22 min read

From Dependency to Design: Strategic Autonomy, Resource Resilience and the Making of Future-Ready Organisations in the European Union

14.07.26 | Jayden Gopie

From Dependency to Design: Strategic Autonomy, Resource Resilience and the Making of Future-Ready Organisations in the European Union
Introduction

In March 2022, two weeks after Russia's full-scale invasion of Ukraine, the heads of state and government of the European Union met in Versailles and committed the Union to "take further decisive steps towards building our European sovereignty", identifying energy, critical raw materials, semiconductors, health, digital technologies and food as domains in which strategic dependencies had to be reduced. The declaration marked a turning point: dependency itself — not merely conflict, and not merely price volatility — was named as a strategic risk.

The years since have demonstrated why. In 2021, Russia supplied around 45 per cent of the EU's gas imports, approximately 150 billion cubic metres; by 2025 that share had fallen to roughly 12 per cent (about 36 bcm), the result of a deliberate, costly and legally codified reorientation of the continent's energy system. In 2023–2025, China imposed successive waves of export controls on gallium, germanium, graphite, antimony and, in April and October 2025, on medium and heavy rare-earth elements and the technologies used to process them. Beijing framed the measures as legitimate controls on dual-use materials, but they are widely read as a calibrated response to US and allied restrictions on China’s access to advanced semiconductors, a demonstration of the leverage that its near-monopoly over rare-earth processing confers. The controls disrupted supply chains in the automotive, defence and clean-technology sectors and prompted the European Commission to announce the RESourceEU initiative for joint purchasing and stockpiling. Meanwhile, the concentration of the upstream inputs of the energy transition has been increasing, not decreasing: the International Energy Agency (IEA) finds that the average market share of the top three refining nations for key energy minerals rose from around 82 per cent in 2020 to 86 per cent in 2024.

The EU's answer has been a dense programme of legislation and strategy: the Critical Raw Materials Act, the Net-Zero Industry Act, the Carbon Border Adjustment Mechanism, the phase-out of Russian fossil fuels, and the European Economic Security Strategy with its threefold logic of promoting the EU's economic base, protecting against risk and partnering widely. These instruments are usually discussed as industrial policy or foreign policy. This article’s argument is that they contribute as much to Europe’s strategic independence as they do to its industrial competitiveness or its foreign-policy objectives — that resilience is not a by-product of industrial and foreign policy but a distinct organising logic running through both, and that the organisations operating within the EU’s regulatory space are not bystanders to it but its principal implementation vehicle. Supply-chain risk assessments, supplier diversification, stockpiling, recycling and reporting obligations all land, in the end, on companies.

The central question, then, is not only political (“how autonomous should Europe be?”) but also organisational. The two are inseparable: deciding how Europe responds to instability, supply-chain fragility and energy insecurity is itself a series of political choices, and those choices set the conditions under which firms operate. The distinction drawn here is one of emphasis rather than kind: this article foregrounds the organisational layer because it is the level at which political ambition is ultimately realised or frustrated. The question it pursues is therefore: how can geopolitical instability, resource dependency, supply-chain fragility, energy insecurity and EU regulatory change be converted from sources of exposure into drivers of stronger, more autonomous, and future-ready systems? The article proceeds in eight steps: it clarifies the concepts of strategic autonomy and resilience (Section 2); analyses the geopolitical drivers of resource risk, including a case study of how a single regulatory instrument interacts with concentrated dependency (Section 3); examines the EU's energy dimension (Section 4); analyses the Critical Raw Materials Act and adjacent supply-chain legislation with attention to what the law does and does not require (Section 5); sets out how organisations can respond (Section 6); translates the analysis into implications for leaders (Section 7); confronts the trade-offs (Section 8); and concludes (Section 9)

Conceptual framing: strategic autonomy and resilience

A contested concept

"Strategic autonomy" entered EU vocabulary through security and defence policy and has since travelled across nearly every policy field. Helwig and Sinkkonen, international-relations scholars at the Finnish Institute of International Affairs, show that the term is deliberately ambiguous — capacious enough to accommodate French ambitions for European power, German concerns for economic resilience, and smaller member states' insistence on transatlantic partnership — and that this ambiguity is both its political strength and its analytical weakness. In the economic domain, the Commission's preferred formulation has become "open strategic autonomy", a construct that Schmitz and Seidl, political-economy scholars of European integration, trace through EU trade policy as an attempt to reconcile two logics: remaining "as open as possible" while becoming "as autonomous as necessary". Critics regard the pairing as unstable; Mariotti, an economist of industrial policy, for instance, questions whether openness and autonomy can serve simultaneously as an industrial-policy compass, warning that the concept risks becoming a camouflage for ad hoc interventionism.

For organisational readers, three distinctions matter more than the label:

First, autonomy is not autarky. No serious EU document proposes self-sufficiency. The Critical Raw Materials Act's own benchmarks — discussed in Section 5 — cap the ambition at 10 per cent of annual consumption for domestic extraction. The goal is to reduce excessive dependency on single external suppliers, not dependency as such.

Second, diversification is not decoupling. The EU's economic security framework speaks of de-risking: identifying the small subset of dependencies that are strategically dangerous — because supply is concentrated, substitution is hard, and the supplier is willing to weaponise the relationship — and treating those differently from ordinary trade.

Third, sovereignty is a property of states; resilience is a property of systems. An organisation cannot be "sovereign", but it can be resilient, and the policy shift towards autonomy changes both the risk landscape and the compliance obligations within which organisational resilience must be built.

Resilience as the connecting logic

The supply-chain literature defines resilience as "the ability of a system to return to its original state or move to a new, more desirable state after being disturbed". Two features of this definition deserve emphasis. It is systemic — resilience is a property of networks, not of individual firms — and it is transformative: the resilient system does not merely recover, it can move to a "more desirable state". That second clause is the conceptual bridge between resilience and strategic autonomy. The EU's post-2022 energy policy did not aim to restore the pre-war gas system; it aimed to replace it with a structurally less vulnerable one. The same logic, this article argues, should govern organisational responses: the objective is not to absorb shocks and revert, but to use shocks as information about design flaws.

At the same time, resilience is not free. The IMF's survey of the literature on geoeconomic fragmentation estimates that the output costs of a fragmenting world economy range from 0.2 per cent to nearly 7 per cent of global GDP depending on severity, with losses of up to 12 per cent for some countries under full technological decoupling. Any honest account of strategic autonomy must therefore hold two ideas simultaneously: concentrated dependency creates unacceptable tail risk, and the wholesale abandonment of interdependence would be enormously costly. Resilience thinking, targeting the specific dependencies that are strategically material rather than retreating from trade in general, is the discipline that keeps these two ideas in balance.

Figure 1. From geopolitical shock to organisational resilience. Adapted from the risk taxonomy of the European Economic Security Strategy and the supply-chain resilience framework of Christopher and Peck.

The geopolitical drivers of resource resilience

Concentration as the underlying vulnerability

The structural fact underlying most contemporary resource risk is supplier concentration. The European Commission noted as early as 2020 that China supplied 98 per cent of the EU's rare-earth elements, and the IEA's 2025 assessment shows the problem intensifying at the refining and processing stage, where the top three suppliers now account for 86 per cent of the market for key energy minerals on average, with China projected to still supply over 60 per cent of refined lithium and cobalt and around 80 per cent of battery-grade graphite and rare earths in 2035 under current trends. Concentration of this kind converts commercial relationships into potential instruments of coercion: it is precisely because there is no short-term alternative that restriction becomes credible leverage.

Figure 2. Average market share of the top three mining and refining countries for key energy minerals, 2020 vs 2024. Adapted from IEA, Global Critical Minerals Outlook 2025. Licensed CC BY 4.0.

From latent risk to exercised leverage

The past three years have shown this leverage being exercised. Following the imposition of restrictions beginning in July 2023, China introduced export licensing for gallium and germanium (essential for semiconductors and power electronics), then for graphite, then antimony; in April 2025 seven medium and heavy rare earths were added to the control list, and in October 2025 the controls were extended to foreign-made products containing as little as 0.1 per cent Chinese-origin rare earths or produced with Chinese processing technology — a de facto extraterritorial regime, portions of which were subsequently suspended amid negotiation. China has justified these measures as routine controls on dual-use materials and, at points, as a countermeasure to Western semiconductor restrictions. Most analysts read them less as economic protection than as strategic signalling: a demonstration that dominance of rare-earth mining and processing can be converted, at will, into leverage over the industrial base of any state that depends on it. Market effects were severe in specific niches: analyses of the post-control period document export collapses and multi-hundred-per-cent price surges for affected materials such as antimony and gallium. The euro area automotive sector experienced production interruptions traceable to magnet licensing delays.

These episodes matter for organisational strategy for a subtle reason: the harm is not primarily the price effect but the discretionary allocation effect. A licensing regime places a foreign administrative authority inside the supply chain of every downstream firm. Even when licences are granted, lead times, disclosure requirements and uncertainty impose costs that no hedging instrument addresses.

History counsels against fatalism, however. Gholz, a political scientist specialising in national security and economic policy, analysed the 2010 episode, when China was widely reported to have embargoed rare-earth shipments to Japan, and found that the disruption's costs were ultimately contained: prices spiked, but markets adapted through stockpile drawdowns, substitution, new investment and supply from outside China. The lesson is double-edged. Markets do adapt, which cautions against panic and against permanent, expensive over-insurance; but adaptation took years and was possible partly because dependency was narrower than feared. The relevant question for any organisation is therefore empirical, not ideological: for which specific inputs would adaptation be too slow to prevent serious harm.

Fragmentation as a system-level trend

Individual coercion episodes sit within a broader trend of geoeconomic fragmentation: rising use of sanctions, export controls, investment screening and industrial subsidies by all major economies. The IMF identifies five channels through which fragmentation imposes costs: trade, migration, capital flows, technology diffusion and the erosion of global public goods. For organisations, fragmentation means that the policy environment itself has become a source of supply-chain risk: rules of origin, control lists and sanction regimes now change faster than physical supply chains can be reconfigured. This inverts a planning assumption that held for three decades, namely that the regulatory environment was the stable background against which commercial risk played out.

Case lens: concentrated dependency meets a regulatory cost shock

What happens when a global regulatory instrument lands on economies with extreme, concentrated import dependency? Recent research on Small Island Developing States (SIDS) under the International Maritime Organization's proposed Net-Zero Framework (NZF) offers an unusually clean natural laboratory — and a cautionary analogue for any organisation whose supply lines run through a small number of carriers, corridors or suppliers.

The NZF, approved in draft at the IMO's Marine Environment Protection Committee in April 2025, would combine a global marine fuel-intensity standard with a two-tier emissions pricing mechanism (US$100 and US$380 per tonne of CO2-equivalent for different portions of a ship's compliance deficit) for ships above 5,000 gross tonnage. Its adoption was postponed by a contested vote in October 2025 — 57 in favour of adjournment, 49 against — and negotiations resumed in 2026, itself an illustration of how geopolitics now runs through technical regulation.

SIDS are the extreme case of import dependency: structural vulnerability rooted in small size, openness and concentration has been documented since Briguglio's foundational vulnerability index — a composite measure, developed by the economist Lino Briguglio, that captures a country’s exposure to external shocks through indicators such as trade openness, export concentration and dependence on strategic imports; IMF research finds that a shock to international food prices raises SIDS headline inflation by roughly twice as much as in other countries, because there is little domestic production to buffer pass-through. Their reliance on maritime transport is close to total: a recent systematic review describes SIDS as among the most trade-dependent economies in the world, with trade-to-GDP ratios frequently above 100 per cent, poor liner connectivity, thin service networks and freight costs above the world average, and concludes that maritime emission-control measures carry disproportionate socio-economic consequences for SIDS precisely because of this dependence. The structural point follows directly: a compliance cost that a diversified, competitive market would absorb through supplier switching instead lands, where connectivity is thin, on a dependency with little or no redundancy. The incidence of the regulation is determined less by the size of the cost than by the absence of alternatives.

The transferable insight is structural, not maritime. Regulatory cost shocks — carbon pricing, border adjustments, due-diligence regimes — are not distributed according to emissions or turnover; they are distributed according to the elasticity of one's alternatives. An organisation with one qualified supplier of a critical input is, functionally, a small island. The policy debate about SIDS exemptions and revenue redistribution under the NZF is, at organisational scale, the debate about which dependencies deserve pre-emptive investment before the shock arrives.

Energy independence and the EU resilience agenda

Energy is where the EU's dependency problem was most acute and where its resilience response is most advanced — making it the best-documented template for what "strategic autonomy as system redesign" looks like in practice.

The starting position was structural: the EU imports the majority of the energy it consumes, with an import dependency rate of 58 per cent in 2023 and 57 per cent in 2024. Within that aggregate, the pre-2022 gas relationship with Russia was the classic concentrated dependency — 45 per cent of gas imports from a single supplier that proved willing to use supply as leverage. The response unfolded in three phases. First, emergency substitution: REPowerEU, launched in May 2022, combined demand reduction, LNG diversification and accelerated renewables deployment, cutting the Russian share of gas imports to around 12 per cent by 2025. Second, legal codification: in January 2026 the Council formally adopted a regulation phasing out the remaining Russian gas imports entirely, banning LNG imports from the end of 2026 and pipeline gas by the end of November 2027, converting a policy preference into a binding, dated obligation on market participants. Third, structural transformation: the longer-term agenda ties energy security to decarbonisation and electrification, on the logic that domestically generated renewable electricity is the only energy source that cannot be embargoed.

The costs and the incompleteness of this transition must be stated with equal clarity. Draghi's 2024 report on European competitiveness documents that EU firms continued to face energy prices well above those of US competitors, with around 60 per cent of European companies citing energy prices as a major impediment to investment, more than 20 percentage points above the share of US firms, and estimates the overall investment need for competitiveness and the transition at up to €800 billion per year. Moreover, decarbonisation relocates rather than eliminates dependency: an electrified system needs grids, batteries, magnets and semiconductors, shifting exposure from Russian hydrocarbons to the mineral and manufacturing concentrations described in Section 3. The Net-Zero Industry Act responds on the manufacturing side, setting a benchmark that EU manufacturing capacity for strategic net-zero technologies (solar, wind, batteries, heat pumps, electrolysers, grid components and carbon capture, among others) should reach at least 40 per cent of the Union's deployment needs by 2030.

For organisations, the energy story carries three lessons. Dependency reduction is achievable but expensive and slow, even with maximal political will. Substituting one dependency (gas) can create another (minerals) unless the whole value chain is examined. And regulation follows crisis with a lag but then binds hard: firms whose contracts, infrastructure or business models assumed continued Russian supply are now unwinding them on a legislated timetable not of their choosing.

Critical raw materials and supply-chain legislation

What the Critical Raw Materials Act does

The Critical Raw Materials Act (CRMA), Regulation (EU) 2024/1252, entered into force on 23 May 2024. It identifies 34 critical raw materials, of which 17 are designated strategic, and sets four benchmarks for 2030: EU extraction capacity equivalent to at least 10 per cent of annual consumption of strategic raw materials; processing capacity of at least 40 per cent; recycling capacity of at least 25 per cent; and no more than 65 per cent of annual consumption of any strategic raw material, at any relevant processing stage, sourced from a single third country. To accelerate supply, it creates a "Strategic Project" regime with streamlined permitting, a maximum of 27 months for extraction projects and 15 months for processing or recycling projects, alongside coordinated exploration programmes, monitoring and stress-testing of supply chains, and provisions on joint purchasing.

What it requires of companies — and what it does not

Precision matters here, because the CRMA is frequently overstated in commentary. Its benchmarks bind no company; they are policy targets addressed to the Union and member states, and, as the European Court of Auditors has emphasised, they are non-binding even at that level. The principal direct corporate obligation sits in the Act's provisions on risk preparedness: large companies (those above thresholds of 500 employees and €150 million worldwide turnover) that manufacture strategic technologies using strategic raw materials — batteries, hydrogen equipment, renewable-energy equipment, aircraft, traction motors, heat pumps, data-transmission and electronics, and advanced chips, among the listed categories — must carry out a risk assessment of their strategic raw materials supply chain at least every three years. That assessment must map where the materials they use are extracted, processed and recycled, analyse the factors that might affect supply, and assess their vulnerability to supply disruption. Presentation of the findings to the company's board is foreseen but, under the Regulation itself, not mandatory unless a member state chooses to require it [5]. Member states were required to identify in-scope companies by May 2025. There is, notably, no general obligation to diversify, stockpile or onshore: the CRMA compels large strategic-technology manufacturers to know their dependency, not (yet) to change it.

The adjacent legislative architecture

The CRMA operates alongside a set of instruments that do impose broader obligations, and compliance teams should read them as one architecture rather than as separate regimes. Table 1 summarises the mapping.

Table 1. EU policy instruments of the strategic-autonomy agenda mapped to organisational implications. Author's synthesis from the cited primary sources.

Two dynamics in this architecture deserve emphasis. The first is simplification and retrenchment. The Corporate Sustainability Due Diligence Directive (CSDDD), adopted in 2024, was substantially amended before ever applying: the "Omnibus I" package, adopted by the Council in February 2026, raised the scope thresholds to companies with more than 5,000 employees and €1.5 billion turnover — cutting the covered population from roughly 13,000 to roughly 6,000 companies — and unified application from July 2029. The Carbon Border Adjustment Mechanism (CBAM) entered its definitive regime on 1 January 2026, but a 2025 simplification introduced a 50-tonne de minimis threshold that exempts about 90 per cent of importers while retaining coverage of about 99 per cent of embedded emissions, and postponed certificate sales to 2027. Organisations should therefore plan against a regulatory environment that is directionally stable — supply-chain transparency and carbon accountability are not going away — but parametrically volatile: thresholds, timelines and scope move with the political cycle.

The second dynamic is the gap between ambition and delivery. The European Court of Auditors' February 2026 special report concludes bluntly that the CRMA's 2030 benchmarks "appear out of reach": supplier diversification is not yet producing tangible results, domestic projects face bottlenecks, recycling remains commercially marginal, and governance of the raw-materials agenda is fragmented. The Commission's RESourceEU initiative — announced in October 2025 in direct response to China's rare-earth controls, and encompassing joint purchasing, stockpiling, support for strategic projects and new supply partnerships with countries including Australia, Canada, Ukraine, Kazakhstan, Chile and Greenland — is in part an acknowledgement that the CRMA alone was not moving fast enough. The organisational implication is uncomfortable but important: companies cannot outsource their resource resilience to EU policy. The Union is building the enabling framework, but on the auditors' own assessment, physical supply security by 2030 will depend substantially on what firms do for themselves.

From dependency to future-ready systems

If Sections 3 and 4 describe the external pressure, and Section 5 the regulatory framework now forming around it — both a source of compliance pressure and the scaffolding for a response — this section turns to what organisations must build for themselves. The interventions available to them are well understood individually; what distinguishes future-ready organisations is that they deploy them as a coherent portfolio, sequenced by the strategic materiality of each dependency rather than applied uniformly.

Visibility before strategy. The CRMA's risk-assessment obligation is a sound template even for firms outside its scope: map extraction, processing and recycling locations for critical inputs; identify concentration at every tier, not merely among direct suppliers; and assess vulnerability to disruption. Most organisations discover that their true exposure sits at tier two or three, the magnet inside the motor inside the component, which is invisible to conventional procurement data. Data-driven supply-chain monitoring, combining supplier disclosures with trade data and control-list tracking, converts this from a periodic audit exercise into a standing capability.

Diversification and substitution. Diversification is the canonical answer to concentration, but it is slow and often expensive where processing capacity, not ore, is the bottleneck. Substitution — engineering products to need less of the critical input, or none — is frequently underrated: the adaptation to the 2010 rare-earth shock came substantially through substitution and efficiency, not only new mines. Both require qualification lead times measured in years, which is precisely why they must be initiated before a crisis.

Circularity and recycling. Recycling is the only supply source that is by definition domestic, and the CRMA's 25 per cent recycling benchmark signals durable policy support. But the auditors' finding that recycling remains commercially embryonic is a fair warning: firms building circularity strategies should treat recycled content as a medium-term hedge whose economics may depend on regulatory tailwinds, not as a near-term substitute for primary supply.

Stockpiling — where appropriate. Strategic inventory contradicts three decades of lean orthodoxy, and it is costly. The discipline is selectivity: stockpiles make sense for inputs that are simultaneously low-volume, high-criticality and concentration-exposed — the profile of many critical raw materials, and the logic behind both Draghi's recommendation of EU-level strategic stocks and the stockpiling strand of RESourceEU. For most other inputs, contractual flexibility and dual sourcing dominate physical inventory.

Procurement and contract redesign. Resilience criteria — origin transparency, multi-sourcing rights, capacity reservations, force-majeure and sanctions clauses that reflect export-control risk rather than only natural disaster — can be engineered into procurement without waiting for legislation. The energy phase-out experience is instructive: firms with long-dated contracts premised on Russian supply are now exiting them under legal compulsion; contracts written after 2022 increasingly price geopolitical optionality explicitly.

Scenario planning and stress testing. The EU now stress-tests critical supply chains at Union level; organisations should mirror the practice, testing not average disruption but the specific mechanics of plausible shocks: a licensing regime with 90-day approval cycles, a 0.1 per cent content-based extraterritorial control, a dated import ban, a carbon price at the border. The SIDS case in Section 3.4 illustrates the method: quantify the cost of the shock, then weight it by the concentration of one's alternatives.

Compliance integration and governance. Finally, the instruments in Table 1 share data requirements — supply-chain mapping, emissions accounting, supplier due diligence — that are wasteful to build three times in three silos. Organisations that integrate CRMA-style risk assessment, CBAM carbon data and due-diligence processes into a single supply-chain intelligence function convert compliance cost into strategic capability. This is the practical meaning of "future-ready": the same system that satisfies the regulator answers the board's strategic questions.

Strategic implications for leaders

For boards and executive teams — whose task is to decide where to spend scarce resilience effort before the next shock, rather than after it — the analysis reduces to five questions.

Which dependencies are strategically material? Not all concentration is dangerous. The test combines three factors visible throughout this article: supplier concentration (is there a credible alternative?), substitutability (how long would adaptation take?), and weaponisation risk (has this supplier, or this input class, been used as leverage?). A dependency scoring high on all three is a board-level issue; most others are ordinary procurement.

Which risks are regulatory, operational, financial or reputational? The same underlying dependency generates all four: an export control is operational; CBAM and NZF-type pricing are financial; CRMA and CSDDD obligations are regular; and due-diligence failures in mineral supply chains are reputational. Treating these as one risk with four expressions, rather than four risks owned by four functions, is the single highest-leverage governance change most organisations can make.

How should boards integrate resource resilience into enterprise risk management? The CRMA points the way even where it does not bind: a periodic, documented supply-chain risk assessment for critical inputs, presented to the board. Boards should ask for concentration metrics with the same regularity as liquidity metrics, and should require that major capital and product decisions disclose their critical-input assumptions.

How can compliance and strategy work together? The regulatory architecture of Table 1 makes compliance teams the organisation's earliest sensor of geopolitical change — control-list amendments, benchmark revisions, phase-out timetables reach compliance first. Strategy teams, conversely, decide the sourcing and design choices that determine future compliance exposure. A standing joint mechanism — a resource-resilience committee owning the risk assessment, the scenario set and the regulatory watch — is more effective than episodic coordination.

How can organisations avoid reactive crisis management? The uncomfortable pattern of 2022–2026 is that each shock produced a scramble: for LNG, for gallium, for magnet licences. The organisations that fared best had made pre-commitments — qualified second sources, inventory, substitution engineering — before the shock made them obviously necessary and temporarily impossible. Resilience investment is countercyclical by nature: it looks wasteful precisely when it is cheapest.

Risks, tensions and trade-offs

A credible resilience agenda must account for its own costs and failure modes.

Efficiency loss and duplication. Redundancy, reshoring and stockpiling all trade efficiency for security. At the system level, the IMF's fragmentation estimates — output losses of up to 7 per cent of global GDP in severe scenarios — are a reminder that resilience pursued as generalised disengagement destroys more value than it protects. The organisational corollary: dual-sourcing everything is as strategically lazy as single-sourcing everything. Selectivity is the entire discipline.

Cost pass-through and distributional effects. Resilience measures and climate-related pricing instruments impose costs that fall unevenly. The SIDS evidence in Section 3.4 shows regressive incidence at the international scale; within Europe, energy-intensive industries and import-dependent SMEs bear disproportionate adjustment costs, a tension visible in the 2025–2026 simplification retreat on CBAM and CSDDD. Leaders advocating resilience policy should be honest that someone pays, and attentive to who.

Protectionism and supplier displacement. Instruments framed as de-risking can slide into ordinary protectionism, inviting retaliation and harming third-country suppliers who were never a coercion risk. Scholars of open strategic autonomy warn precisely that the concept's ambiguity permits opportunistic capture by sectoral interests. The 65 per cent single-supplier benchmark in the CRMA is a diversification rule, not an exclusion rule — a distinction worth preserving in corporate policy as well.

Implementation risk. The gap between legislative ambition and physical delivery is real: the Court of Auditors judges the CRMA's 2030 benchmarks likely out of reach, and the IMO case shows global regulatory timelines slipping under geopolitical pressure. Organisations should hedge against both regulatory acceleration and regulatory failure — building capabilities that pay off in either world, such as visibility, substitution options and contractual flexibility.

Over-insurance. Finally, the 2010 rare-earth episode cautions that markets adapt faster than crisis narratives assume. Permanent, undifferentiated over-insurance against dependency is itself a form of fragility: it consumes resources that adaptive capacity — engineering talent, balance-sheet flexibility, supplier relationships — would use better. The aim is not maximum autonomy but calibrated autonomy.

Conclusion

The period since 2022 has ended the assumption that efficient supply is secure supply. Energy coercion, mineral export controls and the fragmentation of the trading system have shown that concentrated dependencies — whether a continent's on one gas supplier, an industry's on one refining country, or an island's on one shipping line — behave identically under stress: they convert someone else's decision into one's own crisis. The European Union's response, from REPowerEU and the Russian-gas phase-out to the Critical Raw Materials Act, the Net-Zero Industry Act and the Economic Security Strategy, amounts to the most explicit attempt by any major economy to legislate resilience, organised under the imperfect but serviceable banner of open strategic autonomy.

This article has argued that the agenda is, at bottom, as organisational as it is political, and that the two reinforce one another. Political ambition sets the benchmarks, funds the projects and mandates the risk assessments; but supply chains are ultimately redesigned by firms: in procurement decisions, product engineering, inventory policy, contract drafting and board governance. Each layer shapes the other, and neither delivers resilience on its own. The evidence assembled here supports a specific posture. Know the dependency map to the tier where the risk actually sits. Rank dependencies by concentration, substitutability and weaponisation risk, and concentrate investment on the few that score high on all three. Build the response as a portfolio — diversification, substitution, circularity, selective stockpiling, contractual optionality — rather than a single instrument. Integrate the compliance architecture into one intelligence function rather than three reporting silos. And accept the trade-offs explicitly, because resilience purchased indiscriminately is merely inefficiency with better branding.

Geopolitical and resource resilience, in the end, is not about surviving disruption. It is about treating each disruption as a design review — and redesigning energy systems, supply chains, contracts and governance so that the organisation that emerges is more autonomous where autonomy matters, more interdependent where interdependence is safe, compliant with a demanding and shifting regulatory architecture, and structurally ready for a future in which the next shock is a certainty and only its address is unknown.

The next disruption will arrive whether organisations are ready or not. The redesign might as well start now. Shall we?

This article is part of The Outside World, ftrprf’s very own research center.

As changemakers, we believe that what happens in the outside world is the most powerful force shaping organizational strategy – and also the most underestimated. To do well, organizations need to understand what’s happening in the outside world. To do significantly better, they need to be aware of what it means for their future, their relations, their strategy, and their impact. We serve as a bridge between society and tailored strategy by analysing societal dynamics, global trends, and shifting public expectations with a multidisciplinary team of international analysts, excellent tooling, sophisticated AI, and a systems approach. This article is part of our second trimester research focus, which centers on resilience.

For more information, please contact theoutsideworld@ftrprf.com.

Next article

2026-06-30
The Power of Chokepoints Understanding chokepoints is essential to understanding the geopolitics of resilience.