Resilience

Continuity asks whether we can restart what broke; resilience asks whether the organisation can keep pursuing its objectives when the environment itself shifts. The term exists because boards found plan-based continuity too narrow for shocks like pandemics, sanctions or sudden market change. Resilience frames strategy, culture, finances and governance as parts of one defensive capability. For an executive it is the difference between owning a fire escape and designing a building that does not burn easily.

In practice resilience is set at the top: the board defines what must survive, and management builds buffers such as capital, redundancy, alternative suppliers and cross-trained people. It shows up in strategy papers, risk appetite statements and board dashboards, not only in continuity plans. A retail group, for example, may keep two logistics providers at a 60/40 volume split despite a 4% cost premium, deliberately buying survivability with margin. Standards such as ISO 22316 describe the principles, and Gulf regulators increasingly use the language of resilience in their frameworks.

The typical mistake is using resilience as a rebrand of the continuity binder while changing nothing. Resilience is broader: it includes decisions taken long before any incident, such as diversification and financial buffers, that no plan can substitute. The honest test is whether the board can name what it deliberately pays for resilience. In the ERGP programme, a chapter of Module 1 on governance places resilience among the board's core responsibilities.