October 26, 2026

The Response Gap: Why Organisations Fail to Act on Known Risks

Global Risk & Crisis Brief #22

Global Risk & Crisis Brief is a weekly strategic publication by The Mentors, providing concise analysis of geopolitical, security, economic and regulatory developments shaping today’s international risk environment.

Each edition examines emerging trends, policy shifts and evolving crisis dynamics that may influence governments, businesses and organisations operating across complex global markets.

Designed for executives, legal advisers and decision-makers, the briefing supports strategic awareness, informed judgement and proactive crisis management through clear, practical and forward-looking insights.

The Mentors’ Perspective

Some organisational crises are not caused by an inability to see danger coming. The warning signs may be visible, the information available and the potential consequences understood. Yet the response comes too late.

The critical failure often lies between recognising a threat and acting on it. Unclear accountability, delayed decisions and institutional inertia can allow a manageable problem to develop into a serious crisis.

Effective crisis management therefore requires more than identifying risks. It requires organisations to translate warnings into decisions and decisions into timely, coordinated action.

Overview

Risk monitoring, intelligence gathering and contingency planning are essential components of organisational resilience. However, these capabilities offer limited protection when the information they generate does not lead to an appropriate response.

Warnings may be overlooked, escalated too slowly or fragmented across departments. Decision-makers may hesitate because evidence remains incomplete, responsibilities overlap or the consequences of acting prematurely appear uncertain.

The central challenge is to ensure that significant risks trigger a proportionate response before the organisation’s options narrow and the consequences become more difficult to contain.

Why Organisations Fail to Act

1. Unclear accountability

When responsibility is distributed across multiple departments, committees or leadership teams, critical decisions can fall between organisational boundaries. Without clearly assigned authority, stakeholders may wait for consensus while the threat continues to develop.

2. Bureaucratic inertia

Procedures and approval mechanisms provide necessary safeguards, but processes designed for routine operations may be too slow for an emerging crisis. When established decision-making structures cannot adapt to changing circumstances, procedural compliance can take precedence over effective action.

3. Normalisation of warning signs

Repeated exposure to disruptions that produce limited immediate damage can create a false sense of security. Previous warnings that appeared to have little consequence may cause decision-makers to underestimate new signals, even when the underlying risk has changed.

4. Fear of making the wrong decision

Acting on incomplete information can carry significant financial, operational, legal and reputational consequences. However, waiting for certainty can be equally dangerous. Effective leadership requires an assessment of both the risks of intervention and the potential cost of delay, including the option of taking proportionate, reversible measures.

5. Fragmented information

Different teams may hold separate pieces of a developing risk picture. Without effective information-sharing and a mechanism for synthesising intelligence, decision-makers may receive an incomplete assessment at precisely the moment when a coordinated response is most important.

Why This Matters

A response gap can amplify the consequences of geopolitical disruption, cyber incidents, supply-chain failures, regulatory exposure and reputational crises.

The initial event may be manageable. Delayed recognition, indecision or poor coordination can make it considerably more damaging.

For senior leaders, the question is not simply whether the organisation has identified its principal risks. It is whether significant warnings reach the right people, trigger decisions at the appropriate level and lead to action within a timeframe that reflects the potential consequences.

A risk register cannot provide this assurance on its own. Nor can a crisis plan that has never been tested against realistic scenarios.

Closing the Response Gap

Effective crisis preparedness begins before an incident occurs. Organisations should establish clear escalation thresholds, define decision-making authority and specify who is responsible for implementing critical measures.

They should also ensure that employees can raise concerns, challenge prevailing assumptions and communicate uncomfortable information without fear of reprisal.

Scenario exercises can reveal weaknesses that formal procedures may conceal. In particular, organisations should test how quickly warnings are escalated, whether decision-makers have sufficient authority and whether different teams can coordinate under pressure.

One useful measure is the time elapsed between a credible warning, its assessment, the decision to act and the implementation of that decision. Examining each stage can help identify where delays arise and which corrective measures would have the greatest impact.

The objective is not to eliminate uncertainty or require immediate action in every situation. It is to ensure that decisions are proportionate to the threat, responsibilities are understood and uncertainty does not become a reason for indefinite delay.

What Decision-Makers Should Watch

Leaders should regularly ask five questions:

  • Who has the authority to make critical decisions when a threat escalates?
  • What indicators trigger an immediate review or response?
  • How quickly can relevant information reach the people responsible for acting?
  • Can procedures adapt when events move faster than anticipated?
  • Are escalation mechanisms and crisis plans tested under realistic, time-sensitive conditions?

If these questions cannot be answered clearly, the organisation may have a response gap that will remain hidden until a crisis exposes it.

Strategic Takeaway

Risk awareness is not the same as effective risk management.

Organisational resilience depends not only on identifying threats, but also on the ability to make timely decisions and implement them before the situation deteriorates.

Closing the response gap requires clear accountability, reliable information flows, tested procedures and leaders prepared to make proportionate decisions without waiting for perfect certainty.

In a crisis, recognising the warning is only the beginning. The decisive question is whether the organisation can act on it in time.

Prepared by The Mentors | Global Risk & Crisis Management

Recent Posts

See All