Mind the resilience gap - is your organisation ready for disruption?

Close up of a person looking at data

Resilience is as key to value creation as it is to value protection because resilient organisations are ready to act with agility and speed to any scenario. But many organisations overestimate their ability to deal with disruption due to risks being deemed low probability, leading to lack of investment in resilience and misplaced confidence in their ability to handle a disruptive event.

Perception gap

At the same time that the consequences of disruption become more severe, we know from our deliberative research workshops with a cross-section of the UK public (undertaken by Jigsaw Research) and our wider interviews that the expectations of the resilience of organisations and government are also higher than ever - from customers and employees to investors and regulators.

Playback of this video is not currently available

0:31

Member of the public on the impact of disruption

View Transcript

Our deliberative research with the UK public found that people expect government to ensure the UK’s infrastructure is resilient and to keep society afloat, no matter what the extent of the shock or threat, with recent experience during the pandemic reinforcing that view. And people also say they expect reputable businesses to protect consumers by running their organisations competently – including planning ahead and managing risk more generally.

Investors and regulators are also putting resilience under greater scrutiny, particularly around the growing high impact threats from cyber attacks and climate change to the survivability and viability of organisations.

“I want to see 24x7x365 business continuity on the Board agenda and reflected in the business model. This is now a strategic issue, not just an operational one. I want to see Boards engage more in the broader vulnerabilities they face from geopolitics and cyber. Both of these can cripple a company in days.”

Charles Henderson
Investor

Capability gap

Many organisations overestimate their ability to deal with disruption, with an outdated risk mindset preoccupied with probability and impact. That approach leads to a focus on short term issues and the hope the worst won’t happen - and the misplaced belief they will be able to find a workaround if it does.

A post-pandemic report by the National Audit Office (NAO), for example, highlighted the UK’s vulnerability to emergencies that affect the whole of government, society and the economy, and the need to strengthen national resilience to prepare for future risks of this scale.

“Although government had plans for a flu pandemic, it was not prepared for a pandemic like COVID-19 and did not learn important lessons from the simulation exercises it carried out,” said Gareth Davies, Comptroller and Auditor General, National Audit Office, in the report. “For whole-system risks, government needs to define the amount and type of risk that it is willing to take to make informed decisions and prepare appropriately.”

“Risk reports categorise and report risks in a way that looks superficially logical but is hopelessly generic and, in reality, tells investors very little about the true material risks facing the company and the resilience strategies it is adopting to deal with them.”

Peter Parry
Investor

Legacy data and technology is the elephant in the room for many organisations. Weaknesses in data combined with the inability of outdated systems and technology to withstand shocks poses significant resilience challenges.

And according to our annual Digital Trust Insights survey, 43% of UK senior executives still focus on isolated risk scenarios and how to address recovery for that specific disruption, instead of an approach that builds a 360-degree view of the risk the organisation faces and how to continue operations across simultaneous, connected risks.

Mindset gap

A common theme from our conversations is the need to expect the unexpected. Low probability doesn’t mean no probability - in the last 16 years, for instance, there have been six severe but plausible 1 in 100 flooding events. These include Storm Desmond in 2015, which PwC estimated caused £400m-£500m of damage, and the combination of three successive storms in Ciara, Dennis and Jorge in February 2020 that resulted in the wettest February since records began in 1910.

As a result of risks such as these being deemed low probability results, many organisations fail to invest in resilience up front, leading to misplaced confidence in their ability to handle a disruptive event.

“We fall into the same sort of problems as many other organisations of thinking that crisis management is resilience. We're lurching from crisis to crisis without necessarily being on an upward trajectory and thinking about what this all adds up to in terms of resilience. That's a big trap for us.”

Head of Resilience,public sector organisation

The value of resilience

Prevention is better than cure and resilience can help mitigate risk and avoid the cost of disruption - protecting shareholder value and reputation. But it’s impossible to mitigate every risk and a more resilient response to disruption can minimise damage to reputation and shareholder value and may even increase it in the long term, according to research by PwC and Oxford Metrica.

+10%

Recovery in shareholder value of resilient organisations 250 days after a crisis

Source: PwC/Oxford Metrica
-15%

Reduction in shareholder value of less resilient organisations 250 days after a crisis

Source: PwC/Oxford Metrica

In the research, examining the impact on shareholder value of 45 major corporate crises since the global financial crisis of of 2008, organisations that demonstrated greater resilience lost less than 5% of shareholder value in the immediate aftermath of a crisis, compared to a loss of more than 11% for organisations that didn’t display resilient characteristics and capabilities. Crucially, after 30 days the more resilient organisations started to show sustained recovery in value. And by 250 days, those organisations even add a further 10% in shareholder value, compared to the less resilient organisations, which suffered on average a 15% reduction in shareholder value over that time period.

“I tend to view growth and resilience together. If you do not invest in resilience it will have a knock on impact on economic growth as you will end up spending more in the long run. Lack of investment knocks away at resilience. Therefore, resilience facilitates growth.”

Mfon Akpan
Director, Financial Risk and Management Insights, National Audit Office

The research also highlights how the impact of crises on reputation and shareholder value has become more acute since the global financial crisis of 2008 due to factors such as the increase in more damaging cyber threats, as well as the negative amplification of a crisis on social media, a trend that was felt keenly by the UK public in our deliberative sessions with Jigsaw research.

As markets put greater value on the resilience of businesses, it is now starting to be priced into the value of companies. "We are increasingly seeing businesses add a resilience lens to their value creation planning,” says Roberta Carter, Value Creation Lead at PwC UK. “Events of the last three years have shone a light on the need to balance risk taking with resilience. Without some appetite for risk, businesses would not have been able to adapt to the disruption from COVID-19 restrictions, challenges around the access to talent, supply chain pressures and rising costs. Insights and data are at the heart of this type of decision making alongside a clear understanding of business value and what drives it."

By adapting to disruption faster than others and taking advantage of new opportunities, resilience also gives organisations a competitive edge as well as minimising the impact of disruption.

“It is highly likely that resilient organisations will be very good at innovation. If their business model is rendered unsustainable by, say, a major pandemic, they will quickly identify what they need to do in the short, medium and long term to overcome the crisis. In the medium to long term they will probably aim to turn it to their advantage.”

Peter Parry
Investor

When the Ever Given container ship ran aground and blocked the Suez Canal for six days in 2021, for example, it held up almost $10bn in global trade. One global manufacturer that had invested in its resilience was able to use its operations dashboard to see what products were in transit via the canal and whether other parts of its operations could provide substitute supply. The data allowed senior management to make decisions quickly, reassuring customers, ensuring business continuity and minimising the costs of the incident.

CEOs and their C-suite have many competing priorities to drive growth - ESG and secure technology-driven business and operational transformation among them. In our conversations we heard how resilience by design can be the foundation to underpin sustainable growth allowing organisations to prioritise investment and execute business change and reinvention with confidence.

Investment in sustainability and strong ESG performance are also linked with greater resilience. Investment research company Morningstar found that 24 out of 26 sustainable index funds covering US stocks, non-US developed markets and emerging markets held up better during the initial pandemic outbreak in 2020 and outperformed conventional counterparts. The study found that companies that deal with their environmental challenges, treat stakeholders well and govern themselves ethically are more resilient during a sudden crisis.

“Research shows that companies with stronger ESG credentials react better to shocks and are more resilient in general. It’s not just the right thing to do, it’s the smart thing to do. For example, companies that embrace sustainability tend to have greater oversight of their supply chain and embrace concepts such as circularity and have a more diversified set of suppliers.”

Elisa Moscolin
Executive Vice President of Sustainability and Foundation, Sage

Resilience is as key to value creation as it is to value protection because resilient organisations are ready to act with agility and speed to any scenario. Resilience puts organisations on the front foot to change so they can take risk with confidence, using the trust they have built with stakeholders to create sustainable growth. And these confident and better informed leadership actions and decisions in resilient organisations are powered by the technology and data platforms that are now available to them.

Deborah Waterhouse, CEO of ViiV Healthcare, says in our 26th annual CEO Survey: “We have to be bold, try new things and accept some risk. Because if all you do is think about risk then you wouldn't do anything. You wouldn't be audacious, you wouldn't think big, and you wouldn’t believe you can end the HIV epidemic.”

Rethink Resilience - Four ways organisations can evolve for disruption

We have brought together wide-ranging insights from those with the greatest stake in the resilience of organisations across the UK. Their combined reflections set out the business case for why leaders need to take a more strategic approach to resilience and - by making the right investments in people, technology and data - four clear and practical ways to get there.

Explore more

Contact us

Rebecca Cooke

Rebecca Cooke

People Leader for Risk, PwC United Kingdom

Tel: +44 (0)7808 904147

Bobbie Ramsden-Knowles

Bobbie Ramsden-Knowles

Risk and Resilience Partner, PwC United Kingdom

Tel: +44 (0)7483 422701

Follow us