Strategy
May 1, 2026
Think Like Your Adversary: Anticipating Attacks Before They're Launched
This piece explains how leaders can use an outside view to identify credibility gaps, pressure-test decisions, and understand where stakeholders may doubt the organization’s own account of itself.
Table of content:

Most organizations do not miss early warning signs of crisis because they lack information. They miss them because they interpret risk from inside the room where the decision was made.

Inside that room, leaders understand the constraints. They know which options were considered, which tradeoffs were unavoidable, and which safeguards were put in place. A delayed response may feel responsible because the facts were still being verified. A restructuring may feel necessary because of financial pressures. A supplier decision may feel reasonable because alternatives were limited.

Outside the room, those explanations carry less weight. Stakeholders see the visible outcome, the public promise, and the distance between the two. They ask a simpler question: does this decision match what the organization has asked us to believe about it?

Crisis readiness should include more than preparation for known scenarios. It should include a disciplined outside view of how the organization’s choices may be interpreted by people who do not share its context, incentives, or trust in leadership. These people are not necessarily enemies. They may be employees, customers, regulators, journalists, investors, community partners, or advocates. Their scrutiny becomes consequential when the organization’s explanation depends on context they cannot see, evidence they have not been given, or trust that has already been weakened.

Confusing Defensibility with Credibility 

A decision may be legally reviewed, procedurally sound, and consistent with industry practice while still appearing careless or self-protective to those affected by it. Procedure explains how a decision moved through the organization. Credibility depends on whether the decision makes sense when measured against the organization’s own commitments.

This is especially important for companies that communicate in values-driven language. Public commitments to safety, transparency, inclusion, resilience, or responsibility are not just brand assets. They become standards of evaluation. Once an organization claims a value, stakeholders will look for evidence that the value shaped hard choices, not only public messaging. If the evidence is thin, the gap becomes easy to frame.

A company that speaks often about employee well-being will face sharper criticism if workers believe concerns were ignored. A firm that markets supply chain resilience will be judged differently when a known dependency produces disruption. A leadership team that emphasizes transparency will have difficulty defending silence, even when the silence was intended to avoid premature disclosure. In each case, the issue is not only what happened. The issue is whether the organization’s conduct fits the identity it has built around itself.

The most useful question is not, “What could go wrong?” That question is too broad and often leads to familiar categories of risk. The stronger question is, “Where would a reasonable outsider doubt us?”

That question directs attention toward the places where the organization’s explanation depends too heavily on internal context. It reveals where a policy exists but does not influence behavior, where a value is repeated but not operationalized, where concerns are acknowledged but rarely change decisions, and where leadership believes a matter is settled because it has been discussed internally.

The purpose is not to imagine bad faith everywhere. It is to recognize that scrutiny does not require bad faith to become damaging. A regulator may be asking whether oversight was adequate. A journalist may be looking for inconsistency between public claims and internal conduct. An employee may be describing a pattern that leadership has treated as isolated. A customer may be reacting to a service failure through the lens of promises the company made in better conditions. These interpretations may be incomplete, but they can still be persuasive if they are grounded in something recognizable.

Why the “Outside View” Matters

This kind of work is difficult because it asks leaders to treat skepticism as information. It also requires humility about the limits of internal consensus. When everyone involved in a decision understands why it was made, disagreement can start to seem uninformed. Yet outside scrutiny often reveals something internal consensus cannot: how the decision looks when stripped of its meeting history, technical explanations, and private assurances.

By the time a crisis becomes public, this learning becomes harder. Every clarification sounds defensive. Every newly discovered fact appears suspect. Every delay is interpreted through the story already forming around the organization. Leaders then spend their time trying to regain interpretive control, when the better opportunity was earlier, before the gap between promise and conduct became visible to others.

The outside view is not a call for caution at the expense of action. Organizations still need to make hard decisions under imperfect conditions. The point is to understand the evidentiary burden those decisions will create. Leaders should be able to explain not only why a choice made sense internally, but why it deserves trust from people who were not in the room.

Readiness does not begin with the response statement. It begins with the ability to see where the organization’s own account of itself may not survive contact with outside scrutiny.

Heading

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

Your application has been successfully sent