Determinants of the critical success factor of disaster recovery planning for information systems

Information Management and Computer Security

Volumn 17, Issue 3, 2009, Pages 248-275

  Chow, Wing S ^a   Ha, Wai On ^a  

^a HONG KONG BAPTIST UNIVERSITY   (Hong Kong)

Author keywords

Critical success factors; Disasters; Information systems

Indexed keywords

BACK-UP SYSTEMS; CRITICAL SUCCESS FACTOR; CRITICAL SUCCESS FACTORS; DATA COLLECTION; DECISION VARIABLES; DESIGN/METHODOLOGY/APPROACH; DISASTER RECOVERY PLANNING; LITERATURE REVIEWS; PRIORITIZATION; QUALITATIVE RESEARCH; QUESTIONNAIRE SURVEYS; STEERING COMMITTEE; SUCCESS FACTORS; TOP MANAGEMENT COMMITMENT;

DISASTERS; ENTERPRISE RESOURCE PLANNING; PERSONNEL TRAINING; SURVEYS;

INFORMATION SYSTEMS;

EID: 70349106415     PISSN: 09685227     EISSN: None     Source Type: Journal    
DOI: 10.1108/09685220910978103     Document Type: Review

References (87)

1. Adam, M. (1999), "Preventing the chain react", HR Magazine, January, pp. 28-32.
2. Arnell, A. (1990), Handbook of Effective Disaster/Recovery Planning McGraw-Hill, New York, NY.
3. Babbie, E. (1992), The Practice of Social Research, 6th ed., Wadsworth, Belmont, CA.
4. Baker, G. (1995), "Quick recoveries", CA Magazine, August, pp. 49-53.
5. Blake, W.F. (1992), "Making recovery a priority", Security Management, Vol. 36 No. 4, pp. 71-4.
6. Blatnik, G.J. (1998), "Point of failure recovery plan", IS Audit & Control Journal, Vol. 4 No. 1, pp. 24-7.
7. Bodnar, G.H. (1993), "Data security and contingency planning", Internal Auditing, Winter, pp. 74-80.
8. Botha, J. and von Solms, R. (2004), "Cyclic approach to business continuity planning", Information Management & Computer Security, Vol. 12 No. 4, pp. 328-37.
9. Butler, J.G. (1997), Contingency Planning and Disaster Recovery: Protecting your Organization's Resources, Computer Technology Research Corp., Montgomery, AL.
10. Carlson, S.J. and Parker, D.J. (1998), "Disaster recovery planning and accounting information systems", Review of Business, Winter, pp. 10-15.
11. Cerullo, M.J. and Cerullo, V. (1998), "Key factors to strengthen the disaster contingency and recovery planning process", Information Strategy: The Executive'fs Journal, Winter, pp. 37-43.
12. Cerullo, M.J., McDuffie, R.S. and Smith, L.M. (1994), "Planning for disaster", The CPA Journal, June, pp. 34-8.
13. Chow, W.S. (2000), "Success factors for IS disaster recovery planning in Hong Kong", Information Management & Computer Security, Vol. 8 No. 2, pp. 80-6.
14. Coleman, R. (1993), "Six steps to disaster recovery", Security Management, February, pp. 61-2.
15. Compeau, D. and Higgins, C. (1995), "Computer self-efficacy: development of a measure and initial test", MIS Quarterly, Vol. 19 No. 2, pp. 189-211.
16. Coult, G. (1999), "Disaster recovery", Managing Information, Vol. 6 No. 3, pp. 31-5.
17. Devargas, M. (1999), "Survival is not compulsory: An introduction to business continuity planning", Computers & Security, Vol. 18 No. 1, pp. 35-46.
18. Donovan, T., Rosson, B. and Eichstadt, B. (1999), "Preparing carriers for ⋯ ", Telephony, June, pp. 180-8.
19. Doughty, K. (1991), "Performing a business impact analysis", EDPACS, Vol. 18 No. 9, pp. 1-7.
20. Doughty, K. (1993), "Auditing the disaster recovery plan", EDPACS, Vol. 21 No. 3, pp. 1-12.
21. Douglas, W.J. (1998), "A systematic approach to continuous operations", Disaster Recovery Journal, Summer, pp. 1-3.
22. Dwyer, P.D., Friedberg, A.H. and McKenzie, K.S. (1994), "It can happen here: The important of continuity planning", IS Audit & Control Journl, Vol. 1, pp. 30-5.
23. Ebling, R.G. (1996), "Establishing safe harbor: How to develop a successful disaster recovery program", Risk Management, September, pp. 53-6.
24. Eckerson, W. (1992), "Andrew reminds users of need for disaster planning", Network World, Vol. 2, p. 56, September.
25. Edwards, B. and Cooper, J. (1994), "Testing the disaster recovery plan", Information Management & Computer Security, Vol. 3 No. 1, pp. 21-7.
26. Elstien, C. (1999), "Reliance on technology", Enterprise Systems Journal, July, pp. 38-40. Ferraro, A. and Hayes, S. (1998), "Auditors add value to the business continuity program", IS Audit & Control Journal, Vol. 5, pp. 47-50.
27. Fong, A. (1991), The Disaster Recovery Plan, School of Business, Hong Kong: Business Research Centre, Hong Kong Baptist University, Kowloon Tong.
28. Francis, B. (1993), "Recover from distributed disasters", Datamation, December, pp. 73-6. Frost, C. (1994), "Effective responses for proactive enterprises: Business continuity planning", Disaster Prevention and Management, Vol. 3 No. 1, pp. 7-15.
29. Gallegos, F. and Wright, D.M. (1988), "Evaluating data security: The initial review", Data Security, Spring, pp. 8-15.
30. Gilbert, L. (1995), "The function of a business continuity plan", EDPACS, March, pp. 12-15.
31. Ginn, R.D. (1989), "The case for continuity", Security Management, January, pp. 84-90.
32. Gluckman, D. (2000), "Continuity ⋯ recovery", Risk Management, March, p. 45.
33. Haubner, D. (1994), "Data processing disaster recovery planning considerations for tandem network", EDPACS, Vol. 19 No. 11, pp. 1-7.
34. Hawkins, S.M., Yen, D.C. and Chou, D.C. (2000), "Disaster recovery planning: A strategy for data security", Information Management & Computer Security, Vol. 8 No. 5, pp. 222-9.
35. Heng, G.M. (1996), "Developing a suitable business continuity planning methodology", Information Management & Computer Security, Vol. 4 No. 2, pp. 11-13.
36. Hiatt, C. and Motz, A. (1990), "Disaster recovery planning: What it should be, what it is, how to improve it", EDPACS, Vol. 17 No. 9, pp. 1-9.
37. Hurwicz, M. (2000), "When disaster strikes", Network Magazine, January, pp. 44-50. Ivancevich, D.M., Hermanson, D.R. and Smith, L.M. (1997), "Accounting information system controls and disaster recovery plans", Internal Auditing, Spring, pp. 13-20.
38. Iyer, R. and Sarkis, J. (1998), "Disaster recovery planning in an automated manufacturing environment", IEEE Transactions on Engineering Management, Vol. 45 No. 2, pp. 163-75.
39. Jacobs, J. and Weiner, S. (1997), "The CPA's role in disaster", The CPA Journal, Vol. 20-24, November, pp. 56-8.
40. Karakasidis, K. (1997), "A project planning process for business continuity", Information Management & Computer Security, Vol. 5 No. 2, pp. 72-8.
41. Korzeniowski, P. (1990), "How to avoid disaster with a recovery plan", Software Magazine, February, pp. 46-55.
42. Kovacich, G.L. (1996), "Establishing: A network security programme", Computers & Security, Vol. 15 No. 6, pp. 486-98.
43. Krivda, C.D. (1998), "Planning for the worst", Midrange Systems, September, pp. 10-14. Krousliss, B. (1993), "Disaster recovery planning", Catalog Age, Vol. 10 No. 12, p. 98.
44. Kull, D. (1982), "Disaster recovery: Just in case", Computer Decisions, September, pp. 180-209.
45. Leary, M.K. (1998), "A rescue plan for your LAN", Security Management, March, pp. 53-60.
46. Lee, S. and Ross, S. (1995), "Disaster recovery planning for information systems", Information Resources Management Journal, Summer, pp. 18-23.
47. McNurlin, B.C. (1988), "Trends in disaster", I/S Analyzer, Vol. 26 No. 11, pp. 1-12.
48. Marcella, A. Jr and Rauff, J. (1994), "Automated disaster recovery plan auditing prospects for using expert systems to evaluate disaster recovery plans", EDPACS, Vol. 21 No. 9, pp. 1-16.
49. Matthews, G. (1994), "Disaster management: Controlling the plan", Managing Information, Vol. 1 Nos 7/8, pp. 24-7.
50. Meade, P. (1993), "Taking the risk out of disaster recovery services", Risk Management, February, pp. 20-6.
51. Menkus, B. (2000), "Defining security threats to information processing application", EDPACS, February, pp. 9-15.
52. Miller, H.J. (1997), "A guide to planning for the business recovery of an administrative business unit", EDPACS, April, pp. 9-16.
53. Mitome, Y., Speer, K.D. and Swift, B. (2001), "Embracing disaster with contingency planning", Risk Management, May, pp. 18-27.
54. Moch, C. (1999), "Taking cover: Bell Atlantic presents businesses with security options", August, Telephony, p. 62.
55. Morwood, G. (1998), "Business continuity: Awareness and training programmes", Information Management & Computer Security, Vol. 6 No. 1, pp. 28-32.
56. Murphy, J.H. (1991), "Taking the disaster out of recovery", Security Management, August, pp. 61-6.
57. Myatt, P.B. (1999), "Going in for analysis", Security Management, April, pp. 75-9.
58. Myers, K.N. (1999), Manager's Guide to Contingency Planning for Disasters: Protecting Vital Facilities and Critical Operations, 2nd ed., Wiley, New York, NY.
59. Nelson, K. (2006), "Examining factors associated with IT preparedness", Proceedings of the 39th Hawaii International Conference on System Science, pp. 1-10.
60. Newton, J. and Cudlipp, G. (1998), "From chaos to control", Canadian Insurance, November, pp. 20-22, 26.
61. Norman, G. (1993), "Disaster recovery after downsizing", Computers & Security, Vol. 12 No. 3, pp. 225-9.
62. Norusis, M.J. (1993), SPSS for Windows Professional Statistics Release 6.0, SPSS, Chicago, IL.
63. Nunnally, J.C. (1967), Psychmoetric Theory, McGraw-Hill, New York, NY.
64. Paton, D. and Flin, R. (1999), "Disaster stress: An emergency management perspective", Disaster Prevention and Management, Vol. 8 No. 4, pp. 261-7.
65. Peach, S. (1991), "Disaster recovery: An unnecessary cost burden or an essential feature of any DP installation", Computers & Security, Vol. 10 No. 6, pp. 565-8.
66. Pember, M.E. (1996), "Information disaster planning: An integral component of corporate risk management", Records Management Quarterly, April, pp. 31-7.
67. Peterson, D.M. and Perry, R.W. (1999), "The impacts of disaster exercises on participants", Disaster Prevention and Management, Vol. 8 No. 4, pp. 241-54.
68. Petroni, A. (1999), "Managing information systems' contingencies in banks: A case study", Disaster Prevention and Management, Vol. 8 No. 2, pp. 101-10.
69. Ravichandran, T. and Rai, A. (2000), "Quality management in systems development: An organizational system perspective", MIS Quarterly, Vol. 24 No. 3, pp. 381-415.
70. Rohde, R. and Haskett, J. (1990), "Disaster recovery planning for academic computing centers", Communications of the ACM, Vol. 33 No. 6, pp. 652-7.
71. Rosenthal, P. and Himel, B. (1991), "Business resumption planning: exercising your emergency response teams", Computer & Security, Vol. 10 No. 6, pp. 497-514.
72. Rothstein, P.J. (1988), "Up and running", Datamation, October, pp. 86-96.
73. Rothstein, P.J. (1998), "Disaster recovery: In the line of fire", Managing Office Technology, May, pp. 26-30.
74. Rutherford, K. and Myer, G. (2000), "Business continuity: Do you have a plan?", Canadian Underwriter, April, pp. 38-41.
75. Salzman, T. (1998), "An audit work program for reviewing IS disaster recovery plans (conclusion)", EDPACS, Vol. 25 No. 7, pp. 8-20.
76. Saraph, J.V., Benson, P.G. and Schroeder, R.G. (1989), "An instrument for measuring the critical factors of quality management", Decision Sciences, Vol. 20 No. 4, pp. 810-29.
77. Smith, M. and Sherwood, J. (1995), "Business continuity planning", Computer & Security, Vol. 14 No. 1, pp. 14-23.
78. Solomon, C.M. (1994), "Bracing for emergencies", Personnel Journal, April, pp. 74-83.
79. Tilley, K. (1995), "Work area recovery planning: The key to corporate survival", Disaster Prevention and Management, Vol. 13 Nos 9/10, pp. 49-53.
80. Turner, D. (1994), "Resources for disaster recovery", Security Management, August, pp. 61-7.
81. Vartabedian, M. (1999), "For want of a nail", Call Center Solutions, February, pp. 40-8.
82. Warigon, S. (1999), "Preparing and auditing an IS security incident-handling plan", EDPACS, Vol. 26 No. 10, pp. 1-13.
83. Wong, B.K., Monaco, J.A. and Sellaro, C.L. (1994), "Disaster recovery planning: Suggestions to top management and information systems managers", Journal of Systems Management, May, pp. 28-32.
84. Wrobel, L.A. (1997), The Definitive Guide to Business Resumption Planning, Artech House, Norwood, MA.
85. Wroblewski, M.E. (1982), "Contingency planning for DP", Data Management, May, pp. 25-7.
86. Yiu, K. and Tse, Y.Y. (1995), "A model for diaster recovery planning", IS Audit & Control Journal, Vol. 5, pp. 45-51.
87. Zolkos, R. (2000), "To rebound from disaster requires advance plans", Business Insurance, Vol. 34 No. 9, pp. 2-4.