Issues of sustainability, resilience, and risk management are linked to how the tourism industry and researchers respond to future ICT risk, known as "the year 2038 problem" (Y2K38). The tourism industry coped with similar but smaller risk, the Y2K "millennium bug" but lessons have not been learned. The paper presents an account of the lack of preparedness to ICT bugs and concludes that a cycle of ICT risk management does not always lead to policy actions. The work suggests a proactive approach for addressing potential ICT risks and presents the main steps for coping with Y2K38 and potentially other risks.