Close Menu
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
More items
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
X (Twitter) LinkedIn
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
Login
LinkedIn Bluesky
Resilience Forward
Subscribe Now
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
Resilience Forward
You are at:Home»Risk»Threatscape»Is the UK’s Covid Inquiry diluting resilience lessons by focusing on guilt over governance? (Page 61)
Threatscape

Is the UK’s Covid Inquiry diluting resilience lessons by focusing on guilt over governance?

The UK Covid Inquiry was meant to help the nation learn. But are we learning the right things? This article argues that a fixation on blame risks undermining the governance reforms and resilience capabilities the UK urgently needs.
November 27, 20256 Mins Read
The UK Covid Inquiry

By Peter Power, FBCI

On 20th November 2025 the UK Covid-19 Inquiry published its second report (with more to follow in 2026/7). Headed by Baroness Hallett and at an estimated cost of c£200m, it should be possible for the inquiry to take a calm, detached view of all the many lessons learned that are crucial to enhance overall UK resilience, especially as:

  • The initial report made it abundantly clear that it is not ‘if’ another pandemic will hit us, but ‘when’.
  • In tune with this, the current UK publicly available National Risk Register (NRR) positions the threat of another pandemic as a top non-malicious risk with catastrophic impact on the UK. Presciently, the 2017 NRR came to the same conclusion.

Writing in The Times newspaper on 21st November, experienced journalist Fraser Nelson, having read the November report, summarised some of the findings: “Ministers and officials started off cautious and open-minded but soon succumbed to tribalism. Politician, scientist and civil servant alike started to see it as a battle between the pro-science lockdowners and reckless, heartless deniers. So those asking questions, whether epidemiologists or chancellors, were mocked and marginalised … The task now is for a pandemic response system that is more capable of learning… In the Covid chaos, dissenters were urgently needed. But what should have been a scientific question was over-simplified, moralised and politicised, with difficult questions ignored”.

How true, but I sadly feel the basis of the 19 recommendations in the most recent report are rather too light on learning lessons and too heavy on condemning incompetent individuals who have now all moved on to other jobs: as if blaming them  – and welcoming their subsequent move to other positions – solves most of the problems. A fundamental mistake. We now know every small detail about how Boris Johnson handled Covid-19, but the next pandemic will not be Covid-19, and he will not be the Prime Minister.

I have previously written an article drawing attention to what I consider to be the inappropriate adversarial nature of cross-examinations during the evidence-gathering stage, conducted by barristers seemingly more familiar with scoring points to prove guilt or innocence in criminal courts, rather than looking for lessons to be learned. This is a key point: I think this was an unfortunate error in the inquiry process that probably reflects the otherwise distinguished career of Baroness Hallett, who for many years specialised in criminal law.

There is an urgent need for answers on the greatest questions for governments about pandemics, starting with what more can be done, if anything, to stop the next one happening – especially since a future pandemic is almost a certainty. The only real questions are when will it happen? And how impactful will it be?

Lessons from the lessons learned process

Baroness Hallett correctly stated: “There was often no right answer or good outcome,” when criticising the Government response for being “too little, too late”. This flags up an important point.

BS11200, written as guidance and published well in advance of the pandemic (I am an author), clearly states: “Apparent solutions are not right or wrong, but better or worse … Decision-makers might have to choose the least bad solution. Most choices come with a penalty of some sort and there is no ideal solution”. US General Colin Powell summed it up neatly when he suggested making decisions on just 40% of information can be too risky. Similarly, so is waiting until you have at least 70% of data. The former suggests too much detail is probably missing to make effective decisions. The latter is usually reached only when the time for urgent decisions has passed and it is therefore too late, as the scenario has most likely spread further. Exactly as happened with Covid. The ideal time for crisis decision-making is therefore between 40% – 70% of wished-for information.

As highlighted earlier, the current (2025) version of the NRR once again highlights pandemic as a leading risk. I just hope this time more is done to prepare in advance. This needs the analysis of the Covid Inquiry to shift from ‘who said what’ in the blame game towards much more important issues of learning and national governance. And inherent in that, the need for much increased national resilience to include horizon scanning, situational awareness, agility, and adapting.

During the criminal court-style inquiry stage, UK parliamentarian William Hague wrote an excellent article making the same point. He concluded: “One of the lessons to be learnt from Covid might well be that there must be a better way to learn them”.

Hague also suggested something else relevant to the problems inherent with the ongoing Covid Inquiry, something that I think is most pertinent but not sufficiently recognised. He wrote: “The problem is encapsulated by the slogan used by the inquiry to encourage the public to provide evidence: ‘Every story matters’. That is a comforting thought but in a country of 67 million people it brings the danger of countless trees taking our eyes off the shape of the forest. Other countries do it differently: Sweden’s national commission of inquiry published its final, 1,700-page report, in February 2022. Major parliamentary inquiries in France and Australia have been completed”.

The Cullen review into handguns after the Dunblane massacre in 1996 and the foot-and-mouth inquiry in 2001, although dealing with very different scenarios, both led to swift and meaningful action, based very much on learning important lessons. However, I fear that might not be the case with the Covid Inquiry. Fraser Nelson concluded his article by pointing out: “The task now is to have a pandemic response system, above all, more capable of learning. Without it, we are fated to enter the next crisis just as blind as we entered the last”.

Spot on, but I wonder if we might have just wasted some of the £200m inquiry cost by pursuing the guilt of individuals, rather than thoroughly identifying all of the organizational lessons that we urgently need to learn?

The best way to summarise the above might be this quote from Peter Drucker:

“Learning is a lifelong process of keeping abreast of change. And the most pressing task is to teach people how to learn.”

The author

Peter Power FBCI FIRM BA JP has considerable hands-on experience of real time events and for many years has supported various governments and organizations in several different countries. He occasionally appears on TV and radio as an expert guest. He is also a past member of the UK Security Review Commission (IPPR) and previous Chairman of the World Conference on Disaster Management. Peter is a co-author of the UK Cabinet Office / BSI standard on Crisis Management (BS11200) and in an earlier life was instrumental in helping to create/promulgate the UK ‘Gold/Silver/Bronze’ Crisis Command System. He is quoted in the UK Government Guide on Integrated Emergency Management and is the author of many guidebooks, including the original UK Govt. (then DTI) issued guidebook on business continuity. Nowadays his focus is very much on promoting organizational resilience.

Peter is an Editorial Advisor for Resilience Forward.

UK
Share. Facebook Twitter Pinterest LinkedIn Tumblr Email WhatsApp
Previous ArticleBoard briefing: preparing for the post-quantum era
Next Article 88% of UK and US organizations are concerned about state-sponsored cyber attacks

Related Posts

A group of rabbits happily graze while a wolf watches, hidden in the bushes behind them.

Confidence in resilience is outpacing reality, according to new report

November 13, 2026
An upward trending arrow.

Organizations are being forced to rethink resilience strategies, finds State of IT Infrastructure Resilience study

November 13, 2026
Error page: 'This site can't be reached' message from a browser, indicating connection closed and suggesting checks (reload button visible).

Microsoft outage demonstrates the realities of concentration risks

November 13, 2026
The numbers 2027 with the 0 replaced with an AI symbol.

From hype to control: AI security, risk management, and governance in 2027

November 13, 2026
Geopolitical risks

Geopolitical conflict is increasingly reshaping how organizations manage people, operations, and risk

November 9, 2026
Abstract network of interconnected nodes and lines in blue.

Everbridge publishes its 2027 Global Risk & Resilience Outlook

November 9, 2026
Advertisement
Resilience First
This week's most read articles
AI agent in action concept.

Lack of clear activity baselines makes it harder to manage AI agent resilience and security

November 9, 2026
Error page: 'This site can't be reached' message from a browser, indicating connection closed and suggesting checks (reload button visible).

Microsoft outage demonstrates the realities of concentration risks

November 13, 2026
Two different jigsaw pieces.

KPMG Risk & Resilience Survey finds that half of organizations have yet to integrate risk and resilience management

March 12, 2025
Latest resources
A close up of feet on a tightrope.

Setting security levels too high is a risk in its own right. ‘Right-sizing’ cybersecurity is the way forward…

January 13, 2025
Load More

Subscribe to Updates

Get our Resilience Updates newsletter.

Most Popular Feature Articles
Five stage crisis management framework

A five stage framework for a crisis management process

Three dark coloured light bulbs on a black background illustrate the concept of The Dark Triad in Crisis Management.

The Dark Triad in crisis management

Blue interconnected gears and network nodes symbolizing automation and complex machinery.

Agent zero – the 2028 digital pandemic

Latest Reports
An AI agent icon lying on its side with eyes shut showing the concept of a deactivated agent.

New report reveals major operational resilience gaps in agentic AI adoption

Two hands form a rectangular frame around the sun in a bright sky over distant mountains.

BCI Future of Resilience Report points to a more strategic future for resilience

Global risks concept

UN report warns that the global risk landscape is being redrawn

A promo box for an article about resilience governance.
© 2026 Resilience Forward
  • About Resilience Forward
  • Newsletter
  • Newsfeed
  • Advertise
  • Call for Papers
  • Contact
  • Privacy Policy and Cookie Use
  • AI Use Policy

Type above and press Enter to search. Press Esc to cancel.

Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Ad Blocker Enabled!
Ad Blocker Enabled!
Our website is made possible by displaying online advertisements to our visitors. Please support us by disabling your Ad Blocker.

Sign In or Register

Welcome Back!

Login to your account below.

Lost password?