Key Takeaways
- • Covid-19 has fundamentally accelerated and exacerbated the security threat landscape, forcing organizations to move beyond traditional reactive, one-size-fits-all security approaches toward proactive, anticipatory risk management models.
- • The pandemic has amplified dual vulnerabilities in both cyber and physical security domains, driven by proliferation of emerging technologies and increased reliance on social media as a primary information source.
- • Organizations must now prioritize the ability to identify and mitigate threats preemptively while ensuring rapid response and recovery capabilities, marking a structural shift in how enterprises approach risk management during operational disruption.
- • Teneo's reassessment of its 2020 security outlook reveals that Covid-19 has created unforeseen complexity requiring businesses to simultaneously manage disease impact on office environments while addressing evolved threat vectors that were not anticipated in pre-pandemic planning.
Summary
When Teneo initially developed its Vision 2020 security risk management outlook in 2019, the organization could not have anticipated how comprehensively the Covid-19 pandemic would reshape the threat landscape confronting businesses across all sectors. The firm's subsequent reassessment, authored by Courtney Adante (President, Risk Advisory) and Brendan Johannsen (Vice President), reframes the original analysis through the lens of pandemic-driven operational disruption and its cascading security implications.
The pandemic has forced most organizations into reactive operational postures focused on immediate concerns—office environment protocols and business continuity measures. However, this reactive positioning has obscured a more critical reality: Covid-19 has irreparably altered and amplified the range of security challenges businesses face. The threat landscape is now evolving at an unprecedented pace, according to Teneo's analysis.
Teneo identifies two primary drivers of this escalated complexity. First, the proliferation of emerging technologies has created new attack surfaces and operational vulnerabilities. Second, the pandemic has accelerated reliance on social media and digital channels as primary sources of information and news—a shift that has expanded organizational exposure to disinformation, cyber threats, and reputational risks spanning both digital and physical domains. The combination of these factors has created security challenges that traditional models cannot adequately address.
The firm advocates for a fundamental reconceptualization of organizational security frameworks. Rather than maintaining traditional, static approaches that treat all threats uniformly, organizations should implement dynamic, targeted, and anticipatory security risk management methodologies. This new paradigm prioritizes three capabilities: threat identification and early mitigation, rapid incident response, and post-event recovery resilience. The implication for institutional investors and alternative asset managers is clear: security infrastructure competency is now a material operational and reputational risk factor that requires board-level attention and continuous adaptation as the threat environment evolves.
The pandemic has forced most organizations into reactive operational postures focused on immediate concerns—office environment protocols and business continuity measures. However, this reactive positioning has obscured a more critical reality: Covid-19 has irreparably altered and amplified the range of security challenges businesses face. The threat landscape is now evolving at an unprecedented pace, according to Teneo's analysis.
Teneo identifies two primary drivers of this escalated complexity. First, the proliferation of emerging technologies has created new attack surfaces and operational vulnerabilities. Second, the pandemic has accelerated reliance on social media and digital channels as primary sources of information and news—a shift that has expanded organizational exposure to disinformation, cyber threats, and reputational risks spanning both digital and physical domains. The combination of these factors has created security challenges that traditional models cannot adequately address.
The firm advocates for a fundamental reconceptualization of organizational security frameworks. Rather than maintaining traditional, static approaches that treat all threats uniformly, organizations should implement dynamic, targeted, and anticipatory security risk management methodologies. This new paradigm prioritizes three capabilities: threat identification and early mitigation, rapid incident response, and post-event recovery resilience. The implication for institutional investors and alternative asset managers is clear: security infrastructure competency is now a material operational and reputational risk factor that requires board-level attention and continuous adaptation as the threat environment evolves.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.