Abstract
The losses incurred by industrial facilities following catastrophic events can be broadly broken down into property damage and business interruption due to the ensuing downtime. This article describes a generalized probabilistic methodology for estimating facility downtime under multi-hazard scenarios. Since the vulnerability of each components of an industrial facility varies with the types of hazard, it is beneficial to adopt a system-of-systems approach for analyzing such complex facilities under multiple interdependent hazards. In this approach, the complex layout of the facility is first broken down into its constituent components. The component vulnerabilities to different hazards are combined using Boolean logic, assuming their repair time as a common basis for defining damage states of the component. This combination results in multi-hazard fragility functions for each component of the system, which give the probability of damage under combined occurrence of multiple perils. The time to repair a component is expressed probabilistically using restoration functions. Using fault tree analysis, the components’ fragility functions and restoration functions are propagated to calculate system-level downtime. We demonstrate the methodology on a case-study power plant to estimate downtime risk under combined earthquake and tsunami hazard.
Similar content being viewed by others
Avoid common mistakes on your manuscript.
1 Introduction
This paper focuses on the loss estimation due to business interruption of industrial facilities as a consequence of multiple interacting hazards. Classical risk assessment approaches this problem with the assumption of independence of vulnerability to different hazards (Grünthal et al. 2006; Kameshwar and Padgett 2014; Li and Ellingwood 2009; SwissRe 2013). Such an assumption is valid only when the hazards are independent and mutually exclusive (i.e., the likelihood of combined occurrence is negligible), as in the case of for instance, earthquake and windstorms (Chandler et al. 2001). However, when hazards show spatio-temporal correlations (Gill and Malamud 2014), where multiple hazards are likely to affect the same region over the same time span, or when primary hazards cause secondary perils, the assumption of independence does not hold, and thus, encountered losses become hard to quantify in a reliable manner. During the Fukushima disaster of 2011, for example, a major earthquake triggered a devastating tsunami and the total loss incurred in multi-hazard situations was significantly more than the mere summation of losses from the individual hazards. Hence, there is a need for a reliable multi-peril risk analysis methodology.
The business interruption loss forms a significant portion of the total loss in a catastrophe in today’s highly industrialized and interconnected world. For instance, Hurricane Katrina in 2005 resulted in a total of US$25 billion insured commercial loss, of which business interruption was responsible for US$6–9 billion. Of the total estimated loss of US$97 billion during Superstorm Sandy (2012), US$10–16 billion was attributed to business interruption due to widespread power outages and flooding (Kunz et al. 2013). Power outages for up to 14 days left about 370,000 customers without power as affected several other lifelines and businesses (USDOE 2013). Shut down of local refineries led to a 30–40% reduction in the region’s total fuel production as well as another 20–25% reduced supply capacity due to harbor downtime. The transportation sector was also significantly affected with several tunnels being inundated for days (Haraguchi and Kim 2014). Recently, in August 2017, after Hurricane Harvey made landfall near Galveston, TX, several Gulf Coast refineries, amounting to over 30% of Gulf Coast refining capacity, were shut down for over a week resulting in heavy business interruption losses to the oil industry. Despite constituting a significant portion of the losses, business interruption loss estimation methodologies have not received sufficient research attention.
Calculating business interruption in multi-hazard scenarios is a challenge in itself. Interactions among multiple natural and technical hazards affecting a region have been extensively studied in the past (Gill and Malamud 2014; Kappes et al. 2012; Marzocchi et al. 2012; Javanbarg et al. 2009). In the context of multi-hazard analysis, primary hazards refer to those that occur independently of other hazards, while secondary hazards, or perils, are triggered by the primary hazards. Such triggering interactions make the risk estimation problem complicated for three reasons. First, the system component’s vulnerabilities differ based not only on the type of hazard but also on the hazard intensity. Second, restoration times also vary for different levels of vulnerabilities for different hazards. Third, the component’s structural capacity varies depending on the previous exposure of the components to the primary hazard. As a prominent example, aftershocks of an earthquake amplify damages to a system’s component. This is because some of the component’s structural inventory has already been weakened by the initial shake damage, thus increasing the component’s vulnerability to aftershocks (Ryu et al. 2011).
Although interactions between hazards have been widely studied, the risk estimation problem in multi-hazard situations is particularly challenging for complex systems with various interdependent components each of which may experience multiple damage states. Industrial facilities are examples of such complex systems, where each critical component of the facility must be carefully accounted for to assess overall risk of the system as a whole. Precisely, such analysis can be achieved using fault tree analysis which decomposes a complex system into its components, considering the components’ functional interdependencies through Boolean logic. Here, interdependency refers to the fact that the functioning of some components relies on adequate functioning of other components. In this paper, we leave the interdependency of damageability out of scope where failure of one component can cause failure of another component. With the fault tree approach, each component is assigned a failure probability which, for a downtime estimation problem, involves a combination of probability of a damage state and probability of restoration. For each hazard type, probability of a damage state is represented by fragility curves as a function of hazard intensity, and the probability of restoration is represented by restoration curves as a function of time elapsed after the event.
Given the uncertainties in estimating the response of engineering systems to natural and manmade hazards, and the importance of this response for estimating damage, it is useful to represent the damage probabilistically using fragility curves. Typically, fragility curves are developed considering a single hazard, although a significant body of the literature focuses on developing damage functions considering combined action of multiple hazards and perils. Alipour et al. (2012), Wang et al. (2012), Dong et al. (2013), and Prasad and Banerjee (2013) have developed multi-hazard fragility curves that yield the failure probability of bridges due to seismic excitation conditional on the level of pier scour based on nonlinear dynamic finite element model simulations. Gehl and D’Alaya (2016) have derived fragility curves for bridges using a Bayesian network models for combined action of earthquake, ground failure, and floods. Several studies have produced seismic fragility curves conditional on the level of aging in the buildings (Ghosh and Padgett 2010; Choe et al. 2009; Alipour et al. 2010). Fragility curves for earthquake mainshock–aftershocks sequence have also been developed (Ryu et al. 2011; Li et al. 2014; Mackie and Stojadinovic 2004).
The multi-hazard fragility curves (or, more aptly, fragility surfaces), discussed above, are developed using computational structural modeling and simulations of multiple hazard scenarios, typically using nonlinear dynamic finite element analysis. Such an analysis becomes cumbersome for a complex industrial facility with several hundreds of components. In this paper, we present a generalized methodology for downtime estimation under multi-hazard scenarios that uses single-hazard fragility curves (also called marginal fragility curves) for system components, which are more readily available or easier to derive. The methodology is applicable to cascading hazards, where primary hazards trigger secondary hazards (e.g., earthquake triggering a tsunami), and concurrent hazards, where multiple consequences of the same hazard occur simultaneously (e.g., wind and storm surge during hurricanes). The methodology is also applicable to any system with multiple interdependent components such as utility networks, infrastructure networks, and commercial supply chains.
The paper is organized as follows. In Sect. 2, we introduce the generally applicable downtime estimation methodology under multi-hazard scenario. This methodology is demonstrated based on a case study of a power plant, followed by results of multi-hazard risk analysis, in Sect. 3. Concluding remarks are given in Sect. 4.
2 Downtime estimation methodology using fault tree analysis
Studies on multi-hazard risk assessment have developed multi-hazard fragility curves by fitting multi-dimensional failure probability distributions using statistical methods. However, such analysis for estimating combined multi-hazard damage probability is computationally prohibitive for large systems with several components, as each such analysis relies on an ensemble of computational nonlinear structural simulations. Thus, the use of marginal fragility curves for individual hazards offers a convenient alternative for quantitative risk assessment since such marginal fragilities are often computable through numerical analysis, empirical analysis, or expert opinion. Here, we describe a downtime estimation methodology that uses marginal fragility curves which are combined using a Boolean logic-based process.
To effectively account for the damage potential of secondary perils given the occurrence of a primary hazard, risk assessment methodologies must consider both interdependencies in hazards as well as conditionality of damage probabilities (Marzocchi et al. 2012; Mignan et al. 2014). In the case of mutually exclusive multiple hazards, the failure probability of a component of the facility can be expressed as:
where \(A_{h}\) represents the \(n_{h}\) multiple mutually exclusive hazards that do not occur concurrently. \(P(F|A)\) is the marginal failure probability of the component conditional on a single hazard \(A\). When the multiple hazards \(A_{1}\) and \(A_{2}\) occur at the site in the same time frame, the conditional failure probability \(P\left( {F |(A_{1} ,A_{2} )} \right)\) is a more accurate representation of system fragility.
Consider a system with \(n_{c}\) components which is susceptible to \(n_{h}\) hazards that be cascading (e.g., earthquake followed by tsunami) or concurrent (e.g., wind and storm surge during hurricane). Failure probability of component \(i\) due to hazard \(h\) with intensity \(s_{h}\) can be expressed as:
where \(d\) represents the damage state, \(F_{h,\left( d \right)}^{\left( i \right)} \left( {s_{h} } \right)\) is the fragility curve, and \(G_{h,\left( d \right)}^{\left( i \right)} \left( t \right)\) is the restoration curve for hazard \(h\) and damage state \(d\).
If damage states are considered to be incremental (e.g., slight, moderate, heavy, etc.), we can assume that each component can exist in only one damage state following the hazardous event. The multiple incremental damage states \(d = 1, \ldots ,n_{d}\) can be combined using Boolean OR logic to obtain the component’s multi-hazard probability:
Here, we assume that the component failures or damage is not interdependent, which implies that the failure of one component does not alter the failure probability of another component, regardless of their connectivity or spatial proximity. Such an assumption is valid in a system where a component failure typically does not cause another component to fail. However, this assumption may not be valid for, say, power networks where failure of substation causes overloads that can cause additional component failures. The use of Bayesian networks (Doguc and Ramirez-Marquez 2009; Boudali and Dugan 2005) instead of fault tree can account for such dependencies through conditional failure probabilities.
When multiple hazards occur in the same time frame, we replace the single-hazard fragility \(F_{h,\left( d \right)}^{\left( i \right)} \left( {s_{h} } \right)\) with a multi-hazard conditional fragility \(F_{{1, \ldots ,n_{h} ,\left( d \right)}}^{\left( i \right)} \left( {s_{1} , \ldots ,s_{{n_{h} }} } \right)\), where \(s_{1} , \ldots ,s_{{n_{h} }}\) are the intensities of hazards \(h = 1, \ldots ,n_{h}\). Similarly, we replace the restoration curve with a conditional relation \(G_{{1, \ldots ,n_{h} ,\left( d \right)}}^{\left( i \right)} \left( t \right)\). The expression for the component failure probability now becomes:
The component damage characteristics often vary for different hazards, although some overlap might be expected. For instance, in case of a tsunami following an earthquake, both hazards will result in structural damage, although tsunami inundation would likely cause significantly more damage than earthquake to electrical equipment. The characteristics of the structural damage itself are also distinct depending on the hazard. Taking storage tanks as an example, while earthquake may lead to buckling or sloshing damage, tsunami inundation can lead to undermining of foundation resulting in anchorage failure and displacement of the tank. Therefore, from a multi-hazard perspective, it is important to find a common basis for categorization of damage states across the multiple hazards. Defining damage states based on the repair time, instead of the structural damage, offers such a common basis. As an example, one may assume a ‘low’ damage state if the repair time is expected to be less than 10 days, ‘moderate’ if more than 10 days, ‘severe’ if more than 30 days, and so on. Thus, using the repair time as the basis for assigning the damage states allows us to combine the component failure probabilities from different hazards seamlessly. With the restoration curve compressed as \(G_{{1, \ldots ,n_{h} ,\left( d \right)}}^{\left( i \right)} \left( t \right) = G_{\left( d \right)}^{\left( i \right)} \left( t \right)\), we can now combine the damage states as:
The following section will discuss the estimation of the multi-dimensional fragility surfaces \(F_{{1, \ldots ,n_{h} ,\left( d \right)}}^{\left( i \right)} \left( {s_{1} , \ldots ,s_{{n_{h} }} } \right)\) for the components and calculation of system downtime.
2.1 Development of multi-dimensional fragility surfaces
Consider two hazards \(A_{1}\) and \(A_{2}\) which can be thought of as cascading or concurrent hazards affecting a system component. Assuming that the component has not undergone any repairs during the occurrence interval of the two hazards, let us also consider four incremental damage states to represent the component state as \(d_{h,d}\) with \(h = 1,2; d = 0,1,2,3\), where \(d = 0\) represents no damage.
We can form a matrix of damage states that the component can assume given the occurrence of \(h_{1}\) and \(h_{2}\) in Table 1.
The probability of component being in the damage state \(d = 2\) is the OR combination of the states where \(d = 2\) is the highest damage state, i.e., \(\left[ {\left( {d_{0} ,d_{2} } \right),\left( {d_{1} ,d_{2} } \right),\left( {d_{2} ,d_{0} } \right),\left( {d_{2} ,d_{1} } \right),\left( {d_{2} ,d_{2} } \right)} \right]\), and expressed generally as:
Typically, the marginal fragility curves are lognormal distributions, which maintain their lognormal nature upon multiplication. Thus, the resulting failure probability (left-hand side of Eq. 7) is also a lognormal distribution.
This process of estimating the multi-hazard fragility is based on an assumption that the damage caused by the multiple hazards is statistically independent. This assumption may not hold true for certain hazards, especially those of a similar nature (e.g., earthquake mainshock–aftershock). To address this, one can calibrate the derived multi-dimensional fragility surfaces upon collecting empirical or analytical data regarding the component’s performance in multi-hazard scenarios.
2.2 Calculation of system downtime
Using Eq. 5, each component’s failure probability is calculated, which can now be combined to compute system-level failure probability using the fault tree model. In standard fault tree terminology, the term ‘basic event’ refers to component failure, while ‘top event’ refers to the system failure. Here, the top event of the fault tree is that the system will not be restored before time \(t\) given occurrence of \(n_{h}\) events of intensities \(s_{1} , \ldots ,s_{{n_{h} }}\). Let \({\mathcal{F}}\) denote the fault tree model, with inputs including the hazard intensities \(s_{1} , \ldots ,s_{{n_{h} }}\), elapsed time \(t\), the marginal fragility \(F_{h,\left( d \right)}^{\left( i \right)}\) of each component \(i = 1, \ldots ,n_{c}\), for each hazard \(h = 1, \ldots ,n_{h}\) and damage states \(d = 1, \ldots ,n_{d}\), and the restoration curve \(G_{\left( d \right)}^{\left( i \right)}\) of each component \(i = 1, \ldots ,n_{c}\) for damage states \(d = 1, \ldots ,n_{d}\). The top event probability of not being repaired in time \(t\) is then:
Mean \(E\left( \cdot \right)\) and variance \({\text{Var}}\left( \cdot \right)\) of the downtime are obtained as:
If we use lognormal distributions to represent fragility and restoration curves, the lower bound of the mean estimate in Eq. 10 becomes \(0\) days.
3 Case-study demonstration
Our case study is a hypothetical power plant that is closely modeled after an existing coal-fired power plant located on the coast of Chile, which is vulnerable to both earthquake and tsunami hazards. Following sections describe the plant layout, major earthquake and tsunami vulnerabilities, fragility and restoration parameters, development of multi-hazard fragility curves, estimation of earthquake and tsunami hazard, and finally estimation of plant’s downtime and risk analysis with uncertainty quantification due to the various sources of variability.
3.1 Plant description
The case-study power plant has two power generation units and a coal-offloading pier. The fault tree model of the plant is generated after several site visits, studying blueprints, and consulting with the plant engineers. The coal-offloading pier consists of a reinforced concrete deck supported on steel wide flange girders and hollow steel tubes piles. Coal is offloaded from ships docked at the pier using a clamshell crane supported by the deck and transported to a coal yard by a conveyor system. Another conveyor system transports coal from the coal yard to silos at the two power generation units. Both power generation units have a nearly identical layouts and process flows. The coal silos are welded steel cylindrical silos with conical bottoms that feed into a coal pulverizer that crushes the coal to a powdered form. The powdered coal is then burned in the boiler which is supported on a diagonally braced steel frame. Both units also consist of their own reinforced concrete exhaust stack, along with other exhaust system equipment such as forced draft fans, air ducts, and bottom ash handling systems. Other flue-gas treatment components include desulphurization systems, fabric filters, electrostatic precipitators, and spray dry absorbers.
The cooling water intake siphons are above ground large-diameter welded steel pipes that are supported by the offloading pier. The pier thus supports the offloading crane, conveyor system, and cooling water intake siphons, making it a critical component for plant operation. The outflow pipes are buried large-diameter reinforced concrete. The plant also consists of several large-diameter atmospheric tanks for a variety of processes. The two units consist of three service water tanks, two fuel tanks, and three condensate tanks with varying levels of anchorage. The turbine building houses two turbines, generator, and other electrical equipment such as switchgears, battery racks, and emergency generator for restarting the plant. The turbine building itself is a steel braced frame structure with sheet metal walls and roof.
We identified a total of 118 independent components of the power plant which will form the fault tree model of the plant. As a general rule, components that fail simultaneously or share the same support system are grouped into one component. For instance, a pump attached to a tank is redundant if the tank is non-functional, thus making it sensible to treat the tank as one component including the pump. The fault tree model of the plant is shown in Fig. 1. OR gates are used to represent critical components, without which the plant cannot function, while AND gates are used to represent redundancy of components where plant can function, while the some of the components are temporary under repair.
In this demonstration, the restoration functions for each of the components in the plant are based on engineering judgment of the authors from past experience as well as communications with the plant authorities. These restoration functions can be improved in the light of additional empirical data from future disasters. The restoration functions take into account the availability of spare parts on site, time required to order and ship parts or entire components, and post-disaster labor availability. These functions can be updated based on empirical evidence. FEMA’s HAZUS tool provides such empirical restoration curves primarily for residential and commercial building components. The parameters of the lognormal distributions used in this case study to represent restoration functions are given in Table 2.
3.2 Seismic vulnerability
In a probabilistic context, seismic vulnerability is expressed with seismic fragility curves which are cumulative probability distribution functions that give the probability of exceeding a given discrete damage state as a function of a seismic intensity measure. Fragility curves account for the many sources of aleatory uncertainty in estimating the structural capacity under seismic ground motion, including variations in the ground-motion time histories corresponding to an intensity measure, as well as variations in structural properties (foundation, geometry, material properties, live loads, etc.) that govern the capacity curve and demand spectrum. In this paper, we chose the peak ground acceleration (PGA) as the seismic intensity measure, since majority of the equipment in the power plant is ground based, with the exception of boiler tower and smoke stack. Moreover, majority of sources report fragility curves in terms of PGA (ALA 2001; EPRI 2013; Johnson et al. 1999). Typically, the discrete damage states’ definitions are based on the structural condition of the component. However, as discussed in Sect. 2.1, we have defined the damage states based on the post-disaster recovery time of the component.
The major seismic vulnerabilities identified at the case-study power plant that are expected to result in significant downtime are as follows:
-
1.
Damage to the support systems of components such as boiler, piping, and other mounted mechanical and electro-mechanical equipment, although non-obstructive to the continued operation of the component, presents a site safety hazard. Failure of support systems or large inelastic deformations, on the other hand, renders the component temporarily non-functional.
-
2.
Damage to mechanical components varies based on their type and size. Components with moving parts can undergo internal warping or displacements. Unanchored or marginally anchored equipment can overturn causing heavy damage, requiring replacement.
-
3.
Damage to the atmospheric steel tanks occurs in several modes (ALA 2001), the most common being the outward shell buckling mode, also known as ‘elephant foot’ bucking of the tank wall (Malhotra et al. 2000). Anchorage failure caused by breakage, pull-out, or stretching results in base uplift or sliding of the tank. Movement of tanks may cause the connecting pipes to break off from the tank.
-
4.
The coal-offloading pier supports an offloading clamshell crane, water siphon pipeline, and a coal conveyor. Shake damage to the reinforced concrete piles and deck can manifest in form of cracking or collapse of the pier.
-
5.
Coal conveyor from the offloading pier to the coal yard and from the coal yard to the coal silos is supported by truss girder system. Ground motion can result in member buckling, over tipping, or permanent deformation of the slender truss system.
-
6.
The reinforced concrete smoke stack can sustain cracking that can be a safety issue until repaired. Moreover, since the smoke stack rests on a mat foundation, rocking is expected, damaging the connected air ducts and other flue-gas treatment equipment.
The above on-site vulnerabilities are non-exhaustive, but are of the highest concern from a business interruption perspective, as established from site survey, communication with site management and engineering judgment. Although ground failure by liquefaction also has significant potential for structural damage to several of the plant components (Suzuki 2008; Kazama and Noda 2012), it is out of the scope of this study. The parameters of the lognormal distribution used to represent fragility function for each component are given in Table 3.
3.3 Tsunami vulnerability
Tsunamis are generated by sudden deformation of the ocean floor due to tectonic activity which displaces a large volume of water (Haugen et al. 2005). The resulting high-energy tsunami waves swell and grow in height as they approach the shallow coast inundating the near-shore region. Typically, tsunamis carry a large amount of debris that increases the damage potential of the high-velocity waves. Although tsunamis are also formed by undersea volcanic eruptions, landslide, and explosions, the ones caused by earthquakes have historically been most frequent and most damaging.
Tsunami fragility curves of components give the damage probability as a function of a tsunami intensity measure that defines the flow severity characteristics. Although most tsunami fragility curves use inundation depths as the intensity measure, alternatives measures include wave velocity, hydrodynamic force, hydrostatic force, momentum flux, moment of momentum flux, and energy head. Inundation depth is most commonly used because of the availability of this data from post-event reconnaissance, while other intensity measures require inundation modeling through computational simulations (Macabuag et al. 2016). Based on observed damage in Banda Aceh, Indonesia, from 2004 Indian Ocean tsunami, Koshimura et al. (Koshimura et al. 2009) have identified inundation depth as the most reliable tsunami intensity measure due to the difficulty in accurate estimation of the other intensity measures.
Major tsunami vulnerabilities were identified at the case-study power plant based on site visits and consulting with the plant engineers. These are listed as follows:
-
1.
Hydrostatic forces due to inundation (water depth) and hydrodynamic forces due to high-velocity water flow induce lateral forces on structures that lead to structural damage and overturning.
-
2.
Inundation also leads to vertical uplift or buoyancy forces causing displacement of structures that are not sufficiently anchored, especially tanks (Krausmann and Cruz 2013; Nishi 2012). Tank displacement also damages attached pipes.
-
3.
Scouring of foundations, roads, vegetation, and piers can occur during both inundation and recession of the tsunami waves (Francis 2006).
-
4.
The plant’s coal-offloading pier can experience scouring of seabed resulting in differential settlement of the supports. Water inundation and flow result in vertical buoyancy forces which can dislocate the pier decks if the connections with the supports are not adequate. This is apparent when comparing the wharf damage in Southeast Asia from the 2004 Indian Ocean tsunami and wharf damage in Japan from the 2011 Tohoku tsunami, in that Japanese wharfs sustained far lesser damage due to better connection design and seismic strengthening.
-
5.
Impact of floating and flowing debris, including cars and boats, during both wave inundation and recession results in heavy structural damage.
-
6.
Saltwater intrusion is a serious problem for non-structural damage to electrical equipment and fixtures such as transformers and control panels, as well as heavy machinery such as turbines and generators. Water intrusion damage to transformers was one of the primary causes of blackouts during Hurricane Sandy (Boggess et al. 2014).
-
7.
Breaching of fuel and chemical tanks, broken fuel pipelines, and overflow of sewage results in secondary damage to property caused by toxic release, fire, and vapor cloud explosions. Although secondary technical hazards are not considered here, they can cause significant business interruption due to clean up activities.
Based on the study of the plant layout, engineering reports, and site visits, as well as published literature (Krausmann and Cruz 2013; Basco and Salzano 2016; Hatayama 2014; Landucci et al. 2014; Horspool and Fraser 2016), we estimated the fragility curves of the identified components of the plant, as given in Table 4. It is important to note that a majority of the tsunami fragility curves used here are based on informed expert opinion and are not obtained through empirical data analysis or computational simulations. Therefore, the risk analysis would be incomplete if uncertainty in these parameter values is not considered in calculating the system downtime. Uncertainty quantification is discussed in Sect. 3.8.
3.4 Multi-hazard vulnerability
Using Eq. 7, the combined fragility of each component is calculated for a range of PGA and tsunami inundation height values. An example joint fragility surfaces for the smoke stack and offloading pier, two of the most critical components, are shown in Fig. 2. As evident from Fig. 2, the damage probability is amplified when shake and tsunami occur together. The edges of the fragility surface, corresponding to the PGA and tsunami height axes, represent the components’ marginal shake and tsunami fragilities, respectively. While the marginal fragilities are based on either computational simulation or empirical data analysis, the conditional damage probabilities (values not on the horizontal axes) are calculated based on Boolean logical combination of the marginal fragilities.
From a disruption perspective, the downtime of a facility is governed not only by the functioning of the facility’s internal components, but also by external factors that affect the supply of raw material, transmission/transportation of finished products, or access to employees. These external factors that directly affect the facility downtime must be considered as components in the fault tree model. In the power plant example, the components that are external to the plant include the coal-offloading pier, coal-offloading clamshell crane, external power supply, and transmission lines. Although the plant’s management does not own these components, they directly affect the plant’s downtime fragility functions, and restoration functions for the above components are provided in Tables 2, 3 and 4.
3.5 Earthquake hazard
Due to its proximity to the Nazca subduction zone, Chile is one of the most seismically active countries. Located on the South American plate, the two dominant sources of seismicity are the subduction of the Nazca plate and Antarctic plate under the South American plate at the rate of approximately 80 mm/year (Somoza and Ghidella 2005). The magnitude 9.6 earthquake that occurred along the Peru–Chile trench on this interface in 1960 is the largest magnitude recorded instrumentally (Krawcyzk 2003). A magnitude 8 earthquake has a return period of 80–130 years for any given region in Chile (Barrientos et al. 2004). Return period is the expected reoccurrence time interval of a given magnitude of hazard.
To calculate the seismic hazard at the site of the power plant, we used the seismogenic source model developed by Global Earthquake Model’s South America Risk Assessment (GEM-SARA) project (GEM 2017). The source model consists of the geometric parameters, kinematics, activity rates of active crustal faults, and subduction zone in the South American countries. The project has also selected a ground-motion prediction equation logic trees for active shallow crustal, stable shallow crustal, subduction in-slab, and subduction interface regions found in GEM (2017).
Using GEM’s OpenQuake, an open source seismic risk assessment package, we performed probabilistic seismic hazard assessment (PSHA) at time scales of 10,000 years. The goal of PSHA is to find the total probability of exceedance of earthquake magnitude \(X\) (e.g., moment magnitude \(M_{w}\)) in a given time span \(T\) considering all seismic sources in a region (Pagani et al. 2014), expressed as.
where \(P_{{{\text{sr}}c_{i} }} \left( {X\left\langle x \right|T} \right)\) is the probability that the \(i\)th source does not generate ground-motion parameter greater than \(x\) in the time span \(T\) and \(I\) is the number of sources. Typical ground-motion parameters are peak ground acceleration or spectral acceleration at a given site. The sources are assumed independent, which means that the occurrence of earthquake in one source does not modify the probability of occurrence in another source. Next, a set of earthquake ruptures in each source are generated using specified occurrence probabilities in the time span \(T\) using an earthquake rupture forecast model. The set of ruptures can be thought of as the various discretized rupture surfaces and magnitudes in each source. Thus, the probability of exceedance for each source \(i\) is:
where \(P_{{{\text{rup}}_{i,j} }} \left( {X\left\langle x \right|T} \right)\) is the probability that the \(j\)th rupture in source \(i\) has a magnitude that does not exceed \(x\) in time span \(T\) and \(J_{i}\) is the total number of ruptures in source \(i\). The ruptures are mutually exclusive, which means that rupture in one source does not affect the probability of another rupture in the same source. Thus, we can express the non-exceedance probability of each rupture in source \(i\) as:
where \(P_{{{\text{rup}}_{i,j} }} \left( {n = k |T} \right)\) is the probability that the \(j\)th rupture occurs at \(k\)-times in time span \(T\), and \(P\left( {X < x | {\text{rup}}_{i,j} } \right)\) is the probability that the occurrence of rupture \({\text{rup}}_{i,j}\) does not exceed level \(x\). Assume that ruptures follow a Poisson temporal occurrence model:
Combining Eqs. 12–15, we can express the probability of the ground-motion parameter \(X\) exceeding a level \(x\) at least once in time \(T\) as:
This process of developing the exceedance probability relation, also known as hazard curve, is known as classical PSHA and follows the procedure suggested by Cornell (1968) and formulated in Field et al. (2003). An alternative to the classical approach is the event-based PSHA (EPSHA), in which ruptures are generated by Monte Carlo simulation, sampling from \(P_{{{\text{rup}}_{i,j} }} \left( {n = k |T} \right)\), to create a set of events in a given time span, also known as a stochastic event set. The corresponding ground-motion field, which is the list of ground-motion intensities at a given site, is calculated to obtain the hazard curve. In this study, the EPSHA is used to obtain a 10,000-year stochastic event set. Note that the 10,000-year stochastic event set does not represent 10,000-years of seismic activity, but instead gives 10,000 realizations of a single year of earthquake activity.
The ground-motion intensity corresponding to a rupture is predicted by ground-motion prediction equations (GMPEs) which relate site intensity to rupture parameters such as earthquake magnitude, distance of site to hypocenter, local soil parameters, and fault mechanism (Douglas 2003). GMPEs are typically empirically derived using historical instrumental data and vary with the source typologies, mainly including four categories: interface and intraslab subduction regions, and active and stable shallow crustal regions. Selection of GMPEs for a particular region is not only a difficult task given the large number of options to choose from, but also important given the strong sensitivity of hazard predictions to the chosen GMPEs (Stewart et al. 2013). Given the shortage of instrumental data from one specific region, the development of GMPEs relies on data from similar ruptures from other regions. It is thus rare that a single GMPE can accurately predict ground-motion intensity for all future earthquakes affecting a site. To deal with this epistemic uncertainty related to the choice on GMPEs, OpenQuake uses a logic tree approach where multiple GMPEs are selected with corresponding weights that represent the confidence of the modelers. The final hazard prediction is thus a weighted sum of individual logic tree path predictions.
The GEM-SARA project has identified the GMPEs that best fit the ground-motion data in South America for the four different source typologies along with their logic tree weights (Drouet et al. 2017), which are given in Table 5. Figure 3 shows the mean local hazard curve as well as the ensemble of hazard curves obtained from sampling from a uniform distribution between the maximum and minimum PGA values obtained from the logic tree combinations. The 500-year and 2500-year return period PGA distributions are shown in Fig. 4. For comparison, the figure also shows the 500- and 2500-year PGA near the power plant location estimated by USGS in 2010 (Petersen et al. 2010), which are 0.724 g and 1.33 g, respectively.
3.6 Tsunami hazard
The tsunami hazard at the site of the power plant is represented by assigning a runup height to each earthquake in the 10,000-year stochastic event set. Several studies have reported scaling relation between tsunami intensity and earthquake magnitude (Kulikov et al. 2005; Murty 1977; Abe 1995; Silgado 1978; Comer 1980; Geist and Parsons 2016; Geist 2012; Suppasri et al. 2013; Iida 1983), in lieu of complicated and computationally intensive hydrodynamic fluid dynamics simulations which require accurate near-shore bathymetry data and earthquake source parameters. Thus, the advantage of using empirical relations lies not only in the reduced computational effort, but also in avoiding making highly uncertain assumptions due to lack of knowledge. On the other hand, the primary disadvantage of using empirical relations is that they neglect the effects of several source characteristic and site-specific near-shore parameters on water height. Thus, when using empirical relations for estimating tsunami runup heights, the variability in these relations must be accounted for, as discussed later in Sect. 3.8.
In this study, new scaling relations are developed using the latest tsunami runup data made publicly available by the National Geophysical Data Center/World Data Service (NGDC/WDS). The database contains tsunami runup records from all over the world and a variety of sources including historical records, post-event surveys, and research publications. In this study, the earliest record is from the year 1586 with both earthquake magnitude and runup height available. Figure 5 shows runup measurements on the west coast of South America where the case-study site is located.
Figure 6 shows the results of a linear regression (\(h = -\, 43.62 + 6.032M_{w}\)) and log-linear regression (\(\ln h = -\, 5.25 + 0.808M_{w}\)) performed on the entire water height database in the NGDC/WDS database, with \(h\) being the runup height and \(M_{\text{w}}\) being the earthquake moment magnitude. As clearly seen, there is large variance and a wide interval of water heights, which is why linear regression with respect to the earthquake magnitude is an insufficient characterization of the scaling relationship.
Uncertainties pertaining to the usage of such scaling relations are related to the heterogeneity in earthquake source variables and near-shore bathymetry. In order to effectively account for this variability in scaling, we divided the earthquake events into magnitudes intervals of \(M_{\text{w}} = 0.3\), staring from \(M_{\text{w}} 6.5\) to \(M_{\text{w}} 9.5\) (Fig. 7). A lognormal distribution of runup height is fit to each interval, the parameters of which are given in Table 6. In the stochastic event set simulation, discussed in the following subsection, the tsunami height corresponding to earthquake events will be sampled from these distributions.
As presented in Table 6, few of the higher magnitude bins have a median runup height less than lower magnitude bins. However, a positive trend can be observed with increasing magnitude: \(\ln \bar{h} = -\, 2.73 + 0.486M_{\text{w}} ,\quad R^{2} = 0.815\), where \(\bar{h}\) is the median runup height in meters. After sampling the runup heights from the distributions presented in Fig. 7 corresponding to each event in the earthquake stochastic event set, the resultant tsunami hazard curve obtained is shown in Fig. 8. Only events that occur offshore in the subduction zone with a hypocentral depth less than 30 km are considered, since tsunamigenic potential of deeper events is negligible (Tinti et al. 2005; Yamashita and Sato 1974) ± 2σ.
3.7 Multi-hazard risk analysis
Following the multi-hazard downtime estimation methodology presented in Sect. 2 and the component specific restoration functions, seismic fragility, and tsunami fragility parameters given in Sects. 3.1, 3.2, and 3.3 respectively, we can estimate the plant’s downtime for a range of combined seismic tsunamigenic events. Figure 9 (left) presents the plant’s mean downtime (Eq. 10) at various combinations of earthquake and tsunami local magnitudes. The edges of the surface at the PGA and runup axes are the single-hazard downtime curves for earthquake and tsunami, respectively. An amplification of the downtime due to the cascading effect of the two hazards is observed in Fig. 9 (right), which shows the downtime corresponding to varying levels of PGA as a function of the tsunami runup height. It is also observed in this figure that as PGA increases, the monotonic increase in the downtime with runup height decreases. This is observed due to the fact that contribution of the secondary hazard to the already high failure probability of components due to the primary hazard diminishes (see Eq. 6).
3.8 Uncertainty quantification
So far, we have assumed the basic event probabilities (i.e., component failure probabilities) to be exact, which is not a practical assumption. Some of the parameters in Tables 2, 3, and 4 are obtained from personal communications with engineers and rough estimates provided by plant management. Furthermore, the fault tree excludes external factors such as material and manpower availability, economic and political situations, and cascading events (e.g., fire, spillage) that most certainly affect the total restoration time. Lastly, the fragility and restoration parameters extracted from the literature and repositories have been derived for structures that have different structural properties, design specifications, and failure modes than the components in our case-study power plant. These uncertainties can be attributed to lack of knowledge known as ‘epistemic’ uncertainties that can be reduced in the light of additional knowledge about the component failures. In this study, a ± 40% uniform error around the nominal values of restoration and fragility parameters (Tables 2, 3, and 4) is assumed as a reasonable estimate of the epistemic uncertainty.
In addition to the epistemic uncertainty in the plant’s component parameters, uncertainty also exists in the local hazard calculation as discussed in Sects. 3.5 and 3.6. In the 10,000-year stochastic event set generated using OpenQuake, the PGA at the power plant site is drawn from a uniform distribution bounded by the minimum and maximum values predicted by the GMPE logic tree combinations. The tsunami runup heights corresponding to tsunamigenic events in the stochastic event set are sampled from the lognormal distributions given in Table 6, based on the event seismic magnitude. The ensemble of seismic and tsunami hazard curves is presented in Figs. 3 and 8, respectively.
Thus, to represent the epistemic uncertainty, a Monte Carlo simulation is completed with a total of \(N = 10,000\) realizations of the parameters that define component seismic fragility, component tsunami fragility, component restoration curves, seismic hazard, and tsunami hazard, each drawn from their respective distributions discussed above. The uncertainty propagation involves \(N\) simulations of the 10,000-year stochastic event set with nearly 23,000 events each. To ease the computational burden, events that would result in a downtime of less than one day are omitted from the simulation.
Risk is often expressed in terms of exceedance probability that gives the empirical probability that downtime exceeds a given level in 1 year. An alternative perspective is offered by the return period, which is the inverse of exceedance probability. Return period gives the time interval between which downtime is expected to exceed a given value. The process of calculating downtime exceedance probability and return period is as follows:
-
1.
Sum downtime for each year in the stochastic event set to get annual downtime for 10,000 years. Ensure total downtime does not exceed 365 days;
-
2.
Arrange the annual downtime in descending order;
-
3.
Assign an exceedance probability of \(m/10,000\) to every \(m^{th}\) downtime value (\(m = 1, \ldots 10,000\));
-
4.
Assign return period as the inverse of the exceedance probability, i.e., \(10,000 / {\text{m}}\).
Figure 10 shows the \(N = 1000\) exceedance probability curves and return period curves obtained from the Monte Carlo simulation, along with the mean curve and the two standard deviation curves.
Figure 11 shows the distribution of downtime corresponding to different return periods obtained from the Monte Carlo simulation. A normal distribution is fitted, although an unsymmetric distribution can be more appropriate as observed for 50-year return period. The variance of downtime estimates is generally found to increase with the return period.
It is important to note that the business interruption loss is not directly proportional to the facility downtime as several secondary factors come into play including supply chain disruption, post-disaster business demand, availability of labor and material for restoration, employee unavailability, policy changes, etc. Businesses can have varying levels of resiliency, wherein the lost income due to disruption can be recaptured after the recovery period by ramping up production, additional worker shifts, and overtime work. In HAZUS, a recapture factor RF is introduced as Loss = (1 − RF) × (Lost Income), where RF varies with the type of occupancy of the facility, be it industrial, educational, commercial, etc., and varies from 0 to 0.98. Industries such as power plants and hotels do not have the opportunity to recover lost income since their income relies on continuous operation. For such industries, RF will be close to 0. On the other hand, manufacturing industries and retail have a greater opportunity to temporarily boost production to recover lost income, in which case RF will be closer to 1. Park et al. (Park et al. 2011) have presented a more realistic notion of recapture factor by assuming a non-static RF that begins at the HAZUS prescribed value immediately after recovery and gradually decays exponentially. Such an approach provides a clearer picture of the loss recovery path to the facility engineers and management.
4 Conclusions
We have presented a generalized multi-hazard assessment methodology for business downtime risk that is applicable to any number of cascading and concurrent hazards. As shown through a case study of a coal-fired power plant subject to both, earthquake and tsunami hazards, the proposed methodology is amenable to a system with independent and interdependent components, modeled using fault trees, Bayesian networks, and other system modeling tools. The method relies on simulation of a stochastic event set that contains random samples of multi-hazard scenarios, such as combined occurrence of earthquake and tsunami as studied in this paper. The damage states of each system component are defined based on the time required to repair the component. The restoration time is expressed probabilistically using restoration functions. Fragility functions give the probability of damage under the different hazards considered. Using Boolean combination of damage states from multiple primary hazards and secondary perils, multi-hazard fragility curves (or surfaces) are first constructed for each system component. For each event in the stochastic event set, the component failure probability is calculated and aggregated to obtain full system failure probability.
In this probabilistic treatment, the epistemic uncertainty in specifying the fragility and restoration function as well as uncertainty in the hazard is propagated to obtain an ensemble of downtime exceedance curves and the distribution of downtime corresponding to a given return period. The proposed method focuses on business interruption as a direct consequence of physical damage to the system’s components. Other aspects of business interruption, such as the dependence on external infrastructure and supply chain risk, employee access, and regional macroeconomics (Rose and Huyck 2016), are left out of scope and are active research topics.
References
Abe K (1995) Estimate of tsunami run-up heights from earthquake magnitudes. In: Tsunami: progress in prediction, disaster prevention and warning, Springer, pp 21–35
Abrahamson N, Silva W, Kamai R (2014) Summary of the ASK14 ground motion relation for active crustal regions. Earthq Spectra 30(3):1025–1055
Abrahamson N, Gregor N, Addo K (2016) BC hydro ground motion prediction equations for subduction earthquakes. Earthq Spectra 32(1):23–44
Akkar S, Cagnan Z (2010) Local ground-motion predictive model for Turkey, and its comparison with other regional and global ground-motion models. Bull Seismol Soc Am 100(6):2978–2995
Akkar S, Sandikkaya MA, Bommer JJ (2014) Empirical ground-motion models for point- and extended- source crustal earthquake scenarios in Europe and the Middle East. Bull Earthq Eng 12(1):359–387
ALA (2001) Seismic fragility formulations for water systems. American Lifelines Alliance
Alipour A, Shafei B, Shinozuka M (2010) Performance evaluation of deteriorating highway bridges located in high seismic areas. J Bridge Eng 16(5):597–611
Alipour A, Shafei B, Shinozuka M (2012) Reliability-based calibration of load and resistance factors for design of RC bridges under multiple extreme events: scour and earthquake. J Bridge Eng 18(5):362–371
Atkinson GM, Boore DM (2011) Modifications to existing ground-motion prediciton equations in light of new data. Bull Seismol Soc Am 101(3):1121–1135
Barrientos S, Verab E, Alvaradoc P, Monfret T (2004) Crustal seismicity in Central Chile. J S Am Earth Sci 16:759–768
Basco A, Salzano E (2016) The vulnerability of industrial equipment to tsunami. J Loss Prevent Process Ind 50:301–307
Bindi D, Massa M, Luzi L, Ameri G, Pacor F, Puglia R, Augliera P (2014) Pan-European ground-motion prediction equations for the average horizontal component of PGA, PGV, and 5 %-damped PSA at spectral periods up to 3.0 s using the RESORCE dataset. Bull Earthq Eng 12(1):391–430
Boggess JM, Becker GW, Mitchell MK (2014) Storm and flood hardening of electrical substations. In: T&D conference and exposition, IEEE, pp 1–5
Boore DM, Stewart JP, Seyhan E, Atkinson G (2014): NGA-West2 equations for predicting PGA, PGV, and 5 % damped PGA for shallow crustal earthquakes. Earthq Spectra 30(3):1057–1085
Boudali H, Dugan JB (2005) A discrete-time Bayesian network reliability modeling and analysis framework. Reliab Eng Syst Saf 87(3):337–349
Campbell KW, Bozorgnia Y (2014) NGA-West2 ground motion model for the average horizontal components of PGA, PGV, and 5 % damped linear acceleration response spectra. Earthq Spectra 30(3):1087–1115
Cauzzi C, Faccioli E, Vanini M, Bianchini A (2014) Updated predictive equations for broadband (0.01–10 s) horizontal response spectra and peak ground motions, based on a global dataset of digital acceleration records. Bull Earthq Eng 13:1587–1612
Chandler AM, Jones EJW, Patel MH (2001) Property loss estimation for wind and earthquake perils. Risk Anal 21(2):235–250
Chiou BS-J, Youngs R (2014) Updated of the chiou and youngs NGA model for the average horizontal component of peak ground motion and response spectra. Earthq Spectra 30(3):1117–1153
Choe DE, Gardoni P, Rosowsky D, Haukaas T (2009) Seismic fragility estimates for reinforced concrete bridges subject to corrosion. Struct Saf 31(4):275–283
Comer RP (1980) Tsunami height and earthquake magnitude: theoretical basis of an empirical relation. Geophys Res Lett 7(6):445–448
Cornell C (1968) Engineering seismic risk analysis. Bull Seismol Soc Am 58(5):1583–1606
Doguc O, Ramirez-Marquez JE (2009) A generic method for estimating system reliability using Bayesian networks. Reliab Eng Syst Saf 94(2):542–550
Dong Y, Frangopol DM, Saydam D (2013) Time-variant sustainability assessment of seismically vulnerable bridges subjected to multiple hazards. Earthq Eng Struct Dynam 42(10):1451–1467
Douglas J (2003) Earthquake ground motion estimation using strong-motion records: a review of equations for the estimation of peak ground acceleration and response spectral ordinates. Earth Sci Rev 61(1):43–104
Drouet S (2016) A stochastic GMPE for Brazil, unpublished manuscript
Drouet S, Montalva G, Dimate M, Castillo L, Fernandez G, Morales C, Bastias N, Pirchiner M, Singaucho J, Weathermill G (2017) Building a ground motion logic tree for South America within the GEM-SARA project framework. In: 16th world conference on earthquake engineering January 9–13, Santiago, Chile
EPRI (2013) Seismic probabilistic risk assessment implementation guide. Electric Power Research Institute, Palo Alto
Faccioli E, Bianchini A, Villani M (2010) New ground motion prediction equations for T>1 s and their influence on seismic hazard assessment. In: Proceedings of the university of Tokyo symposium on long-period ground motion and urban disaster mitigation, Tokyo, Japan
Field E, Jordan T, Cornell C (2003) OpenSHA—developing community modeling environment for seismic hazard analysis. Sesimol Res Lett 74:406–419
Francis M (2006) Tsunami inundation scour of roadways, bridges and fundations—observations and technical guidance from the Great Sumatra Andaman Tsunami. EERI
Gehl P, D’Ayala D (2016) Development of Bayesian networks for the multi-hazard fragility assessment of bridge systems. Struct Saf 60:37–46
Geist EL (2012) Phenomenology of tsunamis II: scaling, event statistics, and inter-event triggering. Adv Geophy 53:35–92
Geist EL, Parsons T (2016) Reconstruction of far-field tsunami amplitude distributions from earthquake sources. Pure appl Geophys 173(12):3703–3717
GEM (2017) SARA wiki. Global earthquake model, 15 11 2016. https://sara.openquake.org/start. Accessed 03 Aug 2017
GEM (2017) Research topic 6 (RT6): A South American strong motion database and selection of ground motion prediction equations (GMPEs) for seismic hazard analysis in South America. Global Earthq Model, 12 8 2016. https://sara.openquake.org/hazard_rt6. Accessed 5 Sep 2017
Ghosh J, Padgett JE (2010) Aging considerations in the development of time-dependent seismic fragility curves. J Struct Eng 136(12):1497–1511
Gill JC, Malamud BD (2014) Reviewing and visualizing the interactions of natural hazards. Rev Geophys 52(4):680–772
Grünthal G, Thieken AH, Schwarz J, Radtke KS, Smolka A, Merz B (2006) Comparative risk assessments for the city of Cologne–storms, floods, earthquakes. Nat Hazards 38(1–2):21–44
Haraguchi M, Kim S (2014) Critical infrastructure systems: a case-study of the interconnectedness of risks posed by Hurrican Sandy for New York City, UNISDR
Hatayama K (2014) Damage to oil storage tanks due to tsunami of the Mw9.0 off the Pacific coast of Tohuku, Japan. In: Proceedings of tenth US national conference on earthquake engineering frontiers of earthquake engineering, pp 21–25
Haugen KB, Løvholt F, Harbitz CB (2005) Fundamental mechanisms for tsunami generation by submarine mass flows in idealised geometries. Mar Pet Geol 22(1):209–217
Horspool NA, Fraser S (2016) An analysis of tsunami impacts to lifelines, GNS Science Consultancy Report 2016/22. Available at https://www.eqc.govt.nz/sites/public_files/1605-Analysis-of-tsuami-impacts-to-lifelines.pdf. Accessed 8 May 2019
Iida K (1983) Some remarks on the occurence of Tsunamigenic earthquakes around the Pacific. In: Iida K, Iwasaki T (eds) Tsunamis-their science and engineering. Terra Scientific Publication Company, Tokyo, pp 61–76
Javanbarg M, Scawthorn C, Kiyono J, Ono Y (2009) Multi-hazard reliability analysis of lifeline networks. In: Technical council on lifeline earthquake engineering conference (TCLEE) June 28–July 1, 2009, Oakland, California, United States, ASCE, pp 1–8
Johnson G, Sheppard R, Quilici M, Eder S, Scawthorne C (1999) Seismic reliability assessment of critical facilities: a handbook, supporting documentation, and model code provisions. MCEER, New York
Kameshwar S, Padgett JE (2014) Multi-hazard risk assessment of highway bridges subjected to earthquake and hurricane hazards. Eng Struct 78(1):154–166
Kappes MS, Keiler M, von Elverfeldt K, Glade T (2012) Challenges of analyzing multi-hazard risk: a review. Nat Hazards 64(2):1925–1958
Kazama M, Noda T (2012) Damage statistics (summary of the 2011 off the Pacific Coast of Tohoku earthquake damage). Soils Found 52(5):780–792
Koshimura S, Oie T, Yanagisawa H, Imamura F (2009) Developing fragility functions for tsunami damage estimation using numerical model and post-tsunami data from Banda Aceh, Indonesia. Coast Eng J 5(103):243–273
Krausmann E, Cruz AM (2013) Impact of the 11 March 2011, Great East Japan earthquake and tsunami on the chemical industry. Nat Hazards 67(2):811–828
Krawcyzk C (2003) Amphibious seismic survey images plate interface at 1960 Chile earthquake. EOS Trans Am Geophys Union 84(32):301–305
Kulikov E, Rabinovich A, Thomson R (2005) Estimation of tsunami risk for the coasts of Peru and northern Chile. Nat Hazards 35(2):185–209
Kunz M, Mühr B, Kunz-Plapp T, Daniell JE, Khazai B, Wenzel F, Vannieuwenhuyse M, Comes T, Elmer F, Schroter K, Fohringer J, Munzberg TLC, Zschau J (2013) Investigation of superstorm Sandy 2012 in a multi-disciplinary approach. Nat Hazards Earth Syst Sci Discuss 1:625–679
Landucci G, Necci A, Antonioni G, Tugnoli A, Cozzani V (2014) Release of hazardous substances in flood events: damage model for horizontal cylindrical vessels. Reliab Eng Syst Saf 132:125–145
Li Y, Ellingwood B (2009) Framework for multihazard risk assessment and mitigation for wood-frame residential construction. J Struct Eng 135(2):159–168
Li Y, Song R, Van De Lindt JW (2014) Collapse fragility of steel structures subjected to earthquake mainshock-aftershock sequences. J Struct Eng 140(2):04014095
Macabuag J, Rossetto T, Ioannou I, Suppasri A, Sugawara D, Adriano B, Imamura F, Eames I, Koshimura S (2016) A proposed methodology for deriving tsunami fragility functions for buildings using optimum intensity measures. Nat Hazards 84(2):1257–1285
Mackie K, B Stojadinovic (2004) Residual displacement and post-earthquake capacity of highway bridges. In: Proceedings of the thirteenth world conference on earthquake engineering, Vancouver, Canada
Malhotra PK, Wenk T, Wieland M (2000) Simple procedure for seismic analysis of liquid-storage tanks. Struct Eng Int 10(3):197–201
Marzocchi W, Garcia-Aristizabal A, Gasparini P, Mastellone ML, Di Ruocco A (2012) Basic principles of multi-risk assessment: a case study in Italy. Nat Hazards 62(2):551–573
Mignan A, Wiemer S, Giardini D (2014) The quantification of low-probability—high-consequences events: part I. A generic multi-risk approach. Nat Hazards 73(3):1999–2022
Montalva GA, Bastías N, Rodriguez-Marek A (2016) Ground motion prediction equation for the Chilean subduction zone. Seismol Res Lett (Submitted)
Murty TS (1977) Seismic sea waves tsunamis. Bull Fish Res Board Canada 198:337
Nishi H (2012) Damage on hazardous materials facilities. In: Proceedings of the international symposium on engineering lessons learned from the 2011 Great East Japan Earthquake
Pagani M, Monelli D, Weatherill GA, Garcia J (2014) The OpenQuake-engine book: hazard technical report 2014–08. Global Earthquake Model (GEM)
Park J, Cho J, Rose A (2011) Modeling a major source of economic resilience to disasters: recapturing lost production. Nat Hazards 58(1):163–182
Petersen M, Harmsen S, Haller K, Mueller C, Luco N, Hayes G, Dewey J, Rukstales K (2010) Preliminary seismic hazard model for South America. In: Conferencia Internacional en Homenaje a Alberto Giesecke Matto, Peru
Prasad G, Banerjee S (2013) The impact of flood-induced scour on seismic fragility characteristics of bridges. J Earthquake Eng 17(6):803–828
Rose A, Huyck CK (2016) Improving catastrophe modeling for business interruption insurance needs. Risk Anal 36(10):1896–1915
Ryu H, Luco N, Uma SR, Liel AB (2011) Developing fragilities for mainshock-damaged structures through incremental dynamic analysis. In: Ninth pacific conference on earthquake engineering, Auckland, New Zealand
Silgado E (1978) Recurrence of tsunamis in the western coast of South America. Mar Geodesy 1(4):347–354
Silva W, Gregor N, Darragh R (2002) Development of regional hard rock attenuation relations for central and eastern North America. Pacific Engineering and Analysis, El Cerrito, CA. Available at http://pbadupws.nrc.gov/docs/ML0423/ML042310569
Somoza R, Ghidella M (2005) Convergencia en el margen occidental de Ame´rica del Sur durante el Cenozoico: subduccio´n de las placas de Nazca Farallón y Aluk. Revista de la Asociacio´n Geolo´gica Argentina 60:797–809
Stewart J, Douglas J, Javanbarg M, Di Alessandro C, Bozorgnia Y, Abrahamson N, Boore D, Campbell K, Delavaud E, Erdik M, Stafford P (2013) GEM-PEER task 3 project: selection of a global set of ground motion prediction equations. Pacific Earthquake Engineering Research Center, Berkeley
Suppasri A, Fukutani Y, Abe Y, Imamura F (2013) Relationship between earthquake magnitude and tsunami height along the Tohoku coast based on historical tsunami trace database and the 2011 Great East Japan Tsunami. Rep Tsunami Eng 30:37–49
Suzuki K (2008) Earthquake damage to industrial facilities and development of seismic and vibration control technology. J Syst Des Dyn 2(1):2–11
SwissRe (2013) Mind the risk: a global ranking of cities under threat from natural disasters. Swiss Reinsurance Company Ltd, Zurich
Tavakoli B, Pezeshk S (2005) Empirical-stochastic ground-motion prediction for Eastern North America. Bull Seismol Soc Am 95(6):2283–2296
Tinti S, Armigliato A, Pagnoni G, Zaniboni F (2005) Scenarios of giant tsunamis of tectonic origin in the Mediterranean. ISET J Earthq Technol 42(4):171–188
USDOE (2013) Comparing the impacts of northeast Hurricanes on energy infrastructure. US Department of Energy, Washington DC
Wang Z, Song W, Li T (2012) Combined fragility surface analysis of earthquake and scour hazards for bridge. In: Proceedings of the 15th world conference on earthquake engineering, Lisbon, Portugal, pp 24–28
Yamashita T, Sato R (1974) Generation of tsunami by a fault model. J Phys Earth 22(4):415–440
Youngs RR, Chiou BS.-J, Silva JR (1997) Strong ground motion attenuation relationships for subduction zone earthquakes. Seismol Res Lett 68(1):58–73
Zhao JX, Zhang J, Asano A, Ohno Y, Oouchi T, Takahashi T, Ogawa H, Irikura K, Thio HK, Somerville PG, Fukushima Y (2006) Attenuation relations of strong ground motion in Japan using site classification based on predominant period. Bull Seismol Soc Am 96:898–913
Author information
Authors and Affiliations
Corresponding author
Additional information
Publisher's Note
Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
Rights and permissions
About this article
Cite this article
Prabhu, S., Javanbarg, M., Lehmann, M. et al. Multi-peril risk assessment for business downtime of industrial facilities. Nat Hazards 97, 1327–1356 (2019). https://doi.org/10.1007/s11069-019-03711-3
Received:
Accepted:
Published:
Issue Date:
DOI: https://doi.org/10.1007/s11069-019-03711-3