Phoebe Goddard

Phoebe is an experienced resilience professional specialising in Operational Resilience, Crisis Management and Business Continuity. She supports organisations to strengthen resilience capabilities, protect critical services and respond effectively to disruption, with experience spanning financial services, retail, healthcare, manufacturing and the public sector. Phoebe combines practical delivery expertise with a collaborative and pragmatic approach, helping organisations design, embed and test resilience frameworks that support both regulatory compliance and organisational objectives.

A significant focus of Phoebe’s work is the design and delivery of crisis management exercises and operational resilience scenario testing. She has led engagements for major global banks, investment firms, insurers and other complex organisations, developing realistic, intelligence-led scenarios that challenge leadership teams and test organisational preparedness. Her experience includes planning, design, facilitation and reporting, ensuring exercises generate meaningful insights and actionable improvements.

Phoebe has extensive experience supporting clients in the development and enhancement of Business Continuity Management (BCM) programmes. She has conducted Business Continuity gap assessments against recognised standards, including ISO 22301, and has designed and led improvement programmes that include creating Business Impact Analyses (BIAs), Business Continuity Plans (BCPs), training materials and crisis exercising plans. Through this work, she has helped organisations establish practical and sustainable resilience capabilities aligned to industry good practice.

In addition to resilience programme delivery, Phoebe has supported organisations recovering from significant cyber incidents. She has worked closely with business stakeholders to identify priority business processes, understand critical dependencies and define recovery priorities to enable a return to minimum operational capability whilst under significant time pressure. This work has included helping organisations establish their Minimum Viable Company (MVC), ensuring critical services can continue to operate during periods of disruption.

Phoebe also brings experience in cyber security controls assessment and transformation. She has conducted maturity and controls assessments against frameworks including the NIST Cybersecurity Framework (CSF) and the Cyber Risk Institute (CRI) Profile, leading stakeholder interviews, document reviews and recommendations development. Her work has included creating transformation roadmaps that provide organisations with a structured approach to strengthening cyber resilience capabilities while balancing cost, effort and implementation dependencies.

‍