Stress-testing the enterprise before disruption arrives
How realistic disruption simulations can expose hidden dependencies and reveal where resilience investment creates the greatest strategic value.
Read articleWho knows something the business cannot afford to lose?
Critical knowledge is rarely identical to seniority or job title. It often lives with the person who understands an exception, maintains a trusted relationship, recognises a weak signal or knows why a process was designed around a constraint that documentation no longer mentions.
Map knowledge through outcomes. For each essential decision or service, ask what must be known, who can apply it unaided, how long replacement would take and what happens if it is unavailable. Prioritise knowledge that is both critical and vulnerable�a principle made explicit in the 2026 draft revision of ISO 30401.
Observe work under variation. Interviews capture stated procedure; incident reviews, complex cases and handovers reveal tacit judgement. Record not only steps, but cues, trade-offs, contacts, source authority and stop conditions. A runbook that omits rationale lets a successor repeat actions without knowing when they are wrong.
Reduce dependency through pairing, shadowing, rotation, communities of practice, decision logs and deliberate succession. Give another qualified person real responsibility while the expert is available to correct the system. Protect external knowledge held by contractors and suppliers with access, continuity and transfer provisions.
Test resilience by removing the key person from an exercise and measuring decision delay, errors and escalation. Track single-qualified roles, time to competence, stale documentation and coverage of critical cases. The goal is not to copy everything one individual knows; it is to make the organisation capable of acting when that individual cannot be reached.
Related macro
Articles
How realistic disruption simulations can expose hidden dependencies and reveal where resilience investment creates the greatest strategic value.
Read articleHow companies can design for revenue and value continuity when shocks disrupt customers, channels, technology or supply.
Read articleFocus
Reputational resilience begins with understanding which expectations matter enough that violating them could materially change trust or behaviour.
Separate vendors can still share the same infrastructure, geography, upstream producer or logistics route, creating hidden concentration.
Strategic challenges
Distributed technology can still depend on common regions, identities, control planes, providers or services that create systemic failure points.
Incomplete, delayed and contradictory information can distort priorities before the organisation has understood the underlying event.
POV
The objective is not duplicate everything, but know where concentrated exposure creates consequences the business cannot comfortably absorb.
Critical systems often need robustness first. Antifragility matters where controlled variation, experimentation and adaptation can improve future performance.
Strategic impact
Established credibility can give organisations more time and tolerance when something goes wrong, but only if subsequent actions remain consistent with it.
Revenue depends on interconnected marketing, channels, contracting, fulfilment and service capabilities that can fail at different points.
What we observe
We frequently see documented procedures built around assumptions about availability, dependencies and recovery times that exercises have never validated.
We frequently see scenarios quantify the shock without modelling the actions, constraints and second-order effects that determine the eventual outcome.