Sensitive documentation (financial, human resource related, or otherwise) is delivered to a specific office location.

• Contact entities mailing sensitive information to determine if alternate secure methods, such as encrypted electronic mailing or remote deposits, are available.
• If physical documentation is received, assign an employee to securely scan, store, and distribute as needed.
• Separate the responsibilities of those receiving sensitive information from those who are responsible for processing or reconciling the information. 

Checks or other instruments require physical dual signature.

• Consider an emergency delegation of authority to allow for checks to be signed by one individual following email authorization from other required signers.
• Determine if temporary exceptions can be made to allow for resumption of operations remotely, while considering any legal implications or requirements.
• Consider alternate forms of payment (e.g., credit cards, online or digital payments, bank transfers).
• Perform timely bank reconciliations and assign the responsibility to a non-financial instrument authorized signer and those without access to records. At a minimum, consider having someone without signature authority review bank activity periodically (consider view-only access through the financial institution website).

Client or customer requests a change in normal business process (for example, a release or transfer of funds).

• Determine who is authorized on behalf of the organization to communicate with outside parties, and adjust as needed. Restrict communications and inform employees of any changes.
• Implement verification procedures to validate legitimacy of received requests (e.g., contacting customers or financial institutions at their authorized numbers).
• Retain copies of all documentation to support client or customer requests and changes, and email copies per that client or customer’s information on file as confirmation of the change.

Documents or valued assets are physically safeguarded in an office location.

• Perform an inventory count and move documents or valued assets to an alternate, secured location where they can only be accessed by authorized personnel.
• Upon resumption of normal business processes, perform another inventory count and reconcile any transactions that may have occurred during the specific time period.