Over the past five years, many organisations have discovered something uncomfortable: the problem was not a lack of risk frameworks, but a false sense of preparedness. Most had the right components in place. Risk registers existed. Crisis plans had been written. Insurance coverage was reviewed annually. The language of resilience had made its way into strategy decks. And yet, when disruption came, it did not behave in ways those systems were designed to handle. What failed wa