IT incidents and business impacts: Validating a framework for continuity management in information systems

详细信息    查看全文

• 作者：Jonna Jä ; rvelä ; inen ; ^{jonna.jarvelainen@utu.fi}Author Vitae
• 关键词：Information system continuity management ; Framework validation ; Embeddedness ; Management support
• 刊名：International Journal of Information Management
• 出版年：2013
• 出版时间：June, 2013
• 年：2013
• 卷：33
• 期：3
• 页码：583-590
• 全文大小：413 K

文摘

Information technology (IT) incidents that make data inaccessible may cause businesses to lose customers, reputation and market position. Previous studies on information management have identified data availability as a key priority, and the literature on disaster recovery and business continuity describes ways of preparing for and avoiding IT incidents. However, no frameworks for information system continuity management (ISCM) have yet been validated. This research draws on a framework for business continuity management, and extends it to the context of information systems. The framework is validated in a survey of IT managers and chief information officers in large private and public organisations operating in Finland. The results suggest that the embeddedness of continuity practices in an organisation has perceived business impacts whereas, in contradiction of previous theory, there is no such direct relation in the case of organisational alertness and preparedness. The theoretical contribution is to validate the ISCM framework statistically. On the practical level, social factors such as committed managers and employees are influential in decreasing negative business impacts. Further research on the embeddedness of continuity practices is called for.