Insights
Articles
Practical writing on crisis management, business continuity, IT disaster recovery, and operational resilience, for the people who run those programs.
-
Latest
If Your Team Debates the Severity Level, Your Crisis Severity Levels Are Broken
If the first twenty minutes of an incident go to arguing whether it is a Level 2 or a Level 3, your crisis severity levels have already failed. Severity levels exist to end that debate, not start it. We see…
·
-
If Your Team Debates the Severity Level, Your Crisis Severity Levels Are Broken
If the first twenty minutes of an incident go to arguing whether it is a Level 2 or a Level 3, your…
-
Your Board Oversees AI. Has It Ever Watched AI Fail?
Board oversight of AI finally has a playbook. It still doesn’t have a failure drill. McKinsey’s December 2025 report, The AI reckoning:…
-
Hiring an Emergency Management Consultant? Most of the Industry Is Built for Something Else.
Search for an emergency management consultant and most of what comes back are firms that help governments manage disaster recovery: FEMA public…
-
Your Tabletop Exercise Exposed Recovery Gaps. Here Is What to Do in the Next 90 Days.
The worst outcome of a tabletop exercise is not finding gaps. It is finding them, writing them into a tabletop exercise after…
-
Your Ransomware Recovery Plan Is a Backup Plan. Here Is What It Is Missing.
Most ransomware recovery plans are backup plans. They answer one question, “can we restore?”, and skip the three that decide how long…
-
What a Business Continuity Maturity Assessment Should Tell You (and What an Audit Won’t)
Most business continuity assessments end with a list of findings. A good business continuity maturity assessment ends with a decision: what to…
-
Business Continuity Program Cost: In-House vs Outsourced, With the Real Math
Most organizations compare the cost of a business continuity program by putting one salary next to one consulting quote. That comparison is…
-
How to Choose a Tabletop Exercise Facilitator: Seven Questions to Ask Before You Sign
Most organizations choose a tabletop exercise facilitator on the scenario pitch and the price. They should choose on two things the sales…
-
Your AI Agent Is Now Part of Your Incident
Health care is putting AI agents into production faster than it can govern them. Most of the conversation about AI agent incident…
-
The Response Window Just Collapsed. Your Crisis Plan Still Assumes Days.
Anthropic published its September 2026 threat intelligence report last month. It documents eight months of AI misuse the company detected and shut…
-
Managing Uncertainty Podcast – Episode #335: The AI Storm is Coming
Frontier AI models can now find exploitable vulnerabilities faster than any human research team, and attackers have that capability today. In Episode…
-
The AI Labs Just Warned You About AI-Enabled Cyber Attacks. Here Is What They Left Out.
Last week, OpenAI and Anthropic signed the same letter. So did Microsoft, Google, AWS, CrowdStrike, Palo Alto Networks, Mastercard, Visa, AT&T, and…
-
A Return-to-Office Mandate Is a Tell About Your Leadership, Not Your Strategy
Here is the uncomfortable finding most CEOs will skip past this week. New research from Wharton, published in Organizational Behavior and Human…
-
Managing Uncertainty Podcast – Episode #334: Sevens Months on an Ambulance
In this episode of the Managing Uncertainty Podcast, Bryghtpath Principal and Chief Executive Bryan Strawser shares a personal story. Over the past…
-
The Resilience Maturity Gap Isn’t a Software Problem
Fusion Risk Management just published five years of market data, and buried inside it is an admission you rarely hear from a…
-
Managing Uncertainty Podcast – Episode #333: Trust is Not Budget – Why your CEO Likes You but Won’t Fund You
In this episode of the Managing Uncertainty Podcast, Bryghtpath Principal & CEO Bryan Strawser digs into new research on how CEOs really…
-
Executive Buy-In for Business Continuity: Being Liked Is Not the Same as Being Believed
Your CEO probably likes you. That is not the same as believing your program pays for itself. Two recent research studies about…
-
Your Crisis Decision History Is a Single Point of Failure
Hour three of a ransomware response. Someone on the call says what someone always says. “Didn’t we work through this in the…
-
Crisis Leadership When the Playbook Fails: Dutch Leonard’s Framework, Six Years Later
In March 2020, days into the first COVID-19 lockdowns, Harvard Business School put Professor Dutch Leonard on its Managing Through Crisis webcast…
-
Managing Uncertainty Podcast – Episode #332: What Belongs in a Resilience Policy
Most resilience policies are either a mission statement with a logo or a forty-page plan wearing a policy’s name tag. Bryan Strawser…
-
Managing Uncertainty Podcast – Episode #331: Where to Play, How to Win – Aligning Resilience with Corporate Strategy
In this episode of the Managing Uncertainty Podcast, Bryghtpath Principal and Chief Executive Bryan Strawser explores the role of corporate strategy in…
-
Managing Uncertainty Podcast – Episode #330: The Leadership Difference – Why Resilience Programs Live or Die at the Top
In this episode of the Managing Uncertainty Podcast, Bryan Strawser of Bryghtpath examines the single largest variable in whether a resilience program…
-
Geopolitical Scenario Planning Is the Easy Part. Exercises Are Where Leaders Break.
A McKinsey survey published this month found something I see in nearly every engagement: organizations will happily study the future, but they…
-
Managing Uncertainty Podcast – Episode #329: The Champion Problem
On this episode of the Managing Uncertainty Podcast, Bryan Strawser of Bryghtpath examines why some resilience programs survive a change in leadership…
Let’s build your Resilience Roadmap
Our team has spent two decades helping the world’s leading organizations prepare for and navigate disruption. We’ll bring that experience to yours.