ISWORLD list responses on BCP

    Dear IS Professionals:  Sometime back I posted a query for information on Business Continuity Planning.  Here I am posting the responses along with the original query. Thanks to the whole community for cooperation.

    Original Query

From: Anurag Jain
Sent: Friday, October 12, 2001 6:28 PM
To: 'ISWorld@listserv.heanet.ie'
Subject: Business Continuity Planning (IS specific)

Dear IS Professionals:
 
In the light of recent events, it has only become only more important that the organizations be ready with a business continuity plan in case of a disaster.
 
I am specifically looking at the topic of Information Systems Contingency Planning.  Even as volumes abound on the topic of emergency planning for businesses as a whole, it seems that not much work has been done in the area of Disaster/Contingency Planning for Information Systems of an organization.  In this regard, I would like to have the references to the seminal works in this field.  Any information related to this topic would be most welcome.
 
As per the tradition, I'll post the summary of responses after sometime.  Thank you very much.
 

Anurag Jain

Responses

1 

-----Original Message-----

From: Leon A. Kappelman [mailto:Kapp@unt.edu]

Sent: Saturday, October 13, 2001 10:29 AM

To: Anurag Jain

Subject: Re: Business Continuity Planning (IS specific)

 

An enormous amount of work in this area was done in the context of

Y2K and scores of reports, guides, books, articles, and white

papers published by industry and government. The US Government's

General Accounting Office guide (I think by Joel Willemssen who

now heads their IT audit group) provides a good overview.

Kappelman, L., and Gregory, C. (Editors) (1999). "Y2K Endgame

Strategies: Risk Management, Testing, and Contingency Planning."

Society for Information Management (SIM) International, Chicago,

might help too.

Best wishes,

Leon A. Kappelman, Ph.D.

Director, Information Systems Research Center

Professor, Business Computer Information Systems

College of Business, University of North Texas

Voice: 940-565-4698 Fax: 940-565-4317 Email: kapp@unt.edu

Website: http://www.unt.edu/bcis/faculty/kappelma/

Join my elist http://courses.unt.edu/kappelman/kapp-inv.htm

 

============================================================

2 

-----Original Message-----
From: Nicholas Romano, Jr. [mailto:Nicholas-Romano@dev21.tcom.OKState.EDU]
Sent: Saturday, October 13, 2001 8:16 PM
To: Anurag Jain
Subject: RE: Business Continuity Planning (IS specific)

Hi Anurag,

 

Here are some references that might be good starting places.

Hope they are useful.

  • J. F. Nunamaker, Jr., Weber, S., and Chen, H., "Organizational crisis management systems: planning for intelligent action," Journal of Management Information Systems, vol. 5, no. 4, pp. 7-32, 1989.

  •  A. L. Lederer, and Sethi, V., "Root Causes of Strategic Information Systems Planning Implementation Problems," Journal of Management Information Systems, vol. 9, no. 1, pp. 25-45, 1992.

  • A. L. Lederer, and Sethi, V., "Meeting the Challenges of Information Systems Planning," Long Range Planning, vol. 25, no. 2, pp. 69-80, 1992.

  • R. D. Galliers, "Strategic information systems planning: myths, reality and guidelines for successful implementation," in Strategic Information Management, R. D. Galliers, and Baker, B. S. H., Ed. Oxford UK: Butterworth-Heinemann, 1994, pp. 129-147.

  •  A. L. Lederer, and Sethi, V., "Key Prescriptions for Strategic Information Systems Planning," Journal of MIS, vol. 13, no. 1 (Summer), pp. 35-62, 1996.

  • A. L. Lederer, and Sethi, V., "Key Prescriptions for Strategic Information Systems Planning," Journal of MIS, vol. 13, no. 1 (Summer), pp. 35-62, 1996.

  •  FFIEC Information Systems Examination Handbook http//www.fdic.gov/regulations/information/information/

  • GUIDELINES FOR CONTINGENCY PLANNING FOR INFORMATION RESOURCES SERVICES RESUMPTION DEPARTMENT OF INFORMATION RESOURCES AUSTIN, TEXAS APRIL 1994 http://www.dir.state.tx.us/oops/ctgyplan/

  • IST Emergency Management Contingency and Recovery Planning : Checklist for Information Systems http://ist-socrates.berkeley.edu:2001/em/checklist.html

  •  GAO, Accounting and Information Management Division, 000 Computing Crisis: Business Continuity and Contingency Planning, August 1998  http://www.doncio.navy.mil/y2k/GAOY2KComputingCrisis.pdf

  •  Contingency Planning Expo 2002
    http://www.contingencyplanexpo.com/exhib_previousexhibitors.cfm

 See these below at: http://www.masp.com/publications/

 

sample contingency plan in Word format http://www.davislogic.com/Contingency_Plan_Outline.doc

 

CODE OF PRACTICE 2. CONTINGENCY PLANNING http://www.cc.ic.ac.uk/register/regulations/sec_policy/CODE_PRACTICE2.htm

 What if the Virtual Walls Fall? By Dan Klein, Beverly Canfield-Woods, and Peter Piazza For an e-commerce company, the risk of disaster is high. Adequate planning can mitigate that risk. http://www.securitymanagement.com/library/001081.html

DISASTER RECOVERY AND CONTINGENCY PLANNING cHECKLIST FOR ICT SYSTEMS 
 http://www.mampu.gov.my/ICT/MyMIS/AppendixJ.PDF. 




G.W.JOSEPH AND G.W.COUTURIER Essential Management Activities to Support Effective Disaster Planning
International Journal of Information Management Volume 13  Number 5  October 1993 315-325
 

The Information Systems Audit and Control Association & Foundation http://www.isaca.org/

 Information Systems Control Journal The Journal of The Information Systems Audit and Control Association
Disaster recovery article index http://www.isaca.org/indx_dis.htm

Hope these help

Best Regards,

Nicholas C. Romano, Jr.
Department of Management Science and Information Systems
Oklahoma State University
700 North Greenwood Avenue
Tulsa, OK 74112
USA
PHONE: (918) 594-8506 FAX: (918) 594-8281
EMAIL: Nicholas-Romano@MSTM.OKState.EDU

 

============================================================

3 

-----Original Message-----

From: Ranganathan Chandrasekaran [mailto:cranganathan@hotmail.com]

Sent: Saturday, October 13, 2001 8:46 PM

To: ajain AT iimb.ernet.in

Subject: Re: Business Continuity Planning (IS specific)

 

Anurag :

Theres a journal/magazine thats devoted to disaster recovery planning. They

contain several IT-related articles. We are hosting a CIO breakfast

roundtable on this topic on tuesday and if I get hold of any presentations,

I shall send you same.

You may want to write to my colleague Dr. Ramaprasad (prasad@uic.edu) who

has been working on this topic for a while and who has a few publications on

this.

Ranganathan

Asst Professor

University of Illinois at Chicago

 

============================================================

4 

-----Original Message-----
From: Vikram Sethi [mailto:sethi@uta.edu]
Sent: Saturday, October 13, 2001 9:34 PM
To: Anurag Jain
Subject: Re: Business Continuity Planning (IS specific)

You could begin by contacting Dr. Sumit Sircar who heads the DRI Center at the University of Texas, Arlington.  There is another Business Continuity Center which used to be housed at University of Illinois, Carbondale.  Their web site should help.

 

Vikram Sethi

Associate Professor

 

===========================================================

 

5

-----Original Message-----
From: MurphJen@aol.com [mailto:MurphJen@aol.com]
Sent: Sunday, October 14, 2001 12:13 AM
To: ajain AT iimb.ernet.in
Subject: Re: Business Continuity Planning (IS specific)

I'm not sure the seminal works in the field are what you need.  Y2K provided a lot of experience with respect to contingency planning and business recovery.  I was the contingency planning manager for Edison International for Y2K and I know we went through extensive contingency planning.  I also led a team that assessed risk in the former Soviet countries of Ukraine, Armenia, and Georgia while another team used our process to look at Russia.  Finally, as an industry, the nuclear and energy sectors created several contingency planning guideline documents.  Most of these are still available and relevant.  You may also want to look at the NIPC site (National Infrastructure Protection Center - US Government).  I have many of these documents in soft form if interested.  Thanks...Murray E. Jennex, San Diego State University

=========================================================

6 

-----Original Message-----

From: Mordechai [mailto:quality@acm.org]

Sent: Sunday, October 14, 2001 12:31 PM

To: Anurag Jain

Subject: Re: Business Continuity Planning (IS specific)

 

With all due respect, I beg to differ with you. I think a great deal of work has

been done in this area. Most particularly, there was a great deal of work

done before Y2K. Look at the GAO site for some examples.

best regards,

Mordechai Ben-Menachem

Adjunct Software Engineering Lecturer

Ben-Gurion University

P.O.Box 5613; Beer-Sheva; 84156; Israel

tel +972-8-6433231

quality@acm.org

 

===========================================================

7 

-----Original Message-----

From: Dr. Steve Lunce [mailto:slunce@tamiu.edu]

Sent: Sunday, October 14, 2001 9:39 PM

To: Anurag Jain

Subject: Re: Business Continuity Planning (IS specific)

 

Mr. Jain,

My doctoral dissertation was entitled "An Investigation of Managerial

Issues Involved in Contingency Planning for Information Systems" -

University of Texas at Arlington. It contains extensive literature review

through 1990, and I have done a couple of follow-up studies since

validating the model of the "Contingency Planning Decision" which was

proposed in that dissertation. My dissertation was the third in a series of

four (Christensen, Subhani, myself, and Kakoli) all done under the

supervision of Dr. Lawrence L. Schkade, CSP, CCP, FAAAS, FDI, Garrett Smith

Professor of I.S. at UTA.

 

=========================================================

8 

-----Original Message-----

From: Rajeev Sharma

Sent: Monday, October 15, 2001 11:24 AM

To: Anurag Jain

Subject: RE: Business Continuity Planning (IS specific)

Hi Anurag,

I am attaching an article presented in Americas Conference on Information Systems 2000 -- A Contingency Model of IT Disaster Recovery Planning -- written by Klara Nelson of Wayne State University. It has some good references which you can use as a start point for doing research in this area.

All the best for your research.

Rajeev Sharma

FPM Student

IIMB

India

 

==========================================================

9 

--- Kate Kaiser <kaiserk@marquette.edu> wrote:

Much of the work for this topic occurred with Y2K projects. I worked for

Giga Information Group from 1997-1999 researching this and related topics for our clients. The extensive work put in place for Y2K was partly due to terrorist threats. I am not aware of academic research but many practitioners have thoroughly planned for IT continuity for many situations.

You can reach me at 414-352-5025.

This might be a good topic for conference panel.

Thanks

 

kate

=========================================

10 

--- Ernest Jordan <ernie.jordan@gsm.mq.edu.au> wrote:

hi

there is quite a literature, much of it developed by professionals in the area. It doesn't get into the top journals, of course. If you can get any of my work you will find quite a selection of reference material.

Ernie

 

  • Musson, D. and Jordan, E. (2000) Managing for  Failure: The Macquarie University Survey of Business and IT Contingency Planning, Macquarie Research Limited, Sydney.

  • Jordan, E., and Musson, D. (1998) "Strategic Systems? Only when they work!" Australian Journal of Information Systems, Vol. 6, No. 1, September, 27-38.

  • Jordan, E. (1998) "Forecasting the unpredictable! Planning for contingencies," International Symposium on Forecasting, Edinburgh, June

  • Jordan, E. (1999) "Information technology contingency planning: management roles", Information Management & Computer Security, Vol. 7, No. 5, 232-238 

  • Jordan, E., and Musson, D. (1998) "Strategic Systems? Only when they work!" Australian Conference on Information Systems, Proceedings, 289-300; reprinted in Australian Journal of Information Systems.

  • Jordan, E. (1999) "Project prioritisation and selection: the disaster scenario", Hawaii International Conference on Systems Sciences, January 1999.

  • Musson, D. and Jordan, E. (2000) "Motivating management: the need for commitment to business continuity management", Survive! Conference, Sydney, May 2000 

  • Jordan, E. and Musson, D. (2001) "Public and private sectors: contrasts in IT risk governance," in Fischer-Hübner, S. Olejar, D. and Rannenberg, K. Security & Control of IT in Society, SCITS II, Proceedings of the IFIP WG 9.6/11/7 Working Conference, Bratislava, June 15 -16.

  • Jordan, E. (2001) "Electronic commerce risk: perception of corporate board members", accepted for DSI Conference, San Francisco, November.

 

> ----------------------------------------

> Dr Ernest Jordan

> Professor of Management

> Macquarie Graduate School of Management

> Macquarie University, Australia

> Ernest.Jordan@gsm.mq.edu.au

>

http://www.gsm.mq.edu.au/faculty/profiles/ejordan.html

> +612 9850 9041 office

> +61 412 398 676 mobile in Australia

> +852 6143 1992 mobile in Hong Kong

 

================================================================================

 

Back to ISWorld related material

Back to home page

 Last updated: March 6, 2002