What your business needs to survive and thrive

Defining your Minimum Viable Company

Main decorative image
  • Insight
  • 9 minute read
  • October 01, 2026

When everything is treated as critical, nothing truly stands out. The Minimum Viable Company is the essential core that has to survive disruption—and the perspective that turns resilience into a practical platform for ongoing transformation.

Minimum viable company (MVC) helps you define the minimum set of capabilities you need to keep operating through disruption and to restore services in a controlled, validated way. It focuses on prioritising critical external-facing services, internal processes and activities, and foundational dependencies, so you can design recovery flows and processes in advance rather than improvising during a disruption. The outcome is clearer guardrails, stronger readiness to mobilise recovery, and greater confidence that you can recover within your outage tolerances.

MVC Defined

Minimum Viable Company is the smallest set of capabilities that must remain operational to keep the organisation viable through severe disruption. It has three components, which together will enable the organisation to deliver its critical strategic outcomes in a crisis.

  • Critical external facing products and services that deliver the outcomes customers, markets, and regulators feel the most when they are missing.
  • Critical internal processes and activities that underpin the license to operate, including safety, payroll, fraud controls, communications, and crisis decision making.
  • Foundational dependencies, including the technology, data, people, third parties, and tier 0 infrastructure on which everything else relies. These reach inside the organisation and beyond it, into cloud and software providers, suppliers, financial market infrastructures, and the public utilities every modern enterprise depends on.

MVC is not a service catalogue, a regulatory submission, or a technology recovery plan. It is the executive view of viability, expressed in mission critical business outcomes, sequenced over the timeline of a crisis, and tested against severe but plausible scenarios.

The Survival Core: Your Minimum Viable Company for Enterprise Resilience

For decades, leaders were rewarded for optimising. Lean balance sheets, just in time supply chains, single vendor technology stacks, global delivery models. The assumption was that the operating environment would remain broadly stable, and that disruption, when it came, would arrive one shock at a time. That world is gone. Disruption is now the operating norm, not the exception. Cyber-attacks that take entire enterprises offline for weeks. Concentrated cloud and software dependencies that can fail without warning. Supply chains exposed to geopolitics. Severe weather and energy disruption that can affect power, fuel, facilities and operations at scale.

Download the whitepaper

These overlapping shocks can arrive faster and harder than most organisations are designed to absorb. When it comes to responding to a major cyber incident, for instance, only 6% of organisations say they are “very capable” across all key areas.

Boards are no longer asking whether disruption will happen. They are asking how resilient you’ll be when it does, and what that resilience is worth. More often, that means asking if resilience investments can be expressed as a return, not just a cost—through revenue protected, capital preserved, regulatory exposure reduced, trust maintained, and recovery sped up. Minimum viable company (MVC) plays a major role in answering these questions for the most severe disruptions.

Know your Survival Core

Resilience has moved out of the back office. It’s now a board-level, value-defining capability that reaches across the whole organisation. MVC isn’t the complete resilience answer, but it’s the right place to start. MVC gives boards and senior executives a clear baseline for protecting viability and deciding where to focus resilience investment.

Five MVC characteristics for boards and senior executives to act on:

If everything is critical, nothing is critical. MVC forces the executive team to agree on the smallest core that must stay running, in what order, and against what risk tolerances.

An MVC enables organisations to prioritise resources toward core services essential for survival and operational resilience. This focused approach reduces financial, regulatory, and reputational risk, allowing recovery teams to restore critical services in a structured way and maintain stakeholder confidence.

By identifying the critical services, dependencies and recovery requirements that matter most, MVC gives organisations a clear baseline for action. Broader operational, cyber, technology, regulatory, strategic, and financial resilience activities can then build from that baseline. MVC alone will not make an organisation truly resilient, but if an organisation does nothing else, this is the place to start.

AI, digital twins, and continuous monitoring can help evolve MVC into a more dynamic, real-time capability that provides greater continuity, recovery speed, and stakeholder confidence. By fully leveraging technology, organisations accelerate MVC definition and enable life raft operations under stress.

Some organisations need to define their MVC for the first time. Others need to affirm their MVC as part of a broader resilience programme that has stalled. All must increasingly coordinate it across companies, sectors, and government bodies, because viability today is as much systemic as it is enterprise level.

When you clearly understand the essential mix of business services, people, technology, data, facilities, suppliers, and decision-making capabilities you need to survive, you have a clear plan to protect value during disruption, maximise the return on your resilience investment, and use this to guide business transformation and create value.

Unlock the Power of MVC

In today’s era of relentless disruption, the question isn’t if your organisation will face a potentially catastrophic crisis—but how resilient it truly is when that moment comes. Are you confident that you understand your Minimum Viable Company—the critical core that must survive to keep your business viable?

If you are, has your organisation started to identify how technology and automation can support you in operationalising the MVC? Leaders are already moving towards automation: for AI agents, the top priority areas include:

39%

Cloud security

39%

Data protection

38%

Cyber defence and operations

These capabilities can help make an MVC continuously visible and actionable.

Source: PwC’s 2026 Global Digital Trust Insights

If you’re ready to take the next step, contact our team to discuss how we can support you in defining and embedding MVC within your organisation.

Don’t wait for disruption to test your limits, build resilience with clarity and confidence today.

The takeaways

  • Define your minimum viable company: the essential outcomes, processes, technology, people, and third-party support you need to stay viable when disruption hits.
  • Focus your enterprise resilience investment on this survival core so you protect value, speed up recovery, and cut financial, regulatory, and reputational risk.
  • Use AI, automation, and continuous monitoring to keep your minimum viable company visible, easy to act on, and matched to changing risks across your organisation and wider ecosystem.

The Survival Core: Your Minimum Viable Company for Enterprise Resilience

Learn more in our whitepaper

Contact our experts

Johannes Dohren

Partner and Leader Cybersecurity, Resilience and Defence, PwC Switzerland

+41 58 792 22 20

Email

Martin Schnatenberg

Director, Risk Consulting, Compliance and Product Compliance, PwC Switzerland

+41 58 792 19 74

Email

Johanna Peterson

Senior Manager, Cyber, Crisis and Resilience, PwC Switzerland

Email