It's not the leader who is vulnerable. It's the organisation.

Since Brené Brown's research and Google's Project Aristotle, leadership vulnerability has entered the management vocabulary. We now know that leaders who admit their doubts, share their mistakes and ask for help create more high-performing cultures than those who maintain a facade of omniscience.

But this conversation remains centred on the individual. It treats vulnerability as a property of the leader, not a property of the system.

Yet the upheavals of this decade — technological acceleration, geopolitical instability, ecological transitions, skills obsolescence — do not only threaten leaders. They expose organisations themselves to a form of structural vulnerability that few have learned to manage.

What the numbers say about systemic vulnerability

The data is staggering and deserves to be faced directly.

According to the World Economic Forum, 39% of skills in use today will be transformed or obsolete by 2030 through the effect of AI and automation. This is not a statistic about individuals to be trained. It is a statistic about organisations' capacity to reinvent themselves in under five years.

According to the Global Peace Index 2025, world peace has deteriorated for the fifth consecutive year. Supply chains, markets, and strategic partnerships are now subject to permanent geopolitical uncertainties.

And according to the IMF, 2025 is reaching record levels of economic instability. This context is not a parenthesis. It is the new environment in which organisations must operate permanently.

« The highest-performing organisations will be neither the strongest nor the most powerful, but the most adaptable. »

— VULNERABLE Practical Guide, 2025

The three forms of organisational vulnerability

Organisational vulnerability takes three forms that most executive committees fail to distinguish.

Skills vulnerability: the organisation depends on knowledge that is expiring. When 40% of key profiles master a technology that will be replaced in three years, that is a strategic vulnerability, not an HR training issue.

Cultural vulnerability: the organisation is unable to question itself. A culture of 'we've always done it this way' is a fatal vulnerability in times of disruption. It does not show in financial statements, but it can be measured by how long a strategic pivot decision takes.

Dependency vulnerability: the organisation is exposed to external factors it does not control and for which it has no contingency plan. A single supplier, a concentrated market, a proprietary technology, one client representing 30% of revenue. These dependencies are the blind spots that vulnerability forces us to confront.

Why organisations mask their vulnerability

The natural tendency of organisations is to conceal their vulnerability — outwardly out of concern for image, but also internally out of fear of creating anxiety.

This masking mechanism is understandable. But it is costly. It deprives the organisation of the information it needs to adapt. Problems that do not surface are problems that grow in silence. The culture of positive reporting, where each hierarchical intermediary softens bad news, is one of the most widespread manifestations of this systemic masking.

Worse: when vulnerability finally emerges, it is often already a crisis. The organisation had no time to prepare. It suffers the disruption instead of anticipating it. The difference between a resilient and a fragile organisation often comes down to this timing: the resilient ones see vulnerability before it becomes an emergency.

« Rather than an additional risk to manage, vulnerability can become a genuine opportunity. »

— VULNERABLE Practical Guide, 2025

Institutionalising vulnerability: what adaptable organisations do

The organisations that come through disruptions with the least damage are not those with the best forecasts. They are those with the best mechanisms to detect and address their own vulnerability.

This takes concrete forms: regular strategic reviews that include a mapping of critical dependencies and disruption scenarios, not just growth plans. Listening processes that allow real problems to surface before they become crises. A managerial culture that values early signalling rather than penalising the bearer of bad news.

Microsoft under Satya Nadella is the most cited example. Shifting from a 'know-it-all' to a 'learn-it-all' culture first required acknowledging the organisation's vulnerabilities: its dependence on the Windows model, its cloud lag, its culture of internal competition. This collective recognition of systemic vulnerability was the starting point for one of the most successful transformations in recent technology history.

Recognising your organisation's vulnerability is not an admission of failure. It is the condition of its adaptation.