GUARD FROM THIS DEPENDENCY.
THIS DESK RECEIVES: MECHANISM INTEGRITY, RESILIENCE ASSUMPTIONS, MITIGATION OPTIONS, OPERATIONAL DEPENDENCIES AND ENGINEERING TESTS.
DRIFT SYSTEMSHIDDEN DEPENDENCIES.
DISCOVERED OPPORTUNITIES.
EACH ROW SHOWS A SEPARATE DECISION PATHWAY THROUGH RDM-03: WHAT THIS DESK MAY NEED TO GUARD FROM THE DEPENDENCY, WHAT THE DEPENDENCY COULD HELP IT CREATE, AND WHICH DECISION MAY CHANGE.
| # | Decision area | Guard from this dependency | Create with this dependency | Decision question |
|---|---|---|---|---|
| 01 | INITIATING MECHANISM | A generic 'data-centre risk' label can hide whether correlated load withdrawal is actually plausible. | Mechanism-level analysis can separate RDM-03 from ordinary outage or equipment-failure narratives. | What exactly must initiate for RDM-03 to occur? |
| 02 | LOAD BEHAVIOUR | Large computational loads may not behave independently during grid disturbance. | Understanding protection and disconnection behaviour could reveal where synchronisation is plausible or bounded. | Under what conditions could large loads disconnect in a materially correlated way? |
| 03 | GRID RESPONSE | A rapid loss of load can create frequency or voltage effects outside the immediate site. | A system-response map could identify where propagation is physically credible and where it stops. | What grid response would have to follow the initiating event for RDM-03 to matter? |
| 04 | PROTECTION SYSTEMS | Protection logic may either amplify correlated withdrawal or prevent it. | Testing protection assumptions could identify mitigation already present in the system. | Which protection settings or architectures would strengthen or weaken RDM-03? |
| 05 | REDUNDANCY / BACKUP | Site redundancy may protect the data centre without removing the system-level dependency. | A distinction between site resilience and grid compatibility could improve engineering assurance. | Where could conventional resilience measures fail to address the RDM-03 mechanism? |
| 06 | PROPAGATION PATH | The wider consequence is modelled rather than observed end-to-end. | A bounded propagation analysis could identify the minimum chain that must survive before insurance relevance is considered. | Which links in the RDM-03 pathway are necessary, and which are speculative? |
| 07 | MITIGATION | Controls may already exist that materially reduce the probability or severity of the dependency. | The same analysis can identify high-leverage interventions instead of merely describing exposure. | Which interventions could most directly break the RDM-03 chain? |
| 08 | DISPROOF | Technical analysis can drift into confirmation unless explicit falsifiers are defined. | A disproof-led test can eliminate weak dependency claims early. | What observation would make the technical team reject RDM-03? |
This is the governing question for this decision territory. The matrix above decomposes it into the smaller consequences, opportunities and questions that can be tested independently.
THIS DESK RECEIVES: MECHANISM INTEGRITY, RESILIENCE ASSUMPTIONS, MITIGATION OPTIONS, OPERATIONAL DEPENDENCIES AND ENGINEERING TESTS.
THIS DESK RECEIVES: ASSURANCE, MITIGATION, RESILIENCE SERVICES AND ENGINEERING CONTROLS AROUND THE DEPENDENCY.
RDM-03 evidence boundary: initiating events observed; wider propagation modelled; correlation inferred; insured consequence unproven. GUARD, CREATE and DECISION QUESTION rows are outside-in decision views, not claims about any institution's actual portfolio, models or internal position.
This desk is also published as a function of the Reinsurance surface: Technical Risk / Engineering →