Skip to main content

Lund University Publications

LUND UNIVERSITY LIBRARIES

Integrating risk assessment and business impact assessment in the public crisis management sector

Hassel, Henrik LU and Cedergren, Alexander LU (2021) In International Journal of Disaster Risk Reduction 56.
Abstract

Risk and Vulnerability Assessments (RVAs) are often conducted by public sector organizations to prevent or prepare for hazards and threats. In Sweden, practitioners increasingly adopt approaches that are based on Business Continuity Management (BCM), where Business Impact Assessments (BIA) are used to gain organizational understanding, in favor of more traditional risk assessments. Both processes can be valuable to an organization and they have synergies that can be exploited. In the present paper, a method integrating risk assessment and BIA is suggested. The method was developed through a three-year collaboration with the municipality of Malmö, Southern Sweden, where a design science approach was used to ensure scientific rigor and... (More)

Risk and Vulnerability Assessments (RVAs) are often conducted by public sector organizations to prevent or prepare for hazards and threats. In Sweden, practitioners increasingly adopt approaches that are based on Business Continuity Management (BCM), where Business Impact Assessments (BIA) are used to gain organizational understanding, in favor of more traditional risk assessments. Both processes can be valuable to an organization and they have synergies that can be exploited. In the present paper, a method integrating risk assessment and BIA is suggested. The method was developed through a three-year collaboration with the municipality of Malmö, Southern Sweden, where a design science approach was used to ensure scientific rigor and practical relevance. The suggested method, adapted primarily to municipal departments, was implemented and evaluated longitudinally in a number of iterative phases and provides results perceived as useful by end users. Compared to previous suggestions on how to integrate BIA and risk assessment, our method intentionally limits the workload and complexity of the method in favor of practical applicability in a context where persons responsible for crisis management are not necessarily experts on risk and business impact assessment methods. In addition, the method includes features that have not been included in previous integrations of BIA and risk assessment, such as capability assessments related to critical functions in the occurrence of undesirable events using BIA-type of organizational mapping as an input. Finally, the method also includes steps to facilitate sharing information between municipal departments concerning dependencies and capabilities.

(Less)
Please use this url to cite or link to this publication:
author
and
organization
publishing date
type
Contribution to journal
publication status
published
subject
keywords
Business continuity management, Business impact assessment, Design science, Method development, Municipality, Risk and vulnerability assessment
in
International Journal of Disaster Risk Reduction
volume
56
article number
102136
publisher
Elsevier
external identifiers
  • scopus:85101395116
ISSN
2212-4209
DOI
10.1016/j.ijdrr.2021.102136
language
English
LU publication?
yes
id
fb161e51-0a44-43b0-bdcc-ff2446c39532
date added to LUP
2021-03-08 12:35:47
date last changed
2022-04-27 00:38:07
@article{fb161e51-0a44-43b0-bdcc-ff2446c39532,
  abstract     = {{<p>Risk and Vulnerability Assessments (RVAs) are often conducted by public sector organizations to prevent or prepare for hazards and threats. In Sweden, practitioners increasingly adopt approaches that are based on Business Continuity Management (BCM), where Business Impact Assessments (BIA) are used to gain organizational understanding, in favor of more traditional risk assessments. Both processes can be valuable to an organization and they have synergies that can be exploited. In the present paper, a method integrating risk assessment and BIA is suggested. The method was developed through a three-year collaboration with the municipality of Malmö, Southern Sweden, where a design science approach was used to ensure scientific rigor and practical relevance. The suggested method, adapted primarily to municipal departments, was implemented and evaluated longitudinally in a number of iterative phases and provides results perceived as useful by end users. Compared to previous suggestions on how to integrate BIA and risk assessment, our method intentionally limits the workload and complexity of the method in favor of practical applicability in a context where persons responsible for crisis management are not necessarily experts on risk and business impact assessment methods. In addition, the method includes features that have not been included in previous integrations of BIA and risk assessment, such as capability assessments related to critical functions in the occurrence of undesirable events using BIA-type of organizational mapping as an input. Finally, the method also includes steps to facilitate sharing information between municipal departments concerning dependencies and capabilities.</p>}},
  author       = {{Hassel, Henrik and Cedergren, Alexander}},
  issn         = {{2212-4209}},
  keywords     = {{Business continuity management; Business impact assessment; Design science; Method development; Municipality; Risk and vulnerability assessment}},
  language     = {{eng}},
  publisher    = {{Elsevier}},
  series       = {{International Journal of Disaster Risk Reduction}},
  title        = {{Integrating risk assessment and business impact assessment in the public crisis management sector}},
  url          = {{http://dx.doi.org/10.1016/j.ijdrr.2021.102136}},
  doi          = {{10.1016/j.ijdrr.2021.102136}},
  volume       = {{56}},
  year         = {{2021}},
}