The Age of Persistent Disruption
Disruption used to behave like the weather: bad spells came in, the business battened down, and the spell passed. That assumption has been challenged by a succession of interconnected geopolitical and economic events, and the environment most organisations operate in has been upended.
A New Operating Reality
Three things have changed about how disruption arrives.
- The first is its frequency: where boards once expected two or three significant shocks in a strategic cycle, they now see them in months.
- The second is its persistence. COVID did not really end; it left behind labour-market shifts and supply patterns that businesses are still managing.
- The third change is that disruption no longer obeys borders. A regional conflict in the Gulf reshapes shipping insurance in Singapore. A cyber incident at a single supplier reaches hundreds of customer balance sheets at once.
The implication for boards is significant. The metric that was used to define a good crisis response, speed of return to a previous state, has been displaced. That previous state no longer exists by the time the response is over. What matters now is the ability to keep delivering while conditions are still in motion.
What readiness really means
Part of the current challenge is that readiness and resilience are used interchangeably, but they are very different things. Readiness is the work an organisation does before a disruption arrives: mapping where it is exposed, deciding what has to be protected first, and agreeing who makes which call. It can be entirely conceptual, written down in a policy document, and untested. Resilience is what happens when that work meets the disruption. It is observable, measurable and, for most businesses, the thing boards, investors and regulators are scoring.
Readiness is only valuable to the extent that it survives contact with the operating environment. A continuity plan that has never been moved through end-to-end is a planning document, not a capability. An exposure map updated once a year is a snapshot, not an instrument, which is why embedding readiness into the way the business runs day-to-day is what closes the distance between the two.
Lessons learned from recent crises
Resilience itself has been significantly challenged over the last five years, and nowhere more visibly than in the Middle East. The businesses that came through recent disruptions in reasonable shape were those that had treated readiness as an operating discipline well before the disruption arrived. The businesses that struggled had treated it as a document, held in reserve for the day it was needed.
The articles that follow in this series examine how organisational preparedness is embedded in practice: resilience in action, supply chain, finance, people and cyber, and the role of structured insurance in turning readiness into competitive advantage.
© 2026 Lockton Companies. All rights reserved.
Disclaimer
The steps, considerations, and recommendations outlined in this guidance are provided for general information purposes only and reflect Lockton’s observations and professional views based on current market conditions. They are not guaranteed to be effective in preventing, mitigating, or managing risks, nor are they intended to replace an organisation’s own risk management frameworks, crisis‑management processes, internal controls, contingency planning, or independent professional advice tailored to its specific circumstances.
These recommendations and this guidance do not represent, imply, or create any requirement or assurance that insurers will accept coverage, honor claims, or provide any particular claim outcome. Insurance policy responses depend on the specific facts of each event, the terms and conditions of the relevant policy, and insurers’ independent assessment and decision making. Nothing in this guidance should be interpreted as guaranteeing coverage, confirming policy responses, or ensuring that any claim will be paid.