The survival core: Your Minimum Viable Company for enterprise resilience

Main decorative image
  • Insight
  • 9 minute read
  • July 15, 2026

When everything is critical, nothing is. The Minimum Viable Company is the survival core that must endure through disruption, and the lens that turns resilience into a platform for transformation.

The takeaways

  • Define your Minimum Viable Company: the critical outcomes, processes, technology, people and third-party dependencies needed to stay viable through disruption.
  • Focus enterprise resilience investment on the survival core that protects value, accelerates recovery and reduces financial, regulatory and reputational risk.
  • Use AI, automation and continuous monitoring to keep your MVC visible, actionable and aligned to changing risks across the organisation and ecosystem.

For decades, leaders were rewarded for optimising. Lean balance sheets, just in time supply chains, single vendor technology stacks, global delivery models. The assumption was that the operating environment would remain broadly stable, and that disruption, when it came, would arrive one shock at a time. That world is gone. Disruption is now the operating norm, not the exception. Cyber-attacks that take entire enterprises offline for weeks. Concentrated cloud and software dependencies that can fail without warning. Supply chains exposed to geopolitics. Severe weather and energy disruption that can affect power, fuel, facilities and operations at scale.

Download the whitepaper

These overlapping shocks can arrive faster and harder than most organisations are designed to absorb. When it comes to responding to a major cyber incident, for instance, only 6% of organisations say they are “very capable” across all key areas.

Boards are no longer asking whether disruption will happen. They are asking whether the organisation will be resilient against disruption when it does happen, and what that resilience is worth. Increasingly, that means asking whether resilience spend can be expressed as a return, not just a cost: through revenue protected, capital preserved, regulatory exposure reduced, trust maintained, and recovery accelerated. Minimum Viable Company (MVC) plays an important role in answering these questions for the most severe disruptions.

MVC Defined

Minimum Viable Company is the smallest set of capabilities that must remain operational to keep the organisation viable through severe disruption. It has three components, which together will enable the organisation to deliver its critical strategic outcomes in a crisis.

  • Critical external facing products and services that deliver the outcomes customers, markets, and regulators feel the most when they are missing.
  • Critical internal processes and activities that underpin the license to operate, including safety, payroll, fraud controls, communications, and crisis decision making.
  • Foundational dependencies, including the technology, data, people, third parties, and tier 0 infrastructure on which everything else relies. These reach inside the organisation and beyond it, into cloud and software providers, suppliers, financial market infrastructures, and the public utilities every modern enterprise depends on.

MVC is not a service catalogue, a regulatory submission, or a technology recovery plan. It is the executive view of viability, expressed in mission critical business outcomes, sequenced over the timeline of a crisis, and tested against severe but plausible scenarios.

Know your Survival Core

Resilience is no longer a back-office discipline. It is a board-level, value-defining capability that spans the entire enterprise. MVC is not the whole resilience answer, but it is the place to start. MVC gives boards and senior executives a clear baseline for protecting viability and prioritising resilience investment.

Five MVC characteristics for boards and senior executives to embrace:

If everything is critical, nothing is critical. MVC forces the executive team to agree on the smallest core that must stay running, in what order, and against what risk tolerances.

An MVC enables organisations to prioritise resources toward core services essential for survival and operational resilience. This focused approach reduces financial, regulatory, and reputational risk, allowing recovery teams to restore critical services in a structured way and maintain stakeholder confidence.

By identifying the critical services, dependencies and recovery requirements that matter most, MVC gives organisations a clear baseline for action. Broader operational, cyber, technology, regulatory, strategic, and financial resilience activities can then build from that baseline. MVC alone will not make an organisation truly resilient, but if an organisation does nothing else, this is the place to start.

AI, digital twins, and continuous monitoring can help evolve MVC into a more dynamic, real-time capability that provides greater continuity, recovery speed, and stakeholder confidence. By fully leveraging technology, organisations accelerate MVC definition and enable life raft operations under stress.

Some organisations need to define their MVC for the first time. Others need to affirm their MVC as part of a broader resilience programme that has stalled. All must increasingly coordinate it across companies, sectors, and government bodies, because viability today is as much systemic as it is enterprise level.

When an organisation truly understands the minimum combination of business services, people, technology, data, facilities, suppliers, and decision-making capabilities that are core to its survival, it has a clear roadmap to protect value amidst disruption, maximise return on resilience investment, and ultimately inform business transformation and value creation.

Unlock the Power of MVC

In today’s era of relentless disruption, the question isn’t if your organisation will face a potentially catastrophic crisis—but how resilient it truly is when that moment comes. Are you confident that you understand your Minimum Viable Company—the critical core that must survive to keep your business viable?

If you are, has your organisation started to identify how technology and automation can support you in operationalising the MVC? Leaders are already moving towards automation: for AI agents, the top priority areas include:

39%

Cloud security

39%

Data protection

38%

Cyber defence and operations

These capabilities can help make an MVC continuously visible and actionable.

Source: PwC’s 2026 Global Digital Trust Insights

If you’re ready to take the next step, contact our team to discuss how we can support you in defining and embedding MVC within your organisation.

Don’t wait for disruption to test your limits, build resilience with clarity and confidence today.

“Organisations that recover fastest from disruption knew, before the crisis, the capabilities they had to keep running. Minimum Viable Company is the resilience foundation to protect viability, accelerate recovery, and sharpen resilience investment.”

Bobbie Ramsden-Knowles,Global Crisis & Resilience Co-Leader, PwC United Kingdom

The Survival Core: Your Minimum Viable Company for Enterprise Resilience

About the authors

Bobbie Ramsden-Knowles
Bobbie Ramsden-Knowles

Partner, Global Crisis & Resilience Co-Leader, PwC United Kingdom

Dave Stainback
Dave Stainback

Partner, Global Crisis & Resilience Co-Leader, PwC United States

James Rashleigh
James Rashleigh

Partner, EMEA Cyber Leader, PwC United Kingdom

Alexander Köppen
Alexander Köppen

Partner, Cybersecurity & Privacy Strategy, Risk and Compliance, PwC Germany

Contributors

Morten Skogum, Director , PwC Norway
Roy Coppieters, Director , PwC Belgium
Eric Timon, Director , PwC Ireland (Republic of)
Martin Christian Schnatenberg, Director , PwC Switzerland

Define Your Minimum Viable Company

Stay ahead in the era of constant disruption

Prepare, respond, and emerge stronger

PwC’s Global Centre for Crisis and Resilience

Required fields are marked with an asterisk(*)

By submitting your email address, you acknowledge that you have read the Privacy Statement and that you consent to our processing data in accordance with the Privacy Statement (including international transfers). If you change your mind at any time about wishing to receive the information from us, you can send us an email message using the Contact Us page.

Contact us

Bobbie Ramsden-Knowles

Bobbie Ramsden-Knowles

Global Crisis & Resilience Co-Leader, PwC United Kingdom

Tel: +44 (0)7483 422701

Dave Stainback

Dave Stainback

Partner, Global Crisis & Resilience Co-Leader, PwC United States

Tel: +1 678 419 1355

Hide