Upload
anders-rosqvist
View
216
Download
0
Embed Size (px)
Citation preview
8/10/2019 Evaluate Your Business Continuity Management
1/151
E BC :A !
D
, ,
B
5265, 2008
8/10/2019 Evaluate Your Business Continuity Management
2/151
8/10/2019 Evaluate Your Business Continuity Management
3/151
E B C :A !
A
A
2008
8/10/2019 Evaluate Your Business Continuity Management
4/151
E:Eaae Y Be C Maagee: A e ad a e ee ca!
A
Ja AAde R
E
Uf Pa Sc f Ecc ad Maagee, Ld UePeAe N Ma ABMaa Fbeg Ma AB
5265
: 14023504
: D/BB5265
Nbe f age: 151
ED
Be c aagee, be c ag, BCM Eaa Mde, eegecee, c aagee, be ece, eee aagee, cad, c eaede, , c.
ABAC
Ma bee da e ce ca dde cg ad aeg
c ceae e f b e dda eee ad e ce a age. S ca
d ae ee a e a ea a ca eee de. T be abe ce
deed ee, cae eed ee e be c aagee (BCM).T ceae e edge f effece BCM, e dee ad ee a de f
eaag e ee f BCM a ca, BC E . Te de a ef
aee eae be ed a e ee c ca ge aagee ad ace
cae a dca f a eed be ed edce e ea egae be
f ac f a d eee e ca.
Te d e a e fac baed a eae e. Dceed cae ee e
eaed g e e fd e fac f effece BCM. Te de a adaed g a
e ca affae gee ee .
Cg: Bade c Raeg, Ld ea ga, Ld ee, Ld 2008.
Deae f Fe Safe Egeegad Se Safe
Ld UeP.O. B 118
SE221 00 LdSede
[email protected]://.bad..e/eg
Teee: +46 46 222 73 60
Bade c RaegLd ea ga
Ld eeB 118
221 00 Ld
[email protected]://.bad..e
Teef: 046 222 73 60Teefa: 046 222 46 12
8/10/2019 Evaluate Your Business Continuity Management
5/151
ACEDGEETg e ge f e, eea e ae bee aabe . We a ge a
eca a , Uf Pa f e Deae f Be Ada, Ld
Ue, f ea f eeece a ge a ad eed ge f dea
ea.
We a a a Maa Fbeg ad PeAe N a Ma AB ed ee
c ad gae a ce ad egadg BCM ad e fa
de d be cced f gd acab.
Te b e Te BCM Eaa Mde a Cad a c aecaed e
ad ad f e de. F e d e a Ma Hedbeg ade
be.
We d a e a Kee Mge, Lea Ed, Mag Beg, Ta Ga,
Ma Sea, La Eg, Ma Ldge, A R Sece, Ce Gaad Seg N
gae e ee c ee f gea ace f e fag Te BCM
Eaa Mde.
O e Bg Va deee a f gg feedbac ae e fa
dc bee.
F e ecagee ad dg ed e d a e a fae ad
ae.
Fa e d e a e ee a e Deae f Cb Pc f eecg aee ad gea cffee.
E eadg!
Ja A
Ade R
8/10/2019 Evaluate Your Business Continuity Management
6/151
Eaae Y Be C Maagee
EECE A
Te deee f de eee ge ad e ce ca a
ad dde cg ad aeg c ceae e f eee. I ece ea ee
ae bee a be f ce eg gfca ecc ad e cae, a f
ae ae f e eee ed. Seea f ee ce cd ae bee aded bee eaede. Teefe, afac be c aagee (BCM) ce a
c a d be f gea ae a gaa. Te e f e
BC. T
ff e, e a bece
.
Te f a f e a a eae e e c f aagee ad BCM. Baed
e, a fae e a a e f aag dceed cae a deeed. Te e
a e aed dceed cae eea a ae f e fac f effece BCM. Baed e abe e ad dceed cae, a ea de a deeed f eaa f a
ca' ee f BCM. Te ea de a adaed g a e affae e
Cad G ad g a e ee . Te a age a eg e de baed
e ce f e ada.
Sce e f e e cc f e e a d e eae fd e aea
e c, a cafca f ece cec BCM a eeded. T a ade
g a ce f eg cce. Te ee fd e eae ee e
aced fac de e fe dffee aea: dec BCM, dec BCM, eegec ee (ER),
c aagee (CM) ad be ece (BR). Te e a e ed eg dceed
cae c ee ce baed a be f cea. Fac fd af e f e
dceed cae ee ge ea Te BCM Eaa Mde.
Te fac eeed f e e, e ccg Te BCM Eaa Mde, ee fac
c ee fd e cae ad/ ad e a e ce e eae. Qe eaed
a f e eeed fac ee faed ge e ae e, acabe. Te
e ee gaed fe caege (dec BCM, ER, CM, BR ad dec BCM) be abe
ee e f e e, b a f eac eece a f e c . Ee
g e e e ca ada gae g e eeced ae, ee ee
ade fg e e f b e ca ada ad e ee . Se
g eebe e g e de a a eeed gee e fa de.
Te a cae dce ee e e ad bece ae bee aceed ad e
e e f Te BCM Eaa Mde. A a e f e e, e de ge a dca
e ee f BCM b a a ce de ea a ee ca be ade. Te
de a deeed f bee geea. Hece, de cde fac f ecfc
bee e.g. aaceca cae. Sgge fe eeac dee e e
e ee ade.
8/10/2019 Evaluate Your Business Continuity Management
7/151
AAFAG
T fd a a feagde dag eca e ea fdeed ed ga a c
dfaade ade aa a e f de badade feage. Ude eae a e
aa e eea e f c, de a fae, fade aadadea. Fea a
dea e de a d ed be beeda. Dea eb a fedade bec aagee1(BCM) a de f aa gaae. Sfe ed dea a
a a ae effe BCM ge a a feagedga a a de eea
fe f e ab ga fdeeda. F a fa dea fe e de
ed ae aa a eca e de f a dea BCM e feag.
De fa dee a ae e eagegg de. Baea dea
gegg aade eda e ae, a ada e , f a dea dgae
ffade e. Le ade eda dgae fa f a defea e e a fae
ga f effe BCM. A eae f fade aa ed eadeage
ecade eda e fa degde. Dea adeade eda e debag Cadcee a ge eeade f eee. De a ege a a edea
de gga dee efe de ea adege ga.
Efe de fa ege faade a e a a dea dgae ea BCM,
bede a faga ag BCM aga. Dea gde ge e eg a
eeade bege. De BCM ade eae aceade eda de fe a
de: dec BCM, dec BCM, eegec e2(ER), c aagee3(CM) ad be
ece4 (BR). Le ade eda f a dea a cae ade f e aa
ee. De fae ade fe a cae, ee e, ga ea e Te BCM
Eaa Mde.
De fae fc aa a, dee gde, a fae ade cae c/ee
ade e e a eae. Fg f a a de aaade faea fade a
de ge ae a, e ee e ba. Fga gaeade fe ge (dec BCM,
ER, CM, BR ad dec BCM) a ea a ea f eee de. Reae f
feagadege eede de ed de ade eae. Mdee edeade
df bde fd a feagadege c eeadea. Nga ae a aa
ba a a g abad ed adade a dee eeeade c aa ed
de ga dee.
De a ae dea fe c e a c eae a dee a
ada. T fd a fe e dee a ge e da a BCM e de g a
daeeca abee e eae a dee aa. Mdee ecade f a
aa geee. Dea eb a de e ee fae f ecfa feage. Fag
egae fg f a eca eae ga e a dea a.
1Kbeeda f feag.2
Ndbeeda.3Kaeg.4egfga.
8/10/2019 Evaluate Your Business Continuity Management
8/151
Eaae Y Be C Maagee
AC
BCI Be C Ie
BCM Be C Maagee
BCP Be C Pag
BIA Be Iac Aa
BR Be Rece
CM C Maagee
ER Eegec Ree
N/A N Acabe
NRI Negae Re Iac
RI Re Iac
SCM S Ca Maagee
8/10/2019 Evaluate Your Business Continuity Management
9/151
DEF
A ee a cea ee e f ccace a, d cc, ae a effec
e aceee f e e f e ec bece (APM PRAM Gde, 2006, . 17).
C
A a c af ad de, f g agde, dde, ace ad dead a
e ee ad de e f ca eag fae (Re, 1993, . 116).
BE C AAGEE
A c aagee ce a defe ea ea a gaa ad e ac
be ea a e ea, f eaed, g cae, ad c de a fae
f bdg gaaa eece e caab f a effece ee a afegad e
ee f e aede, ea, bad ad aeceag ace (B Sadad,
2008a).
CA
Lfe cce cee g ca, fa, faca ad edge f f g
dc ad ece f e ed e (Ae, 2000, . 6).
EECE
Te ab f a gaa, aff, e, e, ac ce abb e ac f a
be e, d ad/ ad ce de a acceabe ee f
ece (BCI, 2008).
EEGEC EE
Ac ae ec ee, e ee ad ae (baed N, 2008).
C AAGEE
Ogaed aagee f deed ee g dec aegca ad acca e
ad e adg f ea ad eea cca (baed N, 2008).
BE ECE
Sece ce, aeae dc, ee cee ad ca aagee
(baed N, 2008).
DEC BC
Dec BCM e ag f ER, CM ad BR (A & R, 2008, ee cae 4.1).
DEC BC
Idec BCM ea a e fac fece e ce f BCM beg a a f e
eec f ER, CM ad BR (A & R, 2008, ee cae 4.1).
8/10/2019 Evaluate Your Business Continuity Management
10/151
Eaae Y Be C Maagee
CE
1 Idc ..................................................................................................................................... 1
1.1 Bacgd .............................................................................................................................. 1
1.2 Teeca bacgd ........................................................................................................... 2
1.3 Pe ad bece ........................................................................................................... 3
1.4 Tage g .......................................................................................................................... 4
1.5 Dea ........................................................................................................................... 4
1.6 Cae ee .................................................................................................................... 5
2 Medg ................................................................................................................................... 6
2.1 Scefc aac .................................................................................................................. 6
2.2 Te eeac ce ............................................................................................................... 6
2.3 Reeac ............................................................................................................... 6
2.4 Reeac aace .............................................................................................................. 7
2.5 Reeac aege ................................................................................................................. 7
2.6 Te .......................................................................................................................... 8
2.7 Reab ad ad ............................................................................................................. 8
2.8 Obec ............................................................................................................................... 9
2.9 Sce .................................................................................................................................... 9
2.10 Wg ed ................................................................................................................... 10
3 Te e ................................................................................................................................ 11
3.1 R aagee eg ............................................................................................. 11
3.1.1 R aagee .......................................................................................................... 11
3.1.2 Be c aagee ................................................................................. 13
3.1.3 C aagee & c eaede .................................................................... 17
3.1.4 S ca aagee ............................................................................................ 18
3.2 Ca f ee ...................................................................................................................... 19
3.3 Scg e cce ....................................................................................................... 20
4 Leag f dceed cae ................................................................................................. 214.1 Te cc f a e ..................................................................................................... 21
4.2 Cg e cae ................................................................................................................ 22
4.3 Dceed cae ................................................................................................................ 24
4.3.1 Te Na/Ec d ...................................................................................... 24
4.3.2 Te e a BP Tea C efe ........................................................................ 28
4.3.3 Te Fee eca f Fd Ee e USA ......................................................... 32
4.3.4 Te SAS Da 8 Q400 cde ..................................................................................... 35
4.3.5 E bac .......................................................................................................... 384.3.6 A Face fg AF4590 ................................................................................................ 40
8/10/2019 Evaluate Your Business Continuity Management
11/151
4.3.7 Cba Jaa ................................................................................................................ 42
4.3.8 CcaCa UK Daa daa ................................................................................ 43
4.4 Le f e dceed cae .................................................................................... 45
5 Te BCM Eaa Mde ........................................................................................................... 47
5.1 Deeg e ea de ........................................................................................ 47
5.1.1 Fac eeed f e e ..................................................................................... 47
5.1.2 Fa f e .............................................................................................. 48
5.1.3 Fed f aca ........................................................................................................ 49
5.2 Mde ada.................................................................................................................... 49
5.2.1 Ca ada ....................................................................................................... 49
5.2.2 Ee ada ............................................................................................................ 51
5.3 Mde e ....................................................................................................................... 53
5.4 Te fa de ...................................................................................................................... 575.5 Aca f Te BCM Eaa Mde ........................................................................... 57
5.5.1 Beef .......................................................................................................................... 58
5.5.2 Wg cede........................................................................................................ 58
6 Re ........................................................................................................................................... 59
6.1 Meeg e bece .......................................................................................................... 59
6.2 Ffg e e ............................................................................................................. 60
6.3 Dcg e acab f Te BCM Eaa Mde .................................................. 60
6.4 Fe eeac ..................................................................................................................... 607 Refeece ..................................................................................................................................... 62
7.1 We efeece ................................................................................................................ 62
7.2 Iee ce .................................................................................................................... 66
Aedce ............................................................................................................................................ 69
A. Te fa de .............................................................................................................................. 70
B. Cafca f fac ................................................................................................................. 77
C. Ma eea ....................................................................................................................... 96
D. Cee f dceed cae .............................................................................................. 99E. Ca ada ..................................................................................................................... 103
F. Ee Vada ......................................................................................................................... 134
8/10/2019 Evaluate Your Business Continuity Management
12/151
8/10/2019 Evaluate Your Business Continuity Management
13/151
1Idc
1 DC
T e e fa a f e Mae f Scece R Maagee ad Safe
Egeeg gae a Ld Ue, Fac f Egeeg, Sede. TeSed ace be ad ad Ma AB ed e a ee
be c aagee (BCM). T ee e a f e e
Deae f Be Ada, Ma AB ad e Deae f Fe Safe
Egeeg ad Se Safe aced a e.
1.1 BACGD
Te deee f de eee ge ad e ce ca
a ad dde cg ad aeg c ceae e f
eee (Seff, 2005; Bae & Cg, 2005). I ece ea ee aebee a be f ce eg gfca ecc ad, e cae,
a f ae ae f e eee ed (Seff, 2005). Te a f e
cae e d e ca c a ee a e a
ea a ca eee de (Bae & Cg, 2005). T aec
fe deaed b Hedc ad Sga (2005) a e c
e deceaed b ea 40 % aeage f 827 ca d
acee.
Fee, ee a bee a ceae e dead da eee.
Lega, e ea ad cage ce dead ae ae afe fac a cbe aagee a a fac f ce. (Hc
& Gd, 2004)
Te be d a ee eae f ce a cd ae bee aded
bee eaede. A eae a da b gd ad bad BCM e fe a
ecdc fac Abee, USA c e ed ed Na ag
ae ae f Ec (La, 2001). Ae eae e J &
J Te cae 1982 c acced f ded f f da f
fge ae ad added c (Mce, 1989). Tee cae fe e
ace f BCM a a a f e eee aagee gae.
Fee, ga f a eac a be def a
ad d a e a gea c. Teefe, e a a a
afac BCM ce a c a d be f gea ae a
gaa. Oe a eee e c a be a e gaed ad
eaed c aagee ea e eee (Cg, 2004). If e e
fac f gd BCM ca be defed, a, a a e f e ace f e
eee aagee, ge e ca e eece g g g
cd ad e ea a e a cede f ae ae a
5R & Wf (2007), . 44.
8/10/2019 Evaluate Your Business Continuity Management
14/151
2 Eaae Y Be C Maagee
e eaed cae gge e dae e. T ead e cc
a a de eaae ee a eee a a afac ee f BCM
d be e ee f a.
1.2 EECA BACGD
Kaa ad Gac (1981) ae a e e defe a a e a
ae e ee e: Wa ca ae? H e ae? Ad, f
ae, a ae e ceece? T e fc e ab edce
ceece e e a ae g ceece e aceee f
bece ad babe a ee ae a de e f ca
eag fae ad af, de ad f g agde c,
accdg Re (1993, . 116), caacee a c.
Tee ca aa be a dc e ae ee cae cea d
be aed a e a aage a g bab cde eceece. Sc e a. (1982) ae a a dda ecee a
geae ea f g ceece ee f e babe d ae
ee e a f Kaa ad Gac def ed. Teefe, a
a e e a eceed a gaa cd be cceae
cae cea. Fee, a cae ae eaed e
aage fee cde b fe ee dea, e a e be
age eg, a eg gegaca aed be cceed
eee ceece ea (Mff, 2005).
T be abe gae ad aage ea ea, a BCM gae f geaace (Te, 2004; Kg & Pe, 2002). BCM ce ee ae,
eegec ee (ER), c aagee (CM) ad be ece (BR)
(N, 2008). ER fce e ace ae f a accde ad cde feag,
ee ec ad e ec eae. CM fce
aag cca fc e ca dg a c e BR ac ae
ee e be ace e ga ee. T e fc BCM
ad e ac ae b e gaa edce e ceece f a c
a.
Eae cae a e a aec f BCM cde e ca c e ca e (Pa, 2007). A ca ce de a
bee deeed b Pec e a. (2003) ceae ee ca ad
gae a age ceece cde aea a a e f a d e
ca. Pec e a. de a cde eaede eac
edcabe cage. T e fc eae edce e ea
c f a ca d.
Te ca b a a dded ee a f. Tee ae a) e
aea f, c f ea f e e dead de, b) e ca
f, c f dea ad c) e faa f, c f bdec e ca. (Ae, 2000; Labe e a., 1998; Seff, 2005)
8/10/2019 Evaluate Your Business Continuity Management
15/151
3Idc
Caa (2004) a ae e fe ad dde e ca fe
bca c ae ca, faca, faa, eaa ad aa.
I ea ee e ae e a f, ee Caa add eaa,
e age beee a e, e gaa ad ce f a
beef ad aa, e cee ad age ac e f, ce,
e ad ece ae f e e f dceg ad bgg ae
dc, ece ad ce e.
Te abe ae dffee a f eag a ca e. I e e
ab deae e fac, affecg a f ee bca.
I e eeca bacgd f cae CM Mff (2001) a deeed a be
acce de f CM c e eag f a ea ee dffee e f
, eae e a eca e aca c aagee, eae
dffee e ce e gaa, bdg ea
aede c ad ge e e f gee cea ag.I ca CM e ace f e eb, ee ad eae
ce eed b Fed ad Ga (2006). Tee ce ae
ceed e fac a dg a c a, e eb d a e
ae e affeced ac, e gaa ad caa d be e
ae a dg a ccace ad a e c d be aaged a e
e ee be.
I ca aagee, dffee aege edce ceece ae a
ega a f Pec e a. (2003) fae f e ee ca.
Regadg CM, Mff (2001) a deeed a be acce de eae fc e Fed & Ga (2006) ae eeed e eed f ee
ce. Dffee aace ae bee ed egadg c ca,
BCM ad ca CM. T e ege e dffee e a
bade e.
1.3 E AD BECE
Te e f e
BC.
T ff e, e a bece
.
T acee e abe bece, e fg bbece ae eed be
ffed:
Idef, e eae, e e fac ed BCM c ae eaed
ca d.
8/10/2019 Evaluate Your Business Continuity Management
16/151
4 Eaae Y Be C Maagee
Iegae f e cae ce eea a ae f fac a ae
e gfca a e f a a c a c be
aaged e.
Dc eae e e fac ad ce e BCM aea
c e ca be eaaed.
Baed edge f e abe, dee a efed ad c
effece de f e eaa f a eee BCM ad eeb ge
c aea e.
1.4 AGE G
T e ageed a b acadea ad cae aagee ea. I
acadea, aagee de ca beef f e g e
eee edg a cde b dceed cae ad e deee
f a de. Te a a be eed b e e BCM ad e f
dceed cae c a ge dea f fe de.
Cae aagee ea a be ace ca beef f e
de a a be a gd ge a e a f e BCM e
ca.
1.5 DEA
T a ec be deae dg a 20ee e ed, e fg
dea ae eed:
T e a eaa ae acee effece BCM. Hece, f
Kaa ad Gac (1981) def f ed, ea a e
fc be eaa aage e ceece f a c ad
e ce e e bab f a c cc. Hee, a BCM
a ace ac, fe affec e cea ad ed e
edcg e ceece.
Oe a f eaag e fac a eee be eeed Te
BCM Eaa Mde. T ee e de f becg eee
ad e cg, de ce a aec f eac fac.
8/10/2019 Evaluate Your Business Continuity Management
17/151
1.6 CAE
T e
Te fa e
Baed e e
Fac f
eea e fac
Idce dff
EE
ced e cae Fge 1.
1. C .
6. Re
f e BCM eaa de, ad ee e e
aceed, be dced cae.
5. Te BCM eaa de
f e dceed cae, cbed e fd
BCM eaa de be deeed, adaed ad e
. Leag f dceed c
e eae e ae a e c aed
a ae e e a e f e ce
3. Te e
e aace RM & BCM ad ee a ce f
eae eac e.
2. Medg
Decbe e g ed ad deg ed
1. Idc
Icde bacgd ad e & bece.
5Idc
ad bece ee
g e eae, a
ed.
e
ceed cae
f a c a.
ee cce
g.
8/10/2019 Evaluate Your Business Continuity Management
18/151
6 Eaae Y Be C
2 EDG
We edg efe
ed ae ad ecedgca e ae ae
dead c ed g
2.1 CEFC AAC
A aae aac
aac ga a de
(He & Sag, 1997). T
e e a f ca
ad e aae aaaec f eac fac.
2.2 E EEAC CE
Te eeac ce ca be de
be cdeed befe a cefc
2.
2.3 EEAC
Tee ae ee dffee
ee ad ea. W
aed ad ed a a bec
dea a e d a be
6Kge, H., Obaed f Je
Maagee
e e f eeac d be de
e ed gae ad aae daa. If e de acc e ed ae ce ea
e e be e (Sade e a. 2003).
decbe ad ea a bec e a a
ee deadg ad decbe e c
e e a eaae aa
a a be egaed. A ed
c e fa de e
cbed a a (Fge 2) ee a ae e
ce a beg.
. (2003, . 83).
e a dae e eae:
e g a beabe ca ea
e e f e be. Iee e
fed d beabe ca ea
, 1973
e,
ge
ae
e
a
ea
e a
ed
,
e
8/10/2019 Evaluate Your Business Continuity Management
19/151
7Medg
g e ce c ge e a e f ace. Rea ae
a e eea affec ee a a ea ceaed. Te a
dffeece beee ea ad a ea ecge e ace
f deadg ee ca cced eea ad eag,
bece ea, ce cee a fece, ad ea ca, e
ae f ee e ad bea. (Sade e a., 2003)
I e e a e ad a c eeac b
a e a eee e e dffee cce be eaed
fd ee dffee e ae da.
2.4 EEAC AACE
Tee ae dffee eeac aace, dedce ad dce. Te dedce
aac dee a e ad e c ae eed e a dce
aac gae fa c dee a e. (Sade e a., 2003)
I e b e dedce ad e dce aac be ed a
fa f e eae be gaeed f e e c e be
eed dceed cae ee f cec.
2.5 EEAC AEGE
Te eeac aeg e a, g cea bece, ae e cefc
e e eeac. Tee ae e dffee eeac aege cdg
eee, e, cae de, gded e, ega ad ac
eeac. (Sade e a., 2003)
Te eee c ed ad ca e a def f a
eeca e, a eec f dffee ae, a dc,
eaee c f aabe. Te e a acaed a
dedce aac ad fe e f f a eae a eace e
b f cag a bg ae. Te cae d e eca ega
f a be ad ca fe ge e ae eg aeed. Te
gded e a dedce ad dce aac c a a a
eeca fae ad e dee e g bea. Te e e
e e edc fe bea c a, a , cf eedc. Ega a dce aac, gaed f ag,
c a e e ee e ca d e ae a a e eeac
bec d. Ac eeac fced g cage a gaa c
cde eea e f eaa ad e f e a dea a e dea
eed. (Sade e a., 2003)
I e, a gded e aeg be ed a baed a
e f a de b e e be baed eae de. Te e e
be a edc f a a fac f eae dceed
cae. Tee dceed cae ge adda fa egadg cfac eee f e e. Te e ea eaa de be
8/10/2019 Evaluate Your Business Continuity Management
20/151
8 Eaae Y Be C Maagee
eed g a e a ca ee f eae be c
aagee (BCM) a cec a.
2.6 E
Reeac ca ee ae a ceca aac, c ea a a a ae a a cea e, a gda aac, ee e bec f e d
fed e e. (Sade e a., 2003)
T e ae a de f ceca e eae a ca
ce a f BCM. Dg e ce a gda aac be ed
eae eae cae a ee be dffce da cc f a
a f a cea e a c.
2.7 EAB AD AD
Reab ea a a cea d e ae e f cdcede e e ad ea a e g ae beg eaed
(Eegd, 2003). Y (2003) ea a f eab d be aceed a cae
d e cede be e dceed. Regadg cae de Y fe
e a ad d be dded ee dffee a: cc ad,
ea ad ad eea ad.
I e cc ad be addeed, dg daa cec, b e
e f e ce ad e eabe f a ca f edece g e e
f dceed cae. T , aa f cc ad, a bg eab
e d. Dg e c f e e, ee ae be ee e eea dee a ad cc.
A cae d gd ea ad ae da e g cc cceg
a a fac ead e e. If ea ad ee a be e fac,
c aca ead e e, c ae ed (Y, 2003). A fa
egadg ce ea aeeded ee a a cc a be
da cec de cfdg fac.
Pa (2002) ea a e a aae ed ed a eec
fac cae a , ag e beaa/aaca caabe fe eeace, ge ad ad eagfe e eeac. Y (2003) ea
a de geeae cae de ee d be a e ad ea
a e e ae ca be ceced e cae. I e ea
ade e d e bece df e e egad
e f e d. We cae ae ce, a a a e
c f eg fa a a eaa ca be ade. Te e f
e dceed cae be aaabe f e eaae.
We cdcg e cae de, eca gc d be ed. T ca be
ee ea eca, c ea a e ecd cae ge e ae e,
8/10/2019 Evaluate Your Business Continuity Management
21/151
9Medg
eeca eca c ge cadc e f a edcabe
ea. (Y, 2003)
I e e eca gc a be ad acee ce a ce ae
c. A Mff (2001) a dded ce ee dffee caege ad a
ca d ad ca ce ae ag ee, e fc be acee ea eca e ca d aea.
2.8 BEC
Scece bec ea g ad a f ea c
a aceed g e aee f dffee e e aea (Eegd,
2003). T e acee bec g e eae d a ed
ae be ba a e ad g ee ee dffee age. A
eae d f cefc ace a ae babe a ee ace ae
bee ceced a e ae baed agea ag ee aabe a ee eae.
I e ee a e e ea ea eea e cae ae
eeed b be ce eaed b e fac a e a f e
ae ad a e cede ad a da cc be acced f.
2.9 CE
I cece e ab e a ce ead f ecda ce c
ae a eea f e a daa (Eegd, 2003). I e e e f
ecda ce, a ea eaae eae dceed cae, eabe. Tae be dea b fdg a a ce a be ee c
eea c b a c eea ee be e
cec.
8/10/2019 Evaluate Your Business Continuity Management
22/151
10 Eaae Y Be C
2.10G ED
Te abe a ccded a
Leae
de
Te f acceg
be ae
Te Le
Baed
dce
Dceed
cae
Te e
dead
c. Te aa e
Pea
de
Baed
de
Mde
ada
Te e
aff
adaed
Fa de
Te a a
ada a
Maagee
g ed decbed be.
a eae d e c f BCM. Ifeegec ee, c aagee ad b
ed fd a fac f effece BCM
e eae d, a fae e a a e
d cae be deeed.
be aed aae a cae acee a
g f c fac ae f e ace f
eea a ae f fac a ae f a c a be aaged e.
e abe e ad d f dceed cae, a
e deeed f e eaa f a ca'
a de be adaed a. F
e ee f ade ae eed. Secd
g ee .
ge be eg e de baed e c
d ee ad dc e fa e f e
ae ece
.
f aag
e ce f a
gfca
ea
ee f BCM.
be eed
, be
e f e
de.
8/10/2019 Evaluate Your Business Continuity Management
23/151
11Te e
3 E E
Te a eed be eaed befe cecg e d f dceed
cae e cafca f aagee eg ad eae eae ebe c aagee (BCM) c. Te e f d ae e
f e e, g c dceed cae be eaed.
3.1 AAGEE EG
R aagee eg ded b abg e ee a B
Sadad (2008a) eced gaa ceae e ga a a a
f e aagee ce. Tee ae e def f
aagee, BCM ad c aagee (CM) ad e ae e fa aa. T be
abe dead ee ee ae ed gee, e fg ec ee a fe f e def ad ge a cc f e cg beee
e dffee ee. Ne a e def be faed
cae.
3.1.1 AAGEE
Ae e ee e:
Wa ca ae? H e ae? If ae, a ae e ceece? (Kaa & Gac, 1981, .13)
A ee a cea ee e f ccace a, d cc,
ae a effec e aceee f e e f e ec bece (APM
PRAM Gde, 2006, . 17).
Effec f cea bece (ISO/IEC Gde 73, 2007, . 2).
Te cace f eg aeg, eaed e f bab ad
ceece. Te ceece a be ee e egae. R a geeaee ca be defed a e ea f a ac ac a ee a
gaa ab acee be bece. Te e f a ccg
ae defed b e ac (BCI, 2008).
AAGEE
Cdaed ace dec ad c a gaa egad
(ISO/IEC Gde 73, 2007, . 3).
7Seff, 2005, .15.
8/10/2019 Evaluate Your Business Continuity Management
24/151
12 Eaae Y Be C Maagee
Te ce, cee ad ce a ae ace effece aage
ea e ad adee effec. A be deabe
eae a , e bece ee c effece cee a edce
a acceabe ee, eec acceabe ad ea b faca
ee .e. afe e g ace e ea, b
gaaa ee .e. Be C Maagee (BCI, 2008).
Te ce, cee ad ce a ae ace effece aage
ea egae ee. A be deabe eae a , e
bece ee c effece cee a edce a acceabe
ee, eec acceabe ad ea b faca ee .e. afe
e g ace e ea, b gaaa ee
(B Sadad, 2008a).
Eee aagee a ce, effeced b a e bad f dec,
aagee ad e ee, aed aeg eg ad ac eeee, deged def ea ee a a affec e e, ad
aage be aee, de eaabe aace egadg
e aceee f e bece (COSO, 2003, . 3).
Te eac aca f aagee ce, cede, ad acce
e a f aag, eaag, cg, ad ccag ab e
(CSA, 1997, . 3).
A ced aac aagg cea eaed a ea, g a
eece f a ace cdg: aee, aege deee aage , ad ga f g aagea ece (Weda, 2008a).
CC
Baed e def abe, aagee a ca/gaa
ab:
Cdag ace . Ieeg ceffece cee a
. . I, , , ,
.
Hee, be abe dead e e , a f, e eag
f a be ded. Accdg e def abe, :
Te f eg aeg ad e fg . A ee a e aceee f bece. Tead f eg aeg.
T ea a ab bab ad ceece c ea a
ee ae a f aagg afe defca: e ee e
8/10/2019 Evaluate Your Business Continuity Management
25/151
13Te e
bab e ceece f a deed ee. If be, e a a
be aded cee b e.g., e ce d, ecage a aad
ceca f a aad ceca.
Fee, be ccde a a eg a a e
aeed (a ae? ? ae, , ,f eg aeg, f a ac ac). T ea a
aagee eeced a ee cc def, aae ad gae
. If a bece ea, ge a . I a bece a cea ee
e ea f a c a.
Regadg eee aagee, a ee aagee
ee eeced .e. aagee a eee. Ae eae
ca aagee c aagg e ca (ee
ec 3.1.4).
3.1.2 BE C AAGEE
BE C
A ace ce c defe e e fc f a gaa ad e
e ea e fc (B Sadad, 2008a).
A ge f dae ece, aed a ag a gaa ce
fcg afe (ad dea, dg) a dae, ae a beg abe
ece afe a dae (Weda, 2008b).
A gg ce ed b e aagee ad fded ee a
e ecea e ae ae def e ac f ea e, aa
abe ece aege, ece a, ad c f ece (NFPA 1600,
2007, . 16004).
BE C AAGEE
A c aagee ce a defe ea ac a eae a
gaa ad de a fae f bdg eece e caab f
a effece ee a afegad e ee f e aede,
ea, bad ad ae ceag ace (BCI, 2008).
A c aagee ce a defe ea ac a eae a
gaa ad de a fae f bdg eece e caab f
a effece ee a afegad e ee f e aede,
ea, bad ad ae ceag ace. A e aagee f e ea
gae g ag, eeaa, ad ee, ee e a a
ce ad dae (B Sadad, 2008a).
A c aagee ce a
defe ea ea aga e ac
dge e ceece f a ea bece a ea
8/10/2019 Evaluate Your Business Continuity Management
26/151
14 Eaae Y Be C Maagee
ge a fae f eece a c
ge eee ad be ac effce a c de
o ec ee, e ee ad ae
o ec e ca f
o ec age ad bad ae
o ee e ce (N, 2008).
FM Gba e e Be C Ie def b Sa Sede,
aa ce ede ad aage, FM Gba Be R Cg G
(BRCG) fe defe BCM a:
A be ce ae a a eca ca eff b a ebe f a
gaa e bd ee cee. I a fae a cbe a
eee f aagee ad eaed dce, c ca ae ead a
ac eed dce caed e be c a, BCP. (Rea
Magae, Mac 2007, . 18)
Be c aagee de e aaab f cee ad
ece de ee e ced aceee f cca bece
(Gb e a., 2004, . 2).
A a ca be eed de geae cfdece a e f
cee ad ece ca be deeed e face f . I cceed
defg ad aagg e c eae d eea cee ad
acaed ece, gag e effec f ee , ad eg a ece
f a ce ece aceabe gfca d e eee(Gbb & Bcaa, 2006, . 129).
Te gg aagee f e be c a ee a aa ce ad aaabe ad
e gg aagee f eaa eece ad ce aaab a gaa, e a f eg a e gaaeeece e be dada d (CCea, 2008).
BE C AG
Te adace ag ad eaa a ae ecea def e ac fea e; fae ad ee abe ece aege; dee
ece a() c ee c f gaaa ece e ee f a
ee/cde/c; ad dee a ceee ag, eg ad
aeace gae (BCI, 2008).
Te adace ag ad eaa c ae ecea def e ac
f ea e; fae ad ee abe ece aege;
dee ece a() c ee c f gaaa ece e
ee f a eegec dae; ad ade a ceee ag,
eg ad aeace gae (B Sadad, 2008a).
8/10/2019 Evaluate Your Business Continuity Management
27/151
15Te e
Ec Je, aa ce ede ad aage, BRCG U.S. ea defe
be c ag a:
Be c ag, a BCP, e eee f be c
aagee. A BCP da f fagaeg ad aee, ad
e agg ebe e dda, e ceae eceaege baed ecfc bece (Rea Magae, Mac 2007, . 18).
CC
Accdg e abe, BCM :
A c aagee. Iea ac. Pde a . Effece .
aede, ea, bad ad ae ceag ace. e ce. , eeaa ad ee ee a dae. a be c a. E f cca bece. d .
Aga, a e aagee cae, a a be
c be abe dead BCM c accdace e def
abe :
A ace. Iea e fc. Af dae ece. Te dg ad afe a dae. .
B e f def a a aagee ce ad b bg e
defca f ea ad e ee ee. Te a cc f e
abe a be c ad BCM a e ae eag. F a
d a fd, B Sadad defe b cce. T gee
e fac a e Be C Ie defe BCM b BC ad ae Naa Fe Pec Aca defe BC b BCM fe ege
age.
Ogaaa ce ae e eae fe dded ee ae (B
Sadad, 2008b; N, 2008). A f a ace ae ee e fc ag
e, e ee ad e. Secd a eace ae a fc
e ca f cca be fc. Te a ae e ece ae
c a e be bac e ae a a e c. Ma
AB a aed ee ae, eegec ee (ER), c aagee (CM) ad
be ece (BR) a Fge 3 be.
8/10/2019 Evaluate Your Business Continuity Management
28/151
16 Eaae Y Be C Maagee
3. B AB (, 2008).
S e BCM eeced? Lg a e def aga, BCM e a ce,
defca, ee, aagee, aeace f a ec. T ea a
ag BCM eda e e ee, aagee ad ece f a
c, a eeced a c a fabcae ad a e ee
be c a, e f eac ae.
Regadg be c ag (BCP) decbed a:
ad eaa. Ie ac f ea e. Tad ee ece aege. Te deee f c ad ece. Tag, eg ad aeace. A be c a. Oe eee f BCM.
S a e dffeece beee BCM ad BCP? A ca f e def f
e e a ee e e e dffeece. BCP a be ee a
e ca a a ce f e BCM ce. I be a a BCP
e ee f BCM e e ee f aagee dced abe. Ee ca
8/10/2019 Evaluate Your Business Continuity Management
29/151
17Te e
d dee e a f eac ae, a ER a, a CM a ad a BR a
(N, 2008).
Ae cc a BCM e ad gaaa eaede ae
a e ga f . BCM fce e a f e ceece
fg a deed ee b de a edce e bab f adeed ee ee g a be aceed e ce.
3.1.3 C AAGEE &C EAEDE
C
A a c af ad de, f g agde, dde, ace
ad dead a e ee ad de e f ca eag
fae (Re, 1993, . 116).
A ccece ad/ ece a eae e ea, aff, aedeae, aede, bad, ea, ad/ aegc/be ga f a
gaa (BCI, 2008).
A cca ee, c, f aded a aae ae, a daaca
ac a gaa fab, ea, ab eae. O, a
ccece ad/ ece a eae e ea, aff, aede
ae, aede, bad, ea, ad/ aegc/be ga f a
gaa (B Sadad, 2008a)
C AAGEEOgaaa c aagee a eac ae b gaaa
ebe eea aede ae ce effece aage e
a d cc (Pea & Ca, 1998 . 61).
Te ce b c a gaa aage e de ac f a Be
C ee/cde/c ee de c caed
ac e gaa e Be C Maagee Pa ed a
a a f e C Maagee ce (BCI, 2008).
Te ea cda f a gaa ee a c, a effece,
e ae, e ga f adg g daage e gaa
fab, ea, ad ab eae (B Sadad, 2008a).
NFPA 1600 (2007, . 16004) defe dae/eegec aagee a a
gg ce ee, gae, eae f, ed ad ece f a
cde a eae fe, e, ea e ee.
EAEDE
Ace, a, gae, ad e deeed ad eeed a
eegec a ae ed e ee f, ga f, ee ad
ece f eegece (NFPA 1600, 2007, . 16005).
8/10/2019 Evaluate Your Business Continuity Management
30/151
18 Eaae Y Be C
C EAEDE
A ae f cae eade
ege adea cca
c, b cc ecg
ccece (Seaffe & Ma
CC
CM a defed abe ab
cag CM ad BCM, e c
Fee, bece f
c a c ea
gae, eaed
eaede ad BCM ca be
3.1.4 CA AAGEOe e a decade, c
gc a ace, aeg
a ae e be f
e edae ea
e ceece f c a d
de e ce
ca (ee Fge 4)
ce. Hee, e ea
4.
Ofe ca eca
ecd ad d e db
e ad db. T
gaa ed a c
ed. Te fc f SCM
be cca. I a e
ea ad dea g
added ae, ea ea, a
e ce eac f
eac f e
ea a ee ae f ee
a be ee e a a ed
Iface Deedece,
Ne ad e f Te
ca. Tee ae ae e ca ad f a c
Te 1 Te 2 S
Maagee
feee ad effece adde e
ce e ea fc a de
g ad ace eag f e
eg, 2003, . 575).
eeg ad aagg c a.
c a CM e a f e BCM
ce feee ad effece ed
a f a ca a a e eabed
ade a c. Hece, a ca,
e a e ae ae.
Ea aagee (SCM) a ge f a fc
c ad cae aac. Pe, SCM a
e f ca d, a
, egaged bffe c aee
. Tda SCM e deadg c
a. Lg a a ceac age f a c
ea ee a ea ea f
c e ce. (Zd & Rce, 2009)
' .
f, ecd ad d e e ad/
ce. Eac f ee a
ea a ee a be a age b
a ca e e e
e gaa e dc ece ae
ace ac eeeg a ce e
aa eace e cee ada
ad fab a e ae e a aa
(Zd & Rce, 2009, . 3). Te c
c Pec e a. (2003) ad. Pec
f . Te f ee Pce/Vae Sea
ed a Fge 4. Te ecd ee Ae
e d Ogaa ad Iegaa
e ae a ea ee e ed
c a eac e e ce a d a.
e
Mafa
ce
Db
Reae
a
a
abe
ga,
ce.
a
BCM
c
e
f
dce
a
a
f,
e
f
fe
e
f
age,
g a
e
e a.
c
ad
a
ed
C
e
8/10/2019 Evaluate Your Business Continuity Management
31/151
19Te e
3.2 CA F EE
D ae fe caed b a ee f deed ee. I be a e
a ee cc a a e begg e affeced ca. Te
ce f da SCM fe e a e deed ee ead ae
c fa ead a cca ee. A, e cca ee a be dffee fdffee cae, b e ad age. Ee g e BCM gaa
fce aagee f e cca ee, effece BCM a be abe dea
e ea befe a cca ee. Tee dffee age f a d
ad e ca f ee ae eaed Fge 5 be.
Fee, a cca ee ead e aca f a f e ee be
c a. E.g. feeaeg a, e a d f deee
f a e, ee a be eed f ER.
5. (, 2007).
Cde a d deee f e e f e cca ce X.
1. Uage f aeae e b a a ge ce.
2. Tee f ce X; ece ae e e
eeded dg ed.
3. L f ae eee f e da f e d.
4. I e e, de e ac f deee, ce b e a
a ec e.
8/10/2019 Evaluate Your Business Continuity Management
32/151
20 Eaae Y Be C Maagee
5. I e g , eee fa a e ae ge egad e
ca a a ea eabe e a befe e d.
3.3 CG E CCE
Te cc f e abe dc a eed e fg de:
6. .
Fge 6 e age f e dffee aagee e ad a
e e ae eeced. I be ed a ee eee fe b eac
e, f eae ee ae fac f bab edc BCM ee g e
a bece e e ceece. BCM ca be ee a e a f
aagee b ee ae e dffeece.
Ag aagee Kaa & Gac def f , ca be dded
g bab ceece. Te bab ca be edced b ee
adg e cee e.g. da a e dc f e ae
b eeg e f aeg e.g. e cg edce e
bab f d. Te ceece ca be edced b gag e
b e.g. ag e ec aee. T edce e
bab f a fe b e edce e ceece f a fe.
We eecg aagee a ca dea ecfc a e
a ae ae bee defed dg e ce. If ee a ceffece
dea e , be aaged accdg e.g. e, afe
ee ec. Hee f a a bee defed ca be aaged,
ca ? T ee BCM e . Ag defca ed BCM a
dea c a degadg f a a caed ae.
8/10/2019 Evaluate Your Business Continuity Management
33/151
21Leag f dceed cae
4 EAG F DCEED CAE
.
T cae c f ee e. F, e cc f a e g c
e dceed cae ca be aaed. Secd, ce e dffee cae baed
a be f cea ad d, e aa ef.
4.1 E CC F A E
T cc e e e f e a d e eae fd e
aea e c. Te e c f fac abe e ee
e f be c aagee (BCM) c ae eegec ee (ER),
c aagee (CM) ad be ece (BR) gee e ag
ce f ee.
T f e cafca f fac, Ma AB de f BCM a ed (Fge
3). Aa f e ee caege ed b Ma AB, ee adda caege
ee added. T ed dffee caege; dec BCM, dec BCM, ER, CM, BR
ad e.
We dffee ee ee aced de e caege e f e a:
D e fac cce BCM dec dec? Dec BCM d cae be e
ag f eec f a f e e be Ma AB de f BCM (Fge
3). Idec BCM ea a e fac fece e ce f BCM bega a f eec f e e be. If e ae a ee e e fac
a e.
A Qaae (1998) eae e eg f ecgg a ag f c
a ad CM ae eaae cee e fg e dec BCM
cdeed e e fac eeced: I dg e c? Hee,
ea a a a be eeced dg e c ad dg
ea e eec f a f e BCM a. If e ae a e e
fac a aced de dec BCM e dg ed e f ER, CM BR. If
cceed feag, ec f ee e ec f ae d
g ER. If cceed gaed adg f ee, aegca ad acca
e ea ad eea cca d g CM. Fa, f
cceed ece ce, aeae dc, ee cee e
de f SCM d g BR.
Ude eac caeg e a ceaed dffee fac ee e ee
ee aced. Te fac ee aed efec e ee.
8Web, 1989, . 31.
8/10/2019 Evaluate Your Business Continuity Management
34/151
22 Eaae Y Be C Maagee
Te cee cafca f fac abe fd Aed B. Te
cafca eed e e fac Tabe 1 be.
1.
BC Udeadg e gaa, Cae ce, Maagee
, Eea ea, Iea ea, Qc deec,
Adaab, Acceace.
D BC BCM Pgae, Lab, R defca, R aa, Hc
e, Pa, Ieea, Cea ebe, Tag ad
edca, Teg, Ree, Cae c aee, Be
ece bece.
Ae e, Ree cede, Eaca cede,
Eegec ee ee.
C
Lee ce, Qc ee, Iea cca,
Eea cca, CM Tea, Dec ag, C
ea cee, Dead eg.
B
Debefg, Reddac, Iage.
Daabae c, Kedge.
4.2 CG E CAETe cae d ff e fg cea:
Te ee a caed a ca d.
Te ee a caed a egae ecc ac.
Te ee a eed d eda.
Eac cae e a bc ed ca.
Ifa egadg e ee be aaabe ad eee eg f
cc be da.
Te ee a cce e fe cae.
Te ee ae be a aade ee ad a aa dae.
Te ee cced dg e 21ce.
Te ea cae c cce e ca a e ae
eceed a e geae ea a ca eee de accdg Bae
ad Cg (2005).
If a ee de cae a egae ecc ac a be, e
a a eceed a a c b a ca.
Te fac a a cae eed d eda fe a dca f a a
ee.
Te ce a e cae e a bc ed ca ge e e a
a cae ed a c be eaed.
8/10/2019 Evaluate Your Business Continuity Management
35/151
23Leag f dceed cae
T ge e f e dceed cae, e fa egadg e cae
be ffce eg da cc f.
If a dae c cce a ca a e ae e a be dffc
ee c fac a ae effece BCM ce a cage e a
ccace f ade a c. Fee, babe a eee e fgg e aagee f a c ce a feced
bg a f e ce. T ae e cce a ee c affec a
fe cae babe ge e a a a be acabe e
a.
Ma aa dae ae cced dg ece ea b fa
cceg f dda cae ee affeced b ee ea fd. T
e eefe eae cae ee e effec f a aade ac ead
e c. Te a e be abe da cc a be acabe
aa dae a e.
A d cae a efec da cae ee e cae be ed
e 21ce.
T fd cae, e a cdced a ecd eae e e eae
e c f CM ad BCM. Te e a ceeed ee eace
ad ed fdg f e ce ed aed D. Te a a,
baed e cea, ee cae eee a eec a ge eea cae
aae. I Tabe 2, e ce c ffed e cea ae ed. Eg f ee
cae ee eaed. We cg e cae, e a ce cae d dffee f f e ca. A, cae c ad eea
ae e e dffeece, e.g. e SAS ad A Face cae, ee a fd
e eeg de e b f a g ca. Fee, a fe
cae ee e e dceed, e.g. e Na/Ec ad BP cae, ad ee
eefe ge ea .
2. C .
Refe e ed 15 dea ad e
a 170 ed2005 BP
Ladg gea be Da 8 Q400 acaf
eed eea cde2007 SAS
Te SUV ee baed f accde c
ed dc eca2000 Bdgee/Fee
Ccde fg AF4590 caed c ed
109 dea2000 A Face
Jaaee Faca Sece deed Cba
ce ae bag ffce Jaa 2004 Cba Jaa
8/10/2019 Evaluate Your Business Continuity Management
36/151
24 Eaae Y Be C Maagee
L ce de ac f deee,
da, e ca a egaed f
1998
2001Ma & Sece
Pfed ae be (CcaCa UK Daa)
eca afe eceedg ea 2004 CcaCa
Cac ca Aa ed 6 dea 2004 Iga
Da ae Jade bed
cacae f Maed c ed bc
f Aa da dc e Mdde Ea
2007 Aa Fd
Ca dcg e ad be aed a ee
eeded f dc a g.2004 Na
S Hgd Aa Ce aed
aa a ca' eee ad
aede a a baed.
2001Hgd Lfe
Scece
Fe e cdc fac Abee
ed ca d be e
afacg
2000 Na/Ec
Accg fad ed e bac f
E c de accg ca A
Adee f accg
2001E, A
Adee
4.3 DCEED CAE
Eac dceed cae be eeed a a f e c ad ce. Te e e f e, e cae be eaed egadg
e dffee fac f e e e bece fd e e fac c
ead e c ad/ bad ce. Fac c cbed e
ce ae e ac. Te fg e be egaed eac
cae:
Wa aeed ad ?
Wa a aaged e/?
Wc e fac cbed e fa ce? Cd e fac
ae bee aaged dffee?
Te ed ce be eeaed f eac cae.
4.3.1 E A/EC D
T cae aca eeg a ca b a e ad a e f e
ae d. We e ca gaed ae ae, e e ffeed
deaag e. Te e f ee a e a ee cced a a
e begg e affeced ae.
8/10/2019 Evaluate Your Business Continuity Management
37/151
25Leag f dceed cae
CE
La (2001), Ta b Fe.
NCSU (2008), H D S ca R Occ?
Na & Ja (2004), Ec ace ca
aagee aac afe a e be accde. Seff (2005), .
A AE AE
LM Ec AB
Na C.
P Eecc NV
A AEED AD ?
O Fda eeg, Mac 17, 2000, e c f Abee Ne Mec a
b a de. A eecc e a c b a gg b c caed efca g e ae. Saed Abee, a P a
afacg adfeec c, ad ae dee e fa
e e fa ed. T caed e face Fabca N. 22
eea ad cac fe (Na & Ja, 2004). Te fe ggeed e aa ad
e ad e a e e, e fe a . Nbd a ad e
daage eeed a eggbe f a e eece. Te cde dd ee
eac e Abee eae (Seff, 2005). Le dd e a e ea
daa a e beg.
Wa e fe fge dd eae a a e fe ca a a caedcea a fe ag e ace age a af a c ge
de. Afe e fe e a ag b cea. Se ad a ead
g e fac ad aff ad fe fge e aced d a e dea
e fe. W e, f ce e f c a ed. Ee
e a e daage e cea a ad be cee aed. T
a gg be a e deadg b a eeced. (Seff, 2005)
Te Scadaa ce e ga, Ec ad Na, acced f 40 % f
e affeced de a e P a. Te fg Mda, Mac 20, e b
eceed a e ca f P ffca fg ab e fe bea agee d be dea f aae e ee. Ee befe Na cef
cecag aage, Ta Ma, eceed e ca e ad ced a
gc e e f P c a de be ee addg (La,
2001). Ee g M. Ma a e cceed ab e e, eee
dea ae ae gba ca, e ccaed e fa
e e Na gaa. T cded Pe Ke, Na
be e. M. Ke aced e affeced ce a eca ac
ad Na ade da ca P cec e a f e a.
Ke a ffeed P Na egee e b ffe a deced
a P ad e a de d add cf a e a
(Seff, 2005).
8/10/2019 Evaluate Your Business Continuity Management
38/151
26 Eaae Y Be C Maagee
T ee afe e fe, e a ecaaed a Na e P caed M.
Ma ea e f ce f e d. P ad eaed a
d ae eea ee ee e a ad f c e
d be deaed. Ke cacaed a e dc f aae f
ade d be affeced a a e f bg ae. He c aebed
a ea f 30 Na ffca a . Te edeged c, bed
dc ad eeced e ca eee e caac f
e. (La, 2001)
A e ae e Sc, Sede, Ec eece ad e eaed e
ee f e a. Ec eceed e ae e ca a Na ee
da afe e fe b dde aagee faed ccae e fa
e e. Ja Waeb, ead f ce dc, dd fd ab e
d ea A. (La, 2001)
B a e, Me. Ke ad Ma ee e a Peadae Aeda ee e ca cef eece. A Ja
Oa, Na caa ad cef eece eed a fg aed e eeg.
Na ee e deadg ad eed a ee be d be
ed a. (La, 2001)
Na deced a eff eace e f c ffeed. De a
Na a c a a ce, e Jaaee e ad e U.S. e
adda de dce e a c fe da
ead e. Na fe deaded fa ab caac a e P
a. M. Ke ad e ga: F a e ed f e, P ad Nad eae a e ca egadg ee ce. T gae e ad
e c ee eaced b a fac Ede ad ae fac
Saga a a ade aaabe f Na. (La, 2001)
W Na, c ee edeged e cd be dced eeee. Ae
c ee ade f e e Ne Mec a e bac e
becae f a ec f e effece c dc. (Seff, 2005)
Na eff ea ad ff b f Ec ea dae. We e fa
aed P f e caac a aead bd b Na. Ec ad eeee f ae c eg a aggeg f a ea $400
ea eee (La, 2001). Te ee abe ece ea f a
g a ace ca. Hee, afe e fe, Ec ae
ae ad ge d 3 % ee Na ad ge b e ae eceage. A e
ed f 2000, Ec aced a f $2.34 b e be e d.
I A 2001, e ea afe e fe, e ca eeaed f e e ade
ae a a dce f ad ged a ee S, ceag S
Ec ed 5050 b e cae (Seff, 2005).
8/10/2019 Evaluate Your Business Continuity Management
39/151
27Leag f dceed cae
A A AAGED E/?
S a ade Na ce a a e afe e c? T a , ee befe
e eceed a ca f P e ad ced a gc c deee [
] ad a a Na eceed e e f e fe, a ccaed
ge ace [ ; I ]. Te ae a
dec a eca ac [ ]. Sa e ded a
a ceced da [E ]. Na aed ceag P
ad ffeed e e ece [E ]. Te aebed a
ad aed g e aeae ece [].
Te fac a Na aff ca eee Na (La, 2001) dcae a gd
ad a ea . M. Ke ecaged
bad e ae fa c eae a a a ae f
e befe a deed ee cc. Fe Na cef eece, Ja Oa,
ed b eg fg aed e eeg Aeda
[ ]. B g e d a eca ac , Na aed aaee a a egaed a f ca aagee (SCM) ad
e cca dcae a fcg ega [H ]. Na a
adaed e a b edegg c ad acceeag a ec b c
dc [A]. Te ad cee e e eca ac c
fed . Te cad ce ad cca beee
Na ffca dcae , ee a eac f e eeee
e a a eeced f e. La (2001) ea a Na, a fe ea
befe e fe, ad a d a c e f da ea ae.
Ja Oa ed d ae aga ad aed a cd be cdeed
a BC . I cea ee e gae cded a be
c a b e a a d be ad acee a
Na dd c a e a.
Ad a ade e ce f Ec deadf? We, be a a
e aced e abe f Na b a e e . A f, ee g
e ee fed ab e fe ad d a e Abee a e
faed e ad dd e e adde. NCSU (2008)
age a e ee eee dd ccae e e f fea f
ead [C /I ]. Te fae f
aagee a ade be f a . Te e ca f
P ee da afe e fe a cdeed e ecca ag ae
ad e eeced e ee dea a ge a ea g. Ec
eee faed ae eb ad dd f e be [C
]. Te P a a Ec ce f adfeec c
b ee e ad ee a e deec e ag [ ] a
bac e []. T a dcae a ac f ce
ge cg bac e d ae acaed e ag be a
Ec. T ea a e a a ad bee ade
egadg e e. Ag Ec ade e f e g aace ca, f ae ae ca be ed.
8/10/2019 Evaluate Your Business Continuity Management
40/151
28 Eaae Y Be C Maagee
Afe e c, b Ec ad Na ae eeed e aagee
cede be abe e fe d (Na & Ja, 2004; NCSU,
2008).
CBG FAC,CD E AE BEE AAGED DFFEE?
Te fac a Na ee e e aead f Ec ad eed a ae caac
ade be f Ec eee c f e ce e. T gae
Ec e g dc ad Na cd ce a a e b ag
ae ae f Ec. Te dffeece aagee beee e
cae a Ec cd ae aaged a g dffee.
4.3.2 E E A BEA C EFE
Ee g cae eae e, c e ea , e a
ea eae BP Tea C a ee a a afe aagee e
(SMS) e gaa b e accde cced. Ae ea ee cae a ca ge e aea f ER c a cae d.
CE
Bae e a. (2007), B ..
.
B Pee (2005), B A A 2005.
Cae & Ma (2005), BP a g aad deeced a da. Mgfd (2005), F , I
, C, , A.
Red e a. (2005),
Dead ba c Tea C. Sea, D. (2005),I' be bg e f a e. Sae e a. (2005), B C.
Te e a. (2005), We a a a aeed ad . U.S. Ceca Safe ad Haad Iega Bad (2007), I
, (15 , 180 ).
A AE AE
B Pee (BP)
A AEED AD ?O Wededa, Mac 23, 2005, dg a ea f a ea afe a
aed aeace age, a e cced Tea C e BP efe.
Te afea f e e ced f 15 dea ad 180 ed. Te cde
eeged f a efed affae e ce d a eed e e
faabe d a ed e e. Wag e faed e a
eac f e aff. Te eead e becae fded c ead a ee
e. T ade ee ee eef ae e f e c a age
a f faabe d eeed a b d d c a ceced e
aee. Te b d d ad fae, e cec e
aee, c ed d eag e d ad g e gd be.
8/10/2019 Evaluate Your Business Continuity Management
41/151
29Leag f dceed cae
T d e eaaed ad ae ged a e. A faae
cced cced ae c ee aed ce e g aad . (US
Ceca afe ad Haad Iega Bad, 2007)
Dg e e e d eaaed f e , ee ef e aea
ad e aa c ae dg e aa. I e aeaad e b d d e e ER ea eded c afe e e
ad aed a eac ad ece ea. (Mgfd, 2005)
Te CEO Ld J Be fe e f e UK e e e da afe e
e (Te e a., 2005). I 24 f e e BP a eed a eb
age f fa egadg e cde (Sea, 2005).
A A AAGED E/?
Te e egadg cde ae f egag caace ad
eea e cde aeed ad e ca aced afe e cde.T ge g e ag ce b a c egadg e aca
aagee dg e c.
Te U.S. Ceca Safe ad Haad Iega Bad (CSB) (2007) fd eea
ecca fa cdg: e a cede eeded a e e c a
ced f e a ee , e ce a aed dee eed
afc, e e f e b d d a ffce f e a f
d a eded ee, e b d d ad bee eaced ee g
ad bee cdeed afe, cced ae ee aed ce a g
aad ce , eg e eeae f faabe aea f bd ac ad cced dg e ea befe e accde e beg
egaed ad e ea afe ee a eeed ee
eea ee ad e ce .
CSB (2007) fe ade e gaaa fdg: Bdge ea aed
ce afe eface, e BP Bad f Dec dd ae ffce
eg a ebe a ebe f aeg ad efg e aad
ee gae eface, ed ece f ce afe a e
dca a ea ae, defcece aeace gae, a cec
eb ea ade cec g g a be ea beg e,ac f eg ad eag ce, e ee e a ac f
BP aage ad be ac ce afe ee aeed e cage
cced.
Regadg BCM, CSB (2007) fd a e f e deg ea f e ced
e a beee e ad ea egadg
cca fa. Te cca bab a e f
beee e ad ea. Te ffce b d d, e
fac a a afe deg a ed ad eg e eeae f faabe
aea dcae defcece e ce e defca ad beede. Occed ae aed ce, ad e eeed ea
8/10/2019 Evaluate Your Business Continuity Management
42/151
30 Eaae Y Be C Maagee
afe ee, dcae ac f f e eg SMS. T dcae a
ac f eea f a. Te fac a e bad dd ae ffce
eg ad a ebe a ebe f e ce afe dcae a ac
f . Te defcece aeace, e ceceb
ea, ad e e a ac ad be ac f cage
beg egaed gee ae g f a afac .
Bae e a. (2007) ee aged ae e effecee f BP ee f e
SMS a BP fe U.S. efee ad cae afe ce. Te fdg ee
a cae afe ce ee ee defcece ce afe eade,
eee eee, ece ad g f ce afe caabe,
ca f ce afe aagee decag ad ce
afe ce. I ce afe aagee e defcece fd ee ce
aee ad aa, cace ea ce afe adad,
eea f eea be egeeg acce, ce afe edge ad
ceece ad e effecee f BP cae ce SMS. Cceg
eface eaa, cece ac ad cae eg a defcece
e aea f eag ce afe eface, cde ad ea
ega, ce afe ad, e cec f defed ce afe
defcece ad cae eg.
Cdeg e eee f BCM e eadg e cc f Bae e a. (2007)
e fg aec add e eae fdg. Te eg cae c
aee f accde, a ee gd b be d
bece f acee e ga e eade a dged a ffce b
Bae e a. We cdeg a ce SMS, Bae e a. ea a e e a a
e de ce a defed ad a defcece ee ecc
[/ ].
Mgfd (2005) f cca fac: f cae, affae e
a cede ad aca f edge ad , c f ad
ae g ad deg ad egeeg f e b d ac.
Fac affecg BCM, c accdg Mgfd (2005) ee ed, ad add
e eae fac ae a ee a a ER ab dd
e f a a f e a. T, gee ea ccaeed, a e ded e eaca aa dg a ae f e ee
c dcae a defce ad .
Sae e a. (2005) defe defcece eade, aaee, c f
ad ace cd. Defcece eade cde be d
ee a a ee accabe f ac ad a dffee g e
gaa dd caba b ae a eaae ee. Regadg
aaee, eeaed fae cee ac f a cde
ega ad a ac f aaee f ea ceece ee e a
cg. C f a cdced cace ega.Regadg ace cd, Sae e a. ea a be f c
8/10/2019 Evaluate Your Business Continuity Management
43/151
31Leag f dceed cae
ee a be bed b e fac a ee e c
a adeae a f fc c.
Sae e a. (2005) add a ace cd a ae ed dffce f a
.
BP c aed gd g e ebe (Sea,
2005) ad e cca eda, b b aeg e e
(Red e a., 2005) ad b ccag a e ega e ee
(Cae & Ma, 2005). Te ebe a ad e c a f a ea
ega ae gee CEO Ld J Be e e e da
afe e e (Te e a., 2005) cee f a e
accde.
I e BP aa e ad acc (B Pee, 2005) e ee a BP Tea
C eed a eea cca ad aed a cde a Tea Cgee cae Ra eaed f e f $2 b caed
2004. Te $700 f faae ad ea ca, c BP a ad,
ee cded a. Ee g eaed e f BP ee a
$3 b, a age eg c f be e eae ea a BP f
ceaed f $17 $22 b f 2004 2005 ee ee cded.
Sce a eaed f $2 b a de dc ee a e
caac dce e eed gae eeee a ace [].
I add a ae aead bee dced a ee a e a
be f af ee ee aaabe c dcae a eag/edca ad bee ade e. Teg cd be de a
ec a a eeed. Sce e cae afe ce a defce
ee a ee a f e fac a c a cc.
CBG FAC,CD E AE BEE AAGED DFFEE?
I , ad ee
aded afac cae. Te fac a a ee ee aded aae
ae a bad cba. Cea ebe ad ea cca ae
bab ce ceced. W ceae eg ce cea e ad
e eg, e ea cca d bab befca. Ied ea ea a a e ea cca a
eae cec g f ee de e gaa ae gd ea
eac e. Iea ea ae ge e a e fce ad bee c
ece. T ae e a beee a ea cca cd ae
bee ed b ee cea ebe ad/ bee ea ea.
Hee, cea ebe d ae bee e babe acc
cae.
A a affec e b f a
ece e aea. Ae be a acee bee deec
8/10/2019 Evaluate Your Business Continuity Management
44/151
32 Eaae Y Be C Maagee
ae bee aac aa e. A bee aeace gae cae
d ae bee ace ae a dca ee fca.
a afac e accde. T cd ae bee aded
b a bee e f eae eed cde. A bee ee e a
be aceed b f ad e d a . A bee e d a e e be f gd f a
SMS a BCM gae. Gd cd a ae bee aceed b
cea ebe f ae dffee a f e gae. I ee
e a a a gd a e , ad
ae .
Te ac f a a ae bee ceced e ac f
ad a c a cc. If e aagee
defe e dffee a a eed be ed e
dbe cea ebe e gaa.
Bad cd be ed b bee ,b eca
ad a e gaa. B ee f aceabe, a ce
ad e dffc age cae e eae a ecfc e.
Regadg ER, e dd effece eacae a eee
cae. Te eaca aa d bab ae ade b a
ee ded de ac f . T a ae bee aded f a
f e ER ad bee efed e ee c ee ade.
A ac f afac g ee ade a befe e
accde dffc. T cd ae bee aded b g e g
ee.
Afe e accde e ad e a aded
e. Regadg , ce a BP age efe d be a
c aae a d f caac eeee.
I cae ee e a fac e g. Te ae cd be ad ab e
Ec cae eae. T a e eee f a f e fac
f a bg c ce ee ae eea fac a eac e cd aeeeed e ee.
Ag a cea ER cae, fac ab e ER a caed ee ed.
I cd, ad d, be a faae ead e ae a ae afe
e faa ee ad e ae ad a caed e dea.
4.3.3 E FEE ECA F FD EE E A
T cae f ee ce dffee eda aace. A a
bad ca e ae de eda adg. I a e eeg cce
egadg ce dffeece ad e e f e.
8/10/2019 Evaluate Your Business Continuity Management
45/151
33Leag f dceed cae
CE
E, G. (2001), Fee e eca.
Gb, D. (2000), Fee faed eca, 1978 ad 2000: A bc ea
eaa.
Gb, D. (2001), T de ee : I defee fBdgee/Fee.
Nea, L. (2001), Le f Bdgee/Fee.
Regee, M. & La, J. (2005), : A
, 3
.
A AE AE
Bdgee (Jaa Pae Ca)/Fee (Aeca Ca)
Fd
A AEED AD ?Afe a ee f accde g SUV Fd Ee eed Fee e
eea a ce, Bdgee/Fee deeed ae e eace
e Fd Ee a cae e g ad. Tee ee e
ed a eca ad eacee f e Sad Aaba (Ag 1999), Maaa,
Taad (Feb 2000) ad Veeea (Ma 2000). Dg ed ca ad
aed ae USA ee accde a e e abad ad aed
cc. A e ee ee cec ade. Te accde ee ae ee
a aed ee b Fee ad Fd. We e US Naa Hga Taffc
Safe Ada (NHTSA) eed a ega egadg 90 ca,
Fd ad Fee ed a ed f e a ageed a Fee
Deca a I, USA, ad dced defce e. T ed a eca f 6.5
e Ag 2000. Ufae, f Fee ad Fd, dd e
e be ad ca ced ce NHTSA. N, e a 100
ea d aace beee e cae aed bea aa. Fd ced
ca a a e be, e Fee aged a cba f ce
e, ea ee ad e SUV deg be e be. T cac ed e bc
ad g a b cae, ag e bae gae, ee e
eeed adg ab a g bc afe. I e bae gae,
Bdgee, Fee ae ca Jaa, cae ad ad eaedAeca a ee a fa e e. T a eceed a e cec
ac Jaa, b a aecaed b e Aeca bc ad eda. Fd
CEO, Jac Nae, aaged e eda b eeg cce f Fd ce
b ae dd ae e ef a a Seae eag e e eca. B
Fd ad Fee ae ce ad f fe a a e f e ee. Lae a
ecc f e cae a ade a b Bdgee
CEO O ad Fd CEO Nae eged dg 20002001. (Regee & La,
2005)
8/10/2019 Evaluate Your Business Continuity Management
46/151
34 Eaae Y Be C Maagee
A A AAGED E/?
Gb (2000) e a e eca ade b Fee 2000 a caed bad
becae f e fac a Fee dd f e eca caag e: Ac
c, e e , acce eca eb, bc afe aa cce,
ac a, d caega, aa ca/aace ad a ad acce
eca cede. A ea ae Gb (2001) ad eeed b
g a e fg e cd be eaed b Fee eca: Be aae
f eca aabe, Aeca eca ee aggee eda ea, e
U.S. eca ega e ee e cca, ace bc ea
ecea, ad eda ad bc dge ee eca f e acc ad
a ae f eece a aaabe.
We cdeg BCM e Fee cae, Gb (2001) ad
c dd ae ae ad ed caega. W e
a a ad be b e U.S. ega e.
F Gb (2000) e ac f ad , de e
ca beee Fee ad Fd, e adg f cae ca be added
ag a ee dead c eca ac f e ca deed
de ae defce dc c f eae E (2001) e a Fee
dd .
Nea (2001) ea a e fg e ca be eaed f Fee: D
a dea aac 100 bg de eee, ae d
be ad defede, aeg. Ee ca eed a e e a
ad deed g f eabe. Fee, eac a
affeced b be be caced a a be ad ee f
ege g eeded. Te ce c ad e
e, fac e cdea. Qc dec ag cca ad
ea e ce ad abe a a e ca be eced.
Cc egadg BCM f Nea (2001) ae a ae a gd
eg f Fee egadg /ce ee a de
eee bg ad eee a aag eabe. Ae
cg a ce adce gge e ace f
eg e , ee ege, e e fac ad fa
cca aede.
Te a f e f dffee a f e d e a ee Fd
Fee ad a ffce / . Pag e
bae gae ee be a bad a f cdcg ce e
ea ge aa fa. T a b
e e ca ad e bc.
Ee f ee cea aee fd a Fee e ab e eac
ab, e a a e ea f e ca defee
aac bab a adce f ae. Te adce a bab affeced b
edge f ab. Fee, E (2001) a Fd ad Fee
8/10/2019 Evaluate Your Business Continuity Management
47/151
35Leag f dceed cae
cabaed degg e fag e c ae abe a e ca
d be afad f ab be. Ee f egad ab de
a g f e ca bgg ae e e ag ce c
e fac caed ab e.
CBG FAC,CD E AE BEE AAGED DFFEE?
Pag e bae gae ad dg fa ee a a ade
cae ccef. I a ade ffe. T
a e fa a aa bc . Sce Fd ad
Fee dced a afe cba f dc (E, 2001) d ae
bee bee, f eea ea b e bc ad e ae ca,
ad a a a bad cba.
Iee f / a ae bee de b eg
ee ebe f aea. Ae a e defca f a
be ae ee ebe f e ad
a be dffee a f e gaa ae eaed e a.
4.3.4 E ADA 8400CDE
T e ece dceed cae c eeca eeg a e
a d f ece ad ca dc.
CE
SAS e eeae ad e
Te Da Accde Iega Bad (HCL), .c.d. Sa, 2007, Ae gd ae ad ee e.
Maee, 2007, SAS dede eeede edf, ace Pe.d.
Haeg, 2005, 100 d effe aeg feag9.
Ae Id Ifa, 2001, SAS ceded f c aagee.
A AE AE
Scadaa Ae (SAS)
Bbade Ic
A AEED AD ?
O e 9 f Seebe, 2007, fg SK1209 f Ceage Aabg a
ed a accde a Aabg a. Te acaf ed a a Da 8 Q400
ee e defed be e a adg gea ad eaed a
ced eegec adg. Afe adg, e g a gea caed ad fe
aege ffeed g e dg eaca. (SAS e eeae, Seebe 9,
2007)
SAS ced ea a ceded e e Da Accde Iega
Bad (HCL) egaed e accde. Ag e accde a cdeed a
9Eg aa: 100 age effece c aagee cae.
8/10/2019 Evaluate Your Business Continuity Management
48/151
36 Eaae Y Be C Maagee
aed ee, afe dc acaf aface Bbade, SAS decded
cec ee Q400 fee. Tee cec ee add ffca eee
ad d cece edae. T a ae e ce ad
eee a fg afe SAS f . (SAS e eeae Seebe 10,
2007)
Te e ebac cae ee da afe e f cde e ae SAS
Da 8 a ed a accde a V a, Laa. Te fg a
deed f Paaga b eeeced ecca dffce ad e ce deed e
acaf V. A aege ee eacaed ad e ee eed. SAS
decded gd e ee Da 8 Q400 fee fe ce.
Bbade deeed a ec gae ad eceded a a acaf
dde f e 10,000 adg gea cce e ee be gded
e ec a caed . (SAS e eeae, Seebe 12, 2007)
O e 13 f Seebe, HCL eeed a ea e egadg e fcde Aabg. Te ega fced e g a adg gea c
ad caed adg. We e eaed e eac/ee aca
, c a fd e ea ead. T ed a eaa f e
d ed f e c caed e adg gea cae (HCL,
2007a).
I ae e eeae (18f Seebe), SAS eed a a f e 27 Q400
acaf ee gded f adda ec accdace e
ae dece ed b Caada afe e 12 Seebe cde. SAS
eaced a f e adg gea a Q400, egade ee e fa adeeced . De e ccace, SAS a fced cace a be f
fg.
De e accde Aabg ad V, a ec Sc aed a
ega egadg c f ceag dage ae e. T a
a eed a e eeae (Seebe 19) b SAS. T ega a ae
eaed, Ma 2008, ad a c ceaed.
I e eeae ae Seebe ad ea Ocbe, SAS aced a e
Da 8 Q400 acaf ae dege g ec ad a eaceead d e affc. Se ec ad a eacee ee ece
e eed b e c aa ae ad acaf aface. SAS a
eed a e d cac Bbade egadg cea f e c
ad ce ced de e ed f c e acaf ee gded.
Te Da ae ee ccee ae bac affc Ocbe ad e ece
be e adg gea ad daeaed, a ea f a e. A f e
e cde ee eg, a d accde g a Da 8 Q400
cced e 27f Ocbe a Ceage a. T accde a a caed
b adg gea be. N e ee eed f e cde. B SASdecded a eg ad eed e ee Da 8 Q400 fee f ece
8/10/2019 Evaluate Your Business Continuity Management
49/151
37Leag f dceed cae
eae. Cfdece e Q400 a ded cdeab ad
ce ae becg ceag dbf ab fg e f acaf.
Accdg, e Bad f Dec aa, I ae decded edae
ee Da 8 Q400 acaf f ece ad Ma Ja, SAS Pede ad
CEO. SAS a gae fa e ce egadg ebg ad efd
f caceed fg. Ac ade e eacee f e Q400 fee ee a
eeed SAS aede. (SAS e eeae, Ocbe 27, 28 & 29, 2007)
Te Da Accde Iega Bad eeaed ee ea e egadg
e a cde Ceage. I e d e (Nebe 3, 2007), e ae
a e accde a caed b a gag g bcg e fce e
ec ae. T eeed e a ee f e g a adg gea
(HCL, 2007b).
Bbade acced SAS f efg a aed dceed cede
e eacg a e g adg gea f e acaf a fe da ae aed e d cde (Maee, 2007). Te a a a cfged f
aa e e adg gea (HCL, 2007b). SAS ea, Be Tee,
aeed a SAS ae efg a eacee fg e
aa.
De e fdg b HCL, SAS eaced a eee Bbade ad eceed
cea f e Da acaf cde (SAS e eeae, Mac 10, 2008).
Te faca cea ed g e a SEK 1 b e
f f a ca ae ad ced f fe f ad a acaf de. SAS
Bad f Dec aed a de f 27 acaf a a f e ageee. Sa(2007) age a Bbade dec ceae SAS a a g cee
ad ga.
I e SAS G eaed e f 2007, e eaed a egae ac de
e Q400 accde f SEK 700 f c e a 70 % a caged e
f ae.
A A AAGED E/?
I cae, de ed dcea, a ad fd fa ab a
be f fac.
SAS ad e bee eed e ca a e La
a Ma, 2000. Afe dae SAS a ceded f e eff ad
gd CM . Te e fac a e ae e . Dg
e 2000 dae, e a a fed a ecaca c dcae a
e d f ad bee caed ad a e a a e
eeed [I]. Te SAS cee a Ceage a ee
c a acaf 24 a da c eabe , e.g. d e
cac be . SAS a a a ageee e aa ca, SOS aa ge
c SAS aagee ce e dec a bee ade acae ea. Fee, e ca a a eegec aaabe a eadae
8/10/2019 Evaluate Your Business Continuity Management
50/151
38 Eaae Y Be C Maagee
Fda, Sede [C ] ad ded f e eeca
aed f eegec ee. (Haeg, 2005; Ae Id Ifa,
2001)
A a be b ecfca ece bee, cedb f ace
(Seff, 2005). I e Da 8 Q400 cae, cedb [E ] a aaedb e f SAS. Acaf ec ceced dec ad
fa a ccaed eda ad e bc a e ebe [E
]. Te fac a SAS G a Cae Cca
d dcae . a eeed b e
ea aee f SAS CEO, Ma Ja ad e bad f dec dac
dec gd e ee Q400 fee. Fee, e ffca aee a
fg afe SAS f e a SAS a a gd . De
e 2007 cde, SAS ad cace a be f fg. Ag e ae
caac cd be fd, a eg ee ce dead [].
CBG FAC,CD E AE BEE AAGED DFFEE?
Oea, f e a f e, SAS aaged e a e. Te e
g a b cd ae bee aaged dffee a e eacee f
a e g adg gea f e acaf ed e 3d cde. Te
fa fd ab ee eacee a e cec
aeace cede , a SAS aee a cage ae efed
fg e aa. Hee, e fac a SAS eaced a eee
Bbade ad eceed cea a Bbade de e bae
f e cde.
4.3.5 E BAC
T cae eeg ce a ec f d ead f
aea/ece d. I a a a aagee c.
CE
Te Acaed Pe (2006), 2 Fe E Eece Recee Redced
P Seece
Ba, N. (2003), I e: E c. e a., 3 B,
Ddd, R. (2003), Ree: Pe dea: Geed, Eg ad e dea f E
E Ca (2000), E A 2000
NY Te (2002), Tea Bad Ree Adee' Lcee
Oe, R. & Bee, A. (2001a), E' Cef Eece Q Afe O 6
M Jb
Oe, R. & Bee, A. (2001b), E cae: Te ee; E
C. fe age U.S. ca f bac
Zee, W. (2002), Te dead f E
8/10/2019 Evaluate Your Business Continuity Management
51/151
39Leag f dceed cae
A AE AE
E Ca
A Adee
A AEED AD ?
Befe bac, E Ca a a age ca baed H, Tea,
USA. Te ca a eaed e eeg ae ad eee eceedg
$100 b a acced 2000 (E Ca, 2000). Te accg ee
e f e ea E d fe f bac Decebe 2001 ad e
ea cae be ed a a eae f fad f ea ce (Ba,
2003).
O e 14f Ag, 2001, Jeffe Sg, E CEO, aced ega
f e de ea ea (Oe & Bee, 2001a). Sg ad
bee e f ad d be e begg f e ed
f E, c afe a ea a fa fed f bac Decebe 2
(Oe & Bee, 2001b). Oe ceece f e bac a a A
Adee, a a e e f fe age adg f, eed E
e adg cee Tea a a e f e c. T becae e ad
ced e a E ad aded e face (NY Te, 2002).
E ad ade a ee f ecae ee (SPE) ad aggee accg
acce c ade e f face bee a e ee. S dffee
ece ee ed c eed a deb e aa e f
2000 a $10.2 b ead f e aca $22.1 b. (Ba, 2003)
A A AAGED E/?
Ne Ba egaed bac fd ee ee ee e
ee eb f e e f SPE ce ad fed a e
2003. A Ba (2003) eaae E e ae a cc a E, a
ee deced ae, aed e be b bg e aga
e ee ad g a SPE aac () dge bga
ea e a bed, () e e ceed a ca f f eag
ace ad, e cae, a eee, ad () de e dece ae a
ae eca ee f. Te cc f Ba e ae ffce f E ad eb f e ca eace f e SPE
ce ad a cea faca ad edge f e gf
cdc f ee ffce ad aca ee aed e ffce cdcg e SPE
aac.
Zee (2002) ea a e a ea f e E bac a a
f geed ad dece c eed e gaa. Ddd (2003)
decbe e dee f e f a a e f beg abe ceae a cea
deae ae badd, e eaaga a eece, c
ad beef ad e eece aca SPE. Tee dabe cd be f e cae ce c Zee (2002) efe .
8/10/2019 Evaluate Your Business Continuity Management
52/151
40 Eaae Y Be C Maagee
Cae ce ca be feced f e d ad Ba (2003) cae
e cc a eea aagee ebe, ad f cea faca
, ee deceg e bc ad e a. T a ed eea a
c eed a be f cc f aagee ebe (NY Te,
2006).
A cae a e f decee aagee (Zee, 2002) ea
aa fa ab e ca. I de ee a aagee a b ef
e e ca de a age ca bac. T ca b a a
eca c cde eea ee, a ea aagee
ebe, cd be ecea ba effece BCM. O e e ad,
e be baed f aagee eeed ee f d.
Fee, e E cae, A Adee a a eea ad c dd
e c f ccg. A ac f ae ea
ae acee be c ad. T, eea fce, c a
ega, ae ef a be ea.
I cg fad, cdg aeg cae e, E a dd
eece gd a e dd a e e. If e
accg d ae bee de cec e aa f e ca cd
ae efeced e begg f gg deb fag c ce c eae
c cd ae aeed e ae. Te dece f gg deb ed a
a ac f f e be. T ade dffc ade
e effec ce e ee a ae. A d bab ae
ge e ca a bee cace aage e dffce.
CBG FAC,CD E AE BEE AAGED DFFEE?
Te dffc cage e f e
cage cae ce ee. T ae a e fcg
eca a dffc e aagee a de aac
accg c. Oe e f cae a f a ca eeed
effece BCM, d be e aca ae. W e f
, aae aa e, e ae ca ae a
f a be ad ae be f aagee ae a
cae aagee d ae eed eg. T ca bedffc a ce a e c ae a a ae b cd a
be a a e BCM.
4.3.6 A FACE FG AF4590
T cae f ee ce cce e ae d a SAS Da ae cde
b dffe e fac a ee ee a faae cae. I , a SAS, e
ece be.
8/10/2019 Evaluate Your Business Continuity Management
53/151
8/10/2019 Evaluate Your Business Continuity Management
54/151
42 Eaae Y Be C Maagee
f e babe cae eeed. Tee cae ee g eed aage e a
a f ae aae, e daage fced b e a a fe a
c ead fe eaage ad e g f fe b a eecc ac. Ee g e
cae d ee be eeca eaa aeace eaed ee a
ee cd be ade aea.
Te b A Face ed a e ea e b
gdg a Ccd ad b g fa e ebe cac
fa ad cdece. Te c e eeae dg e fg
da fe a gd a ade b A Face. Te
ea e ae a ee ae e a ee. I a be
a e bacgd f A Face c ece ae ae, e B
Aa ecace gd ae a ae ade e ece ge (Hee,
2000).
Ee f e gdg f e ee Ccde fee a a ac e cae d be ed a B Aa ad ee ae (Te Gada,
2000) ad A Face fe (Hae, 2000) a e e. Te age eee f b
cae cae f bc aae ad ee cae eace e Ccd.
T e a A Face, ag B Aa, ad c
eabed e ce e aa ece.
CBG FAC,CD E AE BEE AAGED DFFEE?
A ee ae e gaaa dec e e f BEA (2001), ee ae
dffce dag a cc ab fac ee aaged e
accde. Sce e aagee afe e ee a gd, ee eed
aage e fac dffee.
4.3.7 CBA AA
De ed dcea, cae gae fece . S,
e a d e ee e fa fd.
CE
Baea & Cg, 2006, Dec W Bde
FSA, 2004, Receda Baed e Iec Re f T Bacf Cba, N.A.
Te Ec, 2004, Saaa; Cba Jaa
A AE AE
Cba Jaa
Te Faca Sece Agec (FSA)
A AEED AD
I fa a a ee ae a ge aea e bag be da. S a
e cae Jaa befe 1998. Ta ea e Faca Sece Agec (FSA) aceaed ad de ec f Jaa 19 a ba. FSA e a cea
8/10/2019 Evaluate Your Business Continuity Management
55/151
43Leag f dceed cae
eage b eg e cee f e T bac f Ced Se F B
1999. Ma fe ge aea bag ee acceabe, c a c
eg faca dc ac cae . Cba ee, ced c
eg c eaed a ce aeg f e ca. (Baea & Cg, 2006)
I 2000, Dece Ba T ece a eded f b eFSA f cceag e. Te ad d ece deged ccea e e
f cae ce. T a e f a a e eed aga ba.
(Baea & Cg, 2006)
I 2001, Cba a fced b e FSA e a ad ffeed dc
ab 40 cae c e e afe b e ece dg ad
feg ecage e ae ed. I a e eeae Seebe 14, 2004, e
FSA ee fac fd baed e ec f e T bac f Cba.
Te fd a Cba ee ag eeea f a eadg aee
aea ae cec e adg f ae acee f ece.Te a aded ae acee a a cd f gag ced (FSA, 2004; Te
Ec, 2004).
De ee fdg, FSA eed e cee f Cba f ae bag
ffce. Te ea a a daaged b FSA caed e ba ad
ceaed ce b g ecee g ag faca dc.
(Baea & Cg, 2006; FSA, 2004)
A A AAGED E/
F e fa fd ab cae be a a e cae a aaged a a. N fa a bee fd egadg Cba ac
eed e a.
Baea & Cg (2006) a ee g eea e ee
eed aga e ba, Cba ged fac ad ced eabe
be. T ca be ee a a ac f .
F fa ad da a cc ad eefe fe
ega be caed f cae.
CBG FAC,CD E AE BEE AAGED DFFEE?
Te fac fd cae a a Cba ged e cea ga e
f FSA a ge aea bag ge a acceed. Mabe e d
ae e cee f Cba ad e ad caged e acc.
4.3.8 CCACA DAA DAA
T cae f ee ce a daa f a dc, a Fee, b
ae ae (fd). CcaCa a ece ad ae dc eca
Beg (1999) c ae eeg ee f a gae e a bee b
aage e a.
8/10/2019 Evaluate Your Business Continuity Management
56/151
44 Eaae Y Be C Maagee
CE
L, T. (2007), T fe be dae O c f e UK'
cae ad cc
Regee, M. & La, J. (2005), : A
, 3
.
A AE AE
CcaCa Daa
Te UK Fd Sadad Agec (FSA)
A AEED AD
Te dc, Daa, a b 2004 dced 20 ae de Ee. I
Feba 2004 CcaCa aced e Eea caag b dcg e
Daa dc e UK. Te fed ae a a e d f dc e B
ea ae ae ce a aed f a g b ae a aec g cea efee, cdg add f ea f ae, ee d
be. T a CcaCa e be ce e eeac ed a
e a fac Ba d be e ae e cg bed
ae. Hee, e fac a e ae a a ae a eg a e
ae d eee. A ffca ca ade b e Naa Mea Wae
Aca aed a ee f ace c ade bec e bc.
We e fed ae e a egaed b e UK Fd Sadad Agec
(FSA) a fd ae a g ee f bae, a a e f e fg
ce. Te ee a ge a e aed e UK e e a e
ee aed e e f Ee. Afe e FSA ae, CcaCa decded bg
e Icde Maagee C Re Tea, c a fed cec
e 1999 Beg daa, ade e cae. A a daa f e
dc a deed ae Mac afe fe ee e ee. (Regee &
La, 2005)
A A AAGED E/?
Acg c e b ag e ae ad eeae
e de f e , CcaCa ade e cde aed e dc e UK.
Te c daa ad ee cca [ ] ade
be a e UK. Te c ee a a deede e fac a
CcaCa ad a g ad e cc e e
a. Ee f L (2007) a cde a e f e fe be
dae e UK, e dec da e dc f e UK ae a be
cdeed cec f e ae ae cded e eece.
Te aagee befe e dc ad eea fa g. Te ,
f a, ca be ee a eee eg a CcaCa dd feee e be
f dcg a dc c a ce a ae ad e e g
ag. I be a CcaCa ade a aa egadg ce
8/10/2019 Evaluate Your Business Continuity Management
57/151
45Leag f dceed cae
ac b ed e be. A, e a defce a
CcaCa dd cae e dc ea adad befe eg .
CBG FAC,CD E AE BEE AAGED DFFEE?
T cae ad da cc f ce a dffc fd eea ce
egadg e aagee.
CcaCa cd ae de a bee b cdg a ca
ea adad. If ace defca ad aa ad bee de
cd ae eeed e e a.
4.4 E F E DCEED CAE
Te fac c ae bee fd gfca affec BCM a f e
dceed cae ae ed Tabe 3 be. Fg e fac ae e cae
c ed e fac. 3. C .
C Na/Ec, BP, SAS, E
Na/Ec, BP, SAS, E
Na/Ec, Fee, SAS, A Face
Na/Ec, BP
Na/Ec, BP, SAS, EA Na/Ec
A Na/Ec, BP, Cba
BC Na/Ec
Na/Ec, Fee, CcaCa
Na/Ec, BP, Fee, CcaCa
Na/Ec, Fee
Na/Ec, SAS
BP, SASC Na/Ec, BP, SAS
SAS
BP, E
C
B
A BP
BP
8/10/2019 Evaluate Your Business Continuity Management
58/151
46 Eaae Y Be C Maagee
Na/Ec, BP, Fee, SAS, E, A
Face, CcaCa
Na/Ec, BP, Fee
Na/Ec, BP, Fee, SAS, E, A
Face, CcaCa
C Na/Ec, SAS
D Na/Ec
C SAS
D
D
Na/Ec, BP, SAS, A Face
D
Fac fd af e f e dceed cae be ge ea . If
a fac a ed e a af f e cae, e fac a be a f
cea ee b abe f e eaede f a c a. T
ae e a f BCM b a a a e fac c ae bee fd
e cae.
De e ac f a fa egadg e cae, e fac c ae bee fd a a a e a f e cae b ae e
eae a be f gfcace f e ce f a c.
I b e Abee ad BP cae a fac cbed e ce
eea eea fac eac cd ae eeed e ce. T e a
e a f fac eed be afac ee a a c f
deeg.
8/10/2019 Evaluate Your Business Continuity Management
59/151
47Te BCM Eaa Mde
5 E BCEAA DE
.
Te a bece f e . Te de a
deeed f ce: e e ad e dceed cae. T cae
decbe e deee f e e, a e e f e dceed cae,
e fa eaa de ad a e de.
5.1 DEEG E EA DE
T f e ea de, fac ee eeed f e e ad e
faed eaed eac fac.
5.1.1 FAC EEED F E E
Te fac eeed f e e ee fac c ee fd e cae
ad/ ad e a e ce e eae. Tee fac ae fd Tabe
4. Te fac eed ee: deadg e gaa, ab, cae
c aee, be ece bece, ee ce, dead eg,
debefg, age, daabae c ad edge.
4. .
BC Cae ce, Maagee , Eea ea,
Iea ea, Qc deec, Adaab, Acceace
D BC BCM Pgae, R defca, R aa, Hc e,
Pa, Ieea, Cea ebe, Tag ad
edca, Teg, Ree
Ae e, Ree cede, Eaca cede,
Eegec ee ee
C
Qc ee, Iea cca, Eea cca,
CM Tea, Dec ag, C ea cee
B
Reddac
Seea f e eed fac a ae bee ed de e fac a e ae
e f be decbed dg a c. Tee fac a e be
c aagee (BCM) b e ea ae e fe e
de a e, accdg e de, d ca e ae ace a e
e fac. T ad e de f becg eee ad e cg,
e e dea f a aec f BCM.
10Cg, 2004, . 43.
8/10/2019 Evaluate Your Business Continuity Management
60/151
48 Eaae Y Be C Maagee
We dg e eae, e a f eegec ee (ER), c
aagee (CM) ad be ece (BR) ee eged e fac. Te
ae a de eea, cea ebe, ag ad edca,
eg ad ee. I Te BCM Eaa Mde, a ee eac f e ee
aea ER, CM ad BR e e e fac ee gee ac a
eed eea, cea ebe, ag ad edca, eg ad
ee. T ae e fac e a f e ce f Te BCM
Eaa Mde. Te a a ac c ee e eff
fc eed be ge e eg e de.
Te fac , , ,
, , ad , c ee
fd af e f e cae, ae cdeed e a a e e
ad eefe ecee e eaed eac f ee fac. Te a
a ec f ee e a bece ER ad eefe,
ee a a a fac. T fac dd ge e
a a f e cae ce ee ee fe cae c gae
ER.
5.1.2 FA F E
Qe eaed a f e eeed fac (Tabe 4) ee faed. Seea
e ce e a e fac. I e cae, e fac cceed a be
ce aaced. T ae , e a , ecea add e
e f eac fac ce e de d be eee.
Te e Te BCM Eaa Mde ae f e e. Tee a
e b ae acabe (N/A) ce a e a be
acabe a cae. Te ea ce e e a
eae e cace f ea dge fecg e e a f e e
d be f e e; eaae ab a cae f 1 5.
We e e ee ceaed, e ee f e e ee cdeed
eac fac a e e efec e ee. T a de ae e
e ceebe ce a fac ee g be de ad
ecfca. Te e beg f e e e fe
ceae e cee.
Rea (1997) ea a a cde eg e e a a f e
afe ce ad eefe, e f e e eaed cae ce a
decded e a cde eg e.
Regadg e cafca f c fac a e affec, e a ged
e fac c ee eaed b e e. Ma e ca
be eaed a be f fac ce a fac ae ce ceced eac
e. T ae e eae e eee a f ee fac d ecee
e e ece f a fac. O e e ad a a
8/10/2019 Evaluate Your Business Continuity Management
61/151
49Te BCM Eaa Mde
a fac e ae e ce a d ae e e
eee.
Se e ae f a e ee eea aec ae cdeed e ae
e. T becae a fac d ae a e e
a e e e e a e fac.
Te e ee gaed eac f e fe caege (dec BCM, ER, CM,
BR ad dec BCM). Seaa ade be abe ee e f e
e, b a f eac eece a f BCM. T ae be ee
c aea ee ae eeded.
T caf ee ad ea e e de ag g
g e, a fa eafe a gee ac a a gde e
cdcg Te BCM Eaa Mde.
5.1.3 FED F ACA
Sce e de acabe f ca, a BCM aec a e f
bee a be egaed g de. T ea a ee a
a ce ee a be aec c ca be ed. Ee f e
aec ae bee ed, e a a e de ge a dca
f e ee f BCM e gaa.
Te ea a aec f eac fac ae cded Te BCM Eaa
Mde a becae ae e de eee a
e. If e de ecg bab be ed. Aeea f e de cde a aec e e fac c dd a
e a ce e ee BCM c.
5.2 DE ADA
Te de a adaed age. Te f a a ca ada ee e
de a fed e e ecd a a ee ada ee ee gae
e e de.
5.2.1 CA ADA
W ad 6000 eee e a 30 ce, Cad a a de f
da d ad gc e, e f ae eae, ce
ee f e ad ae d ad gaage d.
A e e f g, Cad degg a BCM ce gee Ma AB.
Teefe, e de a eed Cad ce a a f e gaa ae
bee g e BCM ce e. T ae be e e de
dffee affae c d ge dffee e.
I Cad, Te BCM Eaa Mde a e dffee affae e
gaa. Te f affae dce ad e gaage d. Te ecd e
da d ad dcg . Te d dce ad e eag dece f
8/10/2019 Evaluate Your Business Continuity Management
62/151
50 Eaae Y Be C Maagee
e ad ae d. Te f dce gaage d. B e ff ad
e e f ae ad ee e. Te affae ee cdeed
ae ag ee f BCM e gaa. T d ge e c
ca ee Te BCM Eaa Mde aca eae e ee f BCM.
Te aa, f e ee f BCM eac affae, a de b Ma Hedbeg,
R Maage a Cad. Hedbeg eeced gd e f affae 1, dece
e f affae 3 ad 4 ad e gd e f e e.
A f e affae eed e de. Te fed f f ada ae
fd aed E. Te e f eac eece caeg a eac eece
affae ca be fd Tabe 5. Te e ee g a a eeced c
a e bece eaae a ca ee f BCM aceed. Te fac
a a affae eed e de e a e de e fed.
Ne: Te dffeece a ad ce beee e affae
de e be f e aeed acabe.
5. .
.
D BC 5 (7) 4 (6) 5 (7) 5(7) 7 (7) 5 (7) 11 (41)
5 (9) 3 (9) 5 (9) 9(9) 7 (9) 9 (9) 20 (54)
C 6 (10) 7 (11) 3 (11) 11(11) 11 (11) 7 (11) 45 (55)
B 5 (5) 2 (6) 4 (6) 6(6) 6 (6) 6 (6) 7 (35)
BC 5 (5) 1 (7) 4 (8) 0(8) 3 (7) 4 (8) 9 (43)
14 (38) 5 (39) 15 (41) 31(41) 14 (40) 13 (41) 34 (240)
Ee g e e gae g e eeced ae, ece f affae 4 c
ad a e ce e eeced a eaabe ce, e ce f e aae cced de eea ea. Oe be ce a a f a ae
bee fed baed e e ece f e a c a
ced e aca ae. Ae ce a be dffee eea f
e a dffee affae. Fe, e e ee eea aec ae
cdeed ge e ae e a dge e aec a aca ae bee
ffed. Te e affae 4 a be eaed deed e fac a e
ee e affae a ad a be ge e eae bac e de
a ea ad. Te ece a d ecee gd e a deed
e fac a e ae a gd dec BCM ee.
8/10/2019 Evaluate Your Business Continuity Management
63/151
51Te BCM Eaa Mde
Te a aed f a affae 34 a /a ce f 240/240
c a a a f a affae cae a ge a e
ee defcece a cea e ca be dde ce e e a eg f
. F e e e ca ada, ca a be eed a
affae ae a gd ER e CM a a ee a affae. I d be ed
a affae 1 ceed a e dd f dead e cce f CM. T
cd b ae ge e egae e f e a aea. T a e
a def eed be eee. Te e aea ge ag e.
Teefe e e ER ad CM eed be eee ee f e ae ea
dffc acee ad eefe eed be aeded.
5.2.2 EE ADA
Te daf de gee e fa eafe a e e ee f
ada. Tee ae a , eceded b e , aagee ee
ea f eeece f g aagee. T e a deg,ae ee eceed f a f e. Te ee ee:
Kee Mge, G R & Iace Maage, Seca.
Lea Ed, Vce Pede, G Iace & R Maagee
S, AB Eec.
Mag Beg, G HSE