Audit reports and digital transformation presentations often celebrate one metric as an unquestionable sign of organisational maturity: eliminating duplication and dismantling alternative channels. Consultants and IT directors use impeccable charts to argue that retaining manual support procedures or staff with traditional operational skills is an inefficient extra cost that a modern company cannot afford.
Under this doctrine, organisations rush towards monolithic technical integration. Platforms are unified, critical infrastructure is outsourced to the cloud, and every administrative procedure is digitised, on the assumption that service-level agreements (SLAs) with suppliers provide infallible protection against every eventuality.
This conviction confuses performance in calm conditions with resilience in a catastrophe. By removing all operational slack in pursuit of accounting optimisation, governing bodies eliminate the buffers that allowed the institution to absorb real-world shocks without breaking.
Chunka Mui’s warning: the anatomy of a foreseeable collapse
Chunka Mui and Paul Carroll, co-authors of Billion-Dollar Lessons, examined patterns of major business failures and the role of flawed strategic assumptions. Their work encourages people to challenge decisions that seem beyond question in the boardroom. Applied here to operational continuity, this approach requires technical dependencies to be examined before an interruption turns them into a crisis.
From that perspective, this article proposes examining three governance failures that can aggravate a major technical interruption:
1. The trap of wishful thinking
The board approves a technical roadmap trusting that the system will operate at full capacity without interruption. Cascading failure scenarios are dismissed in advance because contracts guarantee 99.9% availability, ignoring that the remaining 0.1% may coincide with the company’s greatest moment of vulnerability.
2. The irresponsible elimination of a manual fallback plan
In the drive to cut operating expenditure, maintaining alternative non-digital procedures is prohibited or discouraged. When the main platform fails, employees find themselves helpless: they have lost the tacit knowledge needed to serve a customer, manage a warehouse or reconcile payments without software support.
3. Executive complacency in the face of complexity
In large transformation projects, executive committees may take refuge in suppliers’ assurances and disregard internal voices warning about architectural rigidity or unviable dependencies.
The day the screen goes dark
An institution’s true value is not demonstrated when systems run at cruising speed on an ordinary day. A corporation’s fiduciary soundness is tested when the network disconnects, the cloud stops responding and dashboards disappear from the screens.
If the company is then unable to fulfil its basic obligations, maintain the supply of goods or protect its clients’ assets, an assessment of responsibility must include its directors’ continuity decisions as well as the supplier’s conduct. Treating operational memory, local autonomy and human alternatives as dispensable can aggravate the harm. The specific legal allocation of responsibility depends on the facts, contracts and applicable framework.
Governing an institution requires understanding that efficiency pushed to extremes creates fragility. A ship designed without lifeboats to maximise cargo space is a deliberate vulnerability waiting for its first emergency, rather than a masterpiece of naval engineering.
Three mandates to establish operational resilience at board level
Ensuring business continuity when systems fail requires institutional governance safeguards that do not depend on software:
1. Institutionalising a fiduciary premortem review
Require the executive committee to subject every critical technical deployment to a formal premortem led by an independent devil’s advocate. Assume the system has failed catastrophically and require those responsible to demonstrate how the organisation will survive the first seventy-two hours.
2. A non-negotiable requirement for fallback operations
Establish an organisational rule that no critical department may operate unless it demonstrates annually its ability to maintain basic functions through manual procedures or decoupled analogue systems, documenting the teams’ competence to work offline.
3. Giving fiduciary weight to slack and redundancy
Reform technology project evaluation criteria to explicitly reward safety margins, capacity buffers and human redundancy, recognising in financial terms that the apparent inefficiency of reserve capacity is the insurance premium that preserves the company’s life.
In a corporate environment dazzled by the fantasy of total, instantaneous automation, a board’s maturity is measured by its ability to anticipate the storm. Sound executive judgement means never burning the bridges of analogue capability and remembering that, when technology fails, people’s preparation, composure and competence remain essential supports for the institution.