Tech Failures in CRE: A Guide to Business Continuity

Commercial Real Estate (CRE) is a dynamic industry that relies heavily on technology for efficient operations and tenant satisfaction. However, this reliance also creates vulnerabilities. Equipment malfunctions, power outages, and communication disruptions can significantly impact business operations and tenant services, leading to financial losses and reputational damage. This report explores the impact of technological failures on business continuity in CRE, examines case studies, and provides guidelines for property managers to prepare for and respond to such incidents. It also delves into technologies and solutions that can mitigate the risk of technological failures and discusses the role of insurance and government regulations in ensuring business continuity.

Impact of Technological Failures on Business Continuity in CRE

In today's interconnected world, technology is woven into the fabric of CRE operations. When these technological systems fail, the consequences can be far-reaching, impacting various aspects of business operations and tenant satisfaction. Over-reliance on technology can create vulnerabilities and increase the complexity of business continuity¹. Some key impacts include:

• Disruption of Operations: Technological failures can bring critical business functions to a halt. A server outage, for instance, can prevent property managers from accessing tenant data, processing rent payments, or responding to maintenance requests, leading to delays and disruptions in essential services¹.
• Loss of Productivity: When technology fails, employees and tenants alike may be unable to perform their duties effectively. If tenants cannot access the internet or building management systems due to a network failure, their work may be disrupted, impacting their overall productivity and potentially leading to project delays².
• Financial Losses: The financial repercussions of technological failures can be substantial. Business interruption, data loss, and recovery costs can all contribute to significant financial strain. For example, a power outage can damage sensitive electronic equipment, leading to costly repairs or replacements³. Furthermore, there are two critical measures of downtime that directly impact financial losses: Recovery Point Objective (RPO) and Recovery Time Objective (RTO). RPO represents the maximum acceptable amount of data loss in case of a disruption, while RTO defines the maximum acceptable time for restoring a system or process after a failure. Minimizing both RPO and RTO is crucial for mitigating financial losses and ensuring business continuity³.
• Reputational Damage: Frequent technological failures can erode tenant trust and damage a property's reputation. If tenants perceive a property as unreliable or technologically outdated, they may choose to relocate, leading to increased vacancy rates and lost revenue⁴.
• Tenant Dissatisfaction: Technological disruptions can directly impact tenant satisfaction. Frequent internet outages, elevator malfunctions, or security system failures can lead to tenant complaints, lease terminations, and negative reviews, ultimately affecting a property's desirability and profitability⁵.

Case Studies of CRE Properties Experiencing Technological Failures

While specific case studies of technological failures directly impacting CRE properties were not found in the provided research material, it is important to acknowledge the growing threat of cyberattacks in the industry⁶. As CRE firms increasingly rely on technology for property management, financing, and tenant services, they become more vulnerable to cyberattacks that can disrupt operations and compromise sensitive data⁶. These attacks can range from ransomware attacks that lock down critical systems to data breaches that expose confidential tenant information. The increasing reliance on interconnected building systems and the growing volume of data managed by CRE firms make cybersecurity a paramount concern.

Guidelines for CRE Property Managers

To effectively prepare for and respond to technological failures, CRE property managers should adopt a proactive and comprehensive approach. This includes developing a robust business continuity plan, investing in redundant systems, prioritizing cybersecurity, and staying informed about relevant regulations.

• Develop a Comprehensive Business Continuity Plan: A well-defined business continuity plan is the cornerstone of preparedness for technological failures. This plan should outline procedures for dealing with various scenarios, such as power outages, equipment malfunctions, and cyberattacks. Key components of a comprehensive plan include:

• Risk Assessment: Identify potential technological risks and their potential impact on business operations. This involves evaluating the likelihood of different types of failures and their potential consequences.
• Recovery Strategies: Develop strategies to restore critical systems and data in case of a technological failure. This may include having backup systems, alternative communication channels, and data recovery procedures.
• Communication Plan: Establish clear communication channels to keep tenants informed during and after a disruption. This includes having contact lists, designated communication platforms, and protocols for disseminating information.
• Regular Testing and Updating: Regularly test and update the business continuity plan to ensure its effectiveness. This involves conducting drills, reviewing procedures, and incorporating lessons learned from previous incidents or near misses⁷.

• Invest in Redundant Systems: Redundancy is key to minimizing the impact of technological failures. Implementing redundant systems, such as backup power generators, redundant internet connections, and offsite data storage, can ensure continued operations even when primary systems fail³.
• Prioritize Cybersecurity: Cybersecurity is no longer an optional measure but a critical necessity for CRE properties. Implementing robust cybersecurity measures, such as firewalls, intrusion detection systems, and regular security awareness training for employees, is essential to protect against cyberattacks and data breaches⁶. This also includes establishing clear data security policies and procedures and ensuring compliance with relevant data protection regulations.
• Ensure Regulatory Compliance: Staying informed about and complying with government regulations and standards related to business continuity and disaster preparedness in CRE is crucial⁹. These regulations often vary by industry and location and may include requirements for data security, emergency preparedness, and business continuity planning.
• Use Technology to Streamline Operations: Adopting property management software and other technologies can streamline operations, improve efficiency, and enhance communication with tenants¹⁰. These technologies can automate tasks, centralize data management, and provide real-time insights into building performance and tenant needs.
• Train Employees: Providing regular training to employees on how to respond to technological failures and follow business continuity procedures is essential⁶. This training should cover various scenarios, communication protocols, and the use of backup systems and alternative procedures.
• Communicate with Tenants: Maintaining open communication with tenants about potential technological risks and the property's preparedness measures is crucial for building trust and minimizing disruption¹¹. This includes informing tenants about planned maintenance activities, potential disruptions, and the property's emergency procedures.
• Data Security and System Integration: Property managers should prioritize data security and the integration of diverse software systems to ensure business continuity¹². This includes implementing strong password policies, regularly updating software to patch vulnerabilities, and integrating different systems to avoid data silos and improve data management.

Technologies and Solutions for Mitigating Technological Failures

A range of technologies and solutions can help CRE properties mitigate the risk of technological failures and ensure business continuity. These solutions can enhance resilience, improve efficiency, and minimize downtime in case of disruptions.

• Cloud Computing: Cloud-based solutions provide offsite data storage and disaster recovery capabilities, ensuring business continuity in case of a local outage². Cloud platforms offer scalability, flexibility, and accessibility, allowing businesses to access data and applications from anywhere with an internet connection.
• Backup and Recovery Systems: Regular data backups and efficient recovery systems are crucial for minimizing data loss and downtime in case of a technological failure⁸. These systems should be regularly tested and updated to ensure they can effectively restore critical data and applications.
• Uninterruptible Power Supply (UPS): UPS systems provide temporary power backup during outages, allowing critical systems to remain operational. This can prevent data loss, equipment damage, and disruptions to essential services.
• Building Management Systems (BMS): BMS can monitor and control various building systems, such as HVAC, lighting, and security, helping to prevent equipment failures and optimize energy consumption. BMS can provide real-time insights into building performance, enabling proactive maintenance and reducing the risk of disruptions.
• Internet of Things (IoT) Devices: IoT devices can monitor building performance, detect potential issues, and automate maintenance tasks, reducing the risk of equipment failures¹³. IoT sensors can collect data on temperature, humidity, occupancy, and other factors, providing valuable insights for optimizing building operations and preventing disruptions.
• Technology Resilience Factors: Understanding the seven factors of technology resilience can provide a framework for enhancing preparedness and minimizing the impact of technological failures¹⁴. These factors include awareness of business operation requirements, technology dependencies, criticality of systems, acceptable operational levels, recovery requirements, testing and exercising plans, and ongoing monitoring and improvement.

Insurance for Technological Failures in CRE

Insurance is a critical tool for mitigating financial losses and facilitating recovery from technological failures in CRE. Property owners and tenants should carefully consider their insurance needs and select appropriate coverage to protect their assets and operations.

• Business Interruption Insurance: This coverage helps compensate for lost income and expenses resulting from business disruptions caused by technological failures¹⁵. It can cover lost rent, operating expenses, and other financial losses incurred during the period of disruption.
• Property Insurance: This covers physical damage to property and equipment caused by events like power surges or equipment malfunctions. It can help cover the cost of repairs or replacements for damaged equipment and property.
• Cyber Insurance: This coverage helps mitigate financial losses resulting from cyberattacks, data breaches, and other technology-related risks¹⁶. It can cover costs associated with data recovery, legal expenses, and regulatory fines.
• Tenant Reimbursements: It's important to understand how insurance costs are distributed between landlords and tenants. Tenant reimbursements, also known as tenant recoveries, are expenses paid back to a landlord by a tenant. These reimbursements often include property taxes, property insurance, maintenance and repair costs, and other operational expenses¹⁷.

When selecting insurance coverage, CRE property owners and tenants should carefully consider factors such as coverage limits, indemnity periods, and policy exclusions to ensure adequate protection against potential technological failures¹⁸. It's also important to stay informed about trends in insurance premiums, which have been on the rise in recent years due to factors such as increasing natural disasters and cyberattacks¹⁹.

Government Regulations and Standards

Government regulations and standards play a significant role in ensuring business continuity and disaster preparedness in CRE. These regulations often vary by industry and location and may include requirements for data security, emergency preparedness, and business continuity planning. Meeting these compliance regulations can provide a competitive advantage by demonstrating a commitment to preparedness and risk management²⁰.

Some key regulations and standards include:

• Health Insurance Portability and Accountability Act (HIPAA): This act mandates business continuity planning for healthcare facilities and organizations dealing with protected health information²⁰. It sets standards for protecting patient data and ensuring the continuity of healthcare services in case of disruptions.
• Gramm-Leach-Bliley Act (GLBA): This act requires financial institutions to protect the security and confidentiality of customer data, including having business continuity plans in place²¹. It emphasizes the importance of safeguarding financial information and maintaining operational resilience.
• Sarbanes-Oxley Act (SOX): This act emphasizes financial record-keeping and reporting accuracy, requiring publicly traded companies to maintain reliable business continuity plans²¹. It aims to ensure the integrity of financial reporting and protect investors.
• National Institute of Standards and Technology (NIST): NIST publishes guidelines related to information security and disaster recovery, which are widely adopted by federal agencies and organizations²¹. These guidelines provide a framework for managing cybersecurity risks and ensuring business continuity.
• Other Regulations: A variety of other government laws and regulations may include aspects of business continuity management, disaster recovery, emergency response, or crisis management²². These regulations may be specific to certain industries or locations and may include requirements for risk assessments, emergency planning, and reporting.

CRE property managers should stay informed about and comply with relevant regulations to avoid penalties and ensure business continuity²³. This includes monitoring regulatory updates, conducting compliance audits, and implementing necessary policies and procedures.

Conclusion

Technological failures pose a significant risk to business continuity in CRE. By understanding the potential impacts, implementing appropriate preparedness measures, and leveraging technology and insurance solutions, CRE property managers can mitigate these risks and ensure the continued operation of their properties and tenant satisfaction. Staying informed about government regulations and industry best practices is also crucial for maintaining a resilient and adaptable CRE business in the face of technological challenges.

Looking ahead, emerging trends in technology will continue to shape the landscape of business continuity in CRE. Artificial intelligence (AI), blockchain technology, and 5G connectivity offer new opportunities for enhancing resilience, automating processes, and improving risk management. AI can be used to analyze data, predict potential failures, and optimize building operations. Blockchain can enhance data security and transparency in transactions. 5G can provide faster and more reliable communication, enabling real-time monitoring and response to disruptions. By embracing these technological advancements, CRE property managers can further strengthen their business continuity strategies and navigate the evolving challenges of the digital age.

Works cited

1. Business continuity: The Role of Technology in Business Continuity Management, accessed December 17, 2024, https://fastercapital.com/content/Business-continuity--The-Role-of-Technology-in-Business-Continuity-Management.html
2. Technology and Business Continuity: A Vital Connection - Bryghtpath, accessed December 17, 2024, https://bryghtpath.com/technology-and-business-continuity/
3. The impact of technology on business continuity planning - Flying Donkey -, accessed December 17, 2024, https://blog.flyingdonkey.com.au/the-impact-of-technology-on-business-continuity-planning/
4. The Role of IT in Business Continuity Planning: A Comprehensive Approach, accessed December 17, 2024, https://wooden-spoon.com/the-role-of-it-in-business-continuity-planning-a-comprehensive-approach/
5. Technology's Role In Business Continuity: Tips For Tech Leaders - Forbes, accessed December 17, 2024, https://www.forbes.com/councils/forbestechcouncil/2024/05/15/technologys-role-in-business-continuity-tips-for-tech-leaders/
6. 7 challenges for CRE cybersecurity - Building Engines, accessed December 17, 2024, https://www.buildingengines.com/blog/cre-cybersecurity-challenges/
7. Ensuring business continuity when technology fails - The Business Magazine, accessed December 17, 2024, https://thebusinessmagazine.co.uk/technology-innovation/ensuring-business-continuity-when-technology-fails/
8. How to ensure business continuity when technology fails, accessed December 17, 2024, https://www.auratechnology.com/blog/how-to-ensure-business-continuity-when-technology-fails/
9. Mitigating AI Risks In Commercial Property Management - Re-Leased, accessed December 17, 2024, https://www.re-leased.com/blog/ai-risks-in-commercial-property
10. Why Commercial Real Estate (CRE) Industry Lags In Technology Adoption? | Salesforce ERP | REDA One, accessed December 17, 2024, https://www.reda.one/blog/why-commercial-real-estate-cre-industry-lags-in-technology-adoption
11. The Importance of Technology in CRE Property Management - SecondKeys, accessed December 17, 2024, https://www.secondkeys.com/resources/the-importance-of-technology-in-cre-property-management
12. Top IT Challenges in Property Management & Solutions 2024 - ION247, accessed December 17, 2024, https://www.ion247.com/insights/top-it-challenges-in-property-management-solutions/
13. 4 Technologies Helping to Overcome Challenges in Property Management - NAI Global, accessed December 17, 2024, https://www.naiglobal.com/4-technologies-helping-to-overcome-challenges-in-property-management/
14. Technology Resilience and Business Continuity - Janco Associates, accessed December 17, 2024, https://e-janco.com/articles/2017/2017-01-09-technology-resilienced.html
15. Business Interruption Insurance: Protect Your CRE Income | Commercial Real Estate Loans, accessed December 17, 2024, https://www.commercialrealestate.loans/blog/business-interruption-insurance-for-cre/
16. Commercial real estate risk management challenges abound in 2020 - ReShield, accessed December 17, 2024, https://reshield.com/blog/commercial-real-estate-risk-management-challenges-abound-in-2020/
17. Tenant Reimbursements in Commercial Real Estate, accessed December 17, 2024, https://www.commercialrealestate.loans/commercial-real-estate-glossary/tenant-reimbursements/
18. Streamlining CRE with FinTech: Tackling rising insurance costs with data-driven solutions, accessed December 17, 2024, https://spark.jllt.com/resources/blog/streamlining-cre-with-fintech-tackling-rising-insurance-costs-with-data-driven-solutions/
19. CRED iQ Analysis on the Rise of CRE Property Insurance Premiums, accessed December 17, 2024, https://cred-iq.com/blog/2023/09/14/cred-iq-analysis-on-the-rise-of-cre-property-insurance-premiums/
20. Business Continuity Compliance Requirements | ConnectWise, accessed December 17, 2024, https://www.connectwise.com/resources/bcdr-guide/ch4-business-continuity-compliance
21. Ensuring Compliance with Business Continuity Regulations, accessed December 17, 2024, https://bryghtpath.com/ensuring-compliance-with-business-continuity-regulations/
22. BCM Legislations, Regulations, Standards and Good Practice - Business Continuity Institute, accessed December 17, 2024, https://www.thebci.org/static/uploaded/aa17d414-03ac-4ddb-a43657dd6297312d.pdf
23. 17 CFR 23.603 -- Business continuity and disaster recovery. - eCFR, accessed December 17, 2024, https://www.ecfr.gov/current/title-17/chapter-I/part-23/subpart-J/section-23.603