Business Continuity Management of Critical Infrastructures from the Cybersecurity Perspective

In today's society, nearly all processes are connected to IT systems, which means that there is a universal need to investigate how critical infrastructures' resilience can be improved from a cybersecurity perspective. The purpose of this non-systematic literature overview is to explore how business continuity management (BCM) can be improved from a cybersecurity perspective. It investigates different approaches to business continuity management (BCM), and addresses challenges to the resilience of critical infrastructures by looking at business continuity management, concentrating on cybersecurity and artificial intelligence (AI) from a human factor perspective. BCM systems can be very complex and time-consuming and approaches to BCM differ. However, they all have in common the objective of identifying threats and, based on these, offer solutions that ensure the continued operation of critical processes of the organization in terms of maintaining business continuity and resilience. While artificial intelligence (AI) can be used to make the process more efficient, the importance of addressing human factors is critical to BCM. This paper proposes a new practical BCM resilience framework that adds in a core phase of ‘learn and adapt’, currently lacking from existing models, thus recognizing the importance of training and education in human factors.