Why 2026 is the year to invest in your strategic resilience

In 2011, the company my family built — Philkeram Johnson, founded in Thessaloniki in 1961, at its peak Greece's largest ceramic tile manufacturer and a partner to Norcros PLC in the United Kingdom — became insolvent. At its 2007 peak, it generated EUR 55 million in revenue, employed 400 people, and supplied construction projects across the UK, the Middle East, and the 2004 Athens Olympics. By every financial metric the auditor used, it had been a healthy company three years before it died. The crisis everyone remembers arrived in 2010. The decisions that made it fatal had already been made by 2007 — when capital expenditure was being deployed for EBITDA growth instead of for what was actually needed. I built Navos because in 2007, no one was measuring what mattered. This article is about what we should measure instead.

What does "investing in growth" actually mean — and what does it leave out?

Every strategy deck tells mid-market CEOs to invest in growth, and growth in practice means EBITDA: more revenue, better operating leverage, lower unit cost — which is real, measurable, and rewarded by markets, but which leaves out the single variable that determines whether a company survives the downside.

When a CEO sits down with the CFO to build the five-year plan, the first line of the spreadsheet is revenue. The second is gross margin. The third is operating margin. From there the model branches into capacity investments, sales hires, marketing spend, new product lines. Every one of these decisions is a capital allocation choice, and every one is measured against the same yardstick: how much EBITDA does this euro buy us next year and the year after?

This is a legitimate and disciplined way to run a business. The mid-market companies that master EBITDA modelling outperform the ones that do not. But EBITDA is half the picture, and the other half is not on the plan.

The missing half is structural risk: the probability that the business experiences permanent impairment — not a bad quarter, not a difficult year, but sustained damage that destroys equity value — over any given five-year window. Every CFO computes this for the bank when credit lines get renegotiated. Every public-company CFO sees it in the credit rating. Almost no mid-market CEO sees it on the strategic plan, because nobody has built a way to compute it that a non-bank business can use.

The cost of leaving it off the plan is subtle. In good years it is invisible. In the years when it matters, it is fatal. Growth investments multiply expected value; resilience investments reduce expected loss. A company that maximises the first without touching the second ends up, on paper, on an upward trajectory — and yet faces a distribution of outcomes in which the worst cases are structurally unsurvivable.

The next section defines the missing metric. The section after that explains how to compute it. The section after that names a real company whose financial statements said it was healthy and whose structural profile said it was already dead.

Why isn't probability of default already on your strategic plan?

Because most CEOs treat default as a binary — "we won't go bankrupt" — instead of as a continuous variable to manage, even though banks compute probability of default constantly and CFOs of public companies report it via credit ratings.

The binary framing is natural. A CEO who has built a profitable, growing business spends zero time thinking about whether the business will fail next year. The question feels absurd on its face. Of course it will not fail. The evidence — revenue growth, customer retention, a bank willing to extend credit — all argues for continuity. A probability-of-default exercise feels like a morbid indulgence, the strategic equivalent of writing one's own eulogy.

The binary framing is also wrong. Every business has a non-zero probability of structural impairment in any given year, and the probability is not small for mid-market companies. Roughly ten percent of large publicly-traded companies are identified by major consulting studies as outperformers through the last downturn — which means ninety percent were not. For mid-market companies the distribution is worse, because smaller firms have thinner buffers and fewer levers to pull.

A bank knows this. When a bank underwrites a loan to a mid-market business, it assigns the business an internal credit score that translates to a probability of default. The score is updated continuously. The interest rate the bank charges reflects the score directly. This is not a theoretical framework — it is the operational machinery that governs whether the business can access capital and at what price. The bank shares the result with the business only indirectly, via the rate it quotes.

The CFO of a public company sees the number explicitly. Credit rating agencies publish probabilities of default for every rated issuer. The CEO reads the rating and knows, roughly, where the company sits on the distribution. Nobody pretends the number is irrelevant.

Mid-market CEOs see neither the bank's internal score nor a published rating, and so they build their strategic plans as if the probability of default is zero. It is not zero. It is the most important number missing from the plan.

How can a mid-market CEO actually compute their probability of default?

The Navos Resilience Score is a 0–100 number that, at its core, is a probability-of-default model expressed on a comparable scale: a score of 58 means the company survives fifty-eight percent of probability-weighted shock scenarios across three severity tiers without structural damage.

The closest existing precedent is the Basel III stress-testing framework, which banks use to certify that their capital buffers survive adverse scenarios. Basel III defines three severity tiers — normal stress, severe stress, and crisis — and requires banks to hold capital sufficient to withstand each tier with specified probability. The tiers have canonical shock definitions, the frequencies are calibrated from historical data, and the output is a single number that credibly summarises the bank's structural capacity.

The Resilience Score adapts this machinery to non-bank businesses. The tiers are the same. The shock library is adapted to a mid-market company's actual exposures — input costs, demand, supplier concentration, financial access, regulatory environment, technology disruption, climate risk, and the compound shocks that activate several of these at once. Each scenario is applied to the company's P&L model and exposure map, and the engine records whether the company survives or experiences structural damage. The score is the probability-weighted percentage of scenarios survived.

The output translates into a band:

Score	Band	What it means
0–25	Critical	Structurally fragile. A single moderate shock causes structural damage. Immediate action required.
26–45	Vulnerable	Survives individual shocks but fragile under compound stress. Two to three structural improvements needed.
46–65	Developing	Survives most individual and some compound shocks. Key vulnerabilities remain but the company has levers.
66–80	Resilient	Survives most compound shocks. Structural defenses are in place. The company can weather a severe cycle.
81–100	Antifragile	Survives nearly all scenarios including severe compounds. Diversified, flexible, buffered. Rare for mid-market.

The bands map directly to intuitive CEO questions. A Critical company cannot survive a bad quarter. A Vulnerable company survives individual shocks but breaks on compound events. A Developing company has key vulnerabilities but can act on them. A Resilient company has already done the structural work. An Antifragile company has margins no mid-market business will see without a structural advantage the rest of the segment lacks.

A mid-market score in the forties or fifties is not unusual. A score above sixty-five is rare. This is the foundation of how we build a Navos strategy review for a mid-market business: the score is the diagnosis, and every downstream initiative — every capex decision, every hire, every new channel — is weighed against whether it moves the score up, down, or sideways.

The next section catalogs what those scenarios actually are.

What scenarios should the score test against?

Eight categories of shock, derived from historical precedent and structured so every company is tested against the same standardized library: input cost shocks, demand shocks, concentration crystallization, financial shocks, regulatory shocks, technology disruption, climate and natural disaster, and compound shocks.

The library is designed around a single observation: companies rarely die from a single adverse event. They die from combinations. A forty percent input cost spike is survivable with indexed pricing or a cash buffer. A thirty percent demand contraction is survivable with idle capacity and cost flexibility. A credit tightening is survivable with liquidity. Any of these alone, for most mid-market businesses, is manageable. But the compound event — two or three of them arriving at once, with the buffers already consumed by the first — is what produces structural damage. Compound shocks are the category that matters most, and they get weighted accordingly.

The eight categories, with the historical precedents that calibrate each:

1. Input cost shocks. Primary input price spikes. Mild = +20% sustained three months, the kind of commodity volatility every manufacturing business sees. Moderate = +40% sustained six months, the 2021 aluminium cycle. Severe = +80% sustained twelve months, the 2022 European gas crisis that rendered energy-intensive manufacturers structurally unprofitable.

2. Demand shocks. Revenue contraction from market decline. Mild = -15% for six months, a sector slowdown. Moderate = -30% for twelve months, a recession. Severe = -50% for twenty-four months, which matches what Greek construction experienced from 2008 to 2013, where peak-to-trough contraction approached 90% per ELSTAT data.

3. Concentration crystallization. A single point of failure activates. The largest customer leaves, taking their share of revenue with them. The primary supplier raises prices thirty percent or fails entirely. The top commercial salesperson departs and takes their book with them. The severity of a concentration shock equals the concentration percentage — a 47% supplier concentration means 47% of supply at risk.

4. Financial shocks. Access to capital or cash flow disruption. Banking lines pulled, credit refinancing blocked for twelve months, a 20%+ adverse currency move, or the extreme case: capital controls. Greece in June 2015 closed banks for twenty days, imposed a EUR 60 per day withdrawal limit, and maintained some form of capital controls for four years. Mid-market businesses that were unprepared had no playbook.

5. Regulatory shocks. Compliance cost or market access disruption. An EUR 50K to 500K compliance investment required within twelve months. Examples from the current decade: CBAM for energy-intensive manufacturers, EUDR for wood products. Or a certification requirement that locks the company out of an export market until it complies.

6. Technology and disruption shocks. Competitive obsolescence or forced transition. A competitor adopts automation that cuts unit cost thirty percent. A substitute material emerges. An AI adoption gap opens between the business and its faster rivals. The question is not whether the technology arrives — it always does — but whether the company can adapt within twelve months.

7. Climate and natural disaster shocks. Physical and transition risk. Facility damage from flood, fire, or earthquake. Supply chain disruption from extreme weather. Carbon pricing that makes a process uneconomic. Rising insurance costs that reprice an entire cost base. The 2023 Thessaly floods disrupted supply chains across Greek agriculture within a single week.

8. Compound shocks. The ones that actually kill mid-market companies. Not separate scenarios but pairwise and triple combinations from categories one through seven. Companies that survive individual shocks die from compound shocks. The score measures compound shock survivability above all else, and the weight assigned to compound scenarios in the composite is the highest of any tier.

How often does crisis actually arrive — and why the European average is wrong?

Every three years in Greece, every ten to fifteen years in Western Europe — and the Western European stress-testing frameworks that mid-market CEOs implicitly inherit underestimate frequency by a factor of four to five for southern European businesses.

The empirical record for Greece since 2008 is unambiguous. Six severe-to-crisis-level events in seventeen years:

Year	Event	Severity
2008	Global financial crisis	Severe
2010–2013	Greek sovereign debt crisis (GDP contracted 9.9% cumulatively, per ELSTAT)	Crisis
2015	Capital controls (banks closed for 20 days, EUR 60/day withdrawal limit, restrictions persisted four years per Bank of Greece records)	Severe
2020	COVID economic freeze	Severe
2022	European energy crisis (TTF natural gas spot prices spiked roughly tenfold per Eurostat)	Severe
2025–2026	Iran escalation	Severe

One severe event every three years, not the ten to fifteen year frequency that Western European frameworks assume. A Greek mid-market business that builds its strategic plan against the Western European frequency assumption is planning for a world that does not exist.

The Basel III three-tier severity model, which informs most international stress-testing practice, presumes severe stress events roughly every ten to fifteen years for OECD economies on average. That average is accurate for Germany, France, and the Nordics. It is not accurate for Greece, Portugal, southern Italy, or any southern European economy that sits in the structural periphery of the eurozone. The average smooths over a distribution that has a very different shape at each end.

The implication for the Resilience Score is direct. The Score calibrates against the actual frequency of the operating geography, not a pan-European average. A Greek company at 58 and a German company at 58 face the same expected probability of structural damage over any five-year window — but the Greek company achieves that score by being structurally more resilient, because it faces more frequent shocks. The number is comparable across geographies precisely because the calibration is not.

This is not a criticism of Basel III as a standard. Basel III is calibrated for the banking sector, not for mid-market manufacturing, and the frequency assumption reflects OECD averages rather than southern European empirical reality. The Resilience Score simply extends the apparatus to a different population with different exposure data.

What is the most dangerous quadrant for a mid-market CEO?

The most dangerous moment for a mid-market CEO is when nothing looks wrong. Pulse favorable, Resilience low — the only window in which structural change is possible, and the urgency is absent precisely because nothing looks wrong.

The framing: the Navos Pulse is the weekly operating environment briefing that measures external conditions in real time — geopolitical signals, commodity cycles, regulatory shifts, competitive moves. The Resilience Score measures internal structural capacity, as described in the preceding sections. Cross-referencing the two produces four quadrants:

• Pulse green + Resilience high. Comfortable, but rare for mid-market. The company has both a favorable environment and the structural capacity to absorb a downturn when it arrives.
• Pulse green + Resilience low. The most dangerous quadrant. The environment is favorable, the books look healthy, the competitive position feels secure — and the company has no structural defenses if any of that changes. This is where most mid-market businesses live most of the time.
• Pulse red + Resilience high. Survivable. The defenses were built before the crisis arrived. The company weathers the event and often emerges with market share gains from competitors who did not prepare.
• Pulse red + Resilience low. Fatal, with rare exceptions. The window to build structural defenses has closed. The company has no levers. The question is not whether structural damage occurs but how much.

The reason the Pulse-favorable + Resilience-low quadrant is most dangerous is operational, not symbolic. Structural change — geographic diversification, supplier qualification, new channel development, energy hedging, pricing mechanism revision — requires two to three years of capital investment. By the time the Pulse turns red, most of that investment has to have already been made. A CEO who waits until the environment deteriorates to start building resilience is running an investment program with a lead time the market will not give them.

The urgency absent from the favorable quadrant is exactly what makes it fatal. A CEO who feels no pressure to build structural defenses does not build them. The next section explains how to change the incentive at the per-initiative level.

How should resilience change the way you prioritize initiatives?

Every investment now has two returns instead of one: an EBITDA impact and a default-probability impact, and the second return is computable on the same EUR axis as the first using the formula resilience_points × annual_revenue × structural_damage_probability_change.

The operational implication of the Resilience Score is direct: every initiative inside a Navos strategy review carries two values, not one. The first value is the EBITDA impact the CFO already computes — the incremental margin, revenue, or cost reduction the initiative produces. The second value is the default-probability reduction the initiative delivers, translated into expected EUR value of avoided structural damage.

The formula:

resilience_points_gained × annual_revenue × structural_damage_probability_change = expected EUR value per year

A worked example. A Greek mid-market business at EUR 4 million annual revenue, currently scoring 38 on the Resilience Score (Vulnerable band, approximately 5% annual structural-damage probability), considers a supplier diversification initiative. The initiative reduces a 47% supplier concentration to 30% by qualifying a secondary supplier over twelve months. The modeled impact on the score: +12 points, taking the company from 38 to 50 (Developing band, approximately 3% annual structural-damage probability). The reduction in structural-damage probability is 2 percentage points.

The calculation:

12 points × EUR 4,000,000 × 0.02 = EUR 80,000 per year

The EUR 80,000 is the expected value of avoided structural damage. It is comparable on the same axis to the EBITDA impact of any growth-oriented initiative. The CFO who treats this number as real — as real as the projected margin from a new product line or the cost reduction from a hiring freeze — now has two axes on which to evaluate every capital allocation decision.

Three worked examples at three very different profiles:

• Indexed pricing mechanism. A business that currently has annual price reviews with customers moves to a quarterly indexed pricing mechanism. EUR 290,000 of recovered margin in year one (the pass-through captures input cost increases the company was previously absorbing) AND +8 resilience points (because pass-through flexibility makes more shocks survivable). Scores positive on both axes. This is the kind of initiative every CEO loves, because it wins on the metric the CFO already tracks.
• Supplier diversification. EUR 0 of direct margin impact in year one — the new supplier is more expensive than the incumbent, and the qualification cost is a one-time charge. But +12 resilience points, because reducing concentration from 47% to 30% makes concentration-crystallization scenarios survivable. Scores zero on the EBITDA axis and high on resilience. Without the second axis, this initiative would never make the strategic plan. It looks like a cost center. It is, in fact, the highest risk-adjusted EUR value move available to most mid-market businesses.
• Product line extension. EUR 80,000 of incremental revenue from extending a core product line into an adjacent use case for the existing customer base. Zero resilience points, because more revenue from the same market and channel does not improve structural flexibility — it deepens the existing exposure. Scores well on EBITDA, zero on resilience. This is the category of initiative every growth-oriented CEO has been trained to favor, and the category the Resilience Score reveals as a non-improvement of structural capacity.

The CEO who measures only the first return prioritizes the third example over the second. The CEO who measures both correctly prioritizes the second.

Resilience is not a cost. It is a return on capital. And it belongs on the same line of the strategic plan as the EBITDA initiatives that currently dominate it.

Case study: what would the Resilience Score have said about Philkeram Johnson in 2007?

In the Vulnerable band, around 30 to 35 out of 100 — because PJ had EUR 55 million in revenue and four hundred employees and was profitable and had three years of capital expenditure ahead of it that would all reinforce existing exposure rather than reduce it, and the financial statements never said so.

Between 2000 and 2008, Philkeram Johnson invested approximately EUR 25 million in capital expenditures. None of that capex went into the things that would have saved the company. Every euro reinforced existing exposure: more domestic capacity, more product lines, more fixed-cost depth in a single geography. The capex grew EBITDA year over year. It also destroyed optionality. The case below is what happens when EUR 25 million of optionality is real and is deployed for the wrong outcome.

Philkeram Johnson's 2007 structural vulnerabilities, mapped against the Resilience Score's input dimensions:

• Geographic concentration: ~70% domestic Greek market. A Greek demand shock equalled 70% of revenue at risk. When Greek construction collapsed roughly 90% between 2008 and 2013, the hit fell directly on the largest slice of the order book. Exports to twenty-nine countries sounded impressive but covered only thirty percent of volume.
• Energy intensity, unhedged. Natural gas was roughly ten percent of COGS for a kiln-dependent manufacturing process. With no hedging in place, an energy cost spike translated directly into margin compression that could not be passed through to customers. The 2008 energy cycle alone was enough.
• Heavy fixed-cost manufacturing base. High breakeven utilisation on the production lines. A demand drop triggered a utilisation death spiral rather than a margin compression. At fifty percent of capacity the company lost money on every unit.
• Full-line manufacturer. Maximum product breadth meant maximum fixed-cost commitment. There was no ability to retreat to a profitable niche when volumes collapsed.
• No retail channel. Sold exclusively through construction channels. When Greek construction collapsed, the channel collapsed with it. The company had no direct route to end customers and could not pivot.
• Pricing rigidity. Construction-sector pricing did not allow cost pass-through during market decline. Margin compression was unrecoverable once the cycle turned.

What actually happened, between 2008 and 2011: Greek construction collapsed roughly 90%, natural gas costs rose materially, and Greek banks stopped extending credit in the teeth of the sovereign debt crisis. None of the three shocks would have been individually fatal for a diversified mid-market manufacturer. The combination was unsurvivable. Philkeram Johnson filed for bankruptcy in November 2011.

The retroactive score, applied to the 2007 exposure map: Vulnerable band, 30 to 35 out of 100. Well inside the zone where a moderate compound shock causes structural damage.

What would have changed the outcome — at that 2007 score: any two of the following would have moved PJ from Vulnerable to Developing, and all four would have made the company Resilient.

• Geographic diversification to fifty percent or more export revenue. Reduces demand shock severity directly.
• Own retail stores providing retail-margin revenue that survives wholesale channel collapse.
• Energy hedging or outsourced commodity-intensive production steps. Reduces energy exposure.
• Specialisation in premium design tiles to reduce the fixed-cost base and increase pricing power.

None of these required capital Philkeram Johnson did not have. The company invested EUR 25 million in capex between 2000 and 2008 — every euro was deployed in the wrong direction. The decision window was 2005 to 2007. The crisis point was 2010. By the time the Pulse turned red, the structural changes that would have saved the company required two or three years of investment that no one had any longer.

Source: founder's direct knowledge from Philkeram Johnson family records, cross-referenced against public reporting on the company's 2008–2011 decline and the Wikipedia entry on Philkeram Johnson, which confirms key dates (founded 1961 in Thessaloniki, peak 2007 at EUR 55 million in revenue, 400 employees, and 4.5 million square metres of annual production), the Norcros PLC partnership via the 1969 H&R Johnson merger, and the 2008–2010 revenue collapse from EUR 30 million to EUR 14 million.

What should you do this quarter — while your decision window is still open?

Three concrete moves, framed as capital-allocation discipline rather than strategy advice.

1. Compute or commission your probability of default. Not as an after-the-fact diagnosis but as a forward-looking line item on the strategic plan. If you do not have an internal model, you have three options: ask your bank for the probability of default they price into your credit lines (they have one, and they will share it if you ask), commission an external assessment, or use a structural-resilience scoring system designed for mid-market businesses. The specific mechanism matters less than the outcome: the number must exist on the strategic plan in a form your CFO can update each quarter.

2. Look at your last three capex decisions and ask whether each one reduced your probability of default. Capacity expansion in your existing geography? Probably not. Sales hiring in your existing channel? Probably not. Product line extension in your existing customer base? Almost certainly not. These are EBITDA investments. They are legitimate uses of capital. They are also not resilience investments. If all three of your most recent capex decisions were in the first category, your decision window is open and you are not using it.

3. Find the highest risk-adjusted EUR value initiative on your business that does not appear on your current strategic plan. Use the formula from the previous section. Compute the expected value of any initiative that reduces a single-point-of-failure exposure: supplier diversification, geographic expansion in any form, energy or input hedging, channel diversification, pricing mechanism revision. Multiply the resilience-point gain by annual revenue and by your current structural-damage probability. The number you get is the EUR value of an initiative your strategic plan currently treats as zero — and it is comparable on the same axis to whatever EBITDA-growth initiatives are at the top of the plan.

The window for these decisions is now. By the time the next severe event arrives — and the empirical record says it will be within three years for a southern European business — the structural changes that would have absorbed it require investment that no one will have. That is the lesson my family's company learned at the cost of its own existence. The point of writing this article is that no other mid-market company should have to learn it the same way.

Frequently asked questions

How does investing in resilience reduce a mid-market company's probability of default?

By increasing the number of adverse scenarios a company can survive without structural damage. Every initiative — supplier diversification, indexed pricing, geographic expansion, energy hedging — has a measurable expected value computed as resilience_points × annual_revenue × structural_damage_probability. For a EUR 20M mid-market business with a current structural-damage probability of 5% per year, an initiative that lifts the resilience score by 12 points reduces that probability by approximately 2 percentage points, which has an expected EUR 80,000 per year in avoided structural damage. Resilience investment is therefore a return on capital, comparable on the same axis as EBITDA growth investment.

What is the Navos Resilience Score?

A 0–100 number that measures the percentage of probability-weighted shock scenarios a company survives without structural damage. The score is computed from a standardized library of approximately 30 scenarios across eight shock categories, weighted by geographic frequency. Bands run from Critical (0–25, structurally fragile) through Vulnerable (26–45), Developing (46–65), Resilient (66–80), and Antifragile (81–100, rare for mid-market). The score sits alongside the Navos Pulse, which measures the external operating environment in real time; the dangerous quadrant is Pulse favorable + Resilience low.

How often do southern European mid-market companies face severe structural shocks compared to Western Europe?

Every three years in Greece, versus every ten to fifteen years in Western Europe — a difference of roughly four to five times. Greece has experienced six severe-to-crisis-level events in 17 years: the 2008 financial crisis, the 2010–2013 sovereign debt crisis (GDP contracted 9.9 percent cumulatively), the 2015 capital controls (banks closed for 20 days), the 2020 COVID economic freeze, the 2022 European energy crisis, and the 2025–2026 Iran escalation. Western European stress-testing frameworks like Basel III assume severe events every 10–15 years, which underestimates Greek frequency by a factor of four to five.

How can a mid-market CEO compute the expected EUR value of a resilience investment?

Multiply the resilience-point gain from the investment by the company's annual revenue and by the current annual probability of structural damage for the company's resilience band. For example: a Greek mid-market business at EUR 4M annual revenue, currently scoring 38 (Vulnerable band, ~5% annual structural-damage probability), considering a supplier diversification initiative that improves the score to 50 (Developing band, ~3% annual structural-damage probability) — the calculation is 12 points × EUR 4M × 0.02, which is EUR 80,000 per year of expected value in avoided structural damage. This number is comparable on the same EUR axis to the EBITDA impact of any growth-oriented initiative.

What killed Philkeram Johnson?

Three simultaneous moderate shocks between 2008 and 2011 — a 90% collapse in Greek construction demand, a 50% rise in natural gas costs, and a credit freeze from Greek banks — combined with structural vulnerabilities accumulated over the prior decade: roughly 70% domestic Greek market concentration, energy intensity with no hedging, a heavy fixed-cost manufacturing base, no retail channel, and pricing rigidity that prevented cost pass-through. None of the shocks would have been individually fatal. The combination was unsurvivable. The decisions that made the combination fatal — approximately EUR 25 million of capex deployed between 2000 and 2008 into reinforcing existing exposure rather than reducing it — were made years before the crisis arrived.

---

In 2007, Philkeram Johnson's financial statements said the company was healthy. They were measuring the wrong thing. By the time the metric that mattered turned, the structural changes that would have saved the company required two or three years of investment that no one had any longer. The Resilience Score is what I wish someone had handed my father. Navos exists to hand it to other CEOs while their strategic window is still open — because that is the only window in which it matters.