Assessment and analysis
What you rely on, who controls it, and how quickly it can be taken away.
- Critical operations and assets
- The seven components and the links between them
- Suppliers and stakeholders
- Existing plans
Operational resilience for war, crisis and severe disruption.
Key infrastructure elements fail simultaneously. KOLOSAL7 builds resilience around how energy, communications, people, suppliers and authority behave when several of them, or all of them, fail at once — when protocols and traditional approaches collapse.
Most continuity plans prepare for one event at a time. A large-scale collapse arrives as several at once.
Every plan assumes that things will go the way it says. In a large-scale collapse those assumptions fall apart simultaneously. A failure in one node pulls down the next and spreads on — not in sequence, but like a web — and the whole network loses its resilience at once.
THE SYSTEM
Critical operations sit at the end of a chain of systems that are usually planned for separately — and fail simultaneously.
UNPREPARED BUSINESSEvery plan assumes that things will go the way it says.
01 / 07 · Power supply and backup generation
Power supply, backup generation, and the fuel, deliveries and roads backup depends on.
Interaction chains between core nodes In the centre, the life of the business. Around it, seven systems, linked by interaction chains — not each with every other, only where a real interaction exists.
One and the same event, two businesses side by side: one that is not prepared, and one that is.
VIABILITY OF THE BUSINESSUNPREPARED PREPARED
A large-scale, uncontrolled failure of national power and life-support networks; restricted logistics and closed borders; damage to telecoms and IT infrastructure; occupation of territory, structural damage to key infrastructure through attacks, or the business cut off from its key infrastructure. The consequence for the business: it needs rapid analysis and decisions that fit the situation as it develops.
Since 2022, businesses and organisations in Ukraine have had to keep critical processes running through power outages, loss of communications, restricted access to life-support systems, staff shortages and other crisis impacts.
The lesson is not that systems fail. It is that they fail simultaneously, and that plans written for one scenario at a time do not survive it.
The same operating principles, applied at two different distances from the event.
Applying experience gained in extreme conditions before a business's critical operations are tested by reality.
For businesses and organisations that understand the need to build up their resilience in the face of geopolitical shocks, energy and infrastructure failures, cyber incidents with operational consequences and supply disruptions.
Keeping a business's critical operations running in conditions that are already real: the conditions of war.
For businesses and organisations working under physical threat, power and communications outages, restricted access to life-support systems, staff shortages, and business demands that change faster than procedures can be rewritten.
Levels of authority for taking decisions are defined in advance; delegation reaches three structural levels down.
What you rely on, who controls it, and how quickly it can be taken away.
Business recovery plans, tailored to the business: levels of authority, delegation, degraded-mode runbooks.
Full or partial implementation, then testing.
Plans corrected by the results of the tests, and the model finalised.
Ongoing support: once a quarter, further analysis and a review of changes in the business.
Every business or organisation gets its own plan.
Different banks perform different tasks; a fintech or a digital bank is another field again. A failure hits each business or organisation differently, so the plan is always individual.
Payment capability, liquidity and cash logistics, branch and site access, communications and data, regulatory interfaces, critical personnel. Traditional banks, payment institutions and fintechs depend on very different things.
Operational observations, analysis and practical lessons on keeping critical operations running.
Occasional analysis. No unnecessary noise.
Not signed-off papers sitting in a drawer, but implementation, step by step, for the situations you will actually face.