Risk Management and the Virtual Workforce

Author, Sam Brown, Vice President, Human Services Group, Rancho Mesa Insurance Services, Inc.

Image of woman working from home, video chatting with coworkers.

As American employers navigate the Coronavirus Pandemic, many business leaders quickly adapted to a virtual office and virtual workforce. While many organizations anxiously wait for the day employees can all safely head into the office Monday through Friday, employers must adjust risk management practices to account for the virtual workforce.

Cyber Crime

Prior to the pandemic, the FBI would routinely receive 1,000 cybersecurity complaints, daily. Since the COVID-19 outbreak began, the number of complaints has increased to 3,000 to 4,000 every day according to Tonya Ugoretz, deputy assistant director of cyber division of the FBI in a webinar hosted earlier this year. The most commonly targeted industries are health care, manufacturing, financial services, and public sector organizations. Stated plainly, cyber criminals are successfully exploiting weak virtual cybersecurity and poor execution on the part of remote employees.

Brett Landry of Landry IT, recently stated that 85% of employees circumvent “acceptable use” policies when using a company owned device, reinforcing the need for increased employee training.

Mr. Landry highly recommends employers update security patches on all devices, adopt a higher standard for password security, utilize two-factor authentication, and train employees how to recognize phishing and social engineering efforts.

How will a cyber liability insurance policy respond to this new threat?

Important questions to ask:

  • Will my policy cover a remote exposure?

  • Will my policy cover incidents involving personal devices?

  • Is Social Engineering covered?   

  • Will my policy respond if an employee does not follow company procedures?

Workers’ Compensation

Allowing employees to work from home has resulted in some employees moving out of state. When this occurs, the employer should report the new working address to the insurance company to ensure the workers’ compensation insurance policy will cover an injury. In some cases, the insurance company can add the new location. If not, then the employer may need to purchase a separate workers’ compensation policy for that employee’s new state.

In an effort to manage the risk of employee injury, employers should design and implement work-from-home policies. Effective policies will clearly define work hours, communicate standards for a home office, train employees on ergonomics, reinforce work and safety rules, and remind employees of the claim reporting process. Establishing the above expectations may help employees avoid injury and legal disputes over compensability.   

Directors & Officers Liability

Remember that a Directors & Officers Liability policy protects individuals from personal losses if sued for their role as a director or an officer of a company and not indemnified by the company. While a move to a virtual workforce doesn’t inherently put a board member at risk, big changes to company policy can result in missteps if employees do not receive proper communication and training. Ultimately, directors and officers are held accountable if company policies are not followed, highlighting the need for diligent execution of important company changes.

Rancho Mesa supports clients in developing employee manuals, work-from-home policies, and 2021 changes to labor law. Please contact me at (619) 937-0175 to discuss how Rancho Mesa can support your business or mission.