Preparedness Without Panic

When a power cut lasts beyond the evening, the problem spreads from one room to several systems: food warms in the fridge, a clinic has to protect temperature-sensitive supplies, and a business may lose access to records or payments. The useful question is not whether every emergency can be predicted. It is how much time a household, clinic or small firm has to keep its essential routines going.

That pressure can provoke a reflex: buy things, fast. Official guidance asks for something smaller and more practical. FEMA's kit guidance recommends a gallon of water per person per day “for several days” and at least a several-day supply of non-perishable food. The CDC specifies at least three days of water and suggests two weeks if possible; if you fill storage containers yourself, replace the water every six months and use food-grade containers that never held toxic chemicals. These are U.S. agency benchmarks, not Kenyan regulations. Local water access, climate, household health needs and county advice matter. The scale is days, not months.

The household: a small buffer, built at shopping speed

Household readiness is mostly arithmetic about time. FoodSafety.gov says a closed refrigerator keeps food safe for up to four hours, while a full freezer holds a safe temperature for about 48 hours (24 hours if half full and kept closed). Perishable food held above 40°F (4°C) for more than two hours should be discarded; never taste food to test it. FEMA's power-outage guidance also recommends making plans for refrigerated medicines and power-dependent medical devices with a health-care provider. For generator owners it says use generators outdoors at least 20 feet from windows, doors and attached garages, and install working carbon-monoxide detectors. None of this requires a bulk-buying trip.

FEMA's low- and no-cost guidance recommends building a kit over time, starting with items already at home and adding one item during each shopping trip. That is the opposite of a run on the shops. When COVID-19 disrupted protective-equipment supply in 2020, the World Health Organization attributed the disruption to rising demand, panic buying, hoarding and misuse. It reported surgical-mask prices six times higher and N95 respirator prices three times higher, and estimated a need for 89 million medical masks a month. That is evidence about one episode, not a law of every crisis. It shows how hoarding can intensify supply pressure, leaving health workers and clinics exposed when protective equipment runs short.

A small reserve can be built gradually and used in rotation. Its size should follow household needs, available money and local guidance, rather than a target copied from somebody else’s shopping list. Rotation prevents a reserve from becoming waste; buying more than a household can use does not make it safer.

Financial readiness follows the same logic of documents and small margins rather than market positions. FEMA's financial preparedness guidance suggests a modest amount of cash in small bills, because card readers and cash machines can both be down at once; records and policies stored where water and fire cannot reach them; and an honest review of whether existing insurance actually covers the hazards where you live, flooding being the standard example of an exclusion people discover late. This is continuity planning: a way to keep essential payments and records accessible when ordinary channels fail.

The clinic: power first, then the cold chain

A list cannot tell a clinic which dependency will fail first. Power, water, communications and cold storage have to be planned together.

WHO's fact sheet on electricity in health care, published on 14 October 2026, estimates that close to one billion people in low- and lower-middle-income countries are served by facilities without reliable electricity, or without any at all. In sub-Saharan Africa, about 15 percent of facilities have no electricity whatsoever, only 40 percent have a reliable supply, and just half of hospitals report reliable electricity. WHO notes that generators are often not operational and facility energy supply can be insufficient. That exposure can threaten the cold chain, among other services, but the WHO figures do not measure vaccine losses. Kenya's Health Facility Census, published in September 2023, recorded a reliable power source at 89 percent of the 12,375 facilities assessed, backup power at 41 percent, and reliable water at 83 percent. Those are national facility-level indicators. They are not measures of outage frequency or generator adequacy, and they will not describe any single clinic.

For the cold chain itself the guidance is procedural rather than heroic. WHO's temperature-monitoring module covers vaccine vial monitors and logging devices for cold rooms and fridges. The CDC's Vaccine Storage and Handling Toolkit, updated on 14 July 2026, asks providers to use digital data loggers for routine storage, transport and temporary clinics, keep at least one backup logger, review standard operating procedures annually and keep them near the storage unit. It also says not to use vaccines stored outside recommended temperatures unless public-health authorities or the manufacturer confirm they remain safe and effective. In an emergency, generation, fuel, transport and staffing are decisive; monitoring records can show whether a temperature excursion occurred and what response followed.

The clinic is also where physical and cyber preparedness meet. HHS's Cyber Gateway publishes voluntary health-sector cybersecurity goals and the Health Industry Cybersecurity Practices. A hospital locked out of records may face a clinical continuity problem as well as an IT one. Whether a particular outage is an attack is a separate question that requires investigation; a dark building is not evidence of a hostile actor.

The small business: continuity as a schedule

A small firm can survive an immediate hazard and still struggle afterwards, when staff cannot reach the premises, payments are interrupted and customers go elsewhere. FEMA's Ready Business programme and its continuity planning materials are built around a continuity team, a written plan and, above all, exercises, because an untested plan is an opinion. The hazard-specific toolkits cover the boring interruptions that actually happen: power, flooding, wind.

The cyber basics are unglamorous, but not all are free. The FTC's guidance for small business recommends passwords of at least twelve characters, multi-factor authentication, prompt software updates, encrypted devices and data, a separate guest network, regular staff training, and an incident-response plan. Its advice to back up important files should be paired with the joint #StopRansomware Guide from CISA, the NSA, the FBI and MS-ISAC: keep backups offline and encrypted, test restoration, and maintain a hard-copy or offline response plan. A backup reachable from a compromised network may also be encrypted or deleted. The guide advises prioritising systems critical to health and safety during restoration. The FBI and CISA advise against paying a ransom; payment does not guarantee that data will be recovered.

NIST's Cybersecurity Framework is a useful organising vocabulary. CSF 2.0 describes six functions: govern, identify, protect, detect, respond and recover. Governance gives someone responsibility for decisions such as whether to spend a week's margin on a backup system; no framework makes that choice for them.

The civic layer: eight lifelines and six steps

Above the individual institution sits coordination. FEMA's Community Lifelines construct names eight services whose continued operation enables other aspects of society: safety and security; food, hydration and shelter; health and medical care; energy; communications; transportation; hazardous materials management; and water systems. They are stabilised as a set because services depend on one another: health care needs power, and fuel supply depends on transport.

For communities that want to plan rather than react, NIST's Community Resilience Planning Guide offers a six-step process built explicitly around dependencies and cascading consequences, and around the social institutions, not just the buildings, that a community needs to function. It was written for engineers and planners. Its logic works equally well for a county health office asking which facilities matter most when the answer cannot be “all of them.”

Water and wastewater utilities show how power resilience and cyber security meet. CISA, the EPA and the FBI jointly published eight practical cyber actions for water utilities, including reducing internet exposure, changing default passwords, inventorying operational technology and exercising incident response. The EPA's power resilience guide advises utilities to strengthen relationships with electric providers and prepare for outages. The European Union's cyber agency, ENISA, assessed in May 2026 that health, drinking water and wastewater sit in a risk zone where sector criticality exceeds measured cybersecurity maturity. That is a European sector assessment, not evidence about Kenya's utilities.

Rules that survive a false alarm

Preparedness should still be useful when the feared event does not happen. A tested backup, an accessible record and an agreed way to contact a relative can earn their keep during an ordinary outage. They do not require a prediction of war, a market crash or a particular storm.

Institutions can make that discipline concrete by naming triggers in advance. A clinic might link its reorder decision to measured stock and delivery lead times; a business might revisit transport terms when its actual fuel bill changes. The rule needs an owner, a reliable measure and a practicable response. Those are operating choices, not forecasts of national disaster.

The standard is continuity without transferring avoidable costs onto others. A household plan should not empty a shop; a hospital’s fallback should not depend on taking fuel promised to another essential service; an urgent message should not travel faster than its verification. Preparedness becomes civic when it protects the people who have the least room to absorb a failed system.

A Red Cross “ready to go” emergency kit photographed in Washington, D.C., on 7 July 2006. Historical file image illustrating household preparedness, not a current official checklist or evidence of a present emergency. Credit: American Red Cross photograph / FEMA Photo Library. Image source · Public domain in the United States as a FEMA employee work; Commons file page provides FEMA media-use guidance