Disaster-response systems and other high-reliability organizations deliberately build redundancy — spare capacity, backup systems, overlapping roles — to remain adaptable under turbulence, yet the literature offers sharply contradictory theories about whether redundancy strengthens or undermines system performance. Building on Nowell, Bodkin and Bayoumi's (2017) typology of redundancy strategies (backup, cross-functionality, duplication, cross-checking) developed from wildfire incident case studies, and on mechanism-level critiques by Sagan, Waring and Ghaffarzadegan (common-mode dependence, social shirking, overcompensation, coordination complexity), the open problem is to establish, empirically and/or theoretically, the conditions under which each form of organizational redundancy enhances versus degrades system performance in real-world disaster-response operations. The typology has been widely reapplied to new domains, but no conditional account identifies when redundancy's benefits outweigh its risks, leaving the question open.

Background

High-reliability organizations (HROs) are organizations — such as nuclear plants, air-traffic control, hospital operating departments, and wildfire incident-response teams — that are expected to deliver nearly failure-free performance even though their tasks are complex, tightly time-constrained, and hazardous. Disaster-response systems are a paradigm case: they must remain adaptable and reliable in uncertain, turbulent environments, and their design is often organized around an incident command structure that coordinates many agencies under emergency conditions.

Redundancy is one of the oldest design ideas for such systems: duplicating a function or resource so that if one component fails, another can carry the load. Public-administration scholarship has long been ambivalent about it. Landau (1969) distinguished redundancy — deliberate duplication introduced as insurance, which he saw as rational — from mere wasteful duplication and overlap in government agencies. The safety literature then split. Normal-accident theory holds that highly interactive, tightly coupled systems (systems whose components depend on one another through unforgiving, time-pressured links) are prone to system-level accidents, so adding components and interdependencies can propagate rather than dampen failures; ethnographic work on a hospital operating department by Waring, McDonald and Harrison (2006) showed how attempts to introduce slack and loosened coupling in practice run into the common-determinant problem, in which the nominally independent backup depends on the same limited staff and equipment as the primary system, so redundancy fails exactly when it is needed. Sagan (2004) framed the general 'problem of redundancy problem' for nuclear security: more guards (a redundant layer) can produce less security through common-mode error (backup and primary failing together, e.g. through shared training or procedures), social shirking (each unit free-riding on the other's vigilance), and overcompensation (added capacity inviting riskier use). Ghaffarzadegan (2008) formalized these hypotheses in a simulation of a generic security system and found support for common-mode error and shirking as backfiring mechanisms, while overcompensation moved the system toward a fragile critical state. On the other side, the HRO tradition treats redundancy as a hallmark of resilient organizations, and resilience engineering (e.g. Woods's 2018 theory of graceful extensibility, which holds that systems need reserves of adaptive capacity to stretch beyond normal operations when surprise hits) likewise values spare capacity — while warning that statically redundant layers can themselves become brittle.

Nowell, Bodkin and Bayoumi (2017) examined this contradiction for disaster response. From case studies of three large wildfire incidents they developed a typology of four redundancy strategies — backup (a standing reserve that can substitute for a failed primary), cross-functionality (units cross-trained so they can take over one another's tasks), duplication (concurrent parallel performance of the same task), and cross-checking (independent verification of another unit's work) — and found that each type carries distinct capabilities for enhancing resilience (fault tolerance, error catching, surge absorption) together with distinct risk factors (complexity, coordination burden, dependence on shared resources) that, if unmanaged, undermine system functioning. Their contribution clarifies the management challenge; it does not settle when, and for whom, redundancy pays off. What remains unresolved is a conditional account — an identification of the mechanisms and observable circumstances under which each redundancy form improves versus degrades system performance in real organizational operations.

Problem Statement

Under what conditions does redundancy in disaster-response systems enhance system performance, and under what conditions does it instead introduce complexity and mechanisms that increase the likelihood or severity of system failure? An answer should establish, empirically and/or theoretically, a conditional account covering the principal organizational redundancy strategies identified by Nowell, Bodkin and Bayoumi (2017) — backup, cross-functionality, duplication and cross-checking — specifying the mechanisms (for example fault tolerance and error catching versus common-mode or common-determinant dependence, social shirking, overcompensation, coordination burden and resource cost) and the observable circumstances (for example coupling tightness, staffing and equipment constraints, task volatility, training and inter-unit familiarity) under which each mechanism dominates.

References

  1. Nowell, Branda; Bodkin, Candice Pippin; Bayoumi, Deena (2017). 'Redundancy as a strategy in disaster response systems: A pathway to resilience or a recipe for disaster?', Journal of Contingencies and Crisis Management 25(3), pp. 123-135. DOI 10.1111/1468-5973.12178. https://doi.org/10.1111/1468-5973.12178
  2. Landau, Martin (1969). 'Redundancy, Rationality, and the Problem of Duplication and Overlap', Public Administration Review 29(4), pp. 346-358. DOI 10.2307/973247. https://doi.org/10.2307/973247
  3. Sagan, Scott D. (2004). 'The Problem of Redundancy Problem: Why More Nuclear Security Forces May Produce Less Nuclear Security', Risk Analysis 24(4), pp. 935-946. DOI 10.1111/j.0272-4332.2004.00495.x. https://doi.org/10.1111/j.0272-4332.2004.00495.x
  4. Waring, J.; McDonald, R.; Harrison, S. (2006). 'Safety and complexity', Journal of Health Organization and Management 20(3), pp. 227-242. DOI 10.1108/14777260610662753. https://doi.org/10.1108/14777260610662753
  5. Ghaffarzadegan, Navid (2008). 'How a System Backfires: Dynamics of Redundancy Problems in Security', Risk Analysis 28(6), pp. 1669-1687. DOI 10.1111/j.1539-6924.2008.01132.x. https://doi.org/10.1111/j.1539-6924.2008.01132.x
  6. Woods, David D. (2018). 'The theory of graceful extensibility: basic rules that govern adaptive systems', Environment Systems and Decisions 38(4), pp. 433-457. DOI 10.1007/s10669-018-9708-3. https://doi.org/10.1007/s10669-018-9708-3
  7. Vakilzadeh, Kijan; Haase, Alexander (2020). 'The building blocks of organizational resilience: a review of the empirical literature', Continuity & Resilience Review 3(1), pp. 1-21. DOI 10.1108/crr-04-2020-0002. https://doi.org/10.1108/crr-04-2020-0002
  8. Thompson, Matthew P.; Belval, Erin J.; Bayham, Jude; Calkin, David E.; Stonesifer, Crystal S.; Flores, David (2022). 'Wildfire Response: A System on the Brink?', Journal of Forestry 121(2), pp. 121-124. DOI 10.1093/jofore/fvac042. https://doi.org/10.1093/jofore/fvac042
  9. Jesus, Thiago C.; Portugal, Paulo; Costa, Daniel G.; Vasques, Francisco (2024). 'Reliability and Detectability of Emergency Management Systems in Smart Cities under Common Cause Failures', Sensors 24(9), 2955. DOI 10.3390/s24092955. https://doi.org/10.3390/s24092955
  10. Peets, Ivo (2024). 'The hidden cost of excess capabilities: a threat to future military readiness', Defense & Security Analysis 40(2), pp. 211-234. DOI 10.1080/14751798.2024.2325220. https://doi.org/10.1080/14751798.2024.2325220
  11. Khaile, Thabo (2025). 'Utilizing redundancy theory to explore the plausibility of conceptualising provincial intervention in municipalities as a constitutional override mechanism: South African case', Administrative Theory & Praxis 47(3), pp. 211-230. DOI 10.1080/10841806.2024.2445933. https://doi.org/10.1080/10841806.2024.2445933
  12. Zhang, Baoshe; Yi, ByongYong (2026). 'Redundancy Strategies for Cyber Resilience in Radiation Oncology', Seminars in Radiation Oncology 39, 151053. DOI 10.1016/j.semradonc.2026.151053. https://doi.org/10.1016/j.semradonc.2026.151053
  13. Langer, Paul F.; Haag, Stefan (2026). 'AI Sovereignty: Redundant Use of Large Language Models for Public Sector Resilience', Public Organization Review (online first). DOI 10.1007/s11115-026-01021-4. https://doi.org/10.1007/s11115-026-01021-4
  14. Almaari, Faris (2025). 'Institutionalizing Redundancy: Establishing a Saudi Arabian Military Reserve Component', Alternatives: Global, Local, Political. DOI 10.1177/03043754251377874. https://doi.org/10.1177/03043754251377874