Brahim Herbane

Business Continuity Management: time for a strategic role?

Abstract Against a background of increasing threats, business continuity management (BCM) has emerged in many industries as a systematic process to counter the effects of crises and interruptions, although its potential to play a more strategic role is still largely under-explored. This article examines the organisational antecedents of BCM and develops a conceptual approach to posit that BCM, in actively ensuring operational continuity, has a role in preserving competitive advantage. Such value preservation is central to the business continuity/business strategy relationship, and gives rise to the central purpose of the paper; to discuss whether firms’ BCM can be seen as strategic rather than purely functional. If so, what form does such provision take in terms of planning, organisation and culture? Evidence from six UK-based financial services firms illustrates differing approaches to business continuity, with two firms showing BCM provision more clearly aligned towards a mission-critical strategic role. Practical precepts for implementation are presented, together with a diagnostic drawing attention to the key determinants of enhanced value preservation.

The evolution of business continuity management: A historical review of practices and drivers

As a form of crisis management, business continuity management (BCM) has evolved since the 1970s in response to the technical and operational risks that threaten an organisations recovery from hazards and interruptions. This paper examines the development of business practices related to crisis management alongside the emergence of legislation, regulations and standards (drivers) requiring organisations to implement specific business continuity activities. From the resulting historical review, three distinct phases of management practice and four phases in the development of drivers are identified, revealing the influence of events over governance, the internationalisation of influence, and organisational resilience as a meta-institution.

Small business research: Time for a crisis-based view

Small business and crisis management research are two established but largely uncoupled domains of study. Given the economic importance and vulnerability of a small businesses, closer attention is needed to understand how their owners think and act in relation to crisis management efforts in the event of business interruptions.This study highlights the relative absence of crisis management research in the small business literature and the absence of a small business focus in the crisis management literature, despite a rising tide of regulation and legislation that requires companies to have crisis/business continuity management arrangements in place. The study examines the understanding of, and resourcing and support for, crisis management using case studies from four UK small businesses. The resulting analysis illuminates four themes; understanding risks, three-dimensional crisis, learning from crisis, and stifled support systems. Furthermore, data suggest that owner-managers may frame risks in two ways — a ‘growth vulnerability paradox’ and the ‘risk elastic’ — while their understanding of crisis is conceptualized using a chronological approach to identify three key areas: crisis threat, crisis response, and crisis impact. The study concludes by asserting the need for a crisis-based view of small business research and proposes an agenda for future study.

Out of sight, out of mind: the limitations of traditional information systems planning

Offers a crisis management critique of the information systems and contingency planning literature and puts forward recommendations for disaster recovery. The internal and hardware focus of disaster recovery permits only partial examination of the causes of disasters and seeks to treat their effects or symptoms rather than to prevent them. Concludes with a series of recommendations for information systems planners. Information systems crises should be perceived as the result of an interaction between a number of internal and external factors. Preventing information systems crises, therefore, requires attention to complex system issues.

Threat orientation in small and medium-sized enterprises: Understanding differences toward acute interruptions

Purpose – The purpose of this paper is to examine whether the experience, impact and likelihood of an acute business interruption, along with the perceived ability to intervene, influences the “threat orientation” of owner-managers in small- and medium-sized enterprises (SMEs) in the UK. The concept of “threat orientation” is introduced in this study as a way to eschew the binary view of whether an organisation does or does not have processes and capabilities to respond to acute interruptions. Design/methodology/approach – “Threat orientation” is operationalised and survey data are collected from 215 SMEs in the UK. Data from owner-managers are analysed using multiple regression techniques. Findings – The results of this study provide empirical evidence to highlight the importance of firm age rather than size as a determinant of the propensity to formalise activities to deal with acute interruptions. Recent experience and the ability to intervene were statistically significant predictors of threat orienta...

Information Value Distance and Crisis Management Planning

Organizational learning during and post-crisis is well established in the management literature but consideration of learning for crisis and the sources of information perceived to be useful for crisis management planning have not previously been examined. This study evaluates data from 215 U.K.-based small- and medium-sized enterprises (SMEs) about the perceived value of 11 sources of information between planning (i.e., firms with a crisis management plan) and non-planning respondents. For planning firms, the information sources considered to be useful are exclusively experience-based, and when information sources become less idiosyncratic and episodic, planning firms’ evaluations of their value begin to approximate the ratings given by non-planning firms. Furthermore, the concepts of relative value distance and value distance from threshold are original features of this study and offer new ways to evaluate the value of information sources for organizations wishing to provide information and support to improve business resilience and business continuity.