Thomas Cook, 2019: GBP 885 million in supplier debt. FTI, 2024: EUR 980 million in claims. Post-COVID operator failures, 2025: six operators down in 18 months. Gulf airspace crisis, 2026: 13,000 flights cancelled in a week. Each event was different in cause. Each one exposed the same structural weaknesses in supplier networks. The operators who survived each crisis had built resilience before they needed it.
The problem
The pattern across these events is consistent. When disruption hits, whether from operator insolvency, pandemic restrictions, or geopolitical airspace closures, the operators and DMCs that suffer most share four characteristics. First, concentration: too much revenue or too many bookings flowing through too few supplier or client relationships. Thomas Cook's collapse devastated hotels in Turkey that had allocated 40-50% of capacity to a single operator. Second, documentation gaps: expired insurance, lapsed licences, and unverified operational capabilities that prevent rapid activation of backup suppliers. ABTA's 2024 supplier due diligence guidance specifically warns against treating documentation as a one-time exercise. Third, missing contingency agreements: backup supplier relationships that exist informally but lack the contractual framework to activate under crisis conditions. Fourth, information lag: days or weeks passing between the first signs of trouble and the operational response, because monitoring is manual and fragmented.
Concentration: the risk that keeps repeating
After Thomas Cook, the industry talked extensively about concentration risk. After FTI, they talked about it again. The Gulf crisis added a geographic dimension: operators concentrated on Dubai-dependent routing suffered disproportionately. The data is clear. DMCs that limited any single operator to 25% of revenue survived Thomas Cook and FTI with manageable losses. Those above 40% often faced existential threats. ABTA's post-Thomas Cook guidance recommended a maximum 30% revenue concentration per client. The same principle applies to operators: no single supplier, airline, or routing corridor should represent a dependency that cannot be replaced within a defined recovery timeframe.
Documentation as operational infrastructure
During the Gulf crisis, operators who could activate backup suppliers within 48 hours shared one trait: their supplier documentation was current, verified, and accessible. Insurance certificates, operating licences, safety certifications, and commercial terms were already confirmed for backup suppliers in alternative destinations. Operators who had to start the vetting process during the crisis lost 3-5 days before they could even begin rebooking. Those 3-5 days translated directly into additional cost per customer (GBP 340-520 for prepared operators versus GBP 1,100-2,400 for unprepared ones, based on industry estimates from the February 2026 disruption).
From reactive to anticipatory
The shift from reactive to anticipatory crisis management requires three structural changes. First, continuous monitoring: payment patterns, booking volumes, and filing deadlines tracked automatically rather than reviewed quarterly. Second, pre-positioned agreements: backup supplier contracts that can activate on 48-hour notice, with verified documentation already in place. Third, scenario rehearsal: tabletop exercises that walk through specific disruption scenarios (operator failure, airspace closure, destination closure) at least annually, with findings documented and gaps addressed.
What to do now
Build your crisis-readiness assessment around four questions. One: does any single client or supplier represent more than 30% of your revenue or bookings? Two: for every primary supplier, do you have a vetted backup with current documentation who can activate within 48 hours? Three: are you tracking payment timing and financial health indicators for your top 10 relationships monthly? Four: when did you last rehearse a disruption scenario with your operations team? If you cannot answer all four confidently, start with whichever gap is largest. Resilience is built incrementally, but every gap you close before the next disruption saves real money and real customer relationships.