INGO ADVISORYAfrica Risk Intelligence & Security Advisory
Resilience Operations

Engineered for Disruption. Built for Continuity.

We transform corporate vulnerability into operational endurance. We map your critical assets, stress-test your vulnerabilities, and protect your core business operations against severe but plausible global crises.

Request an Operational Resilience Maturity Audit Take the 5-minute assessment
The resilience lifecycle

Anticipate & Assess

Maturity audits, dependency mapping and regulatory diagnostics.

  • Resilience maturity audit
  • Critical dependency mapping
  • Impact tolerance setting
  • Regulatory gap analysis

Test & Simulate

Stress testing, scenario modelling and tabletop exercises.

  • Severe but plausible scenarios
  • Live tabletop exercises
  • Stress and breach testing
  • Executive crisis drills

Respond & Recover

Incident playbooks, crisis governance and post-disruption learning.

  • Incident response playbooks
  • Crisis governance charters
  • Recovery sequencing
  • Post-disruption reviews

Third-Party Ecosystems

Vendor risk management and supply-chain continuity.

  • Vendor resilience audits
  • Concentration risk tracking
  • Fourth-party visibility
  • Cloud exit strategy
Core capabilities
Anticipate & Assess

Critical Service & Asset Dependency Mapping

We map every dependency behind your revenue-critical services — staff, sites, systems, data flows, vendors and utilities — then expose the chains that break first.

FCA/PRA operational resilienceDORA Art. 8 ICT mappingISO 22301 §8.2
Test & Simulate

Severe but Plausible Scenario Simulations

We design and run severe but plausible simulations that push your services beyond impact tolerance — then evidence how the organisation actually behaved under pressure.

PRA SS1/21 testingDORA threat-led testingISO 22301 §8.5
Respond & Recover

Global Resilience Framework Alignment

Continuous compliance mapping, incident playbooks and crisis governance that satisfy regulators while remaining usable at 03:00 on a bad night.

DORAPRA SS1/21 · FCA PS21/3ISO 22301 · ISO 22361
Third-Party Ecosystems

Supply Chain & Third-Party Risk Management (TPRM)

We look through your vendors to their vendors — surfacing concentration risk, contractual gaps and the exit routes you have never tested.

DORA third-party chapterPRA SS2/21 outsourcingEBA outsourcing guidelines
Resilience Assessment · 5 minutes

How much disruption can your operation actually absorb?

Five questions across the dimensions regulators and boards examine first: important business services, dependency mapping, scenario testing, third-party exposure and governance. You receive an immediate readiness band and a downloadable maturity report.

  • 01Important Business Services
  • 02Dependency mapping
  • 03Scenario testing
  • 04Third-party ecosystem
  • 05Governance & compliance
Question 1 of 5 · Important Business Services

Have you formally identified your important business services and set quantified impact tolerances?

Live disruption case studies
Financial services · Horn of Africa

Grid and connectivity collapse during a payments peak

The shock
A multi-day national grid failure combined with a submarine cable fault severed the primary data centre from the payment switch during month-end settlement.
Our intervention
Dependency mapping six months earlier had exposed a single-carrier link and untested generator fuel chain. We re-sequenced the recovery plan, contracted a second carrier and rehearsed the cutover in a live tabletop.
The result
Failover executed inside the 4-hour impact tolerance. Settlement completed on schedule and no regulatory breach notification was required.
3h 40m
Recovery vs 4h tolerance
0
Missed settlement cycles
$2.1m
Penalty exposure avoided
Humanitarian · East Africa

Corridor closure and fuel denial across a border crossing

The shock
An abrupt border closure and localised fuel embargo cut the primary supply corridor serving field programmes for eleven days.
Our intervention
Pre-mapped alternate corridors, pre-qualified secondary hauliers and a rehearsed stock-pre-positioning playbook were triggered on day one rather than negotiated mid-crisis.
The result
Programme delivery continued at 92% of planned volume, with no interruption to life-saving distributions and no emergency premium freight.
92%
Delivery maintained
11 days
Corridor closure absorbed
48h
Alternate route live
Energy & infrastructure · West Africa

Cyber extortion against a critical outsourced provider

The shock
A ransomware event at an outsourced operations provider encrypted the systems supporting field maintenance scheduling and vendor payments.
Our intervention
A prior TPRM audit had classified the provider as tier-one with no tested exit. We had already built a manual continuity mode and a 30-day substitution plan, invoked within hours of notification.
The result
Field operations ran in degraded-but-functional mode for 19 days with zero production shutdown, and the provider was substituted without contractual dispute.
0
Production days lost
19 days
Degraded-mode operation
30 days
Vendor substitution
Discuss a comparable scenario for your operation

Start with the maturity audit

Four to six weeks to a defensible baseline: important business services named, impact tolerances quantified, dependencies mapped and a prioritised remediation roadmap.

Request an Operational Resilience Maturity Audit