Outbreaks, Surveillance and Pandemic Preparedness

Recognising and containing an emerging virus depends on three linked activities: ongoing surveillance that detects the unusual, an outbreak investigation that establishes what is happening and why, and pandemic preparedness that sets the standing capacity and the international rules for response. Surveillance is the thread that connects them, because it both raises the first alarm and is itself tested and improved by every investigation. The virology laboratory runs through all three: it confirms the agent, types the strain, and turns clinical suspicion into the data on which public-health action rests.

Surveillance: information for action

Public health surveillance is the ongoing, systematic collection, analysis, interpretation and dissemination of health data, tied to public-health action. Alexander Langmuir’s phrase, “information for action,” captures the point: data that do not reach the people who can act on them serve no purpose. Surveillance runs as a cycle, from collection through analysis and interpretation to dissemination and then action, and a weakness in any link degrades the whole. Two flows complete it: feed-forward of information to decision-makers, and feedback to the clinicians and laboratories who provide the data.

Surveillance systems are categorised in several overlapping ways, and a national system usually combines many of them.

Type	What it is	Strength and limitation
Passive	Providers and laboratories report on their own initiative	Cheap and wide, but under-reports
Active	Health officials solicit reports from providers	High-quality, but resource-intensive; reserved for priorities
Comprehensive	Captures all cases in a whole population	Complete, but demanding
Sentinel	A selected set of sites report	Efficient and timely; may miss what falls outside the sites
Indicator-based	Routine reporting of defined diseases against thresholds	Structured, with historical baselines
Event-based	Rapid capture of rumours, clusters and unusual events	Sensitive to the rare and new; less specific
Laboratory-based	Reporting driven by confirmed laboratory results	Timely and specific; enables strain typing
Syndromic	Monitors symptom patterns before a diagnosis is made	Very timely; low specificity
Genomic	Sequences pathogens to track variants and transmission	Powerful for spread and evolution; needs capacity
Environmental (wastewater)	Detects viral shedding in sewage	Population-level, pre-clinical signal; not individual

A good surveillance system is judged against a set of attributes that often pull against one another, so the design is always a compromise. The most important are sensitivity (the proportion of true cases it detects, and its ability to spot an increase), timeliness (the lag between steps), representativeness (how faithfully it describes the real distribution by person, place and time), and predictive value positive (the proportion of reported cases that are real). Acceptability, simplicity, flexibility, data quality and stability complete the list. A system optimised for one attribute usually sacrifices another: a sensitive syndromic system is fast but imprecise, while a confirmatory laboratory system is specific but slower.

Several global programmes show surveillance working at scale. The World Health Organization (WHO) Global Influenza Surveillance and Response System (GISRS) combines sentinel reporting of influenza-like illness and severe acute respiratory infection with a network of reference laboratories that select each year’s vaccine strains. Polio eradication rests on surveillance for acute flaccid paralysis (AFP), in which every case of sudden floppy weakness is investigated virologically to prove or exclude poliovirus, backed by environmental sampling of sewage. Measles elimination depends on case-based surveillance with laboratory confirmation. Each pairs a clinical trigger with laboratory confirmation, the recurring shape of effective viral surveillance.

Outbreak investigation

An outbreak (used interchangeably with epidemic) is the occurrence of more cases of a disease than expected in a given population, place and time, or a single case of something new or of major significance. The word outbreak conveys urgency; endemic describes a disease sustaining its transmission within an area at a steady background level; a cluster is an aggregation of cases in space or time beyond what chance would predict; and a pandemic is an epidemic crossing international borders and affecting large populations. An outbreak is judged to exist on any of three grounds: more cases than the historical baseline, a linked cluster sharing an exposure, or a single case of a disease never seen before or carrying major implications, as with the first human case of a novel avian influenza.

Investigation follows a defined sequence. The order is not rigid and steps often run in parallel, but the logic is fixed: describe first, then test, then act.

1. Confirm that an outbreak exists, comparing current numbers with the expected baseline.
2. Verify the diagnosis clinically and in the laboratory, preserving specimens for typing.
3. Establish a case definition, then actively find cases and compile a line listing.
4. Describe the cases by person, place and time, and generate hypotheses.
5. Test the hypotheses with an analytic study.
6. Conduct supporting environmental or laboratory studies.
7. Draw conclusions on the cause from the converging evidence.
8. Report and recommend control measures to the relevant authorities.
9. Communicate the risk to professionals and the public.
10. Follow up to ensure the recommendations are implemented.

A case definition is a standard set of criteria for counting someone as a case, applied consistently throughout the investigation. It is layered into suspected, probable and confirmed, usually broad and sensitive early so that true cases are not missed, then tightened for the analytic study. Early, suspected definitions often do rest on known epidemiological links, such as travel to an affected area or contact with a case, which help triage patients and ration scarce testing. A stricter rule applies once an analytic study is testing an unknown source: the case definition must not include the exposure under investigation, because building it into the count creates circular reasoning and a spurious association. Descriptive epidemiology then characterises the cases by person (age, sex, occupation, the attack rate in each group), place (mapping, as John Snow did with the Broad Street pump), and time. The primary case is the first on the epidemic curve, distinct from the index case, the first to come to the investigator’s attention, which may not be the same person.

The epidemic curve, a plot of cases against time of onset, is one of the most informative tools in an investigation, because its shape points to the mode of spread.

Epidemic curve	Shape	What it indicates
Point source	Sharp rise and fall within one incubation period	A single brief common exposure
Continuous common source	Abrupt rise then a plateau	An ongoing or intermittent shared source
Propagated	Successive taller peaks about one incubation period apart	Person-to-person (or vector) transmission

From a point-source curve the time of exposure can be back-calculated by counting one mean incubation period back from the peak. Hypotheses are then tested with an analytic study, of which there are two designs.

Design	When used	Measure of association
Case-control	No defined denominator; controls are sampled	Odds ratio
Cohort	The exposed population is defined and countable, as at a single event	Relative risk

A case-control study compares the odds of exposure in cases against controls and yields an odds ratio, and is the workhorse when there is no enumerable population. A cohort study is used when the exposed group is defined and countable, such as everyone at a wedding, and yields a relative risk; the attack rate, the proportion of an exposed group who fall ill, is the building block of both. Conclusions are drawn when laboratory, clinical, environmental and epidemiological evidence converge, and an outbreak is judged over once no new cases appear for at least two incubation periods.

Pandemic preparedness and the international framework

Preparedness is the standing capacity to do all of the above quickly, and a set of international rules that make countries act together. The governing instrument is the International Health Regulations (IHR) of 2005, a legally binding agreement among 196 States Parties that obliges each to detect, assess, notify and respond to public-health events that may cross borders, while avoiding needless interference with travel and trade. At its heart is a decision to report events of potential international concern to the WHO, which may then declare a Public Health Emergency of International Concern (PHEIC): an extraordinary event that poses a public-health risk to other states through international spread and may require a coordinated international response. The WHO Director-General makes the declaration on the advice of an Emergency Committee, and it triggers temporary recommendations to member states, as it did for the 2026 Ebola outbreak caused by Bundibugyo virus.

Two operational networks support this framework. The Global Outbreak Alert and Response Network (GOARN) pools international human and technical resources for rapid response, and GISRS provides the standing influenza-surveillance and reference-laboratory backbone for pandemic influenza. Governance continues to evolve: in 2025 the World Health Assembly adopted a Pandemic Agreement intended to strengthen prevention, preparedness and equitable access to medical countermeasures, complementing the IHR. Underlying all of it are the basic requirements for recognising and responding to any emerging infection: clinicians alert to the unusual, high-standard local laboratories backed by reference-lab expertise, the early involvement of epidemiologists, and the authority and resources to act. The laboratory is central, identifying the agent, typing the strain, and monitoring antiviral susceptibility.

Infection prevention and control in outbreaks

Containing transmission during an outbreak draws on the same principles that govern day-to-day infection prevention and control, treated in depth in the Infection Prevention and Control topic. Two measures are often confused. Quarantine separates people who may be incubating an infection but are not yet ill, while isolation separates those who are already infectious; quarantine loses value once a disease can travel internationally faster than its incubation period, as modern air travel allows. Control is then matched to the route of transmission: hand hygiene and safe water for enteric viruses, respiratory precautions and masks for airborne spread, screening and single-use equipment for blood-borne viruses, and vector control for arboviruses. High-consequence pathogens such as the filoviruses demand stringent barrier precautions, dedicated personal protective equipment and trained teams, and the 1976 Ebola outbreaks were brought under control largely by closing the hospitals that were amplifying spread and tracing contacts. The detailed biosafety and isolation requirements for viral haemorrhagic fevers are covered in the Viral Haemorrhagic Fevers topic.

South African context

South Africa conducts surveillance and outbreak response through the National Institute for Communicable Diseases (NICD), which serves as the national surveillance hub, reference laboratory and outbreak-response coordinator for the National Department of Health. The statutory backbone is the Notifiable Medical Conditions (NMC) system established under the National Health Act, which requires clinicians and laboratories to report a defined list of conditions; the most serious, the Category 1 conditions such as the viral haemorrhagic fevers, measles and acute flaccid paralysis, must be notified immediately, within 24 hours, because each demands a rapid public-health response. Reporting flows through an electronic notification system to the NICD and the national department, completing the surveillance cycle from bedside to action.

Around this statutory core sit several complementary systems. Sentinel surveillance for influenza-like illness and severe acute respiratory infection feeds the global GISRS network; AFP surveillance supports polio eradication; and laboratory-based and genomic surveillance, strengthened during the COVID-19 pandemic, now extends to several pathogens, alongside the environmental wastewater surveillance used during the measles outbreaks. South Africa’s standing as the regional reference centre, with the only biosafety level 4 laboratory on the African continent, means its surveillance and response capacity serves not only the country but the wider region. The durable point is structural: a statutory notification system, an integrated set of surveillance modalities, and a reference laboratory able to confirm and characterise a novel agent are what convert an emerging threat into a manageable one.

References and recommended reading

• Iamsirithaworn S, Thammawijaya P, Ungchusak K. Principles of Outbreak Investigation. In: Oxford Textbook of Global Public Health, 7th edition, Chapter 5.3. Oxford University Press; 2021. The reference for the steps of outbreak investigation, case definitions and the epidemic curve.
• Hien HT, Buehler JW, Kimball AM. Public Health Surveillance. In: Oxford Textbook of Global Public Health, 7th edition, Chapter 15.17. Oxford University Press; 2021. The reference for surveillance types, attributes and systems.
• Burrell CJ, Howard CR, Murphy FA. Control, Prevention, and Eradication. In: Fenner and White’s Medical Virology, 5th edition, Chapter 14. Academic Press / Elsevier; 2017. The foundational account of control measures, the laboratory’s role and eradication.
• World Health Organization. International Health Regulations (2005), 3rd edition. WHO; 2016. The legal framework for international detection, reporting and response, including the Public Health Emergency of International Concern.