Today I was honored to be included in a new Forbes Technology Council article discussing the tradeoffs organizations must make to build more resilient systems in an increasingly complex technology landscape.
The conversation around resilience has changed dramatically over the last few years.
For a long time, resilience was viewed primarily as uptime, backups, redundancy, and disaster recovery. Those things still matter, but modern resilience has become much more about decision-making under pressure, operational flexibility, and understanding where risk actually lives.
As organizations adopt AI, automation, SaaS ecosystems, and increasingly interconnected workflows, resilience can no longer be treated as a single control or a single platform purchase. Every convenience introduces dependency. Every integration introduces exposure. Every efficiency gain can also introduce new forms of fragility.
One of the biggest mistakes organizations make is assuming resilience means eliminating tradeoffs entirely. In reality, resilient systems are built by consciously managing tradeoffs instead of ignoring them.
Security versus usability.
Speed versus governance.
Automation versus human oversight.
Innovation versus operational stability.
The organizations that handle these tensions well are the ones that recover faster, adapt quicker, and maintain trust during disruption.
In cybersecurity, we often focus heavily on prevention, but resilience is equally about survivability. It’s about designing systems, processes, and teams that can absorb disruption without collapsing operationally or strategically.
That becomes even more important in the AI era.
AI systems are accelerating decision cycles, expanding attack surfaces, and increasing the speed at which both defenders and adversaries operate. The question is no longer whether organizations will face incidents or disruptions. The question is how effectively they can continue operating when those disruptions occur.
Modern resilience requires:
- Clear operational visibility
- Strong data governance
- Human-centered decision frameworks
- Layered recovery strategies
- Controlled automation
- Continuous validation and testing
- Executive-level alignment between business and security priorities
Most importantly, resilience must extend beyond infrastructure and include the data itself. In many modern attacks, the true target is no longer the network perimeter. It’s the organization’s sensitive data, intellectual property, identity systems, and operational trust.
That shift changes how we should think about resilience entirely.
I appreciate Forbes Technology Council for bringing together multiple perspectives on this topic. Building resilient systems is no longer just an IT responsibility. It’s becoming one of the defining leadership challenges of the AI era.