Business Continuity and Crisis Management
Specialists who help organisations stay operational, resilient and confident in the face of unexpected disruption
Senior teams know how to operate when conditions are stable. They struggle when the workload spikes, the picture is incomplete, and the next decision cannot wait. In those moments, hierarchy, ego, and unspoken assumptions are what cause the failure, not the technical problem itself.
Most boards still treat cybersecurity as a compliance line item managed by the CISO. The attackers do not. They move faster than procurement cycles, exploit the gap between IT controls and human behaviour, and turn ransomware into an operating crisis within hours. Leadership teams need a sharper feel for how attackers actually work, not another framework.
Consumer-facing businesses live or die in public. The discipline of running an operation judged in real time by every customer, often inside someone else’s host environment, is harder than strategy decks suggest. And when those operations fail, as they do, the question of what to rebuild on rarely gets answered well.
Leaders are rehearsed for planned adversity and unprepared for the other kind. When a situation collapses inside minutes, the quality of the next decision matters more than any strategy document, and most teams have no honest idea how theirs will hold. The gap between the leadership a company trains for and the leadership a crisis actually demands is where careers, reputations and, sometimes, people are lost.
Most organisations still treat cyber as an IT department problem. The attack surface has moved: it now runs through the personal devices, social profiles, and travel patterns of senior leaders, and through the open-source data their organisations leak every day. Boards need someone who can show them what an adversary actually sees, not another briefing on compliance.
Senior leaders are being asked to hold their nerve in situations their training did not prepare them for: compressed decisions, hostile audiences, physical and reputational risk running at the same time. Composure under that load is not a personality trait. It is a set of habits around attention, communication and trust that can be taught by people who have had to use them.
European security is no longer a background condition for business strategy – it has become a primary variable in board-level decisions about investment, supply chains, and market access. Most organisations carry geopolitical exposure they cannot yet map: to shifting NATO commitments, to the long-term arc of the Russia-Ukraine war, and to a transatlantic relationship under structural strain. The analytical frameworks that served risk functions in a stable order are no longer adequate.
The compliance function in most global banks is now larger than many of the businesses it oversees, and yet the vast majority of illicit financial flows still move through the system undetected. The gap is not a shortage of policy, it is a shortage of first-hand understanding of how professional money launderers actually think, which bank procedures they exploit, and which internal controls they find trivial to bypass. Closing that gap requires someone who has worked on the other side.
Senior leaders rehearse crisis plans they hope never to use. The harder problem is the one most preparation skips: how a small team makes consequential decisions when information is incomplete, the environment is hostile, and the consequences of getting it wrong are immediate. Most boards have no reference point for what that actually feels like, or how composure under that pressure is built rather than assumed.
Boards now treat Russia and the wider authoritarian bloc as a permanent feature of their risk register, not a passing event. The hard question is not what is happening, but what the regime is likely to do next, and on what timeline. Most strategic intelligence reaching senior leaders is filtered through analysts who have never lived under the system they are describing.
Senior teams rehearse crisis playbooks they hope never to use. When the moment comes, the playbook is rarely the limiting factor; the limiting factor is whether leaders can hold their judgment, their team and their nerve while conditions deteriorate around them. That capacity is built before the storm, not during it.
Leaders know how to run the organisation on a good week. Far fewer know who they become when the structure around them collapses, the information is wrong, and the timeline is someone else’s. What holds a leader together under sustained pressure is not strategy. It is a set of inner commitments that most executives have never been forced to define.