Administrative continuity is an institution’s ability to keep decisions, approvals, and services moving without interruption, even during leadership changes, emergencies, or staff turnover. It is not a security control by itself, but it supports the controls that depend on timely human action, such as access reviews, incident approvals, vendor checks, and emergency authorization.
In cybersecurity, weak continuity can create practical gaps: delayed password resets, stalled account revocations, missed escalation decisions, or slow incident response when no one is clearly empowered to act. Attackers benefit from these delays because they widen the window for misuse of accounts, persistence, or fraud. Defenders try to preserve continuity with documented delegation, backup approvers, clear escalation paths, and tested business continuity plans. Strong administrative continuity helps keep governance intact so technical defenses can keep working when the organization is under stress.


