Mark Aquilina, founder of NOUV
Resilience is not a crisis response. It is a design choice.
It starts long before anything goes wrong: before a cyber incident, before a supply shock, before a reputational crisis, before a sudden regulatory change, before the market turns. Long before an election result reshuffles the national mood.
If your organisation only talks about resilience when it is under pressure, you are already late.
A practical way to begin is with a simple test, one I often use with corporate clients after two decades in the game.
If revenue drops tomorrow, what breaks first: cash, people, systems, or trust? If the operating environment shifts, do you adapt by plan or by panic? If key leaders are unavailable, does the business still run well? The answers to these questions are your resilience baseline. Not your mission statement.
From there, resilience is built on a small set of foundations that are not theoretical; they are observable in how a company operates day to day.
The first is culture that shows up under stress. Not perks, not posters, not slogans. Culture is what people do when the decision is uncomfortable. Do teams escalate issues early or hide them? Do managers deal in facts or narratives? Do people own outcomes or outsource responsibility? Under pressure, culture stops being a “soft” topic and becomes operational reality. It either holds or it cracks.
The second is leadership that is calm, visible, and decisive.
Resilient leadership is not loud. It is consistent. It sets clear priorities, makes fast decisions where speed matters and slower decisions where caution is needed, and has the discipline to say no to distractions. In uncertainty, staff do not need drama. They need direction.
The third is governance that prevents single points of failure.
Many organisations are one resignation, one vendor failure, or one key system outage away from chaos. Good governance is not bureaucracy; it is continuity. And it creates oversight that asks hard questions early rather than apologising late.
If the business depends on one person knowing how things “really work”, it is not resilient. It is lucky. And at some point, as always happens, its luck will run out.
The fourth is operational agility of what I often describe as “the unglamorous kind”.
Resilience is often mundane: training people so operations do not halt when someone is absent; building supplier options so procurement is not hostage to one relationship; documenting processes so knowledge is not trapped in inboxes; planning capacity so growth does not create fragility.
The best business leaders understand that corporate agility is preparation that creates options.
The fifth, and final element, is trust, earned before you need to cash in on it.
Trust is the asset that buys you time when things go wrong. Customers tolerate mistakes from companies they believe in. Partners collaborate with firms that behave predictably. Employees stay longer when they feel respected and informed.
Trust is built through consistency: doing what you said you would do, repeatedly, especially when it is inconvenient. Do not underestimate the value of trust.
“If your organisation only talks about resilience when it is under pressure, you are already late”
The common mistake is to treat resilience as a document. Businesses file it under ‘plans’: a continuity binder, a cyber policy, an annual risk workshop to tick off the ESG to-do list.
These matter, but they are not the point. A plan that is not rehearsed is not a plan; it is paperwork. A governance structure that is not used is office theatre. A culture that is not lived is base marketing.
Resilience, in the true corporate sense, is behavioural, operational, and measurable.
So what does it look like in practice?
It looks like clarity about who does what during stress, what triggers decisions, and what actions follow. It looks like cyber hygiene that assumes attack is inevitable rather than theoretical.
It looks like scenario planning tied to financial thresholds, so the organisation knows when to freeze, cut, or accelerate. It looks like disciplined communication that avoids vacuums.
It also means taking slow risks seriously. Not every threat arrives as an ‘event’. Some are drifts: skills shortages, climate exposure, regulatory tightening, reputational fragility, and technology obsolescence – in Malta we are seeing many of these across various sectors.
Resilient firms treat these as strategic realities, not cosmetic issues. They invest early, before returns are visible, and adopt a longer horizon than the next quarter.
Election seasons intensify uncertainty and temporarily slow down investment. But businesses that anchor their stability to politics are choosing fragility. Political cycles matter, yet they are not a strategy.
The organisations that endure through elections, shocks, and market shifts share a simple trait: they do the hard foundational work in peacetime. Culture, governance, preparedness, people, and trust. Build those now, and you will not need a miracle later.
Mark Aquilina is the founder of NOUV, where he works with business leaders on strengthening organisational resilience, governance, and long-term performance. Previously, his focus was on helping companies build the internal capabilities, culture, leadership discipline, preparedness, and trust. Today he is leading the firm’s internationalisation strategy while still advising key clients in Malta.
