1. Home
  2. Computing & Technology
  3. Internet / Network Security

Business Continuity During an Epidemic or Pandemic
Minimizing Risk of Spreading Illness and Impact to Productivity at the Same Time

From Tony Bradley, CISSP-ISSAP, for About.com

Over the course of history there have been global plagues that have killed significant numbers of people. The Black Death killed an estimated 75 million people worldwide. Yellow Fever has claimed hundreds of thousands, possibly millions of lives.

In recent years there have been repeated outbreaks which have led to predictions of the next pandemic. In 2003 we had SARS. In 2006 the world was afraid that the H5N1 strain of the bird flu could become a pandemic. In April of 2009 the apparently rapid spread of the swine flu and deaths from the swine flu in Mexico led to fears of a pandemic.

Regardless of whether any of these diseases is truly a pandemic, just a regional epidemic, or even just a localized outbreak, a sudden spike in sick people has an impact on organizations and their ability to continue business functions. Employees may not be able to work and perform their functions. Vendors and suppliers may be impacted and unable to deliver the goods and services the organization needs. Partners and customers may be impacted and slow demand for the organizations goods and services.

Organizations need to have a business continuity plan to address situations like this from two sides. One is to develop contingency plans for how the organization will continue productive operation in the face of an ongoing outbreak, and the other is to examine how the organization can modify operations to minimize the risk of exposure and potential for spreading any existing illness.

For the first angle, here are some key questions organizations should consider:

  • What are the core functions that are critical to continuing business?
  • What are the supplies and materials necessary to produce goods or deliver services?
  • What are the key roles or essential personnel necessary to conduct business?
For each of these questions, organizations should then consider the following:

  • How might they be impacted?
  • What should be done proactively to protect them?
  • What alternative solutions can be used if necessary?

To develop a comprehensive business continuity plan, the organization should work through hypothetical scenarios. Assume there was an epidemic outbreak and many of your employees are too ill to work. What is the domino effect? If the IT department doesn't show up and users experience network or workstation issues that can't be resolved, does that halt business entirely? What sort of contingency plans should be in place to prevent such a scenario.

For the second angle, organizations should think about what steps can be taken proactively when such an outbreak occurs to try and ensure that employees are not exposed and prevent the illness from spreading and impacting business functions.

Many organizations have a culture that praises and rewards those with the determination and fortitutde to fight through illness, drag themselves out of bed, and show up no matter how they feel. While that may seem admirable, it isn't. If you're sick- stay home. Why risk spreading the illness so that everyone else in the organization can share in your pain and suffering?

Hourly employees in organizations with poor, or no, paid time off program seem to have little choice but to struggle through and show up. It may not be what is best for the organization, but the individual still has to earn a paycheck and pay the bills. Unfortunately, the need to generate income outweighs the need to take care of their own health or to be conscious of the risk of spreading the illness.

At an organizational level, the company should consider what can be done to foster a culture where employees are allowed to A) take care of themselves so they get and stay healthy faster, and B) do not expose the rest of the company to undue risk of spreading the illness.

One key solution which more companies should embrace at every level regardless of epidemic or pandemic illnesses is telecommuting. Allowing employees to work from home where possible has a variety of benefits including eliminating the risk of exposure to sick co-workers.

In addition, those who work from home don't lose hours of potential productivity commuting to and from work. They are more likely to work earlier and later than normal business hours. They are able and willing to work through minor illnesses that they might call in sick for if they have to drag themselves into work. A cold may prevent someone from showering and driving in to work, but it probably won't prevent them from sitting in front of their computer.

The organization gets increased productivity, fewer sick days and less risk of exposure or spreading illnesses, and reduced facility costs since they don't need to rent space, buy a desk, pay for the electricity, climate control, etc. Seems like a definite win-win situation for the company and the employee.

Organizations of all sizes should explore the benefits of allowing employees to work from home on a regular basis. But, in the event of an epidemic or pandemic outbreak the organization should definitely set aside any anti-work from home biases and implement working from home for all employees where it is possible as a strategy to contain the risk of illness and minimize the potential impact to the organization.

Explore Internet / Network Security
About.com Special Features

Stay connected and entertained with reviews on tips on the latest HDTVs, cellphones and more. More >

Easy ways to connect two computers for networking purposes. More >

  1. Home
  2. Computing & Technology
  3. Internet / Network Security
  4. Advanced Security
  5. Incident Response
  6. Disaster Recovery
  7. Business Continuity During an Epidemic or Pandemic

©2009 About.com, a part of The New York Times Company.

All rights reserved.