Corporate Shield: Protect Your Organization In The Upended Risk Climate

Dillon Papenfuss

According to Morrison & Foerster’s Coronavirus (COVID-19) Business Impact Survey, COVID-19 is poised to profoundly impact the business climate over the next six months and into the coming years. FEI Daily spoke with Morrison & Foerster partner David Newman on what organizations need to know on navigating legal risks over the coming months.

“New normal,” “brave new world,” and a host of other buzzwords have been used to euphemistically characterize this period of intense uncertainty and economic distress.

For anyone wondering when the reprieve of normalcy will return, the answer appears to be disheartening, according to Morrison & Foerster’s Coronavirus (COVID-19) Business Impact Survey. In responses from 110 in-house general counsels, they expect the current levels of impact from the pandemic to continue into the next six months. Over the next 12 and 24 months, expected impact tapers off – but lingers.

In discussing the perceived and expected impacts of the crisis, Newman says, “I think for a lot of companies, this [outbreak of COVID-19] has been a wakeup call to how they are looking at enterprise risk and their supplier network.” He continues, “My sense is that when we all emerge from this, companies are going to be different, and those differences are going to endure.” Newman names supplier network, workforce management, capital structure, and data security among the notable areas that business leaders will need to reexamine moving forward.

What companies are doing right now

In responding to shelter-in-place and stay-at-home orders, companies have most frequently turned to remote work arrangements (98.2% of respondents), internal and external event cancellation (94.5% and 89.1% of respective respondents), and full or partial travel restrictions (90% of respondents).

Of the three levers companies are most frequently utilizing, the rise in remote work arrangements merits the most significant attention from financial leaders. “Clearly there are a significant number of issues in the short term that increase cybersecurity risk in the current environment,” Newman comments. “The bad guys know that companies are allowing telework and remote operation at an unprecedented scale. They know that all these things are happening very quickly. They know that there are a lot of first-time teleworkers who are understandably confused on other priorities. All that adds up to an area of significant opportunities for bad guys.”

To effectively respond to their newly escalated risk profile, Newman advises that organizations make cybersecurity a front-of-mind priority. He suggests that financial leaders can do this in three ways:

  1. Promote proper cyber-hygiene practices such as being mindful about using secure networks, utilizing effective passwords, and ensuring that they’re patching their system.
  1. Devote sufficient resources to cybersecurity. As painful as it is to invest further into IT and cybersecurity during a recession, it is significantly less costly than a major ransomware attack or cyber breach.
  1. Update telework policies. On this topic, Newman reminds organizations to reexamine their telework policies to ensure that they reflect current realities, saying, “It doesn’t help anyone to have policies on paper that don’t correspond to what people are actually doing. You want your policies to be security-conscious, but you also want them to be realistic. Otherwise, people will evade the policies, and you’re creating a compliance trap or a litigation trap.”

Legal risks to consider moving forward

Survey respondents indicate that the top three legal risks for their organization relate to employment/human resources, contracts, and supply chain disruption. While it is important to consider these risks in the short term, Newman advises companies to take a long-term approach when evaluating these issues.

Employment and human resources risks. For employment/human resources, Newman is advising his clients to consider what it’s going to look like when people start coming back to work. Regarding the considerations business leaders need to make, he says, “They might need to start preparing for how they are going to allow some of their workforce to return even at a time when – at least in many parts of the world – the virus might not be under control, and there may still be a persistent public health risk. They need to consider what their policies are going to be and how they’re going to navigate potentially conflicting and inconsistent guidance from different government authorities.”

Contract and supply chain disruption risks. Newman postulates that we’re soon heading for a phase in which companies are going to see sensitive, significant litigation over force majeure and material adverse event clauses – among all the other questions about how much you can hold contractual counterparts to their obligations in this current situation.

“You have to be prepared on two tracks,” Newman says. “On the one hand, you are preparing yourself for the scenario of litigation and doing the things that companies do if they are about to engage in very significant litigation. On the other hand, you’re doing everything to reach out to your suppliers and customers and try to come up with constructive solutions that reflect the business and health realities of the environment in which everyone is operating.” With all of these considerations, Newman is advising his clients to prioritize collaboration and open communication in avoiding litigation. “There’s tremendous opportunity to renegotiate and come up with arrangements on both sides that are vastly preferable to the cost and uncertainty of litigation that also requires a degree of collaboration, transparency, and flexibility.”

Reevaluating risk-based strategies. The risks mentioned above represent a portion of the upended risk landscape, which necessitates a broader discourse between business leaders and senior in-house counsel. As they redefine a risk-based strategy based on business realities in the near- and longer-term horizons, as well as public health and safety considerations, their strategy will have to thoughtfully consider the following key risk-based considerations:

  1. How they’re complying with and navigating conflicting obligations under shelter-in-place or stay-at-home restrictions and their contractual obligations customers or suppliers
  1. How to navigate the balance between workforce privacy and promoting health and safety
  1. How to simultaneously continue to operate the essential parts of the business while being mindful of possible tort and litigation risks that can come from continuing operations in the midst of a pandemic.

In reexamining risk-based strategies and other vital decisions, Newman underscores the importance of companies remaining true to their values. “At the end of the day, a lot of these circumstances are conflicting. Companies need to take a step back and ask themselves who they are, what they stand for, and make decisions that they are comfortable with and can explain to their workforce and to their customers – and that are true to their identity.”

Leadership through the crisis

Drawing on his experience serving as chief of staff to the U.S. Government’s Ebola response office, Newman reminds us that there are so many uncertainties around how viruses can change, and many unknowns remain.

Contextualizing all of this, Newman concludes, “Here we are, four months into what is a truly unprecedented global pandemic, and there are so many basic questions that are unknown – and the guidance about which is changing significantly. As important as it is for organizations to plan and think ahead, they also have to be flexible and humble about the fact that many of the best assumptions they are going to make today are going to have to be revised one or two months from now. If you think about how different things look today compared to how people thought they were going to look 30 to 45 days ago, you appreciate that there are going to be things 45 days from now that are beyond the ability of even the most sophisticated organizations to anticipate. They are going to have to constantly go back and reexamine their strategies and plans to ensure that they correspond to the most up-to-date thinking and understanding about where all of this is headed.”

Learn how to Speed Up Decisions To Steer The Ship Through This Time Of Unprecedented Disruption.

This article originally appeared in FEI Daily and is republished by permission.

Dillon Papenfuss

About Dillon Papenfuss

Dillon Papenfuss is a research analyst at Financial Executives International. In addition to research, he writes for FEI Daily (FEI’s daily newsletter covering financial, business, and management news, trends, and strategies) and FEI Forward (FEI’s Sunday newsletter providing the ideas and information financial executives need to consider for the week ahead).