; C06]

SECTION 18

Reversibility liquidity (Lr): usable recovery resources

Recovery capacity concerns usable protection and continuation resources under the event, not nominal holdings. A rescue boat requires suitable conditions and operators; a shelter requires services, staffing and access; a receiving hospital must accept the patient’s needs. Count common-mode exposure and competing demand. Include community resources with consent and realistic limits rather than assuming volunteers can replace professional services indefinitely. An inventory should link each capability to an activation time and verification date. The result is a defensible account of remaining options when ordinary routines are disrupted. [E04] [E07] [E22]

Lr examines resources that can preserve, contain or recover the defined function within the relevant time. A resource listed in an inventory is different from a resource that is accessible, compatible, staffed and mobilizable. Record capacity, useful arrival time, duration, dependencies and evidence of testing. Avoid averaging away an essential bottleneck. Recovery of a service does not necessarily restore ecological condition, accumulated losses or public trust.

Recovery resources to verify in the case
Recovery resourceAvailability or mobilization questionVerification or dependency
Qualified incident personnelCoordinate and perform defined tasksVerify competence, shift availability and local authority
Accessible transportMove people with different support needsMatch capacity, staffing and destination acceptance
Tested communicationsMaintain warning and operational linksVerify common-mode independence and offline procedure
Safe staffed sheltersProvide usable temporary protectionConfirm services, accessibility and hazard exposure
Rescue equipmentComplete hazard-specific tasks safelyTest maintenance, operators and operating limits
Mobile power and fuelSustain essential response functionsVerify loads, refueling access and safety
Medical receiving arrangementsContinue urgent and dependent careConfirm real capacity and transfer requirements
Relief stocks and delivery capacityMeet essential household needsTrack suitability, expiry, access and receipt
Community liaison teamsIdentify needs and maintain two-way communicationInclude local languages and accessible formats
Recovery case managementPrevent transition gapsMaintain consent-based follow-up and correction pathways

Section readings [E04; E07; E22]

PART VI

Scenario and simulation intelligence

SECTION 19

Stress scenarios and comparative strategies

Build scenarios around hazard progression, exposed people and the protective choice. Compare normal communications with outage, one route with route loss, and general evacuation with assisted movement. Include a compound event that changes both demand and capacity. Keep the objective constant so alternatives can be compared fairly. Scenario results should reveal which assumptions control feasibility and which groups remain unprotected. The exercise is most useful when it identifies a concrete change to warning, access, shelter or coordination that can be tested before an actual emergency. [E08] [E11] [E16]

A stress scenario states the initiating condition, prior state, time sequence, exposed function, shared dependencies and feasible responses. Its purpose is to reveal when a strategy loses usefulness and why. Compare alternatives across several conditions, including absent substitutes and simultaneous demand. Scenarios should lead to observations, tests and resource questions; assigning a precise event probability requires a separate justified model and evidence.

Five domain-anchored stress-test designs · N1
ScenarioInitiating mechanismObservation designStrategy comparison
A · Warning not receivedThe protective message does not reach exposed peopleCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.
B · Late detectionHazard observation arrives after feasible protective options narrowCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.
C · Evacuation congestionMovement demand exceeds safe time-dependent capacityCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.
D · Medical surge bottleneckTriage, transport or receiving capacity limits careCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.
E · Common-mode mutual-aid lossNeighboring resources are affected by the same hazardCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.

Section readings [E08; E11; E16]

SECTION 20

Reproducible simulation and sensitivity analysis

Monte Carlo exercises can propagate variation in warning delay, preparation time, travel time, route loss and resource arrival. Dependence matters: the same event may delay crews, interrupt communication and block roads, so independent draws can overstate protection. Document synthetic inputs and distinguish model output from observed performance. Use distributions and sensitivity analysis to explain the decision rather than presenting a single success probability without context. Test alternative behavioral and network assumptions, particularly for people requiring assistance whose travel and preparation needs may differ from the average population. [E02] [E08] [E15]

Simulation is an explicit transformation of assumptions. Input distributions, dependencies, parameter estimation, output definition and testing must be documented. Numerical convergence does not establish model validity. Examine sensitivity to the function used, the weights selected, dependence assumptions and conditions outside the fitting data. The reproducible laboratory below is a synthetic exercise, separated from SPS and from any claim about real-event frequency.

Reproducible synthetic laboratory · N2
ElementSpecification
Samples and seed10,000 samples; Python Random; seed 369655668.
Reference centersP = 0.72; ΔV = 0.62; σ = 0.40; Lr = 0.38.
Latent dispersion0.40, 0.45, 0.30, 0.40, respectively.
Common-factor loading0.65, 0.55, 0.35, −0.45, respectively.
Dependence constructionz_j = a_j g + √(1 − a_j²) ε_j; g and ε_j are independent standard normal draws.
Bounded transformationx_j = logistic[logit(m_j) + s_j z_j].
Learning outputQ = 0.35P + 0.25ΔV + 0.15σ + 0.25(1 − Lr).
Comparison conditionQ ≥ 0.70, selected only for this synthetic laboratory.
Calculated outputs under the declared assumptions
StatisticValue
Mean0.618
5th percentile0.518
Median0.620
95th percentile0.712
Fraction with Q ≥ 0.707.78%

The factor loadings define association on the latent scale. Correlations after the nonlinear transform should be estimated from the simulated samples. Q is a teaching index and is not SPS. Its exceedance fraction concerns the generated sample under these assumptions; it is not the probability of a real event or a forecast over a stated number of years. A temporal forecast would require a separately specified process and observation model.

Reproduce the calculation in Python
from random import Random
from math import log, exp, sqrt
from statistics import mean
rng = Random(369655668)
m = [.72, .62, .40, .38]
s = [.40, .45, .30, .40]
a = [.65, .55, .35, -.45]
q = []
for _ in range(10000):
    g = rng.gauss(0, 1)
    x = []
    for mj, sj, aj in zip(m, s, a):
        z = aj*g + sqrt(1-aj*aj)*rng.gauss(0, 1)
        x.append(1/(1+exp(-(log(mj/(1-mj))+sj*z))))
    p, v, u, lr = x
    q.append(.35*p+.25*v+.15*u+.25*(1-lr))
q.sort()
print(mean(q), q[499], (q[4999]+q[5000])/2, q[9499])
print(sum(x >= .70 for x in q)/len(q))

Sensitivity exercise: remove the common factor, vary one dispersion, change the weight of recovery resources, and compare the ranking of the selected strategies. Then state which domain observations would be needed to replace each illustrative assumption. Use a suitable estimator when inputs are dependent; the common-factor experiment is a dependence check, not a claim that a particular Sobol estimator applies unchanged.

Section readings [E02; E08; E15; C03; C06]

SECTION 21

Restoration and performance verification

A restoration simulation should follow people and functions beyond immediate rescue. Track safe shelter, urgent care, restored access, household services and stable transition arrangements. Include handoffs between incident teams, municipal services and community support so that demobilization does not erase unresolved needs. Resource constraints and prioritization rules should be explicit and open to review. Compare a rapid asset-centered strategy with one that preserves continuity for people facing prolonged displacement. The exercise should explain who waits, why the bottleneck occurs and which feasible change improves protection without creating a new burden elsewhere. [E05] [E14] [E22]

Restoration follows prerequisites and verification conditions rather than a universal fixed clock. Tasks may proceed in parallel only where they do not compete for the same people, access, equipment or information. Protect essential functions while the critical path is addressed. Define what is measured before returning service, who can make that determination and which effects require continued observation after a technical restart.

Case-analysis method
StageAction and prerequisiteEvidence of usable progress
Protect essential usersProvide a feasible interim function while restoration proceeds.Coverage and actual receipt.
Restore prerequisitesRecover access, inputs, energy, information and competent personnel.Verified availability for the next task.
Restore the processRepair and operate the affected function within its relevant constraints.Technical tests matched to the failure mechanism.
Verify performanceMeasure the delivered outcome and remaining exposure.A predeclared verification record.
Authorize and communicateRecord who can declare the relevant return condition.Clear status, limitations and notification.
Follow upMonitor persistent effects and resolve causal and monitoring gaps.A review record and tracked corrective actions.

Section readings [E05; E14; E22]

PART VII

Restoration and recovery architecture

SECTION 22

Recovery provider capability

Assess providers and teams against specific tasks, operating conditions and local professional requirements. Equipment ownership or a training certificate does not establish deployable capability without current competence, staffing, maintenance and safe access. For contracted shelter or transport, verify accessibility and the ability to sustain service under hazard conditions. Identify conflicts of interest in self-reported readiness and require proportionate independent checks. These educational criteria do not imply c-ECO endorsement, response accreditation or authorization to practice. The goal is an evidence-based distinction between a prospective resource and an option that can actually protect people in time. [E07] [E13] [E16]

Capability assessment must be specific to the task, place and stress conditions. A training certificate cannot demonstrate that a team can mobilize and deliver the required function. Inspect competence, safety, compatibility, relevant experience and actual availability. Define the verification method and limits of recognition. This teaching library does not establish a c-ECO provider certification scheme or substitute for professional or regulatory requirements.

Case-analysis method
CapabilityVerification
Technical capabilityEvidence relevant to the specific task, process and failure mechanism.
MobilizationA demonstrated route, team, equipment and useful arrival time.
CompatibilityProof that resources can work with the installation, data and local constraints.
Safety and responsibilitiesRelevant professional duties, safe work and accountable supervision.
VerificationPerformance tests, records and independent review proportionate to the task.
ContinuitySubstitutes and supplies under simultaneous demand or extended interruption.

Section readings [E07; E13; E16]

SECTION 23

Recovery sequencing and time constraints

Sequence response and recovery through functional prerequisites. Warning may need to precede assisted movement; route verification and receiving acceptance may be necessary before dispatch; water and sanitation may be required before shelter occupation. Some tasks can proceed in parallel, while others compete for transport or specialist personnel. Document conditions for switching strategies when the original route or destination fails. Re-entry and demobilization require explicit checks and follow-up rather than calendar-based assumptions. A completed command milestone is not equivalent to resolved household need, particularly when vulnerable residents have moved outside the incident area. [E15] [E16] [E22]

A recovery time objective is a decision criterion to test against real capacity. Distinguish mobilization, work, verification and decision time, and identify dependencies between tasks. Shared resources can prevent apparently parallel activities from proceeding together. Repeating the sequence with unavailable access, a specialist or a verification service reveals where a target relies on an untested assumption.

Case-analysis method
Sequencing itemCase requirement
Task and functionDefine the outcome, prerequisites and critical users.
Time componentsSeparate mobilization, execution, verification and decision time.
Shared resourcesIdentify people, equipment, access and systems needed by more than one task.
Parallel workDemonstrate that tasks can proceed together without competing for the same bottleneck.
Completion conditionSpecify the observation that permits the next task or return of the function.
SensitivityRepeat with unavailable resources or longer lead times to expose the critical path.

Section readings [E15; E16; E22]

SECTION 24

Equipment, inputs and replenishment

An emergency inventory should identify capability, location, condition, staffing, operating limits, activation time and shared exposure. Shelter capacity must reflect usable places with services; communication redundancy must survive common power and network failures; vehicles must match mobility and medical needs. Keep verification dates and update after deployments. Avoid double counting the same regional asset in several simultaneous plans. Exercises should test whether the recorded resource can be activated through the documented route. The register is a living operational hypothesis, and discrepancies should generate corrections rather than be hidden to preserve an appearance of readiness. [E07] [E13] [E22]

Inventory analysis connects each item to a protected function. Use condition, compatibility, accessibility and consumption under stress rather than a nominal stock count alone. Replenishment time must include procurement, transport, installation and verification where relevant. A substitute that depends on the same supplier or platform may disappear in the same event. Keep the last inspection date and the evidence supporting usable availability.

Case-analysis method
Inventory fieldVerification
SpecificationIdentity, quantity, condition, compatibility and installation requirements.
AvailabilityLocation, access rights, expiry where relevant and verification date.
Stress consumptionUseful stock under the conditions studied, including losses and surge demand.
ReplenishmentSupplier, lead time, transport constraints and alternatives.
Common dependenceOther stocks or substitutes that share a supplier, access route, platform or energy source.
TestEvidence from inspection, deployment or a representative mobilization exercise.

Section readings [E07; E13; E22]

SECTION 25

Mutual aid and cooperation arrangements

Mutual aid is useful when requests, resource definitions, mobilization, supervision and reimbursement are clear enough to operate under pressure. Examine whether the provider is independent of the same hazard and whether arrival precedes the protective deadline. Interagency exercises can reveal incompatible terminology, missing contacts or different assumptions about authority. Informal trust can support coordination but should not replace durable arrangements and succession planning. Document actual exercise performance and unresolved issues. A memorandum or list of willing organizations is a prospective relationship, not evidence that staffed equipment will arrive when required. [E03] [E09] [E10]

Cooperation contributes to recovery when its scope, activation, resources and practical availability are demonstrated. Record who requests support, who authorizes it, the useful arrival time, responsibility for the work and conditions of return. Consider simultaneous demand across participants. A reference to an organization or network in the literature does not imply that c-ECO or a case partner has joined it or secured a deployment commitment.

Case-analysis method
Agreement elementQuestion
ActivationWho can request and authorize support, and on what documented basis?
ResourceWhat can actually be supplied, at what capacity and for how long?
DeliveryWhich access, transport, compatibility, information and safety conditions apply?
SimultaneityWhat happens when several participants need the resource at the same time?
ResponsibilityWhich actor controls the task and its records, verification and constraints?
ReviewHow are performance, remaining gaps and revised arrangements recorded?

Section readings [E03; E09; E10]

PART VIII

Research and source library

SECTION 26

Source classification and evidence quality

Classify emergency evidence by what it observes and how it was verified. A forecast, a dispatch log, a field report, a household account and a simulation each have a legitimate but different role. Separate source category from validation status and confidence in a causal explanation. Time and location are essential because apparently contradictory reports may describe different stages or areas. Preserve corrections and link decisions to the evidence version available at the time. This structure supports learning without pretending that all observations can be reduced to one automatically authoritative operational picture. [E01] [E11] [E20]

Source classes organize origin and function; they do not form an automatic hierarchy of evidential strength. An official statistic, an operational record and a causal study answer different questions. Classify the product, not only the organization. Detect shared data origins so that a dashboard, article and secondary report based on one observation are not counted as three independent confirmations.

Case-analysis method
Source classContributionQuality criterion
A · Institutional / officialOfficial statistics, instruments, technical guidance and investigation records.Mandate, method, version, scope and actual applicability.
B · Operational / technicalMeasurements, process records, assets, inventories and delivered performance.Traceability, coverage, quality controls and usable access.
C · Academic / independentResearch designs, mechanism studies, models and independent observations.Methods, inference, reproducibility and fit to the question.

Section readings [E01; E11; E20; C04; C05]

SECTION 27

Institutional, regulatory and technical sources

Public and intergovernmental sources provide hazard observations, doctrine, technical guidance and after-action investigations. Their intended use and jurisdiction must remain visible. A national framework helps compare organizational functions but cannot prove a local team is ready; a preliminary disaster report should not be treated as a final causal finding. Record publication and observation dates separately. Use international warning guidance to test the completeness of a local chain from knowledge to action, then seek direct operational and community evidence for the actual case. This prevents institutional reference lists from substituting for demonstrated protective capability. [E13] [E19] [E21]

Institutional sources should be selected by product, method and scale. Record whether the source defines a requirement, observes a condition, reports an investigation or synthesizes a literature. A current portal may contain several editions and methods; cite the actual version used. Public access does not establish accuracy for a different question, and a restricted source can still be used only under its authorized conditions.

Institutional and technical source register
IDProduct / documentWhy it matters
[E13]National Incident Management System, Third EditionUS-specific common incident-management framework; not a universal legal mandate.
[E14]Sendai Framework for Disaster Risk Reduction 2015–2030Risk governance, preparedness and recovery priorities.
[E15]A Case Study of the Camp Fire: Notification, Evacuation, Traffic, and Temporary Refuge Areas (NETTRA)Primary reconstruction of time-dependent life-safety conditions.
[E16]WUI Fire Evacuation and Sheltering Considerations: Assessment, Planning, and Execution (ESCAPE)Evacuation-planning methodology derived from case evidence; consult landing page for revisions.
[E17]Phase 2 ReportBuilding-safety institutions, response and accountability; separate investigation findings from recommendations.
[E18]The Federal Response to Hurricane Katrina: Lessons LearnedPrimary federal after-action perspective on coordination and response.
[E19]Great East Japan earthquake: preliminary observationsDated early observations, not a substitute for later detailed investigation.
[E20]Communicating risk in public health emergencies: a WHO guideline for emergency risk communication policy and practiceEvidence-informed emergency risk communication and community engagement.
[E21]Overview of the Early Warnings for All: Executive Action Plan 2023–2027Four linked functions of an end-to-end warning system.
[E22]Community Resilience Planning Guide for Buildings and Infrastructure Systems, Volume ICommunity functions, infrastructure dependencies and recovery goals.
[E23]Contact of Containership Dali with Francis Scott Key Bridge and Subsequent Bridge CollapseFinal investigation includes emergency communication and shoreside-response recommendations.

Section readings [E13; E19; E21]

SECTION 28

Operational observations and monitoring products

Operational records include calls, dispatch events, vehicle movement, radio messages, resource requests, shelter registration and task completion. Their interpretation depends on definitions and coverage. A request closed in software may mean reassignment rather than protection, and a quiet call queue may reflect network failure rather than low need. Reconcile records with field and recipient evidence. Protect identities and sensitive locations in public learning products while retaining an appropriate review trail. The useful question is what happened to the person or function requiring protection, not merely whether an agency’s internal workflow advanced. [E01] [E03] [E15]

Operational observations should show what the system delivered, not merely that an asset was declared available. Inspect the acquisition process, sensor or reporting changes, gaps, coverage and quality controls. Compare records with independent observations where feasible. Aggregated performance, a status dashboard and user experience can diverge because they concern different units, locations, periods or definitions of availability.

Observation products to obtain for the case
ObservationUnitInterpretationProvenance record
Effective warning lead timeminutes or hoursCompare receipt and actionable understanding with hazard arrivalRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Detection-to-authorization delayminutesRecord observation, verification and decision timestampsRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Warning receipt coverage% exposed populationUse sampled confirmation and inaccessible-group analysisRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Warning comprehension% tested recipientsAssess understood action and timing, not message recall aloneRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Ability-to-act coverage% exposed householdsDocument transport, care, mobility and destination barriersRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Dispatch queueunassigned incidentsStratify urgency and duplicate reportsRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Call-answer delaysecondsUse tail measures and abandoned calls as well as medianRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Mobilization timeminutesSeparate crew notification, readiness and departureRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Travel time to priority incidentsminutesUse hazard-specific route availabilityRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Task completion timeminutes or hoursDefine actual protective outcome and event severityRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Qualified crew availabilityperson-hours by capabilityInclude shifts, fatigue, access and competing assignmentsRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Equipment operational readiness% tested assetsRequire crew, fuel, maintenance and suitable conditionsRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.

Section readings [E01; E03; E15]

SECTION 29

Academic research and independent evidence

Academic and community evidence provides complementary insight into perception, trust, adaptive capacity and organizational networks. A household study can explain barriers to action, while a logistics model can test allocation under constraints. Neither alone captures every operational detail. Assess sampling, context, measured outcomes and transferability before importing a conclusion. Community accounts may reveal unmet needs absent from formal logs, and they require respectful verification rather than automatic dismissal. A strong reading list connects each source to a concrete analytical task and states where additional local evidence is still necessary. [E02] [E04] [E08] [E12]

Read the research design before transferring a conclusion. Identify the question, unit of analysis, method, comparison, result, limitations and conditions that matter for the case. Foundational concepts, empirical studies, critical replications and technical syntheses serve different functions. A literature-supported mechanism may justify a hypothesis without validating a local threshold, forecasting performance or a complete TFP application.

Academic reading map: mechanisms and methods
IDResearch workContribution and limit
[E01]Crisis Management in Hindsight: Cognition, Communication, Coordination, and ControlSensemaking and organizational coordination under uncertainty.
[E02]The Protective Action Decision Model: Theoretical Modifications and Additional EvidenceWarning reception, interpretation and protective-action decisions.
[E03]Interagency Communication Networks During Emergencies: Boundary Spanners in Multiagency CoordinationNetwork relationships and boundary-spanning coordination.
[E04]Community Resilience as a Metaphor, Theory, Set of Capacities, and Strategy for Disaster ReadinessAdaptive capacities and community resources for preparedness.
[E05]A place-based model for understanding community resilience to natural disastersLocal resilience dimensions and context-dependent comparison.
[E06]Social Vulnerability to Environmental HazardsSocial vulnerability and interpretation of aggregate indices.
[E07]Humanitarian aid logistics: supply chain management in high gearPreparedness, logistics capabilities and humanitarian-operational constraints.
[E08]OR/MS research in disaster operations managementOperations-research problems across the disaster cycle.
[E09]Collaborative Decision-Making in Emergency and Disaster ManagementCollaborative decisions and the need to examine trust and organizational differences.
[E10]Public–Nonprofit Partnerships for Collective Action in Dynamic Contexts of EmergenciesRelationships among public and nonprofit organizations in evolving response networks.
[E11]Understanding Compound, Interconnected, Interacting, and Cascading Risks: A Holistic FrameworkDistinctions among linked-risk mechanisms and cascading consequences.
[E12]Households’ Perceived Personal Risk and Responses in a Multihazard EnvironmentRisk perception, household circumstances and protective behavior.
[C01]Identifying, understanding, and analyzing critical infrastructure interdependenciesDistinguishes physical, cyber, geographic and logical dependencies; use the categories to formulate a case-specific dependency hypothesis.
[C03]Variance based sensitivity analysis of model output. Design and estimator for the total sensitivity indexMethodological reference for sensitivity analysis; assumptions about independence and the model structure must accompany the chosen estimator.
[C04]The FAIR Guiding Principles for scientific data management and stewardshipGuides metadata and reuse. Accessible data may still have legitimate authorization and protection requirements.
[C07]A general framework for analyzing sustainability of social-ecological systemsSupports a structured inquiry into actors, resources, institutions and interactions; institutional interpretation must be adapted to the system studied.

Section readings [E02; E04; E08; E12]

PART IX

Evidence matrices and historical intelligence

SECTION 30

Source–variable correspondence

The source-to-variable matrix should connect each indicator to observable events and transformations. Effective warning lead time needs receipt and hazard-arrival estimates; evacuation feasibility needs preparation, assistance, movement and route conditions; usable shelter requires service and staffing evidence. Record time zone, clock synchronization, spatial coverage and missingness. Distinguish a message being transmitted from its receipt and actionable understanding. Retain raw event data and the definition of completion so reviewers can see whether improved performance reflects real protection, a changed denominator or merely a revised administrative category. [E02] [E15] [E21]

The source–variable matrix exposes the path from an observation to an analytical representation. Preserve the raw unit, time, location, method, transformation and uncertainty. Multiple derived variables may share one observation and therefore share its limitations. Record the code or reproducible procedure, authorized access and version. A score should remain inspectable through its originating evidence rather than replacing that evidence.

Source–variable design matrix
ObservationUnitSource requirementCandidate analytical questionTransformation and limit
Effective warning lead timeminutes or hoursCompare receipt and actionable understanding with hazard arrivalP / stateVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Detection-to-authorization delayminutesRecord observation, verification and decision timestampsP and ΔV / trajectoryVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Warning receipt coverage% exposed populationUse sampled confirmation and inaccessible-group analysisσ / evidence qualityVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Warning comprehension% tested recipientsAssess understood action and timing, not message recall aloneLr / usable resourcesVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Ability-to-act coverage% exposed householdsDocument transport, care, mobility and destination barriersP / stateVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Dispatch queueunassigned incidentsStratify urgency and duplicate reportsP and ΔV / trajectoryVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Call-answer delaysecondsUse tail measures and abandoned calls as well as medianσ / evidence qualityVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Mobilization timeminutesSeparate crew notification, readiness and departureLr / usable resourcesVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Travel time to priority incidentsminutesUse hazard-specific route availabilityP / stateVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Task completion timeminutes or hoursDefine actual protective outcome and event severityP and ΔV / trajectoryVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Qualified crew availabilityperson-hours by capabilityInclude shifts, fatigue, access and competing assignmentsσ / evidence qualityVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Equipment operational readiness% tested assetsRequire crew, fuel, maintenance and suitable conditionsLr / usable resourcesVerify whether the observation supports this analytical use; preserve the raw record and transformation.

Section readings [E02; E15; E21; C04; C05]

SECTION 31

Source–risk correspondence

A source-to-risk matrix tests the complete protective pathway. Accurate hazard detection does not establish warning reach; warning reach does not establish ability to move; transport availability does not establish a safe destination. For each risk, identify the evidence needed to support these links and record gaps as investigation tasks. This prevents a technically sophisticated subsystem from being mistaken for an effective end-to-end service. Compare alternative explanations for apparent failure, including inaccessible advice or missing assistance, before attributing outcomes to public behavior or one agency’s performance. [E02] [E16] [E20] [E21]

A source–risk matrix should cover the threat, the observed state, the mechanism and the consequences separately. Evidence that an event occurred does not alone show why a function failed or who was affected. Use a chronology and alternative explanations to test the chain. A citation becomes useful when the specific part of the claim it supports and its limits are visible.

Source–risk evidence matrix
RiskProposed mechanismEvidence chainInvestigation requirement
Warning not receivedThe protective message does not reach exposed peopleThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Warning not understoodLanguage, format or content prevents actionable interpretationThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Warning-action mismatchRecommended action cannot be completed before hazard arrivalThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Late detectionHazard observation arrives after feasible protective options narrowThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Dispatch overloadIncoming requests exceed triage and allocation capacityThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Communications outageResponders or residents lose essential information channelsThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Incompatible agency systemsOrganizations cannot exchange operationally useful informationThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Unclear decision authorityAction stalls while responsibility is disputedThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Single access routeHazard blocks simultaneous evacuation and responder entryThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Evacuation congestionMovement demand exceeds safe time-dependent capacityThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.

Section readings [E02; E16; E20; E21]

SECTION 32

Monitoring gaps and research priorities

Monitoring gaps are often concentrated among people least able to use standard channels: isolated residents, temporary visitors, people with disabilities, language minorities and households displaced beyond the area. Design proportionate, consent-based methods to identify needs and confirm protection. Avoid exposing personal vulnerability data in public dashboards. Missing records should trigger a bias assessment rather than be interpreted as zero demand. The gap register should identify which decision is affected, the likely direction of error and a feasible verification route, including trusted community organizations and receiving-area services where appropriate. [E04] [E06] [E20]

Prioritize a gap by its consequence for the decision. The next observation may be a targeted measurement, an independent comparison, a capability test or a correction of incompatible definitions. More data of the same kind may not resolve structural uncertainty. Specify the question, required observation, responsible custodian, time of collection and condition under which the gap is considered sufficiently addressed.

Case-analysis method
Monitoring gapDecision consequenceInvestigation
Spatial coverageExposed locations, groups or assets are not represented.Targeted observations matched to exposure.
Temporal resolutionA change occurs faster than the collection interval.A sampling interval fitted to the process and useful decision time.
Missing periodA critical part of the trajectory is absent.Independent backup and transparent missing-data handling.
Changing methodA sensor, reference or reporting practice changes.Overlap, comparison and version metadata.
Unmeasured mechanismImportant inputs or consequences are not observed.A mechanism-specific investigation and appropriate measurement.
Unverified resourcesA listed capacity has not been mobilized.Inspection and a representative deployment test.
Incompatible definitionsDatasets describe different populations, units or conditions.A documented harmonization and retained original values.
Access restrictionEvidence cannot be inspected or reused under current conditions.An authorized access and review arrangement.
Unequal representationSome users or effects disappear in aggregates.Disaggregated observation and a suitable participatory protocol.
Post-event follow-upReturn of service masks persistent effects.A monitoring period appropriate to the mechanism and affected function.

Section readings [E04; E06; E20; C03]

SECTION 33

Dependency matrix and propagation tests

The dependency matrix should show how emergency protection relies on communications, power, transport, water, health, logistics and housing. For each connection, specify minimum function, tolerance time, available substitute and common-mode exposure. A shelter may appear independent while sharing the same flooded substation and access road as the evacuated district. Conversely, a modest local resource can be critical when no alternative reaches the population in time. Analyze these relationships dynamically and include the burden placed on receiving communities so that a successful evacuation does not conceal a subsequent failure of essential support. [E07] [E11] [E22]

Demand surges and access loss can occur together. A flood or wildfire can increase requests while reducing passable roads, available crews and communications. Average response times under normal conditions therefore provide incomplete evidence of emergency capacity. [E11] [E15]

Evacuation is a time-dependent network problem involving warning delay, departure preparation, traffic demand, route degradation and safe destinations. Nominal road connectivity does not establish feasibility once fire, flood or structural failure changes the network. [E15] [E16]

Community organizations and informal networks contribute information, transport, care and trust. Their resources can complement formal response, but plans should not assume unlimited volunteer labor or transfer professional hazards to untrained people. [E04] [E10]

A dependency matrix should be directional and time-specific. Record the supplying function, receiving function, mechanism, useful delay, substitute and evidence. Test the destination when the origin becomes unavailable for different periods. Then remove a common prerequisite of the substitute. The resulting structure describes the case; it does not establish all connections in a global architecture or validate an edge weight.

Dependency matrix for case testing
DependencyMechanism and directionVerification or TFP inquiry
Digital communicationsWarnings, dispatch and coordination require usable channelsTest outages and common power exposure
EnergyVehicles, radios, shelters and medical equipment require fuel or powerRecord load-tested autonomy and resupply
TransportAccess determines feasible rescue and evacuationUse dynamic route conditions
Water and sanitationShelters and medical facilities require safe servicesVerify occupancy-specific continuity
HealthReceiving care constrains rescue and evacuation decisionsConfirm acceptance and specialist capacity
LogisticsSupplies must remain usable and arrive before need becomes harmTrack recipient outcomes
UrbanizationBuilding layout and occupancy shape exposure and egressLink plans to actual residents and accessibility
GovernanceMandates and accountability determine decisionsMap lawful authority and review routes
FinanceActivation and reimbursement affect deployable resourcesDocument arrangements without assuming commitments
Community institutionsTrust and local knowledge support protectionInclude feedback and avoid assuming unlimited volunteer capacity

For each relationship, add the measured delay, duration of tolerable interruption, substitute and observation supporting the directed edge. Repeat the test for short, intermediate and extended unavailability. A generic list of linked sectors is not an estimated network, and no edge weight is validated by inclusion in this table.

Section readings [E07; E11; E22; C01; C02]

SECTION 34

Documented cases, near misses and recovery

Historical comparison should preserve the distinct mechanisms of each case. The Camp Fire supports analysis of time-dependent notification and movement; Grenfell requires scrutiny of building-safety assumptions and institutional accountability; Katrina illuminates interacting service and coordination failures; Japan’s disaster demonstrates multi-hazard scale and lifeline dependencies. The Dali investigation highlights immediately usable emergency contacts and shoreside action. These cases do not provide universal response thresholds. Ask learners what evidence supports transferring a lesson, which local conditions differ, and how a proposed improvement would be tested before being represented as effective. [E15] [E17] [E18] [E19] [E23]

Historical analysis distinguishes observed loss, protective response, near miss and recovery. Several records can concern one event without becoming independent events. Preserve what the source actually investigated and avoid adding unsupported casualty, cost or restoration-time estimates. Compare cases by mechanism and evidence quality; the fact that one response was associated with an outcome does not alone establish a general causal effect.

Documented cases and comparative learning
Case / periodDocumented mechanism or study objectLearning and transfer questionSource
Camp Fire, California, 2018; NIST 2023Fire progression, notification, traffic and temporary refuge interacted under compressed timelinesCompare action duration with dynamic route loss; do not assume a warning alone guarantees safe movement[E15]
Grenfell Tower, London, 2017; inquiry 2024Building-safety governance and emergency arrangements require lifecycle analysisExamine how assumptions about building behavior shape protective instructions and revision decisions[E17]
Hurricane Katrina, 2005; federal review 2006Large-scale need, lifeline failure and coordination gaps exceeded planned response arrangementsTest assistance, communications and multiagency decision pathways under degraded conditions[E18]
Great East Japan earthquake and tsunami, 2011Multiple hazards and infrastructure failures created geographically distributed protective demandsExamine warning, evacuation and service dependencies while distinguishing preliminary from later evidence[E19]
Dali and Francis Scott Key Bridge, 2024; NTSB final 2025An unfolding maritime emergency required rapid contact with shoreside actorsAssess immediately usable contacts and the time needed to execute protective closure actions[E23]
West Africa Ebola communication lessons, 2014–2015; WHO guideline 2017Public-health emergencies exposed gaps in trusted and actionable risk communicationIntegrate community feedback, uncertainty and practical protective options into operational planning[E20]

Section readings [E15; E17; E18; E19; E23]

SECTION 35

Integrated review, transfer and learning portfolio

The final synthesis should connect a protective objective to evidence, remaining time, authorized action and follow-up. Integrate prevention and response: safer buildings, reliable lifelines and accessible communication can reduce the demand placed on rescue. Include a correction pathway and monitoring after transition so unresolved needs remain visible. The case deliverable should demonstrate reasoned decisions and the ability to revise them, with attention to people who face the greatest barriers. Educational completion remains separate from professional authorization, c-ECO credentialing, project admission, data contribution and licensing, each of which requires its own applicable process. [E01] [E14] [E22]

The integrated portfolio should allow a reviewer to move from the question to observations, transformations, mechanism tests, scenarios and proposed monitoring. Make the strongest competing explanation and the most consequential unresolved gap visible. Transfer requires checking mechanisms, exposure and recovery resources in the new setting. Formation, optional credentialing, submission permission and licensing remain distinct processes; no case or data contribution enters the SIL without an associated fellow and applicable review.

Case-analysis method
Review stepEvidence requirement
SpecifyState the function, claim, exposed group, location and period.
TraceIdentify original observations, shared origins and transformations.
HarmonizeCompare units, reference systems, sampling and versions.
ChallengeTest alternative explanations and seek counter-evidence.
Evaluate uncertaintyIdentify which assumptions change the conclusion or recommended action.
Test transferCheck equivalence of mechanisms, exposure and recovery resources in another setting.
Record and updatePreserve reasons, limits, responsibility and the next review condition.

Section readings [E01; E14; E22; C04; C05]

RESEARCH AND READING PATHS

Annotated scientific and technical bibliography

The section citations connect domain mechanisms, methods and cases to the underlying sources. Read each reference for its question, design, findings and limits. Technical guides, case investigations and scholarly articles do not provide interchangeable forms of evidence.

  1. E01 · Peer-reviewed research

    Comfort, L.K. (2007). Crisis Management in Hindsight: Cognition, Communication, Coordination, and Control. Public Administration Review 67, 189–197.

    Original publication / source ↗

    Sensemaking and organizational coordination under uncertainty.

  2. E02 · Peer-reviewed research

    Lindell, M.K.; Perry, R.W. (2012). The Protective Action Decision Model: Theoretical Modifications and Additional Evidence. Risk Analysis 32, 616–632.

    Original publication / source ↗

    Warning reception, interpretation and protective-action decisions.

  3. E03 · Peer-reviewed research

    Kapucu, N. (2006). Interagency Communication Networks During Emergencies: Boundary Spanners in Multiagency Coordination. American Review of Public Administration 36, 207–225.

    Original publication / source ↗

    Network relationships and boundary-spanning coordination.

  4. E04 · Peer-reviewed research

    Norris, F.H.; Stevens, S.P.; Pfefferbaum, B.; Wyche, K.F.; Pfefferbaum, R.L. (2008). Community Resilience as a Metaphor, Theory, Set of Capacities, and Strategy for Disaster Readiness. American Journal of Community Psychology 41, 127–150.

    Original publication / source ↗

    Adaptive capacities and community resources for preparedness.

  5. E05 · Peer-reviewed research

    Cutter, S.L. et al. (2008). A place-based model for understanding community resilience to natural disasters. Global Environmental Change 18, 598–606.

    Original publication / source ↗

    Local resilience dimensions and context-dependent comparison.

  6. E06 · Peer-reviewed research

    Cutter, S.L.; Boruff, B.J.; Shirley, W.L. (2003). Social Vulnerability to Environmental Hazards. Social Science Quarterly 84, 242–261.

    Original publication / source ↗

    Social vulnerability and interpretation of aggregate indices.

  7. E07 · Peer-reviewed research

    Van Wassenhove, L.N. (2006). Humanitarian aid logistics: supply chain management in high gear. Journal of the Operational Research Society 57, 475–489.

    Original publication / source ↗

    Preparedness, logistics capabilities and humanitarian-operational constraints.

  8. E08 · Peer-reviewed research

    Altay, N.; Green, W.G. III (2006). OR/MS research in disaster operations management. European Journal of Operational Research 175, 475–493.

    Original publication / source ↗

    Operations-research problems across the disaster cycle.

  9. E09 · Peer-reviewed research

    Kapucu, N.; Garayev, V. (2011). Collaborative Decision-Making in Emergency and Disaster Management. International Journal of Public Administration 34, 366–375.

    Original publication / source ↗

    Collaborative decisions and the need to examine trust and organizational differences.

  10. E10 · Peer-reviewed research

    Kapucu, N. (2006). Public–Nonprofit Partnerships for Collective Action in Dynamic Contexts of Emergencies. Public Administration 84, 205–220.

    Original publication / source ↗

    Relationships among public and nonprofit organizations in evolving response networks.

  11. E11 · Peer-reviewed research

    Pescaroli, G.; Alexander, D. (2018). Understanding Compound, Interconnected, Interacting, and Cascading Risks: A Holistic Framework. Risk Analysis 38, 2245–2257.

    Original publication / source ↗

    Distinctions among linked-risk mechanisms and cascading consequences.

  12. E12 · Peer-reviewed research

    Lindell, M.K.; Hwang, S.N. (2008). Households’ Perceived Personal Risk and Responses in a Multihazard Environment. Risk Analysis 28, 539–556.

    Original publication / source ↗

    Risk perception, household circumstances and protective behavior.

  13. E13 · Official doctrine

    FEMA (2017). National Incident Management System, Third Edition. US emergency-management doctrine.

    Original publication / source ↗

    US-specific common incident-management framework; not a universal legal mandate.

  14. E14 · International policy instrument

    UNDRR (2015). Sendai Framework for Disaster Risk Reduction 2015–2030. United Nations.

    Original publication / source ↗

    Risk governance, preparedness and recovery priorities.

  15. E15 · Official investigation

    NIST (2023). A Case Study of the Camp Fire: Notification, Evacuation, Traffic, and Temporary Refuge Areas (NETTRA). NIST TN 2252.

    Original publication / source ↗

    Primary reconstruction of time-dependent life-safety conditions.

  16. E16 · Official technical guidance

    NIST (2023). WUI Fire Evacuation and Sheltering Considerations: Assessment, Planning, and Execution (ESCAPE). NIST TN 2262.

    Original publication / source ↗

    Evacuation-planning methodology derived from case evidence; consult landing page for revisions.

  17. E17 · Official inquiry

    Grenfell Tower Inquiry (2024). Phase 2 Report. UK public inquiry.

    Original publication / source ↗

    Building-safety institutions, response and accountability; separate investigation findings from recommendations.

  18. E18 · Official after-action report

    Executive Office of the President (2006). The Federal Response to Hurricane Katrina: Lessons Learned. US government report.

    Original publication / source ↗

    Primary federal after-action perspective on coordination and response.

  19. E19 · Official case resource

    UNDRR (2011). Great East Japan earthquake: preliminary observations. Disaster risk reduction report.

    Original publication / source ↗

    Dated early observations, not a substitute for later detailed investigation.

  20. E20 · Official evidence-based guidance

    WHO (2017). Communicating risk in public health emergencies: a WHO guideline for emergency risk communication policy and practice. WHO guideline; ISBN 9789241550208.

    Original publication / source ↗

    Evidence-informed emergency risk communication and community engagement.

  21. E21 · Official technical framework

    WMO (2023). Overview of the Early Warnings for All: Executive Action Plan 2023–2027. WMO Bulletin 72(1).

    Original publication / source ↗

    Four linked functions of an end-to-end warning system.

  22. E22 · Official technical guidance

    NIST (2015). Community Resilience Planning Guide for Buildings and Infrastructure Systems, Volume I. NIST SP 1190v1.

    Original publication / source ↗

    Community functions, infrastructure dependencies and recovery goals.

  23. E23 · Official investigation

    NTSB (2025). Contact of Containership Dali with Francis Scott Key Bridge and Subsequent Bridge Collapse. Marine Investigation Report MIR-25-40.

    Original publication / source ↗

    Final investigation includes emergency communication and shoreside-response recommendations.

  24. C01 · peer-reviewed

    Rinaldi, S. M.; Peerenboom, J. P.; Kelly, T. K. (2001). Identifying, understanding, and analyzing critical infrastructure interdependencies. IEEE Control Systems Magazine, 21(6), 11–25.

    Original publication / source ↗

    Distinguishes physical, cyber, geographic and logical dependencies; use the categories to formulate a case-specific dependency hypothesis.

  25. C03 · peer-reviewed

    Saltelli, A. et al. (2010). Variance based sensitivity analysis of model output. Design and estimator for the total sensitivity index. Computer Physics Communications, 181, 259–270.

    Original publication / source ↗

    Methodological reference for sensitivity analysis; assumptions about independence and the model structure must accompany the chosen estimator.

  26. C04 · peer-reviewed

    Wilkinson, M. D. et al. (2016). The FAIR Guiding Principles for scientific data management and stewardship. Scientific Data, 3, 160018.

    Original publication / source ↗

    Guides metadata and reuse. Accessible data may still have legitimate authorization and protection requirements.

  27. C05 · standard

    W3C (2013). PROV-DM: The PROV Data Model. W3C Recommendation, 30 April 2013.

    Original publication / source ↗

    Represents provenance through entities, activities and agents; useful for connecting a result to its transformations and responsible contributors.

  28. C06 · technical guide

    JCGM (2008). Evaluation of measurement data — Supplement 1 to the GUM — Propagation of distributions using a Monte Carlo method. JCGM 101:2008.

    Original publication / source ↗

    A methodological basis for propagating input distributions through a specified model, rather than treating simulated frequency as an observed event probability.

  29. C07 · peer-reviewed

    Ostrom, E. (2009). A general framework for analyzing sustainability of social-ecological systems. Science, 325, 419–422.

    Original publication / source ↗

    Supports a structured inquiry into actors, resources, institutions and interactions; institutional interpretation must be adapted to the system studied.

External sources are cited for research and learning. Their inclusion implies no partnership, certification or institutional endorsement.