An enhanced risk assessment framework for business continuity management systems

Risk based control of the negative effect of discontinued automated processes – a case from the agricultural domain

“…Informační management (MTPD) or Maximum Tolerable Downtime (NIST, 2010;Harris, 2010;Torabi, 2014). Additionally, due to the fact that critical business operations should ideally recovered before this maximum tolerable downtime period, a Rational Time Objective (RTO) (ISO 22301, 2012;NIST 2010) should be considered as the target recovery time for business functions and information systems.…”

“…Additionally, due to the fact that critical business operations should ideally recovered before this maximum tolerable downtime period, a Rational Time Objective (RTO) (ISO 22301, 2012;NIST 2010) should be considered as the target recovery time for business functions and information systems. Furthermore, the minimum accepted level regarding the operation of a business function, namely Minimum Business Continuity Objective (MBCO) (Torabi, 2016) should be achieved within the desired MTPD.…”

“…For example, in Spain a high percentage of farms have programmable irrigation automata which allow farmers control effectively irrigation parameters (Contreras et al, 2017). It can be thus realized that even a temporary interruption of such systems can result to errors regarding the overall water management process, ranging from water overconsumption (Contreras et al, 2017) to nitrate pollution (Thompson et al, 2007).…”

“…The risk level is defi ned by the measurement of severity and likelihood (Borghesi & Gaudenzi, 2013). Risk analysis frameworks with respect to an integrated business continuity management has been already proposed by academics, who indicate that BCM "enables the organizations to improve their resilience in order to cope with the identifi ed risks" (Torabi et al, 2016). Nevertheless, no technique or similar framework has been proposed for utilizing risk magnitude in order to estimate the additional, from the initially defi ned by experts, recovery time effort required to recover an individual business function or information system, when a list of unexpected factors emerge during the recovery process.…”

“…Resumption of critical processes/ functions after the occurrence of any disruptive event is essential from the business continuity (BC) viewpoint (Torabi et al, 2014). It is, thus, important to develop strategies which can predict the maximum accepted resumption timeframes of the interrupted critical activities when a crisis occurs.…”