Evolución y modelos de implementación de sistemas de gestión de continuidad del negocio
Evolution and implementation models of business continuity management systems
Evolução e modelos de implementação de sistemas de gestão da continuidade do negócio
Resumen (es)
El sistema de gestión de la continuidad del negocio (BCMS) es una herramienta que permite a las organizaciones prepararse para escenarios que afecten el normal funcionamiento de las mismas. En este proceso, se requiere una evaluación de impacto y valoración de riesgos, de tal manera que se identifiquen, establezcan y evalúen los planes de continuidad del negocio (BCP) para asegurar la disponibilidad de recursos y personal necesario. Este artículo analiza la evolución, los modelos de implementación de BCM y las estrategias para la gestión de riesgos asociados. Se realiza un estudio de 37 artículos relacionados con BCM, los cuales se analizan y se concluye que la evolución de la BCM ha permitido a las organizaciones acceder a modelos que facilitan la implementación de este sistema, acorde a las necesidades, disponibilidad de recursos, competencia del personal y con un enfoque PHVA (planear, hacer, verificar y actuar).
Resumen (en)
The business continuity management system (BCMS) is a tool that allows organizations to prepare for scenarios affecting their normal functioning. In this process, an impact assessment and risk assessment is required, identifying, establishing and evaluating business continuity plans (BCP) to ensure resources and necessary personnel availability. In this article the evolution, BCM implementation models, and associated risk management strategies are addressed. Thirty-seven (37) articles related to BCM are analized concluding that BCM evolution has allowed organizations to access models that facilitate the system implementation, according to the needs, availability of resources, personnel competence and with a PHVA approach (plan, do, check and act).
Resumen (pt)
O sistema de gerenciamento de continuidade de negócios (BCMS) é uma ferramenta que permite às organizações se prepar para cenários que afetam seu funcionamento normal. Nesse processo, é necessária uma avaliação de impacto e de risco, de modo a identificar, estabelecer e avaliar planos de continuidade de negócios (BCP), para garantir a disponibilidade dos recursos e pessoal necessários. Nesse artigo são analisados a evolução, os modelos de implementação de BCM e as estratégias de gerenciamento de risco associados. Trinta e sete (37) artigos relacionados ao BCM são analizados concluindo que a evolução do BCM permitiu às organizações acessar modelos que facilitam a implementação do sistema, de acordo com as necessidades, disponibilidade de recursos, competência de pessoal e com uma abordagem PHVA (planejar, fazer, verificar e agir).
Referencias
Andersen, K. G., Rambaut, A., Lipkin, W. I., Holmes, E. C., y Garry, R. F. (2020). The proximal origin of SARS-CoV-2. Nature Medicine, 26(4), 450-452. https://doi.org/10.1038/s41591-020-0820-9
Arias, Y. E., Pinzon, M. V., y Zuñiga, L. F. (2020). El nuevo coronavirus 2019. ¿Se necesita resiliencia estratégica, operativa y económica frente a los riesgos globales emergentes?
ResearchGate. https://www.researchgate.net/publication/340088302_El_nuevo_coronavirus_ 2019_se_necesita_resiliencia_estrategica_operativa_y_economica_frente_a_los_riesgos_globales_emergentes.
Aziz, N. M. A. A., y Jambari, D. I. (2019, 9-10 de julio). Information Management Procedures for Business Continuity Plan Maintenance. 2019 International Conference on Electrical
Engineering and Informatics (ICEEI). Bandung, Indonesia. https://doi.org/10.1109/ICEEI47359.2019.8988804
Baba, H., Watanabe, T., Nagaishi, M., y Matsumoto, H. (2014). Area Business Continuity Management, a New Opportunity for Building Economic Resilience. Procedia Economics and
Finance, 18, 296-303. https://doi.org/10.1016/S2212-5671(14)00943-5
Bakar, Z. A., Azbiya Yaacob, N. ul S., y Udin, Z. M. (2015). Business Continuity Management Factors and Organizational Performance: A study on the Moderating Role of it Capability.
Journal of Management Info, 2(3), 5-12. https://doi.org/10.31580/jmi.v7i1.38
Blos, M. F., Hoeflich, S. L., & Miyagi, P. E. (2015). A General Supply Chain Continuity Management Framework. Procedia Computer Science, 55, 1160-1164. https://doi.org/10.1016/j.procs.2015.07.087
Bruneau, M., Chang, S. E., Eguchi, R. T., Lee, G. C., O’Rourke, T. D., Reinhorn, A. M., Shinozuka, M., Tierney, K., Wallace, W. A., y von Winterfeldt, D. (2003). A Framework to
Quantitatively Assess and Enhance the Seismic Resilience of Communities. Earthquake Spectra, 19(4), 733-752. https://doi.org/10.1193/1.1623497
Bustos, J. D. (2016). Análisis de las metodologías de gestión de riesgos para garantizar la continuidad del negocio en el departamento de tecnologías de la información en la
Corporación Nacional de Electricidad en Esmeraldas [tesis de pregrado]. Pontificia Universidad Católica del Ecuador.
Carrizo, D., Alfaro, A. A., y Loyola, R. (2016). Propuesta de un modelo de plan de continuidad: Un estudio de caso. Memorias de la Décima Quinta Conferencia Iberoamericana en
Sistemas, Cibernética e Informática (CISCI 2016) (pp. 97-102). http://www.iiis.org/CDs2016/CD2016Summer/papers/CA539WU.pdf
Engemann, K. J., y Miller, H. E. (2015). Risk Strategy and Attitudinal Sensitivity. Cybernetics and Systems, 46(3-4), 188-206. https://doi.org/10.1080/01969722.2015.1012890
Faertes, D. (2015). Reliability of Supply Chains and Business Continuity Management. Procedia Computer Science, 55, 1400-1409. https://doi.org/10.1016/j.procs.2015.07.130
Filipović, D., Krišto, M., y Podrug, N. (2018). Impact of crisis situations on development of business continuity management in Croatia. Management Journal of Contemporary
Management Issues, 23(1), 99-122. https://doi.org/10.30924/mjcmi/2018.23.1.99
Gaspar Martínez, J. (2010). El plan de continuidad de negocio: Guía práctica para su elaboración. Díaz de Santos. http://www.editdiazdesantos.com/wwwdat/pdf/9788479787783.pdf
Gibb, F., y Buchanan, S. (2006). A framework for business continuity management. International Journal of Information Management, 26(2), 128-141. https://doi.org/10.1016/j.ijinfomgt.2005.11.008
Granda, E. M. L., y Carrión, R. G. (2017). Modelo de evaluación de gestión de continuidad del negocio basado en la norma ISO 22301:2012. Espacios, 38(54). https://www.revistaespacios.com/a17v38n54/a17v38n54p03.pdf
Heng, G. M. (2015). Business Continuity Management Planning Methodology. International Journal of Disaster Recovery and Business Continuity, 6, 9-16. https://doi.org/10.14257/ijdrbc.2015.6.02
Herbane, B. (2010). The evolution of business continuity management: A historical review of practices and drivers. Business History, 52(6), 978-1002. https://doi.org/10.1080/00076791.2010.511185
Herbane, B., Elliott, D., y Swartz, E. M. (2004). Business Continuity Management: Time for a strategic role? Long Range Planning, 37(5), 435-457. https://doi.org/10.1016/j.lrp.2004.07.011
Hinson, G. (2012). Technical Briefing: Business Continuity Management. EDPACS, 45(3), 14-25. https://doi.org/10.1080/07366981.2012.678125
Icontec. (2019). Norma técnica colombiana NTC-ISO 22301:2019 Seguridad y resiliencia. Sistema de Gestión de Continuidad de Negocio. Requisitos. Icontec.
International Labour Organization. (2012). Multi-hazard business continuity management: Guide for small and medium enterprises. ILO. https://www.ilo.org/wcmsp5/groups/public/---ed_emp/documents/instructionalmaterial/wcms_187875.pdf
ISO. (2017). El arte de la gobernanza. ISOFocus, 125. https://www.iso.org/files/live/sites/isoorg/files/news/magazine/ISOfocus%20(2013-NOW)/sp/ISOfocus_125.pdf
ISO. (2020a). ISO / TC 292 Online. https://www.isotc292online.org/
ISO. (2020b). El arte de los negocios. ISOFocus, 139. https://www.iso.org/files/live/sites/isoorg/files/news/magazine/ISOfocus%20(2013-NOW)/sp/ISOfocus_139_sp.pdf
Jafar, E., y Taneja, U. (2017). Determinants of business continuity management in hospitals. International Journal of Critical Infrastructures, 13(1), 57-69. https://www.inderscienceonline.com/doi/pdf/10.1504/IJCIS.2017.083640
Järveläinen, J. (2020). Understanding the Stakeholder Roles in Business Continuity Management Practices – A Study in Public Sector. Proceedings of the 53rd Hawaii International Conference on System Sciences. https://scholarspace.manoa.hawaii.edu/bitstream/10125/63980/0195.pdf.
Jedynak, P. (2013). Business continuity management-the perspective of management science. International Journal of Contemporary Management, 12(4), 85-96. https://www.ejournals.eu/pliki/art/5344/pl
Jingye, L., y Takehiro, T. (2016). Practical Process for Introducing Smart Business Continuity Management of Smart City in Japan. Procedia Engineering, 146, 288-295. https://doi.org/10.1016/j.proeng.2016.06.390
Kato, M., y Charoenrat, T. (2018). Business continuity management of small and medium sized enterprises: Evidence from Thailand. International Journal of Disaster Risk Reduction, 27, 577-587. https://doi.org/10.1016/j.ijdrr.2017.10.002
Miniati, R., Dori, F., Cecconi, G., Gusinu, R., Niccolini, F., y Gentili, G. B. (2013). HTA decision support system for sustainable business continuity management in hospitals. The case of surgical activity at the University Hospital in Florence. Technology and Health Care, 21(1), 49-61. https://doi.org/10.3233/THC-120709
Morales, Y. L. (2010). Propuesta de una metodología para elaborar un programa de continuidad del negocio en México [tesis de maestría]. Instituto Politécnico Nacional. https://tesis.ipn.mx/bitstream/handle/123456789/10868/59.pdf?sequence=1&isAllowed=y
Motevali Haghighi, S., y Torabi, S. A. (2019). Business continuity-inspired fuzzy risk assessment framework for hospital information systems. Enterprise Information Systems, 14(7), 1027-1060. https://doi.org/10.1080/17517575.2019.1686657
Nieto, W. M. (2012). Sistema de gestión de la continuidad del negocio. http://polux.unipiloto.edu.co:8080/00001889.pdf
Păunescu, C., y Argatu, R. (2020). Critical functions in ensuring effective business continuity management-Evidence from romanian companies. Journal of Business Economics and Management, 21(2), 497-520. https://doi.org/10.3846/jbem.2020.12205
Păunescu, C., Popescu, M. C., y Blid, L. (2018). Business impact analysis for business continuity: Evidence from Romanian enterprises on critical functions. Management & Marketing, 13(3), 1035-1050. https://doi.org/10.2478/mmcks-2018-0021
Quevedo, J. (2012). Revisión de modelos de gestión de continuidad del negocio. Revista de investigación de Sistemas e Informática, 9(1), 91-110. https://revistasinvestigacion.unmsm.edu.pe/index.php/sistem/article/view/5620
Rabbani, M., Soufi, H. R., y Torabi, S. A. (2016). Developing a two-step fuzzy cost–benefit analysis for strategies to continuity management and disaster recovery. Safety Science, 85, 9-22. https://doi.org/10.1016/j.ssci.2015.12.025
Rezaei Soufi, H., Torabi, S. A., & Sahebjamnia, N. (2019). Developing a novel quantitative framework for business continuity planning. International Journal of Production Research, 57(3), 779-800. https://doi.org/10.1080/00207543.2018.1483586
Rodríguez, L. A. M. (2019). La gestión de continuidad del negocio como herramienta para la toma de decisiones estratégicas en la gestión gerencial [tesis de especialización]. Universidad Militar Nueva Granada. https://repository.unimilitar.edu.co/handle/10654/21412
Sasaki, H., Maruya, H., Abe, Y., Fujita, M., Furukawa, H., Fuda, M., Kamei, T., Yaegashi, N., Tominaga, T., y Egawa, S. (2020). Scoping Review of Hospital Business Continuity Plans to Validate the Improvement after the 2011 Great East Japan Earthquake and Tsunami. The Tohoku Journal of Experimental Medicine, 251(3), 147-159. https://doi.org/10.1620/tjem.251.147
Schätter, F., Hansen, O., Herrmannsdörfer, M., Wiens, M., y Schultmann, F. (2015). Conception of a Simulation Model for Business Continuity Management Against Food Supply Chain Disruptions. Procedia Engineering, 107, 146-153. https://doi.org/10.1016/j.proeng.2015.06.068
Schätter, F., Hansen, O., Wiens, M., y Schultmann, F. (2019). A decision support methodology for a disaster-caused business continuity management. Decision Support Systems, 118, 10-20. https://doi.org/10.1016/j.dss.2018.12.006
Speight, P. (2011). Business Continuity. Journal of Applied Security Research, 6(4), 529-554. https://doi.org/10.1080/19361610.2011.604021
Strelicz, A., & Bognár, F. (2020). Integrated Risk and Business Impact Analysis: A Kind of Support for ISO 22301. European Scientific Journal ESJ, 16(4). https://doi.org/10.19044/esj.2020.v16n4p1
Suresh, N., Sanders, G. L., y Braunscheidel, M. J. (2020). Business Continuity Management for Supply Chains Facing Catastrophic Events. IEEE Engineering Management Review, 48(3), 129-138. https://doi.org/10.1109/EMR.2020.3005506
Tammineedi, R. L. (2010). Business Continuity Management: A Standards-Based Approach. Information Security Journal: A Global Perspective, 19(1), 36-50. https://doi.org/10.1080/19393550903551843
Torabi, S. A., Giahi, R., y Sahebjamnia, N. (2016). An enhanced risk assessment framework for business continuity management systems. Safety Science, 89, 201-218. https://doi.org/10.1016/j.ssci.2016.06.015
Tracey, S., O’Sullivan, T. L., Lane, D. E., Guy, E., y Courtemanche, J. (2017). Promoting Resilience Using an Asset-Based Approach to Business Continuity Planning. SAGE Open, 7(2). https://doi.org/10.1177/2158244017706712
Tzenev, I., Popov, G., y Shirkova, M. (2015). Risk Assessment model based on ISO 22301:2012 “societal security. Business continuity management systems. Requirements”.
Materials, Methods & Technologies, 9, 531-540. https://www.scientific-publications.net/get/1000015/1433083886255659.pdf.
Wong, W. N. Z. (2019). Transforming corporate performance: A business continuity management approach. Organizational Dynamics, 48(2), 29-36. https://doi.org/10.1016/j.orgdyn.2018.08.00
Cómo citar
Licencia
Los autores mantienen los derechos sobre los artículos y por tanto son libres de compartir, copiar, distribuir, ejecutar y comunicar públicamente la obra bajo las condiciones siguientes:
Reconocer los créditos de la obra de la manera especificada por el autor o el licenciante (pero no de una manera que sugiera que tiene su apoyo o que apoyan el uso que hace de su obra).
SIGNOS está bajo una licencia Creative Commons Atribución-NoComercial-CompartirIgual 4.0 Internacional (CC BY-NC-SA 4.0)
La Universidad Santo Tomás conserva los derechos patrimoniales (copyright) de las obras publicadas, y favorece y permite la reutilización de las mismas bajo la licencia anteriormente mencionada.
