Abstract
Introduction
As the complexity of a process increases, the ability to anticipate, monitor, and measure safety decreases. Previous attempts have only looked at cause-effect relationships to analyze the safety of systems; as a consequence, it is hard to track the connections in socio-technical systems. Chemical process industries, as an instance of the safety critical systems, have to consider this issue and seek methods dealing with the problem. In conventional safety and reliability engineering approaches, human operators were considered as a cause of operational uncertainty and a source responsible for most failures in socio-technical systems [1, 2]. In contrast, contemporary approaches to safety issues, accentuate that safety critical organizations must be capable of proactively evaluating and managing the safety of their actions. This proactivity should be authorized in the organizational safety management. Moreover, traditional safety engineering perspective generally describes accidents as due to some breakdowns (i.e., human-related, technical, or organizational) or something that is not predictable in the usual organization performance. Even though safety engineering has built up influential models, a comprehensive set of techniques, and instruments and systems to investigate and develop organization safety, most of these methods have been established based on a forced linearization of intricate systems. Therefore, these methods and techniques lack adequacy of comprehensive perspective to handle the complexity of events occurring in contemporary systems [3, 4].
The resilience engineering (RE) emerged as an alternative to traditional approaches to the management of safety functions in socio-technical systems. In the resilience engineering approach, failure and success are both normal outcomes of how organizations deal with unexpected events in intricate scenarios. Organizations must deal with deviations in their functions, necessitate adjustment and adaptation of people’s activities to respond adequately to the variability, and make decisions according to the finite resources and the time available in order to achieve the system goals. A resilient system can be considered as a system in which people successfully deal with complexity under demands; and resilience engineering is a novel pattern for safety management that essentially concentrates on the improvement of methods so as to guarantee that the organization maintains or recuperates to a safe steady condition. The aim of resilience engineering is to provide tools for these developments [3]. In other words, resilience can be seen as a type of forward and proactive protection.
Several studies have been conducted to quantify and measure the resilience potential in safety-critical systems. Trijp J. et al. [5] developed a quantitativemodel and established the “dynamic operational resilience” concept to evaluate the organizational resilience of Dutch emergency response safety. They conducted a large-scale study among safety stakeholders and applied a multiple-criteria analysis (MCA) method to weight four resilience factors: “quality”, “adaptive capacity”, “management of keystone vulnerabilities”, and “situation awareness”. One limitation of their study was that the indicators they were used could not perfectly reflect the RE potential of an organization. Aleksic et al. [6] developed a fuzzy mathematical model to assess the organizational resilience in the process industries. They used the extent Fuzzy Technique for Order Preference by Similarity to Ideal Solution (FTOPSIS) to rank the RFs in the SMEs. The contribution of this work was the application of an MCDM method to rank different enterprises. Shirali et al. [7] utilized the principal component analysis (PCA) method combined with natural taxonomy (NT) to analyze and score the resilience indicators in a process industry. The indicators they used to rank different units included the “top management commitment, “just culture”, “awareness and opacity”, “preparedness”, “learning culture”, and “flexibility”.
Azadeh et al. [8] used the data envelopment analysis (DEA) method to evaluate the performance of RE factors in a petrochemical plant. They applied ten indicators for RE assessment and introduced a new concept, that is integrated resilience engineering (IRE), for the evaluation of RE. They were included four new indicators namely “Teamwork”, “Redundancy”, “Fault tolerant” and “Flexibility” to the previously developed framework to assess the RE performance. In another study, Azadeh et al. [9] applied fuzzy cognitive maps (FCM) to assess resilience engineering factors in safety-critical systems such as petrochemical plants. In this study they used the FCM method to determine the weight of the RE indicators and to rank them.
Huber et al. [10] applied the concepts of resilience engineering to grasp the organization by the examination of cognitive tasks and activities. They developed a computerized scheme to monitor human activities and to formulate indicators that can reveal system resilience. Wachs et al. [11] conducted a survey to identify and re-interpret the Non-Technical Skills (NTS) of the electricians from the RE perspective in an electricity distributor. Grecco et al. [12] developed a method that utilizes the resilience indicators to proactively evaluate and manage the safety in radiopharmaceuticals. This study was only presented the RE indicators without developing any method for ranking the process under consideration by the RE indicators. Lima et al. [13] used the RE concepts to explain how workers of the airport dealt with the complains and constraint of the work, and how it interfere in abnormal or danger situations. Again, this study did not present any method to quantify the RE in the airport.
Although some of the published papers have considered the uncertainty in the data in the field of resilience and have applied fuzzy sets to deal with this problem, there has not been a comprehensive method that could create a categorized system to analyze and rank the safety critical environments based on resilience indicators, while considering these deficiencies. Moreover, as there are many factors that can affect the RE, then resilience evaluation in socio-technical systems should be investigated from a holistic standpoint and must be regarded as a multiple-criteria decision-making (MCDM)problem.
In sum, the motivation behind this work was the lack of a comprehensive structure that can measure the resiliency potential of a complex system and, at the same time, could handle the uncertainty in the measurement process. To overcome this problem, we proposed a framework in this study that incorporates the resilience engineering indicators in Fuzzy sets and MCDM techniques; three indicators, namely Comprehensive Resilience Index (CoRI), Resilience Grade (RG), and Resilience Early Warning Grade (REWG) were also proposed to evaluate the resiliency of a safety-critical system. This paper aims to present an effective framework to establish a resilience assessment and early warning ranking scheme for socio-technical systems. With regard to the resilience assessment and early warning ranking results, appropriate safety measures aligned with the risks and hazards in the safety critical environments can be performed in order to put off and decrease the undesirable effects of the unidentified consequences of interactions between components of thesystem.
Materials and methods
The current study is an analytical cross-sectional survey that utilized the Fuzzy sets and AHP method to evaluate the RE performance. In order to present the applicability and usefulness of the proposed method for the assessment of resilience socio-technicalsystems, a gas refinery complex selected as the case study. The selected gas refinery company established 50 years ago with about 1000 personnel.
The adopted analytical hierarchy process (AHP) technique in this study, is one of the most widely used multi criteria decision making (MCDM) methods [14]. The conventional AHP takes into account the distinct judgments of decision makers. Decision-making with the AHP is accomplished in two sequential phases: [1] construction of hierarchy, which includes breaking the decision dilemma into a hierarchy of consistent decision elements (i.e., goal, criteria, and alternatives) and [2] evaluation of hierarchy, which includes extracting weights of the criteria and combining these weights and preferences to establish alternative priorities [15].
Even though the conventional AHP takes account of experts’ opinions and performs a multiple-criteria assessment, it is not capable of revealing human’s fuzzy opinions [16]. The fuzzy set theory, puts together the comparison process more flexibly and potently in order to clarify experts’ preferences [17].
In sum, the steps of the proposed method summarized as followings: Arrangement of a decision group Establishment of the evaluation framework Determination of the RE indicators weights Evaluation of the RE indicators by the DMG Calculation of the fuzzy evaluating vector Rating of resilience in socio-technical systems
Arrangement of a decision group
Initially, a decision making group (DMG)including five process engineers, three safety specialists, and two operators organized to compare the importance of resilience indicators against each other and outline a benchmark structure for resilience rating of the process.
Establishment of the evaluation framework
The second step was to conduct a survey about the indicators that could effectively reflect the resiliency of the system. After a comprehensive review of the indicators (Table 1) and considering the opinions of the DMG, we concluded that the theme presented by Grecco et al. [12] is one of the most suitable themes that can be applied to effectively assess resilience potential in oil and gas refinery complexes. This theme, which is based on the LIOH (LeadingIndicators of Organizational Health) scheme[18, 19] and consider the most applied indicators of the Table 1, incorporates six main groups of indicators including “management commitment”, “just culture”, “learning culture”, “awareness”, “flexibility” and “preparedness”. With respect to the DMG expertise, we developed some sub-indicators for each indicator as shown in Fig. 1.
RE indicators proposed by different authors
RE indicators proposed by different authors

Hierarchical structure of resiliency indicators and sub-indicators (Grecco et al. 2012).
With regard to the resilience evaluation framework (Fig. 1), the DMG were required to perform pair-wise comparisons between the first and second levels of indicators. To do this, they applied linguistic terms shown in Table 2 to compare each indicator of the first and second levels with the adjacent indicators at its own level. Then, the weights of each indicator determined as follows:
Linguistic variables and corresponding TrFNs for resilience indicators pair-wise comparison
Linguistic variables and corresponding TrFNs for resilience indicators pair-wise comparison
EI: Equally Important, EIWI: Equally Important to Weakly Important, WI: Weakly Important, WIEI: Weakly Important to Essentially Important, ESI: Essentially Important, EIVSI: Essentially Important, to Very strongly Important, VSI: Very strongly Important, VSIAI: Very strongly Important, to Absolutely Important, AI: Absolutely Important. ENIWNI: Equally Non-Important to Weakly Non-Important, WNI: Weakly Non-Important WNIENI: Weakly Non-Important to Essentially Non-Important, ESNI: Essentially Non-Important, ENIVSNI: Essentially Non-Important to Very strongly Non-Important, VSNI: Very strongly Non-Important, VSNIANI: Very strongly Non-Important to Absolutely Non-Important, ANI: Absolutely Non-Important.
A matrix was created according to the pair-wise comparisons.
After the comparison, matrices were established, and the consistency checks of the matrices performed by computing the consistency ratio (CR):
Where: λ max is the largest Eigen value of the comparison matrix. “CI” indicates the consistency index, “RI” denotes the random index, and “n” is the number of criteria that would be judged against (i.e., matrix size).
In this work, we adopt Geometric mean method to determine the resilience indicator weights [20]. Based on the previously constructed pair-wise comparison matrix , the weights determined as follows:
That l, m, n, and s are the vectors of the trapezoidal fuzzy number (TrFN) .
The indicators weights acquired as:
Subsequently, the fuzzy weight vector was determined as:
After the indicators weights was determined, the DMG were required to evaluate each indicators applying the linguistic terms that are shown in Table 3.
Linguistic variables and corresponding TrFNs for Resiliency evaluation
Linguistic variables and corresponding TrFNs for Resiliency evaluation
The rating of the overall resilience of the plant performed based on the fuzzy evaluating vector (FEV). The FEV of a specific indicator is determined based on the comparison tables, the trapezoidal fuzzy numbers in Table 2, and the fuzzy weight vector (Equation 5); it was calculated as follows:
Let we have k decision makers (D1, D2,...,Dk) and n attributes (f1, f2,...,fn). The evaluating value of the attribute f
j
presented by the decision group can be achieved by Equation (6).
Subsequently, the fuzzy evaluating matrix acquired as follows (Equation 7):
The fuzzy evaluating vector createdbased on the fuzzy evaluating matrix and calculated weights (Equation 9).
With regard to the fuzzy evaluating vector of socio-technical settings (Equation 8), the resiliency level of the system has been determined. A resilience ranking system, including two parameters, namely “resilience grade” (RG) and “resilience early warning grade” (REWG), was established as shown in Table 4. As it can be seen in the Table 4, when the resilience rating (grade) is I or II (indicated as “Red” or “Orange” early warning, respectively), it means that the resiliency is poor, and appropriate proactive and practical measures should be taken.
In order to practically demonstrate the assessment results, the fuzzy evaluating vector of the system has been characterized as a new index called “comprehensive resilience index” (CoRI). In addition, the fuzzy evaluating vector of the resilience indicators (C1-C6) were defined as “Top-level management commitment index” (TMCI), “Organizational learning index” (OLI), “Organizational flexibility index” (OFI), “Awareness index”(AI), “Just culture index” (JCI), and “Emergency preparedness index” (EPI), respectively. In order to rank the resiliency, the fuzzy scales converted into the corresponding crisp values by Equation (10), and, finally, the aforementioned indexes were determined.
Resilience rating system
As previously mentioned, in order to present the applicability and usefulness of the proposed method for the assessment of resilience socio-technical systems, a gas refinery complex was selected as the case study.
With regard to the proposed method, the results of the study are shown in Tables 5–7. Table 5 shows the pair-wise comparison of the main indicators. Each row of the Table 5 indicates the pair-wise comparison of indicators (e.g. C1/C2) in terms of the linguistic variables. According to the results of pair-wise comparison matrixes extracted from the DMG, the weights of the sub-indicators were determined by Equations 2 to 5. The fuzzified, defuzzified and normalized weights of resilience weights are shown in Table 6. Consistency checks of the pair-wise matrices indicated that all of matrices were consistent (i.e. CR <0.10). In order to make judgments against the weights of the factors and sub-factors, the fuzzy weight vectors are defuzzified by Equation (9). Resultant defuzzified and normalized weights are given in Table 6.
Main indicators pair-wise comparison’s of DMs
Main indicators pair-wise comparison’s of DMs
Fuzzified, Defuzzified and Normalized weights of resilience indicators
Resilience indicators evaluation results
It is clearly evident from Table 6 that “C1”,” C6”, “C4”, “C5”, “C3”, and “C2” ranked first to sixth, respectively. For the first indicator, “Top-management commitment” (C1), the results show that the contribution of the C1.6 indicator “Training programs” to the resilience is large, and the arrangement queue of the weight importance of the sub-indicators within the “C1” is C1.6 > C1.2 > C1.1 > C1.3 > C1.5 > C1.4 > C1.7, respectively. In other words, one can say that “Training programs” plays the most important role in the “Top- management commitment” resilience evaluation. This means that one way to improve the RE performance is to focus on training programs for the personnel. As for other sub-indicators, one may be referred to Table 6 to obtain the importance of each sub-indicator within the six main indicators.
Based on the initial assessment results, the assessment value of each sub-indicator is determined by Equation (6). Consequently, the fuzzy evaluating matrix was acquired. Later, the fuzzy evaluating vectors in each of the hierarchies are determined by Equation (8). The assessment results of the fuzzy evaluating vectors are presented in Table 7.
According to Table 7, the resilience potential of the gas refinery can be analyzed. Fig. 2 demonstrates the membership function sketch of the gas refinery in contrast to the five evaluation grades (viz., VG, G, M, P, and VP). As shown in Fig. 2, the resilience grade of the gas refinery is positioned between medium and good grades (i.e., the defuzzified value of 5.151). As for the main indicators (C1-C6), their evaluation results are positioned between medium and good, except for C3, with its value located between poor and medium. Therefore, it can be concluded that the “Organizational flexibility” of the refinery plant is not very good (Fig. 3).

Membership grade of the Gas Refinery (comprehensive resilience index).

Membership grades of sub-indicators.
With respect to Figs. 2 and 3 that show the defuzzified values of the evaluation results, “top-level commitment index”, “Organizational learning index”,“Organizational flexibility index”, “Awareness index”, “Just culture index”, and “Emergency preparedness index” of sub-indicators equal to 5.089, 4.553, 3.096, 5.007, 5.627, and 5.78, respectively.
Based on the presented framework for the resiliency evaluation (Table 4) as well as Table 7,it is evident that, for the refinery complex, the “comprehensive resilience index” (CoRI) equals to 5.151, and consequently, the “resilience grade” (RG) and “resilience early warning grade” (REWG) ranked as “III” and “NEWZ”, respectively. As “RG” of the refinery plant is positioned outside of the warning zone of the early warning system, it does not require any further attention about the resiliency of the plant. However, with a brief look at the sub-indicators evaluation results, it can be seen that although the REWG of the refinery is located outside the warning zone, any negligence may cause the sub-indicators to shift the current position of the “comprehensive safety index” and incline it to the warning zone I or maybe II. For the six main indicators, RG and REWG ranked as “III” and “NEWZ”, respectively, except for C3 in which RG ranked as “II,” and the corresponding REWG ranked as “OEWZ”. This means that the current state of the “organizational flexibility” is located in the orange early warning zone (OEWZ) of the warning system, and, accordingly, appropriate measures must be taken to improve the condition of this indicator. RG and REWG of the sub-indicators are also shown in Table 7. As it can be seen in the Table 7, REWG and RG of the indicators C1.4, C1.6, C2.1, to C2.9 (except for C2.4, C2.5, and C2.8), C3.1 to C3.6, C4.1, C4.3, C4.5, C4.6, C5.1, and C5.4 ranked as “OEWZ” and “II”, respectively. This piece of finding shows that if those mentioned sub-indicators are not be corrected, the comprehensive resilience index of the system must be reallocated to the “OEWZ” or, even worse, to the “REWZ”.
The first step of this study was to develop a new framework for RE performance evaluation and to test it in a real word application (gas refinery plant). It may be suggested to further validate the proposed method, the output of the suggested model (i.e. Resilience Grade) be compared with the near misses prevalence and investigate their correlation, in future works.Also the subjectivity of the expert opinions about the weight of the RE indicators may be another limitation in the assessment of RE performance. In this regard, it is recommended that it will be helped from the power of objective weighting method such as Shannon’s entropy to promote the efficiency of themethod.
There are many methods to analyze and manage safety in working environments; nevertheless, because of the tight coupling and intricate connections between components, tracking the changes in the performance of the systems in socio-technical settings is next to impossible. To deal with this problem, new approaches can be advantageous. Resilience engineering is a new approach that, in contrast to the traditional safety analysis methods, looks at what a system does instead of what it has. Even though there have been several research attempts focusing on the quantification of resilience, none of them has offered a comprehensive framework that can measure and evaluate resiliency potential of safety-critical systems. This work, thus, proposed a hierarchical framework based on resilience indicators and utilized the fuzzy set theory to deal with the uncertainty associated with input data. The proposed structure introduces “CoRI” and “REWG” concepts to evaluate resiliency in safety-critical systems. The results of the case study also showed the applicability of the proposed framework and the feasibility of the method in the conditions of vagueness and ambiguity, which is a characteristic of socio-technical systems. The proposed model can be used by the managers to be warned in case of deterioration of resiliency and shifting from the safe boundaries of the system to unsafe regions.
Conflict of interest
The authors have no conflict of interest to report.
Footnotes
Acknowledgments
This study was part of a PhD thesis supported by Tehran University of Medical Sciences, School of Public Health, Department of Occupational Health Engineering. The National Iran Gas Company (NIGC) is acknowledged for their financial support of this research. In addition, the authors express their full thanks to the member of expert’s panel of the NIGC for their kind corporation valuable comments in this study.
