Key Takeaways
- Resilience programs are shifting from documenting plans to helping leaders make faster, better-informed decisions during disruption.
- A service-led view of the business makes it easier to see the dependencies, impacts, and tradeoffs behind those decisions.
- Third-party, technology, and shared-service concentration risk are becoming harder to ignore.
- AI can reduce manual work and strengthen analysis, but human judgment still has to guide the decisions that matter most.
This fall, we spent a busy week in Chicago connecting with resilience leaders at GFMI Chicago and Fusion’s Resilience Exchange. Across the conversations, one theme kept coming up: resilience is no longer just about having plans in place. It is about having the context to make the right decisions when conditions change.
The discussions were practical and refreshingly direct. Leaders are being asked to answer the same questions, often in the first moments of a disruption:
- What is impacted?
- What happens next?
- What is the financial exposure?
- What should we prioritize?
From Documentation to Decisions
For years, resilience programs have centered on building and maintaining plans. Those plans still matter, but teams also need the context to act when disruption occurs.
The challenge now is connecting plans, risk data, technology, third parties, and response workflows in a way that shows leaders what is happening across the business. A service-led resilience approach helps teams understand what customers and stakeholders rely on, what supports those services, and where a disruption could create the greatest impact.
At the Resilience Exchange, attendees reinforced that the hardest executive question is often the most foundational one: which services, products, customers, or locations are impacted?
Financial exposure and response priorities follow closely behind. Those answers require more than a static plan. They require connected, reliable context.
Dependencies are Where Complexity Shows Up
Third-party risk was another recurring theme. Organizations are increasingly dependent on a web of cloud providers, SaaS platforms, suppliers, and shared technology services. AI is only escalating the issue.
You must understand where multiple critical services may rely on the same underlying provider, creating hidden concentration risk.
One customer shared that leaders across their organization are pushing teams to embed AI into processes as quickly as possible. The technology is already being adopted across multiple departments, including business-critical areas.
But the pace of adoption has left little time to plan for what happens if those AI tools become unavailable, as they did during the recent outage. They left with a clear next step: identify where AI creates concentration risk across the business and determine how critical processes can continue during the next disruption.
That is why third-party risk management needs to connect directly to operational impact. When teams can see vendor relationships in the context of critical services and business priorities, they can identify exposures earlier and make more informed decisions during an event.
AI Should Accelerate the Work, Not Replace the Judgment
AI was an expected recurring theme at both events, with speakers focusing on practical questions around how marketers can use it thoughtfully and effectively.
Attendees saw real potential for AI to help enrich incomplete data, surface likely impacts and dependencies, highlight decision points, and improve executive reporting.
There was broad agreement that AI should support resilience teams, not take over their role. It can help with analysis, preparation, and repetitive work that slows teams down. But decisions about customer impact, tradeoffs, and recovery priorities still require people who understand the business and have the authority to act.
That balance is especially important for business continuity teams exploring where automation can help. As discussed in this on-demand webinar, the strongest use cases are often the ones that give teams more time and better context for human decision-making.
A More Connected Future for resilience
The Chicago conversations made one thing clear: resilience is becoming a cross-functional business capability, not a standalone program. Business continuity, operational resilience, IT disaster recovery, cyber response, risk, and third-party risk all need to work from a shared understanding of what matters most.
The organizations making the most progress are not necessarily trying to solve everything at once. They are focusing on the connections that help them make better decisions: critical services, dependencies, impact tolerances, response roles, and the information leaders need when the stakes are high.
Explore Fusion’s approach to enterprise resilience and see how connected data can support stronger planning, testing, and response.
Authors
