Most organisations have a crisis management plan. Fewer have resilience. The difference matters, because a plan tells you what to do when the alarm goes off, while resilience determines whether your operation is still standing when the response is over.
The gap between plan and resilience
Crisis management plans concentrate on the acute event: activation, roles, communications, stand-down. Resilience is what happens on either side of that, the exposure you carried into the event, and the operating capacity you preserve on the way out.
Building blocks of resilience
- Continuity of critical processes, not just facilities and technology, but people and decisions.
- Redundancy in supply, staffing and communication that can be activated inside 24 hours.
- Decision architecture that survives leadership dislocation.
- Financial resilience, working capital and insurance calibrated to the environment you actually operate in.
- Reputation resilience, pre-agreed narratives and stakeholder relationships that hold under pressure.
Crisis plans get organisations through the day. Resilience gets them through the year.
Where to start
The most productive first move is usually a resilience-oriented exercise: take the crisis your organisation genuinely fears, run it against your current arrangements, and see what breaks on day three, not on day one. Almost every organisation we work with finds the same result: the plan works; the operating model behind it doesn't.