Current as of March 16, 2020 A: Organizations Checklist of things to consider policies, I. Policy & 1. Develop which adhere to public-health recommendations and workplace laws, including should consider Management those on sick leave, as well as business priorities/continuity remote working and who can access the workplace 2. Set policies for at what times (eg, how to protect staggering shifts, business-critical employees on site only) sign-off processes 3. Set for policy changes their workforce communication channels II. Two-way 1. Select and set protocols to communicate early and often Communication cascaded communications Overall policies should consider 2. Develop approach for to provide clarity and direction two-way communication 3. Establish and confidential reporting for employees safety first, especially for high official authorities 4. Use for information (eg, WHO and CDC) risk individuals, as well as how critical functions III. Personnel 1. Identify and tier and roles, including back-office functions to maintain business & contractors infrastructure needs 2. Assess for remote working or other flexible models (eg, VPN, broadband, operations laptops, remote desktop, etc.); consider piloting/testing system first to learn and adapt (eg, These should be in-line with everyone on multiday pilot, remote desktop trials with subset of employees) reporting and sign-off processes 3. Adapt to reduce loss of productivity (eg, devolved local health authority guidance responsibility); consider training managers on how to manage remotely adaptations required for collective bargaining units and regulatory requirements 4. Agree on (eg, unions, int’l work councils) contractors 5. Agree on policies and incentives with reduce transmission IV. Workplace & 1. Implement physical mechanisms to (eg, cleaning, staggering shifts) norms clarify accountability and authority 2. Communicate with site leaders/N-1 leaders to (eg, WFH)— err on side of agile and localized decision-making contingency plans 3. Define for workplace closures (eg, seating capacity in other buildings) health officials V. Health 1. Engage with to assess risk and response and Government providers and payors engagement 2. Collaborate with healthcare to access appropriate care for individuals (eg, health-plan hotline) 3. Collaborate with appropriate government officials and other regulatory bodies to inform and implement policies McKinsey & Company 20

COVID-19 Facts and Insight - Page 20 COVID-19 Facts and Insight Page 19 Page 21