When planning a business continuity plan for an organization it is vitally important to remember the human element of the equation. It is not enough to have servers and data back up and online if there are not people to use it. Most IT departments focus on the loss of a system, application, data, location or power. What if the loss was in personnel due to a pandemic flu or virus?
With the H1-N1 virus spreading like wild fire and the Mexican government asking people to stay home for 5 days to slow or stop the spread of the virus, what are businesses going to do for continuity? What are you doing to prepare for a pandemic outbreak?
Technology may have an answer for us. Many tasks can be completed by employees working remotely. They can work from home so as not to catch or spread the virus. In order to do this we need to have a remote work from home policy. Obviously, not every job can be performed remotely, but for those that can they should be considered for remote connectivity.
A remote worker policy may have side benefits to the environment by reduce pollution. If employees can work from home they avoid the pollution created from commuting to work. A green solution is not a bad side benefit.
What are the down sides? Security risks due to remote home computers connecting to the organization's network. There are a number of ways in which to reduce the risk of allowing remote connections. Another issue is the potential liability brought onto the organization by employees being hurt at home. Because home becomes a part of the work area injuries in the home may result in workers compensation claims and safety violations. I think this risk can be mitigated with a simple hold harmless or home worker policy. It would be advisable to have an attorney draft such a policy or working from home agreement.
Giving people the ability to work from home, in a secure manner, may have benefits beyond pandemics. How often does the common cold sweep through organizations? Today it was reported that if people have flu symptoms they should stay home to keep any flu from spreading. By allowing employees to work from home while they have mild symptoms helps the business not lose man hours.
Remote home connectivity should be considered before an outbreak of pandemic proportions.
Donald E. Hester
CISSP, CISA, CAP, PSP, MCT, MCITP, MCSE Security, MCSA Security, MCTS, MCDST, Security+, CTT+, MV
Brought to you by Maze & Associates, a leading Northern California Accounting Firm specializing in Municipal & Nonprofit Audit, Tax for individuals and all types of entities, Information System Audits, Security Reviews, as well as PCI Scans and certified training. Maze & Associates is a PCI ASV - Approved Scanning Vendor.
Disclaimer: The views expressed here are those of the author and do not represent those of Maze & Associates. |
Subscribe to LearnSecurity Blog using your favorite feed reader by 
