Integrated business continuity and disaster recovery planning: Towards organizational resilience

Businesses are increasingly subject to disruptions. It is almost impossible to predict their nature, time and extent. Therefore, organizations need a proactive approach equipped with a decision support framework to protect themselves against the outcomes of disruptive events. In this paper, a novel framework is proposed for integrated business continuity and disaster recovery planning for efficient and effective resuming and recovering of critical operations after being disrupted. The proposed model addresses decision problems at all strategic, tactical and operational levels. At the strategic level, the context of the organization is first explored and the main features of the organizational resilience are recognized. Then, a new multi-objective mixed integer linear programming model is formulated to allocate internal and external resources to both resuming and recovery plans simultaneously. The model aims to control the loss of resilience by maximizing recovery point and minimizing recovery time objectives. Finally, at the operational level, hypothetical disruptive events are examined to evaluate the applicability of the plans. We also develop a novel interactive augmented e-constraint method to find the final preferred compromise solution. The proposed model and solution method are finally validated through a real case study.

[1]  Shalini Wunnava,et al.  Application of protection motivation theory to study the factors that influence disaster recovery planning: An empirical investigation , 2011 .

[2]  Weihua Zhang,et al.  A simple augmented ∊-constraint method for multi-objective mathematical integer programming problems , 2014, Eur. J. Oper. Res..

[3]  Vladimir Marianov,et al.  Mobile phone tower location for survival after natural disasters , 2012, Eur. J. Oper. Res..

[4]  Anne Marsden,et al.  International Organization for Standardization , 2014 .

[5]  Priti Sikdar,et al.  Alternate Approaches to Business Impact Analysis , 2011, Inf. Secur. J. A Glob. Perspect..

[6]  Devanandham Henry,et al.  Perspectives on measuring enterprise resilience , 2010, 2010 IEEE International Systems Conference.

[7]  Victor Savicki,et al.  Information system organizational resilience , 2003 .

[8]  George Mavrotas,et al.  Effective implementation of the epsilon-constraint method in Multi-Objective Mathematical Programming problems , 2009, Appl. Math. Comput..

[9]  S. Tufekci,et al.  The Emerging Area Of Emergency Management And Engineering , 1998 .

[10]  Navid Sahebjamnia,et al.  A new framework for business impact analysis in business continuity management (with a case study) , 2014 .

[11]  Michel Bruneau,et al.  A Framework to Quantitatively Assess and Enhance the Seismic Resilience of Communities , 2003 .

[12]  Jesse R. O'Hanley,et al.  Optimizing system resilience: A facility protection model with recovery time , 2012, Eur. J. Oper. Res..

[13]  Andrew Hiles,et al.  The Definitive Handbook of Business Continuity Management , 2010 .

[14]  Constantin Zopounidis,et al.  IPSSIS: An integrated multicriteria decision support system for equity portfolio construction and selection , 2011, Eur. J. Oper. Res..

[15]  Shinya Hanaoka,et al.  Production , Manufacturing and Logistics Relief inventory modelling with stochastic lead-time and demand , 2014 .

[16]  Stefan Feuerriegel,et al.  Emergency response in natural disaster management: Allocation and scheduling of rescue units , 2014, Eur. J. Oper. Res..

[17]  Brahim Herbane,et al.  Business Continuity Management: Time for a strategic role? , 2004 .

[18]  Kweku-Muata Bryson,et al.  Using formal MS/OR modeling to support disaster recovery planning , 2002, Eur. J. Oper. Res..

[19]  Rajan Batta,et al.  Review of recent developments in OR/MS research in disaster operations management , 2013, Eur. J. Oper. Res..

[20]  Sheue-Ling Hwang,et al.  Economic assessment of human errors in manufacturing environment , 2009 .

[21]  Brahim Herbane The evolution of business continuity management: A historical review of practices and drivers , 2010 .

[22]  Minghe Sun,et al.  Some issues in measuring and reporting solution quality of interactive multiple objective programming procedures , 2005, Eur. J. Oper. Res..

[23]  John R. Labadie,et al.  Auditing of post‐disaster recovery and reconstruction activities , 2008 .

[24]  Pavel Albores,et al.  Government preparedness: Using simulation to prepare for a terrorist attack , 2008, Comput. Oper. Res..

[25]  Michael J. Cerullo,et al.  Business Continuity Planning: A Comprehensive Approach , 2004, Inf. Syst. Manag..

[26]  MavrotasGeorge Effective implementation of the ε-constraint method in Multi-Objective Mathematical Programming problems , 2009 .

[27]  Alan T. Murray,et al.  Decision support for network disruption mitigation , 2008, Decis. Support Syst..

[28]  Nezih Altay,et al.  OR/MS research in disaster operations management , 2006, Eur. J. Oper. Res..

[29]  Haruo Hayashi,et al.  Using the Viable System Model (VSM) to structure information processing complexity in disaster response , 2013, Eur. J. Oper. Res..

[30]  Lara Khansa,et al.  Characterizing multi-event disaster resilience , 2014, Computers & Operations Research.

[31]  Hossain Poorzahedy,et al.  A multi-agent optimization formulation of earthquake disaster prevention and management , 2013, Eur. J. Oper. Res..

[32]  Esmaile Khorram,et al.  A combined scalarizing method for multiobjective programming problems , 2014, Eur. J. Oper. Res..

[33]  Margaret M. Wiecek,et al.  Generating epsilon-efficient solutions in multiobjective programming , 2007, Eur. J. Oper. Res..

[34]  Matthias Ehrgott,et al.  Multicriteria Optimization , 2005 .

[35]  David F. Lynch,et al.  Optimizing Restoration Capacity in the AT&T Network , 2000, Interfaces.