The supply chain is trimmed to the bare minimum. Inventory is close to zero, a single supplier provides the most important component at a particularly low price, and the plants are running at the limit of capacity. For years, it is the most cost-effective procurement in the entire industry, a benchmark in every comparison. Then that one supplier fails—a fire at its plant, several weeks of downtime. Your own production stops, clients are not supplied, contractual penalties accrue. The damage from those few weeks exceeds the inventory costs that were saved over a decade. The efficiency was real. The vulnerability was simply invisible—until it wasn’t.
An organization optimized exclusively for normal conditions buys low costs at the price of high vulnerability—whose cost only becomes visible in exceptional situations.
A company I advised in this situation had followed exactly this path for years, documenting every improvement meticulously and booking every eliminated inventory item as a success. No one had ever calculated the offsetting item: the risk of a failure multiplied by its consequences. The savings appeared in the balance sheet every year; the risk did not. When the failure came, the surprise was great—yet it had never been unlikely, only rare. And rare is not never.
This pattern can be understood and managed. Three levers turn the invisible bet into a deliberate decision.
Nassim Taleb distinguished three states in which a system can respond to disruptions. A fragile system is damaged by shock; it breaks under the unexpected. A resilient system withstands the shock and remains capable of acting. An antifragile system even emerges stronger from it, because it benefits from the movement that others merely endure. Efficiency optimization without reserve pushes a system further toward fragility with each round, because it removes precisely the buffers that would cushion a shock.
The decisive fallacy lies in how calm years are assessed. A long disruption-free phase is read as proof of safety, when it is often the opposite: the period in which unpaid risk quietly accumulates. The longer nothing happens, the more convinced an organization becomes that nothing will happen—and the more buffers it removes. The stability it relies on is, in truth, the calm before the rare, expensive disruption.
| Characteristic | Fragile | Resilient | Antifragile |
|---|---|---|---|
| Behavior under normal conditions | maximally lean | slightly more expensive due to buffers | keeps room to maneuver |
| Behavior under shock | breaks, high follow-on costs | absorbs it, remains capable of acting | uses the situation, gains from it |
| Buffers and redundancy | removed as waste | kept as insurance | used as a means to advantage |
| hidden bet | on disruptions not occurring | on being prepared | on benefiting from disruption |
A mid-sized energy provider I supported had deliberately decided against the leanest solution. It maintained multiple sources of supply and a reserve capacity that, in every efficiency comparison, looked like costly ballast. When the market slid into a supply crisis, it remained able to deliver while competitors failed—and within a few months it won contracts whose value exceeded the years of additional reserve costs many times over. The supposed inefficiency was, at its core, the premium for an option that paid off precisely when the market entered crisis.
An efficiency decision that looks only at ongoing savings is incomplete. The calculation becomes complete only when it is set against the potential damage that the eliminated reserve would have absorbed, weighted by the probability of occurrence. This is precisely the offsetting item missing from most business-case analyses, because it relates to rare events that defy precise calculation. Hard to quantify does not mean zero.
Make the hidden bet visible. Every measure that reduces a buffer, a second source of supply, or reserve capacity is also a bet that the associated disruption will not occur. That bet may be reasonable, but it should be entered into deliberately—not casually as part of the next cost-cutting round. Anyone who reduces costs without weakening the company distinguishes between effort that only creates costs and reserve that absorbs risk. The former should be reduced consistently; the latter should be assessed rather than cut reflexively.
A misunderstanding easily arises here: resilience does not mean building buffers everywhere. Reserve at every point would itself be a form of waste and would repeat precisely that silo logic in which everyone optimizes locally and the whole becomes more expensive. Resilience is selective. It focuses on the few points whose failure brings the whole to a standstill.
Therefore, look for the individual breaking points where the entire system depends on a single source, location, or provider. There—and only there—redundancy is not waste but necessity. That is also the difference from a pure hedging mentality: it is not about avoiding every risk, but about consciously bearing or mitigating the few existential risks. Where this distinction is missing, caution tips into that paralysis that avoids every risk but also every movement.
Reserve that belongs to no one will be optimized away in the next efficiency round. That is the self-reinforcing dynamic of any organization: what does not have to justify itself continuously disappears as soon as cost pressure rises. That is precisely why resilience needs the same treatment as any other deliberate investment: a fixed place in the budget, clear accountability, and regular review of whether it still fits the risk situation.
Treat critical reserve as a purchased option, not as leftover capacity that may remain once the savings target has been met. This mindset requires making decisions under uncertainty instead of waiting for certainty—which, with rare events, will never come. The most demanding level goes further still: anyone who designs their reserve so that, in a crisis, they not only survive but gain market share while others fail has moved resilience into the antifragile domain. And the resources that finance such deliberately carried resilience over the long term come from the same source as any growth built on efficiency.
First: Name the three biggest efficiency gains of recent years. For each one, can you say which reserve was reduced for it—and which disruption you are unprotected against as a result? If not, the bet continues without anyone having entered into it.
Second: At what single point would the failure of a source, a location, or a provider bring your entire system to a standstill? And how much does one day of that standstill cost you compared with the cost of a second source?
Third: Does your company’s most important reserve have an owner and its own line in the budget before the next cost-cutting round begins? What belongs to no one is cut first.
Efficiency and resilience are not enemies, but they pull in different directions, and the balance between them does not emerge by itself. It is a leadership decision. Anyone who does not make it has still made it—in favor of efficiency and at the expense of resilience—because efficiency has the louder voice and the faster numbers.
The most vulnerable organization, therefore, is not the poorly managed one. It is the organization that has optimized everything for normal conditions and considered the exceptional case unlikely enough to ignore. Resilience costs under normal conditions. Its absence costs in exceptional situations—and then far more.
Decisions under uncertainty – Resilience requires acting before certainty is there.
Breaking the hedging culture – Deliberate reserve is the opposite of blanket caution that only paralyzes.
All Insights can be found in the overview.
Proven tools and models for self-application are available under Solutions.
If you want to take these thoughts further for your company, a no-obligation initial conversation is worthwhile.
