Nobody Pays Extra for Uptime
A generic look at why governments keep piling resilience rules onto network operators, and why the market alone was never going to produce the boring outcome everyone actually wants.
Ask a network operator what regulation feels like and you get a version of the same answer: a pile of paperwork that showed up to demand a fix for a problem the engineers already knew about and were, in their own time, getting around to. Ask a regulator about operators and you hear the mirror image: an industry that treats resilience as optional until the week it very publicly isn't. Both sides have a point, which is the annoying part.
The product nobody notices
Start with the plain economics. Nobody has ever opened a monthly bill and thought, worth every cent, the network stayed up all month. Uptime is a background condition, not a feature customers shop for. An outage gets noticed instantly, loudly, and by name. Its absence gets noticed by nobody, ever. That asymmetry makes resilience a brutal thing to build a business case for: the failure mode is visible and expensive, and the success mode looks exactly like doing nothing at all.
Compare that to a feature people can see: faster speeds, a slicker app, one more gigabyte in the plan. Those sell. Redundant fiber routes and spare hardware sitting in a warehouse do not sell anything, and neither does a fully staffed incident rotation. They cost money every day and pay off, with luck, on a day that never arrives. Inside an ordinary quarterly planning cycle, that reads less like an investment and more like a tax with no visible dividend, so it's the line item that gets trimmed first whenever the budget gets tight.
An operator that skimps on resilience under this pressure isn't a villain twirling a mustache over quarterly earnings, just a company responding sensibly to a market that refuses to price the thing being skimped on. Regulators are less angry at any particular company than they are suspicious of an incentive structure that quietly rewards corner-cutting and dresses it up as discipline.
Why the state gets twitchy
Two things turn that business-model quirk into a policy problem. First, outages don't stay inside one company's balance sheet. Payment systems, hospitals, logistics networks, and half the small businesses in a region depend on infrastructure they never chose and can't quickly replace. When it goes dark, the damage lands on people downstream who had no vote in the investment decision. Economists have a tidy word for costs you get to impose on someone else without asking, and it isn't flattering.
Second, networks now sit underneath everything a modern state considers essential, from finance to the emergency services that show up once something has already gone wrong. A government that treats that layer as purely a private commercial matter is betting that the market will happen to deliver the robustness national security requires, on a sector whose cost structure pushes the other way by default. That's a strange bet to stake a country on.
Put those together and the regulatory instinct follows naturally: mandatory resilience standards, incident reporting, audits, fines large enough to actually move a budget line. None of it is bureaucrats manufacturing busywork for sport. The goal is to legislate into existence the level of investment that price signals were never going to produce on their own.
Operators aren't wrong that plenty of that machinery is expensive theater, reports filed and never read, checklists that measure paperwork rather than actual resilience, audits that reward whoever writes the tidiest incident summary rather than whoever recovers fastest. Rules written by people who have never stood in an operations center at three in the morning can make things worse while looking admirably thorough on paper.
Regulators aren't wrong either that competitive pressure trims the resilience budget first, every cycle, because it's the line with no visible defender in the room. Try naming the last time a customer switched providers because "our mean time to recovery beats theirs by fourteen minutes." It doesn't happen. Customers switch on price and speed, then treat the next outage as a moral betrayal rather than the predictable result of exactly how they shopped.
The honest summary is unglamorous: markets are excellent at inventing things people will pay extra for and mediocre at maintaining things people only notice the moment they vanish. Regulation is a blunt tool for closing that gap, and blunt still beats absent. Somebody has to want the boring outcome badly enough to write it into law, because left to its own devices, the market is never going to bid up the price of nothing going wrong.