Business Strategy Services

Disruption now occurs with unprecedented regularity, as industries are upended not by traditional competitors but by unexpected entrants wielding innovative technologies and business models.  The difference between thriving and becoming obsolete increasingly hinges on your organisation's ability to anticipate and adapt to disruption before it's too late. The Ur-case of this was Blockbuster, who ignored the threat of streaming technologies, and specifically Netflix (which it could have bought), until it was far too late to pivot and catch up. Our article explores how businesses can develop strategies that offer predictions and agility, embedding creativity and insight into frameworks and actionable steps that plot a course through the disruptive landscapes of the next few years and beyond. Understanding the Nature of Disruption Disruption is no longer just a buzzword — or the philosophy of ‘break things and move fast’ that drove the early tech start-ups that now dominate our waking lives. The theory of disruptive innovation, popularised by Harvard Business School professor Clayton Christensen, explains how new technologies, products, or services can start small but eventually surpass established offerings in existing markets[1]. This process typically begins when smaller companies with fewer resources challenge established or traditional businesses by addressing underserved market needs[5] in new ways; usually with business models that bypass normal routes to market and allow these companies to scale at pace. Recent examples include: fintech banks that challenge the need for brick-and-mortar; online over-the-top media applications that replace the need for print media and traditional broadcast television; digital media and the success of subscription models, replacing physical media for music, films and other forms of entertainment; and platform apps like Uber, which connect us to a fleet of independent drivers who are paid per ‘gig’ and regulated by a ratings system. Today's notion of disruption is characterised by several key features: Accelerated Pace of Change The pace of disruption has accelerated beyond anything previously seen, with transformative technologies reaching mainstream adoption faster than ever[15]. While it took decades for technologies like electricity and telephones to achieve mass adoption, modern innovations like smartphones and AI have transformed entire industries in just a few years. Cross-Industry Disruption Disruptive threats increasingly come from outside traditional industry boundaries. Companies must now monitor not only direct competitors but also adjacent industries and completely unrelated sectors where transferable innovations might emerge[15]. For example, tech giants have disrupted financial services, retail, healthcare, and automotive industries without prior experience in these sectors. Technology-Enabled Business Models Today's most powerful disruptions combine technological innovation with business model innovation. Examples include: Platform models: Uber revolutionised transportation by connecting riders and drivers through a user-friendly mobile app, utilising independent drivers who pay for their own vehicles for rapid scalability[1]. Subscription services: Netflix and Spotify transformed entertainment consumption by shifting from physical media to on-demand streaming with personalised algorithmic content recommendations[1]. Direct-to-consumer approaches: Tesla's direct sales model bypassed traditional dealership networks while integrating advanced electric vehicle technology and autonomous capabilities[1]. From Traditional to Adaptive Strategy Traditional strategic planning approaches — characterised by multi-year roadmaps and rigid implementation plans — have become increasingly inadequate in today's fast-moving business environment. We look at some of the challenges businesses now face below. The Limitations of Traditional Strategy Conventional strategies often fail because they: Assume relative stability in market conditions Take too long to develop and implement Lack flexibility to respond to unexpected changes Rely heavily on historical data to predict future outcomes The Adaptive Strategy Advantage Adaptive strategy, often described as the "Be Fast" approach, emphasises agility, experimentation, and continuous evolution[3]. This approach thrives in fluid industries with high uncertainty and a fast pace of change, such as technology, fashion, entertainment, and start-ups[3]. Organisations that embrace adaptive strategies gain significant advantages: Higher profitability: Companies ranking high in adaptability enjoy up to 75% higher profitability than their less adaptive counterparts[10]. Faster market response: Adaptive firms achieve approximately 60% faster time-to-market compared to traditional competitors[10]. Innovation capacity: The ability to experiment boldly and rapidly iterate creates an environment where breakthrough innovations are more likely to emerge[10]. Real-World Adaptive Strategy Success Consider Netflix's journey from DVD rental service to streaming giant to content producer. Rather than creating a 10-year plan, Netflix constantly evolved based on emerging technologies, customer preferences, and market opportunities. This adaptive approach allowed them to pivot whenever necessary while maintaining their core value proposition of convenient entertainment access[1]. A New Framework for Ensuring Strategy Relevance To maintain strategic relevance amid disruptive trends, companies need a systematic framework that balances stability with flexibility. Anticipate Disruption Through Trend Analysis Successful businesses identify potential disruptions before they manifest fully by monitoring Hard Trends — future certainties based on measurable facts[15]. These include demographic shifts, technological advancements, and regulatory changes that provide predictable directional guidance. For example, financial services firms that recognised the Hard Trend of increasing digital connectivity were better positioned to respond to the rise of mobile banking and fintech disruption. Build your Agility Organisational structures and processes must be designed to support rapid adaptation: Decentralised decision-making: Empower teams closest to customers and market changes to make decisions without lengthy approval chains[3]. Cross-functional collaboration: Break down silos between departments to enable faster information sharing and coordinated responses to change[3]. Agile methodologies: Adapt software development approaches like sprints, continuous integration, and iterative testing to broader business strategy[3]. Foster a Culture of Innovation Innovation cannot be an isolated function — it must permeate your entire organisation: Encourage experimentation: Create safe spaces for testing new ideas with minimal bureaucracy and fear of failure[3]. Customer-centric innovation: Ground innovation efforts in a deep understanding of customer needs rather than internal assumptions[14]. Structured innovation processes: Establish clear pathways for moving ideas from conception to implementation while maintaining flexibility[14]. KPIs that support innovation: For example, looking at the value of a portfolio of innovations rather than a specific innovation project. Leverage Data & Technology Data-driven insights provide a vital competitive advantage in your disruption response: Real-time market intelligence: Deploy advanced analytics to detect weak signals of change before they emerge fully-formed[3]. Predictive modelling: Use Agentic AI to identify patterns and forecast potential disruptions[2]. Digital transformation lifecycle: Invest in the necessary expertise and infrastructure to undertake on-going programmes of transformation — a big step, and potentially expensive, but it can help immunise your business against disruptive technologies and new models. Practical Implementation Steps Translating disruption awareness into effective action requires specific tactical approaches.

How to Connect Rural Britain and the Hardest-to-Reach Customers The lack of rural connectivity in the UK has become a pressing issue , creating a digital divide that impacts individuals, businesses and farmers. Modern society relies on digital services, and the lack of access to reliable, high-speed internet is a pervasive social issue that results in digital exclusion for communities, depriving them of fundamental services like online banking, health care, and education. This lack of access has a further impact on social mobility, particularly when around 37% of workers in the UK spend at least one day a week working remotely. In 2021 the Public Accounts Committee published a report on improving broadband which states ‘1.6 million UK premises, mainly in rural areas, cannot yet access superfast [internet] speeds’. Since then, we are happy to report that there has been some progress. As of early 2025, approximately 98% of all UK households have access to high-speed broadband (defined as speeds of 30 Mbps or higher) . In rural areas, that figure is 89% — a decent improvement in the last few years. However, the gap is larger when we consider gigabit speeds: only 52% of rural households can connect to gigabit-capable broadband, compared to 87% in urban areas There is still a significant gap to plug, but things are moving in the right direction. This allows the focus to shift, in part, to the next phase: establishing a modern digital infrastructure which can support a digital-first strategy in public services, as well as encouraging local innovation, such as smart city programmes. The hope is that this infrastructure will drive inward investment which then create a virtuous circle, where as more infrastructure is built, more innovative businesses are attracted to the region, which in turn drives demand for more advanced infrastructure. In this article we look at the improvements in rural connectivity and the programmes and innovations which are most likely to have a social impact.

What Problem do Too Many SaaS Providers Have in Common? Many SaaS security providers have a history of treating important safety and security features as something to upsell. This raises the important question of whether a software vendor has a moral responsibility for the secure operation of their solution. In this article, we explore the implications of treating important security and safety features as an upsell, using Boeing as a test case of where this can go wrong. The Case of Boeing and the Aviation Industry The case against Boeing is emblematic of a more systemic issue across the aviation industry, and many other industries. The public became aware of this issue under tragic circumstances when the Lion Air and Ethiopian Air Boeing 737 Max airliners crashed in 2018 and 2019 respectively. According to the widely quoted New York Times article , the crash could have been avoided if the pilots had access to two safety features that were sold by Boeing as optional extras. According to the incident reports, at the root of the incident were the angle-of-attack sensors. These mechanical sensors operate in a similar fashion to a weathervane to measure whether the aircraft’s nose is pointing above or below the direction of airflow. Being mechanical, they may be prone to malfunction, perhaps jamming after having been installed incorrectly — as was believed to be the case for the Lion Air aircraft . The system that led to the aircraft’s demise, which identifies the risk of the aircraft stalling, only listened to one of the sensors. A difference in the signal being sent by the two sensors was not recognised by the anti-stall system; and the instruments that would have alerted the pilots to the conflicting signals were upsell items. This wasn’t a fancy, nice-to-have bell or whistle that makes the flight more comfortable, efficient, or profitable. It is an underlying safety feature of the aircraft. If there was no safety requirement for the redundancy of two sensors, it is difficult to see why there would ever be more than one. Boeing has now addressed the issue, and the anti-stall system listens to both sensors, responding safely in the event of conflicting signals. It should also be noted that the investigation identified pilot error and deficiencies in the training that contributed to the disasters (and this will be relevant to our points regarding many SaaS product decisions as well). The SaaS Parallels Cloud-delivered Software as a Service (SaaS) has revolutionised the tech industry, and catalysed a phenomenal level of innovation and growth. It has enabled new software capabilities to be brought to market faster than ever before, and facilitated the ability to reach a scale with costs defrayed across multiple customers that would have been unimaginable 30 years ago. However, the benefits of being able to access a service from anywhere, at any time, by anyone also presents significant risks. The ‘anyone’ can be a malicious party operating outside of the reach of law enforcement or extradition. As a result, there are clear commercial responsibilities placed on SaaS providers to secure their infrastructure from attack, and those that do not are unlikely to last long in the marketplace. But just like the aviation industry, there are different flavours of security, and different perceptions of what is considered essential. Taking due care and applying due diligence to ensure that the platform itself is adequately secured from a direct attack is clearly the vendor’s responsibility – but what about those elements of security that relate to risk owned by their customers? One key element of customer risk relates to the security of a user’s password. It is their responsibility to make sure they choose a long and random string drawn from upper case, lower case, numerical, and special characters (if allowed). It is also their responsibility to ensure that they do not ever use the same password for multiple applications or services. But, we know that compromised credentials is a common failure mode. Just because it is the user’s responsibility to mitigate this risk, this doesn’t mean that system developers do not also have some mutual responsibility to make it easier for the user to exercise that responsibility; controls have been developed specifically for that purpose. The most obvious ones are Multi Factor Authentication (MFA, or 2FA), and Single Sign On (SSO). With MFA, we improve the security of the credentials by also verifying that the user is in possession of their trusted device before we trust them at sign in. With SSO, we minimise the number of credentials and accounts to manage by federating with a single corporate account; we can then concentrate our effort to secure that corporate account rather than spreading our resources thinly. Both are relatively easily implemented these days, particularly in the case of SSO where the OAuth protocols are widely offered by Identity Providers. Once implemented, both are essentially free to operate, particularly if MFA uses an Authenticator app rather than SMS text messages. SaaS providers recognise that this security is important, and they will frequently implement MFA and SSO controls into their applications to meet that customer demand. But, too frequently, we see them only offered as part of the more expensive subscription options. This element of security is not enhancing the vendor’s core proposition; it is not making their offering more functional, better looking, or more efficient for their users. It is just making it more secure, and therefore to treat it as an item to upsell comes across as price-gouging rather than the responsible application of good security practice. It is almost as though these vendors have run out of innovative bells and whistles that their clients would value in their core product, so they have had to resort to undermining the security of their cheaper options in order to encourage their customers to pay for their more expensive ones. It is equivalent to a bank only using the CSC code on a card to secure transactions for customers who pay for their premium banking services, because, after all, it is the customer’s responsibility to protect their card details. Conclusion What we have described here is not universal, and probably is not even representative of the majority of SaaS providers. But, when you are reviewing a new service, we urge you to take a closer look at what security your provider is charging extra for. If low cost, high value security controls are being upsold, then you may want to consider what other security good practices are not being considered essential. For more information about our cyber security consulting services and Secure by Design principles in action, please contact Tom Burton, Partner for Cyber Security, using the form below.