Organisational Resilience: Five Priorities for Technology Leaders

That was the central message from a recent breakfast roundtable with senior technology leaders in Singapore. Executives from telecommunications, consumer goods, manufacturing and technology services explored how the resilience landscape is changing. Their discussion pointed to a clear shift: success is increasingly defined not by preventing every incident, but by how effectively an organisation anticipates, absorbs and responds to disruption.

The discussion highlighted that resilience is built through the interaction of technology, governance, people and partners, not through any single control or system.

Five strategic themes emerged, each reinforcing the need for a more integrated, business-led approach to resilience.

1. Resilience has become a board priority

Cybersecurity and operational resilience now command sustained attention from boards and risk committees. Leaders are expected to provide more than annual assurance. They must explain the organisation’s current risk posture, the readiness of critical services and the actions being taken to reduce exposure. This requires framing resilience in business terms, including customer impact, operational continuity, regulatory standing, and enterprise value, rather than as a technical scorecard.

2. AI is amplifying both opportunity and risk

Generative AI is increasing both the scale and speed of cyber risk. Attackers can identify and exploit vulnerabilities faster, while phishing, social engineering, and deepfake voice or video attacks can be produced at scale.

At the same time, organisations are exploring external AI platforms that may introduce new dependencies. AI security tools can strengthen detection and monitoring, but rigorous testing, effective governance, and clear accountability should support their deployment. The central challenge is not whether to use AI, but how to do so without creating unmanaged risk.

3. Strong foundations still matter most

Even as threats become more sophisticated, many incidents still begin with familiar weaknesses, including delayed patching, poor access controls, insecure configurations and limited network segmentation. Legacy systems amplify these vulnerabilities because they are difficult to update, expensive to maintain and often embedded in critical operations.

Therefore, simplifying fragmented environments and modernising architecture should be treated as strategic resilience priorities rather than discretionary technology upgrades.

4. Resilience extends beyond technology

Organisations increasingly rely on suppliers, partners and service providers to deliver critical services. A vendor failure can quickly disrupt customer services, meaning compliance checks conducted only at onboarding are no longer sufficient.

Continuous monitoring, clearer ownership of supplier risk and deeper visibility into outsourced environments are becoming essential. The same systems thinking applies beyond technology. Operational continuity, supply chain resilience and workforce adaptability are interconnected, and weakness in one area can undermine the whole enterprise.

5. Human behaviour continues to shape outcomes

Human behaviour remains a major source of exposure, from incorrect access provisioning and mishandled information to successful phishing and fraudulent payment instructions. Awareness training and simulations remain important, but organisations also need practical verification protocols and a culture that lets employees pause and challenge unusual requests. During an incident, disciplined communication is equally critical. Executives and stakeholders need frequent, transparent updates, even as the facts still emerge. Prolonged silence can compound the loss of confidence caused by the technical issue itself.

A leadership test, not just a technology test

The most damaging outcomes are often prolonged operational disruption and the resulting loss of stakeholder trust. Leaders should therefore prioritise the assets and processes the business cannot afford to lose, strengthen supplier oversight, automate vulnerability management where appropriate and run business-led crisis simulations. These exercises should test decision-making, escalation and communication, not only technical recovery.

The leadership imperative

For CIOs and CDOs, the mandate is expanding from technology delivery to enterprise resilience. The organisations best positioned to withstand disruption will combine sound fundamentals with adaptable people, accountable governance, and a practised ability to recover, while preserving the trust of customers, regulators, and employees.

______________________________________________________________

Get in touch. To strengthen your technology leadership capability or build a future-ready executive team, connect with our executive search experts at your local Odgers office here.