Fault Tree — Data Centre Power to IT Load
Tier III power path from utility through a two-of-three generator vote and an N+1 UPS pair, exposing the transfer switch and the final rack circuit as order-one cut sets no amount of upstream redundancy touches.
Make it your own.
title "Loss of power to the IT load — Tier III hall"
mission 8760h
top "IT load de-energised" = OR(source_lost, distribution_lost)
gate source_lost "Both power sources unavailable" = AND(utility_lost, gen_lost)
gate utility_lost "Utility feed unavailable" = OR(grid_outage, hv_switchgear)
gate gen_lost "Standby generation unavailable" = KOFN(2, dg_a, dg_b, dg_c)
gate distribution_lost "Distribution path fails" = OR(ups_string, pdu_fail, ats_fail)
gate ups_string "Both UPS modules fail to support" = AND(ups_a, ups_b)
event grid_outage "Utility outage longer than 10 s" p=0.31
event hv_switchgear "11 kV switchgear fault" rate=2.0e-6
event dg_a "Diesel generator A fails to start or run" p=0.019
event dg_b "Diesel generator B fails to start or run" p=0.019
event dg_c "Diesel generator C fails to start or run" p=0.019
event ups_a "UPS module A fails" rate=8.0e-6
event ups_b "UPS module B fails" rate=8.0e-6
event ats_fail "Automatic transfer switch fails to transfer" p=0.0035
undeveloped pdu_fail "Rack PDU or final circuit fault" p=0.0012