Search

Information security management plays an essential role for drawing the roadmap of information security; thus, many theoretical methodologies and practical standards are brought into this domain. However, many standards and methodologies are too cumbersome to be adopted by an organization. Additionally, there is no unified framework to systematically handle the tedious tasks of information security management. This study’s primary goal is to design an integrated system for information security management (ISISM) that aims to use current methodologies and standards to solve the above-mentioned issues. Because business impact analysis and risk analysis are the most important areas within this domain, we carefully select the related methods and then integrate them into a unified framework, upon which the proposed ISISM depends. To achieve this outcome for this study, security requirement engineering is adopted, which enables the designed system to support system users in generating risk assessment reports with related information security policies. [ABSTRACT FROM AUTHOR]

As an engineering discipline within the United Kingdom, fire engineering is relatively young. It has been accepted as an alternative to traditional prescriptive means of meeting the functional requirements of the building regulations since the publication of the 1985 edition of Approved Document B. Performance-based fire engineering design methods have facilitated architectural design freedoms and supported creative construction. However, it has become evident that since fire engineering has become more established, significant concerns have been raised regarding various elements of the design process including the ability to consider aspects other than life safety. In response to these concerns, this article introduces novel application of concepts to assist the building design team to consider their client's resilience requirements. This is by utilising business continuity planning methods, specifically business impact analyses within the fire engineering qualitative design review. By using these concepts in this new way, the architectural design team will be able to identify those processes which are of greatest importance to their client's organisation, allowing the most appropriate fire engineering strategy to be established. [ABSTRACT FROM AUTHOR]

Business impact analysis (BIA) is an important process that probes into business processes to determine and list critical processes that are vital to keep the business going. It is necessary to understand business environments, gather data and information, identify critical processes needed to carry out vital business operations and finally prepare a BIA report enlisting your findings to be submitted to the top management. Efforts toward consideration of internal and external environments and risks that impact financial position as well as the goodwill of the organization must be considered. Effectiveness of the business impact analysis is reflected by the management's commitment of people and technological resources to mitigate risks of business continuity projected by your findings. Buy-in is important to make the Business Continuity Management System efficient and sustainable by providing funding and setting a system for management oversight on a continuous basis. [ABSTRACT FROM AUTHOR]

Business enterprises are increasingly realizing the importance of business continuity management (BCM). Availability BS 25999 Standard has facilitated a consistent methodology that organizations can follow in designing their BCM System. This paper intends to provide a conceptual understanding of BCM right from BCM Policy to BCM maturity by describing the steps involved in the implementation of BCM Standard - BS 25999 - to ensure business continuity in the event of an outage. The key BCM tasks have been categorized into three phases of business continuity - Pre-event Preparation, Event Management, and Post-event Continuity. This paper also highlights some of the challenges experienced by the author in carrying out Risk Assessment and Business Impact Analysis. The Business Continuity Maturity Model® of Virtual Corporation is provided (with their permission) as a tool to strengthen business continuity maturity or organizations. [ABSTRACT FROM AUTHOR]