Business Continuity Management System Research Articles

Proposal of Business Continuity Management System Model Reflecting Characteristics of Public Institutions

Proposal of Business Continuity Management System Model Reflecting Characteristics of Public Institutions

Risk based control of the negative effect of discontinued automated processes – a case from the agricultural domain

The current paper delineates a modern algorithmic procedure for estimating the risk and calculating a realistic duration of interrupted critical computerized business activities, in order to mitigate or prevent their corresponding negative consequences. The contribution is formulated via merging risk management and business continuity concepts. The formulation of an integrated business continuity management policy includes the proactive determination of approximate recovery timeframes for critical business functions. Practically, this estimation is based on recovery tests which are executed under ideal conditions, and unexpected factors which may emerge during a real process interruption and signifi cantly delay its recovery are ignored. Agriculture is a domain where the incorporation of an integrated business continuity management system is a crucial issue. The interruption of agricultural computerized activities can be triggered by and can result to various undesirable environmental phenomena. Thus, especially for agriculture, the consideration of unexpected factors when executing recovery tests is highly demanded. The currently presented algorithm accepts as initial input the estimated recovery time which is based on recovery exercises executed under ideal conditions. Then, a precise number of potential unpredictable hazards (factors) are taken into consideration and the risk magnitude of each threat is semi-quantitatively estimated. The total risk magnitude is utilized to estimate the time deviation from the initially defi ned recovery time. After the risk analysis process is terminated, a new recovery timeframe is proposed. The time deviation from the initially defi ned recovery time is calculated in its absolute value. The algorithm is fi nally validated by applying the calculated extended timeframe to the system availability formula which measures the achieved system availability levels for any information system. The validation of the approach is demonstrated via a practical case study from the agricultural domain, namely the greenhouse irrigation scheduling system interruption scenario.

Seeking Institutional Support of Government for Activating Business Continuity Management System (BCMS)

Seeking Institutional Support of Government for Activating Business Continuity Management System (BCMS)

Exploring a New Approach to the Business Continuity Management Training Practices by Singapore Hotels to Manage the Terrorist Threat

Singapore is vulnerable to terrorist threats. This reality was reinforced by terrorist attacks in South East Asia in recent years. Attacks on soft targets by self-radicalized “lone-wolves” add a new dimension as these are difficult to prevent. Hotels are most vulnerable as they remain accessible to the general public. The Singapore Government has involved the private sector to help counter terror threats. Private sector companies should therefore adopt Business Continuity Management (BCM) systems and train their staff to take on this role. This paper reviews the current BCM and training practices of Singapore hotels. The findings reveal that most hotels have BCM systems and virtually all security staff and crisis team members undergo anti-terrorism training. However, many BCM systems are not based on industry standards and the majority of hotel employees are not trained. Computer simulation games could be a step to address some of these issues.

A Study on the Level of BCMS(Business Continuity Management System) of Small and Medium Enterprises

A Study on the Level of BCMS(Business Continuity Management System) of Small and Medium Enterprises

유행병 발병 시 조직의 비즈니스연속성 관리체계 구축에 관한 연구(금융회사 사례 중심으로)

유행병 발병 시 조직의 비즈니스연속성 관리체계 구축에 관한 연구(금융회사 사례 중심으로)

공공기관이 재난으로부터 중단없는 대국민 서비스 확보를 위한 상향식 업무연속성관리체계 도입방안에 관한 연구

공공기관이 재난으로부터 중단없는 대국민 서비스 확보를 위한 상향식 업무연속성관리체계 도입방안에 관한 연구

Business continuity management systems BS 25999-2 in Poland: empirical studies

Business continuity management systems BS 25999-2 in Poland: empirical studies

Application of Business Continuity Management System into the Crisis Management Field

Abstract Establishing business continuity management (BCM) creates the basis of every organization’s strategy. BCM includes complex procedures that help solving unexpected situations of natural and anthropogenic nature (e.g. fire or flood). Planning of the BCM is a process that helps organizations identify critical processes and implement plans for securing and restoring key processes. The aim of this paper is to demonstrate the application of a systemic approach to BCM known as Business Continuity Management System (BCMS) into the military field. This article describes the life cycle of the BCMS, which is based on PDCA cycle. Subsequently it is applied to the activities carried out by the University of Defence during activation of forces and means in the frame of the Integrated Rescue System (IRS) in case of emergency - an accident in a nuclear power plant in the Czech Republic. Activities in various stages of deployment of allocated forces and means are managed and evaluated using the Military Continuity Management System (MCMS) application.

A Study on Activation Plan of Professional Manpower in a Business Continuity Management System (BCMS)

최근 이상기후에 의한 자연재해의 증가와 더불어 사회적 불안요소의 증가로 예측하기 어려운 다양 한 재해가 세계적으로 빈번히 발생되는 실정이다. 이에 따라 주요 선진국에서는 각종 재난상황에서 도 기업 및 기관의 핵심업무를 제공하기 위한 업무연속성관리체계(BCMS) 활성화 정책을 추진하고 있으며, 활성화 정책으로 양성된 전문인력을 통해 BCMS 관련 산업이 발전되고 있다. 국내에서도 BCMS 관련 법령⋅기준 등을 마련하고 지원정책을 운영중에 있으나, 정책적 접근단계로써 재해경감 활동 운영을 위한 전문인력 및 관련산업 활성화가 미미한 실정이다. 따라서 본 연구에서는 우리나라 재해경감활동 정착과 관련된 여러 현안 중 산업의 기초가 되는 전문인력에 초점을 맞추어 시사점 및 문제점을 파악하고 개선방안을 제시하였다.

정보통신망 건축물의 재난관리를 위한 업무영향분석 연구

Modern society, with the development of technology, desire for public benefits is increasing, dependence, such as infrastructure and public services is increasing. This is that the paralysis of national infrastructure systems, such as infrastructure and public services is likely to cause a national and major social turmoil. In this study, according to the method of the business impact analysis to provide in the ISO continued to maintain the operations and services of the H institutions, presented the basic data necessary to build the Business continuity management system in order to provide to.

An enhanced risk assessment framework for business continuity management systems

Every organization is exposed to several risks (e.g. cyber-attacks and disruptions caused by natural disasters). To respond to these risks properly, an effective risk management system should be implemented. Business continuity management is one of the most recent risk management frameworks, which enables the organizations to improve their resilience in order to cope with the identified risks. Risk assessment is one of the main parts of a business continuity management system (BCMS). In this paper, an enhanced risk assessment framework is proposed within the context of BCMS while accounting for specific steps and requirements of a BCMS. The proposed framework benefits from a suite of analytic techniques to enhance and facilitate the risk assessment and management within the well-known four-step framework (i.e. identifying, analyzing, evaluating, and responding to risks). The results of applying the proposed framework in a real case study demonstrate that it can effectively handle risk assessment and management process when implementing BCMS in an organization.

Design and development of an agent-based model for business operations faced with flood disruption

Small and Medium Enterprises (SMEs) constitute a major component of the United Kingdom’s economy, accounting for 99.9% of all private sector businesses and approximately 47% of annual turnover in 2014 [1]. However, these companies can suffer significant financial losses as a consequence of a disruption to business operations, such as a flood event, due to their limited resources and lack of organizational plans. Agent-based modelling is recognised as one approach to enable complex problems in business and social science to be studied. SMEs’ preparedness and response to disruptive events can be complex and interactive processes. Hence, agent-based modelling is an appropriate approach to study these processes and identify any emerging phenomena. With the aim of providing guidance for SMEs regarding how to better prepare and respond to the challenges faced when flooding occurs in the future, an agent-based model (ABM) is currently being designed and developed to represent and simulate SMEs’ existing and potential behaviours immediately prior to, during and in the short-term aftermath of a flood event. This paper describes preliminary work on the ABM’s development undertaken including the design of the various agents represented, the rules governing agent behaviours, the attributes of agents and the environment in which they operate. The basis of the ABM design draws on a range of sources including semi-structured interviews with SMEs which have experience of significant flooding, guidelines from the Environment Agency and local councils, business continuity management systems’ requirements (ISO223301) and academic literature. Further, the paper discusses performance metrics of SMEs which are adopted to assess the level of continuity of business operations in the model.

Implementing business continuity management systems and sharing best practices at a European bank

This paper provides an overview of the methodology applied by the Alpha Bank Group in order to implement a business continuity management (BCM) programme to its parent company (Alpha Bank SA), as well as to its subsidiaries in Albania, Bulgaria, Cyprus, Former Yugoslav Republic of Macedonia, Greece, Romania, Serbia, UK and Ukraine. It also reviews the problems faced, how they were overcome and the lessons learned. When implementing a BCM programme in a large organisation, it is very important to follow the methodology described by BCM standard ISO 22301, otherwise the business continuity plan is unlikely to work efficiently or comply with the business recovery requirements, as well as with the requirements of other interested parties, such as customers, regulatory authorities, vendors, service providers, critical associates, etc.

재난안전기술 성능인증과 BCMS 인증 비교연구

인증제도는 제품과 서비스에 표준화와 신뢰성 부여를 통하여 시장진입의 장벽을 낮춰주는 효과가 있으며, 경제적 이익과 경제영토를 확장할 수 있어 글로벌 시장에서 필수요소가 되었다. 인증은 지식재산권처럼 상품을 거래하는데 하나의 수단으로 활성화 되어 있어, 지식재산제도와 함께 발전하고 있다. 재난안전관리분야에서 시스템인증은 사업연속성관리체계(ISO 22301)가 국제표준으로 2012년 개발되었으며, 국내에서도 기업재해경감법에 재해경감 우수기업 인증제도가 도입되었다. 따라서 재난안전기술 분야 인증은 현재 국제표준이 없기 때문에 우리나라가 선제적 성능인증기준 개발을 통하여 글로벌 시장에 선착하는 역할을 위한 연구가 절실하다. 본 연구에서는 재난안전기술 성능인증 개발을 위한 국내외의 인증제도를 분석하고, BCMS 시스템인증과의 차이점을 통하여 재난안전기술 산업 활성화와 더불어 국제협력 강화 및 기술의 해외보급을 위한 재난안전기술 성능인증제도 도입 필요성을 제시하였다. 특히 국제 표준화의 기초가 되고 경제영토 확대 및 창조경제의 우수성을 재난안전기술 성능인증으로 국내표준 개발과 더불어 법제화가 시급한 상황이다. Certification system becomes an essential factor in global market, because it could lower barriers to entry into markets providing the standardization and reliability of products and services. Certification system could help expand economic interest and territory. Certification is activated one of the ways to trade a product as intellectual property rights, and developed along with intellectual property policy. In the field of disaster management, Business Continuity Management System (BCMS, ISO 22301) was developed globally in 2012 and certification system for enterprise with outstanding performance in disaster mitigation was introduced under the Act on assistance to the autonomous activities of enterprises for disaster mitigation in Korea. Since there is no international standard for certification system in the field of disaster and safety technology, it is urgently required to study to develop standards of performance certification for disaster and safety technology for entering global markets. This study analyzes and compares domestic and international certification system including BCMS to develop the Excellent Performance Certification on Disaster and Safety Technology. Moreover, this study suggests the needs of introduction of the Excellent Performance Certification System on Disaster and Safety Technology to vitalize business market related with disaster and safety technology, to enhance international cooperation, and to increase technology transfer to overseas. Especially, standardization and legislation of certification for disaster and safety technology in Korea are urgently necessary to form the foundation of international standardization, expand economical territory, and introduce of the excellence of creative economy.

Information Security Management - Part Of The Integrated Management System

Abstract The international management standards allow their integrated approach, thereby combining aspects of particular importance to the activity of any organization, from the quality management systems or the environmental management of the information security systems or the business continuity management systems. Although there is no national or international regulation, nor a defined standard for the Integrated Management System, the need to implement an integrated system occurs within the organization, which feels the opportunity to integrate the management components into a cohesive system, in agreement with the purpose and mission publicly stated. The issues relating to information security in the organization, from the perspective of the management system, raise serious questions to any organization in the current context of electronic information, reason for which we consider not only appropriate but necessary to promote and implement an Integrated Management System Quality - Environment - Health and Operational Security - Information Security

Area Business Continuity Management, A New Approach to Sustainable Local Economy

The flooding of the Chao Phraya River in Thailand and the Great East Japan Earthquake and Tsunami, both of which occurred in 2011, reminded us of the risks of business disruption and further impacts on national, regional, and global economies through supply chains when disasters occur anywhere in the world. Considering the increasing economic losses attributable to disasters, the fourth session of the Global Platform for Disaster Risk Reduction (2013) aimed to promote resilience and foster new opportunities for public-private partnerships as part of an overall approach to improving risk governance. Furthermore, it highlighted that a growing world requires a new approach to development action, emphasizing the private sector&rquo;s role in managing disaster risks. One of the most significant private sector contributions to disaster risk management is the creation of the business continuity plan/planning (BCP) and business continuity management (BCM) systems, which were standardized as ISO22301 and disseminated in many business enterprises around the world. However, a BCP or BCM system has been neither formulated for nor implemented in most local enterprises in industry agglomerated areas, even though these are located in areas vulnerable to disasters. Moreover, in the case of large-scale disasters, a business enterprise’s capacity may be too limited to mitigate damages and maintain operations through its own efforts, even if BCPs are prepared. The main reason for this is the disruption of public infrastructure and services. In order to minimize the negative economic impacts or economic losses, particularly in the case of a large-scale disaster that disrupts the fundamental infrastructure in certain areas, it is important to conduct risk assessment on a proper scale and to prepare scenario-based disaster management plans for area-wide damage mitigation. In addition, it is essential to have integrated resource management and strategic recovery plans to support each enterprise&rquo;s BCM actions in coordination with public sector activities. Considering this backgrounds, the Japan International Cooperation Agency (JICA) and the ASEAN Coordination Center for Humanitarian Assistance on Disaster Management (AHA Center) launched the “Natural Disaster Risk Assessment and Area Business Continuity Plan Formulation for Industrial Agglomerated Areas in the ASEAN Region” project in February 2013. The project introduced the new concept of the Area BCP, which, based on a risk assessment of the area, designates a framework and direction for coordinated damage mitigation measures and recovery actions by stakeholders, including individual enterprises, industrial area managers, local authorities, and infrastructure administrators, to allow business continuation of the industrial area as a whole. The project also established Area BCM as a cyclic process of risk assessment, sharing risk and impact information, determining a common strategy of risk management, developing the Area BCP, implementing and monitoring the planned actions to continuously improve the Area BCM system, and coordinating among stakeholders, in order to improve the capability for effective business continuity of the area. This paper aims to evaluate the progress of the project and to explore lessons from the applied process of Area BCM and its benefits.

Proposal of a Business Continuity Management System Model in Consideration of Healthcare Characteristics．

Proposal of a Business Continuity Management System Model in Consideration of Healthcare Characteristics．

A new framework for business impact analysis in business continuity management (with a case study)

Resumption of critical processes/functions after occurrence of any disruptive event is essential from the business continuity (BC) viewpoint. Business impact analysis (BIA) is a key part of a business continuity management system (BCMS) in which an organization’s key products/services along with the critical functions and their BC related indices, i.e., the maximum tolerable period of disruption (MTPD) and the minimum business continuity objective (MBCO) are determined. This study proposes a novel framework to conduct the BIA in organizations in a more systematic and comprehensive way mostly by relying on some effective multi attribute decision making (MADM) techniques. A case study in an auto part manufacturer is also provided to validate the proposed framework whose results demonstrate the applicability and usefulness of the proposed approach.

The Role of Business Continuity Management in the Business Management System

Every entrepreneur strives to manage his business in the most effective and efficient way, using different tools and approaches, but mainly relies on a well-functioning system of business management. Whether the responsible authorities and organizations at national and international level can help him and how to do it? In an attempt to be helpful, are they not creating any additional problems by multiple demands on the individual elements of the company's management? Considering the fact that the management of a business organization is made up of a significant number of subsystems that must work together in harmony, the International Organization for Standardization published in 2011 ISO Guide 83, which gave new directions for the development of management systems to achieve uniform and consistent, high level of structure identical text and general terms and basic definitions. The main objective is to create conditions for the development and use of effective and efficient business management system. But is this what is only necessary for business - effectiveness and efficiency ? At the time in which we live should not this management have one more leading feature - viability by ensuring business continuity in all conditions and situations? This is the focus of this publication, that is to say, the presentation of the idea of the Business Continuity Management System leading role as part of the Management System of business organization (Integrated Business Management System).