For those of us who work in risk, security and resilience, that timeline doesn’t come as a surprise. It’s disturbingly familiar. We saw the same long arc after Piper Alpha in 1988, after Hillsborough in 1989, and after Grenfell in 2017.

By the time the inquiries finish, the Bills are drafted, and the Acts are commenced, the world that produced the original disaster has already moved on. The regulations that eventually land are often hardening yesterday’s risk more than tomorrow’s.

This essay is my attempt to unpack why that keeps happening – and what it tells us about how we really treat safety.

Four disasters, four slow journeys to reform

Piper Alpha – a new regime, years late

On 6 July 1988, the Piper Alpha platform exploded in the North Sea, killing 167 workers. It remains the UK’s worst offshore disaster.

The public inquiry that followed exposed systemic failures in permit‑to‑work, maintenance, communication, and emergency response. It recommended a fundamental shift to a goal‑setting safety case regime overseen by the Health and Safety Executive, replacing detailed prescriptive rules with a requirement on duty holders to demonstrate that they had reduced risks “so far as is reasonably practicable”.

That shift was profound. Over time, it reshaped offshore safety and influenced how we regulate other high‑hazard sectors. In many ways it was a step change in how we think about risk.

But it did not happen quickly. The core legislation arrived several years after the explosion. The new regulations took time to draft and consult on. Then came the slow, painstaking process of assessing every installation, agreeing safety cases, and enforcing them in practice.

From the night of the disaster to a fully embedded new regime, you are looking at close to a decade.

Hillsborough – safety lessons fast, truth and candour painfully slow

On 15 April 1989, 97 people died as a result of the crush at Hillsborough. The interim Taylor Report, published the same year, drove rapid physical reforms in English football: all‑seater stadia in the top divisions, changes to perimeter fencing, and stronger oversight of capacity and crowd management.

In that sense, the “engineering” lessons were implemented relatively quickly.

But the deeper issues around truth, accountability and institutional candour have taken decades to confront. Families spent years fighting official narratives that blamed fans rather than systemic failures. They campaigned for a statutory “Hillsborough Law” to create a legal duty of candour on public authorities and to ensure bereaved families have access to the same quality of legal representation as the state.

More than thirty years on, those reforms are still being argued over and only partially delivered. The legal and cultural shifts have lagged so far behind the physical changes that, for many families, justice has always felt out of reach.

Hillsborough is a split‑screen story: the concrete, engineering‑centred fixes came relatively fast; the transparency and power‑balance issues have moved at a glacial pace.

Grenfell – building safety by the decade

Grenfell Tower burned in June 2017. Seventy‑two people died. The images are now part of our collective memory: fire racing up a facade, people signalling for help at windows, a community watching their neighbours die in real time.

The public inquiry has unfolded in phases over years, exposing a web of failure, in regulation, in building control, in product testing, in landlord oversight. An independent review of building regulations and fire safety concluded that the system for high‑rise residential buildings was simply “not fit for purpose”.

We have seen major legislative responses: new fire safety law clarifying responsibilities, and a Building Safety Act that creates a dedicated regulator and a new regime for higher‑risk buildings. On paper, this is a fundamental reset of how we manage building safety.

But again, look at the timeline. The fire was 2017. The core legislation arrived in 2021 and 2022. Much of the detailed secondary legislation, guidance, and regulator capacity is still being built out. Government’s own implementation plans push key milestones into the late 2020s.

In the meantime, thousands of people continue to live in buildings with cladding and compartmentation issues everyone now understands all too well. The arc from catastrophe to fully functioning new system is once again close to a decade.

Manchester Arena and Martyn’s Law – hardening yesterday’s targets

The Manchester Arena bombing took place on 22 May 2017.

In the years that followed, Martyn Hett’s mother, Figen Murray, became the driving force behind what began as the “Protect Duty” and is now widely known as Martyn’s Law. Her argument was straightforward, if you are responsible for publicly accessible venues where people gather, you should have a clear legal duty to consider terrorism risk and take proportionate steps to protect the public.

The path from that clear idea to actual law has been anything but straightforward.

We had consultation on a Protect Duty. Then a long period of apparent stasis. Then a draft Terrorism (Protection of Premises) Bill. Then yet another consultation on how to handle smaller venues. Political bandwidth was eaten up by Brexit, by a pandemic, by leadership changes.

The Act finally made it onto the statute book in 2025. But buried in the fine print is another long lead‑in: time to build a regulator, publish detailed guidance, and give venues a chance to prepare.

Most serious commentary converges on the same conclusion, for the average venue, Martyn’s Law becomes a real operational duty closer to the ten‑year anniversary of Manchester Arena than to the attack itself.

And that’s before you look at how the law was watered down along the way: higher thresholds, lighter “standard tier” duties, and a design that leans heavily on existing regimes and voluntary guidance rather than driving a truly new mindset.

By the time the law arrives, the threat has moved

From a risk perspective, long lags are a problem because hazards and threats are not static. They adapt to our defences, to technology, to politics, to culture.

Nowhere is this more obvious than in the terrorism space.

The threat picture that drove early thinking on Martyn’s Law was dominated by large‑crowd, high‑impact attacks against obvious targets: arenas, stadiums, big transport hubs. That danger hasn’t gone away, but we have seen a sustained shift towards fast, low‑tech, low‑signature attacks by lone actors or small cells. The targets are often softer and smaller: faith settings, schools, community spaces, open‑air gatherings and markets.

Martyn’s Law, as finally framed, is built around:

• Fixed premises that can host 200 or more people at the same time.

• Formal events where 800 or more people are expected at once, in a clearly bounded space with controlled entry.

• A “standard” tier that is deliberately described as low‑ or no‑cost, focused on procedures, and explicitly not about forcing new physical measures onto smaller venues.

That will certainly improve preparedness in part of the estate: big retail, arenas, major visitor attractions, the larger end of hospitality, and formal events with tickets and fences.

But the threat has already bled into spaces that sit below or outside those definitions. A small mosque or synagogue with a regular congregation well under 200. A youth club, a small independent school, a community hall. A town‑centre Christmas market spread across public streets with no ticketing or perimeter. A vigil or protest where hundreds gather at short notice.

From the attacker’s point of view, the attraction of those targets is obvious. From the law’s point of view, they are often grey areas or beyond scope.

That mis‑match – between where the law bites and where the risk is evolving – is the heart of my discomfort with how long we take to move from “we know what went wrong” to “we’ve made sure it’s harder to happen again”.

Why do we keep learning so slowly?

Looking across Piper Alpha, Hillsborough, Grenfell and Martyn’s Law, four themes stand out.

1. Political bandwidth and competing crises

Reform has to fight for oxygen.

Piper Alpha’s legacy was shaped against the backdrop of wider debates about deregulation and the future of the North Sea. Grenfell has had to compete for attention with housing policy, austerity, and the politics of who pays for remediation. Martyn’s Law’s journey has been overshadowed by Brexit, Covid and rapid changes of political leadership.

It’s not that ministers and officials don’t care. It’s that slow‑burn, systemic risks keep getting pushed off the top of the pile by the crisis of the day. From the outside, what looks like careful prioritisation often feels like strategic amnesia.

2. Fear of “burden on business”

In every one of these domains, there has been a constant drumbeat of concern about cost and “red tape”.

In Martyn’s Law, you can trace the fingerprints of that concern in the way the standard tier was softened, no mandated terrorism‑training product, no compulsory standard form, explicit assurances that no one would be forced into expensive physical upgrades.

Post‑Grenfell, similar arguments appear around who pays for remedial works and how far new duties should bite into existing stock versus new builds.

There is a legitimate debate to be had about proportionality. Nobody wants poorly designed regulation that crushes small organisations or stifles community spaces. But when “burden on business” becomes the primary lens, rather than one factor among many, the gravitational pull is always towards the minimum viable change that can be pushed through.

3. Inquiry culture vs adaptive risk

The UK instinctively responds to catastrophe with a public inquiry. That instinct has its virtues: thoroughness, a public record, some measure of catharsis.

But inquiries are inherently backward‑looking. They examine a particular chain of events in a particular context. Their recommendations are framed around what was known, technically feasible and politically thinkable at the time.

By the time those recommendations are translated into detailed policy, drafted as legislation, fought over in Parliament, and then turned into regulations and guidance, the world has moved. Technology has changed. Markets have evolved. Adversaries have read the same reports.

So we build very precise systems designed to prevent a recurrence of that disaster under those conditions, and then we try to stretch those systems to cover a risk landscape that has already shifted.

4. Fragmented responsibility and diffused accountability

In all these cases, responsibility is spread across many hands.

Offshore oil and gas involved operators, contractors, regulators and government departments. Football crowd safety sat across clubs, police, local authorities and governing bodies. Building safety spans landlords, freeholders, managing agents, architects, contractors, building control, fire services and central government. Public‑venue terrorism risk is shared between venue operators, local authorities, private security, police and multiple central bodies.

Where responsibility is fragmented, reform is harder and slower. It is too easy for each party to argue that someone else should move first, pay more, or accept more liability. Negotiating those boundaries takes time. In the meantime, the people exposed to the risk – platform workers, football fans, residents, concert‑goers, are stuck in the middle.

What this tells us – and what we can do about it

It would be easy to throw up our hands and say: “That’s just how it is. The system is slow. Politics is messy. We will always regulate the last disaster.”

I don’t think that’s good enough. And I don’t think it’s the only way forward.

1. Treat law as a floor, not a ceiling

Piper Alpha showed that goal‑setting regimes can work when there is a shared bias towards safety. The safety case approach constantly forces the question: “What would a reasonably practicable safe system look like here?” – not “what is the bare minimum the rules say I must do?”.

Martyn’s Law can be read in the same way. For venues in scope, it should be the floor, not the ceiling. For venues that fall just below a threshold or sit in a grey area, it should act as a benchmark for what “good” looks like, even if the letter of the law doesn’t yet compel them.

2. Change the default question

Organisations still default to: “What does the law require me to do?” The more useful question is: “Given our risks, our people and our context, what is reasonably practicable, and how will we justify our choices when they are scrutinised later?”

The 200‑ and 800‑person thresholds in Martyn’s Law are legal constructs. They are not magical safety numbers. The threat doesn’t materialise at 201 and disappear at 199.

If you run a 150‑person youth venue, a small faith setting, a local fair, a school or college, you may not be squarely in scope of Martyn’s Law. But you are certainly in scope of a deeper duty of care. The absence of a statutory obligation does not equate to the absence of risk.

3. Practitioners have to move faster than Parliament

The law will almost always arrive late. That doesn’t mean it’s useless, but it does mean we cannot afford to wait for it before we act.

Most of the important safety decisions are made in design reviews, procurement choices, staffing models, training budgets, local partnership meetings and yes, sometimes in quick WhatsApp exchanges on a busy day. Those are the moments where we can choose to integrate lessons across domains – to apply Grenfell thinking to smaller residential blocks, to apply Martyn’s Law thinking to sub‑threshold venues, to apply offshore “safety case” thinking to new types of infrastructure.

Those of us in risk, safety and resilience have to be the people who shorten the lag: who notice emerging tactics, who join dots across sectors, who argue for doing the obvious, proportionate things now rather than after the next inquiry.

Closing thought

When I look across Piper Alpha, Hillsborough, Grenfell and Martyn’s Law, what depresses me is not that we fail to learn. We do learn, eventually. The safety case regime transformed offshore operations. Football grounds are safer than they were in 1989. Building safety is being fundamentally re‑set. Martyn’s Law will almost certainly save lives in some future incident.

What troubles me is the time it takes us to admit what we already know, to agree on a baseline of “good enough”, and to hard‑wire that into how we build, operate and govern, while hazards and threats keep moving.

We can’t fix the whole system alone. But in our own spheres of influence, we can refuse to treat the law as the final word. We can choose to act as if the next inquiry is already being written, and ask ourselves now:

When they look back at this moment, will they say we did what was reasonably practicable – or that we waited to be told?

On 24 March 2026, the Philippines declared a state of national energy emergency as geopolitical disruption collided with supply chain fragility. Conflict in the Middle East tightened flows through the Strait of Hormuz, while Chinese refiners curtailed exports to secure domestic supply (BBC, 2026; Reuters, 2026a; Philippine News Agency, 2026; Modern Diplomacy, 2026).

The system did not collapse.

But it tightened, and it remains under pressure.

This distinction is analytically important. System collapse is observable and immediate. System tightening is gradual, diffuse, and often misinterpreted until secondary effects begin to accumulate. It manifests through delays, cost escalation, and decision latency, symptoms of a system operating under constraint rather than failure.

This is not a retrospective analysis. It is an assessment of a system operating within an ongoing disruption.

The Assumption of Continuity

ASEAN’s economic expansion has been underpinned by a largely implicit assumption of continuity in energy availability and maritime mobility. Fuel flows, shipping routes, and labour movement have been treated as stable inputs into system design rather than variable constraints.

In the Philippine context, this assumption is structurally embedded. As an archipelagic state, economic activity is dependent on inter-island connectivity, itself reliant on consistent fuel supply. Energy functions not merely as an industrial input, but as a systemic connector linking production, distribution, and labour mobility.

At the point of emergency declaration, national fuel reserves were estimated at approximately 45–53 days for refined products, with crude reserves extending further (New York Times, 2026; Al Jazeera, 2026; Manila Bulletin, 2026). While sufficient to prevent immediate disruption, such reserves provide limited insulation against prolonged geopolitical supply constraints.

Sustained uncertainty at this level begins to alter behaviour, operational, commercial, and social.

From Discrete Event to Structural Condition

Traditional risk frameworks continue to conceptualise disruption as episodic, bounded in time and followed by recovery.

However, the 2026 energy shock reflects a broader structural shift. The vulnerability of the Strait of Hormuz, combined with the strategic use of export controls by major economies, signals a transition towards a more contested and politicised energy environment (IEEJ, 2025; Asia House, 2026; Reuters, 2026b).

In such an environment, disruption ceases to be an external shock and becomes an operating condition.

This reframes the core resilience question. It is no longer centred on recovery timelines, but on whether organisational systems are designed to function under sustained constraint.

Manifestations of Constraint: Operational and Human

At the macro level, energy disruption is typically analysed through pricing, supply levels, and market response.

At the operational level, its effects are more granular.

Fuel constraints translate into increased transport costs, reduced logistics reliability, and extended delivery timelines. For organisations, this introduces margin compression, contractual exposure, and operational inefficiencies.

At the human level, the impact is immediate and cumulative. Increased transport costs affect workforce mobility. Reduced mobility affects income stability. In geographically fragmented economies, such as the Philippines, these effects are magnified by dependence on inter-island transport networks.

These are not singular points of failure, but distributed pressures. Their significance lies in accumulation rather than intensity.

The Limits of Current Preparedness Models

Many organisations operating in ASEAN demonstrate maturity in compliance-based risk management. ISO-aligned frameworks, documented risk registers, and business continuity plans are widely implemented (PIDS, 2023).

However, these systems are predominantly calibrated for short-duration, localised disruptions. They assume eventual reversion to baseline conditions.

The Philippine case exposes the limitations of this assumption.

Under conditions of sustained constraint, the primary challenge is not plan activation, but situational interpretation. Organisations must continuously assess how evolving supply conditions translate into operational capability.

Key questions emerge:

• What level of activity can be sustained under partial fuel availability?

• Which functions degrade first, and what are the second-order effects?

• At what point do operational compromises introduce safety or reputational risk?

In many cases, these questions are not pre-defined. As a result, they are addressed reactively, reducing decision speed and increasing systemic exposure.

Operating in the Space Between Stability and Disruption

The Philippine energy emergency remains ongoing. Supply flows persist, but under constraint. Prices remain volatile. Strategic buffers are finite, and external dependencies continue to introduce uncertainty (Gulf News, 2026; PowerPhilippines, 2026; Reuters, 2026a).

This creates an intermediate operational state, neither stable nor fully disrupted.

It is within this space that resilience is most rigorously tested.

Organisations are required to manage progressive degradation rather than binary disruption. This involves prioritising critical functions, reallocating constrained resources, and absorbing inefficiencies over extended periods.

Such conditions demand continuous recalibration rather than discrete response.

Interdependence and Systemic Propagation

ASEAN’s regional integration has produced significant efficiency gains. However, it has also increased systemic interdependence across energy, logistics, and economic activity (ERIA, 2025; EU–ASEAN Business Council, 2025).

Under conditions of constraint, this interdependence accelerates the propagation of disruption.

Energy constraints impact transport systems. Transport disruptions affect production continuity. Production instability influences labour markets and income flows.

The system does not fail at a single node. It experiences distributed stress across multiple interconnected nodes simultaneously.

This diffusion of pressure complicates both detection and response.

Decision-Making Under Constraint

The limiting factor in such environments is not information availability, but decision-making capability.

Data on supply, pricing, and logistics is accessible. However, translating this information into coordinated organisational action requires clarity in authority, thresholds, and priorities.

Ambiguities in governance structures, particularly around escalation triggers and decision rights, become critical vulnerabilities under pressure (BBC, 2026; Reuters, 2026a; Philippine News Agency, 2026).

Where these parameters are not pre-defined, organisations experience decision latency, increasing operational risk.

Reframing Resilience as Operational Capability

The Philippine energy emergency highlights a fundamental distinction between preparedness and capability.

Preparedness is the existence of plans and frameworks.
Capability is the ability to execute under constraint.

Capability is developed through stress-testing systems against realistic conditions, identifying failure points, and rehearsing decision-making processes in advance.

It also requires acceptance that optimal outcomes may not be achievable under sustained constraint.

Resilience, therefore, is not the preservation of normal operations, but the maintenance of functional continuity as conditions deteriorate.

Conclusion: An Ongoing System Under Stress

The Philippine energy emergency remains unresolved.

Supply conditions are subject to continued geopolitical volatility. Export restrictions may persist or intensify. The system continues to operate within a narrow margin between stability and disruption (Reuters, 2026a; BBC, 2026; New York Times, 2026).

This is not a discrete event that can be analysed retrospectively. It is an ongoing operational condition.

For organisations across ASEAN, the implication is immediate.

Resilience must be evaluated not against hypothetical scenarios, but against current conditions.

The critical question is no longer whether disruption will occur, but whether systems are already capable of functioning within it.

And, more fundamentally, whether they were ever designed to do so.

Further reading:

• PNA: PBBM declares state of nat’l energy emergency amid global supply risks — https://www.pna.gov.ph/articles/1271702

• Modern Diplomacy: China’s Fuel Export Freeze Deepens Asia’s Energy Shortage — https://moderndiplomacy.eu/2026/03/17/chinas-fuel-export-freeze-deepens-asias-energy-shortage/

• PNA: PBBM orders release of P20-B emergency fund to secure PH fuel supply — https://www.pna.gov.ph/articles/1271722

• Biz groups back state of national energy emergency declaration — https://www.pna.gov.ph/articles/1271806

• Oil firms assure supply as PBBM orders action vs. price shocks — https://www.pna.gov.ph/articles/1270980

• PBBM directive on energy conservation takes effect in Albay offices — https://www.pna.gov.ph/articles/1270610

Boards and executive teams increasingly operate under the assumption that exposure to geopolitical and security risk is being adequately managed through the procurement of external intelligence products. Heat maps, dashboards and long-form regional assessments are treated as evidence of coverage. In practice, many of these outputs provide a veneer of sophistication while failing to materially support decision-making in volatile environments.

The issue is not a lack of information, but a failure of translation, specifically, the inability to convert observable events into calibrated, decision-relevant risk positions. This weakness becomes most visible in active or near-active conflict environments, where the consequences of misjudgement are immediate and compounding (RSM Malta, 2024; StandardFusion, 2026).

What is presented as “intelligence” is, in many cases, structured narrative layered over weak or opaque methodological foundations.

The structural problem: abstraction over evidence

Contemporary corporate risk products typically rely on three core components: country-level risk maps, probability–impact matrices and narrative reporting. While each has standalone value, their combined application, without methodological transparency, creates an illusion of precision that is difficult to interrogate.

Country risk maps compress complex, multi-domain realities into simplified categorical outputs. Political instability, infrastructure degradation, regulatory volatility and physical security threats are aggregated into a single rating, often without disclosure of indicator selection or weighting logic (RIMS, 2017; AFERM, 2017). This aggregation limits the ability of users to challenge or validate the assessment.

Probability–impact matrices present a similar issue. Although widely adopted, they frequently rely on loosely defined scales and subjective judgement, particularly in relation to low-frequency, high-impact events that characterise geopolitical crises (GARP, 2022; SRA Global, 2025). The structure appears robust; the calibration is often not.

Narrative reporting, which typically accompanies these tools, is often comprehensive and well-articulated. However, it frequently lacks a transparent link between observed indicators and assigned risk ratings. The descriptive layer is strong; the analytical linkage is weak (Riskonnect, 2022; Deloitte, n.d.).

This disconnect is not incidental, it is structural.

When narrative and reality diverge

A recent regional assessment of a large-scale Gulf–Iran escalation illustrated this divergence. The report documented widespread disruption across multiple domains, including coordinated strikes across Iranian territory, effective closure of the Strait of Hormuz due to insurance withdrawal, force majeure declarations across LNG supply chains, airspace restrictions and direct targeting of critical infrastructure.[1]

The narrative described halted exports, stranded vessels, production constraints and evacuation guidance for non-essential personnel. In isolation, this reflected a high-intensity operating environment with clear implications for business continuity.

However, the associated risk ratings remained comparatively restrained. Iraq, despite export disruption, airspace closure and militia activity, was classified with only moderate operational risk. Similarly, Gulf states experiencing direct strikes and infrastructure disruption were positioned within moderate or moderate-high bands.

The issue is not interpretation, but calibration. If observable indicators, such as infrastructure targeting, logistics disruption and operational constraints, do not trigger corresponding escalation in risk ratings, then the underlying model is either constrained or misaligned (Turnkey Consulting, 2019; RSM Malta, 2024).

In such cases, the output ceases to function as a decision-support tool and instead becomes a presentation artefact.

The influence of AI-generated analysis

The integration of generative AI into intelligence production has introduced additional complexity. While such tools improve efficiency and synthesis, they also reinforce existing weaknesses when not applied with discipline.

AI-assisted outputs tend towards fluency and structural coherence but may lack analytical depth. Common characteristics include repetition, generalisation and reliance on historical analogy without clear operational relevance (MIT Sloan, 2024). Assertions are often presented without defined thresholds or supporting datasets, reducing their value in decision-making contexts.

The result is an expansion of narrative volume without a corresponding increase in actionable insight. For decision-makers, this creates a risk of overconfidence in outputs that appear comprehensive but lack evidential grounding (AuditBoard, 2025; LineSlip Solutions, 2026).

Static models in dynamic environments

A broader structural issue lies in the persistence of static frameworks within dynamic threat environments.

Many corporate risk systems operate on update cycles that are incompatible with the pace of geopolitical crises. Weekly or monthly refresh intervals are insufficient in environments where conditions shift within hours, leading to reliance on outdated assessments (RIMS, 2017; AFERM, 2017).

At the same time, the underlying models remain opaque. Vendors increasingly reference AI-enhanced scoring or continuous monitoring capabilities, yet provide limited transparency regarding data inputs, weighting mechanisms or calibration processes (Seerist, 2025; Deloitte, n.d.). This restricts the ability of users to evaluate the reliability of outputs.

Critically, most assessments remain at the country level, despite risk being experienced at the level of assets, corridors and operational dependencies. This mismatch reduces the practical value of the analysis for organisations operating in complex environments (Rule, 2025).

Re-grounding risk: LICREPH as a proprietary, evidence-led framework

Addressing these limitations requires a shift from narrative-driven assessment to structured, evidence-based risk modelling. At Pillars Global, this has led to the development of LICREPH a proprietary risk framework designed specifically for environments where conventional models consistently fail.

LICREPH (Likelihood, Impact, Criticality, Resilience, Exposure, Priority and Human Factors) was developed from operational conditions rather than theoretical constructs. It reflects the need to translate real-world disruption into defensible, decision-relevant risk outputs.

Unlike traditional matrices, LICREPH disaggregates risk into defined components:

• Likelihood derived from observable indicators and incident patterns

• Impact assessed across operational, financial and human dimensions

• Criticality linked to the strategic importance of affected assets

• Resilience reflecting organisational recovery capacity

• Exposure capturing proximity and vulnerability

• Priority aligning risk with decision thresholds

• Human Factors accounting for behavioural and leadership variables

This structure introduces transparency. Each component is measurable, adjustable and directly linked to observable inputs. It also enables calibration, allowing scores to be tested against historical events and refined over time (GARP, 2022; RSM Malta, 2024).

Crucially, LICREPH enforces alignment between evidence and output. Where indicators escalate, the model requires corresponding escalation in risk scores. This removes the tendency to moderate outputs for consistency or presentation.

The below table offers the current LICREPH ground truth for southern Iraq as of Friday march 20th 2026

When applied to complex environments such as southern Iraq or the wider Gulf, LICREPH produces materially different outcomes from traditional models.

Simultaneous disruption to airspace, energy exports and critical infrastructure directly elevates Likelihood, Exposure and Impact scores. Assets such as export terminals, refineries or data centres increase Criticality, amplifying the overall risk position. Where resilience is limited or degraded, this further compounds the score.

The result is not a moderated average, but a defensible risk state grounded in operational conditions.

This distinction is significant. Traditional models often smooth or average risk to maintain consistency. LICREPH, by design, does not. It reflects the environment as it is, not as it is convenient to present.

Integrating macro and micro analysis

While LICREPH forms the proprietary decision engine, it is supported by established analytical structures.

At the macro level, PESTLE provides a disciplined framework for assessing environmental pressures across political, economic, social, technological, legal and environmental domains (CIPD, 2025; Consulterce, 2021). These dimensions inform Likelihood and Exposure within LICREPH.

At the micro level, impact models such as PEARS support asset-specific consequence analysis across people, environment, assets, regulatory exposure and systems (SIL Safe, 2026; SynergenOG, 2023). These feed directly into Impact and Criticality scoring.

Within this structure, PESTLE and PEARS provide context and detail. LICREPH integrates them into a coherent, calibrated risk output.

Implications for boards and risk leaders

For boards and risk leaders, the implication is not the rejection of external intelligence, but a more disciplined engagement with it.

Risk outputs should be interrogated for methodological transparency, data provenance and calibration. Where these elements are absent, outputs should be treated as contextual inputs rather than decision anchors (AuditBoard, 2025; StandardFusion, 2026).

More fundamentally, organisations must retain ownership of risk interpretation. External vendors can inform, but they cannot substitute for internal judgement grounded in operational understanding.

In high-risk environments, the cost of mis-calibrated risk is operational, not theoretical.

Conclusion

Corporate risk intelligence has evolved in presentation but not consistently in analytical rigour. Visualisation, narrative and delivery have improved, yet the underlying challenge remains unresolved: translating complex, dynamic environments into calibrated, decision-relevant outputs.

The gap between intelligence and insight persists because models remain opaque, static and insufficiently anchored in observable reality.

Proprietary frameworks such as LICREPH developed from operational necessity rather than theoretical design, offer a more transparent and accountable approach. By forcing alignment between observed events and risk outputs, they move risk assessment closer to the realities decision-makers must confront.

In environments defined by volatility and consequence, that distinction is not academic.

It is operational.

References

AFERM (2017) The strengths and weaknesses of country risk maps. Available at:

https://www.aferm.org

(Accessed: 20 March 2026).

AuditBoard (2025) New risk intelligence report: inconsistent execution is the primary barrier stalling enterprise AI deployment. Available at: https://www.auditboard.com/blog (Accessed: 20 March 2026).

CIPD (2025) PESTLE analysis. Available at: https://www.cipd.org/uk/knowledge/factsheets/pestle-analysis-factsheet(Accessed: 20 March 2026).

Consulterce (2021) PESTLE analysis: the macro-environmental framework explained. Available at: https://consulterce.com/blog/pestle-analysis (Accessed: 20 March 2026).

Deloitte (no date) The connecting force: risk intelligence platforms enabling decisions. Available at:

https://www2.deloitte.com

(Accessed: 20 March 2026).

GARP (2022) The risk matrix approach: strengths and limitations. Available at: https://www.garp.org/risk-intelligence(Accessed: 20 March 2026).

LineSlip Solutions (2026) Risk intelligence for corporate risk leaders. Available at:

https://www.lineslipsolutions.com

(Accessed: 20 March 2026).

MIT Sloan Management Review (2024) AI-related risks test the limits of organizational risk management. Available at: https://sloanreview.mit.edu/article/ai-related-risks-test-the-limits-of-organizational-risk-management (Accessed: 20 March 2026).

RIMS (2017) The strengths and weaknesses of country risk maps. Available at: https://www.rmmagazine.com/articles/article/2017/11/01/the-strengths-and-weaknesses-of-country-risk-maps(Accessed: 20 March 2026).

Riskonnect (2022) What is risk intelligence? A comprehensive guide. Available at: https://riskonnect.com/risk-management/what-is-risk-intelligence (Accessed: 20 March 2026).

RSM Malta (2024) ERM – limitations of traditional risk management. Available at: https://www.rsm.global/malta/insights/erm-limitations-traditional-risk-management (Accessed: 20 March 2026).

Rule, J. (2025) Geopolitical risk: 5 red flags that put your third-party vendors at risk. Available at: https://www.rule.co.uk (Accessed: 20 March 2026).

Seerist (2025) AI-driven geopolitical risk monitoring platforms. Available at:

https://seerist.com

(Accessed: 20 March 2026).

SIL Safe (2026) PEAR model – People, Environment, Asset, Reputation. Available at: https://www.silsafe.net/glossary/pear (Accessed: 20 March 2026).

SRA Global (2025) The fundamental flaw of the risk matrix tool. Available at: https://www.sra-global.com/blog(Accessed: 20 March 2026).

StandardFusion (2026) Enterprise risk management vs traditional risk management. Available at: https://www.standardfusion.com/blog (Accessed: 20 March 2026).

SynergenOG (2023) What is PEAR in risk assessment? Available at: https://www.synergenog.com/knowledge/what-is-pear-risk-assessment (Accessed: 20 March 2026).

Turnkey Consulting (2019) The limitations of traditional risk management. Available at: https://www.turnkey-consulting.com/blog (Accessed: 20 March 2026).

That framing is understandable, but it is incomplete.

What we are witnessing is something more complex: actuarial warfare at the world’s energy arteries. Rather than relying solely on direct military destruction, states and proxy actors are exploiting chokepoints, insurance markets and supply-chain fragility to disrupt the global economy.

In this environment, the objective is not necessarily to sink ships.

It is to raise uncertainty and perceived risk to the point where insurers withdraw cover and commercial actors refuse to operate.

Once that threshold is crossed, trade can stop without sustained kinetic conflict.

LICREPH — a decision-led risk framework used in resilience and geopolitical analysis — helps explain why this strategy is now emerging so forcefully. Rather than analysing isolated incidents, LICREPH evaluates three interacting layers:

• Structural threat pressure

• System resilience and redundancy

• Operational and human escalation dynamics

Viewed through this lens, the current crisis does not appear as a sudden shock. It looks more like the inevitable outcome of two decades of structural under-investment in geopolitical resilience (UNCTAD, 2026; Alvarez & Marsal, 2026).

What this means in plain terms

Three structural realities now define the global energy system.

• Strategic chokepoints are leverage points. Narrow maritime corridors increasingly function as geopolitical pressure valves.

• Insurance markets have become part of the battlefield. When insurers withdraw coverage, trade can halt even without direct physical destruction.

• The global energy system was built for efficiency rather than resilience. As geopolitical tension rises, its structural fragility becomes visible.

The Strait of Hormuz crisis is therefore not simply a regional confrontation.

It is a system-wide stress test of the global trading architecture.

The structural vulnerability we chose to live with

The scale of global dependence on a handful of maritime corridors has been clear for years.

Roughly 20 percent of global seaborne crude oil, and a significant share of liquefied natural gas exports transit the Strait of Hormuz daily (EIA, 2026). Additional energy flows pass through the Bab el-Mandeb strait and the Suez Canal corridor, linking Gulf producers to European and Asian markets (UNCTAD, 2026).

Together these maritime chokepoints form the narrow bottleneck through which much of the global economy must pass.

Some redundancy infrastructure exists.

Saudi Arabia’s East–West pipeline allows crude to bypass Hormuz by transporting oil to the Red Sea port of Yanbu. Similarly, the UAE’s Habshan–Fujairah pipeline carries crude across the Emirates to the Gulf of Oman (Oxford Institute for Energy Studies, 2026; CSIS, 2026).

During the current crisis these pipelines are operating at near capacity as exporters attempt to redirect flows away from the strait (Kpler, 2026).

Yet these alternatives provide only partial relief.

Countries including Kuwait, Qatar, Bahrain and southern Iraq remain heavily dependent on Hormuz for energy exports. With limited alternative pipeline infrastructure or storage capacity, disruption to the strait can rapidly transform these states from major exporters into temporarily stranded producers (UNCTAD, 2026; Oxford Economics, 2026).

The structural picture is stark.

A large portion of global energy supply depends on a maritime corridor bordered by Iran, a state that has spent decades investing in asymmetric naval capabilities including anti-ship missiles, naval mines, drones and fast-attack craft designed specifically to disrupt shipping lanes (CSIS, 2026; EIA, 2026).

This vulnerability did not emerge suddenly.

It reflects decades of economic optimisation that prioritised efficiency and cost over resilience.

Why the LICREPH risk score is structurally high

The LICREPH framework reveals why the current crisis produces such severe systemic stress.

First, structural threat pressure has intensified. Attacks on tankers, drone strikes against shipping and repeated threats to close the strait have transformed a long-recognised vulnerability into an operational reality (CSIS, 2026; Oxford Institute for Energy Studies, 2026).

Second, system resilience remains limited. Alternative pipelines and longer maritime routes cannot easily replace the massive daily energy flows that typically pass through Hormuz (UNCTAD, 2026; EIA, 2026). Even when diversion is possible, it often increases transit times and costs dramatically.

Third, operational and human escalation pressure is extremely high. Governments, shipping firms, energy traders and insurers must make decisions under intense uncertainty and compressed timelines (Alvarez & Marsal, 2026; CSIS, 2026).

At the operational level, ship captains and chartering managers face a stark calculation: navigate through increasingly dangerous waters or halt operations entirely.

A single misjudgment could destroy a vessel, trigger geopolitical escalation or produce massive financial losses (Bloomberg, 2026; The Guardian, 2026).

When these three layers combine, the system moves into a persistent high-risk regime rather than a short-term disruption.

Insurance as a weapon

One of the most consequential developments in the crisis has occurred not on the water but within global insurance markets.

War-risk insurers and protection-and-indemnity clubs have begun withdrawing coverage for vessels operating in parts of the Gulf and surrounding waters (Bloomberg, 2026; Ship & Bunker, 2026).

This decision dramatically alters the economics of maritime trade.

When insurance coverage exists, voyages through dangerous regions can be priced accordingly. Elevated premiums compensate insurers while allowing shipowners to continue operations.

When coverage disappears entirely, the calculation changes.

Without insurance protection, a single attack can generate catastrophic losses across hull damage, cargo destruction, environmental liability and crew compensation (The Guardian, 2026; Alvarez & Marsal, 2026).

Under those conditions, rational shipowners simply stop sailing.

UNCTAD reports that tanker traffic through the region has already declined significantly as vessels delay departures or divert routes to avoid uninsured risk (UNCTAD, 2026).

This dynamic illustrates the concept of actuarial warfare.

Rather than relying solely on kinetic destruction, actors manipulate the perceived risk environment until insurers withdraw coverage and commercial activity collapses.

In effect, geography, military pressure and actuarial decision-making combine to disrupt global trade.

From a LICREPH perspective, removing insurance buffers simultaneously increases exposure, reduces resilience and intensifies human decision pressure.

The result is a dramatically higher systemic risk score.

Iran’s dual leverage

Iran occupies a uniquely powerful position within this strategic environment.

Geographically, it controls the northern edge of the Strait of Hormuz, giving it direct proximity to one of the world’s most critical maritime corridors.

At the same time, Tehran exerts indirect influence over the Red Sea corridor through its support for Houthi forces in Yemen, creating pressure at a second vital shipping gateway (Washington Institute, 2024; UNAV, 2024).

This dual leverage allows Iran to affect global trade at two critical maritime chokepoints simultaneously.

Compounding this is the opaque nature of Iran’s political decision-making system. Power within the Iranian state is fragmented across formal institutions, military organisations and clerical authorities, often making escalation thresholds difficult for external observers to interpret (Georgetown Security Studies Review, 2015; Brandeis Crown Center, 2025).

This ambiguity forces international actors to assume worst-case scenarios when evaluating risk.

Combined with geographical leverage, this uncertainty magnifies Iran’s strategic influence far beyond the size of its formal economy (Oxford Institute for Energy Studies, 2026; CSIS, 2026).

China’s financial influence

Overlaying these geopolitical dynamics is China’s expanding economic relationship with Iran.

The two countries signed a long-term strategic cooperation agreement covering energy investment, infrastructure development and technology partnerships (Al Jazeera, 2021; Middle East Institute, 2022).

For Iran, which faces extensive Western sanctions, Chinese investment provides economic stability and access to capital markets.

However, analysts note that these agreements may also generate structural dependence, increasing Beijing’s influence over Iran’s economic trajectory and strategic decisions (IranWire, 2022; SSRN, 2024).

From a geopolitical perspective, this dynamic places one of the world’s most critical energy chokepoints increasingly within the financial orbit of a major global power.

For Western policymakers, this represents a complex strategic challenge: a key node of the global energy system is now embedded within a network of geopolitical rivalry.

A two-decade failure of geopolitical resilience

Viewed through the LICREPH framework, the past twenty years reveal a consistent structural trend.

Global energy demand expanded rapidly while maritime trade routes remained concentrated through a small number of vulnerable chokepoints (UNCTAD, 2026; EIA, 2026).

Infrastructure redundancy and geopolitical risk-sharing mechanisms failed to expand at the same pace (Oxford Economics, 2026; CSIS, 2026).

At the same time, the global economy increasingly relied on highly efficient just-in-time supply chains.

The resulting system operates extremely efficiently during stable periods.

But when geopolitical stress appears, it proves dangerously fragile.

Where business and policy go from here

For corporate boards, energy companies and policymakers, the strategic implications are clear.

The Hormuz crisis should not be treated as a temporary anomaly but as an early demonstration of the geopolitical operating environment likely to define the coming decade (CSIS, 2026; Alvarez & Marsal, 2026).

Three strategic adjustments follow.

First, organisations must re-price geographic exposure, distinguishing clearly between supply chains dependent on Hormuz and those that are not.

Second, governments and corporations must invest in true redundancy, including diversified energy sourcing, flexible refining capacity and expanded storage infrastructure.

Third, capital allocation decisions should incorporate geopolitical resilience stress-testing, including scenarios in which major maritime routes or insurance markets become unavailable for extended periods.

The current crisis is not an anomaly.

It is the visible outcome of decades of structural choices about how global energy systems were designed.

The question facing policymakers and industry leaders is therefore simple.

Do we continue rolling the dice, or begin redesigning the system that powers the global economy?

References

1. CSIS (2026) What Does the Iran War Mean for Global Energy Markets?

   https://www.csis.org

2. UNCTAD (2026) Strait of Hormuz Disruptions: Implications for Global Trade and Development

   https://unctad.org

3. Oxford Institute for Energy Studies (2026) Disruption in the Strait of Hormuz

   https://www.oxfordenergy.org

4. Alvarez & Marsal (2026) Navigating the 2026 Energy Crisis

   https://www.alvarezandmarsal.com

5. EIA (2026) Strait of Hormuz Oil Transit Data

   https://www.eia.gov

6. Kpler (2026) Strait of Hormuz Crisis and Global Oil Markets

   https://www.kpler.com

7. Oxford Economics (2026) Iran and the Strait of Hormuz: Energy Market Risks

   https://www.oxfordeconomics.com

8. Bloomberg (2026) Insurance Clubs Halt War-Risk Cover in Persian Gulf

   https://www.bloomberg.com

9. The Guardian (2026) Maritime insurers cancel war risk cover in Gulf

   https://www.theguardian.com

10. Washington Institute (2024) Houthi Shipping Attacks Analysis

    https://www.washingtoninstitute.org

11. UNAV (2024) Red Sea Shipping Disruptions

    https://www.unav.edu

12. Al Jazeera (2021) Iran-China Strategic Agreement
    https://www.aljazeera.com

Escalatory cycles between Israel and Iran, the regional spillover from the October 2023 Gaza war, persistent attacks on Gulf energy infrastructure, and renewed US force deployments have re-intensified debate over Middle Eastern order. While much scholarship focuses on deterrence dynamics and balance-of-power shifts, this article argues that a deeper structural transformation is underway. The Gulf energy system is increasingly organised around a bifurcated external hegemony: the United States continues to underwrite the region’s security layer, while China consolidates its position within its economic and infrastructural layer.

Drawing on hegemonic stability theory, complex interdependence, and infrastructure resilience analysis, the article contends that this functional division of labour—security provision by Washington, reconstruction and capital deployment by Beijing—may stabilise regional energy flows in the short term while embedding long-term strategic asymmetry. Using Iraq as the principal case study and analysing one-, five- and ten-year horizons, the article explores how a model of “functional dual hegemony” may become the organising logic of Gulf order. It concludes that although this arrangement may appear efficient and attractive to regional elites, it is structurally fragile and strategically unstable.

1. Introduction

The Gulf has entered a renewed period of strategic volatility. The October 2023 Gaza war triggered regional escalation, including attacks by Iranian-aligned armed groups against US forces in Iraq and Syria, maritime insecurity in the Red Sea, and heightened threats to energy infrastructure (International Crisis Group, 2024; US Department of Defense, 2024). These developments revived memories of earlier shocks such as the 2019 Abqaiq–Khurais attacks on Saudi oil facilities, which temporarily removed approximately 5 per cent of global oil supply (Energy Information Administration, 2019).

Simultaneously, the United States has maintained and, at times, reinforced its force posture in the region, integrating air and missile defence capabilities with Gulf partners and sustaining naval patrols in key maritime corridors (US Department of Defense, 2024). Despite periodic narratives of American retrenchment, Washington remains the only actor capable of providing large-scale kinetic deterrence and maritime security in the Gulf.

At the same time, China’s economic footprint across the Middle East has deepened significantly. Chinese national oil companies (NOCs) hold major stakes in Iraqi oilfields; Chinese state-linked enterprises participate in infrastructure, power generation, ports and transport projects; and commodity-linked financing mechanisms have expanded Beijing’s structural influence (Downs, 2023; Aziz and Salih, 2026).

These parallel developments raise a structural question: is the Gulf evolving toward a bifurcated form of hegemony in which security and economic authority are supplied by different external powers?

Hegemonic stability theory traditionally posits that international systems function most effectively when a single dominant power supplies public goods such as security and financial stability (Kindleberger, 1973; Gilpin, 1981). However, the contemporary Gulf energy system exhibits layered interdependence. Its security layer, deterrence, missile defence, sea-lane protection, remains overwhelmingly American. Its economic layer, capital flows, infrastructure construction, long-term commodity demand, is increasingly shaped by China.

This article advances three claims:

1. The Gulf energy system is structurally layered, and these layers are now underwritten by different powers.

2. Iraq represents the clearest case of this bifurcated arrangement in practice.

3. Over a ten-year horizon, this division of labour may stabilise into managed dual hegemony, drift toward Sino-centric economic leverage, or fragment under sustained insecurity and governance failure.

2. The Gulf Energy System as a Layered Resilience Architecture

Energy security is often discussed in terms of supply volume and price stability. However, the Gulf energy system is more accurately understood as an integrated resilience architecture. It consists of:

• Upstream production

• Export terminals and loading infrastructure

• Pipelines and compression stations

• Power generation and water systems

• Maritime transit corridors

• Financial clearing and insurance mechanisms

These components form an interdependent network. Disruption in one node, whether kinetic attack, cyber interference or political instability, can cascade through the system.

The 2019 Abqaiq–Khurais attacks demonstrated the vulnerability of high-consequence nodes (EIA, 2019). Similarly, Houthi attacks on Red Sea shipping in 2023–24 illustrated how maritime insecurity can rapidly reprice global trade routes (International Crisis Group, 2024).

Resilience therefore depends on two distinct capabilities:

1. Deterrence and force protection

2. Rapid restoration and reconstruction

The United States specialises in the former; China increasingly specialises in the latter.

3. Sanctions Arbitrage and Structural Exposure

China’s energy procurement strategy over the past decade has included significant volumes from politically isolated or sanctioned producers, including Iran and Venezuela (Downs, 2023). Discounted barrels provide economic advantage and geopolitical leverage. However, this strategy carries exposure if geopolitical shocks disrupt supply channels.

When escalation increases maritime risk or prompts enforcement tightening, discounted supply becomes vulnerable. The broader lesson is structural: arbitrage strategies are resilient against incremental sanctions pressure but fragile under kinetic disruption.

This creates an incentive for Beijing to deepen its position in suppliers where long-term stakes are institutionalised and internationally normalised. Iraq, as OPEC’s second-largest producer, offers precisely such an opportunity.

4. US Security Reassertion After 2026

The strikes and subsequent escalation have re-centred US military power in the Gulf. Reporting indicates:

• Force surges across naval and air domains

• Reinforced missile defence integration

• Refusal to exclude ground deployment options (Washington Post, 2026)

Brookings (2026) frames this as a reaffirmation of American willingness to use hard power to stabilise energy-critical regions.

In hegemonic terms, this is classic security public goods provision. Regional states, despite prior hedging, remain dependent on American kinetic capacity for deterrence.

However, security dominance does not equate to economic dominance. Fiscal constraints, domestic political fatigue, and ESG pressures limit large-scale Western reconstruction financing (MERICS, 2025).

This creates a structural opening.

5. China’s Economic Entrenchment and the Iraq Case

China’s energy strategy prior to the war relied in part on discounted barrels from sanctioned producers (Garcia-Herrero, 2026; USCC, 2026). The disruption of Iranian exports exposes vulnerability in that model.

Beijing’s rational adaptation is to deepen structural embedding in producers with greater international legitimacy, most notably Iraq.

According to Atlantic Council analysis (2025; 2026):

• Chinese firms hold stakes in major Iraqi fields

• Infrastructure projects link oil exports to Chinese finance

• “Oil-for-infrastructure” models create long-term leverage

This entrenchment operates across both upstream and enabling infrastructure.

Unlike the United States, China does not deploy combat brigades. It deploys:

• Policy bank financing

• Construction conglomerates

• Long-term purchase contracts

In resilience terms, the US absorbs escalation risk; China absorbs capital risk.

6. Temporal Evolution of Bifurcated Hegemony

To evaluate whether bifurcated hegemony represents a transitional anomaly or an enduring structure, temporal differentiation is essential. The strategic meaning of 2026 differs across one-year, five-year and ten-year horizons.

6.1 One-Year Horizon: Shock Absorption

In the immediate phase, American primacy is uncontested. Force projection, missile interception, and maritime stabilisation dominate the agenda. Oil markets remain volatile but operational flows resume under security cover (Reuters, 2026a).

China’s posture in this period is reactive and protective. Beijing avoids direct confrontation, focuses on safeguarding existing investments, and recalibrates supply chains. The emphasis is risk containment rather than expansion.

The system stabilises, but resilience remains shallow. Infrastructure remains exposed to renewed escalation, and structural repair is incomplete.

Bifurcation exists but remains asymmetric: Washington bears escalation risk; Beijing absorbs market volatility.

6.2 Five-Year Horizon: Institutional Consolidation

Over five years, crisis response evolves into structural architecture.

The United States formalises an expanded defence posture. Integrated air defence networks deepen across GCC states, and maritime patrols become institutionalised. Security public goods are routinised.

Simultaneously, Chinese economic engagement deepens. Oil-for-infrastructure frameworks expand in Iraq, tying export flows to long-term capital deployment (Atlantic Council, 2026). Chinese firms embed across additional infrastructure nodes.

The result is structural asymmetry: Gulf states depend on Washington for survival in high-intensity scenarios while depending on Beijing for growth and reconstruction.

This phase represents the consolidation of functional bifurcation.

6.3 Ten-Year Horizon: Structural Outcomes

Beyond five years, three trajectories become plausible.

Managed Dual Hegemony

Security and economic layers remain separated but coordinated. Regional states successfully hedge, extracting benefits from both powers. Energy markets remain globally integrated.

Creeping Sino-Centric Drift

Over time, accumulated infrastructure ownership and commodity-linked finance give China leverage over routing decisions, pricing preferences and political alignments (MERICS, 2025). While US military primacy persists, economic gravity shifts.

Fragmentation

Alternatively, sustained insurgency, domestic political fatigue in the United States, or escalating great-power rivalry undermine both layers. If security commitments weaken while infrastructure remains exposed, volatility returns.

The ten-year horizon reveals bifurcation as a contingent equilibrium rather than a stable end state.

7. Risk Transfer and Strategic Asymmetry

The phrase “US breaks, China builds” requires analytical sharpening.

This is not burden sharing. It is risk differentiation.

• The United States absorbs kinetic escalation risk, reputational exposure, and force-protection costs.

• China absorbs capital exposure, long-duration debt risk, and infrastructure vulnerability.

Both powers externalise different forms of risk into the same geography.

However, long-term influence accrues disproportionately to the actor embedded in structural systems rather than episodic intervention. Infrastructure lock-in generates cumulative leverage.

Western anxiety therefore centres not on Chinese military deployment but on structural entrenchment.

8. Systemic Stability and Coordination Gaps

Classical hegemonic systems align security and economic authority within one actor (Gilpin, 1981). The Gulf’s emerging architecture separates these functions.

This separation creates coordination gaps:

• Security decisions may not align with infrastructure priorities.

• Reconstruction may proceed without parallel hardening.

• Economic dependency may constrain strategic autonomy.

The system functions so long as both powers sustain commitment and competition remains bounded. Should either pillar weaken, systemic fragility intensifies.

9. Conclusion

The 2026 escalation accelerates an existing structural transformation.

The United States reasserts uncontested security primacy.
China deepens economic and infrastructural entrenchment.

The Gulf is not transitioning from one hegemon to another. It is dividing between them.

This bifurcated order may stabilise flows in the medium term, but it embeds asymmetry and interdependence that complicate long-term stability.

The next decade will determine whether functional bifurcation evolves into managed duality, Sino-centric economic gravity, or renewed fragmentation.

What is clear is that the organising logic of the post-war Gulf energy order is no longer singular hegemony it is layered power.

References

Atlantic Council (2025) Why China is here to stay in Iraq’s energy sector. 4 November. Available at: https://www.atlanticcouncil.org/blogs/menasource/why-china-is-here-to-stay-in-iraqs-energy-sector/

Atlantic Council (2026) In Iraq, China’s long game unfolds. 25 January. Available at: https://www.atlanticcouncil.org/in-depth-research-reports/report/in-iraq-chinas-long-game-unfolds/

BBC (2026) ‘Oil and gas prices jump as Middle East conflict escalates’. 1 March. Available at: https://www.bbc.com/news

Brookings Institution (2026) ‘After the strike: The danger of war in Iran’. 2 March. Available at:

https://www.brookings.edu

Chatham House (2026) ‘The Iran war and regional order’. 1 March. Available at:

https://www.chathamhouse.org

Downs, E.S. (2023) China’s energy footprint in the Middle East. Washington, DC: Brookings Institution. Available at:

https://www.brookings.edu

Energy Information Administration (2019) Saudi Arabia’s Abqaiq and Khurais attacks temporarily disrupted global oil supply. Available at: https://www.eia.gov/todayinenergy/detail.php?id=41021

Garcia-Herrero, A. (2026) ‘Iran: A bigger headache for China than Venezuela’. Available at: https://asiamacro.substack.com

Gilpin, R. (1981) War and Change in World Politics. Cambridge: Cambridge University Press.

International Crisis Group (2024) The Red Sea attacks and regional escalation. Available at:

https://www.crisisgroup.org

Keohane, R.O. and Nye, J.S. (1977) Power and Interdependence. Boston: Little, Brown.

Kindleberger, C.P. (1973) The World in Depression 1929–1939. Berkeley: University of California Press.

MERICS (2025) Interests first: China’s playbook for post-conflict reconstruction. Mercator Institute for China Studies. Available at:

https://merics.org

Peacediplomacy (2025) ‘China’s expanding influence in the Middle East’. Available at: https://www.peacediplomacy.org

Reuters (2026a) ‘Iran war throws oil market into biggest crisis in decades’. 28 February. Available at:

https://www.reuters.com

Security in Context (2025) ‘China, the United States, and Middle East geopolitics’. Available at:

https://www.securityincontext.org

United States–China Economic and Security Review Commission (USCC) (2026) China–Venezuela fact sheet. Available at:

https://www.uscc.gov

US Department of Defense (2024) CENTCOM posture statement. Available at:

https://www.defense.gov

Washington Post (2026) ‘U.S. won’t rule out sending ground troops into Iran’. 2 March. Available at:

https://www.washingtonpost.com

Abstract

This paper examines the analytical sufficiency of combining RAMP (Routes, Areas, Movement, Profile) and DIM-ICE (Design, Information, Management across Ingress, Circulation and Egress) as complementary quantitative and qualitative frameworks in contemporary crowd safety management. It argues that recent practitioner-driven temporal expansions of these models, explicitly segmenting crowd phases into Arrival, Last Mile and Dispersal, do not introduce new analytical variables beyond those already structurally accommodated within established crowd science doctrine. Drawing upon applied qualification development and operational leadership practice within the Kingdom of Saudi Arabia, this paper asserts that crowd safety remains fundamentally a physics-led discipline supported by systemic oversight. Analytical clarity and threshold precision, rather than framework proliferation, determine operational effectiveness.

1. Introduction

Over the past three months, I have been designing and delivering the pilot for the Highfield Accredited Level 5 Award in Advanced Crowd Safety Management and Operational Leadership as part of a broader qualification and development consultancy contract within the Kingdom of Saudi Arabia. This programme forms part of a wider capability uplift aligned with the General Entertainment Authority’s Vision 2030 objectives, particularly in relation to sector professionalisation, operational leadership maturity and localisation within the live events industry.

The development of an advanced-level qualification in crowd safety imposes a practical discipline: frameworks must be evaluated for analytical sufficiency rather than presentation strength. When stress-tested against operational realities, high-density ingress curves, transport interface congestion, heat-amplified fatigue and simultaneous mass egress, only those models that materially enhance detection capability and intervention timing remain defensible.

Within established crowd science doctrine, two frameworks have consistently demonstrated structural robustness:

• RAMP (Routes, Areas, Movement, Profile), providing quantitative analysis of crowd mechanics and spatial capacity (Still, 2000).

• DIM-ICE (Design, Information, Management across Ingress, Circulation and Egress), offering a qualitative systems-level diagnostic overlay (Still, 2014).

Used together, these frameworks provide layered redundancy: measurable spatial modelling combined with structured systemic evaluation. RAMP identifies density thresholds, flow limitations and geometric constraints; DIM-ICE evaluates how design integrity, communication clarity and operational posture influence behavioural stability within those physical limits.

Recent practitioner adaptations have expanded temporal segmentation by explicitly identifying additional phases such as Arrival, Last Mile and Dispersal. While operationally descriptive, this paper contends that such expansion does not introduce new measurable or behavioural variables beyond those already encompassed within the RAMP–DIM-ICE pairing.

The central proposition advanced here is therefore clear:

Crowd safety remains fundamentally a physics-led discipline supported by systemic oversight. Expanding phase labelling does not constitute analytical evolution unless new measurable dimensions are introduced.

2. RAMP: The Quantitative Foundation

RAMP provides a structured method for evaluating crowd mechanics through four interdependent dimensions:

• Routes – corridor capacity and conflict points

• Areas – holding capacity and density thresholds

• Movement – flow rates and time-to-clear

• Profile – behavioural loading and demographic modifiers

The model is grounded in empirical pedestrian flow research and density–velocity relationships developed in foundational studies of crowd dynamics (Fruin, 1971; Still, 2000).

Crowd incidents frequently begin when density exceeds tolerable limits or when flow collapses at geometric constraints (Helbing et al., 2000). These are measurable phenomena. They are not conceptual ambiguities.

RAMP therefore functions as a physics-based baseline.

3. DIM-ICE: Systemic Degradation Detection

DIM-ICE overlays three systemic variables:

• Design – infrastructure integrity and layout adequacy

• Information – communication clarity and wayfinding reliability

• Management – operational posture, intervention timing and authority

Applied across Ingress, Circulation and Egress, the framework recognises that many incidents emerge not solely from extreme density, but from system degradation preceding collapse (Still, 2014).

Where RAMP measures structural capacity, DIM-ICE interrogates system performance.

This layered approach aligns with broader organisational risk theory, which emphasises redundancy and early degradation detection rather than reactive crisis response (Reason, 1997).

4. Temporal Expansion: Analytical Redundancy or Re-Labelling?

Recent practitioner adaptations have extended the event timeline into:

• Arrival

• Last Mile

• Ingress

• Circulation

• Egress

• Dispersal

From an operational planning perspective, such segmentation may assist inexperienced practitioners in visualising crowd lifecycle phases. However, analytically:

• Arrival is pre-ingress route and area modelling under RAMP.

• Last Mile is externalised route conflict and transport interface modelling.

• Dispersal is extended egress beyond the perimeter.

No new physical variables are introduced.
No new behavioural variables are introduced.
No new decision thresholds emerge inherently from relabelling.

Unless additional measurable criteria accompany such expansion, analytical capability remains unchanged.

5. Redundancy, Simplicity and Operational Clarity

Risk engineering literature consistently demonstrates that system resilience depends on clarity of thresholds and defined authority structures, rather than conceptual proliferation (Reason, 1997).

Crowd safety failures typically stem from:

• Ambiguous intervention triggers

• Delayed management response

• Misjudged density accumulation

• Overconfidence in system absorption capacity

They do not arise because an event phase lacked nomenclature.

When RAMP and DIM-ICE are correctly integrated:

• Quantitative detection identifies structural overload.

• Qualitative diagnosis identifies behavioural and systemic degradation.

Together, they provide dual-layer resilience.

Model multiplication does not inherently increase safety. Threshold precision does.

6. From Framework to Capability: Where PillarsGlobal Supports Sector Maturity

If crowd safety is a physics problem first and a systems discipline second, then the question becomes:

Who is strengthening the foundations?

At PillarsGlobal, our work sits precisely at that intersection, turning structured doctrine into operational capability across five aligned pillars.

1️⃣ PillarsLearn – Capability Through Structured Education

We develop accredited qualifications and advanced training programmes that embed:

• Quantitative crowd modelling (RAMP-aligned)

• Systemic risk diagnostics (DIM-ICE aligned)

• Decision-threshold clarity

• Operational leadership maturity

Training is not theory delivery.
It is capability transfer under pressure.

2️⃣ PillarsConsult – Embedded Risk & Operational Integration

We support event organisers, venues and authorities in:

• Density and flow validation

• Dispersal architecture design

• Command structure optimisation

• Intervention trigger mapping

• Authority and escalation frameworks

This moves organisations from compliance documentation to executable operational resilience.

3️⃣ PillarsCore – Integrated Risk & Decision Architecture

Crowd safety does not operate in isolation.

PillarsCore provides:

• Structured risk scoring frameworks

• Real-time situational awareness logic

• Escalation thresholds

• Decision-support architecture

It integrates crowd science into broader event safety and security ecosystems.

4️⃣ PillarsCalm – Leadership Under Pressure

Even the best model fails if leadership hesitates.

PillarsCalm develops:

• Cognitive control under stress

• Decisive command posture

• Communication discipline

• Authority confidence

Crowd safety is not just about geometry — it is about composure.

5️⃣ PillarsWear – Identity & Culture Alignment

Safety culture must be visible.

PillarsWear reinforces:

• Professional identity

• Leadership ethos

• Team cohesion

• Operational pride

Because disciplined systems require disciplined people.

Alignment with Event Safety & Security

Across major event environments — particularly within the Kingdom of Saudi Arabia’s Vision 2030 expansion — true maturity requires:

• Physics-based modelling

• System redundancy

• Leadership clarity

• Interoperability across agencies

• Cultural professionalisation

PillarsGlobal aligns directly with those objectives.

We do not add letters.
We strengthen layers.

The future of event safety and security lies not in framework expansion, but in measurable capability uplift, and that is where we operate.

References

Fruin, J.J., 1971. Pedestrian Planning and Design. Metropolitan Association of Urban Designers and Environmental Planners.

Helbing, D., Farkas, I. and Vicsek, T., 2000. Simulating dynamical features of escape panic. Nature, 407(6803), pp.487–490.
https://www.nature.com/articles/35035023

Reason, J., 1997. Managing the Risks of Organisational Accidents. Aldershot: Ashgate.

Still, G.K., 2000. Crowd Dynamics. PhD thesis. University of Warwick.

Still, G.K., 2014. DIM-ICE Risk Assessment Framework.
https://www.gkstill.com/Support/WhyModel/dimice.html

Abstract

Resilience has evolved from a primarily public-sector function into a structured commercial ecosystem spanning consulting services, regulatory compliance frameworks and infrastructure finance. This paper explores how that shift influences incentive structures, performance measurement and system design. Drawing on operational resilience guidance, public–private partnership (PPP) models and market growth data, it argues that the commercialisation of resilience has professionalised the discipline but also introduced structural tensions between compliance-driven delivery and long-term fragility reduction. Rather than framing this as a failure of markets, the paper positions it as an alignment challenge: resilience outcomes depend on how commercial incentives are designed and governed.

1. Introduction

Resilience is now embedded in regulatory language, boardroom agendas and infrastructure investment strategy. It is commonly defined as the ability of systems to withstand, adapt to and recover from disruption (ISO, 2025). In financial services and critical infrastructure sectors, operational resilience frameworks now require organisations to define impact tolerances, map dependencies and conduct structured stress testing (Federal Reserve Board, 2020).

At the same time, resilience has become a significant commercial sector. Advisory firms, technology providers and infrastructure investors now operate within what can reasonably be described as a resilience market (Business Research Insights, 2025).

This paper examines what happens when resilience shifts from being something organisations build internally to something they purchase externally. The aim is not to question private sector participation, but to analyse how commercial logic influences resilience architecture.

2. The Professionalisation of Resilience

Over the past two decades, resilience has moved from informal continuity planning to structured, codified frameworks. Guidance documents emphasise governance models, accountability mapping and measurable tolerances (OpsCentre, 2025; Protiviti, 2022).

This professionalisation has delivered clear benefits:

• Standardised terminology

• Improved board visibility

• Regulatory alignment

• Structured testing methodologies

External advisory firms have played a significant role in accelerating capability development across industries (PwC, 2025). For many organisations, specialist expertise is neither cost-effective nor feasible to maintain entirely in-house.

In this sense, the growth of resilience services reflects demand, not opportunism.

However, professionalisation also changes how resilience is measured and incentivised.

3. The Growth of a Resilience Services Market

Market research projects substantial expansion in operational resilience services over the coming decade (Business Research Insights, 2025). Growth drivers include:

• Regulatory pressure

• Supply chain complexity

• Cyber risk

• Climate exposure

• Geopolitical volatility

Commercial resilience offerings typically include:

• Framework implementation

• Third-party risk assessments

• Scenario exercises

• Maturity benchmarking

• Compliance support

These services are inherently deliverable-based. They generate documentation, dashboards and attestations, all necessary components of structured governance.

The key business question is whether resilience maturity becomes defined primarily by documentation outputs rather than by observed system performance under stress.

This is not a criticism of service providers. It is a reminder that markets optimise for measurable outputs. Long-term fragility reduction is harder to monetise and harder to evidence.

4. Resilience and Infrastructure Investment

At infrastructure level, resilience is increasingly embedded in public–private partnership (PPP) models. PPP frameworks are positioned as mechanisms for financing resilient infrastructure through structured risk-sharing arrangements (The Resilience Shift, 2019; World Economic Forum, 2025a).

Resilience features, such as redundancy, flood mitigation or cyber hardening, enhance asset longevity and investment attractiveness (World Economic Forum, 2025).

From a business perspective, this integration is logical. Investors require predictable returns. Governments require capital. Resilience strengthens both narratives.

However, resilience design within PPP structures must balance two objectives:

1. Delivering genuine system robustness

2. Maintaining financial viability

Where resilience becomes primarily an investment attribute, rather than a systemic risk strategy, there is potential for design trade-offs that favour bankability over redundancy depth.

The issue is not the presence of private capital. It is the design of risk allocation and accountability mechanisms.

5. Incentives and Measurement

Operational resilience frameworks emphasise governance, accountability and testing (Federal Reserve Board, 2020). Yet commercial implementation models often rely on repeat assessments, maturity scoring and periodic review cycles (Protiviti, 2022).

This creates a recurring engagement structure, which is commercially sustainable and often operationally useful.

The structural question is whether:

• Systems are being redesigned to reduce exposure
  or

• Organisations are becoming increasingly proficient at managing and reporting exposure

The distinction is subtle but strategically important.

Resilience that reduces fragility may decrease future advisory demand. Resilience that manages fragility within acceptable tolerances sustains ongoing oversight cycles.

Neither approach is inherently wrong. The challenge lies in aligning commercial incentives with long-term system strength.

6. Sovereign and Organisational Capability

As resilience functions expand externally, organisations must consider internal capability retention. Over-reliance on external advisory support can create knowledge asymmetry and long-term dependency risk.

Public oversight literature has highlighted the governance implications of concentrated contractor reliance in critical service delivery (National Audit Office, 2013).

From a business continuity perspective, resilience governance should include:

• Internal challenge capability

• Independent stress validation

• Knowledge transfer requirements

• Clear step-in rights in outsourced arrangements

The objective is not to replace private expertise, but to avoid hollowing out institutional competence.

7. Aligning Commercial Logic with Resilience Outcomes

The commercialisation of resilience is unlikely to reverse. Nor should it. Markets bring innovation, speed and cross-sector expertise.

The practical question is alignment.

Three design principles may improve outcome alignment:

1. Stress-based performance metrics
Evaluate resilience based on system behaviour during exercises and real disruptions, not solely on documentation completeness (Federal Reserve Board, 2020).

2. Incentive-compatible contracts
Embed resilience triggers, transparency obligations and enforceable performance clauses within PPP and advisory agreements (The Resilience Shift, 2019).

3. Capability retention
Maintain core strategic oversight and doctrine-setting authority internally, even where delivery is outsourced.

These are governance design issues rather than ideological positions.

8. Conclusion

Resilience has evolved into a structured market supported by advisory services, regulatory frameworks and infrastructure finance models. This evolution reflects legitimate demand and growing systemic complexity.

However, commercial embedding alters incentive dynamics. Resilience becomes measurable, contractable and investable. Whether this strengthens or weakens systemic robustness depends less on the presence of markets and more on how incentives are structured.

For business leaders and policymakers, the key distinction is this:

Are we building systems that genuinely absorb shock, or are we optimising systems to evidence resilience?

The answer will shape the durability of both public institutions and private enterprises in an increasingly volatile operating environment.8. Conclusion

Resilience has evolved into a structured market supported by advisory services, regulatory frameworks and infrastructure finance models. This evolution reflects legitimate demand and growing systemic complexity.

However, commercial embedding alters incentive dynamics. Resilience becomes measurable, contractable and investable. Whether this strengthens or weakens systemic robustness depends less on the presence of markets and more on how incentives are structured.

For business leaders and policymakers, the key distinction is this:

Are we building systems that genuinely absorb shock —
or are we optimising systems to evidence resilience?

The answer will shape the durability of both public institutions and private enterprises in an increasingly volatile operating environment.

Abstract

This article examines the decision to revalidate a FREC Level 3 qualification at 51 years of age in the context of the 2025 UK Resuscitation Council (UKRC) amendments. It argues that professional competence in high-responsibility roles is perishable and that failure to maintain alignment with evolving standards constitutes a governance risk. Using the CABCDE trauma framework and the ten-second catastrophic haemorrhage triage principle as analytical anchors, the article draws parallels between clinical prioritisation and organisational crisis leadership. It concludes that revalidation at senior level is not symbolic but a structural control measure reinforcing resilience integrity.

Introduction: Experience Without Recalibration

Professional longevity is frequently conflated with enduring competence. In high-consequence domains, emergency medicine, crisis leadership, infrastructure protection, this assumption is structurally unsound.

At 51, following a military career and more than two decades operating in complex environments across the Middle East, I chose to revalidate my FREC Level 3 qualification. The decision was not compliance-driven. It was prompted by the 2025 UKRC amendments and the recognition that standards evolution necessitates practitioner recalibration.

Competence that is not revalidated against current doctrine becomes historical competence. Historical competence may retain experiential value, but it does not guarantee alignment with contemporary evidence.

In governance terms, this represents competence drift.

Competence Drift as a Governance Failure

Drift in management systems is well documented: policy and practice gradually diverge unless actively reconciled. An analogous phenomenon occurs at practitioner level. Experience substitutes for evidence. Memory substitutes for updated protocol.

The UKRC 2025 amendments reflect accumulated international research and outcome data. Refinements to compression strategy, ventilation ratios, oxygen therapy thresholds, and early cardiac arrest decision-making alter intervention sequencing in measurable ways.

Where guidance changes, practitioner alignment must follow.

Failure to do so introduces risk at the point of execution, the moment when decision latency or mis-sequencing materially affects survival probability.

For organisations operating in remote industrial sites, energy infrastructure, or overseas deployments, first response capability may be internal for extended periods. In such contexts, outdated medical training is not a peripheral concern; it represents unmanaged liability exposure.

Revalidation is therefore not cosmetic. It functions as a preventive governance control.

CABCDE: Structured Survival Logic

Central to FREC Level 3 trauma assessment is the CABCDE framework:

• C – Catastrophic haemorrhage

• A – Airway ( with C - Spine control)

• B – Breathing

• C – Circulation

• D – Disability

• E – Exposure

The explicit prioritisation of catastrophic haemorrhage reflects data drawn from trauma and conflict medicine: uncontrolled bleeding remains one of the most rapidly fatal yet preventable causes of death.

The framework is operationalised through the ten-second catastrophic haemorrhage sweep, a rapid triage discipline conducted before airway intervention.

The logic is non-negotiable:
Identify and control the condition that kills fastest before progressing to secondary assessment.

Tourniquet application, direct pressure, or haemostatic intervention precede airway adjuncts or oxygen delivery. The algorithm exists to remove cognitive delay under stress. It replaces instinct with structure.

The sequencing is evidence-driven prioritisation.

Translational Analysis: The Ten-Second Principle in Corporate Crisis

The CABCDE structure provides a direct analogue for organisational crisis governance.

During destabilising events, cyber breach, liquidity shock, regulatory enforcement, operational shutdown, leadership frequently mis-sequences response actions. Communication planning precedes exposure containment. Stakeholder management precedes technical stabilisation.

The clinical principle demands a different discipline:

What kills the system first?

In corporate terms, the catastrophic risk (“C”) may manifest as:

• Insolvency exposure

• Data exfiltration

• Licence suspension

• Infrastructure failure

Failure to identify and stabilise that primary threat renders downstream interventions secondary and, in extreme cases, irrelevant.

The ten-second triage mindset therefore functions as a decision-making model: identify the existential risk immediately and stabilise it before progressing.

At Pillars Global, resilience architecture is built upon this prioritisation logic, structured escalation pathways that stabilise catastrophic exposure before expanding response layers.

Senior Revalidation as Cultural Control

ISO-aligned management systems consistently emphasise competence maintenance and continual improvement. Yet cultural erosion often begins when senior practitioners assume experiential exemption from revalidation.

This exemption weakens system integrity.

Revalidation at senior level communicates structural consistency:

1. Standards evolve and must be tracked.

2. Evidence supersedes tenure.

3. Competence is demonstrable, not presumed.

The act of requalification therefore operates as cultural governance, reinforcing alignment between documented expectation and behavioural practice.

Static Certification Versus Dynamic Capability

Certification confirms prior assessment at a defined time. Capability confirms present readiness under current standards.

Emergency medical practice illustrates this distinction starkly. Outdated compression depth or ventilation sequencing measurably affects outcome probability. The tolerance for legacy knowledge is minimal.

Organisational crisis governance is subject to the same constraint. Threat vectors evolve. Regulatory frameworks shift. Geopolitical risk recalibrates. Static response models degrade in relevance.

Competence decay is gradual and largely invisible until tested.

Revalidation interrupts that decay cycle.

Implications for Resilience Practice

The 2025 UKRC amendments serve as a practical reminder that resilience disciplines, clinical or corporate, are evidence-responsive systems. Professional credibility requires active alignment with that evidence.

Within Pillars Global, resilience is treated as an engineered construct comprising structured prioritisation, dynamic reassessment, and disciplined execution. Revalidating FREC Level 3 aligns personal capability with the same principles embedded in advisory frameworks.

If resilience systems are to maintain integrity, practitioners must model the same review discipline they recommend.

Conclusion

Professional competence in high-responsibility domains is perishable. Absent structured recalibration, divergence from evolving standards is inevitable.

Revalidating FREC Level 3 at 51, in alignment with the 2025 UKRC amendments, was not an act of renewal for its own sake. It was a governance decision: a control measure against competence drift and a reinforcement of prioritised response logic.

CABCDE and the ten-second catastrophic haemorrhage principle represent disciplined sequencing under pressure. The same logic underpins effective crisis leadership.

In both clinical response and organisational governance, integrity is measured not by past exposure but by present alignment with current evidence.

Professional longevity does not remove that obligation.

It intensifies it.

We’ve built an industry that can produce beautiful plans and still fall apart like a fragile deck of cards the moment critical systems disappear. The gap between being “BCP compliant” and being genuinely resilient is far bigger than most boards realise.

The real blocker isn’t just apathy — it’s our own doctrine

It’s easy to blame organisational apathy. Harder to admit that some of the biggest blockers are the conceptual silos and mental models we built around our own profession.

For years, we trained people to see:

• “Business Continuity” over here

• “Resilience” somewhere else

• “Operational Resilience” as a regulatory bolt-on

each with its own language, diagrams, and owners.

The result is a professional prehistoric mindset:

• BCM taught as a linear lifecycle: Assess → Design → Implement → Test → Repeat

• Safety, security, cyber, ERM, BCM operating as separate empires

Resilience research has made this critique repeatedly: fragmentation obscures system-wide dependencies and weakens adaptive capacity (McManus et al., 2008; Linkov and Trump, 2019).

Organisations don’t fail because they lack frameworks.

They fail because frameworks are implemented in silos, rather than as integrated capability.

How “good practice” quietly hard-coded the problem

A lot of this is embedded into what we call “good practice”.

The Business Continuity Institute’s Good Practice Guidelines positioned the Business Continuity Management Lifecycle as the dominant organising doctrine, six phases from policy through analysis, design, implementation, validation and embedding (BCI, 2018).

That lifecycle model shaped a generation of continuity programmes.

But doctrine has consequences.

The COVID-19 era exposed the limits of lifecycle-and-binder continuity, particularly under prolonged disruption where adaptation mattered more than compliance (Herbane, 2019).

In response, BCI launched Good Practice Guidelines Edition 7.0, shifting away from lifecycle language toward a Business Continuity Management System (BCMS) organised around Professional Practices (BCI, 2023).

That evolution matters. But the deeper question remains:

Has practice changed… or have we simply updated the terminology?

Galaitsi et al. (2023) argue that continuity, operational resilience, and organisational resilience remain conceptually blurred in many organisations — often treated as parallel programmes rather than a unified operating capability.

The language has evolved faster than the mindset.

Good practice should be scaffolding — not scripture

Here’s the core argument:

Good practice should not be treated as restrictive scripture.
It should be scaffolding — adaptable around operational reality.

Systematic evidence supports this.

Continuity frameworks strengthen resilience only when they enhance adaptive capacity, learning, and integration with organisational performance, not when implemented as static compliance cycles (Sawalha, 2020; ScienceDirect, 2023).

When “good practice” becomes rigid doctrine, it produces audit outputs, not resilience capability.

That is how continuity becomes theatre.

From lifecycle to Resilience by Design

If we are serious about true organisational resilience, we must move beyond lifecycle continuity thinking.

Traditional doctrine asks:

• “How do we activate the plan?”

• “How fast can we restore a process to its RTO?”

Those questions matter. But alone, they keep continuity reactive, episodic, and compliance-driven.

Resilience reframes the challenge:

• Business continuity = restore priority activities within acceptable limits

• Resilience = absorb shocks, adapt, and continue delivering outcomes under sustained uncertainty

This is foundational in resilience engineering: organisations must be designed not just to recover, but to adjust dynamically as conditions degrade (Hollnagel, 2011).

That shift is what I call Resilience by Design:

• continuity becomes a continuous operational pulse

• plans sit inside decision and feedback systems

• frontline adaptation matters more than scripted recovery

ISO 22301 increasingly reinforces this system orientation: resilience is not documentation, but embedded management capability (ISO, 2019).

The cost of silos — and the cyber tunnel-vision problem

Look at how many organisations remain structured:

• HSE focused on compliance incidents

• Security focused on threats and assets

• ERM focused on registers and appetite

• IT focused on cyber risk

• BCM focused on BIAs and exercises

Each writes its playbooks in isolation.

Analyses of siloed risk management highlight predictable results: blind spots at the interfaces, competing priorities, and no coherent view of systemic fragility (Linkov and Trump, 2019).

Even within BCM, scenario work becomes narrow and fashionable.

After waves of ransomware and outages, many organisations doubled down on IT scenarios, but still failed to model long-duration operational and human consequences (InSecM, 2023).

Post-incident reviews repeat the same conclusion: plans exist, but they do not reflect how coordination actually happens under stress or how failures cascade across functions and geographies (TechTarget, 2023).

That is not an individual failing.

It is structural.

We trained people to be continuity technicians, not resilience designers.

What “embedded” actually looks like

Everyone says BCM must be “embedded”.

In practice, embedded resilience looks like:

• Design, not just for recovery. Resilience principles in how services and supply chains are built

• Integrated governance. One executive view of risk, continuity and resilience

• Routine scenario thinking. Not annual theatre, normal management conversation

• Live dependency mapping. Updated continuously, not frozen BIAs

• Psychological safety for bad news. Fragility surfaced early, not politely after disaster

High reliability research consistently shows that resilient organisations are those that institutionalise adaptation, learning, and early signal detection long before formal crisis response is required (Weick and Sutcliffe, 2015).

None of this is glamorous.

It is slow, political, and uncomfortable.

But it is the only way continuity stops being a binder on a shelf and becomes part of how the organisation operates.

The PillarsGlobal layer: resilience as an operating system

This is where most organisations stall.

They understand the critique.

They still don’t know what replaces the binder.

That gap, between theory and operational reality, is where systems like PillarsGlobal sit.

The principle is simple:

Resilience is not a document.
It is an operating structure built around sensing, decision-making, feedback, and adaptation under pressure.

PillarsGlobal is not “another framework”.

It is an interface layer connecting what continuity doctrine split apart:

• Continuity

• Crisis leadership

• Risk intelligence

• Operational learning

• Human decision-making under stress

In practice, that means moving from BCM as lifecycle…

…to resilience as a living system:

• PillarsLearn builds capability, not compliance slides

• PillarsConsult embeds expertise where fragility actually lives

• PillarsCore acts as the trigger-and-response resilience engine

• PillarsCalm reinforces the human layer, decision-making when comfort disappears

• PillarsWear builds identity, because resilience is cultural before procedural

The organisations that survive disruption are not those with the best binders.

They are the ones with the clearest systems for adapting, deciding, and holding the line.

That is resilience by design.

Where the evolution really begins

A comment I received recently tried to “elevate” my critique by polishing it into smoother buzzwords about silos and “Resilience by Design”.

It wasn’t wrong.

But rephrasing old ideas is not evolution.

Evolution begins when we:

• Stop treating lifecycles as sacred diagrams

• Use good practice as scaffolding, not scripture

• Break silos between BCM, safety, security, cyber and ERM

• Talk less about labels and more about how decisions are made under pressure

Until then, continuity will keep looking impressive on paper…

while organisations fold at the exact moment they claim to be most prepared.

The binder on the shelf is not the problem.

The mindset that created it is.

Resilience isn’t a framework you file, it’s an operating system you build, embed, and live, and that is exactly the space PillarsGlobal is designed to serve.

References

Business Continuity Institute (BCI) (2018) Good Practice Guidelines: Global Edition. Caversham: BCI.
https://www.thebci.org/static/cf455e45-b2c2-4a44-b77da7c99fd6df77/BCI-GPG-2018-Edition.pdf

Business Continuity Institute (BCI) (2023) ‘BCI Good Practice Guidelines Edition 7.0: A new focus on the BCMS’, BCI News, 6 December.
https://www.thebci.org/news/bci-gpg-edition-7-0-a-new-focus-on-the-bcms.html

Galaitsi, S., Keenan, J.M., Linkov, I. and Pescaroli, G. (2023) ‘Business continuity management, operational resilience, and organizational resilience: commonalities, distinctions, and synthesis’, International Journal of Disaster Risk Science, 14(5), pp. 713–721.
https://link.springer.com/article/10.1007/s13753-023-00494-x

Herbane, B. (2019) ‘Rethinking organisational resilience and strategic renewal in SMEs’, International Journal of Management Reviews, 21(1), pp. 1–20.
https://onlinelibrary.wiley.com/doi/10.1111/ijmr.12152

Hollnagel, E. (2011) Resilience Engineering in Practice: A Guidebook. Farnham: Ashgate.

InSecM (2023) ‘Business continuity planning in the wake of cyber incidents’, InSecM Newsletter, September.
https://insecm.ca/en/newsletter/business-continuity-planning-in-the-wake-of-cyber-incidents/

ISO (2019) ISO 22301:2019 Security and resilience — Business continuity management systems — Requirements. Geneva: ISO.
https://www.iso.org/standard/75106.html

Linkov, I. and Trump, B.D. (2019) The Science and Practice of Resilience. Cham: Springer.
https://link.springer.com/book/10.1007/978-3-030-04565-4

McManus, S., Seville, E., Vargo, J. and Brunsdon, D. (2008) ‘Facilitated process for improving organisational resilience’, Natural Hazards Review, 9(2), pp. 81–90.
https://ascelibrary.org/doi/10.1061/(ASCE)1527-6988(2008)9:2(81)

Sawalha, I.H. (2020) ‘Business continuity management: use and effectiveness in practice’, Continuity & Resilience Review, 2(2), pp. 81–97.
https://www.emerald.com/insight/content/doi/10.1108/CRR-05-2020-0016/full/html

ScienceDirect (2023) ‘Business continuity management practices: integrating organisational resilience and performance — systematic literature review’, International Journal of Disaster Risk Reduction, 91, 103690.
https://www.sciencedirect.com/science/article/pii/S2212420923006155

TechTarget (2023) ‘Real-life business continuity failures: examples to study’, SearchDisasterRecovery, 22 March.
https://www.techtarget.com/searchdisasterrecovery/tip/Real-life-business-continuity-failures-Examples-to-study

Weick, K.E. and Sutcliffe, K.M. (2015) Managing the Unexpected: Sustained Performance in a Complex World. 3rd edn. Hoboken, NJ: Wiley.

Resilience is now one of the most commonly used words in business. It appears in annual reports, board risk statements, business continuity strategies, and enterprise-wide transformation programmes. Organisations frequently cite alignment with recognised standards such as ISO 22301 and ISO 31000, and many can demonstrate mature governance, audit trails, and formal escalation structures.

Yet disruption continues to expose a persistent organisational weakness:

the difference between being compliant and being capable.

This is the point PillarsGlobal exists to address.

Because resilience is not proven through documentation. It is proven through performance.

In operational terms, resilience is not what an organisation intends to do. It is what it is able to do when conditions become constrained,

when information is incomplete, time is compressed, leadership attention is divided, systems degrade, and people operate under fatigue.

That is why PillarsGlobal frames resilience as a performance system rather than a compliance function.

Resilience fails most often at the moment organisations need it most

When organisations break down under pressure, the failure is rarely the absence of a plan. Most have plans. Most have structures. Most have trained personnel. Most have reporting pathways and escalation matrices.

The failure is typically more subtle and more damaging:

the organisation loses coherence.

Decision-making becomes fragmented. Multiple narratives compete. Escalation becomes hesitant. Local workarounds multiply. Authority and accountability separate. Operational tempo slows. People become reactive, not deliberate.

At that point, the organisation is not “failing to follow the plan.”

It is experiencing the reality that the plan was written for stable conditions, while disruption is defined by instability.

This is the gap between work-as-imagined and work-as-done, the difference between how the organisation believes it operates, and how it actually operates when exposed to real constraints.

PillarsGlobal treats that gap as the central problem of resilience.

Because the size of that gap determines whether a disruption is absorbed, managed, or allowed to cascade.

PillarsGlobal’s position: resilience is built through five interacting capabilities

Many resilience models treat the topic as a single discipline - usually owned by risk, business continuity, security, or governance. The problem with this approach is that resilience failure is rarely caused by a single weakness.

It is usually systemic.

PillarsGlobal is structured around five pillars because resilience performance is the result of interacting capabilities that either reinforce one another or collapse together under stress.

The five pillars are not branding. They are an operating model.

PillarsLearn exists because resilience is not retained through awareness; it is retained through conditioned decision-making. Under pressure, people do not “rise to the plan.” They revert to what they have rehearsed and what they trust. Training that does not test judgement under constraint, produces confidence without capability.

PillarsConsult exists because resilience is not improved through policy expansion. It is improved through system redesign. The most valuable resilience work is often found in identifying the operational weak points that force workarounds, then redesigning the system so performance is sustainable under stress, not heroic, not fragile, and not dependent on individual competence alone.

PillarsCore exists because control is not created by visibility. Modern organisations often invest heavily in dashboards, reporting systems, and situational awareness tools. But observation is not control. Control exists where the organisation can detect meaningful change early, interpret it correctly, and convert intent into action at the right level. When decision-flow fails, organisations stall even while they can see the crisis unfolding.

PillarsCalm exists because human performance is not a constant. Most corporate resilience programmes implicitly assume stable cognition and stable behaviour. In disruption, cognitive bandwidth reduces, attention narrows, fatigue increases error rates, and communication quality degrades. If resilience design ignores cognitive load, it will fail precisely when it is required most.

PillarsWear exists because identity and culture are not “soft factors.” They are operational assets. Under pressure, teams do not coordinate because the policy says they should. They coordinate because trust, belonging, and shared identity reduce friction and increase cooperation. Organisations with weak identity fragment faster under stress. Organisations with strong identity hold the line longer.

This is why PillarsGlobal does not treat resilience as a document. It treats resilience as a system.

The compliance trap: when assurance replaces operational truth

Standards-based frameworks are valuable when applied correctly. They provide governance discipline, repeatable processes, and continual improvement structures. PillarsGlobal does not reject standards; it builds on them.

However, a common failure mode across industries is the drift from capability-building into assurance production, what operational teams often recognise as “theatre.”

Theatre is not always intentional. It emerges because compliance is easier to evidence than capability.

It is easier to show that a plan exists than to prove that the organisation can execute under constraint. It is easier to run an exercise that validates the framework than to run an exercise that exposes operational weakness. It is easier to satisfy audit requirements than to face the discomfort of discovering that decision rights, escalation pathways, and leadership capacity do not function under pressure.

This is the difference between a resilience programme that looks mature and a resilience system that performs.

PillarsGlobal’s position is simple:

assurance is not resilience unless it translates into performance.

A definition that holds under pressure

PillarsGlobal defines resilience in operational terms:

Resilience is the capacity to sustain critical performance when operating conditions degrade.

This definition forces the conversation away from slogans and toward measurable capability:

• Can the organisation maintain decision tempo when information is incomplete

• Can it preserve operational coherence when leaders are overloaded?

• Can it continue delivering critical outcomes when dependencies fail?

• Can it recover function faster than disruption can cascade?

Resilience is not a department. It is a business capability that determines whether a firm adapts and continues delivering value, or becomes trapped in reactive cycles that erode performance, confidence, and credibility.

What this Sub-stack will deliver

The Resilience Briefing exists to close the gap between resilience as language and resilience as execution.

Each issue will take a real operational problem, decision flow, escalation failure, cognitive overload, control architecture, organisational fragility, and break it down through the PillarsGlobal system so the reader can translate insight into action.

Not in theory. In practice.

Because the final test of resilience is not what an organisation can explain.

It is what it can do when the pressure is real.

— Steve Flaherty
PillarsGlobal

Leave a comment