5 Questions for Understanding the Fundamentals of Business Resiliency

One of our most treasured possessions on our property here in northern Florida are all the beautiful live oak trees with the one pictured above being the largest of them all. Although they can cause allergies in some people when they begin budding new leaves in the spring, residents and visitors alike treasure these trees for their sheer majesty and the shade they provide.

In times past, their hardy wood was used for a variety of purposes. The USS Constitution’s hull for example was made from the live oak tree, and after surviving repeated bombardments during the War of 1812, the ship earned the nickname “Old Ironsides.”

Question #1: What is business resiliency?

With an average lifespan of 100-300 years, live oak trees fit the definition of resilience for their ability to “absorb and adapt in a changing environment.” While we don’t know the exact age of the legacy oak in our yard, it has undoubtedly seen its share of hurricanes, strong thunderstorms, freezes, heat waves, droughts and more.

Through all of that, it still stands tall…

This same principle of resiliency can be transferred to a company as well.

Risk thought leaders all agree that risk management is about more than avoiding failure. Even standards like COSO acknowledge that risk management should fundamentally be about helping the company succeed – to ensure goals are met. Many of these same thought leaders emphatically argue that clinging to the old “preventing failure” mindset will eventually lead the organization into obscurity.

Many of our posts discuss this from a short- and medium-term perspective – at most 5 years into the future, but…

Question #2: What about 10, 20, or 30 years into the future? Why is long-term business resiliency so important?

If the last 30 years are any clue, the next 30 years are going to look completely different than today.

Let’s go back to our beloved oak tree for a moment…

Like every living thing, this tree lives in an “ecosystem” that consists of a variety of conditions that can impact how big it gets and how long it ultimately lives. With the right combination of factors like sun, rain/water, proximity to other trees, and more, these trees can be incredibly resilient, with a few even living to be 1000 years old!

Elements within a business’ ecosystem can include:

  • Social factors –consumer/customer values, society expectations, and demographic shifts.
  • Technological factors –automation, mechanical advances, and research.
  • Economic factors –market growth, asset prices, borrowing costs, currency valuation, and more.
  • Environmental factors –emissions, energy costs, and climate change.
  • Political factors –government policy, legislation, and regulatory regimes.

All the elements within an ecosystem combine to either help or hinder the company’s long-term viability.

Also, as real-world experience and surveys from NC State and elsewhere continually show, the velocity of change along with the intensity or magnitude of risks is higher than in the past. When you couple this with how interconnected companies and organizations throughout an ecosystem are, any changes or risks will have even faster effects.

Question #3: How can I make business resiliency a priority?

Between the current volatility throughout the world, be it supply chain breakdowns, advancements that will displace current technologies, and other issues, business resiliency is more important now than ever. While our current circumstances magnify this need, it is not an easy thing to do.

As the COVID-19 pandemic has shown in a more profound way, major changes in a business’ ecosystem can occur at any time in a flash. This fact is one reason why adaptability and flexibility with internal structures, customers, suppliers, and other aspects of your ecosystem that is within your control is so important.

Writing in the Institute of Risk Management’s Enterprise Risk magazine, consultant and APAC representative Gareth Byatt explains:

Even with robust plans in place to deal with disruption, if they are not aligned to a flexible structure and an ability to change when you need to deal with things in unexpected ways, they will not be truly effective when you need them.”

Many tools familiar to risk managers can be helpful in this circumstance or at least “re-tooled” so the company can better understand these long-term risks and opportunities.

In a recent interview, Hans Læssøe discusses a long-term scenario analysis tool he developed in his former role as strategic risk manager at the LEGO Group. Other tools risk managers use that can be slightly repurposed for business resiliency can include problem definition worksheets, stakeholder mapping, bow-tie analysis, decision trees, and more.

Like I mentioned earlier, while business resiliency is important, it is not exactly easy and can seem impossible, especially if other shorter term risk management processes have not been fully developed.

Question #4: What can happen if my company ignores long-term business resiliency?

It should be clearly understood that the world is changing at what seems like a rollercoaster pace. Companies who ignore this do so at their own peril.

By ignore, what I mean is this:

If the company does not take action to have the right talent, systems, suppliers, or product/service offerings in place and is not agile enough to adapt to ever-changing circumstances on short notice, it could suffer a variety of consequences similar to what I discuss in this article.

It’s hard to get into specific consequences since the challenges facing every company and industry are unique, but I can provide some general ideas.

Take our recent article on the changing nature of work as an example…

It’s clear from surveys that employees, especially younger workers, expect something a little different from their careers than just good pay and benefits. For example, a significant number of employees report they will take less salary in order to work with a visionary leader or in a company whose mission they believe in. By not taking steps to adapt to this reality, a company is putting itself at extreme risk of losing or not being able to recruit valuable talent, especially 10+ years from now when the millennial and Generation-Z workers will have more experience.

Another example could be a credit or investment-ratings agency like Moody’s or S&P reducing a company’s score, which could lead it being cut off from financing or otherwise becoming an unattractive investment when compared to more nimble competitors.

Of course, all can ultimately lead to business failure either through bankruptcy or some sort of merger or acquisition. We could go on all day discussing what became of companies who did not take long-term business resiliency important.

Just take a moment to think about retailers or other companies who seemed to be at the top of their game 20 years ago but are not around today…I venture to guess it won’t take long for you to come up with a couple.

Question #5: What is an example of a company with good long-term business resiliency?

I know, I know…

You’re thinking this all sounds great, but who out there has actually done it?

One of the best examples of business resiliency in action is pharmacy-giant CVS, which actually started out as a health and beauty retail store in 1963. The company actually didn’t have a pharmacy until four years later, when the company realized customers were looking for more one-stop shopping. CVS’ leaders also recognized that in order to maximize the company’s impact, they needed to be a national brand, so beginning in 1972 and continuing through today, it begin acquiring other pharmacies, drug stores, and related mail-order and pharmacy benefit management companies.

CVS was also a pioneer in using the Internet with the launch of its online pharmacy in 1999, and in 2006, the company acquired The MinuteClinic to allow customers to see a health professional for minor issues quickly in the store instead of going to a more costly urgent care clinics or the emergency room.

This, of course, is just part of CVS’ story, but consider this – what if they had remained the health and beauty store they started out as.

Would they still exist today? Certainly not as a national chain…

But like our mighty oak adapting to changing weather and climate conditions, CVS took special care to understand its ecosystem and be adaptable to shifting consumer expectations over the years and therefore is a prime example of good business resiliency.

For more in-depth information on this topic, including 6 points for developing and implementing a resiliency strategy for your organization, check out our interview with risk and resiliency consultant Gareth Byatt for more.

Does your company consider long-term business resiliency as part of its strategic planning and long-term outlook?

Considering today’s fast-changing business ecosystem, this sort of planning is vital to ensuring your company’s long-term success. If you want to learn more about resiliency, be sure to check out the blog in three weeks, when we will share an interview with Gareth Byatt on the topic of business resiliency.

To share your thoughts and experiences, please feel free to leave a comment below or join the conversation on LinkedIn.

And if your company is struggling to move beyond short-term risks due to culture or a lack of experience with thinking about the long-term, please don’t hesitate to reach out and schedule a meeting to discuss your specific circumstances today!

Sign Up For Our Newsletter

Sign Up For Our Newsletter


Meet Carol

Helping companies achieve their vision and strategy, and succeeding in today's turbulent world, is something I'm honored to be a part of. Whether you're an occasional blog visitor or a long-term client, thank you for letting us be a part of your journey.

Most Recent Posts

The 12 Days of ERM Christmas

Without a doubt, one of my family’s favorite holidays is Christmas. Part of the fun, especially for our son, is seeing what “Santa” brought, but most importantly, we treasure the spirit of peace and goodwill the season brings. And after what seemed to be a never-ending warm spell, the weather is expected to be good…

Read More

Don’t Let Goals and Initiatives Be Blindsided by External Events

As the end of the year draws near, I think we’d all agree that while it wasn’t without its challenges, this year also wasn’t quite as turbulent as the previous two. While a lot of people are juggling company parties, shopping for friends and family, and special activities for the kids, most companies are putting…

Read More

Going the Distance: Ensuring Successful Execution of Strategic and Annual Initiatives

Strategic planning is a challenge – of all people, I understand… After all the meetings, risk and data analysis, and brainstorming of the preceding months, it’s tempting to think this is the end of the road and you can relax. Contrary to this common perception though, this is exactly not the time to relax, but…

Read More

Avoid Rookie Mistakes and Protect your Internal Reputation

Be honest – have you ever done something that you soon realized was a real rookie mistake? Me raising my hand… Considering the nature of ERM’s role to ask questions and challenge assumptions (often during conversations with executives), it can be argued that, in at least some cases, the expectations bar for risk professionals is…

Read More

ERM at Thanksgiving – An Illustration of Risk Management in Action

On occasion, I like to take some of the concepts we risk professionals think about in our jobs and apply them to different personal situations…take some of the same concepts we use when working with executives to develop corporate strategy and manage risks or uncertainty around that strategy. It’s Thanksgiving week in the U.S. –…

Read More

Why Quantitative Risk Assessment is Not Just the Best But the Only Option – A Conversation

Periodically, I have the pleasure of speaking one-on-one with Hans Læssøe on a variety of topics around ERM, strategic risk, and other issues and trends. As you know from my previous conversations (here, here) and posts featuring his work, Hans was formerly a practitioner at the iconic LEGO Company, but even more notably, is a…

Read More

The Three Lines Model – 3 Reasons Why I Don’t Like It

Everyone likes a clear-cut template that offers an easy way to create or manage something…I mean what’s not to like about a step-by-step process for accomplishing what you want? Sometimes this can work without any issues, such as the case with the Project Management Book of Knowledge (PMBOK), ISO 9001 standard, or a new cooking…

Read More

5 Avenues for Expanding your ERM Knowledge

One thing I was taught to appreciate from a young age was the value of education and knowledge. It didn’t necessarily matter what the subject was, just that I always maintain a learning or growth mindset regardless of my current status in life. This mindset has served me well over the years, and it’s a…

Read More

Storytelling and Risk Management – Developing Skills that Technology Cannot Replace

It’s amazing how technology has developed and changed our working world over time. Imagine trying to run my risk and strategy consulting firm without tools like Zoom, Box, Slack, and other ERM-specific technology tools. There is no way we would be able to serve our clients the way that we do. Just consider how the…

Read More

3 Phases to Creating and Launching an ERM Program Focused on Organizational Success

If you’ve been handed the task of creating an ERM program for your organization, let me first offer my congratulations quickly followed by my empathy for the task ahead of you. I don’t say that to scare you but to provide a small dose of reality. Building, launching, and refining an ERM program that is…

Read More