Business Continuity Management System BS 25999-2 in Poland: Empirical Studies

• Autorzy: Sławomir Zapłata

Warianty tytułu

System zarządzania ciągłością działania BS 25999-2 w Polsce: badania empiryczne

• Języki publikacji: EN

Abstrakty

EN

This paper presents the unique results of the first survey in Poland in the area of business continuity management system BS 25999 (BCMS). Key motives, barriers of implementing and results of BCMS are identified, both theoretically and practically during the surveys. Figures of quantitative survey among all 158 companies in Poland with "ISO/IEC 27001" allow to verify the research hypothesis. There are many factors influencing the perception of BCMS, the main are connected with specific of every organization and branch. Normalized management systems, independently of normative basis, are similar because of systematic approach and prevention aim, so results have practical implications for every organization. (original abstract)

W niniejszym artykule przedstawione zostały rezultaty pierwszych badań empirycznych z obszaru systemowego zarządzanie ciągłością (SZCD) działania według wymagań BS 25999. Zarówno w ujęciu teoretycznym, jak i praktycznie zaprezentowane zostały kluczowe motywy, bariery wdrożenia oraz rezultaty SZCD. Postawione hipotezy badawcze zostały zweryfikowane w wyniku badań wśród 158 organizacji w Polsce posiadających system zarządzanie bezpieczeństwem Informacji (SZBI) według wymagań ISO/IEC 27001. Zidentyfikowano, że istnieją różne czynniki wpływające na postrzeganie SZCD, indywidualne dla każdej organizacji o uzależnione od branży. Znormalizowane systemy zarządzanie, niezależnie od podstaw normatywnych, są podobne do siebie z uwagi na systematyczne podejście i prewencyjne ukierunkowanie działań, a tym samym zaprezentowane rezultaty badań mają praktyczny wymiar dla różnorodnych organizacji. (abstrakt oryginalny)

Słowa kluczowe

EN

Business continuity; Business management; Management development; Management; Empirical researches

PL

Ciągłość biznesowa; Zarządzanie biznesem; Doskonalenie zarządzania; Zarządzanie; Badania empiryczne

• Czasopismo: Studia Oeconomica Posnaniensia
• Rocznik: 2016
• Tom: 4
• Numer: nr 10
• Strony: 38--56

Twórcy

autor

Sławomir Zapłata

• Uniwersytet Ekonomiczny w Poznaniu

Bibliografia

• Abrahamsson, M., Hassel, H., Tehler, H., 2010, Towards a System-Oriented Framework for Analysing and Evaluating Emergency Response, Journal of Contingencies and Crisis Management, vol. 18, no. 1, pp. 14-25.
• Alpaslan, C.M., Green, S.E., Mitroff, I.I., 2009, Corporate Governance in the Context of Crises: Towards a Stakeholder Theory of Crisis Management, Journal of Contingencies and Crisis Management, vol. 17, no. 1, pp. 38-49.
• Basterfield, D., Bundt, T., Nordt, K., 2010, Risk Management in Electricity Markets, Managerial Finance, vol. 36, no. 6, pp. 525-533.
• BS 25999-2, 2007, Business Continuity Management, Part 2: Specification, British Standards Institution.
• Carmeli, A., Schaubroeck, J., 2008, Organisational Crisis-Preparedness: The Importance of Learning from Failures, Long Range Planning, vol. 41, no. 2, pp. 177-196.
• Crowther, K.G., 2008, Decentralized Risk Management for Strategic Preparedness of Critical Infrastructure through Decomposition of the Inoperability Input-output Model, International Journal of Critical Infrastructure Protection, vol. 1, no. 12, pp. 53-67.
• Dilber, M., Bayyurt, N., Zaim, S., Tarim, M., 2005, Critical Factors of Total Quality Management and Its Effect on Performance in Health Care Industry: a Turkish Experience, Problems and Perspectives in Management, vol. 11, no. 4, pp. 220-234.
• Eshghi, K., Larson, R.C., 2008, Disasters: Lessons from the Past 105 Years, Disaster Prevention and Management, vol. 17, no. 1, pp. 62-82.
• Foerstl, K., Reuter, C., Hartmann, E., Blome, C., 2010, Managing Suppliers Sustainability Risks in a Dynamically Changing Environment - Sustainable Supplier Management in the Chemical Industry, Journal of Purchasing and Supply Management, vol. 16, no. 2, pp. 118-130.
• Good Practice Guidelines 2008 - A Management Guide to Implementing Global Good Practice in Business Continuity Management, Business Continuity Institute, Caversham, United Kingdom.
• Haimes, Y.Y., 2009, On the Complex Definition of Risk: A Systems-Based Approach, Risk Analysis, vol. 29, no. 12, pp. 1647-1654.
• Hampton, J.J., 2009, Fundamentals of Enterprise Risk Management. How to Companies Assess Risk, Manage Exposure, and Seize Opportunity, American Management Association, New York.
• Heat, R., 2007, A Crisis Management Perspective of Business Continuity, in: Hiles, A. (ed.), The Definitive Handbook of Business Continuity Management, John Wiley & Sons, West Sussex.
• Hemond, Y., Robert, B., 2012, Preparedness: the State of the Art and Future Prospects, Disaster Prevention and Management, vol. 21, no. 4, pp. 404-417.
• ISO 31000:2009, Risk management - Principles and Guidelines, International Organization for Standardization, Geneva.
• ISO Guide 73:2009, Risk management - vocabulary, International Organization for Standardization, Geneva.
• ISO/IEC 27001:2005, Information technology - Security techniques - Information security management systems - Requirements, International Organization for Standardization, Geneva.
• Jin, Y., 2010, The Interplay of Organization Type, Organization Size, and Practitioner Role on Perceived Crisis Preparedness: A Cognitive Appraisal Approach, Journal of Contingencies and Crisis Management, vol. 18, no. 1, pp. 49-54.
• Kern, D., Moser, R., Hartmann, E., Moder, M., 2012, Supply Risk Management: Model Development and Empirical Analysis, International Journal of Physical Distribution & Logistics Management, vol. 42, no. 1, pp. 60-82.
• Khodarahmi, E., 2009, Crisis Management, Disaster Prevention and Management, vol. 18, no. 5, pp. 523-528.
• Lai, I.K.W., Lau, H.C.W., 2012, A Hybrid Risk Management Model: a Case Study of the Textile Industry, Journal of Manufacturing Technology Management, vol. 23, no. 5, pp. 665-680.
• Lawrence, P., Gill, S., 2007, Human Hazard Analysis. A Prototype Method for Human Hazard Analysis Developed for the Large Commercial Aircraft Industry, Disaster Prevention and Management, vol. 16, no. 5, pp. 718-739.
• Lettieri, E., Masella, C., Radaelli, G., 2009, Disaster Management: Findings from a Systematic Review, Disaster Prevention and Management, vol. 18, no. 2, pp. 117-136.
• Low, S.P., Liu, J., Sio, S., 2010, Business Continuity Management in Large Construction Companies in Singapore, Disaster Prevention and Management, vol. 19, no. 2, pp. 219-232.
• McConnell, A., Drennan, L., 2006, Mission Impossible? Planning and Preparing for Crisis, Journal of Contingencies and Crisis Management, vol. 14, no. 2, pp. 51-62.
• Nielson, N.L., Kleffner, A.E., Lee R.B., 2005, The Evolution of the Role of Risk Communication in Effective Risk Management, Risk Management and Insurance Review, vol. 8, no. 2, pp. 279-289.
• Oh, E.H., Deshmukh, A., Hastak, M., 2010, Disaster Impact Analysis Based on Inter-relationship of Critical Infrastructure and Associated Industries. A Winter Flood Disaster Event, International Journal of Disaster Resilience in the Built Environment, vol. 1, no. 1, pp. 25-49.
• Randeree, K., Mahal, A., Narwani, A., 2012, A Business Continuity Management Maturity Model for the UAE Banking Sector, Business Process Management Journal, vol. 18, no. 3, pp. 472-492.
• Richey, R.G. Jr., 2009, The Supply Chain Crisis and Disaster Pyramid. A Theoretical Framework for Understanding Preparedness and Recovery, International Journal of Physical Distribution & Logistics Management, vol. 39, no. 7, pp. 619-628.
• Runyan, R.C., 2006, Small Business in the Face of Crisis: Identifying Barriers to Recovery from a Natural Disaster, Journal of Contingencies and Crisis Management, vol. 14, no. 1, pp. 65-83.
• Schenker-Wicki, A., Inauen, M., Olivares, M., 2010, Unmastered Risks: From Crisis to Catastrophe. An Economic and Management Insight, Journal of Business Research, vol. 63, no. 4, pp. 337-346.
• The ISO Survey of Certifications 2011, International Organization for standardization, Geneva.
• Tuncel, G., Alpan, G., 2010, Risk Assessment and Management for Supply Chain Networks: A Case Study, Computers in Industry, vol. 61, no. 3, pp. 250-259.
• Veen, A., 2004, Disasters and Economic Damage: Macro, Meso and Micro Approaches, Disaster Prevention and Management, vol. 13, no. 4, pp. 274-279.

Identyfikatory

DOI

10.18559/SOEP.2016.10.3