Traditional business continuity approaches often treat resilience as a collection of isolated plans and procedures. Yet when disruption strikes, organizations discover that their greatest vulnerabilities lie not in individual components, but in the connections between them: the intricate web of people, processes, and technology that makes modern business possible.
The limitations of linear thinking
For decades, business continuity has been approached through a linear lens. We identify critical functions, document procedures, create recovery plans, and conduct periodic tests. This methodology has served organizations well in managing predictable disruptions. However, the complexity of modern business environments demands a more sophisticated approach.
Consider a recent incident at a major transport operator. Their business continuity plan addressed IT system failures comprehensively. What it failed to anticipate was how a cyber incident would cascade through their operations: IT systems went down as expected, but the ripple effects included stranded passengers unable to access digital tickets, customer service teams overwhelmed by enquiries they could not resolve without system access, and suppliers unable to coordinate deliveries. The plan addressed the technology failure but missed the interconnected human and operational consequences.
This is the fundamental limitation of traditional approaches: they treat organizational components as separate entities rather than recognising them as parts of an interconnected system.
What is systems thinking?
Systems thinking is a holistic approach to analysis that focuses on the way a system’s constituent parts interrelate and how systems work over time within the context of larger systems. Rather than breaking down an organization into isolated components, systems thinking examines the relationships, patterns, and interdependencies that create organizational behaviour.
In the context of resilience, systems thinking recognises that:
- Organizations are complex adaptive systems where components continuously interact and influence one another.
- Changes in one area create ripple effects throughout the organization.
- The relationships between components are often more critical than the components themselves.
- Emergent properties arise from interactions that cannot be predicted by examining parts in isolation.
- Feedback loops can either amplify or dampen the effects of disruptions.
This perspective transforms how we approach resilience, shifting focus from protecting individual assets to understanding and strengthening the connections that enable organizational adaptability.
Hidden vulnerabilities in plain sight
Traditional risk assessments excel at identifying obvious threats: fire, flood, system failures, and supply chain disruption. They are far less effective at revealing vulnerabilities that emerge from the interactions between organizational elements.
During a recent assessment with a manufacturing client, my company mapped their critical dependencies using a systems approach. The exercise revealed that their production scheduling system, warehouse management system, and supplier portal all relied on a single middleware application. None of these systems were individually classified as critical and the middleware was not even included in their business impact analysis. Yet its failure would halt operations across three departments simultaneously.
This type of vulnerability is invisible to traditional assessment methods because it exists in the connections, not the components. Systems thinking makes these hidden risks visible by asking different questions:
- What happens when multiple non-critical systems fail simultaneously?
- How do information flows change when normal communication channels are disrupted?
- Which informal relationships and workarounds do processes actually depend upon?
- Where do documented procedures diverge from actual practice?
The answers often reveal that organizations are far more vulnerable than their risk registers suggest.
From rigid plans to adaptive capacity
Business continuity plans are essential, but they represent only one dimension of organizational resilience. Plans work well for scenarios that we can anticipate and document. They work poorly for novel situations, cascading failures, or disruptions that evolve faster than our ability to update procedures.
Systems thinking shifts the focus from prescriptive plans to adaptive capacity. Rather than attempting to document responses to every conceivable scenario, organizations develop the capabilities to respond effectively to unexpected situations.
This involves building several key capacities:
Situational awareness: Understanding not just what has failed, but how that failure is propagating through organizational systems. This requires real-time visibility of dependencies and the ability to rapidly assess knock-on effects.
Distributed decision making: Empowering people throughout the organization to make appropriate decisions based on their understanding of local conditions and broader organizational objectives. This is only possible when people understand how their work connects to wider organizational systems.
Flexible resource allocation: The ability to rapidly redirect resources, modify processes, and establish temporary workarounds. This requires understanding which connections are essential and which can be temporarily reconfigured.
Collective sensemaking: Bringing together diverse perspectives to understand complex situations and identify response options that might not be visible from any single viewpoint.
These capabilities cannot be fully documented in a plan. They emerge from organizational culture, leadership practices, and the quality of relationships across the organization.
Embedding resilience in daily operations
One of the most powerful insights from systems thinking is that resilience is not something separate from normal operations. It is a property that emerges from how organizations function day to day.
Organizations that demonstrate strong resilience typically share several characteristics:
- Transparent information flows: People across the organization have visibility of relevant information and understand how their work connects to broader objectives. This enables rapid coordination during disruptions.
- Psychological safety: Team members feel able to raise concerns, report problems, and suggest improvements without fear of blame. This ensures that weak signals of emerging problems are detected early.
- Managed interdependencies: Critical connections between teams, processes, and systems are explicitly recognised and actively managed rather than left to chance.
- Regular reflection: Teams routinely examine how their work is actually done, identifying gaps between documented procedures and reality, and updating their understanding accordingly.
- Cross-functional relationships: Strong working relationships exist across organizational boundaries, enabling rapid collaboration when situations demand it.
These characteristics cannot be implemented through a project or documented in a plan. They must be cultivated as part of organizational culture and reinforced through leadership behaviour and management practices.
Scenario testing that reveals systemic weaknesses
Traditional business continuity exercises typically test whether people can follow documented procedures. Systems thinking approaches to scenario testing serve a different purpose: revealing how disruptions propagate through organizational systems and where adaptive capacity is strong or weak.
Effective scenario testing from a systems perspective involves:
- Cascading scenarios: Rather than testing single-point failures, scenarios explore how initial disruptions create secondary and tertiary effects. A supplier failure becomes a production delay, which affects customer commitments, which triggers contract penalties, which impacts cash flow.
- Ambiguous situations: Scenarios where the full scope of the problem is not immediately clear, requiring teams to gather information, make sense of incomplete data, and adapt their response as the situation evolves.
- Cross-functional coordination: Exercises that require collaboration across organizational boundaries, revealing where communication channels are effective and where they break down under pressure.
- Resource constraints: Scenarios where normal resources are unavailable, forcing teams to find alternative approaches and revealing which capabilities are truly essential versus merely convenient.
- Time pressure: Compressed timelines that prevent teams from following standard procedures, revealing whether they have the understanding and authority to make appropriate decisions quickly.
The value of these exercises lies not in demonstrating that plans work, but in revealing where organizational systems are brittle, where dependencies are poorly understood, and where adaptive capacity needs strengthening.
A practical framework for implementation
Adopting a systems thinking approach to resilience does not mean abandoning existing business continuity practices. Rather, it means enhancing them with a broader perspective. Organizations can begin this journey through several practical steps:
- Map critical dependencies: Go beyond identifying critical processes to understand the connections between them. What information flows are essential? Which relationships enable coordination? Where do informal workarounds exist?
- Engage diverse perspectives: Include people from across the organization in resilience planning. Those closest to the work often have the clearest understanding of how systems actually function and where vulnerabilities exist.
- Test for adaptability: Design exercises that challenge teams to respond to novel situations rather than simply execute documented procedures. Use the insights to strengthen adaptive capacity.
- Build cross-functional relationships: Create opportunities for people from different parts of the organization to build working relationships before a crisis demands collaboration.
- Embrace continuous learning: Treat every incident, exercise, and near miss as an opportunity to deepen understanding of how organizational systems function and where resilience can be strengthened.
The path forward
The business environment continues to grow more complex and interconnected. Supply chains span continents, technology systems integrate across organizational boundaries, and disruptions propagate faster than ever before. In this context, resilience cannot be achieved through plans and procedures alone.
Systems thinking offers a more sophisticated approach: one that recognises organizations as complex adaptive systems and builds resilience through understanding and strengthening the connections that enable adaptability. This does not mean abandoning traditional business continuity practices but, rather, enriching them with a deeper understanding of how organizations actually function.
The organizations that thrive through future disruptions will be those that move beyond the question “Do we have a plan for this?” to ask “Do we have the understanding, relationships, and adaptive capacity to respond effectively to whatever emerges?”
That shift in perspective is the essence of systems thinking, and it represents the future of organizational resilience.
The author
Helen Lipscombe FBCI is the founder of Resilience Continuity Consulting, bringing over 20 years of experience in business continuity, crisis management, and operational resilience. As a Fellow of the Business Continuity Institute, BSI Lead Auditor for ISO 22301 and ISO/IEC 27001, and contributor to the BCI Good Practice Guide 7.0, Helen works with organizations across transport, manufacturing, and public sectors to build practical, people-focused resilience programmes. Her approach combines systems thinking with global best practice to help organizations move beyond compliance towards genuine adaptive capacity.
For more information, visit https://resiliencecontinuity.co.uk
