In an era of climate-driven extremes and aging infrastructure, that calculus is more urgent than ever. The lights stay on not because engineers hope for the best, but because they have learned—from Roy Billinton—to calculate the darkness. If you are specifying redundancy for any critical system (power, water, data, transport), do not guess. Apply the Billinton-Allan methodology: enumerate failure states, assign probabilities, compute LOLP or SAIDI, and only then decide. Your budget—and your customers—will thank you.
The feature that defines Billinton’s work is this: In an era of climate-driven extremes and aging
Billinton’s answer——transformed engineering from a field of deterministic margins (add 20% safety buffer) into a science of calculated risk. His seminal work, particularly "Reliability Evaluation of Engineering Systems: Concepts and Techniques" (co-authored with Ronald N. Allan), remains the bible for ensuring that power grids, factories, and spacecraft don't just seem safe—they are provably reliable. The Flaw in "Worst-Case" Thinking Before Billinton, most engineering systems used a deterministic approach: design for the single worst contingency (e.g., the largest generator failing). This sounds prudent, but it’s economically and technically naive. This sounds prudent
Imagine designing a city’s power grid for the once-in-a-century ice storm. You’d build five redundant lines—and then charge residents $500/month. Worse, the deterministic method ignores probability . A small generator failing 10,000 times a year is far more disruptive than a large generator failing once a decade, yet the old method treated both as identical "contingencies." His seminal work