Checklist for Organization on COVID-19 Scenario

Business Continuity
Checklist

 Develop an employee communication plan and provide information on precautions to stop the
spread of the virus.
 Have staff members to identify and authorize the enactment of your business continuity plan.
 Monitor the records of staff travel and employees’ exposure.
 Identify and test remote communications methodologies .
 Have sufficient and accessible infection control supplies (e.g. hand sanitizers) been provided?
 Has a crisis communication plan been developed and tested to communicate information to all
employees and take their responses.
 Have employees been provided provisions to avoid public transports?
 Has adequate training been given to employees adopting remote working for the first time?
 Has communication been made to clients and vendors about your business continuity plan?
 How will your business operate if 25% of your employees are out sick or unable to come to
work?
 Will you be able to run critical operations with reduced staff?
 Have you planned to assist employees who are quarantined (those who are healthy and able to
work as well as those who are ill and unable to work)?

Key considerations and planning triggers

When responding, businesses should consider the following possible planning triggers:

1. A task force should be created within the organization to manage and respond to queries from
employees
2. Call tree should be developed and tested along with crisis communication plan
3. Central repositories should be created related to employees’ records, their selected remote
working option, provided technology solutions including additional rental / purchased laptops
4. Training should be conducted for all employees on using remote solutions, multi factor
authentication and a centralized IT hotline, helpdesk or portal should be made available
5. Cross training of critical functions should be done, such that when someone may become
unavailable, others should be able and available to support
6. Business continuity plan should be communicated to all employees, vendors and customers
Cyber Security
Checklist

 Assess security settings for remote connections and check if individual access mechanisms are in
place.
 Ensure multifactor authentication for employees who are logging into the company network.
 Ensuring official VPN is being used by employees to connect to company network.
 Review communications and information technology infrastructures to support employee
telecommuting and remote customer access.
 Monitor the use of unauthorized computers (especially for companies that have adopted a Bring-
Your-Own-Device policy) and their access to the network.
 Identifying the location of important documentation and information assets.
 Review the data backup policy and the frequency and adequacy of backup practice.
 Will your organization be relying on an email system only for remote working?
 Have you considered bandwidth and data usage requirements for staff using home networks?
 Have you rehearsed and checked whether all employees can access the information they require
remotely?
 Have you informed your employees about the risk of clicking on links or attachments sent by
unauthorized sender on any communication media?
 Secure systems that enable remote access.
 Ensure Virtual Private Network and other remote access systems are fully patched.
 Enhance system monitoring to receive early detection and alerts on abnormal activity.
 Implement multi-factor authentication
 Ensure all machines have properly configured firewalls as well as anti-malware and intrusion
prevention installed.
 Test remote access solutions capacity or increase capacity
 Ensure continuity of operations plans or business continuity plans are up-to-date.
 Increase awareness of information technology support mechanisms for employees who work
remotely.
 Update incident response plans to consider workforce changes in a distributed environment
 Avoid clicking on links in unsolicited emails and be wary of email attachments.
 Do not reveal personal or financial information in emails, and do not respond to email
solicitations for this information.
 Review CISA's Tip on Avoiding Social Engineering and Phishing Scams for more information on
recognizing and protecting against phishing.
 Review the Federal Trade Commission's blog post on coronavirus scams for information on
avoiding COVID-19 related scams.
 Use trusted sources-such as legitimate, government websites for up-to-date, fact-based
information about COVID-19.
Crisis Management

Finance

Supply Chain
 Be prepared to change your business practices if needed to maintain critical operations (e.g.,
identify alternative suppliers, prioritize existing customers, or temporarily suspend some of
your operations if needed).
 Segregate inventory goods into three categories- perishable, non-perishable, semi-perishable
and identify self-life of goods belonging to these categories so as to preserve it properly.
 Make a team who will be able to take care of the minimum requirement of the warehouse
such as maintenance of the machine, transportation of essential goods and hygiene and proper
sanitization.
 Proper medical checkups for on-round operators with respect to COVID—19.
 Installation of a system in which a designated small team can work remotely to support the
man force working on field.
 Make sure the goods those are transported should be packaged and transported according to
the guidelines of WHO set for COVID-19.
 Make sure to incentivize and insure people working exclusively on field.
 Identify alternate supply chains for critical goods and services. Some good and services may
be in higher demand or unavailable.
 Intimate vendors and customers about the condition of their orders/inventories present in the
warehouse.
 Talk with companies that provide your business with contract or temporary employees about
the importance of sick employees staying home and encourage them to develop non-punitive
leave policies.
 Talk with business partners about your response plans. Share best practices with other
businesses in your communities (especially those in your supply chain), chambers of
commerce, and associations to improve community response efforts.

Employment and Employee Benefits

Determine how you will operate if absenteeism spikes from increases in sick employees, those who
stay home to care for sick family members, and those who must stay home to watch their children if
dismissed from childcare programs and K-12 schools.

• Plan to monitor and respond to absenteeism at the workplace.

• Implement plans to continue your essential business functions in case you experience higher than
usual absenteeism.
 • Prepare to institute flexible workplace and leave policies.

• Cross-train employees to perform essential functions so the workplace can operate even if key
employees are absent.

Workplace Risks

 Prompt identification and isolation of potentially infectious individuals is a critical step in

protecting workers, customers, visitors, and others at a worksite.
 If possible, isolate people suspected of having COVID-19 separately from those with confirmed
cases of the virus to prevent further transmission—particularly in worksites where medical
screening, triage, or healthcare activities occur, using either permanent (e.g., wall/different room)
or temporary barrier (e.g., plastic sheeting).
 Actively encourage sick employees to stay home.
 Providing resources and a work environment that promotes personal hygiene. For example,
provide tissues, no-touch trash cans, hand soap, alcohol-based hand rubs containing at least 60
percent alcohol, disinfectants, and disposable towels for workers to clean their work surfaces.
 Clean AND disinfect frequently touched objects and surfaces such as workstations, keyboards,
telephones, handrails, and doorknobs. Dirty surfaces can be cleaned with soap and water prior to
disinfection. To disinfect, use products that meet EPA’s criteria for use against SARS-CoV-
2external icon, the cause of COVID-19, and are appropriate for the surface.
 Avoid using other employees’ phones, desks, offices, or other work tools and equipment, when
possible. If necessary, clean and disinfect them before and after use.
 Practice social distancing by avoiding large gatherings and maintaining distance (approximately 6
feet or 2 meters) from others when possible.
 Requiring regular hand washing or using of alcohol-based hand rubs. Workers should always
wash hands when they are visibly soiled and after removing any PPE.
 Post handwashing signs in restrooms.
 Minimizing contact among workers, clients, and customers by replacing face-to-face meetings
with virtual communications and implementing telework if feasible.
 Talk with companies that provide your business with contract or temporary employees about the
importance of sick employees staying home and encourage them to develop non-punitive leave
policies.
 Maintain flexible policies that permit employees to stay home to care for a sick family member.
Employers should be aware that more employees may need to stay at home to care for sick
children or other sick family members than is usual.
 Discontinuing nonessential travel to locations with ongoing COVID-19 outbreaks.
  Developing emergency communications plans, including a forum for answering workers’
concerns and internet-based communications, if feasible.
 Employers should not require a positive COVID-19 test result or a healthcare provider’s note for
employees who are sick to validate their illness, qualify for sick leave, or to return to work.
Healthcare provider offices and medical facilities may be extremely busy and not able to provide
such documentation in a timely manner.

Global Policy

Disclosure Guidance