Business Continuity Plans Ignore the Principal

A business can restore technology and still fail because the principal is unavailable. Plan the authority, identity and communication gap.

The answer

Most continuity plans assume the executive team can be assembled. Private institutions often concentrate decisive authority in one principal. The principal may be travelling, incapacitated, unreachable or unable to use the expected channel.

Most continuity plans assume the executive team can be assembled. Private institutions often concentrate decisive authority in one principal.

The principal may be travelling, incapacitated, unreachable or unable to use the expected channel. Systems remain online while payments, disclosures and public decisions freeze.

Model principal loss as an operating event

Separate decisions that may continue under standing authority from those that pause, narrow or transfer. Define the evidence required to activate succession without exposing private medical or family information.

Value object — The Principal Unavailability Plan

- Observable trigger.

- Temporary authority holders.

- Actions that continue, pause or escalate.

- Providers that must recognise succession.

- Independent communications route.

- Expiry and hand-back.

Exercise the human dependency

Run one day without contacting the principal. Observe where staff wait, improvise or borrow identity. Convert recurring decisions into bounded mandates.

Continuity is not removing the principal. It is ensuring the institution can preserve the principal’s interests when attention or identity is unavailable.

Where this breaks

Continuity plans become executive contact lists rather than authority systems. When the principal cannot answer, teams know whom they want but not who may legally and operationally act.

The operating move

Define graded unavailability: short absence, extended incapacity and contested contact. Attach bounded powers and counterparties to each state.

List decisions that cannot wait.

Create standing low-risk mandates.

Pre-position recognition with providers.

Design a clear hand-back.

The test

Operate one business day with the principal unavailable. Every stalled or improvised decision should become an explicit continuity design choice.

Sources

  1. NIST Digital Identity GuidelinesNIST Digital Identity Guidelines

    Primary authority

  2. NIST SP 800-34 Rev. 1: Contingency Planning GuideNIST SP 800-34 Rev. 1: Contingency Planning Guide

    Primary authority

  3. FINMA: Revised circular on operational risks and resilienceFINMA: Revised circular on operational risks and resilience

    Primary authority

Ross BelhommePartner, Svperior / Legal

Adam J. De Collibus

Adam co-founded Svperior and leads systems engineering from requirements through implementation. His work connects architecture, implementation, deployment, and operating discipline across complex environments where failure must be anticipated and technical capability must remain dependable under pressure.

Systems engineering / Technical architecture / Production operations / Operating resilience

Need to apply this to a specific situation?

Send us the initial context. If the matter fits, we will respond directly.

Send private inquiry
Business Continuity Plans Ignore the Principal \