Resilience in Uncertainty

The Black Swan.

What European companies can learn from Ukraine. A scenario-based look at risks, at real crisis experience and at the limits of business continuity systems when situations change faster than the plans.

For executive management, corporate security, BCM, risk & compliance, HR and operations
Status Quo

Conventional BCPs meet a multipolar situation

Conventional BCPs consider individual risks that are mostly infrastructural or economic in nature, e.g. regionally limited and short-term blackouts, natural disasters, supplier failures and so on.

Despite the experience of the coronavirus pandemic and the complexity of the challenges encountered, BCPs are not sufficiently geared to highly complex and dynamic situations.

We find ourselves in an environment of multipolar crises and threats. Scenarios with extreme consequences that were previously rated as improbable can no longer be ruled out. In the planning of organisations and in the minds of decision-makers, however, this awareness is not yet sufficiently established.

Valuable conclusions can be drawn from the experience and the best practices of Ukraine in order to position European companies as well as possible for an uncertain future.

Risks

Four possible scenarios with direct impact on companies

01

Expansion of the war

The expansion of the Ukraine war to other European states, with a direct influence on economic and political developments in the EU.

02

Hybrid attacks

Hybrid attacks from abroad such as cyberattacks, information campaigns or blackouts, with disruption to transport, communications and energy infrastructure.

03

Emergency provision acts

If tensions between NATO and Russia escalate, the German emergency provision acts can be activated. Declaring a state of tension, of alliance defence or of national defence will bring further drastic legal and economic consequences for companies and organisations, including state intervention across the entire value chain.

04

OpPlan Deutschland

The activation of Germany’s OpPlan, with massive effects on the social, political and economic situation, is also a scenario worth considering.

Risks · Consequences

Situation assessment

In the current situation many further scenarios can be considered realistic. Regardless of which one occurs, a further escalation of tensions between NATO and Russia is likely.

Should individual NATO member states feel threatened or even come under attack, the cohesion of NATO as a whole is in question. If NATO fails to respond as a united front, it loses credibility on a massive scale. No member state could then still be certain of the alliance’s support. This could ultimately lead to the end of the alliance, which would have dramatic consequences for the security architecture in Europe and in the world.

In any case, a marked tightening of security protocols within European nations must be assumed. Massive intervention in the economic activity of companies under the emergency provision acts, conscription of workers into security-relevant areas, call-up of reservists and restrictions in transport, telecommunications and energy infrastructure, already as tensions build, are realistic scenarios.

Risks · Economy and infrastructure

The legal framework many are unaware of.

Germany has emergency provision and supply acts that can have a considerable effect on the entire population and on companies, even if the Federal Republic is not itself attacked directly. These acts are in place but dormant. They have to be “activated”. Although it defines different scenarios, the Basic Law leaves the federal government a great deal of latitude.

The Basic Law provides for finely graded escalation levels that move along a continuum of how urgent the threat is, and from the state of tension onwards they activate all emergency provision and supply acts, including general conscription .

The twelve emergency provision acts

Governs the provision of labour for defence purposes. Allows workers to be assigned to areas essential to life and to defence, and restricts the free choice of workplace in doing so.

Authorises intervention in the production, distribution and consumption of goods and services. The basis for rationing, quotas and reporting obligations for business.

Permits the requisition of assets in kind: vehicles, machinery, land and buildings can be called upon for defence purposes.

Applies when the energy supply is at risk. Allows rules on the allocation, purchase, supply and pricing of energy sources.

Secures the supply of food and other essential goods to the population. The basis for rationing, stockholding and reporting obligations along the supply chain.

Governs procurement for defence purposes, including the use of land and rights and the associated compensation.

Secures postal services in a state of tension or defence and allows priority rules for defence-related items.

Permits protected zones to be established around installations important to defence. Within these zones the use of and access to land can be restricted.

Contains provisions on securing telecommunications, on emergency preparedness and on priority access for privileged bodies.

Allows transport companies to be called upon to provide carriage when demand cannot be met otherwise.

Secures transport services and transport infrastructure. The basis for intervention in the operation and use of transport routes and vehicles.

Governs the protection of the population in a state of defence: self-protection, warning, shelters, movement controls and federal disaster response.

Lessons Learned · In figures

Four years of war

The current picture from the survey by Deloitte Ukraine and the American Chamber of Commerce in Ukraine, February 2026. The figures show what the capacity to act depends on today.

58%
of the surveyed companies work with formalised BCM plans after four years of war.
20%
still operate purely ad hoc, with no defined procedures.
45%
report unchanged productivity despite sustained strain.
41%
report declines in productivity.

Greatest pressures on business activity

Share of surveyed companies, February 2026

Power outages 57%
Security risks 55%
Staff shortages 49%
0%75%
Table view
PressureShare
Power outages57%
Security risks55%
Staff shortages49%

Source: Deloitte Ukraine & American Chamber of Commerce in Ukraine, “Ensuring Business Resilience in Ukraine”, survey February 2026.

Where the resilience budgets go

Share of companies investing in each area, 2026

Power supply 75%
Employee support 38%
Security 25%
0%75%
Table view
Investment areaShare
Power supply75%
Employee support38%
Security25%

Source: Deloitte Ukraine & American Chamber of Commerce in Ukraine, 2026. The ranking of pressures and the ranking of budgets diverge.

What the drop in productivity comes down to

Causes named by the 41% reporting a decline, 2026

Uneven distribution of work 23%
Reduced motivation 23%
Slower pace of work 21%
Lower quality 15%
0%25%
Table view
CauseShare
Uneven distribution of work23%
Reduced motivation23%
Slower pace of work21%
Lower quality15%

Source: Deloitte Ukraine & AmCham Ukraine 2026; causes of exhaustion additionally per Gradus Research. All four causes lie in the behaviour and the condition of the workforce.

How companies support their workforce

Share of companies with each measure, 2026

Psychological support 57%
Direct financial assistance 30%
0%60%

The national programme “Ти як?” has trained more than 400.000 participants in psychological first aid.

Source: Deloitte Ukraine & AmCham Ukraine 2026; national programme “Ти як?” (“How are you?”).

“Resilience at Development’s Expense”: resources that go into keeping operations running are missing for innovation and growth. Organisations that invest in capabilities beforehand pay considerably less when a crisis comes. Deloitte Ukraine & American Chamber of Commerce in Ukraine, 2026

Lessons Learned · Starting point

The shock of 2022 in figures

For comparison, the first assessment after the invasion. It shows how broad the effect on revenue was and how differently operations were hit.

8.1 million
people fled to other countries.
6.9 million
people were displaced within Ukraine.
−50%
drop in the energy supply.
98%
of companies recorded a fall in revenue.

Impact on Sales

Distribution of the fall in revenue across all surveyed companies

over 50% decrease 19% 30 to 50% 28% 10 to 30% 31% under 10% 20% no decrease or an increase 2%
Table view
Fall in revenueShare
over 50%19%
30 to 50%28%
10 to 30%31%
under 10%20%
no decrease or an increase2%

Source: McKinsey & Company 2023, “Survival through Purpose: How Ukrainian businesses endured amid extreme uncertainty”.

Impact on Operations

Effect on ongoing operations

high impact, operations suspended 2% high impact, operations continued 63% low impact 20% no impact or a positive effect 15%
Table view
Effect on operationsShare
high impact, operations suspended2%
high impact, operations continued63%
low impact20%
no impact or a positive effect15%

Source: McKinsey & Company 2023. Only a small share had to suspend operations; some sectors such as finance and logistics even recorded positive effects.

Greatest challenges 2022/23

Mentions by the surveyed companies

Energy disruption66
Disrupted supply chains60
Decreased demand52
Physical damage to facilities34
Employee morale29
Access to financing12
Unsustainable fiscal regime10
Lack of labour4
Cybersecurity4
Property deployed to the front2
066

Source: McKinsey & Company 2023. The five most frequently named challenges are highlighted. Striking in comparison with 2026: lack of labour stood at 4 mentions in 2023 and today ranks among the three greatest pressures at 49%.

What actually helped in the crisis

Rated effectiveness, scale 1 (low) to 5 (high)

Agile decision making2,4
Values and culture2,4
Resilience planning2,2
Leadership commitment1,8
Business diversification1,1
02,4
Table view
TechniqueRating
Agile decision making2,4
Values and culture2,4
Resilience planning2,2
Leadership commitment1,8
Business diversification1,1

Source: American Chamber of Commerce in Ukraine, 2023. Shorter planning cycles and more frequent coordination across hierarchical levels enabled flexible responses; corporate culture kept up the morale and motivation of the workforce.

Offering

Experience from real crises, applied to your situation

Video not uploaded yet
Resilience · Experience of Ukrainian companies

Through joint projects with our Ukrainian partners we have contacts in the business world there, and can therefore share in valuable experience at first hand.

Best practices that have proved themselves in real crisis situations can be brought into our consulting and extrapolated for future scenarios, taking your individual conditions into account.

We can also draw valuable conclusions from the mistakes, in order to identify and minimise our own sources of error.

What we analyse

We analyse your internal and external business processes, assess your current business continuity plans, systems and resources, and support you in developing a scenario-based business continuity system. The following areas are included:

People (management & workforce)
Site
Supply chain (suppliers, logistics, warehousing)
Sales markets
Finance
Contracts (insurance, your own SLAs with customers)
Business model
Shareholder structure and decision-making authority
Infrastructure (IT systems, energy, connectivity)
Two areas
01

Business Readiness

Which measures and investments have to be made in order to prepare an organisation or a company as well as possible for a crisis?

02

Business Continuity

Which plans and structural back-ups have to be drawn up so that, scenario by scenario, they can be “pulled out of the drawer” when the moment comes? We distinguish three phases:

Shock phase
Adaptation phase
Post-crisis phase
Team

Three perspectives on the same question

Click a card for the full profile.

Operational matters

Runs an operational security company in Munich and is responsible for operational matters at Act Aware.

Teaching, prevention and resilience

Lecturer and trainer for security, prevention and resilience, with experience in corporate security.

Organisation, leadership and psychology

Psychologist by training, advises and coaches top management, and since 2015 senior figures in the military sphere as well.

Partner architecture

Four partners with clearly separated roles

Business continuity under wartime conditions calls for different competencies: assessment, implementation, enablement, organisational development. For this we work in an alliance of independent partners.

The roles stay separate. Assessment and implementation do not necessarily rest in the same hands, and verifying effectiveness remains distinguishable from carrying the work out. You can obtain each service individually, with us, with one of the partners or with a provider of your choice.

Fields of competence
Risk & situational picture
Corporate security & physical resilience
Crisis management & BCM
Training, simulation & e-learning
Awareness & enablement
Strategy, reflection & transformation
Resilience & training
Training · simulation · e-learning · resilience consulting · BCM · crisis exercises · management formats
Risk & crisis response
Risk assessment · crisis response · security consulting · situational picture · operational security
Crisis & awareness
Crisis & security consulting · crisis management · training · awareness · behaviour
Strategy & transformation
Strategy · reflection · transformation · sustainability · organisational development