Integrated Business Continuity Management Organizational Culture Value (BCMOCV) Framework For Organization
This study explored the organizational culture context in contributing to the successful implementation of Business Continuity Management (BCM) in relation with information security area for Malaysian IT security organizations. The motivation to conduct this research stemmed from the concern of inef...
Saved in:
Main Author: | |
---|---|
Format: | Thesis |
Language: | en_US |
Subjects: | |
Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
Summary: | This study explored the organizational culture context in contributing to the successful implementation of Business Continuity Management (BCM) in relation with information security area for Malaysian IT security organizations. The motivation to conduct this research stemmed from the concern of ineffective implementation of BCM due to people's behavior. Surveys and literatures have pointed out that in the context of information security, it is crucial to address non-technical aspects such as organizational culture, dealing with the complexity of people's behavior during management and implementation of BCM. In this study, the organizational culture has been categorized into four values: management commitment, awareness, skills and training, as well as information and knowledge sharing. A BCM Organizational Culture Value (BCMOCV) framework has been developed by considering the organizational culture aspects as the research output of the study. This study employed a mixed-method research using a concurrent triangulation strategy, which includes the quantitative and qualitative methods and literature review as the secondary data source. The quantitative method adopted online and offline surveys as well as semi-structured interviews with the selected Malaysian IT security organization involved directly in IT security management and BCM. The questionnaires were distributed to 1000 participants from different role levels; senior management, IT personnel, executive and non-executive level within the organization. A total of 452 responses were collected, presenting an overall response rate of 45.2%. Data inputs were collected from January to July 2014. The results indicated that cultural factors had a great impact to the management and implementation of BCM to the organization. The BCMOCV framework was reviewed and validated using Goal- Question-Metric (GQM) approach by the subject matter experts. An application had been developed to strongly support the validation works on the existence and the practicality of the BCMOCV framework in this research. The purpose of the validation was to evaluate the practicality of the framework that was used to address the people's view and behaviors in implementing BCM in an organization. This research had contributed to the understanding on influences of organizational culture values in people complexity for BCM implementation for the organization. The research strongly stated that in the Malaysian IT security organization, organizational culture values are crucial in preparing the organization towards a successful BCM implementation. The BCMOCV framework give some guidelines to the Malaysian government towards good governance and may boost the innovative and efficiency of Malaysia's transformation in preparing BCM for Malaysia as a whole. The BCMOCV framework can guide the Malaysian IT security organization on what actions need to be taken to improve the people's engagement and responsibilities for a successful BCM implementation. |
---|