One respondent to New Power’s latest expert survey, in which we asked about ­resilience issues, said: “Resilience issues for us are about data safety and communications. Very ­little else.” But few resilience risks can be considered in isolation. Who should set the baseline for resilience? Who should underwrite the cost of events that may be low ­probability – but high impact? And what is the experience of maintaining resilience in companies and other organisations?