Heathrow’s outage was caused by an over-sensitive disaster recovery system, not a power loss, highlighting the risks of untested resilience and flawed infrastructure assumptions.
When Heathrow went down, they blamed the power supplier.
A fire at one substation, they said, caused the disruption. Convenient story. But it wasn’t true.
Heathrow gets power from three independent substations. Any one of them could run the airport solo. The real failure? Their internal “resilience” system kicked in when it saw a fluctuation—not a loss. And in its attempt to “protect” the infrastructure, it shut the entire thing down.
It took all day to reboot. Not because power was unavailable, but because their disaster recovery system was too sensitive to survive a real incident.
That’s what happens when resilience is theatre. Flashy systems. Fancy architecture. And no one asking the hard question: what actually happens when things get messy?
If you haven’t tested for chaos, you’ve only prepared for comfort.
Don’t confuse infrastructure spend with resilience. Resilience is what happens when your assumptions fail.
No related videos found.
If you've made it this far, it's worth connecting with our principal consultant and coach, Martin Hinshelwood, for a 30-minute 'ask me anything' call.
We partner with businesses across diverse industries, including finance, insurance, healthcare, pharmaceuticals, technology, engineering, transportation, hospitality, entertainment, legal, government, and military sectors.
Kongsberg Maritime
Bistech
ALS Life Sciences
MacDonald Humfrey (Automation) Ltd.
Schlumberger
ProgramUtvikling
DFDS
Hubtel Ghana
Philips
Graham & Brown
Boeing
Epic Games
YearUp.org
Ericson
Flowmaster (a Mentor Graphics Company)
Sage
Higher Education Statistics Agency
NIT A/S
Washington Department of Enterprise Services
Royal Air Force
Washington Department of Transport
Ghana Police Service
Nottingham County Council
Department of Work and Pensions (UK)
Trayport
Milliman
Brandes Investment Partners L.P.
Jack Links
Ericson
SuperControl