Four stages, every time
Prevent, detect, respond, recover, applied to any risk on the register.
Volume 10, Chapter 6
Building a Risk Response Plan
This framework isn't a new idea, it's a name for the discipline this manual has been teaching since Volume 02, applied specifically to catastrophic risk.
The Golden Rule
Prevention reduces likelihood but never reaches zero.
Every risk still needs a full plan for when it happens anyway, not just a prevention habit.
Prevent & detectReduce the likelihood, and notice it early.
RespondWhat to do the moment it happens.
Recover & learnGet back to normal, then close the loop.
Close the loop
Lessons learned must feed back into prevention, not vanish.
Write it down
A plan in one person's head doesn't survive their absence.
Not a new idea
The same Six Questions discipline, aimed at catastrophic risk.
1
Definition
Imagine a key fabric supplier suddenly stops supplying, mid-order. A business that has only ever thought about "prevention" has nothing left to do but panic. A business with a full plan already knows the next move: contact the backup supplier immediately, check current stock against open orders, and once things settle, ask whether the primary relationship needs replacing entirely. Preventing a problem and knowing what to do when it happens anyway are two different kinds of preparation, and most plans only ever build the first one.
A risk response plan turns each entry on the Risk Register into a specific, four-stage plan: how to prevent it, how to detect it early, how to respond when it happens, and how to recover afterward, with lessons feeding back into prevention.
In One Sentence
Chapters 1–5 mapped the threats. This closing chapter is the method for turning any one of them into a real plan, the same discipline as Volume 02's Six Questions, applied specifically to things going wrong.
2
The Four-Stage Cycle
Prevent
What reduces the likelihood? Example: clean workspaces, maintained equipment.
Detect
How would we notice it early? Example: smoke detectors, regular walk-throughs.
Respond
What do we do the moment it happens? Example: evacuation route, emergency contacts.
Recover
How do we get back to normal? Example: insurance claim, temporary workspace.
| Stage | Question | Example (Fire) |
|---|---|---|
| Prevent | What reduces the likelihood? | Clean workspaces, maintained equipment, no smoking near fabric |
| Detect | How would we notice it early? | Smoke detectors, regular walk-throughs |
| Respond | What do we do the moment it happens? | Evacuation route, extinguisher locations, emergency contacts |
| Recover | How do we get back to normal? | Insurance claim, temporary workspace, asset register for replacement |
After recovery, lessons learned feed back into prevention, exactly Volume 02's "what happens if it fails?" question, completing the loop rather than starting fresh each time.
3
Worked Example: A Complete Plan, Start to Finish
Risk: A key supplier suddenly stops supplying fabric.
| Stage | Plan |
|---|---|
| Prevent | Maintain relationships with at least two suppliers per major fabric type (Volume 12: Procurement) |
| Detect | Track supplier delivery reliability over time (Volume 04, Chapter 7), a pattern of lateness is an early warning |
| Respond | Immediately contact the backup supplier; assess current stock against open orders |
| Recover | Rebuild stock levels; review whether the primary supplier relationship can continue |
| Lessons Learned | If this was the only supplier for a specific fabric, add a second one before the next order cycle |
This exact structure applies to every entry on the Risk Register: a founder's illness, a cyberattack, a currency shock. All of them follow the same four questions.
4
Example Story: The Plan That Existed Before It Was Needed
Recall Chapter 2's generator story and the farm's borrowed-pump agreement from Volume 02, Chapter 4. Both are, in retrospect, complete risk response plans built using this exact four-stage structure. They were arrived at independently, before this chapter ever named the method. That's the point: this framework isn't a new idea, it's a name for the discipline this manual has been teaching since Volume 02, applied specifically to catastrophic risk.
5
Across Industries
Bright Path Academy
Plan worth buildingA plan for continuing lessons if the physical school must close suddenly
Rapid Auto Works
Plan worth buildingA plan for a customer's vehicle being damaged while in the shop's care
Green Fields Farm
Plan worth buildingA plan for a season with significantly below-average rainfall
| Business | A Complete Response Plan Worth Building |
|---|---|
| Bright Path Academy | A plan for continuing lessons if the physical school must close suddenly |
| Rapid Auto Works | A plan for a customer's vehicle being damaged while in the shop's care |
| Green Fields Farm | A plan for a season with significantly below-average rainfall |
6
Common Mistakes
Common Mistake #1: A Plan With Only "Prevent," No "Respond"
Prevention reduces likelihood but never reaches zero, every risk still needs a response plan for when prevention fails anyway.
Common Mistake #2: Never Closing the Loop Back to Prevention
Recovering from an incident without updating prevention repeats the same vulnerability, see Volume 23's Mistake Log.
Common Mistake #3: Plans That Exist Only in One Person's Head
A response plan that isn't written down is exactly the risk Volume 02 warns against. The plan must survive the absence of whoever designed it.
7
Quiz Yourself
Quiz 1
Name the four stages of a complete risk response plan.
Prevent, detect, respond, recover, with lessons learned feeding back into prevention.
Quiz 2
Why must every risk response plan include "respond," not just "prevent"?
Because prevention reduces likelihood but never eliminates it entirely, a plan is only complete if it also covers what to do when the risk happens anyway.
Quiz 3
What is this chapter's core claim about where this framework comes from?
That it isn't a new idea, it's a name for the same systems-thinking discipline (Volume 02's Six Questions) already used throughout the manual, applied specifically to catastrophic risk.
8
Practice Exercise
Pick your top three "Urgent Action" or "Insure or Prepare" risks from the Risk Register (built across Chapters 1–5). For each, write a complete four-stage plan using Section 3's worked example as a template.
9
Quick Summary
Quick Summary
- A complete risk response plan has four stages: prevent, detect, respond, recover, with lessons learned closing the loop back into prevention.
- This is Volume 02's systems-thinking method, applied specifically to catastrophic risk.
- Every risk on the Risk Register deserves this full treatment, not just a prevention habit.
- Volume 10 complete. Next, Volume 11: Internal Controls covers the specific discipline of preventing money and goods from quietly disappearing.
Related Topics