Industrial Energy Supply Security: A Six-Lever Resilience Framework

Industrial Energy Supply Security: A Six-Lever Resilience Framework

ANFAXIS Energy Intelligence · 23 September 2026 edition

Executive takeaway

Supply security is measured at the point of use, not by supplier count or the capacity printed on a tank. The decisive question for an industrial site is whether specification-compliant product will become usable again before available inventory runs out, with sufficient headroom. Six levers must work together: sourcing, contracts, inventory, logistics, quality and contingency planning. This framework tests that alignment, makes the economic trade-offs explicit and assigns each decision to an accountable owner.

Which Moroccan market facts matter to the buyer?

These figures describe a market, not a reserve available to the business. They establish neither a customer’s usable inventory nor its replenishment lead time or backup capacity. Translating national context into site protection therefore requires operational evidence specific to the facility.

What does securing an industrial site’s energy actually mean?

It means sustaining priority activities through a disruption and restoring the intended operating level under controlled conditions. The International Energy Agency frames energy security around reliable, affordable access to energy sources. At industrial level, that objective must become measurable requirements for availability, quality, safety and timing. [2]

Liquid fuels provide the main operational example in this article. The continuity logic has wider relevance, but it is not an electrical protection study, an engineering design or a regulatory assessment. A standby generating system, a thermal process and a mobile fleet do not automatically require the same protection strategy.

ISO 22301:2019 provides a business continuity management framework. The six-lever approach below is an editorial synthesis for supply decisions; it is neither a method prescribed by ISO nor a certification. [3]

The distinction matters commercially. A sourcing contract describes commitments, while continuity planning tests whether the complete operating system can deliver the required outcome. A buyer should therefore examine the contract, the physical chain and the site’s own readiness together, rather than expecting any one of them to compensate automatically for weaknesses in the others.

What should be diagnosed before selecting a solution?

Start with the consequences of interruption, then work backwards to the potential causes. For each activity, establish normal consumption, peak demand, the technically acceptable minimum, tolerable interruption and restart conditions. A monthly average is insufficient where a few operating hours determine the exposure.

Separate production demand from the energy needed to maintain a safe condition. A plan may include reduced operation, but only through procedures approved by the competent site owners. Inventory recorded as available never overrides a safety restriction or a quality hold.

Keep the detailed assessment access-controlled. Supplier identities, site stocks, access arrangements and sensitive procedures belong in an operational dossier, not in a public account of the facility’s vulnerabilities.

Which six levers make the supply chain more resilient?

1. Diversify dependencies, not just suppliers

Two contracts do not necessarily create two independent supply chains. Within appropriate confidentiality boundaries, ask which origins, loading facilities, routes, carriers and critical resources support each offer. Then test their exposure to a shared disruption. The number of contracting entities becomes secondary when every delivery relies on the same bottleneck.

Qualify the alternative before an incident: acceptable product, verified counterparty, physical access, mobilizable volume, timing and commercial arrangements. A promise to “source elsewhere” is not evidence of an executable route. Where independence cannot be demonstrated, retain that uncertainty in the assessment rather than burying it in a reassuring average score.

The objective is not maximum duplication. It is protection against the dependencies that could defeat the site’s actual operating priorities, using alternatives that can be activated under the conditions being tested.

Decision required: identify the remaining common-mode failure and assign an owner to reduce it.

2. Contract for continuity and make it fundable

The contract should explain what can be ordered, confirmed, delivered and revised when conditions deteriorate. Examine nomination windows, volume tolerances, allocation rules, reporting obligations, emergency-purchase arrangements and responsibilities at each handover. Have qualified advisers assess force majeure, remedies and insurance: their effect depends on the agreement and applicable law.

A potential penalty does not replace a delivery. Equally, a commercial option remains theoretical if nobody can commit the expenditure or the credit limit is exhausted. Procurement, operations and treasury should agree usable authority, spending limits and an accelerated documentation route without removing essential controls.

Test the timing of internal approvals as carefully as transport timing. A supplier may be ready while the buyer is still waiting for purchase-order release, a guarantee or a settlement decision. The financial route is part of readiness, not an administrative afterthought.

Decision required: establish who can activate, authorize and pay for the alternative, and how quickly.

3. Manage usable inventory rather than nominal tank capacity

A tank’s capacity describes its holding volume, not its fill level, product ownership, conformity or withdrawability. Reconcile physical measurement with inventory records, operating restrictions and quality status. Exclude unavailable quantities without deducting the same volume twice.

Inventory held by a third party also requires withdrawal rights, loading access and transport to the site. Presenting it as immediately usable onsite reserve would misstate protection. Morocco’s published administrative procedures distinguish, among other matters, new storage capacity, depot creation and commissioning. A proposed storage response must account for the applicable authorizations. [4]

For planning purposes, make the definition of usable stock explicit and consistently applied by procurement, operations and finance. A dashboard that changes its stock boundary between normal and emergency conditions can give a false impression of improvement.

Decision required: set replenishment rules from lead time, variability and accepted risk rather than an arbitrary number of inventory days.

4. Test the complete time to usable resupply

The relevant clock does not stop when a truck reaches the gate. It starts when the requirement is activated and ends when compliant product is available for its intended use. Include confirmation, allocation, preparation, loading, transit, receipt and quality release. Some activities overlap: model the critical path instead of mechanically adding every duration.

Assess normal operations, peak demand and disrupted conditions separately. For each, verify slots, admissible transport, staffing, access and receipt procedures. A shorter road route is not necessarily an executable alternative. Also test information continuity: an unavailable purchase order, authorization or booking system may delay mobilization.

Document the basis of the stressed lead time. An observed delivery history, a contractual commitment and a supplier estimate are different forms of evidence. None should be presented as a demonstrated worst-case bound without justification.

Decision required: adopt an evidenced stressed resupply lead time, with its assumptions and uncertainties visible.

5. Protect quality under emergency conditions

Product that has arrived but is non-conforming does not restore continuity. Morocco’s National Energy and Mines Laboratory describes petroleum conformity checks, sample analysis and analytical reporting among its functions. Physical presence and fitness for use are therefore separate questions. [5]

The supply plan should identify specifications, documents, control points, batch identification and release responsibilities. Provide for an isolated batch and its replacement without bypassing the quality decision. Verify that a backup product is compatible with equipment, applicable requirements and site procedures; urgency is not technical approval.

Quality owners should participate in the continuity exercise, not merely receive the delivery paperwork afterwards. Their release decision changes the quantity usable by operations and can therefore change the required activation time for a replacement supply.

Decision required: know the remaining usable reserve when a batch is held, and who is authorized to determine its disposition.

6. Turn contingency plans into tested decisions

Connect an observable signal to an action, an authority and a deadline. For example, when revised resupply time exceeds available autonomy less the chosen buffer, the designated owner escalates or initiates the agreed response. That threshold must be approved for the particular site; it is not a general regulatory rule.

Use a tabletop exercise to test whether contacts, evidence and decisions are available. Include a combined event rather than one isolated delay: quarantined inventory alongside a late alternative carrier, for example. Separate simulated steps from demonstrated capability. A successful telephone call is not proof that a complete physical delivery has been executed.

Capture unresolved issues with owners and deadlines. Management should know whether a scenario is covered, conditionally covered or still exposed, and which assumptions must hold for the proposed response to work.

Decision required: close gaps with accountable owners, due dates and evidence of resolution.

How should usable inventory autonomy be calculated?

Autonomy is the time during which usable inventory covers a defined consumption profile under explicit receipt assumptions. For an initial test with no incoming deliveries and constant consumption:

Autonomy, days = usable inventory, m³ ÷ selected consumption rate, m³/day.

Coverage margin, hours = autonomy, hours − resupply time to usable product, hours.

Volumes must share a consistent measurement basis. Do not convert tonnes into cubic metres without an appropriate density and reference conditions. For multiple products, consumption streams or partial deliveries, model flows over time: an aggregate average can conceal depletion of an indispensable product.

Worked illustration: 500 m³ present does not provide five days of cover

Every value below is hypothetical. The example describes neither a customer nor an ANFAXIS facility, and it sets no legal minimum. A site contains 500 m³ of product. Two separate restrictions affect 50 m³ that cannot be withdrawn and 50 m³ under quarantine. Usable inventory is therefore 400 m³. At 100 m³/day, it provides four days, or 96 hours, of autonomy.

This is not a minor accounting correction. Treating the entire 500 m³ as available reserve would overstate cover by 24 hours. The decision depends on stock that is both accessible and released, not on the most favourable headline measure.

What does a 72-hour or 120-hour resupply test reveal?

It reveals the gap between how long the site can continue and how long it takes to make product usable again. In the same illustration, no deliveries occur before the tested arrival time. Demand remains constant; where priority operation is used, it starts at hour zero and assumes prior technical and HSE approval.

Reducing consumption from 100 to 80 m³/day therefore does not eliminate exposure in the 120-hour scenario: it merely brings depletion and arrival to the same point. Covering that lead time with an illustrative 24-hour planning buffer requires 80 × 6 = 480 m³ of usable stock, or 80 m³ more. The buffer is a decision assumption, not a universal recommendation.

Additional inventory is not sufficient unless access, funding, quality and storage conditions are validated. Conversely, reducing mobilization time may protect continuity with less product tied up. The test is designed to compare those options, not to prescribe more inventory in every case.

The calculation also stops short of proving continuing adequacy after the first receipt. A small initial delivery may close one timing gap while leaving the next uncovered. Real planning must test the quantity and timing of subsequent receipts against the evolving consumption profile.

How should continuity be balanced against working capital?

Compare the cost of protection with interruption losses that the measures could actually avoid. Protection costs include inventory financing, reserved capacity, exercises, inspections and maintaining alternatives. Interruption exposure is site-specific: contribution lost on permanently unrecovered production, additional shutdown or restart costs, emergency purchases and documented contractual consequences.

Do not add lost revenue and lost contribution on the same volume. Distinguish a permanently lost sale from output that can be recovered later; do not attribute every operating loss to energy when other constraints also apply. Where probabilities are not defensible, present scenarios and break-even thresholds rather than an artificially precise expected-loss calculation.

This extends the delivered-cost analysis in Article 02. The right solution is not necessarily the most redundant. It is the one that protects the selected activities with executable resources and an explicitly accepted residual risk.

Make that acceptance visible. A decision to retain some exposure may be rational, but it should identify the scenario, operational consequence, economic rationale and accountable approver. It should not arise accidentally because a missing lead-time estimate was treated as zero.

Which indicators should trigger action?

A useful dashboard points to a decision, not a collection of percentages. Thresholds must be set for the site; no universal performance target is asserted below.

What should be established over the next 90 days?

A proposed implementation sequence is to spend the first 30 days establishing critical uses, reconciled inventory and dependencies. During days 31–60, validate alternatives, contractual responsibilities and funding. During days 61–90, run an exercise, resolve gaps and approve residual risk. Adjust the pace to the site’s actual urgency.

The decision dossier should contain consumption by product and operating mode, usable stock, lead-time history, alternative paths, receipt constraints, spending authorities and activation thresholds. Missing information must remain visible: it creates an evidence-collection action, not a silent assumption.

Keep the dossier practical enough to use during an incident. A concise decision sheet should point to the controlled records supporting it, rather than reproducing every technical document. Updating ownership and contact details is as important as refreshing the inventory calculation.

Frequently asked questions

How many days of inventory should a site retain?

There is no demonstrated universal number for every facility. The requirement depends on complete resupply lead time, variability, operating criticality and applicable constraints. A national or sectoral rule should not automatically be transferred to an industrial site. Operational sizing and regulatory compliance require separate validation, and neither is established by the illustrative calculation in this article. [4]

Are two suppliers enough to secure supply?

No. They may share the same terminal, carrier or entry point. The relevant test is whether product can still be delivered when that common dependency is unavailable. Request a documented alternative and verify how it would be activated. Where physical independence remains unknown, retain that limitation and consider complementary protection rather than counting the two contracts as proven redundancy.

Can inventory in transit count towards onsite autonomy?

Not as immediately usable onsite stock. Product in transit can contribute to a forward plan where arrival, access and release are evidenced, but its delay must also be tested. The simplified calculation here counts only usable inventory present at the outset. Future receipts are assessed separately so that an uncertain delivery is not mistaken for an existing reserve.

Can insurance or contractual penalties replace backup supply?

No. Potential compensation and replacement supply meet different needs. Their interaction should be assessed with qualified advisers against the relevant wording, exclusions, deductibles, timing and evidence requirements. The operational plan must remain executable without assuming that interruption losses will be reimbursed immediately, in full or with certainty. It should also identify funding needed before any claim is settled.

Do solar and batteries remove the need for fuel continuity planning?

Not automatically. The US Department of Energy explains the importance of suitable configurations for operation during a grid outage. [6] An industrial assessment must verify priority loads, power, available energy, controls, duration and system testing. A bill-reduction project alone does not demonstrate the ability to replace every fuel use, including process heat or mobile equipment.

When should the plan be reviewed?

After any material change in demand, supplier, installation, quality status, lead time or procedure, and after incidents or exercises. As a proposed management practice, review operating indicators according to their criticality and hold a formal quarterly review. That cadence is an adaptable starting point, not a frequency imposed by the institutional sources cited here or a substitute for event-driven action.

From insight to decision

A credible arrangement answers three questions: how long can the site continue, when does a compliant alternative become usable, and who acts before the gap becomes critical? The six levers make those answers testable. They also make it possible to acknowledge honestly when a scenario remains uncovered.

Prepare an industrial continuity requirement. Through the “Request a Solution” route, specify the product, site, consumption profile, usable stock, lead times and receipt constraints. These details provide the basis for a discussion of the requirement; they do not constitute a supply commitment or an availability guarantee.

Sources and methodology

Institutional sources were consulted on 23 September 2026. Statistics are dated to their reference period. The six-lever framework, proposed indicators and worked scenario are original editorial analysis, not measured customer outcomes. Calculations use the stated assumptions and do not estimate a disruption probability. Only ISO’s public overview was consulted, not the complete licensed standard. Application to a facility requires appropriate operational, HSE, contractual and regulatory validation.

[1] Ministère de la Transition énergétique et du Développement durable — Combustibles — 2026 key indicators; table of petroleum-product consumption in 2025.

[2] International Energy Agency — Energy Security — General energy-security framing and scope.

[3] ISO — ISO 22301:2019, Business continuity management systems — Public overview; 2019 edition and 2024 amendment listed. No conformity claim.

[4] Ministère de la Transition énergétique — Procédures et autorisations — Storage-capacity, depot and commissioning procedures. Verify project-specific applicability.

[5] Ministère de la Transition énergétique — Laboratoire national de l’énergie et des mines — Petroleum-product conformity and analytical functions; no undated annual activity statistic used.

[6] US Department of Energy — Solar and Resilience Basics — Electricity-resilience principles and limits of solar alone. General technical context, not Moroccan regulation.