As the coronavirus continues to spread and the World Health Organization labels the COVID-19 outbreak a pandemic, companies need to evaluate their ability to conduct business as usual during this time. Properly assessing this requires revisiting business continuity and disaster recovery plans, as well as specific pandemic plans. This effort will help organizations determine if they can support a greater number of remote workers, gain visibility into their supply chain resilience and gauge the short- and long-term effects of a pandemic on the tech industry. Throughout this guide are links that will help you learn more about preparing for and responding to business continuity planning challenges, such as the coronavirus and other global pandemics.
Why coronavirus is a threat to business
Coronavirus is a family of viruses that has common signs of infection, including respiratory symptoms, fever, cough, shortness of breath and other breathing difficulties. In more severe cases, according to the World Health Organization, "infection can cause pneumonia, severe acute respiratory syndrome, kidney failure and even death."
The COVID-19 map from Johns Hopkins University's Center for Systems Science and Engineering tracks global cases of the virus in real time and provides statistics on confirmed cases and confirmed deaths.
As organizations embark on or revisit their response to pandemics generally and to the coronavirus specifically, Gartner said they should plan for 25% absenteeism, an estimate based on the fallout from other viruses, such as the ones that cause SARS (severe acute respiratory syndrome) and avian influenza.
Businesses should be prepared for disruption to worker productivity, supply chains, travel, product availability, corporate travel and more.
Business continuity and pandemic plans
The last pandemic that threatened businesses in this way was H1N1, or swine flu, which happened a decade ago. Ideally, businesses have been keeping their pandemic plans up to date, testing for business continuity problems. Much has changed since then in how businesses operate, including the rise of remote working, the increased use of software as a service and other cloud-based applications, and just-in-time manufacturing and lean production strategies in supply chains. Also, businesses today are more global in terms of workers, customers, vendors, partners and suppliers, making business continuity and pandemic plans far more complex to test and carry out.
So where should organizations start as they try to get ahead of the coronavirus or prepare for the next pandemic? Organizations should create and execute on a workplace pandemic preparedness plan along with business continuity plans. To familiarize employees and emergency teams with the plan, businesses should conduct exercises annually, if not more frequently. Use this pandemic recovery plan template to get started.
A pandemic impact analysis is critical to understanding how to help your company prepare for and recover from COVID-19 and other such disasters. By filling out this template, business leaders will learn the critical roles, procedures and assets that must be considered as a pandemic unfolds. Getting back to business as usual is going to take a lot of time and patience. Resumption of normal activities will depend on how well you execute your pandemic recovery plan.
Because companies are so dependent on providers across all aspects of their business, they should well understand and have tested providers' pandemic plans. For instance, if the provider's own workforce is affected, it's important to know how the it will maintain high availability of its application or respond to service issues. In many companies, line of business managers are the conduits to service providers; therefore, they must be coached on how to include them in pandemic plans. It's also important for organizations to centralize service-provider relationship information in case the managers themselves are unavailable.
One of the most important elements of pandemic planning, especially when assuming a high absenteeism rate, is to understand how employee skills complement one another. Conducting a skills inventory will illustrate which employees could back up others if they are affected by an illness.
Learn more about business continuity planning.
Scaling up remote working, virtual desktops and collaboration
One of the best defenses a business has for preventing the spread of disease in the workplace is to have a comprehensive remote work strategy that ensures all users can securely access the tools they need to work remotely. This includes access to business systems including HR, payroll, ERP and CRM; unified communications (UC) and collaboration tools; as well as email and file stores.
IT leaders across industries, including pharmaceutical and healthcare, are responding in real time to business and user requests regarding remote work. Read about the challenges of supporting work from home and the possible solutions.
Some companies may have generous work-from-home policies matched to network configurations with enough bandwidth and licenses, but most provision for VPN use by 10% to 20% of staff. They typically don't count on numbers like Gartner's suggested absenteeism rate of 25%. Therefore, a pandemic can easily overload the VPN and affect worker productivity. Learn the essential VPN terminology you need to know.
Expert Paul Kirvan explained how to support a surge of remote workers during a disaster, including how to work with providers to have an emergency strategy in place.
IT needs to understand how user requests will differ in a home environment compared to supporting users in the office. For instance, IT likely will have to allot time to help users with basic tasks, such as setting up home computers and securely connecting to the network.
According to survey results from Nemertes Research, 91% of companies support work from home, up from 63% prior to the coronavirus outbreak. The survey also found that 72% of employees currently work from home, compared to 34% before the pandemic began.
One way to easily support remote workers is the use of cloud-based desktop-as-a-service models. Workers can log into their virtual desktops from anywhere, potentially making supporting a remote workforce more efficient. Read how a California city put the technology to work during a natural disaster and how others expect it to be a productivity savior during the outbreak.
Workers will likely embrace remote work as the new normal, so companies would be wise to invest in UC, including collaboration tools and video conferencing, author Jon Arnold said. Integration considerations should be top of mind for organizations, including if their corporate phone system will work seamlessly with their collaboration tools.
While features, such as virtual backgrounds, for remote users are entertaining, video conferencing must have top-notch security for enterprise usage. Encryption is a major aspect of security that businesses must evaluate, test and monitor to be able to trust the technology as a safe and effective business tool.
IT teams trying to depend on legacy UC architectures might run into trouble with the heavier work-from-home traffic. If so, deploying either a hybrid UC or fully SaaS approach might help resolve issues.
Adjusting bandwidth levels and implementing connectivity upgrades should be considered to help manage video traffic during the surge in work-from-home traffic.
If an organization is going to ramp up its reliance on UC, especially video and voice services, then it must consider three key security threats, including denial-of-service attacks.
Licensing can also cause trouble when businesses are trying to rapidly ramp up usage. Getting a little creative with how applications are used can save some of the licensing complexity and costs of expanding an organization's pools of licenses.
Some businesses already are turning to video conferencing to help fill in for face-to-face meetings. Vendors are responding to this increased need by extending the capabilities of their free offerings. However, as the pandemic continues and employees continue to work from home, organizations must consider the costs of collaboration beyond free introductory offers.
According to Irwin Lazar, the remote work experience is enhanced by video conferencing because it increases engagement among participants.
Employees must be properly trained ahead of a pandemic in how to use UC tools securely, including best practices for connecting to the network and cloud applications from their home networks. Otherwise, they could unknowingly put corporate data at risk. Likewise, IT should make sure business-critical applications are up to date and accessible from remote environments without suffering performance hits or introducing vulnerabilities.
Call centers also can use remote work technology to combat absenteeism challenges they're likely to face due to the coronavirus pandemic. TechTarget contributor Scott Sachs said allowing employees to work from home could keep workers healthy and your call center up and running.
For remote work to be successful, HR must proactively manage remote work procedures and communicate productivity expectations, being realistic that there might be a learning curve for some employees who are less familiar with remote work technology. Contributor Pam Baker offered five tips for HR leaders to successfully manage their organization's coronavirus response.
The key to excellent communication during a pandemic might lie within your HR system and how you utilize it. For instance, an HR system should enable you to keep employees apprised of important changes to corporate policies due to COVID-19.
In another article, Baker explained that HR's response to the pandemic can affect how employees engage with work in a remote environment and how they collaborate with their coworkers.
Everything surrounding the coronavirus is changing rapidly, and it is imperative that employers and HR managers understand the vocabulary of this pandemic. Our glossary is an at-a-glance reference tool to help you stay up to speed with all of the relevant coronavirus terms.
Organizations should expect to see budget shifts to account for a larger remote workforce. Managers should review their spending and prepare for an increased investment in technologies that support high-performance and secure work-from-home strategies.
Supply chain risk
Pandemics wreak havoc on supply chains because they can force factory shutdowns, delay shipments and create workforce shortages. Experts warned that the impact of coronavirus on the global supply chain would worsen in the second quarter of 2020 and might lead to some companies going out of business.
The concentration of suppliers in a single geographic area creates risk for the supply chain during pandemics, as do just-in-time manufacturing and lean production strategies. For example, companies that migrated to just-in-time and lean approaches may not have the inventory on hand to avoid a disruption to product assembly or sales fulfillment.
To balance out these cost-reduction approaches and protect the business during pandemics, companies can implement an "early warning system" with supply chain risk assessment tools. The tools offer visibility across the entire pipeline and alert businesses to slowdowns, interruptions and other issues. This insight also can help businesses understand where they are most vulnerable so they can introduce redundancies, such as suppliers and distributors located in different parts of the world. These seven supply chain management best practices will help businesses operate during this pandemic and beyond.
The consumer goods supply chain is also struggling as coronavirus fears have caused a panic buying bullwhip effect, where a short-term bump in sales can create real problems further down the supply chain. For instance, if suppliers overproduce the raw ingredients for certain products -- such as hand sanitizer or toilet paper, which are currently in demand -- that could lead to a glut in supplies later. Supply chain managers will have to act in real time, adjusting algorithms as the crisis unfolds. Despite this, Cisco said IT spending could resume in the coming months as organizations install infrastructure to better support remote workers.
Targeted cyberattack threats
Pandemics, like other headline-making events, are enticing to cybercriminals, who take advantage of crises to infect systems, steal data and disrupt operations. Their best way in, oftentimes, is through users.
Kaspersky has detected coronavirus-specific threats, including malicious files disguised as PDF, MP4 and DOCX files with names suggesting that the attachment held useful information about the coronavirus. What users got instead were Trojans and worms that could destroy, block, modify, copy or exfiltrate personal data and interfere with systems.
Check Point Software Technologies is tracking a surge in domains related to the coronavirus, including those that are likely to be malicious. Government and healthcare organizations are concerned that disruption from ransomware attacks could have devastating effects. In March, the Champaign-Urbana (Ill.) Public Health District's website was taken down by a ransomware attack, which impeded the public's ability to get updates and information on the coronavirus response efforts.
Security expert Ashwin Krishnan offered four tips to help protect businesses from security threats while supporting work-from-home strategies, including how to enforce remote employee security and privacy best practices.
During a pandemic, organizations need their cybersecurity teams to be on their A game to protect the organization from threats and to alert users about phishing, ransomware and other malicious attacks targeting them and the business.
Companies need a plan for how to handle cybersecurity if members of the cybersecurity team are absent due to illness. Read these tips for updating your pandemic response plan to include cybersecurity management activities.
As remote working continues, CISOs should revisit the security policies they may have relaxed to accommodate a ramp up in telework. A careful review will turn up where there are vulnerabilities, and CISOs must tighten controls and insist on a return to strong corporate and industry standards.
HR leaders should team with IT to share and enforce information security policies, practices and communications among remote workers.
IT must also mitigate the risk the home office presents overall and can do so by helping users build a more secure environment. From wireless LAN access points to ensuring fast enough speeds and implementing cloud-based management where possible, organizations can utilize SMB tools to strengthen security for workers outside of the office.
Industry events canceled and business travel halted
The list of industry events canceled due to fears of spreading the coronavirus further continues to grow. Mobile World Congress, Facebook's F8 developers conference and Adobe's Summit Conference all were canceled over the past few weeks, with more announcements happening daily.
Experts are skeptical that in-person events will come back the same as before the pandemic and suggest that online events will become more creative and interactive. As an example, they will have to allow attendees to visit virtual vendor booths.
At the same time, companies, including Amazon and Salesforce, are restricting employee business travel.
Effect on tech industry and healthcare workforce
As tech companies, including social media platform providers, send workers home, they are boosting their use of automated tools to complete certain tasks. For instance, YouTube and Twitter ramped up automated content curation to decrease the need for employees to review all content. Companies that are relying more heavily on automated content curation advised users that they may see more content accidentally removed than normal.
In healthcare, the use of telehealth services is on the rise to protect patients and free up providers. New York Governor Andrew Cuomo encouraged the state's residents to use telehealth services before trying to be seen by a provider in person. In response to increased usage, telehealth platform providers are paying close attention to their infrastructure to ensure they can handle the spike.
Telehealth is now the new normal, enabling social distancing between providers and patients and freeing up in-hospital resources for those who need them most.