How Reduced Staffing Changes Security and IT Change Risks
Summary
Reduced staffing can limit an organisation’s ability to test changes, monitor systems, respond to incidents, and recover. The article advises weighing the risks of acting versus delaying, confirming available capabilities, and preparing escalation and recovery plans.
Key points
- Assess the risk of a proposed change alongside the risk of delaying it, particularly when an urgent vulnerability could increase exposure.
- Decide whether a holiday change freeze is appropriate rather than applying one automatically.
- Check that on-duty staff have the necessary system knowledge, access, supplier support, escalation routes, and decision-making authority.
- Review incident response, business continuity, change management, and recovery plans for reduced-staffing conditions.
- Confirm critical suppliers’ holiday support and ensure emergency and out-of-hours contacts are available.
- Plan how to prioritize and release postponed changes after normal staffing resumes, rather than allowing a backlog to create new risk.
Article Details
- Topic
- Operational resilience and safe change management during reduced staffing, including Huntress Managed Response.