Power is back. What else must recover?
An original fictional recovery sequence after a local interruption. Equipment conditions and available support vary by service. The sequence is arranged for learning, not as an operating procedure or a universal restoration order; real decisions belong to the responsible operators and depend on the incident.
Restore a supply without declaring every service ready
Our fictional utility has restored electrical supply to a selected group of connections after addressing the relevant fault. This establishes an input to other systems, not their complete operating status. Pumps, communications equipment and railway facilities may have separate damage, controls or dependencies to assess. The order shown in this journey is editorial: it illustrates different conditions rather than directing how an electrical system should be restored.
Mark supply availability at each selected connection separately from the equipment's service status.
A restored input is necessary for some functions but does not establish their readiness.
Read the complete journey
- 1Electricity
Restore a supply without declaring every service ready
Our fictional utility has restored electrical supply to a selected group of connections after addressing the relevant fault. This establishes an input to other systems, not their complete operating status. Pumps, communications equipment and railway facilities may have separate damage, controls or dependencies to assess. The order shown in this journey is editorial: it illustrates different conditions rather than directing how an electrical system should be restored.
Notice: Mark supply availability at each selected connection separately from the equipment's service status.
Explore Substations & protection
Why: A restored input is necessary for some functions but does not establish their readiness. - 2Internet
Re-establish an end-to-end connection
A powered router can process traffic, but reaching a service also requires an available onward route and a functioning destination. Network information may need to settle after a change; this journey does not calculate that interval. In our chosen recovery, one route becomes usable before another. A successful request is evidence about that particular exchange, rather than proof that every application and network path has recovered.
Notice: Trace the request from the powered device through an available route to its destination.
Explore Routers & forwarding
Why: Equipment power and end-to-end reachability describe different stages of communications recovery. - 3Water
Restart inflow while demand continues
Our water pump becomes available and begins replenishing a reservoir. If demand continues, only inflow above outflow increases its stored volume. For an invented arithmetic example, inflow of 150 cubic metres per hour with outflow of 100 adds 50 cubic metres in an hour, ignoring other changes. A running pump therefore need not restore depleted storage immediately, and this volume balance still does not calculate pressure.
Notice: Compare total pump inflow with the smaller net rate at which storage refills.
Explore Pumps & pressure zones
Why: Recovery of an inventory depends on the balance of simultaneous inputs and outputs. - 4Water
Keep water quality separate from pump status
Restored pumping and a rising reservoir level do not by themselves establish drinking-water quality. Utilities assess the relevant treatment and distribution conditions using monitoring, sampling and their water-safety arrangements. The required response depends on what happened during the interruption. Our scenario does not infer a water-use instruction from a level or a sensor reading; it distinguishes hydraulic recovery from the evidence needed to assess the supplied water.
Notice: Keep the pump status and reservoir level separate from treatment records and water-quality evidence.
Explore Water-quality sensing
Why: Quantity, pressure and quality are related requirements that cannot substitute for one another. - 5Urban rail
Confirm the railway's movement conditions
At the railway, electrical availability is only one requirement. The applicable detection and route-protection systems must support valid movement permissions, and the route must be usable. This example makes no assumption that equipment restarting automatically establishes those conditions. It also keeps passenger information separate: a working website can explain a continuing restriction while the systems responsible for train movement remain under assessment.
Notice: Compare the available power supply with the separate status of the route and its movement permissions.
Explore Signals and separation
Why: Transport recovery depends on coordinated operating conditions beyond electrical restoration. - 6Urban rail
Reassemble the resources needed for service
A usable route still needs suitable trains and the people and facilities that support their operation. During disruption, those resources may not be in their planned places. In our fictional sequence, prepared trains become available from a depot while the operator assesses the service it can provide. Repairing a single asset therefore differs from assembling a working transport service across vehicles, infrastructure and operational resources.
Notice: Add available trains and supporting resources to the route-status picture.
Explore Depots and maintenance
Why: The service delivered to passengers depends on resources being ready together. - 7Urban rail
Recover a useful pattern of departures
The first train to run does not automatically restore the planned timetable. Train positions, turnback arrangements and other constraints influence the service that can follow. Our operator publishes a revised service picture while departures become more regular. The communications system helps distribute that information, but the information itself cannot create a train path or remove the remaining constraints on the railway.
Notice: Distinguish one successful departure from a sustained, usable sequence of departures.
Explore Operations and recovery
Why: Recovery can improve in stages rather than switching instantly from unavailable to normal. - 8Electricity
Rebuild the buffers used during the interruption
Services may be operating while their reserves are still depleted. In this example, a battery needs charging and a water reservoir needs replenishing after supporting selected loads and demand. Those processes require available inputs and time; replenishment may itself add electrical demand. Service restoration and readiness for another interruption are therefore different milestones. No universal recharge duration or reserve requirement is assumed for this fictional city.
Notice: Compare 'service available' with the remaining energy and water inventories behind that service.
Explore Energy storage
Why: Recovery includes restoring supporting capacity, not only resuming the visible activity.
With the illustrative pump supplying 150 cubic metres per hour and demand using 100, what refills the reservoir—and what does that result leave unanswered?
Reveal the explanation
The net 50 cubic metres per hour refills it, assuming those fixed rates and no other gains or losses. The arithmetic does not establish pressure, water quality or a real restoration time. Similarly, a powered router or one departing train does not establish complete service recovery.
Sources & further reading
Original explanations informed by these sources. Diagrams are conceptual; local systems differ.
- Infrastructure Resilience Planning Framework (IRPF) Cybersecurity and Infrastructure Security Agency (CISA) · 2025-03 · Source & rights record
- Power Resilience Guide for Water and Wastewater Utilities U.S. Environmental Protection Agency, Office of Water · 2023-05-03 · Source & rights record
- How electricity is delivered to consumers U.S. Energy Information Administration · Not stated · Source & rights record
- Energy storage for electricity generation U.S. Energy Information Administration · 2023-08-28 · Source & rights record
- Measuring electricity U.S. Energy Information Administration · Not stated · Source & rights record
- RFC 1812: Requirements for IP Version 4 Routers IETF / RFC Editor; F. Baker (editor) · 1995-06 · Source & rights record
- RFC 4271: A Border Gateway Protocol 4 (BGP-4) IETF / RFC Editor; Y. Rekhter, T. Li, and S. Hares (editors) · 2006-01 · Source & rights record
- RFC 9110: HTTP Semantics IETF / RFC Editor; R. Fielding, M. Nottingham, and J. Reschke (editors) · 2022-06 · Source & rights record
- Water System Planning Guideline Sydney Water · 2014-09 · Source & rights record
- Protecting Water Quality Through Distribution System Pressure Management US Environmental Protection Agency · 2021-12 · Source & rights record
- Online Water Quality Monitoring in Distribution Systems US Environmental Protection Agency · 2018-04; second release 2019 · Source & rights record
- Water safety planning World Health Organization · Not stated · Source & rights record
- Signals explained Network Rail · 2018-09-05 · Source & rights record
- Behind the scenes: Sydney Metro operations Sydney Metro / Transport for NSW · 2022-08-24 · Source & rights record
- Knock-on delays Network Rail · Not stated · Source & rights record
- The timetable Network Rail · Not stated · Source & rights record
- How we keep you updated when there’s a delay Network Rail · Not stated · Source & rights record
- Through-Running Regional Rail: Results, section 9, Turnback Operations National Academies of Sciences, Engineering, and Medicine / Transportation Research Board · 2026 · Source & rights record
Another way through the system.
One morning, four systems
Follow an ordinary commute through the services that make it possible.
One interruption, different clocks
Discover why dependent services do not all stop together.
When rain crosses the network map
Follow one shared hazard across boundaries drawn for different services.