Effective and empowered leadership
Resilience is strengthened when leaders grow other leaders and let them act in many situations, including uncertainty and disruption.
What clause 5.4 says
The clause asks for leadership throughout the organization, not only at the top. It names three demonstrations: leaders who back a resilient culture, leaders who adjust when circumstances change, and leaders who draw on a mix of capabilities, know-how and conduct. It then lists four activities: grow leaders who are trusted, respected and honest, and who keep attention on resilience; assign roles and duties for the work; encourage people to share what success and failure taught and to adopt better practice; and let every level make calls that protect and improve resilience. The combination is deliberate. Trust without accountability is weak, and accountability without empowerment produces escalation instead of response.
Why it matters
In a disruption, decisions move down and sideways because the centre is overloaded. An organization that has not empowered its people will stall at the moment it most needs them. The clause is also about learning: leaders who cannot discuss failure will not hear about the near miss that predicts the next incident. The diversity element is not a staffing target. It is a recognition that a group of similar people will miss a class of risk and that leadership behaviour shapes whether others speak up.
What good looks like
Map the decisions that must be made in the first four hours of a severe disruption. For each, name the role that can make it, the deputy and the limits. Then check whether those people have the authority, the information and the practice. Run a decision exercise without the executive team in the room and see what happens. Record the lessons and change the role definitions where the exercise exposes a gap.
Evidence a reviewer asks for
There is no ISO certification or accredited assessment scheme for ISO 22316. The assessor here is your internal auditor, a customer assurance team or a consultant.
An assessor will ask who can make a decision when the usual approver is unavailable. A plan that depends on one person being present is a single point of failure in governance.
- Role and authority map The resilience roles, deputies, decision limits and the date last exercised
- Leadership development record How leaders are developed for uncertainty, not only for steady-state performance
- Lessons process How lessons from success and failure are captured, shared and turned into changes
- Empowerment evidence A decision taken at a lower level during a disruption, with the authority that allowed it
Where it commonly fails
- Resilience is owned by one executive and no one else has a defined role.
- Lessons are collected after incidents but never change a procedure or a role.
- Front-line staff are told to escalate everything, which removes the ability to respond locally.
What to do before the second edition
Run a four-hour decision exercise with the people who would actually be on shift. Give them a scenario, remove the executive team and observe. The gaps in authority and information are the training plan.
Read across
- 4.2 Coordinated approach
- 5.5 A culture supportive of organizational resilience
- 5.9 Supporting continual improvement
- 6.3.2 Review
← 5.3 Understanding and influencing context5.5 A culture supportive of organizational resilience →