Cigna’s Business Continuity Planning

Cigna is driven by an important mission to help improve the health, well-being, and peace of mind of those we serve across the numerous communities that we reach. To deliver on our mission, we must be prepared to provide our services and offer our products virtually without fail.

Cigna’s Business Continuity Planning (BCP) Team is responsible for developing, maintaining, and implementing business continuity and disaster recovery strategies and solutions, including risk assessments, business impact analyses, strategy selection, and documentation of business continuity and disaster recovery procedures. The company’s Business Continuity Program sets forth plans and procedures for the continuation of business functions and the use of supporting technology to recover critical business processes in the event of hurricanes and other unexpected disruptions, including pandemics. The plans are updated and documented annually. Cigna's enterprise-wide recovery strategies are also tested on an annual basis.

Additionally, Cigna’s critical applications reside in data centers that are protected by emergency generators, and top prioritized data is continuously replicated to our secondary data center. Cigna’s data center recovery plans are routinely tested with end-user evaluations of the restored systems as part of the testing protocol.

During the COVID-19 pandemic, Cigna fully utilized its business continuity capabilities to shift more than 42,000 employees into work-at-home positions quickly and on a global scale. This ensured that only worksite-dependent employees remained onsite. Throughout 2020, BCP continued to monitor COVID-19 impacts to our staff and potential events that could disrupt operations. Cigna had success with the majority of its employees working from home, even while some regions of the United States were also impacted by weather events. Knowing that weather events could pose challenges for our employees during COVID-19, with the majority of our staff working at home, we ensured that we had appropriate contingencies in place for both worksite-dependent employees as well as some non-worksite-dependent employees. For example, we created, tested, and implemented protocols that included safely populating offices in case of emergencies such as winter storms, hurricanes, and prolonged regional power outages.