Transportation Systems

Chapter 12
Risk, Resilience and Continuity Management

Post Graduate Programme in Materials Management
Transportation Systems   •   Post Graduate

Risk, Resilience and Continuity Management

Introduction and context

Transportation systems are exposed to disturbances that can interrupt flows of people, materials, information and capital. A port closure, cyberattack, flood, labour dispute, sanctions regime, bridge failure or shortage of vehicles may delay a single shipment, disrupt an entire corridor or trigger cascading effects across global supply networks. For materials managers, transportation risk is therefore not merely an operational inconvenience. It is a strategic issue involving service continuity, working capital, customer commitments, safety, reputation and organisational survival.

Risk management seeks to understand and control uncertain events before they cause unacceptable harm. Resilience concerns the capability of a transportation system to absorb disturbance, adapt while the disturbance is occurring and recover its intended level of performance. Continuity management translates these ideas into arrangements that keep critical activities functioning during disruption and restore normal operations afterwards.

The three concepts are related but distinct. Risk management is generally anticipatory; resilience includes both anticipation and adaptation; continuity management is action-oriented and focuses on maintaining or restoring priority services. A mature organisation integrates all three within enterprise risk management, supply-chain planning, security governance and emergency management.

Learning objectives

After studying this chapter, the learner should be able to:

  1. Classify disruption, geopolitical, climate, infrastructure, cyber and capacity risks in transportation.
  2. Distinguish hazards, vulnerabilities, exposure, consequences, risk, resilience and continuity.
  3. Quantify transportation risk using probability, loss, expected loss, scenario analysis and service metrics.
  4. Evaluate single points of failure, network redundancy and recovery capability.
  5. Design mitigation, contingency, redundancy and recovery strategies.
  6. Apply business-impact analysis, risk registers and continuity plans to a transportation case.
  7. Critically assess governance, ethical, regulatory and technological issues in resilience management.

1. A systems view of transportation risk

A transportation system is a socio-technical network. Its physical layer includes roads, railways, ports, airports, pipelines, vehicles, terminals, energy systems and communications infrastructure. Its organisational layer includes carriers, freight forwarders, shippers, customs authorities, infrastructure owners, emergency agencies and customers. Its information layer includes routing data, booking systems, tracking platforms, electronic documentation and operational technology.

A disturbance can propagate across layers. For example, a storm may close a port, interrupt electricity, damage telecommunications, delay vessels, create container imbalance and force manufacturers to stop production. The initial event is only one part of the risk. The final effect depends on exposure, vulnerability, preparedness and available alternatives.

Important distinctions are:

  • Hazard: A potentially damaging event or condition, such as flooding or malware.
  • Exposure: The assets, flows, people, contracts or processes located in the hazard’s area or affected by it.
  • Vulnerability: The degree to which exposed entities are susceptible to harm.
  • Consequence: The resulting effect, such as cost, delay, injury, environmental damage or lost sales.
  • Risk: The combination of the likelihood of an event and its consequences.
  • Control: A measure that reduces likelihood, consequence or both.
  • Residual risk: Risk remaining after controls are applied.
  • Disruption: An event that reduces or interrupts expected system performance.
  • Resilience: The capability to withstand, adapt to and recover from disruption.
  • Continuity: The ability to maintain priority products or services at an acceptable level during an incident.

Risk is not identical to uncertainty. Some events have estimated probabilities based on historical data; other events, such as a novel geopolitical escalation, have deep uncertainty and cannot be assigned reliable probabilities. In the latter case, scenario analysis, stress testing and robust decision-making are more appropriate than false numerical precision.

2. Major categories of transportation risk

2.1 Operational and disruption risk

Operational disruptions include vehicle breakdown, accidents, cargo damage, handling errors, strikes, congestion, customs holds, documentation failures and terminal equipment shortages. These risks are often frequent but individually moderate. Their cumulative effect can be substantial because repeated small delays reduce schedule reliability and increase inventory buffers.

2.2 Geopolitical and regulatory risk

Sanctions, export controls, tariffs, armed conflict, border closures, piracy, diplomatic disputes and changes in trade agreements may make a route unavailable or legally unusable. Geopolitical risk is difficult because it may alter both probability and consequence rapidly. A carrier may also refuse a booking even when a route remains physically open.

Managers must monitor country exposure, beneficial ownership, restricted-party requirements, dual-use goods rules, customs classifications and contractual force-majeure provisions. Compliance cannot be delegated entirely to a logistics provider: the consignor remains responsible for accurate product, party and destination information.

2.3 Climate and environmental risk

Floods, cyclones, drought, wildfire, extreme heat, landslides, sea-level rise and low river levels affect transport capacity and infrastructure. Climate risk has two dimensions:

  • Physical risk, arising from direct environmental impacts.
  • Transition risk, arising from policy, technology and market changes associated with decarbonisation.

A route that is reliable historically may become less reliable as climate patterns change. Historical averages should therefore be supplemented with forward-looking hazard maps, climate projections, infrastructure assessments and scenario analysis.

2.4 Infrastructure and asset risk

Ageing bridges, weak pavements, rail bottlenecks, inadequate port depth, power failures, poor drainage and insufficient maintenance can create chronic or sudden constraints. Infrastructure risk is often systemic: many users depend on the same asset, so substitution is limited. Critical infrastructure mapping should identify bridges, tunnels, terminals, intermodal interfaces, fuel depots, communication networks and electricity substations on priority routes.

2.5 Cyber and information risk

Transportation is increasingly dependent on information technology and operational technology. Threats include ransomware, credential theft, denial-of-service attacks, manipulation of tracking data, unauthorised access to terminal systems and compromise of connected vehicles. Cyber incidents may cause physical consequences, including unsafe movements or halted cargo handling.

Cyber resilience requires asset inventories, identity and access management, network segmentation, patching, secure backups, incident detection, supplier assurance and tested recovery procedures. Confidentiality is important, but availability and integrity are often decisive during transport operations.

2.6 Capacity and market risk

Capacity risk arises when demand exceeds available vehicles, containers, drivers, terminal slots, warehouse space, fuel or skilled labour. It is intensified by seasonal peaks, equipment imbalance, carrier consolidation and sudden demand changes. Capacity shortages raise prices and reduce flexibility at the same time.

Managers should distinguish nominal capacity from usable capacity. A carrier may have theoretical fleet capacity but lack drivers, permits, fuel, terminal appointments or equipment in the required location.

3. Risk identification and assessment

A defensible assessment begins with a defined scope. The organisation should specify the product flows, geography, time horizon, service commitments, critical customers and performance thresholds under review. A risk register then records the source, event, affected process, causes, existing controls, likelihood, consequence, owner, treatment and review date.

A useful causal structure is:

Source or hazard → disruptive event → operational effect → business consequence

For example:

Extreme rainfall → rail line closure → missed replenishment shipment → production stoppage and contractual penalty.

This structure prevents vague statements such as “weather risk” and supports targeted controls.

Qualitative assessment

A likelihood–consequence matrix is useful for initial prioritisation. However, categories must be defined. “High likelihood” may mean an event expected several times per year, while “high consequence” may mean a safety-critical event or a loss above a specified financial threshold. Different risk owners should use the same definitions.

Matrices are screening tools, not precise probability models. They can hide differences between frequent minor incidents and rare catastrophic events, and scores may reflect judgement rather than evidence. A risk rated medium by a matrix may still require urgent action if it threatens life, legal compliance or a strategic customer.

Quantitative assessment

For discrete events, expected loss can be estimated as:

EL = ∑(pᵢ × Lᵢ)

where pᵢ is the probability of scenario i, Lᵢ is its monetary loss, and the summation covers all scenarios. Probabilities must be mutually exclusive and collectively exhaustive for the assessed alternatives. Loss may include freight cost, inventory carrying cost, production interruption, penalties, emergency procurement, damage and lost contribution margin.

If a single event has probability p during a defined period and loss L, then EL = p × L. This is an expected value, not a prediction of the actual loss. It is useful for comparing alternatives but may understate catastrophic risk and non-financial effects.

For delay risk, expected delay may be expressed as:

E[D] = ∑(pᵢ × dᵢ)

where dᵢ is delay in hours or days under scenario i. The units of E[D] are the same as those of delay. If delay distributions are available, managers can also examine percentile performance, such as the 95th-percentile delay, rather than relying only on the average.

A simple annualised loss estimate for recurring incidents is:

ALE = f × I

where f is expected incident frequency per year and I is average loss per incident. This assumes that frequency and average impact are meaningful and reasonably stable. It should not be used uncritically for dependent, escalating or unprecedented events.

Worked example: route exposure

A firm ships high-value components on a route with three mutually exclusive annual scenarios:

ScenarioProbabilityLoss
Normal operation0.80$0
Major delay0.15$120,000
Route closure0.05$600,000

The expected annual loss is:

EL = (0.80 × 0) + (0.15 × 120,000) + (0.05 × 600,000)

EL = 18,000 + 30,000 = $48,000

The result supports comparison with mitigation costs. It does not imply that the company will lose exactly $48,000 each year. A route-diversification project costing $30,000 annually may be economically attractive if it reduces expected loss by more than $30,000 and does not create unacceptable safety, compliance or service problems.

4. Resilience architecture

Resilience is best understood as a set of capabilities rather than a single attribute. A transportation network may demonstrate resilience through:

  1. Anticipation: sensing threats and identifying weak points.
  2. Prevention: reducing the probability of failure.
  3. Absorption: continuing partial operation during disturbance.
  4. Adaptation: changing routes, modes, schedules or priorities.
  5. Recovery: restoring desired performance.
  6. Learning: improving the system from evidence and near misses.

A resilient network is not necessarily one with maximum redundancy everywhere. Redundancy is costly, and additional suppliers or routes can introduce coordination, quality and compliance risks. The objective is economically and socially justified resilience at critical points.

Vulnerability and single points of failure

A single point of failure is an element whose loss can interrupt a critical flow because no adequate substitute is available. Examples include one bridge serving an industrial district, one approved carrier for a dangerous good, one port handling a specialised product or one software platform controlling all bookings.

Network analysis should examine node criticality, link criticality, substitutability, time to substitute, capacity of alternatives and common-cause failures. Two apparently separate routes may share the same bridge, fuel supplier, terminal operator, cloud platform or regulatory border and therefore not be genuinely independent.

Redundancy strategies

  • Geographic redundancy: alternative ports, corridors and distribution centres.
  • Mode redundancy: combinations of road, rail, sea, air and inland waterway.
  • Supplier or carrier redundancy: qualified alternatives and framework agreements.
  • Capacity redundancy: reserved slots, safety stock, buffer vehicles or flexible labour.
  • Information redundancy: independent communications, offline records and recoverable data.
  • Design redundancy: modular packaging, standard equipment and interchangeable components.

Redundancy should be evaluated against switching time and qualification requirements. An unqualified alternative is not a practical contingency.

5. Continuity management and recovery planning

Continuity management converts risk knowledge into operational decisions. Its central tool is the business-impact analysis (BIA). A BIA identifies critical activities, dependencies, tolerable interruption, minimum service levels, resources and recovery priorities.

Important terms include:

  • Maximum tolerable period of disruption (MTPD): longest period an activity can be unavailable before unacceptable consequences arise.
  • Recovery time objective (RTO): target time to restore an activity after disruption.
  • Recovery point objective (RPO): maximum acceptable period of data loss, relevant to information systems.
  • Minimum business continuity objective (MBCO): minimum acceptable level of service during disruption.

An RTO should not exceed the MTPD. For example, if a production line can tolerate only 48 hours without a component, a transportation recovery plan targeting five days is not adequate. The plan may require pre-positioned inventory, an alternative carrier or redesign of the component.

A continuity plan normally includes:

  1. activation criteria and authority;
  2. contact lists and escalation paths;
  3. priority shipments and customers;
  4. alternative routes, modes and providers;
  5. inventory and equipment decisions;
  6. customs, security and regulatory procedures;
  7. communication templates;
  8. data, system and manual-workaround procedures;
  9. safety and environmental controls;
  10. recovery, demobilisation and lessons learned.

Plans should be tested through exercises. A paper plan that has never been rehearsed may fail because telephone numbers are obsolete, access rights are missing, suppliers are unavailable or decision authority is unclear.

6. Mitigation, contingency and recovery strategies

Prevention and mitigation

Preventive measures reduce likelihood or consequence before an event. Examples include preventive maintenance, weatherproofing, driver training, cargo security, cyber controls, route audits, supplier qualification and accurate documentation. Mitigation is often cheaper than emergency response, but its value may be invisible because the avoided incident does not occur.

Contingency response

Contingency measures are prepared alternatives activated when disruption occurs. They include pre-negotiated carrier capacity, alternate ports, cross-docking arrangements, emergency procurement, flexible delivery windows and controlled inventory allocation. Contingency decisions should specify who may activate them, under what conditions and within what budget.

Recovery

Recovery restores normal or redesigned operations. It may involve infrastructure repair, backlog clearance, equipment repositioning, claims management, customer prioritisation and investigation. Recovery should not simply reproduce the former vulnerability. The principle of “build back better” means using the event to improve design, controls and learning.

Inventory and capacity trade-offs

Buffer inventory can protect against transport uncertainty but ties up capital and may become obsolete. The required buffer depends on demand, replenishment lead time and variability. A simple reorder point is:

ROP = μL + zσL

where μL is mean demand during lead time, σL is the standard deviation of demand during lead time, and z is the standard normal service factor associated with the target cycle-service level. This formula assumes that demand during lead time is reasonably represented by a distribution for which the selected service factor is appropriate, and that lead-time and demand variability have been incorporated correctly. It should not be applied blindly when demand is intermittent, highly skewed or subject to capacity constraints.

Transportation resilience may be improved without increasing inventory by reducing lead-time variability, using postponement, sharing inventory across locations, qualifying substitute materials or improving visibility.

7. Governance, contracts and performance measurement

Risk ownership must be explicit. The board or executive team sets risk appetite; procurement and logistics teams manage commercial exposure; information security manages cyber controls; operations owns continuity execution; and legal and compliance teams interpret regulatory obligations. A risk committee can coordinate cross-functional decisions, but it should not replace operational accountability.

Contracts should address service levels, notification duties, data security, subcontracting, sanctions compliance, liability, insurance, force majeure, business continuity capability, audit rights and termination or transition assistance. Force majeure may excuse performance in some circumstances, but it does not automatically guarantee a substitute service or eliminate the duty to mitigate.

Useful metrics include:

DimensionExample measures
ReliabilityOn-time delivery, schedule adherence, delay-percentile performance
VulnerabilityCritical nodes without substitutes, single-source exposure
ResponseTime to detect, time to decide, time to activate contingency
RecoveryTime to restore, backlog clearance time, service-level recovery
SecurityIncident frequency, patch compliance, tested backup recovery
LearningCorrective actions closed, exercise findings, near-miss reporting
FinancialAvoided loss, disruption cost, resilience investment return

Metrics should be interpreted together. A high on-time rate may conceal severe tail events, while a low incident count may reflect poor reporting. Incentives that reward only cost reduction can unintentionally discourage redundancy and truthful escalation.

8. Technology, data and artificial intelligence

Digital twins, geographic information systems, real-time tracking, satellite data, weather feeds and control towers can improve situational awareness. Predictive analytics may identify congestion, equipment failure or likely delay. Artificial intelligence can support ETA prediction, anomaly detection, document classification and scenario generation.

However, technology does not remove risk. Models may be trained on incomplete historical data and fail under unprecedented conditions. Automated rerouting may create unsafe or non-compliant movements if constraints are not represented. Managers should require human oversight for high-consequence decisions, audit data lineage, test model performance across scenarios, protect sensitive information and maintain manual fallback procedures.

A resilient digital architecture includes independent communications, role-based access, multifactor authentication, segmentation between information technology and operational technology, immutable or offline backups, restoration tests and supplier cyber requirements. Visibility is valuable only when it leads to timely and authorised action.

9. Illustrative case: disruption on a critical import corridor

Background

The following is an illustrative case. Meridian Components, a manufacturer of industrial pumps, imports a specialised electronic controller from a single overseas supplier. The material normally travels by ocean to Port A and then by rail to Meridian’s plant. The controller is small but production-critical; the plant holds four days of inventory.

Problem

A severe storm damages the rail approach to Port A. At the same time, congestion prevents rapid diversion through the port’s road gate. The carrier advises that normal rail service may take ten days to resume. Meridian’s production line will stop after four days, creating lost contribution margin of $85,000 per day. Air freight is possible but expensive and has limited capacity. A second port exists, but it requires customs reconfiguration and a 600-kilometre road movement.

Analysis

The BIA identifies production continuity as the priority activity. Its MTPD is four days, while the proposed rail recovery exceeds the MTPD. The single-port and single-mode design is therefore not resilient. The event also reveals a common planning weakness: the company measured average lead time but not high-percentile disruption time.

The response team verifies regulatory requirements, confirms inventory, checks the controller’s air-freight classification, contacts an approved air carrier and requests capacity through Port B. It also contacts the supplier to split the next shipment between air and ocean routes. Customer allocations are prioritised according to contractual commitments and safety-critical applications.

Approach and solution

Meridian takes three immediate actions:

  1. Airfreights enough controllers to protect the production line for seven days.
  2. Moves the balance through Port B by road, using a pre-approved customs broker.
  3. Activates daily executive reviews and communicates revised delivery commitments to customers.

After stabilisation, Meridian qualifies a second port and carrier, establishes a minimum two-week strategic buffer for the controller, develops a documented airfreight trigger and negotiates emergency capacity options. It also maps dependencies to identify whether Port B shares the same fuel, customs or trucking constraints.

Outcome

Production continues, although emergency transport increases logistics cost. The company avoids a much larger production loss and gains a tested contingency route. The post-incident review finds that the most valuable improvement was not simply more inventory; it was prequalification, decision rights and route-switching capability.

Learning points

  • Criticality depends on business consequence, not physical size or freight value.
  • Average lead time is insufficient for continuity planning.
  • A contingency is credible only when regulatory, capacity and operational prerequisites are prepared.
  • Resilience investments should be evaluated against both expected loss and severe downside scenarios.
  • Exercises expose hidden dependencies before a real emergency.

10. Challenges and limitations

Risk quantification is constrained by scarce data, changing probability, correlated failures and uncertain consequences. Historical data may underrepresent climate extremes or cyber events. Suppliers may be unwilling to disclose vulnerabilities. Risk scores can create an illusion of objectivity, while financial models may omit reputation, human safety, environmental harm and social inequity.

Resilience also involves trade-offs. More inventory can reduce shortage risk but increase waste and emissions. Diversifying routes may increase distance and carbon output. Emergency air freight can protect production while imposing high environmental costs. A socially responsible decision therefore considers safety, labour conditions, emissions, community impacts, privacy and legal rights, not only financial continuity.

Organisations should avoid “resilience theatre”: policies, dashboards or certifications that look impressive but are not supported by resources, authority and testing. The strongest evidence of capability is demonstrated performance in exercises, audits and controlled trials.

11. Best-practice implementation roadmap

A practical implementation sequence is:

  1. Map critical products, customers, routes, nodes, modes and dependencies.
  2. Establish common risk definitions, thresholds and ownership.
  3. Build a risk register supported by incident, supplier and infrastructure data.
  4. Conduct BIA and determine MTPD, RTO and minimum service levels.
  5. Identify single points of failure and common-cause dependencies.
  6. Select proportionate controls using prevention, mitigation, redundancy and recovery.
  7. Embed requirements in contracts, procurement and network design.
  8. Create incident playbooks with clear authority and communication protocols.
  9. Test through tabletop, simulation and live operational exercises.
  10. Measure results, investigate near misses and update plans after organisational or environmental change.

The goal is not to eliminate all risk. It is to make critical transportation services sufficiently robust, adaptable and recoverable at an acceptable total cost and with proper regard for people, law and the environment.

Chapter Summary

Transportation risk is a strategic exposure arising from the interaction of hazards, vulnerable assets, network dependencies and business consequences. Major categories include operational disruption, geopolitical change, climate impacts, infrastructure failure, cyberattack and capacity shortage. Effective analysis distinguishes hazard, exposure, vulnerability, consequence, risk and residual risk.

Qualitative matrices support screening, while expected-loss, delay and scenario models support comparison of alternatives. Quantitative results require sound assumptions and should not conceal deep uncertainty or catastrophic tail risk. Resilience consists of anticipation, prevention, absorption, adaptation, recovery and learning. Redundancy is valuable only when alternatives are qualified, accessible and sufficiently independent.

Continuity management uses business-impact analysis to define critical activities, minimum service levels, maximum tolerable disruption and recovery objectives. Mitigation reduces likelihood or impact; contingency arrangements provide prepared alternatives; recovery restores and improves operations. Governance, contracts, cyber controls, technology, exercises and performance measures are essential enabling mechanisms. A mature materials manager integrates financial, operational, safety, environmental, ethical and regulatory considerations when designing continuity.

Key Terms

Hazard: A potentially damaging event or condition.

Exposure: People, assets, flows or processes subject to a hazard.

Vulnerability: Susceptibility of an exposed system to harm.

Consequence: The effect produced by a disruptive event.

Transportation risk: The combination of event likelihood and consequences affecting transport objectives.

Residual risk: Risk remaining after controls are applied.

Disruption: An event that reduces or interrupts expected performance.

Resilience: Capacity to withstand, adapt to and recover from disturbance.

Continuity management: Arrangements for maintaining and restoring priority activities.

Single point of failure: An element whose loss can interrupt a critical flow without an adequate substitute.

Redundancy: Provision of alternative capacity, routes, resources or systems.

Business-impact analysis: A structured assessment of disruption effects and recovery priorities.

MTPD: Maximum tolerable period of disruption.

RTO: Target time for restoring an activity or system.

RPO: Maximum acceptable period of data loss.

Minimum business continuity objective: Minimum acceptable service level during disruption.

Expected loss: Probability-weighted estimate of loss across defined scenarios.

Common-cause failure: Failure of apparently separate elements due to a shared underlying cause.

Geopolitical risk: Exposure arising from political, security, trade or regulatory change.

Cyber resilience: Ability to prepare for, withstand, respond to and recover from cyber incidents.

Review Questions

Short Answer Questions

  1. Distinguish between a hazard, exposure and vulnerability.
  2. Why is average transportation lead time insufficient for continuity planning?
  3. State two differences between mitigation and contingency measures.
  4. What is a single point of failure in a transportation network?
  5. Define MTPD and explain its relationship to RTO.

Long Answer Questions

  1. Explain the major categories of transportation risk and discuss how they may interact in a cascading disruption.
  2. Discuss the role of redundancy in transportation resilience, including its costs and limitations.
  3. Explain how a business-impact analysis supports continuity management.
  4. Evaluate the strengths and weaknesses of qualitative risk matrices and expected-loss analysis.
  5. Discuss governance, contracting and cyber-security requirements for resilient transportation systems.

Analytical / Application Questions

  1. A company faces three annual scenarios: normal operation with probability 0.75 and zero loss, a delay with probability 0.20 and loss of $90,000, and closure with probability 0.05 and loss of $500,000. Calculate expected annual loss and explain two limitations of using it as the sole decision criterion.
  2. Design a continuity strategy for a manufacturer whose only approved carrier serves a route crossing a flood-prone bridge. Identify the critical dependencies, immediate contingency actions and longer-term resilience investments.
  3. A port cyberattack disables electronic booking and gate systems for 36 hours. Develop an incident-response and recovery plan covering safety, manual operations, communications, data restoration, customer prioritisation and post-incident learning.

Multiple Choice Questions with Answers

Question 1

Which term describes the assets, flows and processes located within the influence of a hazard?

A. Exposure

B. Resilience

C. Recovery

D. Redundancy

Correct Answer: A. Exposure

Question 2

A route has a 0.10 probability of a disruption causing a loss of $200,000. What is the expected loss for this scenario?

A. $2,000

B. $20,000

C. $100,000

D. $200,000

Correct Answer: B. $20,000

Question 3

Which measure primarily reduces the impact of a disruption by providing an alternative approved carrier?

A. Contingency capacity

B. Historical averaging

C. Single sourcing

D. Demand elimination

Correct Answer: A. Contingency capacity

Question 4

What does MTPD represent?

A. The maximum tolerable period of disruption

B. The minimum transport price difference

C. The monthly terminal planning date

D. The maximum permitted tracking delay

Correct Answer: A. The maximum tolerable period of disruption

Question 5

Which is an example of a common-cause failure?

A. Two independent carriers experience unrelated tyre failures

B. Two alternative routes both depend on the same flooded bridge

C. One shipment arrives earlier than planned

D. A warehouse receives goods in separate deliveries

Correct Answer: B. Two alternative routes both depend on the same flooded bridge

Question 6

In the formula ROP = μL + zσL, what does σL represent?

A. Mean annual freight cost

B. Standard deviation of demand during lead time

C. Average vehicle capacity

D. Safety stock value in currency

Correct Answer: B. Standard deviation of demand during lead time

Question 7

Which activity is most directly associated with the absorption phase of resilience?

A. Continuing partial service during a disruption

B. Deleting all contingency plans

C. Ignoring weak infrastructure

D. Replacing all historical data

Correct Answer: A. Continuing partial service during a disruption

Question 8

Why should AI-based transportation predictions retain human oversight?

A. AI models can fail under unprecedented conditions or incomplete data

B. AI cannot process any transportation data

C. Human oversight guarantees zero disruption

D. AI systems never require security controls

Correct Answer: A. AI models can fail under unprecedented conditions or incomplete data

Question 9

A continuity plan has an RTO of five days, but the process has an MTPD of two days. What is the principal problem?

A. The RTO is shorter than necessary

B. The RTO exceeds the tolerable interruption period

C. The process has excessive redundancy

D. The MTPD measures financial profit only

Correct Answer: B. The RTO exceeds the tolerable interruption period

Question 10

Which statement best describes expected loss?

A. It predicts the exact loss that will occur each year

B. It is a probability-weighted estimate useful for comparing alternatives

C. It applies only to cyber incidents

D. It eliminates the need for scenario analysis

Correct Answer: B. It is a probability-weighted estimate useful for comparing alternatives

Transportation Systems
Chapter 12 of 14