11 November 2026
Nordic organizations are planning to invest more in IT resilience, but many are still not fully prepared for major disruptions. A new study by Nordic technology company Vivicta finds that only 33 percent of leaders are highly confident in their organization’s ability to maintain or recover critical services during a major disruption. Significant gaps remain in resilience testing, particularly with critical suppliers and partners.
The findings reveal a clear gap between ambition and operational readiness. While 64 percent of organizations expect to increase investment in IT resilience over the next 12 months, only half have tested disaster recovery end to end in the past year and just 44 percent have undergone an independent assessment against frameworks such as DORA or NIS2.
“In today’s turbulent operating environment, IT resilience is more critical to business continuity than ever. However, investment and confidence do not necessarily translate into proven readiness. Organizations need visibility into their critical services, where they are located, who has access to them and what they depend on. Organizations also need evidence that these services can continue when disruption occurs – that requires regular testing, clear accountability and close cooperation with critical partners,” says Harri Kulmala, Head of Data, Cloud and Security & Digital Core.
The study indicates that IT resilience is increasingly viewed as an organizational capability rather than a purely technical concern. Workforce readiness and crisis management structures are considered the most important resilience capabilities, each cited by half of the respondents. Both rank ahead of real-time monitoring and detection, and automated failover capabilities.
Despite this emphasis on people and leadership, responsibility does not always sit at the level needed to drive organization-wide preparedness. Four in ten organizations place primary ownership of IT resilience below the executive level, while a tenth report having no clear owner.
“Technology remains essential, but technology alone rarely determines how effectively organizations respond to disruption. Leadership, communication and the authority to make difficult decisions under pressure are equally important. True readiness comes from bringing all these elements together and knowing that they work in practice,” Kulmala says.
Critical services increasingly depend on interconnected networks of organizations, suppliers and technology partners, making joint resilience planning and testing essential. Yet only one in five organizations regularly test continuity with their critical suppliers.
Testing practices differ between the Nordic countries. Finland shows the strongest overall maturity, with almost half of organizations reaching the advanced readiness category, compared with 27 percent in Norway and 24 percent in Sweden. Finland also leads in continuity planning, defined recovery targets and independent regulatory assessment. Norway performs strongly in operational rehearsal, while Sweden reports investment ambitions comparable to its Nordic peers but larger gaps in current readiness.
“The next phase of IT resilience is about moving from plans to tested readiness. Organizations need to understand which services are truly business critical, test their ability to keep them running and extend that preparedness across the entire delivery and supply chain. Ultimately, readiness needs to become part of how businesses are managed, not something tested only when a crisis occurs,” Kulmala concludes.
While 64% expect to increase IT resilience investment during the next 12 months, only 33% report high confidence in their ability to maintain or recover critical services during a major disruption.
Only 50% have tested disaster recovery end to end during the past year, and 44% have undergone an independent assessment against DORA or NIS2.
Workforce readiness and crisis management structures are the most highly valued resilience capabilities, each cited by 52% of respondents.
Only 22% regularly test continuity with critical suppliers, while 21% have never done so.
Four in ten organizations place primary responsibility below the executive level, and 11% have no clear owner.
Study shows that Finland has the highest overall maturity, Norway performs strongly in operational rehearsal while Sweden shows the largest gap between investment plans and current readiness.
The Nordic IT Resilience Survey 2026 is a research initiative by Vivicta, conducted in collaboration with Kairos Future. The survey gathered responses from 320 senior technology and business leaders in Finland, Norway and Sweden during June-July 2026.
All respondents represent organizations with at least 500 employees and have decision-making authority or influence over IT, AI, data governance or technology-related decisions.
Read the full report here: The state of IT resilience in Nordics
For more information, please contact:
Vivicta newsdesk
news@vivicta.com
+358 40 704 1411
Vivicta is a trusted Nordic transformation partner making everyday easier through technology. In a world of constant change, we are with our customers, helping to unlock new digital opportunities and elevate their business. We provide fit-for-purpose digital solutions to accelerate customers’ transformation. Our 7000+ experts globally drive end-to-end excellence across Data, Automation & AI, Cloud & Infrastructure, ERP & Applications, and Digital Security. With a get-it-done attitude, we commit to deliver elevated impact. www.vivicta.com
Attachments
