Category: Pandemic Management

  • This Is What To Consider For A ‘Working From Home’ Policy

    This Is What To Consider For A ‘Working From Home’ Policy

    First things first: social distancing

    Not coming into the office due to illness, is a good move. Unfortunately, the stigma around calling in sick can turn some off, especially passionate staff. We as leaders need to make it clear that if staff are concerned, they can, and should stay home (and work there if they can). By setting procedures to support them while at home, we may just battle this virus yet.

    There is an uncomfortable movement happening in the corporate world right now, and it’s the lack of handshakes.

    It’s a crucial step for us all to do our part in minimising the impact of a virus. But it takes some getting used to when dealing with clients or authoritative figures. It’s these new simple, but important requirements that many are starting to pick up.

    In Europe, hugging and kissing is a standard greeting. But again, this is one of the best ways to help COVID-19 transmit from person to person. If everyone stayed at least a metre away from each other, this would help considerably.

    Globally, many events are being cancelled which can seem drastic to some, like the possible cancellation of the Tokyo Olympics. But at an Auckland concert on April 28th of February, the reason for these cancellations became clear. One man who was recently back from Italy attended the Tool concert at Spark Arena. Standing body to body with thousands of other fans, this one person may have catapulted New Zealand’s infected cases.

    Another man in Japan may have knowingly spread the virus in bars after he was told he was infected.

    Any strategy which creates distance between people, from no handshake to the cancellation of mass gathering events is classed as social distancing. No matter the situation or awkwardness you may encounter, we’re all in this together and social distancing needs to be the norm in 2020 if we’re to combat COVID-19.

    True or false?

    A) work from home policy requires all staff to test this before it is required.

    B) During an outbreak like COVID-19, all staff should work from home.

    C) Thanks to the cloud and remote technology like a laptop, Zoom, Slack and emails, it is easier than ever to work remote.

    How did you go answering these? The lesson here is to appreciate that much media hype accredits to poor direction and advice. Working from home (WFH) is more complex than simply setting up your laptop at your kitchen table. There is much to consider.

    The answers to the above are:

    A) True. But did you consider your IT systemMost IT infrastructures can’t handle 100% of staff working remotely. Testing this before it is needed gives you good insight into your organisations capabilities.

    B) False, but if your IT system can handle it, the more people that work from home the better. Staff who are critical to the operation of your organisation should be the first to work from home. Especially if no one else can step into their role and complete the same output.

    C) True, it has never been easier, but some teams will struggle to work from home, such as call centre staff, because the technology required to work from home is not necessarily available, specific phones and IT systems to record and administer calls, for example. So each team must examine its own needs and understand who can and cannot work from home and what they need to be able to.

    In our continuous monitoring of the ever-developing Novel Coronavirus (COVID-19), we’re starting to acknowledge weekly trends. This week its around working from home.

    Let’s take this article, as an example, that focuses on the individual understanding what it takes to work from home. There are some fair points in there like cleaning your home, providing adequate breaks, putting on the correct clothing to get into the right mindset.

    And although we strongly advise you to consider this option, it’s important to practice it, understand who needs to be working remotely and how your IT infrastructure will handle this. You don’t need to practice it with everyone either to get a lot of feedback.

    Leadership considerations

    If you’re part of a leadership team having conversations around a WFH policy, there are some questions to consider on behalf of your people.

    • How confident are you in your staff’s internet connection?
    • Do your staff need a VPN set up? Is this stable and ready to go?
    • Will all applications, data and systems work?
    • Do staff need extra gear at home like screens, docking stations, keyboards? (Who will transport these and how will you record inventory?)
    • Do documents need to be printed now, are they confidential?
    • Are all staff members contact details updated and accessible?

    Keeping in touch with colleagues is crucial, even if it’s you that’s at home while they still commute in. Set up regular team scrums over a video conference. Set basic agendas where necessary as you want to focus on the same type of conversations you’d have if walking around your workplace.

    Keeping sane outside of the office

    It is no lie that the treat of working outside of an office environment can ware of very fast. Being in your home from the moment you wake to the moment you sleep can have negative mental effects over prolonged periods.

    You can make this environment more comfortable and work ready by:

    • Setting up your workspace the night before (coffee, notepad, clean space, smart clothes).
    • If applicable, take the opportunity to work in your garden/outside.
    • Leave a book out you’re reading, take a break every hour and read a chapter to refresh you mind.
    • Exercise well. Put an hour block in your calendar to get out of the house for a walk or run.
    • Start your day an hour or two earlier. Without the commute, you can now finish early and get all those chores done before the family is home.

    If you are in public places at risk of becoming infected with the virus, there are ways you can prepare.

    • Wash your hands regularly with soap and water for at least 20 seconds and dry thoroughly. This is the single biggest strategy that will protect you. Always wash your hands when,
      • You have coughed or sneezed
      • You have been to the toilet
      • Prior to, and after eating
      • After touching any communal space such as an ATM or reception desk
    • Try to avoid touching your face (sounds easy but it really isn’t).
    • Always carry a small hand sanitiser.
    • Facemasks will NOT reduce your risk of contracting the virus, in fact they are counterproductive as they give you a false sense of security and mean that you are less likely to practice the important strategies that can help you. Forgot to wash your hands then removed the mask? Its purpose is now redundant.
    • Avoid public transport.
    • As above, avoid human contact altogether – no handshakes, kissing or hugging. The largest increase in infection was Valentines day this year!
    • If you’re buying lunch/food, assess whether the food is in the open (for example, some cafes have their cakes on the counter, exposed – avoid these).

    RiskLogic has now produced dozens of Pandemic Response Plans. We’re working with many new and current clients to review everything from Crisis Management Plans, to Business Continuity.

    If you’re considering using our services to help your organisation, now is the time to act as we are getting our highest increase in requests to review or write plans. 

  • Why You Should Stop Telling Staff to “Lockdown”

    Why You Should Stop Telling Staff to “Lockdown”

    In the last week, RiskLogic’s website spiked on search results for the keyword lockdown.

    Lockdown data spike

    And what do we typically associate the word lockdown within New Zealand and Australia?

    Probably the March 15th, Mosque shooting in Christchurch and the Lindt Café siege in Sydney.

    But is lockdown the correct terminology to use currently?

    What we’re dealing with currently is a new virus in our community which can be managed if we all practice social distancing. If we approached the COVID-19 ‘lockdown’ the same way we would March 15th lockdown, we wouldn’t be able to take our children for a walk (we would be under our desks for the next four weeks).

    Therefore, we must stop labelling it a lockdown in this case, and rather shelter in place.

    By definition, shelter in place is when we have a possible external threat and we are staying safe in our place of work, or home, but still allowing our staff to work. (We need to keep working)

    Today marks a point in history we’ll be telling future generations about.

    This morning, Kiwis woke to the eery thought that much of the population aren’t leaving their homes today, or tomorrow, or this month. It’s different and that causes anxiety and confusion. However, our emails continue to ping, our calendars are still full, but our children and partners are here with us. It’s both a wonderful time of connection but also one of complete isolation.

    How we act now and for the next four weeks will determine how we are perceived as a nation and as leaders.

    In these challenging times, the New Zealand Government has done an exceptional job of keeping us informed and making staunch, quick decisions. They’ve shown exceptional examples of business continuity and communication with Prime Minister Jacinda Ardern noting, “we will be with you every day”. The UK has now moved into a similar state of isolation. Australia’s government shows signs of following New Zealand’s measures in the next day or so too.

    As we adjust over the next 48 hours, we as leaders need to concentrate heavily on our people – more than ever. We need to calm them and reassure them.

    This starts with terminology.

    Recently, a deputy director at the Health of Ministry noted we need to understand the difference between self-isolation and self-quarantine. The latter being what most of us are currently in.

    People in self-isolation are confirmed cases of COVID-19 or probable cases of COVID-19. This term can have a negative spin to it but is important to remember there is always a risk of someone in your workplace getting a communicable disease. Infections is usually through no fault of their own, so they should not be stigmatised when they return to work.

    Self-quarantine is a measure put into place to protect people from being put in situations where they could be exposed to the disease.  Despite self-quarantine ­ being technically the correct definition that many Kiwis find themselves in, misconceptions around terminology mean self-isolation is commonly used.

    Considerations of terminology

    It’s time to put a positive spin on this difficult situation. There is lots of negativity and fear (understandably). As leaders we can encourage our teams to look for opportunities from a personal and business level.

    Organisations that have planned for this can now thrive from it. With no need to commute, less meetings and distractions at the coffee machine, we can make 2020 the year we get all our jobs done.

    A conversation we were recently a part of included the phrase, “while you’re in isolation, please can you get XYZ done”. This simple request can single out and make an individual feel like being in isolation or working from home is their fault. We need to avoid this.

    The commercial benefits of better mindsets

    It probably goes without saying that happy employees bring results.

    In his book Organisational Crisis Management, Gerald Lewis studies and discloses that the effects and afterburner of a crisis last longer than any lifespan (particularly natural disasters).

    When people are affected in your workplace, it takes very little time for the business to begin to fail. Clients are ignored, deadlines missed, reputation damaged.

    Specifically, in COVID-19, we need to remind ourselves that the social distancing requirement to stay at home does not mean a holiday. It does not mean work is paused. Leadership teams need to find inspiring ways to communicate this.

    Could you handle another crisis?

    Earthquakes won’t wait for COVID-19 to disappear (look at Croatia and Japan).

    While the COVID-19 situation continues to evolve, businesses are still forgetting to assess how much more they can handle. Consider this: if your staff are remote right now, your financial situation is uncertain and you wake tomorrow to learn of a serious cyber breach, could your organisation survive?

    Few organisations could manage two crisis events right now. But the likelihood has increased while your operations move into a new “business as usual” state.

    By starting with terminology, contributing to positive mindsets from our staff, we can keep everyone alert and in a good space while we head deeper into this working from home / social distancing state (not a lockdown).

    Have questions off the back of this article?

    > Contact Us Now

  • The Three R’s – Restore, Recover, and Review

    The Three R’s – Restore, Recover, and Review

    The Three R’s – Restore, Recover, and Review

    New Zealand’s Prime Minister, Jacinda Ardern, made it very clear that businesses should use this period between Level 4 and 3 as a chance to prepare.

    Recover

    With the Government’s decision to move to Level 3 this coming Monday at 11:59 pm, we all need to prepare for a move towards the new normal. This means restoration and recovery of premises, processes, customers, third-party suppliers and most importantly your own staff.

    This is a considerable process.

    Restore

    At RiskLogic, we have seen that some clients have been proactive in preparing for a resumption of business. But most have not thought it through fully.

    If you have changed your business as usual processes to accommodate Level 4 restrictions, then you will need to consider how this affects your resumption and recovery strategy.

    It is imperative that you look at the changes that have occurred and ask several questions:

    • What will our new normal look like?
    • What do we want to retain from the way we have been working under Level 4?
    • How do we move to this new paradigm?
    • How do we safely phase our staff back to work on our premises?

    Review

    The review, or validation, phase of the planning cycle aims to capture learnings from an event by critically analysing how your organisation responded. These learnings enable you to respond better in the future.

    A review should always follow a significant event. But for many businesses, a review will be a new undertaking.

    COVID has given us an opportunity to review plans thoroughly. It means we can capture learnings from the lock-down period to update our plans (or write plans if we didn’t already have them). It also means that we can absorb the learnings into our new normal. Such as the large-scale use of applications such as zoom and Microsoft teams.

    This process of review is significantly enhanced if conducted by an independent team of experts. They can bring experience, as well as a different perspective to a process that needs to be non-judgemental and robust.

    If you need to ensure a professional and realistic, restoration and recovery of your organisation, or if you need assistance to ensure that a review captures all of the learnings from the lockdown disruption, then RiskLogic is ready to support you.

  • The C Word: Complacency

    The C Word: Complacency

    New Zealand is not as isolated as we first hoped.

    A few weekends ago, I found myself enjoying another beating of the Auckland Blues professional rugby team by my Christchurch Crusaders. There are few things as satisfying as a fresh night out with some family, beers, and hot chips. It is made more special when you can share this with 18,000 fellow Kiwis.

    This coming weekend, however, it’s looking increasingly unlikely the final game of the season will be held.

    In not so recent times, live sport was a commonly shared experience the world over – nothing special. But on this evening, there was something sobering about being the only 18,000 people on earth enjoying live sports that night.

    I feared that the accessibility of normality we all rightfully worked towards here in New Zealand had become a risk to our planning and preparation of a potential second wave.

    Where we believed we had contained and managed the outbreak, we’ve become complacent to the wider struggles and risks that were bubbling up, perhaps even contributing to the final blow for many small businesses.

    Where did I get this assumption from?

    My experience in both the resilience world, as well as the tourism sector allows me to see assumptions that make most feel good about the situation we are currently in. Coupled with the relations I have with family and business partners in the UK, US, Australia, and parts of Europe, it is a very different vibe to what we are telling ourselves here in New Zealand

    Where we see the glass half full, many of these countries do not even know where the glass is anymore.

    We are in a Kiwi shaped glasshouse

    Prior to the break-in our 102 days of COVID free-living, things were pretty good. Live sports, venues, public gatherings, pubs, cinemas – they were all deemed open and good to go.

    Businesses found themselves crawling back with some domestic spend being up 42% than predicted post-lockdown. “Buy local campaigns” are in full effect (given that most businesses relied on tourism here) and deals were in full flow.

    We were relying on each other to keep things moving, but did this make us blind to what the rest of the world is going through?

    Given that Auckland is now in Level 3 lockdown and New Zealand in Level 2, people are angry and frustrated, we seem to be going backwards. But are we?

    The Prime Minister ensures us, “we have a plan”. I believe having a plan is half of it, not being complacent and allowing our pride to cloud the possibility of a second outbreak is the other half.

    Contact tracing, social distancing measures and regional/localised requirements are still in strict effect in places like Asia. But here in NZ, a man who just wants a snack could easily walk out of quarantine. With such effort and sacrifice to successfully navigate the Level 4 lockdown, it’s easy to see why this man became New Zealand’s most wanted.

    Economists the world over are warning of the impending economic storm gathering while loan advisers, house sales and retail are trying to paint a different picture. Huge, significant economic powers, like the US, have thrown in the towel. They are relying on a vaccine that has no due date (specifically Donald Trump who needs a lifeline for his November election campaign).

    Kiwis are notoriously complacent around events like this because we’ve been through a lot. We tend to refuse the likelihood of other crisis events when we’ve been through such dramatic ones already. I can say this with confidence after being front and centre for both a decent few Earthquakes, fires, cyber-attacks and terrorism (all in Christchurch City alone).

    We can become disconnected from the rest of the world’s dramas very easily off the back of a staunch mentality. Our team still sees this weekly with clients remaining concerned on isolated events rather than eventualities.

    Well, I’m not one of those people you might say. Good for you. I have spoken to some critical businesses who say otherwise. And that is why I am concerned.

    Why is it a risk to be complacent?

    That’s probably obvious, and we should always stay positive where we can. But we must also look for risk in all the tight, hidden places.

    “Who’d have thought at the end of 2019 we’d be going through something like a major pandemic” a recent client said on the phone to me. “well…we did!” I replied. We literally have a catalogue of potential crisis scenarios, and sorry to say folks, they’re all possible, any time.

    “We actually got through it OK”

    This was the comment after a short phone call with a government agency during my work in the resilience space. The positivity was strong with this one which on the surface was inspiring.

    I asked how they would get on if it was isolated to just their business? What about if they had a cyber-attack during the lockdown? That is when the conversation took a turn.

    This idea that we managed to isolate the virus and get the country back on track is one that is worth boasting about, but that’s now been crushed-so now what?

    We should absolutely celebrate our response, but we need to talk about what is happening outside our little greenhouse. If we do not, we risk staying complacent to the ripple effects turning into tsunamis.

    We are not in the new normal yet

    I will finish by reminding you that we are not there yet. Just because New Zealand and many other small countries (notably Taiwan) has done well to contain the virus(arguing the point that small islands and low airport/ports helped significantly), we have not experienced what many are calling the new normal.

    Now, only airports are closed which affects tourism. That is not normal, but it is not a new way of living – it just sucks.

    No one knows what the new normal is going to be despite how much the experts will go on about it. We simply do not have enough evidence. Whatever it is, it will still sit alongside many other common crisis events.

    Therefore, it is critical to plan for the worst and hope for the best.

  • Working from Home: COVID-19 Themed Social Engineering Attacks

    Working from Home: COVID-19 Themed Social Engineering Attacks

    As organisations and schools increasingly move to institute social distancing measures with work from home arrangements, how can we stay safe and secure online?

    The heightened fear and anxiety around the COVID-19 pandemic is the perfect vehicle for cyber criminals. One of the methods they use is social engineering attacks. Already, there have been reports of coronavirus-themed attacks designed to trick people into opening documents or clicking on links.

    As employers rightfully double-down on their social distancing strategy and employees connect to the company network remotely – often through home wi-fi networks (with varying levels of security), cyber-criminals have more opportunities and ways to break into company networks.

    COVID-19 themed social engineering attacks

    Emotet appears to be the malware of choice for COVID-19 themed social engineering attacks. In one case, hackers sent phishing emails posing as the U.S Center for Disease Control and Prevention, the World Health Organisation and health agencies from specific countries to recipients.

    These emails purported to contain infection-prevention measures for COVID-19 and instructed recipients to open attached documents. If opened, the target computer could be infected with malware allowing these hackers to gain an upper hand – and possibly make their way into the company’s network.

    A public sector entity of Mongolia was recently targeted by a similar attack. This time in the form of press releases purported to have come from the Mongolian Ministry of Foreign Affairs. The malware was designed to take screenshots, exfiltrate, delete and edit files, and remotely execute processes.

    Social engineering prevention

    As social engineers manipulate curiosity, fear, anxiety and panic to draw in their victims, awareness and education is the key to prevention.

    Employees should be vigilant at all times and the following tips may help improve your cyber resilience to social engineering attacks:

    • Don’t open emails and attachments from unknown or suspicious sources
    • Where possible, use multi-factor authentication to secure your accounts
    • Be wary of tempting offers. If it’s too good to be true, it probably is!
    • Keep your antivirus software updated

    Consider these other tips to stay safe and secure online

    • Using a VPN is an important step in securing your connection to a corporate network.
    • Be mindful of where and who you are communicating with. If you are at a café or other public space:
      • Do not use public Wi-Fi
      • Do not work on documents that can be easily overseen by others.
    • Look at the security of your home network – change default router usernames and passwords.
    • Consider the security of physical documents, USB thumb drives and other media you might be using. Can these be disposed of securely?
  • Were business continuity procedures sufficient for the pandemic?

    Were business continuity procedures sufficient for the pandemic?

    Each year business continuity leaders and crisis teams come together to execute what can only be described as their worst day. Extracted from their day jobs these individuals, at the mercy of their risk teams, are presented with a real threat that they then must manoeuvre under realistic conditions to a positive strategic outcome.

    New crisis team members come together to focus on the strategic response of an event off the back of the business continuity panel’s operational response. With experienced hands, and the continual focus on plans, preparations at an organisational level – you may be led to believe assurance of overall success.

    Yet when faced with a novel event, teams need to pivot to a different set of rules that bypass, sometimes, meticulously trained response mechanisms.

    What are novel events and how do they arise? 

    They are generally encountered in one of three situations:

    1. The triggering event is outside the risk bearer’s realm of imagination or experience, or happens somewhere far away.
    2. Multiple routine breakdowns combine to trigger a major failure.
    3. The risk materializes very rapidly and on an enormous scale.

    Organisations that regularly deal with fast-evolving situations know the importance of preparing for the unexpected.

    Yet, the pandemic – one example of a novel event – left many teams without a pre-existing playbook. Reaching for solutions that worked well in other crises but failed to deliver under the circumstances of the pandemic and developing the need for rapid change to response mechanisms.

    So how do crisis teams prepare for the next novel event?

    Decades of behavioural research shows that people pay attention to information that confirms their beliefs but disregard it when it conflicts with them. Experienced teams can reinforce established response patterns that do not always translate well to novel risks, whereby the best approach may be counter intuitive.

    How do experienced teams bring forth the experience of shock and uncertainty in annual exercise activities?

    Make it a part of learned behaviour. 

    1. Practice doing more with less. Involve resource scarcity of some kind during your next planned exercise. Example: Drop the crisis / business continuity lead from the exercise.
    2. Disrupt the embedded response through role cross-training. All individuals seek the experience of how other roles on the crisis team function, developing a better idea and perspective of how your role depends upon others. Example: Each response team member takes on a role different to their own.
    3. Give up control. Empower rapid decision-making to different people including to experts in coordinating teams such as incident or operational response. Example: Don’t allow the team to get stuck in the weeds, ensure the response focus is purely at the strategic level and delegation works.
    4. Independent viewpoint. Gain an expert opinion through an independent observer on the approaches used and whether the team favours a particular one. Assess the evidence to understand the ability to think innovatively. Example: Contract a consultant to observe your next exercise. 

    The beauty of disrupting your routines and learning new ways to solve problems in anticipation of a crisis is improvisation, which will make it better able to cope when met with uncertainty.

    Call to action:

    1. Get uncomfortable during your next exercise, allow teams to find their edge and practice in a safe environment the skills needed to respond to a novel event. Break rigid patterns and build muscle memory in how to apply the foundational elements of a business continuity plan/crisis response and/or plan to an event that the organisation would not ordinarily allocate resources to prevent. This training will further strengthen and build business continuity and crisis capability and confidence under all situations.
    2. Find the right consultant that understands the art form of delivering on these delicate objectives. With the right consultant to guide you, team members come out of it as a positive learning experience and with the confidence to tackle what comes next.

    Getting smarter with how you function under high stress situations and cope with improvised decision-making, and still perform are all active components of a good exercise program. Allow RiskLogic’s depth of field experience, team of experts and industry acumen to support the preparation and delivery of your next exercise.

    A fresh approach with expanded objectives for mature teams can best prepare you for the next crisis – both personally and as a team.

    Source: The Risks You Can’t Foresee