← Archive

The Chain Is Only as Strong as Its Weakest Link — Until You Add a Second Chain

by ·July 28, 2026·1 min read·Computer Science & AI
Source: Engineering systems theory; popularised in software by Gene Kim et al., "The Phoenix Project" (2013)

A single point of failure is any component of a system whose failure causes the entire system to fail. The term comes from engineering but the concept applies to supply chains, organizations, financial systems, biological organisms, and infrastructure of every kind. A system with a single point of failure is, by definition, only as reliable as that one component — regardless of how reliable everything else is.

Redundancy is the engineering solution: add duplicate or alternative components that can take over if the primary fails. An aircraft has four engines; it can fly on one. A hospital has backup generators; it can operate if the city grid fails. The internet was designed with redundant routing paths so that no single node failure can disconnect the whole network. A RAID array stores data across multiple drives so that any single drive failure loses nothing.

The math of reliability

If a single component has reliability r (probability of working over a given period), then a system of n such components in series (all must work) has reliability r^n. Reliability compounds downward: a system of ten components each with 99% reliability has overall reliability of 0.99^10 ≈ 90.4%. Add enough components and even highly reliable parts produce unreliable systems.

Redundant components in parallel work differently: two components with reliability r in parallel have reliability 1 - (1-r)². Two 90% reliable components in parallel give 1 - (0.1)² = 99% reliability. The probability of failure is the probability that both fail, which requires both independent failures to coincide.

This is why redundancy is standard in aviation, nuclear power, telecommunications, and any domain where failure is catastrophic. The cost of carrying redundant systems is paid back many times by the elimination of catastrophic failure modes.

Single points of failure in organizations

Organizations frequently have human single points of failure: the founder who holds all key relationships; the engineer who is the only person who understands the legacy codebase; the salesperson who generates 80% of revenue; the researcher who is the only one who knows how to run the critical experiment.

When these people leave, become ill, or make errors, the organization discovers it has been relying on a human single point of failure — often too late to do anything about it. The mitigation is documentation, cross-training, succession planning, and distributed knowledge: the organizational equivalent of maintaining a second drive in the array.

Supply chains expose the same pattern. Just-in-time manufacturing, designed to minimize inventory cost, produces supply chains with no buffer and no redundancy. When a single Taiwanese semiconductor fab was disrupted in 2021, the automotive industry discovered it had a single point of failure in its component supply — a $250 chip without which a $40,000 car could not be completed. The efficiency gain from eliminating inventory was demolished by a single disruption.

N+1 redundancy and beyond

Engineers formalize redundancy as N+1 (one spare beyond what's needed for normal operation), N+2 (two spares), or 2N (full duplication). Data centers typically operate at N+1 power and cooling — if any one component fails, the others absorb its load. Financial institutions maintain capital reserves beyond regulatory minimums specifically to have excess capacity absorb unexpected losses.

Geographic redundancy extends this principle spatially: critical infrastructure replicated across locations so that a regional disaster (earthquake, flood, power outage) doesn't trigger complete failure. Cloud providers operate multiple availability zones — isolated data centers in the same region — so that a fire, power failure, or network issue at one facility doesn't affect the service. Active-active geographic redundancy means traffic is served from multiple locations simultaneously; if one goes down, others immediately absorb its load with no failover delay.

The tradeoffs

Redundancy costs: double the components means double the capital cost, double the maintenance, double the complexity, and — crucially — more possible failure modes, because the redundant system introduces its own components that can fail. If the failover mechanism itself fails when it's needed, you have the worst of both worlds: the primary failed and the backup didn't kick in. This is why failover systems must be tested regularly under realistic conditions, not just confirmed to exist.

There is also a behavioral response to redundancy known as risk compensation or the Peltzman effect: when people know a safety system exists, they take greater risks than they otherwise would. Seat belts may make drivers more aggressive. Avalanche airbags may encourage skiers into more dangerous terrain. The redundant system provides false confidence that reduces overall caution.

Quick answers

What is Redundancy & Single Points of Failure?

Redundancy eliminates single points of failure: the engineering principle that reliable systems require backups for every critical component.

Where does this concept come from?

The concept originates with Engineering systems theory; popularised in software by Gene Kim et al., "The Phoenix Project" (2013).

Dr Nadeem Khudboddin Shaikh
Dr Nadeem Khudboddin Shaikh
Ex–Wells Fargo · Ex–Goldman Sachs · Columbia University alumnus