Resilience is critical for post-COVID business success

1 June 2020 Security Services & Risk Management

Of the many lessons we have to learn from the current emergency, perhaps the most crucial one is to ensure that business strategy and operations are founded on resilience.

For years we have been faced with a VUCA world exacerbated by accelerating change and have needed to be prepared for almost anything. VUCA stands for Volatile, Uncertain, Complex and Ambiguous, and it’s always seemed to me a useful way of conceptualising the fast-moving, slippery context in which we have to survive. The truth of that observation has been borne out by the way the COVID-19 emergency has unfolded at a magnitude very few had ever expected.

Of course, most business continuity plans had made provision for a pandemic, but nothing on this scale. Specifically, who predicted that the worldwide response to the crisis would ultimately cause more disruption than the pandemic itself?


Michael Davies.

Judging from our clients’ experience across the continent, there were many lessons that we need to learn from this emergency as resilience professionals. The most obvious: those that acted swiftly and decisively were able to get back up and running more quickly, and the more digitalised an organisation, the better able it was to adapt to radically changed circumstances.

Allied lessons were the need for robust ICT infrastructure and systems to support remote and home working, and excellent cybersecurity.

But the one that I really want to highlight is that those organisations with practised business continuity plans managed better than those that either had no plans in place or had never rigorously tested and practised them.

This isn’t surprising. Business continuity plans focus on identified risks, but they also recognise that crises do not unfold according to plan, and that the unexpected usually occurs. Good business continuity planning is designed to be adaptable.

And, as anyone who has lived through a crisis knows, having a plan, even if you are adjusting it all the time, is half the battle. But the other half is encapsulated in the word ‘practised’. A crisis is inevitably a time of high pressure, trying to adapt and then follow a plan when the chips are down is nerve-wracking, to say the least. People who have participated in regular tests and simulations are naturally in a better position to keep their heads and act coolly.

That is why the military conduct so many ‘exercises’ to prepare their soldiers for the combat situation.

Resilience comes from this combination of a plan, the ability to adapt it on the fly and the ability to execute at speed when the risk materialises. The concept also encompasses the ability to recover when a crisis hits; to return to the military analogy, reverses will happen, but does the organisation know how to regroup and recover?

Baking resilience into your corporate DNA

So, how does one go about ensuring that your organisation becomes more resilient, better able to respond to changing circumstances and recover its critical business processes when they are compromised? Here are my conclusions:

• It all begins with the business continuity plan. This must be a living document, constantly improved upon, and incorporated into the organisation’s overall strategy and milieu.

• Practise, practise, practise. You don’t know if the plan works if you haven’t tested it. More, testing is the only way to improve it and get your people combat-ready.

• Create a holistic resilience culture. As most CEOs know, it’s the people that make a company. Plans and processes will be background noise if the employees don’t buy into them. Like all issues relating to culture, resilience culture must come from the top and be managed effectively to become more than a project, but inherent in the way you do business. If you get this right, then the organisation will naturally be resilient.

• Build operational resilience by rethinking your approach to office space. COVID-19 has driven home just how reliant we are on being able to access our premises. There’s consensus that the remote working experiment is likely to herald the emergence of hybrid working models that are themselves more resilient.

A total move to remote working is not sustainable, but many of our clients are planning to build in resilience through relocating one third of their staff to our campus, one third to remain on company premises, and one third working remotely.

Doubtless, more lessons will emerge over the coming months, but one thing is clear: the ability to adapt to the unexpected or improbable will itself become a critical business capability.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

“This Is Theft!” SASA slams Mafoko Security
News & Events Security Services & Risk Management Associations
The Security Association of South Africa (SASA) has issued a stark warning that the long-running Mafoko Security Patrols scandal is no longer an isolated case of employer misconduct, but evidence of a systemic failure in South Africa’s regulatory and governance structures.

Read more...
Making a mesh for security
Information Security Security Services & Risk Management
Credential-based attacks have reached epidemic levels. For African CISOs in particular, the message is clear: identity is now the perimeter, and defences must reflect that reality with coherence and context.

Read more...
Privacy by design or by accident
Security Services & Risk Management Infrastructure
Africa’s data future depends on getting it right at the start. If privacy controls do not withstand real-world conditions, such as unstable power, fragile last-mile connectivity, shared devices, and decentralised branch environments, then privacy exists only on paper.

Read more...
From friction to trust
Information Security Security Services & Risk Management Financial (Industry)
Historically, fraud prevention has been viewed as a trade-off between robust security and a seamless customer journey, with security often prevailing. However, this can impair business functionality or complicate the customer journey with multiple logins and authentication steps.

Read more...
Security ready to move out of the basement
AI & Data Analytics Security Services & Risk Management
Panaseer believes that in 2026, a board member at a major corporation will lose their job amid rising breaches and legal scrutiny, as organisations recognise that cyber risk is a business risk that CISOs cannot shoulder alone.

Read more...
Cyber remains top business risk, but AI fastest riser at #2
News & Events Security Services & Risk Management
The Allianz Risk Barometer 2026 ranks cybersecurity, especially ransomware attacks, as the #1 risk, while AI is the biggest riser and jumps from #10 to #2, highlighting the emerging risks for companies in almost all industry sectors.

Read more...
OT calculator to align cyber investments with business goals
Industrial (Industry) Information Security Security Services & Risk Management
The OT Calculator has been developed specifically for industrial organisations to assess the potential costs of insufficient operational technology (OT) security. By offering detailed financial forecasts, the calculator empowers senior management to make well-informed decisions.

Read more...
From digital transformation to digital sovereignty
Security Services & Risk Management IoT & Automation
As cyberthreats grow, data regulations tighten, and AI becomes central to economic competitiveness, countries are recognising the need to control and protect their own digital assets.

Read more...
The age of Lean 4.0: Orchestrating intelligence and efficiency
Security Services & Risk Management
The convergence of Lean principles and AI (what we now call Lean 4.0) is no longer a theoretical exercise; it is the defining operational paradigm for survival and growth in a complex, data-intensive economy.

Read more...
Risks of open-source intelligence escalating in crime
Security Services & Risk Management Residential Estate (Industry) Smart Home Automation
CMS estimates that open-source intelligence has played a role in 20 - 30% of robberies over the past 12 months. In cybercrime, global research consistently shows that many offences rely on some form of open-source data exploitation.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.