Threat to Consequence: How combined threats/hazards cascade through critical infrastructure

S. Peterson, J. Dugan, S. Molnar, M. Fein-Cole, K. Espinosa
National Laboratory of the Rockies, Colorado, United States

Keywords: cyber, infrastructure, energy, consequence, C2

The National Laboratory of the Rockies’ Threat-to-Consequence (T2C) capability is an integrated modeling and simulation platform designed to help military planners understand how compound hazards propagate across interconnected infrastructure, cyber, and human systems. The platform combines high-fidelity infrastructure models, cyber range capabilities, human impacts analysis, and faster-than-real-time simulation to quantify cascading consequences affecting mission execution, force readiness, and regional stability. Unlike traditional exercise frameworks that rely on static and isolated scenarios, T2C enables users to dynamically adjust threat conditions, infrastructure configurations, and response actions while immediately observing downstream operational impacts. T2C addresses a critical gap in current resilience planning by modeling cross-sector dependencies both inside and outside installation boundaries, including civilian-owned infrastructure systems that support military missions. The capability supports exploration of compound hazards such as hurricanes combined with cyberattacks, grid instability, fuel disruptions, and telecommunications failures. Existing demonstrations include regional scenarios in Austin, Texas and on the island of Oahu. By providing quantitative consequence metrics and interactive, exercise-ready environments, T2C enables mission owners, combatant commands, utilities, and infrastructure operators to evaluate mitigation strategies, improve continuity of operations, and strengthen mission assurance under uncertain and evolving threat conditions.