Reprinted with permission. Copyright © 2026 by Society of Corporate Compliance and Ethics (SCCE) & Health Care Compliance Association (HCCA).

The foundation of any healthy organisation doesn’t come from operational efficiencies, sales goals, or even new talent. Ethics and compliance should be the foundation of any strong and sustainable organisation. More than simply following the rules, ethics provide the direction that shapes decision-making, builds and sustains company culture, and creates lasting credibility and trust across the business landscape. It ensures that integrity is not simply an afterthought, but a guiding principle that supports every corporate choice, policy, and plan.

This grounding in ethical behaviour has become even more important as disruptions caused by technology failures, supply chain breakdowns, or global events move from rare exceptions to routine pressures, as evidenced by the recent AWS outage. Each new challenge tests not only operational readiness but also an organisation’s ethical strength. Disaster management today goes beyond restoring systems or safeguarding data. It reflects leadership, guided by a strong moral compass that protects people, upholds transparency, and responds fairly when things go wrong.

The increasing frequency of crises has made ethics a crucial element of resilience. From climate events and cyber incidents to political instability and rapid technological shifts, every disruption places new pressure on leaders to act decisively while staying true to their values. These moments when plans are tested are defining operations, with many leaders not fully prepared. Recent data reveals that just 20% of executives feel their organisations are fully prepared to prevent or respond to outages, which, on average, occur 86 times per year, resulting in over five hours of downtime per month. Beyond the practical, stakeholders now expect organisations to show moral responsibility as well as operational competence, and that expectation has become a defining measure of trust.

Resilience rooted in ethical conduct also allows compliance programmes to do more than shield the business from risk. It helps them strengthen the organisation’s culture, enhance accountability, and build long-term trust among stakeholders. When ethics is embedded in how an organisation prepares for and responds to disruption, it becomes better equipped to make clear, fair, and timely decisions under pressure, which can preserve both performance and principle. 

The reality of disaster preparedness 

Despite growing awareness of disruption risks, many organisations remain inadequately prepared. A recent U.S. survey found that only 54% of organisations have an established company-wide disaster recovery plan. This information is further compounded by a growing trend of stagnancy in planning, as a surprising 28% of companies do not test or update their plans regularly. Without these plans, companies risk prolonged downtime, operational inefficiencies, and weakened stakeholder trust when crises 
occur. Preparedness is no longer a theoretical exercise; it is a practical necessity that separates organisations that can navigate disruption from those that cannot.

The picture is even more concerning for small businesses. These organisations often operate with limited resources, making even minor disruptions potentially catastrophic. Yet small businesses that invest in proactive planning are better positioned to maintain continuity, safeguard employees, and uphold their commitments to clients and partners during unexpected events.

Building a culture of preparedness requires more than checklists and documentation. Leadership that prioritizes resilience, instills accountability, and integrates disaster planning into everyday operations will be properly 
positioned if a disaster management plan needs to be activated. Organisations that do so can respond with agility, communicate transparently with stakeholders, and make ethical decisions under pressure. Disaster preparedness is a measure of both operational competence and ethical responsibility, defining how organisations endure, recover, and maintain trust when the unexpected occurs.

The growing threat of natural disasters

The gap in preparedness is especially notable as many organisations are beginning to recognise the impact of natural disasters. Just 56% of organisations have fully defined and regularly tested recovery time objectives, and only 36% have fully defined and regularly tested recovery point objectives, both of which are vital for disaster recovery. Companies recognise that physical disruptions have as significant an impact on operations as digital ones, and that proactive planning is crucial for maintaining continuity. Since 2003, the number of billion-dollar disasters has 
increased by more than 150%, and the total financial impact has risen by over 260%, with both trends continuing to rise. When hurricanes, wildfires, floods, or earthquakes occur, organizations face operational challenges and 
decisions about how to protect employees, support affected communities, and communicate openly about their recovery efforts.

"Preparedness is no longer a theoretical exercise; it is a practical necessity that separates organisations that can navigate disruption from those that cannot."

As these events become more frequent and costly, it becomes clear that organisations cannot rely solely on basic response plans. This growing pressure calls for a broader approach to disaster management that blends practical actions with strong ethical judgment. Ethical preparedness ensures that disaster response plans value people as much as property, reinforcing trust even in the most difficult moments.

Ethics as the foundation of risk management

Ethics form the foundation of effective risk management by guiding decisions in uncertain circumstances. While compliance rules outline what organisations must do, ethical principles clarify how people should act and translate complex regulations into practical behavioral standards. These principles help employees navigate ambiguity and maintain consistent judgment, particularly in high-pressure situations where operational and reputational risks intersect. For example, instead of approaching guidelines 
solely as a list of requirements, organisations should work to foster an environment that treats all data with the utmost respect. Or when approaching third-party suppliers, leading with morale rather than just the bottom line can guide companies toward more aligned partnerships. By 
creating high standards across the board that encourage the application of value, employees can naturally meet rising expectations.

In another instance, in 2025, Zoom faced a wave of security incidents that drew public attention and concern from its vast user base. As vulnerabilities were discovered that could have allowed unauthorised access to meetings or tampered with software updates, Zoom responded with a clear commitment to protecting users. The company quickly paused new feature rollouts, shifted its resources to issue security patches across all affected platforms, and communicated the situation openly through regular bulletins and direct outreach to IT administrators. Additionally, to ensure cross-collaboration and third-party due diligence, Zoom’s team worked alongside cybersecurity experts to audit their solutions, offering detailed guidance on safe practices such as multi-factor authentication and hosting educational sessions for organisations on managing their security settings. Thanks 
to these swift actions, there was a measurable reduction in reported breaches, along with an increase in customer trust and satisfaction following the resolution of the incidents. By focusing on integrity and transparency, Zoom demonstrated that ethical leadership directly strengthens 
operational outcomes.

Embedding ethics throughout risk management also helps organisations anticipate challenges before they escalate into crises. Rather than reacting solely to immediate threats, companies with strong ethical frameworks can assess potential consequences; align decisions with their long-term values; and act proactively to protect people, assets, and their reputations. Ethical 
cultures foster accountability across teams, ensuring that responsibility is shared and decisions reflect collective standards rather than individual expediency. By treating ethics as a practical tool rather than an abstract ideal, organisations build resilience that supports both compliance and trust in the face of disruption.

Leadership and ethical preparedness

Modern compliance demands more than just a plan of action. Leadership behaviour during a crisis sets the tone for the entire organisation. Employees watch how leaders communicate, make decisions under pressure, and balance the needs of customers, partners, and staff. Leaders who act transparently and prioritise people reinforce trust and accountability, while inconsistency between values and decisions can quickly erode confidence. Participating in scenario planning and post-disruption reviews allows leaders to demonstrate accountability and show that ethical preparedness is an active practice — not just a stated expectation.

Many organisations, however, do not fully support their leaders in this role. According to LRN’s 2025 Global Study on Ethics & Compliance Programme Maturity, only 31% of organizations formally evaluate ethical behaviour through performance reviews. Manager-specific training is limited; only 33% of programmes offer it and 20% provide none at all. Without structured support, leaders may struggle to consistently model ethical behaviour, leaving employees without clear guidance during critical moments. Strengthening leadership ethics requires both intentional culture-building and practical training to reinforce integrity at every level of decision-making.

Building ethics into business continuity

The U.K. Financial Conduct Authority’s operational resilience framework reflects a growing global expectation that companies maintain essential services even during severe disruption. This requirement extends beyond compliance and represents an ethical commitment to protect employees, customers, and the organisation’s operations. Organisations are expected to ensure that disaster recovery and business continuity plans account for both technical and moral considerations, striking a balance between efficiency and responsibility.

Transparency and clear communication are vital during a disruption. Stakeholders must understand what is happening and how the organisation is responding to maintain trust. Recovery efforts should be evaluated not just on speed but also on fairness and accountability. Companies that act responsibly and keep stakeholders informed reinforce their credibility and build a culture of ethical resilience, thereby strengthening both operations and reputation.

The business case for ethical resilience

As disruptions increasingly strike without warning, ethics, compliance, and resilience are not separate priorities but a single foundation for lasting success. Organisations that weave ethical principles into every decision, every plan, and every action create stability while earning the trust of employees, customers, and partners. Ethical preparedness protects operations while also enabling companies to act decisively, recover more quickly, and strengthen relationships when pressure is at its highest.

Integrity is not a line item on a budget or a box to check. It is a force that guides how an organisation responds when disaster strikes, especially as these events become more common and more disruptive. Companies that lead with ethics protect people, communicate clearly, and make fair decisions even under pressure. This approach does more than preserve trust; it strengthens operations by improving decision-making, supporting faster recovery, and creating teams that can act with clarity in uncertain moments. When ethical resilience sits at the heart of disaster management, organisations do more than restore operations; they rebuild with greater confidence, earn deeper credibility, and become better prepared for whatever challenge arrives next.

Takeaways

• Embedding ethics into disaster planning transforms compliance from a reactive requirement into a proactive approach that strengthens trust, enhances resilience, and ensures lasting organisational integrity.

• Leaders set the tone in crises, yet most organisations fail to assess ethics in reviews. Strengthening resilience requires training leaders and middle management alike.