Beyond resilience: why boards need to govern for continuous adaptation

For the past decade, resilience has been one of the defining concepts in governance.

Boards have rightly focused on ensuring their organisations can withstand disruption, maintain critical operations, and recover quickly from unexpected events.

But there’s a question every board should now ask: is resilience still the right measure of success — or has it simply become the minimum standard of good governance?

Resilience has become the floor, not the ceiling

Traditional resilience assumes disruption is temporary. Something unexpected happens, the organisation responds, operations recover, normal resumes.

That capability still matters. But across most sectors — workforce shortages, funding uncertainty, regulatory change, cyber threats, AI, shifting stakeholder expectations — there’s no longer a stable “normal” to return to. The disruption is the environment, not an interruption to it.

That changes the oversight question. Not “can our organisation withstand change?” but “is our organisation getting better at navigating and using it?” The first is about protection. The second is about capability.

Four shifts in board oversight

This doesn’t require redesigning your governance framework. It requires asking for different evidence.

1. From stability to adaptability

Boards routinely get assurance that systems and controls remain effective. Far fewer get evidence that the organisation has become more adaptable — that workforce capacity can flex with demand, services can be redesigned quickly, resources can be reallocated as priorities shift.

Board question: Where have we deliberately increased our capacity to adapt over the past twelve months — and where are we still locked into one way of working?

2. From hindsight to foresight

Most board papers explain what already happened — incidents, complaints, breaches, financial results. Necessary for accountability, but limited for what comes next.

The more useful papers also answer: what does this mean, and what should we do differently? Leading indicators — workforce strain, shifts in complaint themes, early signs of stakeholder disengagement — rarely offer certainty, but they often offer enough direction to improve a decision before it’s forced.

Board question: What emerging signals would cause us to reconsider our current assumptions or priorities?

3. From reviewing decisions to governing trade-offs

Continuous change creates competing priorities — investment versus affordability, innovation versus stability, speed versus assurance. These trade-offs sit at the heart of governance, yet boards are often shown them only after management has already resolved them.

Board question: What trade-offs has management identified, and where does the board need to weigh in before they’re finalised, not after?

4. From assumed ownership to embedded accountability

Adaptive capacity has a way of quietly diffusing responsibility — everyone is “adjusting,” but no one owns whether the adjustment worked. As organisations build the capacity to move faster, roles and escalation paths need to stay explicit, or speed comes at the cost of accountability.

Board question: When something changes quickly, is it clear who owned that decision — or does it only become clear after something goes wrong?

The tone that sits underneath all of this

None of the above works if raising an early, imprecise signal feels riskier to management than staying quiet until there’s certainty. Boards that get genuine foresight tend to have a specific tone in the room: risk is discussed as something to actively navigate, and executives are rewarded for surfacing a problem early rather than penalised for not having it fully resolved. That tone is set as much by how the chair and directors respond to bad news as by anything written into a risk framework.

What this means for board reporting

Many boards now receive more information than ever. That hasn’t necessarily meant more visibility. The problem is rarely volume — it’s orientation. Reporting built to explain the past will always crowd out reporting that illuminates what’s ahead unless the board explicitly asks for both.

A short self-check

Before your next board cycle, five questions worth putting to your own board:

• Tone: does risk language in this room empower people to raise problems early, or quietly incentivise them to wait for certainty?
• Line of sight: do risks arrive connected to each other, or does each one turn up in its own silo, in its own paper?
• Decision-usefulness: when the board makes a call, is it built on current signal — or on last quarter’s incident log?
• Appetite: is risk appetite something the board approved once, or something actively shaping this quarter’s trade-offs?
• Ownership: if the answer to any of the above is uncertain, is it clear whose job it is to fix that?

The question to leave the table with

Every board should keep asking whether its organisation is resilient. But the sharper question now is this: is our governance model designed for an organisation that’s occasionally disrupted — or for one that operates in continuous change?

Resilience remains the foundation. It’s no longer the destination. The boards creating the most long-term value will be the ones governing not just for resilience, but for continuous adaptation.

This connects to the risk governance maturity work we’ve published as the THRIVE framework — which examines tone, holistic risk view, accountability, value protection and creation, risk appetite, and reporting in more depth.