Robustness and progressive collapse in tall buildings

What is progressive collapse?

Progressive collapse is a chain reaction in a structure. A single element fails, the load it carried is redistributed to its neighbours, they are overloaded and fail, and the failure spreads through the building. The result is that a small initial event causes damage out of all proportion to its cause. The defining feature is that the collapse is not caused by the size of the original event, but by the structure’s inability to absorb it. [1] [2]

This is why modern codes talk about robustness and disproportionate collapse rather than only about strength. A robust building has enough continuity, redundancy and ductility that a local failure can be contained. Strength stops an element from failing; robustness stops a failure from spreading. [1] [3]

The concept is closely related to redundancy in engineering, where a system has more load-carrying paths than the minimum needed to function. A structure with many possible paths can lose one without losing the whole, while a structure with a single critical path is vulnerable to a single event. Progressive collapse is what happens when redundancy is absent. [3] [4]

Ronan Point and the turning point

The event that changed how buildings are designed for robustness happened in London in 1968. A gas explosion on an upper floor of Ronan Point, a 22-storey system-built residential tower, blew out a load-bearing wall panel. The floors above lost their support and collapsed in a stack, killing several residents. A domestic accident had brought down a corner of a tall building. [5] [1]

The inquiry that followed reshaped British regulations. It introduced explicit requirements for structural robustness, including tying the building together and designing so that damage stays local, and it changed how prefabricated panel structures were assessed. Ronan Point is why robustness is a code requirement and not merely good practice. [5] [2]

The disaster also showed how much a building’s behaviour depends on its connections. The panels themselves were strong enough; it was the way they were joined that allowed a local blast to unseat a wall and start a chain of failures. From then on, the detailing of joints became a central concern in robustness, not an afterthought. [5] [1]

Tying, redundancy and alternate load paths

Modern robustness design uses several overlapping strategies. Tying connects the structure so that forces can flow around a damaged area, using continuous reinforcement and well-detailed connections. Alternate load path design checks whether the building can carry its loads if a supporting element is notionally removed, so that a local failure has somewhere else to go. Key element design strengthens the elements whose failure would be most damaging. [1] [3]

Ductility is what makes these strategies work in practice. A connection that can deform without breaking absorbs energy and gives warning, while a brittle connection fails suddenly. That is why steel moment connections, reinforced concrete detailing and composite systems all receive careful attention in robust structures, and why the behaviour of joints matters as much as the strength of members. [2] [6]

Tying works at every scale. Reinforcement is made continuous through beams, columns and slabs so that tension can be carried across a joint. Floor slabs are detailed to act as a diaphragm that holds the frame together. Even a modest amount of continuity can turn a vulnerable connection into one that keeps the structure standing after local damage. [1] [4]

The Twin Towers investigation

The collapse of the World Trade Center towers in 2001 prompted the most detailed structural investigation ever carried out on tall buildings. The official study examined how aircraft impact, fire and structural damage interacted, and how the failure of connections and the loss of fire protection contributed to the eventual collapse. It concluded that the towers had been designed for the loads they were required to resist, but that the combination of events exceeded their capacity. [7] [1]

The recommendations that followed changed practice for tall buildings. They called for greater structural redundancy, more robust connections, improved fire protection and better-protected escape stairs and communication systems. The investigation also emphasised that structural design, fire safety and evacuation must be considered together, an idea that shapes how supertall towers are designed today. [8] [2]

One lasting consequence is that tall building design now treats fire as a structural load case. Because fire can weaken members long before it reaches them visually, the interaction between heat, structure and connections is analysed explicitly, and passive protection is treated as part of the structural system rather than as a finish. [8] [1]

The Murrah building and blast design

The bombing of the Alfred P. Murrah Federal Building in Oklahoma City in 1995 caused progressive collapse of a large part of the facade and floors. The failure of a transfer girder after a column was destroyed showed how a single critical element could bring down a much larger area, and it led to new guidance for the design and retrofit of government buildings. [9] [1]

Blast and impact design now considers abnormal loads that are unlikely but severe: vehicle impact, gas explosions, and deliberate attack. Designers respond with measures such as standoff distance, protected structural elements, redundant framing, and the avoidance of a single critical transfer element whose loss would be catastrophic. [9] [4]

The lessons were applied to existing buildings as well as new ones. Retrofits added bracing, strengthened connections and removed critical transfer elements, and security planning began to consider where a vehicle could approach a building. Robustness became a normal part of how important buildings are assessed and upgraded. [9] [3]

How codes address it

Building codes handle disproportionate collapse in different ways. Some require simple tying and continuity as a baseline. Others require a notional removal check, in which a column or wall is removed from the model and the structure must still stand. For the most critical buildings, codes require key elements to be designed to survive an abnormal load, or require a formal risk assessment. [1] [8]

The level of protection usually scales with the consequences of failure. A low-rise building may need only basic tying, while a landmark tower, an assembly building or a critical facility may need a full alternate path analysis and enhanced detailing. Robustness is therefore a spectrum, and the design effort is matched to what would happen if the structure failed. [4] [3]

Regulators, owners and insurers all take an interest in this classification, because a building that is more robust is also easier to occupy, insure and inspect. The result is that robustness has become part of the commercial case for a tall building, not only a technical requirement imposed at the end of design. [1] [8]

Designing for the unexpected

Robustness is ultimately about designing for events that were not fully anticipated. The specific cause of a failure matters less than how the structure responds to it. A building that can lose a column, a wall or a connection and still stand gives its occupants time to escape and gives rescuers time to act. [1] [2]

That philosophy also changes how buildings are inspected and maintained. Damage, corrosion and poorly executed connections can quietly remove the redundancy a structure was designed to have, which is why condition surveys and quality control are part of robustness in service, not only at the design stage. [4] [6]

Takeaways

Progressive collapse happens when a local failure spreads through a structure and causes disproportionate damage. Robustness, achieved through tying, redundancy, alternate load paths and ductile detailing, keeps a local failure local. [1] [3]

Ronan Point, the Murrah building and the World Trade Center investigation each reshaped how codes treat abnormal loads, blast and fire. Modern practice matches the level of protection to the consequences of failure and treats structural, fire and evacuation design as one problem. [5] [8]