Hurricane Sandy made ordinary retail fuel access a regional business constraint
Federal energy records show how power, terminals and retail-site communications can turn ordinary fuel access into a wider operating constraint.
United States
Insights
Field guides for spotting hidden dependencies, asking better questions and choosing the next evidence-gathering step.
Explore court-tested casesInsight archive
La Palma ash damages irrigation-dependent production
Spanish government records show how ash and irrigation damage can halt banana production even when the operating question is more than land access.
Spain/Canary Islands
Cyclone losses weakened productive assets and access to credit
A Bangladesh cyclone assessment shows how losses in fisheries, livestock and power can also weaken the collateral needed for recovery credit.
Bangladesh
Winter Storm Uri damages clean-room production
SEC filings on Winter Storm Uri show how utility loss can interrupt wafer production and how power-market effects can create a separate financial shock.
United States
British Columbia loses road, rail, and fuel simultaneously
British Columbia's 2021 flood records show how coupled road, rail and fuel-corridor failures can interrupt workers, inventory and daily trading at once.
Canada
Cyclone Fani put productive losses on smallholders, telecoms, and MSMEs
A Government of Odisha-led Cyclone Fani assessment shows how private smallholders, telecom links and MSMEs can absorb productive losses alongside public recovery work.
India
German floods create an insolvency-law problem
The 2021 flood response shows how a disaster can create a cash-flow and statutory-timing question alongside repair and recovery work.
Germany/Belgium/EU
Kerala floods turned a broad infrastructure event into a concentrated MSME balance-sheet problem
Kerala's post-disaster assessment shows why damaged equipment, inventory and worker access can create concentrated financing needs for small firms.
India
Cyclone Pam's maritime losses cancelled cruise calls and stranded outer-island businesses
A World Bank regional maritime-transport report compiles Cyclone Pam figures showing how small jetties, vessels and navigation aids can become the access layer for tourism and island commerce.
Vanuatu
Hurricane Laura shuts offshore production through evacuation
EIA data from Hurricane Laura shows how a precautionary crew evacuation can reduce offshore output before physical asset damage is known.
United States
Cyclone Idai damages the industrial park, not just shops
Cyclone Idai's Mozambique assessment shows how shared warehouse damage can turn physical repair into a wider liquidity and supplier-recovery problem.
Mozambique
Super Typhoon Mangkhut made insurance lines move together
Hong Kong's official typhoon and claims-survey record shows how property, business interruption, employee, travel and utility claims can correlate.
Hong Kong
Chile's 2010 earthquake showed liquefaction and blackout can hit ports, rail, and industry together
Chile's earthquake record shows how shared transport and power dependencies can delay industrial restart even where one site looks repairable.
Chile
Yellowstone flood preserved reservations but disrupted last-mile logistics
A National Park Service account shows how reservations preserved some visitor demand while concession logistics remained disrupted after flooding.
United States (Yellowstone National Park)
Cyclone damage triggered a vanilla price and market shock
World Bank updates on Madagascar show how concentrated vanilla crop damage can become a price and market shock before any business-specific result is known.
Madagascar
Hurricane Maria exposes sterile-saline concentration
FDA material shows how a geographically concentrated medicines supply can turn a regional hurricane disruption into a public-facing shortage.
Puerto Rico/United States
Flood recovery linked farms, transport, and strategic reserves
World Bank recovery material links farms, transport, water systems and strategic stocks with national recovery priorities and programme outputs.
Bosnia and Herzegovina
Flooded refrigeration causes a chemical fire
A completed federal safety investigation shows how floodwater can disable a refrigeration control and turn a weather event into a hazardous-material emergency.
United States
Nepal earthquake projected a sharp tourism decline
Nepal’s post-disaster assessment projected a sharp tourism decline after trail and heritage damage, showing why destination recovery exceeds one property.
Nepal
Regulated restart: drought-induced canal slots and draft restrictions ration global supply capacity
Panama Canal records show how water scarcity becomes a regulated slot-and-draft constraint that can reshape distant inventory timing and freight cost.
Panama / international shipping
A configuration error exposed sensitive HR dossiers to dozens of managers
A Hamburg regulator's retailer decision shows how access configuration, retention, and sensitive workplace notes can become one connected governance problem.
Germany
Background GPS continues after the app is closed
Canadian privacy findings involving an app's background location collection show how an abandoned business plan can leave a live data practice behind.
Canada
Mobile consent design became a EUR50 million case
CNIL's platform provider decision shows why layered notices and consent design can become the practical object of regulatory scrutiny, not a footer detail.
France / European Union
Alberta flood shut a national beef bottleneck
Alberta’s flood record shows how a regional processor, workforce access and pipeline disruption can combine into a national output constraint.
Canada
Cyclone Freddy cut Malawi output through crop loss, transport damage, and Blantyre disruption
World Bank assessments show how rural crop loss, transport damage and disruption in a commercial city can combine into a wider output shock.
Malawi
Airspace closure without airport destruction
An official aviation record shows how a safety-led airspace closure can turn intact airports into a passenger, cargo and cash-flow disruption.
Iceland/Europe
Bankruptcy turned sensitive data into a transferred business asset
A genetic-data investigation and later SEC filing connect credential stuffing, linked relatives and a completed Chapter 11 asset sale.
Canada / United Kingdom / United States
The building-damage number may describe only half the loss
A joint flood assessment shows why customers, suppliers, working capital and recovery finance belong beside physical damage.
Brazil
Outsourcing the system did not outsource the breach
A Singapore breach decision split consequences between a healthcare data owner and its IT provider, exposing the limits of vendor transfer language.
Singapore
Insurance money can deepen a sibling control fight
A brother's life-insurance buy-sell dispute shows why proceeds, ownership, debt and operating control need one pre-loss map.
South Africa
When the network goes dark, the incident log can become the next data risk
A cyclone connectivity review reveals why offline workarounds need data-minimisation, custody and deletion rules before the network fails.
Australia (Queensland)
A founder breakup can freeze the breach clock
A cofounder document-access fight reveals how privilege, authority and system custody can obstruct a time-sensitive incident response.
Delaware, United States
Illness can turn a trusted friend into the only operating key
A Singapore interim-injunction case shows why friendship, incapacity and sole-signatory status need a continuity map before health changes control.
Singapore
The platform can become the first hostage in a cofounder exit
A preliminary-injunction dispute shows why email, product platforms and records need continuity controls independent of founder status.
Illinois, United States
Thai flood becomes a global hard-drive shortage
Official securities filings show how clustered suppliers and a specialist component can turn local flooding into a global production constraint.
Thailand/global
Tonga's undersea cable becomes a small-business bottleneck
World Bank assessment material shows how cable damage and damaged wharves can combine communications and supply disruption for small businesses.
Tonga
The buyer can inherit the notification work
An FTC order split data-breach consequences between a former owner and buyer, turning privacy diligence into an operating handover.
United States
The cloud region failed when heat defeated redundant cooling
A Google Cloud incident shows how extreme heat, cooling failure and recovery sequencing can reach systems that appear regionally resilient.
United Kingdom / global cloud services
One sibling role can control the estate and the companies beneath it
A Singapore estate dispute shows how executor, director and information roles can combine into practical control across several companies.
Singapore
An open river can still be too shallow for production
German freight data and a chemical-company report show why usable river capacity matters before a route is formally closed.
Germany / Rhine corridor
Ransom-returned data is not an incident scope
A Canadian laboratory breach investigation shows why payment, returned data and regulator findings answer different incident questions.
Canada
A review response can disclose more than the complaint
A health-privacy settlement shows why reputation response authority should be separated from access to customer facts.
United States
Valuation starts with the records the controller can withhold
A four-sibling funeral-home dispute shows why a valuation process needs a defined evidence route before a sale or buyout is proposed.
Louisiana, United States
Wildfire smoke can close an untouched workplace
California's workplace guidance shows how smoke, doors and ventilation can control operations far beyond an evacuation or damage map.
California, United States
A hidden spreadsheet tab turned redaction failure into a safety problem
An ICO penalty notice shows how a hidden spreadsheet tab turned a redaction mistake into a safety and workforce problem.
United Kingdom (Northern Ireland)
Voice deletion promises conflict with model training
A voice-assistant order shows why a deletion request may have a different technical meaning once children's voice and location data feed algorithmic systems.
United States
Before You Hire an Adviser, Write the Decision Question
A disciplined briefing method for defining the decision, evidence, reliance and knowledge transfer expected from a professional adviser.
Cross-market with a UK public-sector commissioning example
The AI inventory that cannot explain its use case
A list of AI tools becomes more useful when it records the decision use, affected people, data path, owner and material-change triggers.
EU framework illustration and voluntary US institutional framework; applicability Not assessed
The Authority Matrix Failed at the Bank Portal
A guide to testing documentary authority, external mandate, digital identity, system roles, approval workflow and recovery as connected layers.
General cross-system method; bank mandate, platform entitlement and corporate authority not assessed
Cash, Runway and Covenants Answer Different Questions
A practical metric dictionary for separating cash position, forecast assumptions, operating runway and contract-specific financing tests.
Cross-market with an Australian government source
The certificate expired exactly when the service needed it most.
A practical second lens for connecting a business-critical certificate or key to its service, owner, lifecycle triggers and replacement evidence.
General operational method informed by US institutional guidance; no reader-specific standard or compliance conclusion
The Cloud Exit Test That Was Never Run
A practical guide to separating a paper exit clause, an export capability and observed evidence from a controlled recovery exercise.
Operational method with an EU Data Act source lead; scope, dates and rights not assessed
A cybersecurity profile is a conversation between the board and the system
A NIST CSF Organizational Profile can expose ownership and trade-offs without becoming a certification, maturity score or legal safe harbour.
Voluntary US institutional framework; no regulated-sector conclusion
Build a Customs-Classification Decision File Before the Shipment
A practical record for connecting product facts, tariff reasoning, rulings and change triggers before a customs code reaches a declaration.
United Kingdom example
The domain was authenticated on paper. The report had nowhere to go.
An evidence-aware guide to assigning ownership around email-authentication records, report routes, exceptions and review triggers.
General operational method informed by US institutional material; no universal or reader-specific duty stated
The domain was live. The organization could not show who could move it.
A domain-control record separates registrar access, registrant and transfer roles, renewal notices, recovery evidence and unresolved legal or IP questions.
ICANN policy context; registrar, registry, country-code and local-law treatment not assessed
Can You Prove the Environmental Claim You Repeat?
A source-to-claim record for checking environmental statements received from suppliers before they reach products, sales material or customers.
United Kingdom with a United States comparison
The export screen cleared. The end-use file was empty.
A passed party screen answers a limited question; the decision file must still preserve end use, end user, destination, route, changes and escalation.
United States institutional illustration; transaction and jurisdiction scope Not assessed
A Freight Invoice Is Not the Whole Event Record
A timeline-based evidence file for separating cargo availability, notifications, operational exceptions, charge calculations and dispute steps.
United States federal maritime example
Every team had timestamps. No one had the same event sequence.
Before relying on a consolidated incident timeline, preserve each log’s source system, event-time field, clock basis, collection time and transformation history.
General source-integrity method informed by United States technical guidance; evidential and legal treatment not assessed
The public signal was specific. The local conclusion was still missing.
A source-bounded guide to separating a public vulnerability signal from asset applicability, remediation choices, exceptions and recheck ownership.
General operational method informed by US institutional material; regulated-sector and reader-specific duties not assessed
The declaration existed. The question it invited had not been answered.
A UK-source-bounded guide separating section 54 framework facts from entity, group and supplier evidence questions that remain unassessed.
United Kingdom source context only; entity, group, turnover calculation, UK-business, evidence adequacy, compliance and forced-labour conclusions unassessed
The Payment System Has a Privileged Account Nobody Owns
A guide to treating privileged payment access as a named operational dependency with evidence, review, recovery and change triggers.
General controls method; bank, platform and sector-specific duties not assessed
From Winning Bid to Working Contract: Preserve the Procurement Handover
A practical handover record for carrying promises, assumptions, owners and evidence from a successful bid into contract delivery.
Cross-market with a UK public-contract example
A Ransomware Playbook Needs a Decision Clock, Not Only a Restore Plan
An evidence-aware guide to separating incident observations, authority, recovery choices, assumptions and specialist escalation in a timestamped decision record.
General incident-decision method; legal, notification, insurance and sanctions duties not assessed
A Related-Party Register Cannot Start at the Board Meeting
A governance guide to mapping relationships, transaction versions, changes, disclosures and unresolved local-law questions before a proposal reaches the agenda.
Cross-market governance method; company-law, listing and accounting applicability not assessed
The service had an administrator. The business did not have a recovery path.
A critical SaaS tenant needs a reviewable account-holder, privileged-role, recovery and handoff record—not confidence in one current login.
General operational method informed by United States institutional guidance; provider and local-law treatment not assessed
The model changed quietly: who notices first?
A versioned change record can separate a vendor announcement from the buyer's tested operational impact, decision and rollback path.
General operational method; contract, privacy and legal scope Not assessed
A Whistleblowing Channel Is Not an Investigation File
A bounded guide to separating receipt, triage, fact-finding, decision, access and unresolved legal questions in concern records.
EU framework example; national implementation, entity scope and protected status not assessed
A battery passport is not a supplier spreadsheet
A battery-passport project needs a governed product and lifecycle data path, not a supplier file detached from category, version and correction authority.
European Union battery framework; category and role Not assessed
Digital product passports begin as data ownership questions
Before treating a data carrier as the solution, map which product rules apply and who creates, validates, updates and corrects each data element.
European Union framework; product-specific scope Not assessed
DORA's subcontracting question: which critical service actually moves?
A DORA-related subcontracting map should connect an ICT service to its function, sub-provider, change route and exit dependency without assuming every vendor is in scope.
European Union financial-sector framework; entity, service and criticality scope Not assessed
The Digital Identity Wallet Question: Who Becomes the Relying Party?
A regulatory-radar guide to mapping role, purpose, user journey, requested attributes, evidence, data boundaries and change governance before integration.
European Union framework; Member State rollout, role and sector treatment not assessed
Forced-labour due diligence: what can your product file actually show?
A product file should preserve source, supplier, product and corrective-action records without turning incomplete evidence into a conclusion about forced labour.
European Union framework; product and operator applicability Not assessed
NIS2 supply-chain risk is not a vendor questionnaire
A supplier questionnaire can inform a NIS2-related review, but scope, supplier criticality, evidence, ownership and national implementation remain separate questions.
European Union directive framework; national law and entity scope Not assessed
Packaging Data: When a Sustainability Claim and a Product File Diverge
A source-aware method for connecting packaging facts, supplier statements, public wording, product versions and review decisions without claiming substantiation.
European Union framework example; product, market, date and claim treatment not assessed
The product changed after sale. The product file did not.
An EU-source-bounded analysis separating PLD liability from CRA cybersecurity while preserving version, evidence and unresolved product questions.
European Union source context only; product, role, market, national implementation, safety, defect, conformity, liability, reporting and recall outcomes unassessed
Open-Source Notices Are a Delivery Dependency
A release-evidence guide for connecting shipped components to licence records, notice treatment, named owners and visible exceptions.
Cross-market software-release method; licence and distribution effect not assessed
The report arrived. The organization still did not know what it had decided.
A vulnerability-disclosure channel needs a bounded handoff from receipt to triage, communication, technical assessment and remedial decision.
United States federal guideline context; private-sector and other-jurisdiction treatment not assessed
The release looked routine—until the question became, ‘Who accepted this change?’
A software build result is one release input; the decision record preserves the version, evidence, exception, owner, rollback condition and next review.
General operational method informed by United States institutional guidance; applicability not assessed
Sanctions Screening Has an Ownership Blind Spot
A bounded guide to preserving identity, screening provenance, ownership questions, transaction context, changes and escalation without calling a result clearance.
United States sanctions-programme example; applicability not assessed
The vendor has an SBOM. Do you have a decision record?
An SBOM can identify software components, but an owner still needs a versioned record of receipt, review, exceptions, changes and incident use.
General operational method; no jurisdiction-specific conclusion
AI Vendor Contracts: Trace Data, IP and Open-Source Dependencies
Map what enters an AI service, what the vendor may retain or reuse, what leaves it, and which software and licence dependencies remain hidden.
Cross-market
Assignment and Change of Control: Map Consent Before the Deal
Distinguish assignment, novation, subcontracting and ownership change before a transaction activates consent, notice or termination rights.
Cross-market
Automatic Renewal Clauses: Find the Notice Window Before It Closes
Map renewal dates, notice mechanics, price changes and cancellation evidence before a quiet rollover becomes another fixed commitment.
Cross-market
Business Messages as Evidence: Retain Context, Not Chaos
Preserve decisions, approvals and dispute context across email, chat and personal devices without turning indefinite retention into a second risk.
Cross-market
Customer Concentration, MFNs and Volume Commitments: Map the Hidden Leverage
Trace how concentrated revenue, parity promises, minimum volumes and renewal mechanics can turn one commercial relationship into structural leverage.
Cross-market
Incoterms, Title, Risk and Cargo Insurance: Four Different Questions
Map delivery, risk transfer, ownership, payment and cargo cover separately before an international shipment exposes the gaps between them.
Cross-market
Liability Caps, Indemnities and Insurance: Find the Mismatch
Test whether contractual exposure, indemnity procedure and available insurance actually align before a claim reveals three different limits.
Cross-market
EU CBAM Definitive Phase: The 50-Tonne Threshold Is Not a Shipment Exemption
A 2026 CBAM trigger map for EU importers, covering the definitive phase, the annual 50-tonne threshold, authorisation and the first declaration.
European Union
EU CSDDD After the 2026 Simplification: Scope, Supply Chains and Timeline
A current CSDDD map after Directive (EU) 2026/470, separating the new thresholds and 2029 application date from supplier-request pressure.
European Union and Member State implementing laws
EU Deforestation Regulation: Scope and Deadlines After the 2025 Changes
A current EUDR trigger map for operators, traders and downstream businesses, including the December 2026 and June 2027 application dates.
European Union
EU GPSR for Online Sales: Product Listings Are Part of the Safety File
A practical General Product Safety Regulation map for online sellers, importers and marketplaces, covering listing data, responsible persons and evidence.
European Union
EU Packaging Regulation: What Applies Now and What Waits Until 2028–2030
A dated PPWR milestone map for packaging manufacturers, importers, brands and online sellers after the Regulation’s 12 August 2026 application date.
European Union
Corporate Transparency Act BOI in 2026: U.S. Companies Are Exempt
A current FinCEN BOI map separating the operative March 2025 rule from the August 2026 final rule awaiting Federal Register publication.
United States — federal
European Accessibility Act: What E-Commerce SMEs Should Check Now
A scoped guide to the European Accessibility Act for consumer e-commerce, including the service microenterprise exemption and national-law limits.
European Union and Member State implementing laws
EU AI Act in 2026: Which Deadlines Moved—and Which Duties Did Not?
A dated owner’s map of the EU AI Act after the 2026 AI Omnibus, separating live transparency and GPAI rules from delayed high-risk duties.
European Union
EU Cyber Resilience Act: The 2026 Reporting Clock and 2027 Readiness
A practical CRA preparation map for digital-product businesses, separating September 2026 reporting from the December 2027 main obligations.
European Union
EU Data Act: Connected-Product Data and Cloud Switching in 2026
What business owners should verify under the EU Data Act now, before the connected-product design and cloud switching milestones arrive.
European Union
US Privacy and Cyber in 2026: Build a Trigger Map, Not One Checklist
A business-owner map of selected U.S. federal and state privacy and cyber triggers, including California’s 2026 rules and DROP duties.
United States — selected federal, California and Texas authorities
The business continuity plan that depended on the missing person
A practical continuity guide for revealing key-person and platform dependencies, testing recovery paths and reducing single points of failure.
Cross-market
Supplier Change Control: Sanctions, Export, Tariff and Logistics Blind Spots
A practical change-control design for supplier, origin, ownership, routing and payment shifts that can alter trade risk after onboarding.
Cross-border trade, with selected United States authorities
UFLPA Import Risk: Can Your Supply Chain Produce Shipment-Level Proof?
A practical UFLPA evidence map for U.S. importers, covering the rebuttable presumption, traceability records, supplier controls and detention readiness.
United States
Business Disputes Rarely Start with a Lawsuit: Five Early Signals
Five early business-dispute signals and a calm evidence-first response for clarifying facts, preserving options and seeking help at the right time.
Cross-market
The Contract Is Not the Whole Deal: Map Hidden Dependencies Before You Sign
A practical contract-risk guide for finding operational dependencies, undocumented assumptions and exit gaps before they become expensive surprises.
Cross-market
The liability that left the company—but stayed with the founder
Trace personal guarantees, security, cross-defaults and releases before assuming a founder's resignation or share sale ends personal exposure.
Cross-market
Counterparty Due Diligence: A Practical Pre-Deal Check
A proportionate counterparty due-diligence guide for verifying identity, authority, capacity, dependencies and open questions before committing.
Cross-market
When a Founder Cannot Continue: Exit, Death and Incapacity
A continuity map for separating ownership, authority, access, funding and succession when a founder leaves or can no longer act.
Cross-market
Minority Protections Without Decision Paralysis
Design proportionate information, voice, economic and exit protections without turning every business decision into a veto.
Cross-market
50/50 Deadlock: Design the Way Through Before Conflict
A practical deadlock architecture for equal owners: define the trigger, preserve operations, escalate with evidence and make exit mechanics usable.
Cross-market
Sweat, Cash and Promises: Make Founder Equity Legible
Separate founder contributions, issued equity, vesting, loans and informal promises before different expectations harden into a dispute.
Cross-market
Who Gets to Decide? A Founder's Map of Decision Rights
Map founder, director and shareholder decision rights before a disagreement reveals that ownership, authority and control are not the same thing.
Cross-market
The Cap Table Is Not the Deal: What a Shareholder Agreement Must Decide
A practical map of the governance, funding, transfer and exit decisions that ownership percentages alone cannot answer.
Cross-market