The problem
A compressor with a six-figure replacement cost and a control-system gateway that costs a few hundred dollars sit in the same network. Scored by asset value and standalone failure probability; the method most risk registers still use, the compressor wins every time. But the gateway sits between the control room and reality: lose it, and operators lose visibility; lose visibility, and a precautionary shutdown follows regardless of whether the compressor itself is fine. The compressor likely has backups and a same-day supplier. The gateway may not.
This is not a hypothetical edge case. It is a structural blind spot in any register that scores nodes independently rather than by their position in a dependency network; and it recurs anywhere a cheap, replaceable-looking component happens to sit at a chokepoint for command, information, or authority.
Questions for the group
1. Do current integrity management or HSE risk registers capture cross-asset dependency chains at all, or is scoring still done strictly per asset?
2. Has anyone formally incorporated network or graph-based dependency mapping — as opposed to bowtie or HAZOP-style single-asset analysis — into a live risk register? What tooling was used, and what broke first when you tried it?
3. Where has a low-cost node (a gateway, a single point of authorization, a lone subject-matter expert) caused a disproportionate operational consequence in your experience? Did the existing risk process anticipate it, or only explain it after the fact?
4. Is there a case for treating supply chain concentration, cyber-physical compromise, and workforce knowledge loss as instances of one underlying problem — broken continuity of a critical flow — rather than three separate risk categories scored independently?
5. Where is an asset-centric register still the right tool? Where would dependency mapping add analytic overhead without adding real insight?
------------------------------
Brig Syed Abid Shah (Ret.)
Founder Aquarian Systematic Resilience
connect@syedabidshah.com+92 331 3330 188
Karachi Pakistan / Dubai, UAE
------------------------------