Resilience as a practiceΒΆ
A control written down is a prediction: that the escalation path will work at 2:00, that the backup will restore within the recovery objective, that the team knows the procedure when the documentation is unreachable. A control run under realistic conditions is a finding. Resilience is treated here as the work of turning the first into the second, and as the habit of keeping that work going.
The evidence that counts is that procedures produce their intended effect when tested. Stress tests, scenario walkthroughs, red-team probes and all kinds of creative exercises can be the mechanisms that generate it. What they leave behind is meant to stay with the organisation and to be run again, a practice which can be held across operations, security, legal and leadership.
The loop in purple teaming, for example, generates evidence live, the offensive and defensive sides reading each result together while the events are still fresh.
Last updated: 8 July 2026