01PREMISEFOUR AXIOMS
Most continuity plans were written for a fire, a flood, or a bad quarter.None of them survive contact with a war.
The assumptions underneath them — that the grid holds, that staff can travel, that the state is a customer rather than a commander, that suppliers three countries away keep shipping — are the first things to go. We rebuild the plan from those assumptions outward, then break it on purpose before anyone else does.
AWorst credible, not most likelyWe start from the worst credible scenario, not the most likely one. The likely one is already covered by your insurer.
BTested against a live adversaryEvery plan is tested against a live adversary before it is signed off. We play the opponent.
CAuthority pre-delegatedAuthority is pre-delegated in writing. Nobody waits for a decision that cannot arrive.
DExecutable by candlelightIf it cannot be executed on paper, by candlelight, it is not a plan. It is a document.
02HOW IT ACTUALLY GOESFIG_005 / LADDER
T+0
EventNOMINAL
- Public network congestion
- Non-critical travel
96%CAPABILITY RETAINED
Nothing has broken yet. This is the last hour in which decisions are cheap.T+6h
First hour of consequenceDEGRADING
- Grid frequency excursion
- Card and settlement latency
- Staff unable to reach site
74%CAPABILITY RETAINED
Generators start. The first plan is opened and found to assume conditions that no longer hold.T+24h
Fuel and rotationSTRAINED
- Reserve fuel below 50%
- No relief for the first shift
- Supplier tier 1 unreachable
52%CAPABILITY RETAINED
Exhaustion arrives before scarcity does. Most organisations have planned for neither.T+72h
State interventionDIRECTED
- Requisition notice served
- Priority reallocation of transit
- Press narrative set without you
34%CAPABILITY RETAINED
The state stops being a customer. Whatever channel you have is the channel you get.T+2wk
Sustained degraded modeSUSTAINED
- Tier 3 supply exhausted
- Workforce attrition
- Insurance position undocumented
22%CAPABILITY RETAINED
The plan is now whatever your people can execute from memory and paper.03PRACTICE10 SERVICE LINES
04THE OPERATING PICTUREFIG_002
Decision layerL1 / PLAN VIEW
BOARD / DELEGATED AUTHORITY / THRESHOLDS01SEVEN NAMED SEATS02THRESHOLDS PRE-SIGNED03SIGNED DELEGATION
Board, delegated authority, thresholds pre-signed. Succession named three deep before anyone needs it.COMMAND FLOW — ALL FOUR LAYERSFIG_002B
One structure, four layers, drawn for your organisation and rehearsed until the sequence is muscle memory.
05SECTORS9 REGISTERED
S01Banking & financePAYMENT RAILS / LIQUIDITY2 CRITICALS02Energy & utilitiesGENERATION / DISTRIBUTION4 CRITICALS03TelecomsCORE / SUBSEA / SPECTRUM3 CRITICALS04Transport & logisticsRAIL / ROAD / AIR3 CRITICALS05WaterTREATMENT / PRESSURE2 CRITICALS06HealthcareACUTE / SUPPLY / STAFFING3 CRITICALS07Defence supply chainTIER 1–3 MANUFACTURE3 CRITICALS08Data centres & cloudPOWER / COOLING / TRANSIT3 CRITICALS09Food & agricultureCOLD CHAIN / INPUTS2 CRITICAL
EXPOSURE BY DEPENDENCYGRID · FUEL · COMMS · STAFF · SUPPLY · STATECLIENT REGISTER — NOT DISCLOSED
06ENGAGEMENT14–20 WEEKS
P1WK 1–3
ExposureWhat you depend on, who controls it, and how quickly it can be taken away.P2WK 4–8
DesignCommand structure, thresholds, degraded-mode runbooks, delegated authority.P3WK 9–14
TestWargame against a live adversary. Everything that fails is rewritten.P4WK 15+
EmbedDrills, paper copies on site, annual re-test, standing government channel.07WHAT WE MEASURE FIRSTFIG_007 / AUTONOMY
PRIMARY POWER
72h
MEASURED 8hFUEL RESERVE
168h
MEASURED 24hPOTABLE WATER
96h
MEASURED 12hCOMMS, INDEPENDENT
72h
MEASURED 4hSHIFT ROTATION
336h
MEASURED 16hMeasured figures are the median we find on first survey across engagements to date. The white marker is the standard we rebuild to. Nobody starts at the marker.
The plan iswritten beforeit is needed
Initial briefings are held under NDA, at your site or ours. Two hours. No deck.