Situational Awareness Persistence Under Compound Stress

Every resilience framework makes an assumption so fundamental that it is rarely stated: that the actors responding to a crisis can see the crisis. That decision-makers have access to a sufficiently accurate picture of what is happening — where the failure is, how fast it is spreading, what resources remain available, and what actions are still possible.

This assumption is so deeply embedded in crisis management doctrine that it has become invisible. Plans describe what to do when power fails. They describe backup communication channels. They describe command structures for degraded conditions. What they rarely describe is what happens when the capacity to perceive the situation itself is compromised — when the information infrastructure that provides the basis for any decision has failed, is failing, or is producing outputs that cannot be trusted.

Situational awareness — the shared understanding of a current operational state that makes coordinated action possible — is itself an infrastructure. It depends on sensors, networks, processing capacity, data integrity, and the institutional structures through which information becomes actionable knowledge. Like all infrastructure, it can fail. Unlike most infrastructure, its failure is rarely anticipated in the plans it is supposed to support.

The ACI compound stress framework, developed in WP-005, describes configurations in which multiple stressors interact simultaneously rather than sequentially. The compounding effect is not merely additive: each stressor can amplify the impact of others, and the combination can produce failure modes that would not occur under any single stressor in isolation.

In the energy domain, WP-005 identifies a specific configuration relevant to Finland: the simultaneous degradation of dispatchable generation capacity, fuel supply security, cross-border interconnection availability, and institutional response capacity. Each of these stressors has been studied individually; their interaction has received less systematic attention.

The present paper applies the same analytical lens to a domain that sits one level above physical infrastructure: the information and intelligence systems that provide situational awareness of that infrastructure. When energy stress occurs simultaneously with communications stress and institutional capacity stress, the awareness systems themselves become part of the failure cascade rather than tools for managing it.

The distinction between physical infrastructure failure and awareness discontinuity is analytically important. A physical failure is a fact about the world. Awareness discontinuity is a fact about the relationship between decision-makers and the world. Both require response, but they require different responses, and conflating them — treating awareness discontinuity as simply another consequence of physical failure rather than as a distinct failure mode with its own preconditions, dynamics, and countermeasures — is itself a structural vulnerability.

Awareness discontinuity under compound stress does not typically occur as a single event. It follows a characteristic degradation sequence in which the components of situational awareness fail in a predictable order — though the speed of that sequence and the point at which it becomes irreversible vary with the specific configuration of stressors.

Stage 1 — Peripheral degradation

The outermost sensing layer degrades first. Remote sensors, distributed monitoring stations, and network endpoints depend on continuous power and connectivity. When either is interrupted — even briefly, even partially — the data stream from these sources becomes intermittent, delayed, or absent. Decision-makers begin working with an incomplete picture. Gaps are initially small and are often compensated by interpolation from adjacent data sources.

Stage 2 — Transmission failure

The communications layer that aggregates sensor data and distributes it to decision support systems depends on the same infrastructure it is meant to monitor. Cellular networks, fixed-line data infrastructure, and internet-dependent cloud services share power dependencies with the systems they serve. Under extended or geographically widespread stress, the communications layer fails not at the edges but at the aggregation nodes — the points where data from multiple sources is consolidated into the common operating picture. The picture does not go dark uniformly; it develops blind spots that are themselves not always visible to those relying on it.

Stage 3 — Processing capacity loss

Centralised data processing and decision support systems — whether cloud-hosted or located in large facilities — depend on continuous, high-quality power and communications. Under compound stress, these systems are subject to both direct power failure and to the loss of the input data streams they require to function. A processing system that receives degraded, incomplete, or delayed inputs produces outputs of corresponding quality. Decision-makers relying on automated analysis during this stage may be working with outputs that are technically plausible but operationally misleading.

Stage 4 — Institutional processing failure

The final stage of the awareness cascade is the failure of the human and institutional layer that interprets data and converts it into decisions. This layer depends on functional communications between individuals and organisations, on shared reference frameworks that allow distributed actors to coordinate interpretation, and on sufficient cognitive and institutional bandwidth to process uncertainty under stress. Under compound stress, this layer is subject to information overload from degraded, conflicting, or absent data streams — and simultaneously to the resource constraints described in WP-003's Institutional Termination Time framework. Decision-makers may have access to some data but lack the capacity to integrate it into coherent situational understanding.

Awareness discontinuity is not merely an information problem. It is a decision problem. The purpose of situational awareness is to support action: to enable decision-makers to allocate resources, issue instructions, coordinate responses, and adjust plans as the situation develops. When awareness fails, the decision chain fails with it — but in ways that are not always recognised as awareness failures.

Three specific failure modes in the decision chain are analytically distinct from physical infrastructure failure and merit attention in their own right.

The question that follows from the above analysis is structural rather than operational: what properties must an awareness platform possess in order to remain functional — at minimum viable level — through a critical period of compound stress? We identify five structural properties that distinguish persistence-capable platforms from those that degrade with the infrastructure they monitor.

These five properties are not independent. A platform that satisfies P-1 through P-3 but lacks P-4 may produce locally-generated but unverifiable outputs that cannot be trusted under adversarial conditions. A platform with excellent degradation transparency but insufficient local processing may correctly inform decision-makers that it is failing — but fail to provide the minimum viable picture that would allow them to act on that information. The properties form a coherent set; partial satisfaction of the set does not constitute persistence capability.

Satisfying the five structural properties identified in §05 is necessary but not sufficient for awareness persistence through compound stress. Three additional failure conditions can undermine platforms that meet all five structural requirements.

Failure condition F-3 deserves particular attention because it describes a process that is ongoing and largely invisible. Awareness platforms are subject to continuous operational pressure to reduce cost, increase efficiency, and integrate with broader organisational systems. Each individual optimisation decision is reasonable; the cumulative effect may be the progressive elimination of precisely those properties — local redundancy, local processing, independence from external dependencies — that constitute persistence capability. This drift is structural in the same sense that WP-004's recovery capacity invariants describe structural drift: it occurs as the normal consequence of routine optimisation rather than through deliberate choice, and it is only visible when the stress conditions it was protecting against actually occur.

The analysis developed in this paper is not specific to Finland. The gap between the assumption of situational awareness and its structural provision is a general feature of resilience planning that has received growing recognition across multiple institutional contexts in recent years — though the conclusions drawn from this recognition have not yet converged on a common structural response.

The Nordic region has been among the first to name the problem at a systemic level. A 2025 analysis of digital resilience in Denmark, Norway and Sweden identified what it termed a "Black Sky" scenario — the convergence of physical sabotage, cyberattack, and weak coordination into a digital breakdown lasting days across large geographic areas — as a real and rising risk. Critically, the analysis noted that existing preparedness is fragmented by sector and by national boundary, and that the practical exercise of multi-sector, multi-day disruptions has not been systematically undertaken. The gap between formal resilience commitments and tested operational capability is the gap in which awareness discontinuity lives.

A parallel finding emerged from an October 2025 cloud infrastructure outage that caused government agencies and critical enterprises across several European countries to lose primary communication channels simultaneously. The episode illustrated what has been described as the difference between redundancy and autonomy: systems that were formally redundant — operating across multiple cloud environments — failed in concert because they shared authentication dependencies on a single external provider. Redundancy that does not extend to independence from shared dependency structures does not constitute resilience against compound failure.

The military domain has engaged this problem more directly, under the concept of operations in contested or communications-degraded environments. The analytical question — how does a forward-deployed unit maintain coherent situational understanding when it cannot rely on communication with centralised systems? — is structurally identical to the civilian infrastructure question, though the operational context differs. The solutions developed in that context — distributed sensing, local processing, integrity verification without external authority, explicit degradation transparency — correspond closely to the structural properties identified in §05 of this paper.

The convergence of these findings across different domains and institutional contexts suggests that awareness persistence under compound stress is a general architectural challenge that has been independently identified by practitioners in multiple fields. What has not yet occurred is the translation of that understanding into systematic design requirements for civilian critical infrastructure awareness platforms — requirements that would make persistence capability a specified and auditable property rather than an assumed background condition.

This paper is the first in the ACI Working Paper series to address Domain D-6 directly. Its relationship to the earlier papers in the series is both additive and corrective.

It is additive in that it applies the compound stress methodology of WP-005 to a domain — information infrastructure — that WP-005 identified as critical but did not analyse in detail. WP-005 described the conditions under which compound stress produces cascading physical failure; WP-007 describes the conditions under which those same stressors simultaneously undermine the awareness capacity needed to respond to that failure.

It is corrective in a specific sense: the recovery capacity framework of WP-004 defines three invariant dimensions — absorption capacity, continuity capacity, and transformation capacity — whose measurement implicitly assumes that decision-makers have access to accurate situational awareness throughout the recovery process. Where awareness discontinuity occurs, WP-004's framework may describe recovery capacity that is technically present but operationally inaccessible: capacity that exists in the physical system but cannot be mobilised because those who would mobilise it cannot see the situation clearly enough to act.

The Institutional Termination Time concept developed in WP-003 is directly relevant here. ITT describes the temporal constraint on institutional decision capacity: the window within which a decision must be made to remain effective. Awareness discontinuity compresses the effective ITT without changing the nominal one — it reduces the time during which decision-makers have the situational understanding needed to act, while the physical window during which action would be effective remains unchanged. The result is a systematically shorter decision window than the institutional architecture is designed to accommodate.

This paper establishes a framework and identifies structural properties; it does not provide empirical measurements of awareness platform persistence capability in specific operational contexts. The following questions represent the natural development of this framework into applied analysis.