System zarządzania ciągłością działania BS 25999-2 w Polsce: badania empiryczne
DOI:
https://doi.org/10.18559/SOEP.2016.10.4Słowa kluczowe:
Ciągłość biznesowa, Zarządzanie biznesem, Doskonalenie zarządzania, Zarządzanie, Badania empiryczneAbstrakt
W niniejszym artykule przedstawione zostały rezultaty pierwszych badań empirycznych z obszaru systemowego zarządzanie ciągłością (SZCD) działania według wymagań BS 25999. Zarówno w ujęciu teoretycznym, jak i praktycznie zaprezentowane zostały kluczowe motywy, bariery wdrożenia oraz rezultaty SZCD. Postawione hipotezy badawcze zostały zweryfikowane w wyniku badań wśród 158 organizacji w Polsce posiadających system zarządzanie bezpieczeństwem Informacji (SZBI) według wymagań ISO/IEC 27001. Zidentyfikowano, że istnieją różne czynniki wpływające na postrzeganie SZCD, indywidualne dla każdej organizacji o uzależnione od branży. Znormalizowane systemy zarządzanie, niezależnie od podstaw normatywnych, są podobne do siebie z uwagi na systematyczne podejście i prewencyjne ukierunkowanie działań, a tym samym zaprezentowane rezultaty badań mają praktyczny wymiar dla różnorodnych organizacji.
Pobrania
Bibliografia
Abrahamsson, M., Hassel, H., Tehler, H., 2010, Towards a System-Oriented Framework for Analysing and Evaluating Emergency Response, Journal of Contingencies and Crisis Management, vol. 18, no. 1, pp. 14-25.
Zobacz w Google Scholar
Alpaslan, C.M., Green, S.E., Mitroff, I.I., 2009, Corporate Governance in the Context of Crises: Towards a Stakeholder Theory of Crisis Management, Journal of Contingencies and Crisis Management, vol. 17, no. 1, pp. 38-49.
Zobacz w Google Scholar
Basterfield, D., Bundt, T., Nordt, K., 2010, Risk Management in Electricity Markets, Managerial Finance, vol. 36, no. 6, pp. 525-533.
Zobacz w Google Scholar
BS 25999-2, 2007, Business Continuity Management, Part 2: Specification, British Standards Institution.
Zobacz w Google Scholar
Carmeli, A., Schaubroeck, J., 2008, Organisational Crisis-Preparedness: The Importance of Learning from Failures, Long Range Planning, vol. 41, no. 2, pp. 177-196.
Zobacz w Google Scholar
Crowther, K.G., 2008, Decentralized Risk Management for Strategic Preparedness of Critical Infrastructure through Decomposition of the Inoperability Input-output Model, International Journal of Critical Infrastructure Protection, vol. 1, no. 12, pp. 53-67.
Zobacz w Google Scholar
Dilber, M., Bayyurt, N., Zaim, S., Tarim, M., 2005, Critical Factors of Total Quality Management and Its Effect on Performance in Health Care Industry: a Turkish Experience, Problems and Perspectives in Management, vol. 11, no. 4, pp. 220-234.
Zobacz w Google Scholar
Eshghi, K., Larson, R.C., 2008, Disasters: Lessons from the Past 105 Years, Disaster Prevention and Management, vol. 17, no. 1, pp. 62-82.
Zobacz w Google Scholar
Foerstl, K., Reuter, C., Hartmann, E., Blome, C., 2010, Managing Suppliers Sustainability Risks in a Dynamically Changing Environment - Sustainable Supplier Management in the Chemical Industry, Journal of Purchasing and Supply Management, vol. 16, no. 2, pp. 118-130.
Zobacz w Google Scholar
Good Practice Guidelines 2008 - A Management Guide to Implementing Global Good Practice in Business Continuity Management, Business Continuity Institute, Caversham, United Kingdom.
Zobacz w Google Scholar
Haimes, Y.Y., 2009, On the Complex Definition of Risk: A Systems-Based Approach, Risk Analysis, vol. 29, no. 12, pp. 1647-1654.
Zobacz w Google Scholar
Hampton, J.J., 2009, Fundamentals of Enterprise Risk Management. How to Companies Assess Risk, Manage Exposure, and Seize Opportunity, American Management Association, New York.
Zobacz w Google Scholar
Heat, R., 2007, A Crisis Management Perspective of Business Continuity, in: Hiles, A. (ed.), The Definitive Handbook of Business Continuity Management, John Wiley & Sons, West Sussex.
Zobacz w Google Scholar
Hemond, Y., Robert, B., 2012, Preparedness: the State of the Art and Future Prospects, Disaster Prevention and Management, vol. 21, no. 4, pp. 404-417.
Zobacz w Google Scholar
ISO 31000:2009, Risk management - Principles and Guidelines, International Organization for Standardization, Geneva.
Zobacz w Google Scholar
ISO Guide 73:2009, Risk management - vocabulary, International Organization for Standardization, Geneva.
Zobacz w Google Scholar
ISO/IEC 27001:2005, Information technology - Security techniques - Information security management systems - Requirements, International Organization for Standardization, Geneva.
Zobacz w Google Scholar
Jin, Y., 2010, The Interplay of Organization Type, Organization Size, and Practitioner Role on Perceived Crisis Preparedness: A Cognitive Appraisal Approach, Journal of Contingencies and Crisis Management, vol. 18, no. 1, pp. 49-54.
Zobacz w Google Scholar
Kern, D., Moser, R., Hartmann, E., Moder, M., 2012, Supply Risk Management: Model Development and Empirical Analysis, International Journal of Physical Distribution & Logistics Management, vol. 42, no. 1, pp. 60-82.
Zobacz w Google Scholar
Khodarahmi, E., 2009, Crisis Management, Disaster Prevention and Management, vol. 18, no. 5, pp. 523-528.
Zobacz w Google Scholar
Lai, I.K.W., Lau, H.C.W., 2012, A Hybrid Risk Management Model: a Case Study of the Textile Industry, Journal of Manufacturing Technology Management, vol. 23, no. 5, pp. 665-680.
Zobacz w Google Scholar
Lawrence, P., Gill, S., 2007, Human Hazard Analysis. A Prototype Method for Human Hazard Analysis Developed for the Large Commercial Aircraft Industry, Disaster Prevention and Management, vol. 16, no. 5, pp. 718-739.
Zobacz w Google Scholar
Lettieri, E., Masella, C., Radaelli, G., 2009, Disaster Management: Findings from a Systematic Review, Disaster Prevention and Management, vol. 18, no. 2, pp. 117-136.
Zobacz w Google Scholar
Low, S.P., Liu, J., Sio, S., 2010, Business Continuity Management in Large Construction Companies in Singapore, Disaster Prevention and Management, vol. 19, no. 2, pp. 219-232.
Zobacz w Google Scholar
McConnell, A., Drennan, L., 2006, Mission Impossible? Planning and Preparing for Crisis, Journal of Contingencies and Crisis Management, vol. 14, no. 2, pp. 51-62.
Zobacz w Google Scholar
Nielson, N.L., Kleffner, A.E., Lee R.B., 2005, The Evolution of the Role of Risk Communication in Effective Risk Management, Risk Management and Insurance Review, vol. 8, no. 2, pp. 279-289.
Zobacz w Google Scholar
Oh, E.H., Deshmukh, A., Hastak, M., 2010, Disaster Impact Analysis Based on Inter-relationship of Critical Infrastructure and Associated Industries. A Winter Flood Disaster Event, International Journal of Disaster Resilience in the Built Environment, vol. 1, no. 1, pp. 25-49.
Zobacz w Google Scholar
Randeree, K., Mahal, A., Narwani, A., 2012, A Business Continuity Management Maturity Model for the UAE Banking Sector, Business Process Management Journal, vol. 18, no. 3, pp. 472-492.
Zobacz w Google Scholar
Richey, R.G. Jr., 2009, The Supply Chain Crisis and Disaster Pyramid. A Theoretical Framework for Understanding Preparedness and Recovery, International Journal of Physical Distribution & Logistics Management, vol. 39, no. 7, pp. 619-628.
Zobacz w Google Scholar
Runyan, R.C., 2006, Small Business in the Face of Crisis: Identifying Barriers to Recovery from a Natural Disaster, Journal of Contingencies and Crisis Management, vol. 14, no. 1, pp. 65-83.
Zobacz w Google Scholar
Schenker-Wicki, A., Inauen, M., Olivares, M., 2010, Unmastered Risks: From Crisis to Catastrophe. An Economic and Management Insight, Journal of Business Research, vol. 63, no. 4, pp. 337-346.
Zobacz w Google Scholar
The ISO Survey of Certifications 2011, International Organization for standardization, Geneva.
Zobacz w Google Scholar
Tuncel, G., Alpan, G., 2010, Risk Assessment and Management for Supply Chain Networks: A Case Study, Computers in Industry, vol. 61, no. 3, pp. 250-259.
Zobacz w Google Scholar
Veen, A., 2004, Disasters and Economic Damage: Macro, Meso and Micro Approaches, Disaster Prevention and Management, vol. 13, no. 4, pp. 274-279.
Zobacz w Google Scholar
