When we talk about energy resilience, the image that usually comes to mind is a blackout. The lights go off, trains stop, mobile signals weaken and everyday routines suddenly become difficult. That image is useful because it makes our dependence on energy visible. But it can also narrow the debate. Resilience is not a switch with only two positions, namely normal operation or complete failure. It is a set of overlapping capabilities, built up layer by layer.

A recent National Gas and NESO discussion on keeping Britain’s energy secure captures this well. National Gas describes security as the ability to operate safely and reliably across credible stress scenarios: not simply meeting demand in normal conditions, but sustaining operation through disruption, uncertainty and rapid change. It identifies three foundations – designing to defined standards, preparing for cross-sector stress events and restoring capability quickly. That is a much richer way to think about resilience.

Resilience is not the same as spare capacity

It is tempting to treat resilience as a procurement problem. If we build enough power stations, pipelines, storage tanks and batteries, surely the system will be safe. Capacity matters, of course, but assets are only one part of the story. A system can have ample capacity on paper and still fail because fuel cannot reach the right place, a substation is unavailable, communications are lost, market incentives point in the wrong direction or organisations do not share the same operational picture.

The transition makes this more important. Britain is moving from a system dominated by large, dispatchable thermal plant towards one with far more weather-dependent generation, distributed assets, storage, interconnection and active demand. At the same time, gas production from the North Sea is declining and the country is more exposed to imported supply and global markets. The system is cleaner and more diverse, but also more dynamic. Resilience has to become a whole-system discipline.

Layer one: enough energy, from diverse sources

The first layer is adequacy: enough energy must be available when it is needed. Diversity helps. Wind, solar, nuclear, gas, storage, interconnectors and responsive demand all fail in different ways. A portfolio is generally stronger than dependence on a single fuel, technology or import route. Yet diversity alone is not enough. The energy must be deliverable under stressed conditions, not merely contracted or theoretically available.

This distinction is central to National Gas’s Securing Britain’s Energy policy paper. It argues for a clearer national risk appetite and a new standard for ‘deliverable commodity’ alongside existing infrastructure standards. In plain English: how much risk are we willing to accept, and can the fuel actually reach the system during a credible period of stress?

Layer two: robust networks and physical redundancy

Energy is only useful if networks can move it. Electricity lines, substations, gas pipelines, compressor stations, terminals and control systems form the physical skeleton of the economy. Robust design reduces the chance that one failure cascades into many. The gas system’s N-1 standard, for example, is intended to preserve capability after the loss of a single major piece of infrastructure.

This layer includes unglamorous work: asset maintenance, spares, vegetation management, flood protection, cyber security, workforce capability and supply-chain resilience. It also means investing ahead of obvious failure. National Gas points to targeted network reinforcement and flexible import infrastructure, including projects designed to improve the movement of LNG from western terminals. Resilience often looks like concrete, valves, control equipment and engineering work completed years before a crisis tests it.

Layer three: flexibility and optionality

A resilient system needs room to manoeuvre. On the electricity side, that may come from batteries, pumped storage, interconnectors, flexible generation or consumers changing demand. On the gas side, storage, LNG send-out, linepack and multiple entry routes can provide options. The value is not simply the amount of energy held; it is the speed, duration and location of the response.

Flexibility also prevents us from building every asset for the most extreme hour. If demand can move, if generation can respond and if networks can be operated more dynamically, the system can use existing capacity more intelligently. But flexibility must be measurable and dependable. An option that disappears when prices rise or when every country faces the same weather is not the same as firm resilience.

Layer four: shared visibility and coordinated operation

Modern energy systems are increasingly interdependent. Gas-fired power stations support electricity during low-renewable periods. Electricity powers gas compressors, telecommunications and digital controls. Transport, water, health services and data centres all rely on the same underlying networks. A local fault can therefore travel across sectors in unexpected ways.

National Gas and NESO emphasise continual information sharing, aligned forecasts and a common view of system conditions. This is resilience as coordination: the right organisations seeing the same risk early enough to act. Better sensors, forecasting and automation help, but data quality, communications and trusted relationships matter just as much as software.

Layer five: prepared people and rehearsed plans

Plans that exist only in a folder are not resilience. Operators need clear authority, practiced procedures and the confidence to make decisions under pressure. The joint National Gas and NESO discussion notes that emergency responses are tested through industry exercises. Those rehearsals expose practical weaknesses: outdated contact lists, incompatible communications, unclear handovers or assumptions that another organisation will act first.

This human layer is easy to underestimate because it is difficult to photograph and rarely appears in capacity statistics. Yet during a real incident, experienced people interpreting incomplete information can make the difference between a contained disruption and a cascading failure.

Layer six: recovery, adaptation and learning

Some failures cannot be prevented economically. Resilience therefore includes restoration: restarting networks, prioritising critical users, communicating honestly and returning to a stable state. Recovery should also make the next event less damaging. Near misses, storms, cyber incidents and equipment failures are sources of information if organisations are willing to learn from them.

Climate change adds another reason to keep adapting. Flood risk, heat, drought, coastal change and more volatile weather can alter assumptions embedded in assets designed decades ago. The resilient system is never finished; it evolves as the threat, technology and society around it change.

The deeper question is our appetite for risk

Every additional layer has a cost. Consumers ultimately pay for networks, reserves, storage, cyber protection and emergency capability. The alternative – relying on good weather, liquid global markets and equipment that never fails – also has a cost, but it arrives unpredictably and is often much larger. That makes resilience a public choice as much as an engineering calculation.

National Gas is right to ask for a clearer national risk appetite. We cannot eliminate all risk, but we can decide which disruptions are unacceptable, which services must be protected and how much insurance we are prepared to fund. Those choices should be transparent and should cover gas, electricity, digital systems and critical services together.

The central lesson is simple: keeping the lights on is the outcome, not the whole definition. Energy resilience is built from diverse supply, robust networks, flexibility, shared information, prepared people and rapid recovery. If any one layer is missing, the others are asked to do too much. If they reinforce one another, the system can bend without breaking.