Yunhao Li

Airports, as Critical National Infrastructure (CNI), operate as tightly coupled socio-technical systems exposed to multifaceted threats, including cyber, physical, social, environmental, and Chemical, Biological and Radiological (CBR) threats. This study presents a structured review of the synthesis of conceptual frameworks, airport structural configurations, sensor networks, and multi-domain threat landscapes, as well as airport security and resilience analysis, while comparatively examining risk assessment approaches. The review shows that existing approaches are effective for threat identification and prioritisation but remain predominantly static, with limitations in scalability, data dependency, and real-time applicability. To address these limitations, Threat-Vulnerability-Risk Assessment (TVRA) is adopted as a structured, reusable approach to support metric allocation, redundancy design, and emergency capability development. It further serves as a bridge between traditional risk assessment and resilience-oriented system design by enabling the transformation of static risk scores into scenario-based inputs, thereby supporting stress-testing and lifecycle-based resilience planning across the prepare, act, and recover phases. However, its inherently static structure limits its ability to capture temporal dynamics and cascading interdependencies, highlighting the need to integrate it with dynamic modelling approaches.