Smart Cities: how implement the resilience concept

1. Carmelo DI MAURO RGS Srl – Risk Governance Solutions Smart Cities: how implement the resilience concept Workshop European Secure and Safe Smart Cities 2020 Ancillary Event - 10th ITS European Congress 16 – 19 June 2014, Helsinki Finland

2. It is quite difficult to define what is a Smart City. • At the moment the definition of ‘Smart’, vary enormously from a context according to emphasis or attention paid to the definition of strategies for the development of a smart city. • Smart City concept is shaped by a complex mix of technologies, social and economic factors, governance arrangements, and policy and business drivers. (European Parliament, 2014)

3. Citizen perspective • The development of Smart City, in particular if it heavily based on ICTs, will enable to change the relationships between citizen and it will reshape the relationships between communities, government, private sectors, non-profit communities and citizens. • People will be more directly involved to support public services and infrastructure systems (e.g. transportation, energy, education, health and care, etc.) for example through so-called open data, living labs and tech hubs.

4. If from one side the development of a Smart City will link networks supporting and positively feeding off each other, from the other one such inter-dependency may be prone to failures that can be propagate through a number of systems and that may results in a more severe impact for the communities. • In other terms, a Smart City can develop more efficient services but at the same time can be more vulnerable due to complexity of interconnection of sophisticated infrastructure and services. • This implies the need to develop new approaches and strategies to cope with hazards and disasters.

5. Societal dependency and awareness • The effects of an infrastructure breakdown are mainly determined by the societal dependency on an uninterrupted supply/the level of preparedness. • Paradoxically, high levels of supply security lead to an unawareness of the population and thus an unpreparedness towards potential failures. • The resilience concept thereby offers the possibility to include societal aspects by taking into account the ability to absorb external shocks in a more holistic view.

6. Resilience • The extent to which the risk absorbing system has the capacity to cope with the stress induced by a risk agent (hazard) • Natural system • Technological system • Socio-economic system

7. What are the components of resilience?

8. What do we need? • To move from Protection to Resilience

9. Why? • We leave in a complex Society • We depend on complex systems • We depend on complex services

10. Why? • System are inter-dependent • We can not protect each asset

11. Why? • Critical Infrastructures disruptions are: Unexpected/Unpredictable Events Can propagate beyond the initial impact area Consequences are sometimes/often unknown

12. Why? • Protection/Security remains appropriate (Cost-Effective Mechanism)

13. Why? Requires collaboration among stakeholders potentially involved (other Authorities, Countries, operators, etc.)

14. Critical Infrastructure Resilience • To guarantee the functional continuity of he services provided by urban infrastructures in times of stress and disaster • To limit the extent of losses and impacts in the urban are if a disaster strikes • To ensure fast recovery if the infrastructure is severely damaged

15. How to make collaboration happen • Legal process vs Voluntary based process • How to define shared objectives • Delegation of responsibilities • What type of resources • What and how to share sensitive information • What type of collaborative process

16. Do we need to define new type of collaboration process? Source: D. Alexander

17. Main question Law can be an instrument and a regulative framework for increasing the collaboration? • Can trust be improve by law? • An effective collaborative approach can be developed on the basis of a regulation?

18. CI disruptions questions the efficiency of the classical Command & Control approach • Command and Control • Vertical Chain of Command and responsibility • Law enforcement • Secrecy • Collaborative process • Problem solving orientation • Openness PEOPLE Involved Not Involved

19. Who should collaborate • Who ? • Public authorities vs Private Companies • What are the motivations? • What are the similar/different goals? • What are the gaps?

20. Who should collaborate? “The measure of success for a PPP is the right people coming together to do the right things in the right way.” (ENISA, 2012) • Who • Public authorities vs Private Companies They may have conflicting views, e.g. business interests vs. public security • Important to understand the motivations (public concern, business concern for reputation, political advantage, etc.)

21. Public Goals Public policy for mitigation of natural and technological risks and the related resource allocation strategies have a simple objective: • Protect individuals and communities and reduce losses.

22. Private Companies Critical infrastructure systems are most often privately owned • They need: • to protect customers, • to improve company’ business, • to increase the competiveness • … but also… to increase the own coping capacity!

23. Win-Win situation Public Authorities Private Operators TRUST MUTUAL BENEFITS in mitigating damages and sharing resources RESPECT OF OWN COMPETENCIES SHARED RESPONSIBILITIES • Better understanding of own (inter) dependencies • Definition of common and standardized procedures to communicate with other operators and the Civil protection • Better business continuity management • Better Understanding of what can happen to regional interdependent CI systems; • Better emergency management benefit the population and the socio-economic system; • Optimize use of (limited!) resources

24. When to put in place a collaboration Do you have time to shake hands to introduce yourself during an emergency?

25. What kind of model?

27. Who could trigger and steer the process? Source: ENISA

28. Resilience Paradox • In order to collaborate, stakeholders have to know in advance that: • Prevention/Mitigation have limited power • Prevention/Mitigation require a lot of public resources (Tax Money) • ZERO-Risk situation does not exist If Stakeholders are not aware about these issues, they keep on demanding for more protection/security

29. We have to define what is CRITICAL

30. Let’s Brainstorming

31. How to build Resilience • Why do we need a collaboration (scope)? • When to put in place a collaboration? • Who should be involved ? • How to make the collaboration happen? • How to support the involvement of stakeholders?

32. Threat - Vulnerability Path Identification for Critical Infrastructures THREVI2 Project Compilation of a comprehensive and dynamic all-hazards catalogue for critical infrastructures

33. Hazard & Threat Ontology Modus and Modus Effects

34. 2013- MIRACLE (EU-CIPS Project) Multi-level Alignment of Regional Approaches to Critical Infrastructure Resilience by Learning from Experience Objective: MIRACLE aims at promoting and fostering the development of Regional Critical Infrastructure Protection and Resilience (CIP/R) strategies.

35. “The key to success is the development of trust”. And it takes time..... THANK YOU! Ing. Carmelo DI MAURO