System zarządzania ciągłością działania BS 25999-2 w Polsce: badania empiryczne
DOI:
https://doi.org/10.18559/SOEP.2016.10.4Słowa kluczowe:
Ciągłość biznesowa, Zarządzanie biznesem, Doskonalenie zarządzania, Zarządzanie, Badania empiryczneAbstrakt
W niniejszym artykule przedstawione zostały rezultaty pierwszych badań empirycznych z obszaru systemowego zarządzanie ciągłością (SZCD) działania według wymagań BS 25999. Zarówno w ujęciu teoretycznym, jak i praktycznie zaprezentowane zostały kluczowe motywy, bariery wdrożenia oraz rezultaty SZCD. Postawione hipotezy badawcze zostały zweryfikowane w wyniku badań wśród 158 organizacji w Polsce posiadających system zarządzanie bezpieczeństwem Informacji (SZBI) według wymagań ISO/IEC 27001. Zidentyfikowano, że istnieją różne czynniki wpływające na postrzeganie SZCD, indywidualne dla każdej organizacji o uzależnione od branży. Znormalizowane systemy zarządzanie, niezależnie od podstaw normatywnych, są podobne do siebie z uwagi na systematyczne podejście i prewencyjne ukierunkowanie działań, a tym samym zaprezentowane rezultaty badań mają praktyczny wymiar dla różnorodnych organizacji.
Pobrania
Bibliografia
Abrahamsson, M., Hassel, H., Tehler, H., 2010, Towards a System-Oriented Framework for Analysing and Evaluating Emergency Response, Journal of Contingencies and Crisis Management, vol. 18, no. 1, pp. 14-25.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Alpaslan, C.M., Green, S.E., Mitroff, I.I., 2009, Corporate Governance in the Context of Crises: Towards a Stakeholder Theory of Crisis Management, Journal of Contingencies and Crisis Management, vol. 17, no. 1, pp. 38-49.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Basterfield, D., Bundt, T., Nordt, K., 2010, Risk Management in Electricity Markets, Managerial Finance, vol. 36, no. 6, pp. 525-533.
##plugins.generic.googleScholarLinks.settings.viewInGS##
BS 25999-2, 2007, Business Continuity Management, Part 2: Specification, British Standards Institution.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Carmeli, A., Schaubroeck, J., 2008, Organisational Crisis-Preparedness: The Importance of Learning from Failures, Long Range Planning, vol. 41, no. 2, pp. 177-196.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Crowther, K.G., 2008, Decentralized Risk Management for Strategic Preparedness of Critical Infrastructure through Decomposition of the Inoperability Input-output Model, International Journal of Critical Infrastructure Protection, vol. 1, no. 12, pp. 53-67.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Dilber, M., Bayyurt, N., Zaim, S., Tarim, M., 2005, Critical Factors of Total Quality Management and Its Effect on Performance in Health Care Industry: a Turkish Experience, Problems and Perspectives in Management, vol. 11, no. 4, pp. 220-234.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Eshghi, K., Larson, R.C., 2008, Disasters: Lessons from the Past 105 Years, Disaster Prevention and Management, vol. 17, no. 1, pp. 62-82.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Foerstl, K., Reuter, C., Hartmann, E., Blome, C., 2010, Managing Suppliers Sustainability Risks in a Dynamically Changing Environment - Sustainable Supplier Management in the Chemical Industry, Journal of Purchasing and Supply Management, vol. 16, no. 2, pp. 118-130.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Good Practice Guidelines 2008 - A Management Guide to Implementing Global Good Practice in Business Continuity Management, Business Continuity Institute, Caversham, United Kingdom.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Haimes, Y.Y., 2009, On the Complex Definition of Risk: A Systems-Based Approach, Risk Analysis, vol. 29, no. 12, pp. 1647-1654.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Hampton, J.J., 2009, Fundamentals of Enterprise Risk Management. How to Companies Assess Risk, Manage Exposure, and Seize Opportunity, American Management Association, New York.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Heat, R., 2007, A Crisis Management Perspective of Business Continuity, in: Hiles, A. (ed.), The Definitive Handbook of Business Continuity Management, John Wiley & Sons, West Sussex.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Hemond, Y., Robert, B., 2012, Preparedness: the State of the Art and Future Prospects, Disaster Prevention and Management, vol. 21, no. 4, pp. 404-417.
##plugins.generic.googleScholarLinks.settings.viewInGS##
ISO 31000:2009, Risk management - Principles and Guidelines, International Organization for Standardization, Geneva.
##plugins.generic.googleScholarLinks.settings.viewInGS##
ISO Guide 73:2009, Risk management - vocabulary, International Organization for Standardization, Geneva.
##plugins.generic.googleScholarLinks.settings.viewInGS##
ISO/IEC 27001:2005, Information technology - Security techniques - Information security management systems - Requirements, International Organization for Standardization, Geneva.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Jin, Y., 2010, The Interplay of Organization Type, Organization Size, and Practitioner Role on Perceived Crisis Preparedness: A Cognitive Appraisal Approach, Journal of Contingencies and Crisis Management, vol. 18, no. 1, pp. 49-54.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Kern, D., Moser, R., Hartmann, E., Moder, M., 2012, Supply Risk Management: Model Development and Empirical Analysis, International Journal of Physical Distribution & Logistics Management, vol. 42, no. 1, pp. 60-82.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Khodarahmi, E., 2009, Crisis Management, Disaster Prevention and Management, vol. 18, no. 5, pp. 523-528.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Lai, I.K.W., Lau, H.C.W., 2012, A Hybrid Risk Management Model: a Case Study of the Textile Industry, Journal of Manufacturing Technology Management, vol. 23, no. 5, pp. 665-680.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Lawrence, P., Gill, S., 2007, Human Hazard Analysis. A Prototype Method for Human Hazard Analysis Developed for the Large Commercial Aircraft Industry, Disaster Prevention and Management, vol. 16, no. 5, pp. 718-739.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Lettieri, E., Masella, C., Radaelli, G., 2009, Disaster Management: Findings from a Systematic Review, Disaster Prevention and Management, vol. 18, no. 2, pp. 117-136.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Low, S.P., Liu, J., Sio, S., 2010, Business Continuity Management in Large Construction Companies in Singapore, Disaster Prevention and Management, vol. 19, no. 2, pp. 219-232.
##plugins.generic.googleScholarLinks.settings.viewInGS##
McConnell, A., Drennan, L., 2006, Mission Impossible? Planning and Preparing for Crisis, Journal of Contingencies and Crisis Management, vol. 14, no. 2, pp. 51-62.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Nielson, N.L., Kleffner, A.E., Lee R.B., 2005, The Evolution of the Role of Risk Communication in Effective Risk Management, Risk Management and Insurance Review, vol. 8, no. 2, pp. 279-289.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Oh, E.H., Deshmukh, A., Hastak, M., 2010, Disaster Impact Analysis Based on Inter-relationship of Critical Infrastructure and Associated Industries. A Winter Flood Disaster Event, International Journal of Disaster Resilience in the Built Environment, vol. 1, no. 1, pp. 25-49.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Randeree, K., Mahal, A., Narwani, A., 2012, A Business Continuity Management Maturity Model for the UAE Banking Sector, Business Process Management Journal, vol. 18, no. 3, pp. 472-492.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Richey, R.G. Jr., 2009, The Supply Chain Crisis and Disaster Pyramid. A Theoretical Framework for Understanding Preparedness and Recovery, International Journal of Physical Distribution & Logistics Management, vol. 39, no. 7, pp. 619-628.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Runyan, R.C., 2006, Small Business in the Face of Crisis: Identifying Barriers to Recovery from a Natural Disaster, Journal of Contingencies and Crisis Management, vol. 14, no. 1, pp. 65-83.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Schenker-Wicki, A., Inauen, M., Olivares, M., 2010, Unmastered Risks: From Crisis to Catastrophe. An Economic and Management Insight, Journal of Business Research, vol. 63, no. 4, pp. 337-346.
##plugins.generic.googleScholarLinks.settings.viewInGS##
The ISO Survey of Certifications 2011, International Organization for standardization, Geneva.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Tuncel, G., Alpan, G., 2010, Risk Assessment and Management for Supply Chain Networks: A Case Study, Computers in Industry, vol. 61, no. 3, pp. 250-259.
##plugins.generic.googleScholarLinks.settings.viewInGS##
Veen, A., 2004, Disasters and Economic Damage: Macro, Meso and Micro Approaches, Disaster Prevention and Management, vol. 13, no. 4, pp. 274-279.
##plugins.generic.googleScholarLinks.settings.viewInGS##
