The evolution of business continuity management: A historical review of practices and drivers

References

• Alesi , P. 2008 . Building enterprise-wide resilience by integrating business continuity capability into day-to-day business culture and technology . Journal of Business Continuity and Emergency Planning , 2 ( 3 ) : 214 – 220 .
   PubMedGoogle Scholar
• Alfalla-Luque , R. and Medina-López , C. 2009 . Supply chain management: Unheard of in the 1970s, core to today's company . Business History , 51 ( 2 ) : 202 – 221 .
   Web of Science ®Google Scholar
• American Bankers Association . 2005 . Business continuity planning, born in DP, needs human element . ABA Banking Journal , April : 46 – 48 .
   Google Scholar
• American Society for Industrial Security. 2008, 21 August . Open letter: Comments to ASIS ANSI PINS Standards Project – BSR ASIS BCM.01-200X. In Continuity Central, ASIS versus DRII . Continuity Central , Retrieved from http://www.continuitycentral.com/news04105.html
   Google Scholar
• Ash , S. R. and Ross , D. K. 2004 . Crisis management through the lens of epidemiology . Business Horizons , 47 ( 3 ) : 49 – 57 .
   Google Scholar
• Ashmos , D. P. , Duchon , D. and Bodensteiner , W. D. 1997 . Linking issue labels and managerial actions: A study of participation in crisis vs. opportunity issues . Journal of Applied Business Research , 13 ( 4 ) : 31 – 45 .
   Google Scholar
• Australian Prudential Regulation Authority. 2005a . Prudential standard GPS 222 business continuity management , Sydney : Australian Prudential Regulation Authority .
   Google Scholar
• Australian Prudential Regulation Authority. 2005b . Prudential standard APS 222 business continuity management , Sydney : Australian Prudential Regulation Authority .
   Google Scholar
• Bank of Thailand. 2003 . Strategic risk manual: Risk assessment and information and technology system department (financial institutions supervision) , Bangkok : Bank of Thailand .
   Google Scholar
• Billings , R. , Milburn , T. and Schaalman , M. 1980 . A model of crisis perception . Administrative Science Quarterly , 25 : 300 – 316 .
   Web of Science ®Google Scholar
• Birkland , T. A. 2009 . Disasters, catastrophes, and policy failure in the homeland security era . Review of Policy Research , 26 ( 4 ) : 423 – 438 .
   Web of Science ®Google Scholar
• Boin , A. and Smith , D. 2006 . Terrorism and critical infrastructures: Implications for public–private crisis management . Public Money and Management , 26 ( 5 ) : 295 – 304 .
   Web of Science ®Google Scholar
• Bowman , R. H., Jr . 2008 . Business continuity planning for data centers and systems – a strategic implementation guide , Hoboken, NJ : John Wiley & Sons .
   Google Scholar
• Bradford , M. 1992 . Banks told to be ready to handle a power loss . Business Insurance , 26 ( 9 ) : 10 – 11 .
   Google Scholar
• British Standards Institution. 1995 . BS 7799 Information security management , London : British Standards Institution .
   Google Scholar
• British Standards Institution. 2000 . BS 15000 IT service management code of practice and specification , London : British Standards Institution .
   Google Scholar
• British Standards Institution. 2003 . Publicly available specification 56: Guide to business continuity management , London : British Standards Institution .
   Google Scholar
• British Standards Institution. 2005 . BS ISO/IEC 20000-1:2005 information technology – service management – specification Retrieved from http://www.bsi-global.com/ICT/Service/bs15000-1.xalter
   Google Scholar
• British Standards Institution. 2006 . BS 25999-1 Code of practice for business continuity management , London : British Standards Institution .
   Google Scholar
• British Standards Institution. 2007 . BS 25999-2 Specification for business continuity management , London : British Standards Institution .
   Google Scholar
• British Standards Institution . 2009a . BS 25777 Code of practice for information and communications technology continuity management , London : British Standards Institution .
   Google Scholar
• British Standards Institution. 2009b . What are standards? British Standards Institution. Retrieved from http://www.bsigroup.com/en/ProductServices/About-Kitemark/Consumer- Information/What-are-standards/PAS/
   Google Scholar
• Broadbent , D. 1979 . Contingency planning , Manchester : National Computing Centre .
   Google Scholar
• Burger , K. 1988 . Beyond DP: Banks expanding scope of disaster recovery . Bank Systems and Equipment , 25 ( 3 ) : 43 – 47 .
   Google Scholar
• Burnett , J. J. 1998 . A strategic approach to managing crises . Public Relations Review , 24 ( 4 ) : 475 – 488 .
   Web of Science ®Google Scholar
• Business Continuity Institute. 2002 . Good practice guidelines , 1st ed. , London : Business Continuity Institute .
   Google Scholar
• Business Continuity Institute. 2003 . The Business Continuity Institute 10 standards of professional competence Retrieved from http://www.thebci.org/certificationstandards.htm
   Google Scholar
• Canadian Standards Association. 2008 . CSA Z1600 standard for emergency management and business continuity programmes , Mississauga, Ontario : Canadian Standards Association .
   Google Scholar
• Castillo , C. 2004 . Disaster preparedness and business continuity planning at Boeing: An integrated model . Journal of Facilities Management , 3 ( 1 ) : 8 – 26 .
   Google Scholar
• Civil Contingencies Act. 2004 . “ c.36 ” . London : The Stationary Office .
   Google Scholar
• Dacin , M. T. , Goodstein , J. and Scott , W. R. 2002 . Institutional theory and institutional change: Introduction to the special research forum . Academy of Management Journal , 45 ( 1 ) : 45 – 57 .
   Web of Science ®Google Scholar
• Dain , S. 2002 . Normal accidents: Human error and medical equipment design . The Heart Surgery Forum , 5 ( 3 ) : 254 – 257 .
   PubMed Web of Science ®Google Scholar
• DiMaggio , P. J. and Powell , W. W. 1983 . The iron cage revisited: Institutional isomorphism and collective rationality in organizational fields . American Sociological Review , 48 ( 2 ) : 147 – 160 .
   Web of Science ®Google Scholar
• Disaster Recovery Institute International. 2008 . Immediate action is required In Continuity Central (2008) ASIS versus DRII, August 21, 2008. Retrieved from http://www.continuitycentral.com/news04105.html
   Google Scholar
• Disaster Recovery Institute International. 2009, 16 October . DHS requesting comments on new proposed standards for business continuity management and preparedness (press release) , New York : Disaster Recovery Institute International .
   Google Scholar
• Donovan , T. , Rosson , T. and Eichstadt , B. 1999 . Preparing carriers for Y2K . Telephony , 236 : 180 – 184 .
   Google Scholar
• Doughty , K. 2001 . Business continuity planning – protecting your organization's life , London : Auerbach .
   Google Scholar
• Drennan , L. T. and McConnell , A. 2007 . Risk and crisis management in the public sector , London : Routledge .
   Google Scholar
• Dugan , E. 1986 . Disaster recovery planning: Crisis doesn't equal catastrophe . Computerworld , 20 ( 4 ) : 67 – 71 .
   Google Scholar
• Elliott , D. 2009 . The failure of organizational learning from crisis – a matter of life and death? . Journal of Contingencies and Crisis Management , 17 ( 3 ) : 157 – 168 .
   Google Scholar
• Elliott , D. , Harris , K. and Baron , S. 2005 . Crisis management and services marketing . Journal of Services Marketing , 19 ( 5 ) : 336 – 345 .
   Google Scholar
• Elliott , D. , Swartz , E. and Herbane , B. 1999a . Just waiting for the next big bang: Business continuity planning in the UK finance sector . Journal of Applied Management Studies , 8 ( 1 ) : 43 – 60 .
   Google Scholar
• Elliott , D. , Swartz , E. and Herbane , B. 1999b . Business continuity management – preparing for the worst , London : Incomes Data Services .
   Google Scholar
• Elliott , D. , Swartz , E. and Herbane , B. 2002 . Business continuity management – a crisis management approach , London : Routledge .
   Google Scholar
• Executive Order 12656. 1998 . Executive Order 12656 of November 18, 1988 Assignment of Emergency Preparedness Responsibilities , Washington, DC : Government Printing Office .
   Google Scholar
• Expedited Funds Availability Act, 12 U.S.C §4001 . 1989 .
   Google Scholar
• Federal Financial Institutions Examination Council. 2003 . Business continuity planning booklet , Arlington, VA : Federal Financial Institutions Examination Council .
   Google Scholar
• Fink , S. 1986 . Crisis management: Planning for the inevitable , New York : Amacom .
   Google Scholar
• Flood Disaster Protection Act, 42 U.S.C. § 4002 et. seq . 1973 .
   Google Scholar
• Fone , F. and Young , P. C. 2000 . Public sector risk management , Oxford : Butterworth-Heinemann .
   Google Scholar
• Forbes , N. 2008, 1 December . Singapore BCM standard SS540: TR19 with a facelift, BCP confidential Retrieved from http://www.zdnetasia.com/blogs/bcp/0,3800011228,63007693,00.htm
   Google Scholar
• Foreign Corrupt Practices Act, 15 U.S.C. §§ 78dd-1 et. seq . 1977 .
   Google Scholar
• Foremski , T. 2001, 5 December . Key lessons learned in attack on New York: Disaster recovery planning . The Financial Times , FT-IT Review, p. 3
   Google Scholar
• Financial Services Authority. 2006, July . Feedback statement on the resilience benchmarking project discussion paper , London : Financial Services Authority .
   Google Scholar
• Gallagher , M. 2003 . Business continuity management – how to protect your company from danger , London : FT Prentice Hall .
   Google Scholar
• Gallup , J. G. 1989 . Fire detection systems – the basics (part 1) . Plant Engineering , 43 ( 10 ) : 62 – 63 .
   Google Scholar
• Ginn , R. D. 1989 . Continuity planning: Preventing, surviving and recovering from disaster , Oxford : Elsevier Advanced Technology .
   Google Scholar
• Gramm–Leach–Bliley Act, 15 U.S.C. §1811 . 1999 .
   Google Scholar
• Gundel , S. 2005 . Towards a new typology of crises . Journal of Contingencies and Crisis Management , 13 ( 3 ) : 106 – 115 .
   Google Scholar
• Harrison , B. 1988 . Planning for disaster . Networking Management , 6 ( 9 ) : 22 – 28 .
   Google Scholar
• Health Insurance Portability and Accountability Act (HIPAA), 42 U.S.C. §1301 et seq . 1996 .
   Google Scholar
• Heng , G. M. 1996 . Developing a suitable business continuity planning methodology . Information Management and Computer Security , 4 ( 2 ) : 11 – 13 .
   Google Scholar
• Henneberry , C. 1988 . Banks broaden contingency plans to avoid disaster . Bank Systems and Equipment , 1 November : 53
   Google Scholar
• Herbane , B. 2010 . Small business research – time for a crisis-based view . International Small Business Journal , 28 ( 1 ) : 43 – 64 .
   Web of Science ®Google Scholar
• Herbane , B. , Elliott , D. and Swartz , E. 1997 . Contingency and continua: Achieving excellence through business continuity planning . Business Horizons, (November– December) , : 19 – 25 .
   Google Scholar
• Herbane , B. , Elliott , D. and Swartz , E. 2004 . Business continuity management – time for a strategic role? . Long Range Planning , 37 : 435 – 457 .
   Web of Science ®Google Scholar
• Herman , C. F. 1963 . Some consequences of crisis which limit the viability of organisations . Administrative Science Quarterly , 12 : 61 – 82 .
   Web of Science ®Google Scholar
• Hiles A. The definitive handbook of business continuity management , 2nd ed. Wiley London 2007
   Google Scholar
• Hiles A. Barnes P. The definitive handbook of business continuity management Wiley London 1999
   Google Scholar
• Homeland Security Act of 2002, Pub. L. No. 107-296, 116 Stat. 2135 . 25 November 2002 .
   Google Scholar
• Hong Kong Monetary Authority. 2002 . Supervisory policy manual TM-G-2: Business continuity planning , Hong Kong : Hong Kong Monetary Authority .
   Google Scholar
• Hopkins , A. 2001 . Was Three Mile Island a ‘normal accident’ . Journal of Contingencies and Crisis Management , 9 ( 2 ) : 65 – 72 .
   Google Scholar
• Information Security Forum. 2005 . The Information Security Forum's standard of good practice – the standard for information security (version 4.1) , London : Information Security Forum .
   Google Scholar
• Information Systems Audit and Control Association. 1992 . Control objectives for information and related technology [COBIT] version 4.0 , Rolling Meadows, IL : Information Systems Audit and Control Association .
   Google Scholar
• Innovest. 2003 . Banking industry and financial institutions disaster recovery planning Retrieved from http://www.theinnovestgroup.com/26.html
   Google Scholar
• Institute of Chartered Accountants in England & Wales. 1999 . Internal control: Guidance for directors on the combined code , London : Institute of Chartered Accountants in England & Wales .
   Google Scholar
• Institute of Directors in Southern Africa . 2002 . King report on the corporate governance for South Africa , Parktown, , South Africa : Institute of Directors in Southern Africa .
   Google Scholar
• International Organization for Standardization. 2005 . ISO/IEC 17799 Information technology – security techniques – code of practice for information security management Retrieved from http://www.iso.org/iso/en/prods-services/popstds/informationsecurity.html
   Google Scholar
• International Organization for Standardization. 2006 . Business plan ISO/TC 223 societal security – executive summary , Geneva : International Organization for Standardization (ISO) .
   Google Scholar
• International Organization for Standardization. 2008a . ISO 24762 Security techniques – guidelines for information and communications technology disaster recovery services , Geneva : International Organization for Standardization (ISO) .
   Google Scholar
• International Organization for Standardization. 2008b . ISO/DIS 22399 Societal security – guidelines for incident preparedness and operational continuity management , Geneva : International Organization for Standardization (ISO) .
   Google Scholar
• International Organization for Standardization. 2009 . ISO 31000 Risk management (principles and guidelines) , Geneva : International Organization for Standardization (ISO) .
   Google Scholar
• Jablonowski , M. 2006 . Precautionary risk management – dealing with catastrophic loss potentials in business, the community and society , Basingstoke : Palgrave Macmillan .
   Google Scholar
• Keller , S. , Powell , A. , Horstmann , B. , Predmore , C. and Crawford , M. 2005 . Information security threats and practices in small businesses . Information Systems Management , : 7 – 19 .
   Web of Science ®Google Scholar
• Kling , R. W. 1988 . Building an institutionalist theory of regulation . Journal of Economic Issues , 22 ( 1 ) : 197 – 209 .
   Web of Science ®Google Scholar
• Kouzmin , A. 2008 . Crisis management in crisis? . Administrative Theory & Praxis , 30 ( 2 ) : 155 – 183 .
   Google Scholar
• Krauss , L. I. 1980 . EDP contingency planning: How to survive a disaster . Management Review , 69 ( 6 ) : 19 – 25 .
   PubMedGoogle Scholar
• Kuong , J. and Isaacson , J. 1986 . How to prepare an EDP plan for business contingency , Wellesley Hills, MA : Management Advisory Publications .
   Google Scholar
• La Porte , T. R. 1996 . High reliability organizations: Unlikely, demanding, and at risk . Journal of Contingencies and Crisis Management , 4 ( 2 ) : 60 – 71 .
   Google Scholar
• La Porte , T. R. and Consolini , P. 1991 . Working in practice but not in theory: Theoretical challenges of high-reliability organizations . Journal of Public Administration Research and Theory , 1 : 19 – 47 .
   Google Scholar
• La Porte , T. R. and Rochlin , G. A. 1994 . Rejoinder to Perrow . Journal of Contingencies and Crisis Management , 2 ( 4 ) : 221 – 227 .
   Google Scholar
• Lagadec , P. 2009 . A new cosmology of risks and crises: Time for a radical shift in paradigm and practice . Review of Policy Research , 26 ( 4 ) : 473 – 486 .
   Web of Science ®Google Scholar
• Lemyre , L. , Turner , M. C. , Lee , J. E.C. and Krewski , D. 2006 . Public perception of terrorism threats and related information sources in Canada: Implications for the management of terrorism risks . Journal of Risk Research , 9 ( 7 ) : 755 – 774 .
   Web of Science ®Google Scholar
• Lloyd-Jones , R. and Lewis , M. J. 2007 . ‘A new paradigm of British business history’: A critique of Toms and Wilson . Business History , 49 ( 1 ) : 98 – 105 .
   Web of Science ®Google Scholar
• Lodge , M. 2009 . The public management of risk: The case for deliberating among worldviews . Review of Policy Research , 26 ( 4 ) : 395 – 408 .
   Web of Science ®Google Scholar
• Lynch , A. and Sheahan , C. 2009 . Taxonomy of a decision: Ranking operational decisions within the SME . International Journal of Decision Sciences, Risk and Management , 1 ( 1/2 ) : 126 – 141 .
   Google Scholar
• Mainiero , L. A. 2002 . Action or reaction? Handling businesses in crisis after September 11 . Business Horizons , : 2 – 10 .
   Google Scholar
• Mattila , A. S. 2001 . The effectiveness of service recovery in a multi-industry setting . Journal of Services Marketing , 15 ( 7 ) : 583 – 596 .
   Google Scholar
• Meier , N. 2005, 18–24 September . International regulations (privacy laws and data protection) North America Regional Business Continuity Awareness Week. Retrieved from http://www.thebci.org/RegulationsArticle.pdf
   Google Scholar
• Meisinger , S. 2006 . Crisis management and HR's role . HR Magazine , 51 ( 2 ) 12
   Google Scholar
• Ministry of Defence. 2000 . Joint service publication 503 – business continuity management , 1st ed. , London : Ministry of Defence .
   Google Scholar
• Mitroff , I. I. and Alpaslan , M. C. 2003 . Preparing for evil . Harvard Business Review , 81 ( 4 ) : 109 – 115 .
   PubMed Web of Science ®Google Scholar
• Mitroff , I. I. , Pauchant , T. C. and Shrivastava , P. 1988 . The structure of man-made organizational crises. Conceptual and empirical issues in the development of a general theory of crisis management . Technological Forecasting and Social Change , 33 : 83 – 107 .
   Web of Science ®Google Scholar
• Monetary Authority of Singapore. 2003 . Business continuity management guidelines , Singapore : Monetary Authority of Singapore .
   Google Scholar
• Moretz , S. 1989, 1 August . Don't let a fire put you out of business . Occupational Hazards , : 25
   Google Scholar
• Namel , P. F. and Ward , W. T. 1983 . Disaster recovery planning: obligation or opportunity? . Risk Management , 30 ( 5 ) : 44 – 47 .
   Google Scholar
• National Fire Protection Association. 2004 . NFPA 1600: Standard on disaster/emergency management and business continuity programs , Quincy, MA : National Fire Protection Association .
   Google Scholar
• National Fire Protection Association. 2007 . NFPA 1600: Standard on disaster/emergency management and business continuity programs 2007 edition , Quincy, MA : National Fire Protection Association .
   Google Scholar
• National Futures Association. 2003 . [5239] RULE 2-38. Business continuity and disaster recovery plan , New York : National Futures Association .
   Google Scholar
• National Institute of Standards and Technology. 2002 . Contingency planning guide for information technology systems – recommendations of the National Institute of Standards and Technology, NIST special publications (SP) 800-34 , Washington, DC : US Department of Commerce .
   Google Scholar
• Nielsen , J. 2006 . BCM and corporate governance – the chicken or the egg? Continuity SA. Retrieved from http://www.continuitysa.co.za/Article1.asp
   Google Scholar
• North American Electric Reliability Council. 2002, 14 June . Security guidelines for the electricity sector. Version 1.0 , Princeton, NJ : North American Electric Reliability Council .
   Google Scholar
• Office of Comptroller of Currency. 1983 . BC-177 corporate contingency planning , Washington, DC : Office of Comptroller of Currency .
   Google Scholar
• Office of Management and Budget. 1993 . OMB circular A-130 1993 Resources transmittal memorandum no. 4. Memorandum for heads of executive departments and agencies, subject: Management of federal information resources , Washington, DC : Office of Management and Budget .
   Google Scholar
• Oliver , C. 1992 . The antecedents of deinstitutionalization . Organization Studies , 13 ( 4 ) : 563 – 588 .
   Web of Science ®Google Scholar
• Oliver , C. 1997 . Sustainable competitive advantage: Combining institutional and resource-based views . Strategic Management Journal , 18 ( 9 ) : 697 – 713 .
   Web of Science ®Google Scholar
• Ozier , W. 1999 . Disaster recovery and risk avoidance/acceptance . Disaster Recovery Journal , 3 ( 1 ) : 40
   Google Scholar
• Parthasarathi , P. 2005 . Operational risk management – business continuity planning, DBS.CO.IS Audit. No. 19/31.02.03/2004–05. Department of Banking Supervision , Mumbai : Reserve Bank of India .
   Google Scholar
• Pauchant , T. C. and Mitroff , I. I. 1990 . Crisis management. Managing paradox in a chaotic world . Technological Forecasting and Social Change , 38 : 117 – 134 .
   Web of Science ®Google Scholar
• Pauchant , T. C. , Mitroff , I. I. and Ventolo , G. 1992 . The dial tone does not come from God! How a crisis can challenge dangerous strategic assumptions made about high technologies: The case of the Hinsdale telecommunication outage . Academy of Management Executive , 6 ( 3 ) : 66 – 79 .
   Google Scholar
• Pearson , C. M. and Clair , J. A. 1998 . Reframing crisis management . Academy of Management Review , 23 ( 1 ) : 59 – 76 .
   Web of Science ®Google Scholar
• Penansky , S. G. 1981 . Capacity considerations in disaster recovery planning. Capacity considerations in disaster recovery planning Library , Washington, DC : Arthur Young & Co .
   Google Scholar
• Perrow , C. 1984 . Normal accidents , New York : Basic Books .
   Google Scholar
• Perry , R.W. and Mankin , L.D. 2005 . Preparing for the unthinkable: Managers, terrorism and the HRM function . Public Personnel Management , 34 ( 2 ) : 175 – 193 .
   Web of Science ®Google Scholar
• Phelps , N. 1986 . The role of top management in disaster recovery planning . Professional Safety , 31 ( 11 ) : 15 – 19 .
   Google Scholar
• Pitt , M. and Goyal , S. 2004 . Business continuity planning as a facilities management tool . Facilities , 22 ( 3/4 ) : 87 – 99 .
   Google Scholar
• Presidential Decision Directive 63. 1998, 22 May . Presidential decision directive/NSC-63, critical infrastructure protection
   Google Scholar
• Presidential Decision Directive 67. 1998, 21 October . Presidential decision directive/NSC-67, enduring constitutional government and continuity of government operations
   Google Scholar
• Priluck , R. 2003 . Relationship marketing can mitigate product and service failures . Journal of Services Marketing , 17 ( 1 ) : 37 – 52 .
   Google Scholar
• Pritchard , J. A.T. 1976 . Contingency planning , Manchester : National Computing Centre .
   Google Scholar
• Reason , J. 1997 . Managing the risks of organizational accidents , Aldershot : Ashgate .
   Google Scholar
• Reynolds , L. 1981 . Foundations of an institutional theory of regulation . Journal of Economic Issues , 15 ( 2 ) : 641 – 656 .
   Web of Science ®Google Scholar
• Rijpma , J. A. 2003 . From deadlock to dead end: The normal accidents–high reliability debate revisited . Journal of Contingencies and Crisis Management , 11 ( 1 ) : 37 – 45 .
   Google Scholar
• Rodetis , S. 1999 . Can your business survive the unexpected? . Journal of Accountancy , 187 ( 2 ) : 27 – 32 .
   Google Scholar
• Roe , E. 2009 . Preventing transboundary crises: The management and regulation of setbacks . Review of Policy Research , 26 ( 4 ) : 457 – 471 .
   Web of Science ®Google Scholar
• Roux-Dufort , C. 2007 . Is crisis management (only) a management of exceptions? . Journal of Contingencies and Crisis Management , 15 ( 2 ) : 105 – 114 .
   Google Scholar
• Runyan , R. C. 2006 . Small business in the face of crisis: Identifying barriers to recovery from a natural disaster . Journal of Contingencies and Crisis Management , 14 ( 1 ) : 12 – 26 .
   Google Scholar
• Santella , N. , Steinberg , L. J. and Parks , K. 2009 . Decision making for extreme events: Modeling critical infrastructure interdependencies to aid mitigation and response planning . Review of Policy Research , 26 ( 4 ) : 409 – 422 .
   Web of Science ®Google Scholar
• Schreider , T. 1996 . White paper: The legal issues of disaster recovery planning . Disaster Recovery Journal , 9 ( 2 ) : 31
   Google Scholar
• Scott , W. R. 1995 . Institutions and organizations , Thousand Oaks, CA : Sage .
   Google Scholar
• Scott , W. R. 2001 . Institutions and organizations , London : Sage .
   Google Scholar
• Securities and Exchange Commission. 2002a . Interagency paper on sound practices to strengthen the resilience of the U.S. financial system Retrieved from http://www.sec.gov/news/studies/34-47638.htm
   Google Scholar
• Securities and Exchange Commission. 2002b . NYSE Rulemaking self-regulatory organizations; notice of filing of proposed rule change by the New York Stock Exchange, Inc. relating to business continuity and contingency planning Retrieved from http://www.sec.gov/rules/sro/34-46443
   Google Scholar
• Securities and Exchange Commission. 2003 . NASD Rulemaking re: Business continuity plans and emergency contact information Retrieved from http://www.sec.gov/rules/sro/34-48503.htm
   Google Scholar
• Seymour , M. and Moore , S. 2000 . Effective crisis management , London : Continuum .
   Google Scholar
• Sloan. 2008 . Framework for voluntary preparedness, briefing regarding private sector approaches to Title IX of H.R. 1 and public law 110-53 implementing recommendations of the 9/11 Commission Act of 2007 , New York : Alfred P. Sloan Foundation .
   Google Scholar
• Smart , P. K. , Tranfield , D. , Deasley , P. , Levene , R. , Rowe , A. and Corley , J. Integrating lean and high reliability thinking . Proceedings of the Institution of Mechanical Engineers . 217 Part B: J, 773–739
   Google Scholar
• Smith , D. 1990 . Beyond contingency planning: Towards a model of crisis management . Industrial Crisis Quarterly , 4 ( 4 ) : 263 – 275 .
   Google Scholar
• Smith , D. 2005 . Business (not) as usual: Crisis management, service recovery and the vulnerability of organisations . Journal of Services Marketing , 19 ( 5 ) : 309 – 320 .
   Google Scholar
• Smith , M. and Sherwood , J. 1995 . Business continuity planning . Computers and Security , 14 ( 1 ) : 14 – 23 .
   Web of Science ®Google Scholar
• Spillan , J. and Hough , M. 2003 . Crisis planning in small businesses: Importance, impetus and indifference . European Management Journal , 21 ( 3 ) : 398 – 407 .
   Google Scholar
• Standards Australia . 1992 . Australian and New Zealand AS/NZ4360 Risk management standard , Sydney : Standards Australia Limited .
   Google Scholar
• Standards Australia . 2004 . BH 221: Business continuity management, second edition , Sydney, NSW : Standards Australia .
   Google Scholar
• Standards Australia. 2006 . HB 292: A practitioners' guide to business continuity management , Sydney : Standards Australia .
   Google Scholar
• Standards Australia. 2009 . Draft for public comment: Australian/New Zealand standard AS/NZS 5050 Business continuity – managing disruption-related risk (part 2: Practice) , Sydney : Standards Australia .
   Google Scholar
• Standards, Productivity and Innovation Board Singapore (SPRING) . 2004 . SS507 Singapore standard for business continuity/disaster recovery service providers , Singapore : The Standards, Productivity and Innovation Board .
   Google Scholar
• Standards, Productivity and Innovation Board Singapore (SPRING). 2005 . Technical reference (TR19:2005) on BCM Retrieved from http://www.spring.gov.sg/Content/WebPage.aspx?id=3179f0f0-0a7a-4142-905d-6f24bd7ddaa4
   Google Scholar
• State Bank of Pakistan. 2003 . Risk management guidelines for commercial banks and DFIs , Karachi : State Bank of Pakistan, Central Directorate .
   Google Scholar
• Strohl Systems. 1995 . The business continuity planning guide , King of Prussia, PA : Strohl Systems .
   Google Scholar
• Swartz , E. , Elliott , D. and Herbane , B. 1995 . Out of sight, out of mind. The limitations of traditional information systems planning . Facilities , 13 ( 9/10 ) : 15 – 22 .
   Google Scholar
• Swartz , E. , Elliott , D. and Herbane , B. 2003 . Greater than the sum of its parts? Business continuity management in the UK finance sector . Risk Management – An International Journal , 5 ( 1 ) : 65 – 80 .
   Google Scholar
• Tangen , S. and Seigel , M. 2008 . ISO/PAS 22399 provides international best practice for preparedness and continuity management . ISO Management Systems , : 5 – 9 .
   Google Scholar
• Tarkington , G. and Ulrich , W. 1983, 24 August . Disaster recovery planning: insuring against the unthinkable . Computerworld , 17 ( 31 ) : 47 – 51 .
   Google Scholar
• Telecommunications Act, Pub. LA. No. 104-104, 110 Stat. 56 . 1996 .
   Google Scholar
• Toms , S. and Wilson , J. F. 2003 . Scale, scope and accountability: Towards a new paradigm of British business history . Business History , 45 ( 4 ) : 1 – 23 .
   Web of Science ®Google Scholar
• Toms , S. and Wilson , J. F. 2007 . Scale, scope and accountability: A response to Lloyd-Jones and Lewis . Business History , 49 ( 4 ) : 106 – 111 .
   Web of Science ®Google Scholar
• Tuira , K. 1983 . Disaster planning yields benefits . Computer Data , 8 ( 5 ) : 25
   Google Scholar
• Turner , B. 1976 . The organizational and interorganizational development of disasters . Administrative Science Quarterly , 21 : 378 – 397 .
   Web of Science ®Google Scholar
• Turner , B. 1994 . Causes of disaster: Sloppy management . British Journal of Management , 5 ( 3 ) : 215 – 219 .
   Google Scholar
• Vogler , M. and Perkins , C. 1991, 12 August . Disaster plans must focus on more than data . National Underwriter , 95 ( 32 ) : 17 – 19 .
   Google Scholar
• Walker , D. D. 1985 . Disaster recovery planning inside General Electric . The Journal of Information Systems Management , 2 ( 4 ) : 25 – 33 .
   Google Scholar
• Weick , K. E. 1988 . Enacted sensemaking in crisis situations . Journal of Management Studies , 25 ( 4 ) : 305 – 317 .
   Web of Science ®Google Scholar
• Weick , K. and Sutcliffe , K. 2003 . Hospitals as cultures of entrapment: A re-analysis of the Bristol Royal Infirmary . California Management Review , 45 ( 2 ) : 73 – 84 .
   Web of Science ®Google Scholar
• Wheeler , R. 1999 . Business continuity planning over the millennium . Insurance Brokers Monthly and Insurance Adviser , 49 ( 11 ) : 7 – 8 .
   Google Scholar
• Wichman , M. 1999, 8 March . SIA gears up strategy for Y2K contingency plans . Wall Street Letter , 31 ( 10 ) : 1 – 2 .
   Google Scholar
• Wong , K. 1981 . Disaster recovery planning. Backup for a distributed system . Information Privacy , 3 ( 3 ) : 86 – 88 .
   Google Scholar
• Wright , G. H. 1979 . Fire! Anguish! Dumb luck! Or contingency planning . Canadian Library Journal , 36 ( 5 ) : 254 – 260 .
   Web of Science ®Google Scholar
• Zattoni , A. and Cuomo , F. 2008 . Why adopt codes of good governance? A comparison of institutional and efficiency perspectives . Corporate Governance , 16 ( 1 ) : 1 – 15 .
   Web of Science ®Google Scholar
• Zsidisin , G. A. , Melnyk , S. A. and Ragatz , G. L. 2005 . An institutional theory perspective of business continuity planning for purchasing and supply management . International Journal of Production Research , 43 : 3401 – 3420 .
   Web of Science ®Google Scholar