In today’s fast-paced business environment, small and medium-sized enterprises (SMEs) face a variety of risks that can disrupt operations. Whether it’s a cyberattack, a physical security breach, or a natural disaster, being prepared is essential. Developing a clear and practical incident response plan can make the difference between a minor hiccup and a major crisis. This post will guide you through building effective SME response strategies tailored to businesses with physic

Why neither managing agents and fractional leadership quite solved the problem As SMEs grow, operations rarely fail loudly. They fray at the edges—missed handovers, unclear accountability, incidents handled reactively rather than systematically. Leadership feels the drag, but the solution is not always obvious. Most organisations respond in one of two ways: They appoint a Managing Agent (MA)  to “run operations,” or They engage a fractional Operations Director or COO  to prov

How growth exposes hidden weaknesses—and what founders must fix before it’s too late Most small businesses don’t fail at the beginning. They fail after things start going well . Revenue picks up. Customers increase. The founder finally breathes. And then—slowly or suddenly—the cracks appear. Cash tightens. Staff leave. A small incident turns into a big problem. Within months, a business that looked “successful” is struggling to survive. This isn’t bad luck. It’s a pattern. Su

And Why “Cookie-Cutter” Risk Assessments Fail Businesses RISK IS OFTEN SPOKEN ABOUT in broad, comforting categories: financial risk, operational risk, compliance risk, reputational risk. These labels are useful—but only at the highest strategic levels. The moment a business relies on generic templates or off-the-shelf checklists to understand its real exposures, it starts to build a false sense of security. At First Forge , we take a clear position on this: no two businesses

Why escalation is about timing, not panic—and clarity, not control Escalation has a reputation problem. In many organisations, escalation is associated with failure. It is what happens when something has gone wrong, when control has been lost, or when someone is about to be blamed. As a result, people hesitate. They delay. They try to contain issues quietly, hoping they will resolve on their own. By the time escalation happens, it is often already too late. Good escalation do

The hidden cost of informal decision-making under pressure In many SMEs, there is an unspoken expectation that when something goes wrong, someone will “just handle it.” The phrase sounds reassuring. It signals confidence, experience, and decisiveness. It suggests the business is agile, not bureaucratic. In smaller teams especially, it feels efficient to rely on judgment rather than process. Until the moment it isn’t. “Just handle it” is not a strategy. It is a placeholder for

And why clarity of authority matters more than completeness of process Most businesses have Standard Operating Procedures. They are written carefully, approved formally, and stored somewhere accessible. They remind staff what should happen, in what order, and who is responsible at each step. On paper, they signal preparedness. And then stress enters the system: An incident occurs. A customer escalates. A staff member is injured. A regulator appears without warning. A parent t