Key findings
- 91% of UK organisations experienced a significant disruption in the past 24 months.
- Cyber incidents caused the greatest impact most often (16%), followed by IT or software failure (13%) and staff shortages (12%).
- Operational failures account for 56% of the greatest impacts suffered.
- 37% of disrupted organisations lost more than a week, or are still dealing with the effects.
What causes the most business disruption?
Systems, suppliers and people. We asked 500 senior decision-makers which disruption had the greatest impact on their organisation in the past 24 months. Cyber incidents come first (16%), then IT or software failure (13%), staff shortages or loss of key people (12%), supply chain disruption (11%) and third-party, platform or cloud failure (10%).
Cost and policy causes are lower: regulatory or policy change and energy cost or supply are on 8% each. Only 9% report none of these.
Most serious disruptions are operational
Which of the following had the greatest impact on your organisation in the past 24 months?
- Operational
- Cost and policy
View data
| Answer | % |
|---|---|
| Cyber incident | 16% |
| IT or software failure | 13% |
| Staff shortages or loss of key people | 12% |
| Supply chain disruption | 11% |
| Third-party, platform or cloud failure | 10% |
| Regulatory or policy change | 8% |
| Energy cost or supply | 8% |
| Equipment or machinery breakdown | 6% |
| Extreme weather | 5% |
| None of these | 9% |
How long does it take a business to recover?
Often more than a week. Among the 454 organisations that were disrupted, 38% were back to normal within two days. A further 26% took three to seven days.
The rest took longer: 24% needed one to four weeks, 6% more than a month and 7% are still dealing with the effects. The longest average recoveries followed equipment breakdown, supply chain disruption and cyber incidents.
More than a third of disrupted businesses lost over a week
How long did it take your organisation to recover?
- Less than one day 19%
- One to two days 19%
- Three to seven days 26%
- One to four weeks 24%
- More than a month 6%
- Still dealing with the effects 7%
View data
| Answer | % |
|---|---|
| Less than one day | 19% |
| One to two days | 19% |
| Three to seven days | 26% |
| One to four weeks | 24% |
| More than a month | 6% |
| Still dealing with the effects | 7% |
Is this what businesses were worried about?
No. When leaders name their top two risks for the year ahead, 88% include a cost or demand risk and 20% include anything operational. Yet operational failures caused 56% of the greatest impacts.
Operational risk gets a fifth of the attention and causes most of the damage
View data
| Answer | % |
|---|---|
| Leaders naming an operational risk in their top two | 20% |
| Share of greatest impacts caused by operational failures | 56% |
What this means
The thing most likely to stop your business next year is probably not on the board's top-two list. That isn't negligence. Monthly costs crowd out rare events, as the attention gap sets out.
A useful test for any leadership team: list the last three things that cost you a working week. Then check how much of this year's investment is aimed at any of them. Only 11% of businesses are prioritising cyber security and resilience.
Frequently asked questions
What is the most common cause of serious business disruption in the UK?
Cyber incidents. 16% of UK business leaders say a cyber incident had the greatest impact on their organisation in the past 24 months, according to The Reality Department's Business Reality Index.
How long does it take businesses to recover from disruption?
38% recover within two days. 37% take more than a week or are still dealing with the effects.
How many UK businesses have been disrupted recently?
91% of UK organisations with 50 or more employees experienced a significant disruption in the past 24 months.
Methodology
The Reality Department surveyed 500 senior decision-makers at UK organisations employing 50 or more people for wave one of the Business Reality Index. Quotas were set by business size, sector and region. Fieldwork: August 2026.
Related: What are UK businesses most worried about in 2026?
Want to test what your organisation assumes about its risks? Work with us.