So far, it has been implicitly assumed that external political, economic, and infrastructural functions will be fully in place throughout the entire operating period of a repository (up to 150 years). Event sequences initiated by natural disasters or human-made crises may lead to unintentional long-lasting disruptions of these external safety functions. To make repository concepts robust against such scenarios, a forward-looking risk analysis and preventive measures are required.