The COVID-19 pandemic delivered a lesson every leader had been quietly avoiding: we cannot manage our way out of catastrophe.
Supply chains that took decades to optimize - lean, global, finely tuned - became vectors of disruption almost overnight. Companies with the most efficient operations were often the most exposed. The very features that made them competitive made them fragile.
This isn't a new problem. It is, however, one we have been reluctant to face.
What the pandemic revealed
Three structural realities were put on full display:
- First, the world is integrally connected. Economies, supply chains, societies - none operate in isolation. What happens in one region reverberates everywhere else. No border, no buffer stock, no contingency plan fully insulates an organization from what happens beyond its walls.
- Second, efficiency and vulnerability often travel together. The more optimized a supply chain - just-in-time inventory, single-source suppliers, concentrated production - the less room there is to absorb shock. The 2020–2021 semiconductor shortage is a clear example: years of consolidated production in a handful of Asian facilities left entire industries unable to build products. Ford, GM, and Apple all felt the cascading effects of a supply chain that had been optimized but not hardened.
- Third, complexity is the norm, not the exception. VUCA - volatility, uncertainty, complexity, ambiguity - describes every operating environment, pandemic or not. The question is not whether disruption will come. It is whether your organization is designed to handle it.
The shift that matters
The instinct, when things go wrong, is to look for what to control. Add more inventory. Shorten the supply chain. Bring production closer to home. These are reasonable tactical moves - but they don't address the underlying problem.
Resilience is not a plan. It is a capability. It is the organizational capacity to detect disruption early, respond quickly, and recover without permanent damage. That requires something deeper than process redesign: it requires a culture that treats uncertainty as normal and builds the flexibility to act under it.
Jim Collins called it "confronting the brutal facts." The brutal fact here is that crises are not anomalies in global systems - they are inherent features of them. Pandemics, cyberattacks, geopolitical shocks, climate events: these will recur. The question for every leader is not "how do we prevent the next crisis?" but "how do we build an organization that can survive and recover from it?"
Where to begin
Resilience strategy starts with two parallel commitments:
-
Emergency response: the ability to act quickly when disruption hits — clear decision rights, pre-identified alternatives, practiced protocols.
-
Recovery strategy: the ability to restore operations, retain talent, and rebuild relationships in the aftermath — not to the old normal, but to a stronger, more adaptable version.
Neither is sufficient alone. Organizations that are good at crisis response but have no recovery roadmap burn themselves out. Those that plan for the long term but have no rapid-response capability get overwhelmed in the short term.
The path forward begins with an honest assessment of where your organization stands — and a deliberate commitment to building what's missing.
Key fact: McKinsey research published in 2020 found that companies which had invested in resilience before COVID-19 — including scenario planning, diversified supplier networks, and digital infrastructure — recovered revenue 30% faster than those that had not (McKinsey & Company, "COVID-19: Implications for Business," 2020).
YOUR RESILIENCE REALITY CHECK
Take 15 minutes this week to answer these three questions — honestly, not aspirationally:
- If your single most critical supplier went dark tomorrow, what would happen in 72 hours? Do you have a tested alternative, or a theoretical one?
- Does your organization have an emergency response protocol that people have actually practised — or a document that lives in a shared drive?
- When your team talks about "managing risk," are they describing plans on paper, or capabilities that exist in practice?
If any of these surfaces a gap, that's your starting point. Resilience isn't built in a crisis. It's built in the quiet stretches before one.
Write down one specific action — not a project, not a committee — that you will take in the next two weeks to close the most important gap you identified.