Business continuity planning and management lagged even before COVID-19. Only 38% of organizations were implementing lessons from previous crises to improve risk management capabilities. Enterprise risk management leaders must prioritize business continuity risk management to better protect their organizations from future events.