Site icon Fox Red Risk Solutions Ltd

Operation CYGNUS – Was the UK’s Coronavirus response a failure based in assumption…?

Cygnus Coronavirus

Cygnus Coronavirus

So much has been discussed about the Tier One Command Post Pandemic planning exercise of 2016. For those who haven’t been part of the discussion, the Public Health England, on behalf of the Department of Health delivered a pandemic planning exercise between 18 to 20 October 2016. The exercise was primarily aimed at assessing high-level strategic preparedness for an influenza (not coronavirus which is a different virus) pandemic level event. The participants were Local Resilience Forums (LRFs), the NHS and various government departments. In total, there were over 950 participants. So…what recommendations were made? Was it really suppressed? Was it even a secret report? Why did we not do better during the Coronavirus Pandemic? Well, let’s find out…

Was it a Secret Report?

No. It’s marked OFFICIAL – SENSITIVE. Official is the lowest classification for information used by the UK Government. Any suggestion it was marked SECRET is not true. For those looking for a corporate proxy, OFFICIAL – SENSITIVE information should be handled as follows:

Was it suppressed?

No. The report was distributed to every man and his dog. The report was sent to all the devolved administrations, government departments including Health, Treasury, DWP, CO, BEIS, DEFRA, HMRC, MoD, MoJ and quite a few others. It was sent to all the LRFs and of course, to various groups within Public Health England itself. Now did any journalists do any investigative journalism around the time of its release…a quick Google Search suggests not. I wonder what could have been happening in the second half of 2016 that could have been more interesting…

What were the issues identified?

What were the lessons [to be] learned?

PPE and the impact on the social care sector were highlighted as potential issues throughout the post-exercise report.

So, what about the assumptions…

Ultimate there will always be a need for some assumptions to be made but the main assumption in this exercise, and why it ultimately led to the situation we are in now, was it was assumed we would have both vaccinations and anti-virals stockpiles in place. It does not appear to have been conceived by the planners of Operation Cygnus that a novel virus would be at the centre of the pandemic that would hit the UK.

Why does this assumption matter? It is possible the impacts to the social care sector would have been largely assumed to have been covered by a vaccination programme and those that were hospitalised would be treated by tried and tested anti-viral drugs. These assumptions would likely give responders, at all levels, a false sense of security. These intended measures, that would have likely been quite successful in an influenza pandemic, simply don’t work in the event of a novel virus outbreak.

More importantly:

Would any planners have ever assumed Care Workers would NOT want to be tested?

Yet this has happened. For what appear to be economic reasons, care workers have avoided being tested for Coronavirus on the basis that, if they were found to be infected, they would not be able to work. Certain care workers did not qualify for Statutory Sick Pay (SSP) were then put in an impossible position of either having money to feed their families and pay their rent or potentially infect a care home resident. Many would think that was an easy choice and health would always trump wealth…and therein lies another assumption. Each of our moral compasses are different. We each face our own challenges and nothing is ever black and white in the real world (even pandas eyes are brown).

If those planning exercises make assumptions, the utility of that planning activity is limited to the boundaries of how the attendees react and respond to those assumptions. Therefore another approach is needed…

Adopt the All-Hazards Approach

Ultimately, it is too early to learn most of the lessons of the pandemic. That will come in time (years, sadly) but two lessons can be learned right now. When planning for disruptive events:

1. Stop making assumptions…stop assuming anything will be in place!

Whatever your imagine or risk appetite can come up with, it can be worse, or at least a different type of crisis than you anticipated. If you’re going to make an assumption, plan for that assumption to be wrong…test until failure…then test again…and again.

2. Stop Scenario-based Planning

I get it, stories make things real for people. It conjures up an image in our minds. The trouble is that story is different for us all and that biases our expectations as to how we would cope in that situation. You may think things will go better than expected and then get caught out. Instead, use the all-hazards approach. The all-hazards approach teaches us to look at how we deal with the impact should we lose our People, Locations, Assets, Technology & Supply Chain (PLATS). Organisations can then stress test the losses all the way through to having nothing at all…

…because sometimes there will be nothing at all.

If you would like to know more about the All-Hazards Approach, get in touch.

About Fox Red Risk

Fox Red Risk is a boutique data protection and cybersecurity consultancy and Managed Security Service Provider which, amongst other things, helps client organisations with implementing control frameworks for resilience, data protection and information security risk management. Call us on 020 8242 6047 or contact us via the website to discuss your needs.

Exit mobile version