Information Management Procedures for Business Continuity Plan Maintenance

Constant changes in the implementation of information technology (IT) creates external and internal risks to the organization. Managing the risks is crucial as it significantly impacts the business operations. Implementing Business Continuity Management (BCM) is one of the initiatives in managing those risks. The implementation must be maintained periodically and managed properly. Business Continuity Plan (BCP) is part of BCM implementation and is a set of procedures to address disruptions to the business processes. However, existing BCP that are not completely and properly updated will result in failure for the business to continue its operation when disruption happens. Therefore, this study develops a set of procedures for the BCP Maintenance phase which documents the information to avoid missing and incompleteness that will affect the BCP during the updating process. Qualitative approach is applied for this study. Expert Review is carried out for the verification of the procedures and Case Study is conducted for its validation. The outcome of this study can potentially simplify the process of maintaining existing BCP through a guide to record the information from each process in the BCP Maintenance phase.