This shift over the past few years signals a step forward from when many considered that 'organisational resilience' could only be generated from processes and functions such as Risk Management, Business Continuity, IT Disaster Recovery, Crisis Management, Information Security, Physical Security and so on.