Resilience strategy is the layer that sits above the code-mandated Essential Electrical System (EES) — it asks how long a hospital can run independently of the grid, how it stays operational through multi-day events and beyond, and how on-site generation, energy storage, and a controllable microgrid can extend survivability, harden the facility against extreme weather and grid instability, and advance decarbonization goals at the same time. Where the EES Articles in this Part define the minimum power that codes require (Type 1 EES, life-safety/critical/equipment branches, NFPA 110 emergency generators), this Article covers the discretionary, owner-driven investments that push a campus past compliance toward true energy resilience.

Resilience is a planning horizon, not a single system

A hospital is one of the few building types that cannot evacuate during a disaster — it is a "shelter-in-place" critical facility that typically gains census when the surrounding community loses power, water, or shelter. The governing question for resilience strategy is therefore not "do we have a generator?" (the EES answers that) but "how long can we run, against which threats, and at what level of clinical service?"

It is useful to separate three distinct duration tiers, each governed by different design assumptions:

The EES Articles own the middle tier. This Article owns the strategy that links all three into a coherent, controllable whole — most powerfully through a microgrid.

CMS Conditions of Participation and the CMS Emergency Preparedness Rule require hospitals to maintain emergency power and to have an emergency-preparedness program with a risk assessment (the "all-hazards" approach), but they do not prescribe a specific survival duration beyond the code-driven EES. The resilience horizon above code is a board-level, mission-driven decision informed by the facility's Hazard Vulnerability Analysis (HVA), its role in the regional disaster-response network, and increasingly by accreditation expectations from TJC and DNV regarding utility-failure management.

What a healthcare microgrid is — and why it differs from a generator plant

A microgrid is a locally controlled cluster of generation, energy storage, and loads that can operate both connected to the utility grid and islanded from it, switching between the two seamlessly under the direction of a microgrid controller. The defining capabilities — recognized in IEEE 2030.7 (microgrid controller specification) and IEEE 2030.8 (controller testing) — are:

• Intentional islanding — a planned, controlled disconnect from the utility with no loss of service to connected loads, as distinct from the EES's reactive blackstart-on-outage sequence.
• Seamless re-synchronization — reconnecting to the grid without a second outage when utility power is restored and stable.
• Active dispatch — the controller continuously decides which sources serve which loads, optimizing for resilience, cost, emissions, and equipment health.

A conventional emergency generator plant is reactive and binary: the grid is either present or absent, and when it is absent the generators carry the emergency loads through automatic transfer switches. A microgrid is proactive and continuous: it can island the facility before a forecast event (a planned grid-stress shutdown, a wildfire Public Safety Power Shutoff, an approaching hurricane), run on local resources for economic or carbon reasons during normal times, and treat the utility as one resource among several rather than the sole primary source.

For a hospital, the operational payoff is that the transition — historically the most failure-prone moment, when an ATS fails to transfer or a generator fails to start under cold load — can be eliminated for an anticipated event, because the campus is already running islanded and stable before the grid goes down.

The on-site generation and storage portfolio

Resilience strategy assembles a portfolio of energy resources rather than relying on a single technology. Each has a distinct role:

• Diesel emergency generators — the regulatory backbone. Required by NFPA 110 for Type 1 EES; high power density, proven blackstart capability, but dependent on stored and resupplied fuel and subject to air-quality permitting and run-hour limits. These remain the legally mandated emergency source regardless of what else is added.
• Natural-gas / dual-fuel generators or reciprocating engines — can run continuously (subject to gas-supply reliability, which itself can fail in a seismic event), enabling extended operation and combined-heat-and-power (CHP) recovery. Note that a gas-only unit cannot satisfy NFPA 110 Type 10 / Class X on-site-fuel expectations on its own, since pipeline gas is an off-site fuel that may be interrupted — dual-fuel arrangements are common to reconcile this.
• Combined heat and power (CHP / cogeneration) — recovers engine waste heat for space heating, domestic hot water, sterilization, and absorption cooling. Improves both efficiency and resilience because the plant runs continuously and is already online when the grid fails. A well-designed CHP plant can serve as a resilience anchor while delivering year-round operating savings.
• Battery energy storage systems (BESS) — increasingly central. Provide instantaneous ride-through (replacing or supplementing UPS at scale), peak shaving and demand-charge management during normal operation, frequency/voltage support to stabilize an islanded microgrid, and a buffer that lets generators start and load up gracefully. Lithium-ion (typically LFP chemistry for safety) dominates; flow batteries appear where long-duration storage is the priority.