Business continuity management: A crisis management approach, second edition

Business Continuity Management: A Crisis Management Approach, Second Edition

Volumn , Issue , 2010, Pages 1-338

  Elliott, Dominic ^a   Swartz, Ethné ^b   Herbane, Brahim ^c  

^a UNIVERSITY OF LIVERPOOL MANAGEMENT SCHOOL   (United Kingdom)

^b FAIRLEIGH DICKINSON UNIVERSITY   (United States)

^c DE MONTFORT UNIVERSITY   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84911109891     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.4324/9780203866337     Document Type: Book

References (516)

1. Abbott, H. (1992) Product Risk Management, London: Pitman Publishing.
2. Adler, P.S., and Kwon, S. (1999) “Social capital: the good, the bad, and the ugly”, modified version of a paper presented at the 1999 Academy of Management Meeting, Chicago, IL.
3. Adler, P.S. and Kwon, S. (2000) “Social capital: The good, the bad and the ugly”, in E. Lesser (ed.), Knowledge and Social Capital: Foundations and Applications. Boston: Butterworth-Heinemann.
4. Adler, P.S. and Kwon, S. (2002) “Social capital: Prospects for a new concept”, Academy of Management Review, 27: 17–40.
5. Afuah, A. (2002) “Mapping technological capabilities into product markets and competitive advantage: The case of cholesterol drugs”, Strategic Management Journal, 23: 171–179.
6. Aglionby, J. (2005) “Indonesia starts installing tsunami early-warning system”, The Guardian, 8 October, p. 14.
7. Ahuja, G. and Katila, R. (2004) “Where do resources come from? The role of idiosyncratic situations”, Strategic Management Journal, 25: 887–907.
8. Aleklett, K. (2007) Reserve Driven Forecasts for Oil, Gas and Coal, discussion paper 2007–18. Online: http://internationaltransportforum.org/jtrc/Discussion Papers/DiscussionPaper18.pdf (accessed 16 June 2008).
9. Alexander, D. (2000) Confronting Catastrophe, Harpenden: Terra.
10. American Red Cross (2007) “Business and industry guide”. Online: http://www.redcross.org/services/disaster/0,1082,0_606_,00.html (accessed 23 March 2007).
11. Anderson, L. (2007) “Beyond competence: identifying and understanding non-technical competencies for crisis management team members”, Business Continuity Journal, 2 (1): 6–31.
12. Anderson, R.E. (1992) Bank Security, Woburn, MA: Butterworth.
13. Argyris, C. (1994) “Good communication that blocks learning”, Harvard Business Review, July–August, 72 (4): 77–85.
14. ARPA (2005a) Prudential Standard GPS 222 Business Continuity Management, Sydney: The Australian Prudential Regulation Authority.
15. ARPA (2005b) Prudential Standard APS 222 Business Continuity Management, Sydney: The Australian Prudential Regulation Authority.
16. Ashmos, D.P, Ducho, D. and Bodensteiner, W.D. (1997) “Linking issue labels and managerial actions: A study of participation in crisis vs. opportunity issues”, Journal of Applied Business Research, 13 (4): 31–45.
17. Awazu, Y., Baloh, P., Desouza, K.C., Wecht, C., Kim, J. and Jha, S. (2009) “Information-communication technologies open up innovation”, Research Technology Management, 52 (1): 51–58. Online: http://www.proquest.com/(accessed 5 April 2009).
18. Balmer, J.T. and Soenen, G.B. (1999) “The acid test of corporate identity management”, Journal of Marketing Management, 15: 69–92.
19. Bangemann, M. (1994) “Europe and the global information society”, recommendations to the European Council, Brussels: European Commission.
20. Bank of Thailand (2003) Strategic Risk Manual: Risk Assessment and Information and Technology System Department (Financial Institutions Supervision), Bangkok: Bank of Thailand.
21. Barney, J.B. (1989) “Asset stocks and sustained competitive advantage: a comment”, Management Science, 35 (12): 1511–1513.
22. Barney, J.B. (1995) “Looking inside for competitive advantage”, Academy of Management Executive, 9 (4): 49–61.
23. Barney, J.B. (2001) “Resource-based theories of competitive advantage: a ten-year retrospective on the resource-based view”, Journal of Management, 27: 643–650.
24. Barney, J.B. (2007) Gaining and Sustaining Competitive Advantage, Upper Saddle River, NJ: Pearson Prentice Hall.
25. Basel Committee on Banking Supervision (1999) “A new capital adequacy frame-work”, consultative paper, Basel: Bank for International Settlements.
26. BBC (2001) “London shares chaos”. Online: http://news.bbc.co.uk/hi/english/business/newsid_702000/702573.stm (accessed 7 February 2001).
27. BBC (2002) “Six ways the UK has changed”. Online: http://news.bbc.co.uk/1/hi/uk/2248658.stm (accessed 8 September 2009).
28. BBC (2005) “Bridgestone ends Ford recall row”. Online: http://news.bbc.co.uk/1/hi/business/4335324.stm (accessed 10 January 2007).
29. BBC (2008) “Eyewitnesses on Heathrow incident”. Online: http://news.bbc. co.uk/1/hi/uk/7194268.stm (accessed 18 January 2008).
30. BCI (2001) “10 standards”. Online: www.thebci.org.
31. BCI (2002) Good Practice Guidelines, London: Business Continuity Institute.
32. BCI (2003) “The Business Continuity Institute 10 standards of professional com-petence”. Online: http://www.thebci.org/certificationstandards.htm (accessed 25 July 2006).
33. BCI (2007a) “Good practice guidelines 2007”. Online: http://www.thebci.org/CHAPTER1BCIGPG071.pdf (accessed 2 October 2007).
34. BCI (2007b) “Good practice guidelines 2008”. Online: http://www.thebci.org/gpgdownloadpage.htm (accessed 29 September 2007).
35. Beazley, H., Boenisch, J. and Harden, D. (2002) Continuity Management: Preserving Corporate Knowledge and Productivity when Employees Leave, Hoboeken, NJ: John Wiley and Sons.
36. Belbin, R.M. (1981) Management Teams: Why They Succeed or Fail, Oxford: Butterworth-Heinemann.
37. Bell, E. (2006) “The media have yet to harness the power of citizen journalism”, The Guardian, Saturday 8 July, p. 24.
38. Bellovin, S.M. (2001) “Computer security – an end state?”, Communications of the ACM, March, 44 (3): 131–132.
39. Bird, L. (2002) “Business continuity for SMEs”, International Journal of Business Continuity, 2 (1): 8–11.
40. BIS (2006) International Convergence of Capital Measurement and Capital Standards: A Revised Framework Basel Committee on Banking Supervision, Bank for International Settlements, June. CH-4002 Basel, Switzerland.
41. Blaney, J., Benoit, J. and Brazeal, L.M. (2002) “Blowout! Firestone’s image restoration campaign”, Public Relations Review, 28: 79–92.
42. Bloor, I. (2004) “The lawyers are coming”. Online: http://www.itanalysis.com/technology/security/content.php?cid=6845> (accessed 12 February 2004).
43. Body Shop International (2000) Annual Results, London: Body Shop International Plc.
44. Boettke, P., Chamlee-Wright, E., Gordon, P., Ikeda, S., Leeson, P. and Sobel, R. (2007) “The political, economic and social aspects of Katrina”, Southern Economic Journal, October, 74 (2): 363–377.
45. Bowe, C. (2001) “Ford and Firestone settle high-profile lawsuit”, Financial Times, 8 January.
46. Bowman and Brooke LLP (1999) “International product liability laws”. Online: http://library.findlaw.com/1999/Aug/1/129312.html (accessed 25 July 2006).
47. Bozarth, J. and Menkus, B. (2003) “Changes that could affect the IS business Continuity Plan”, in K. Doughty (ed.) Business Continuity Planning, Boca Raton: Auerbach.
48. Braithwaite, J. and Fisse, B. (1987) “Self-regulation and the control of corporate crime”, in C.D. Shearing and P.C. Stenning (eds) Private Policing, London: Sage.
49. Broadbent, D. (1979) Contingency Planning, Manchester: NCC.
50. Broder, J.F. (2000) Risk Analysis and the Security Survey, 2nd edn, Oxford: Butterworth-Heinemann.
51. Brown, J.M. and Campbell, E.A. (1994) Stress and Policing: Sources and Strategies, Chichester: John Wiley.
52. BSI (2005) “BS ISO/IEC 20000–1: 2005 Information technology – Service management – Specification”. Online: http://www.bsi-global.com/ICT/Service/bs15000–1.xalter (accessed 25 July 2006).
53. BSI (2006) BS25999–1 Code of Practice for Business Continuity Management and BS25999–2 Specification for Business Continuity Management, London: British Standards Institute.
54. BSI (2007) Draft BS25999–2 Business Continuity Management Part 2: Specification, London: BSI
55. Burkhill, P. (2008) Video comments of pilot to news conference. Online: http://news.bbc.co.uk/1/hi/uk/7195921.stm (accessed 19 January 2008).
56. Burnes, B. (2004) Managing Change: A Strategic Approach to Organisational Dynamics, London: Pitman.
57. Bursa, M., Hunston, H., Lewis, A. and Wright, C. (1997) The Automotive Supply Chain – New Strategies for a New World Order, London: Informa Publishing Group.
58. Business Week (2006) “Web 2.0: the new guy at work”, Business Week, 19 June, p. 59.
59. Cabinet Office (2005) Emergency Preparedness – Guidance on part 1 of the Civil Contingencies Act 2004, its Associated Regulations and Non-statutory Arrangements, London: The Stationary Office.
60. Cameron, K.H. (1994) “An international company’s approach to managing major incidents”, Disaster Management, 3(2).
61. Camp, J.L. and Tsang, R.P. (2001) “Universal service in a ubiquitous digital network”, Ethics and Information Technology, 2 (4): 211–221.
62. Campbell, K., Gordon, L.A., Loeb, M.P. and Zhou, L. (2003) “The economic cost of publicly announced information breaches: empirical evidence from the stock market”, Journal of Computer Security, 11: 431–448.
63. Canadian Underwriter (2005) “Electrifying business impact analysis”, Canadian Underwriter, August, pp. 22–23.
64. Cappelli, D. (2005) “CERT preventing insider sabotage: lessons learned from actual attacks”, CERT. Online: http://www.cert.org/search_pubs/search.php?sort=author&keyword=&topic=&step=search.
65. Cardline (2005) “Cybersource hopes deal will change visa’s mind about card-systems”, Cardline, 30 Sept, 5 (39): 1. Online: http://find.galegroup.com. libaccess.fdu.edu/gps/start.do?prodId=IPS (accessed 7 September 2009).
66. Carley, K. (1991) “Designing organisational structures to cope with communication breakdowns: a simulation model”, Industrial Crisis Quarterly, 5 (1): 19–57.
67. Carrington, D. (2000) “Virgin on a disaster”. Online: http://www.news.bbc.co.uk/hi/english/sci/tech/(accessed 18 January 2000).
68. Carroll, R. (2008) “Protests spread as prices soar – Caracas”. Online: http://www.guardian.co.uk/business/2008/jun/14/oil (accessed 16 June 2008).
69. Castillo, C. (2004) “Disaster preparedness and business continuity planning at Boeing: An integrated model”, Journal of Facilities Management, 3 (1): 8–26.
70. CCTA (1995a) An Introduction to Business Continuity Management. London: HMSO.
71. CCTA (1995b) A Guide to Business Continuity Management. London: HMSO.
72. Chadwick, T. and Rajagopal, S. (1995) Strategic Supply Management, London, Butterworth-Heinemann.
73. Chandler, A.D. (1962) Strategy and Structure: Chapters in the History of the Industrial Enterprise, Cambridge, MA: MIT Press.
74. Chattopadhyay, P., Glick, W.H., Chet Miller, C. and Huber, G.P. (1999) “Determinants of executive beliefs: comparing functional conditioning and social influence”, Strategic Management Journal, 20: 763–789.
75. Chemical and Industry (1998) “UK warned over risk assessment”, Chemical and Industry, 3: 587.
76. Chesbrough, H. (2003) Open Innovation: The New Imperative for Creating and Profiting from Technology, Boston: Harvard Business School Press.
77. Civil Contingencies Act 2004. c.36, London: The Stationery Office.
78. Clark, J. and Harman, M. (2004) “On crisis management and rehearsing a plan”, Risk Management, 51, May. Online: http://www.rmmag.com/MGTemplate. cfm?Section=MagArchive&NavMenuID=304&template=/Magazine/Display Magazines.cfm&Archive=1&IssueID=215&AID=2348&Volume=51& ShowArticle=1.
79. Clegg, S. (1992) Modern Organisations: Organisation Studies in the Postmodern World, London: Sage.
80. Clemons, E. (2000) “‘Gauging the power play in the new economy’, mastering RISK, Part eight”, Financial Times, 23 March, pp. 1–4.
81. CNN (1997) “Computer maker says $194 million purchase allows it to grow server line”, CNNfn, 19 June.
82. Coleman, J.S. (1990) Foundations of Social Theory, Cambridge, MA: Harvard University Press.
83. Collins, D. (1998) Organisational Change: Sociological Perspectives, London: Routledge.
84. Commercial Union (1995) “Don’t make a drama out of a crisis” video, Commercial Union.
85. Cooper, S. (2006) “A preview of disaster”, Harvard Business Review, May, 84 (5): 36.
86. Cornell (2006) “Products liability”, Legal Information Institute, Cornell Law School. Online: http://www.law.cornell.edu/wex/index.php/Products_liability (accessed 25 July 2006).
87. Cox, T. (1978) Stress, London: Macmillan Education.
88. Cranwell-Ward, J. (1990) Thriving on Stress, London: Routledge.
89. Croft, J. and Eaglesham, J. (2007) “Banks want Treasury to pay if lost data lead to ID theft”, Financial Times (London), 24 November, p. 2.
90. Crowe, M.K. (1996) “Information and business process”, Systems Practice, 9 (3): 263–272.
91. Crumley, B. (1990) “Fizzzzz went the crisis”, International Management, 45 (3): 5.
92. Datamonitor (2007) Eastman Kodak Company, May 2008.
93. Davis, B. (2008) “Global ties under stress as nations grab power: trade, environment face new threats: balkanized Internet”, Wall Street Journal, 28 April: A1–A16.
94. Day, D.V. and Lord, R.G. (1992) “Expertise and problem categorization – The role of expert processing in organisational sense making”, Journal of Management Studies, 29: 35–47.
95. Day, R. (1997) “Planning for disaster”, Business Consultancy, 1 (2): 62.
96. Deal, T.E. and Kennedy, A.A. (1982) Corporate Cultures: The Rites and Rituals of Corporate Life, Reading, MA: Addison Wesley.
97. DeWoskin, K. (2007) “The ‘Made in China’ stigma shock”, Far Eastern Economic Review, 170 (7): 9–14.
98. Dhamija, R., Tygar, J.D. and Hearst, M. (2006) Why Phishing Works, CHI, April 22–27. Online: http://people.deas.harvard.edu/~rachna/papers/why_ phishing_works.pdf (accessed 25 June 2006).
99. Dietrich, S., Dittrich, D., Mirkovic, J. and Reiher, P. (2004) Internet Denial of Service: Attack and Defense Mechanisms, New York: Prentice Hall.
100. Dill, W. (1958) “Environment as an influence on managerial autonomy”, Administrative Science Quarterly, 2 (4): 409–443.
101. Doemland, T. (1999) “Awareness through auditing, testing and training”, in A. Hiles, and P. Barnes (eds) The Definitive Handbook of Business Continuity Management, Chichester: John Wiley.
102. Dolan, A. (2003), “New Bug Ship Storm”, The Daily Mail, p. 4.
103. Doswell, B. (2000) Guide to Business Continuity Management, Leicester: Perpetuity Press.
104. Doughty, K. (2001), Business Continuity Planning – Protecting Your Organisation’s Life, Boca Raton: Auerbach.
105. Doyle, P. (1994) Marketing Management and Strategy, London: Prentice Hall.
106. Dunphy, D.C. and Stace, D.A. (1987) “Transformational and coercive strategies for planned organisational change”, Organisational Studies, 9 (3): 317–334.
107. Dutton, J.E. and Dukerich, J.K. (1991) “Keeping an eye on the mirror: the role of image and identity in organisation adaptation”, Academy of Management Journal, 34: 517–554.
108. Earl, M.J. (1989) Management Strategies for Information Technology, Hemel-Hempstead: Prentice-Hall.
109. Earl, M.J. (1996) “Information systems strategy... Why planning techniques are not the answer”, Business Strategy Review, 7 (1): 54 (retrieved 4 September 4 2009 from ABI/INFORM Global, Document ID: 9389169).
110. Easterby-Smith, M., Thorpe, R. and Lowe, A. (1991) Management Research: An Introduction, London: Sage.
111. Economist (1999) “Coca-Cola: bad for you?”, Economist (USA), 19: 62.
112. Egan, C. (1995a) Competitive Advantage, London: Butterworth-Heinemann.
113. Egan, C. (1995b) Creating Organisational Advantage, Oxford: Butterworth-Heinemann.
114. Eisenhardt, K.M. and Zbaracki, M.J. (1992) “Strategic decision making”, Strategic Management Journal, 13: 17–37.
115. Elliott, D. (2005) “Risk and crisis management”, in M. Gill (ed.) International Security Handbook, Leicester: Perpetuity Press.
116. Elliott, D. (2006) “Crisis management into practice”, in D. Smith and D. Elliott (eds) Issues and Concepts: A Crisis Management Reader, Routledge: London.
117. Elliott, D. (2008) Business Continuity Interim Report, University of Liverpool.
118. Elliott, D. and Johnson, N. (2008a) Interim Report on Benchmarking Business Continuity Project, University of Liverpool.
119. Elliott, D. and Johnson, N. (2008b) Business Continuity Project: Interim Report, University of Liverpool, unpublished report.
120. Elliott, D. and MacPherson, A. (2009) Policy and Practice: Recursive Learning from Crisis, OLKC Conference Amsterdam.
121. Elliott, D. and Smith, D. (1993) “Coping with the sharp end: recruitment and selection in the Fire Service”, Disaster Management, 5 (1): 35–41.
122. Elliott, D. and Smith, D. (2000) “Opening Pandora’s box”, in E. Cole, D. Smith and S. Tombs (eds) Managing in the Risk Society, Cambridge: Kluwer.
123. Elliott, D. and Smith, D. (2001) Learning from Crisis, Leicester: Perpetuity Press.
124. Elliott, D. and Smith, D. (2006) “Patterns of regulatory behaviour in the UK football industry”, Journal of Management Studies, 43 (2): 291–318.
125. Elliott, D., Frosdick, S. and Smith, D. (1997) “The failure of legislation by crisis”, in S. Frosdick and L. Walley (eds) Sport and Safety Management, Oxford: Butterworth-Heinemann.
126. Elliott, D., Harris, K. and Baron, S. (2005) “Crisis management and services marketing”, Journal of Services Marketing, 19 (5): 336–345.
127. Elliott, D., Smith, D. and Sipika, C. (2001) “Message in a bottle: learning the lessons from crisis, from Perrier to Coca-Cola”, University of Sheffield mimeo.
128. Elliott, D., Swartz, E. and Herbane, B. (1999a) Business Continuity Management – Preparing for the Worst, London: Incomes Data Services.
129. Elliott, D., Swartz, E. and Herbane, B. (1999b) “Just waiting for the next big bang: business continuity management in the UK finance sector”, Journal of Applied Management Studies, 8 (1): 43–60.
130. Ellison, R.J., Fisher, D.A., Linger, R.C., Lipson, H.F., Longstaff, R. and Mead, N.R.(1999a) Survivable Network Systems: An Emerging Discipline, Carnegie-Mellon Software Engineering Institute, CERT. Online: http://cert.org/research/97tr013.pdf (accessed 26 July 2005).
131. Ellison, R.J., Fisher, D.A., Linger, R.C., Lipson, H.F., Longstaff, T. and Mead, N.R.(1999b) Survivability: Protecting Your Critical Systems, Carnegie-Mellon Software Engineering Institute, CERT. Online: http://www.cert.org/archive/html/protect-critical-systems.html (accessed 15 June 2006).
132. Engwall, M. and Svensson, C. (2001) “Cheetah teams”, Harvard Business Review, 79 (2): 20–21.
133. Ernst and Young (2004) Global Information Security Survey 2004, London: EYGM Limited.
134. Ernst and Young (2005) Global Information Security Survey 2005, London: EYGM Limited.
135. Evers, J. (2006) “Computer crime costs $67 billion, FBI says”, CNET News.com, 19 January 2006 Online. Available (accessed 29 June 2006).
136. Evers, J. (2005) “Credit card suit now seeks damages”, ZDNet News, 7 July. Online: http://news.zdnet.com/2100–1009_22–5777818.html (accessed 29 June 2006).
137. Eysenck, H.J. (1952) The Scientific Study of Personality, London: Routledge & Kegan Paul.
138. Fallows, Deborah (2003) Spam: How It Is Hurting Email and Degrading Life on the Internet, Washington DC: Pew Internet and American Life Project. Online: http://www.pewinternet.org/pdfs/PIP_Spam_Report.pdf (accessed 7 August 2005).
139. Federal Deposit Insurance Corporation (FDIC) (2001) Examination Guidance. Online: http://www.fdic.gov/news/news/financial/2001/fil0168.html (accessed 25 January 2008).
140. Federal Trade Commission (2006) Card Systems Solutions Settles FTC Charges, February. Online: http://www.ftc.gov/opa/2006/02/cardsystems_r.htm.
141. Feldman, P. (1998) “Surviving internet disasters”, Risk Management, 45 (2): 56.
142. Felstead, A. (2007) “Executives are finding that they live in interesting times. Directors’ insurance: new fears are boosting the market”, Financial Times Surveys Edition, 1 May. Online: http://www.proquest.com/(accessed 7 April 2009).
143. Ferre, R. (2000) Building Confidence in Business Continuity, London: Institute of Directors.
144. FFIEC (2003) Business Continuity Planning Booklet – March 2003, Federal Financial Institutions Examination Council.
145. Financial Times (1996) “Financial Times focus: IT in financial services”, 4 September.
146. Financial Times (2000a) 7 April, p. 8.
147. Financial Times (2000b) “Mastering risk, part eight”, 23 March, pp. 1–4.
148. Financial Times (2001) 16 February, p. 15.
149. Finkelstein, S. (2007) “Is Google just the tip of the iceberg of concerns about online privacy?” The Guardian, 21 June, p. 14.
150. Finkelstein, S. and Hambrick, D. (1988) “Chief executive compensation: a synthesis and reconciliation”, Strategic Management Journal, 9: 543–558.
151. Fisher, S. (1986) Stress and Strategy, London: Lawrence Erlbaum.
152. Fitzgerald, K.J. (1995) “Establishing an effective continuity strategy”, Information Management and Computer Security, 3 (3): 20–24.
153. Flin, R. (1996) Sitting in the Hot Seat, London: John Wiley.
154. Florida, R. (2008) “Megaregions: the importance of place”, Harvard Business Review, March: 18–19.
155. Folke, C., Colding, J., Berkes, F. (2003) “Synthesis: building resilience and adaptive capacity in social–ecological systems”, in F. Berkes, J. Colding and C. Folke (eds) Navigating Social–Ecological Systems: Building Resilience for Complexity and Change, Cambridge: Cambridge University Press, pp. 352–387.
156. Fombrun, C. (1997) Reputation: Realising Value from the Corporate Image, Boston, MA: Harvard Business School Press.
157. Fombrun, C., Gardberg, N. and Sever, J. (2000) “The reputation quotient: a multi-stakeholder measure of corporate reputation”, Journal of Brand Management, 7 (4): 241–255.
158. Foremski, T. (2001) “Siebel beats estimates in fourth quarter”, Financial Times, 24 January, p. 26.
159. Foster, S.P. (2005) “Building continuity into strategy”, Journal of Corporate Real Estate, 7 (2): 105–119.
160. Fowler, D. (2006) “Power struggles”, Networker, December, 10 (4): 5.
161. Fox, S. (2005) Spyware: The Threat of Unwanted Software Programs Is Changing the Way People Use the Internet, Washington DC: Pew Internet and American Life Project, July. Online: http://www.pewinternet.org/pdfs/PIP_Spyware_ Report_July_05.pdf (accessed 7 August 2005).
162. Freeman S.F., Maltz, M. and Hirschhorn, L. (2003) “Moral purpose and organisational resilience: Sandler O’Neill & Partners, L.P. in the aftermath of September 11, 2001”, in D. Nagao (ed.), Academy of Management Best Papers 2003.
163. Frey Jr, S.C. and Schlosser, M.M. (1993) “ABB and Ford: creating value through cooperation”, Sloan Management Review, Autumn: 65–72.
164. Friedman, T. and Kaplan, R. (2002) “States of discord”, Foreign Policy, 129: 64–70 (retrieved 14 September 2009, from ABI/INFORM Global, document ID: 110197680).
165. Frost, C. (1994) “Effective responses for proactive enterprise: business continuity planning”, Disaster Prevention and Management, 3 (1): 7–15.
166. FSA (2005) Resilience Benchmarking Project, discussion paper December. Online: http://www.fsc.gov.uk/upload/public/Files/9/Web%20%20Res%20Bench%20 Report%2020051214.pdf.
167. FSA (2006) Feedback Statement on the Resilience Benchmarking Project Discussion Paper, July, London: The Financial Services Authority.
168. Gaines, S. (2008) “Campaigners to march in support of animal testing”, Society, The Guardian, 4 February, p. 5.
169. Galliers, R.D. and Sutherland, A.R. (1991) “Information systems management and strategy formulation: the ‘stages of growth’ model revisited”, Information Systems Journal, 1 (2): 89–114.
170. Galliers, R.D. and Sutherland, A. R. (1994) “Information systems management and strategy formulation: applying and extending the stages of growth con-cept”, in R.D. Galliers and B.S.H. Baker (eds) Strategic Information Management: Challenges and Strategies in Managing Information Systems, Oxford: Butterworth-Heinemann.
171. Garnham, R. (2007) Scrutiny Inquiry into the Summer Emergency 2007, Gloucester: Gloucestershire County Council.
172. Gartner (2001) Business Continuity and Disaster Recovery Planning and Management: Perspective, Gartner Research, 8 October, DPRO-100862.
173. Gaudin, S. (2007) “Two universities hit by security breaches”, Information Week, 11 June 11. Online: http://www.informationweek.com/news/internet/show Article.jhtml?articleID=199903218 (accessed 6 April 2009).
174. Gavetti, G., Henderson, R. and Giorgi, S. (2005) “Kodak and the digital revolution (A)”, Harvard University Business School Case Study, Ref 9–705–448.
175. Gerlach, K.P. (2002) “The role of states and of international and national organisations as super risk managers”, in M. Wieczorek, U. Naujoks and B. Bartlett (eds) Business Continuity: IT Risk Management for International Corporations, Berlin: Springer.
176. Ghemawat, P. (2008) “Globalization is an option not an imperative. Or, why the world is not flat”, Ivey Business Journal Online, Jan/Feb, 72 (1).
177. Gibson, C. and Nolan, R.L. (1974) “Managing the four stages of EDP growth”, Harvard Business Review, 52 (1): 76–88.
178. Giles, A. (2005) SOX: What Does it Mean for UK Companies? Online: http://www.continuitycentral.com/feature0203.htm (accessed 1 February 2009).
179. Ginn, R.D. (1989) Continuity Planning: Preventing, Surviving and Recovering from Disaster, Oxford: Elsevier Advanced Technology.
180. Gluckman, D. (2000) “Continuity... Recovery”, Risk Management, 47 (3): 45.
181. Goetsch, S.D. (1996) “Products liability”, Defence Counsel Journal, 63 (3): 399–401.
182. Goodden, R.L. (1995) Preventing and Handling Product Liability, New York: Marcel Dekker.
183. Goodden, R.L. (1996) “Lawyers can provide unique product-liability perspec-tive”, Hydraulics and Pneumatics, 49 (2): 10–12.
184. Goodhart, C. (1998) “Regulation from the inside – the politics of managerial control”, Chartered Banker, January, pp. 20–23.
185. Google Watch (2007) “And then there were four”. Online: http://www.google-watch.org/bigbro.html (accessed on 1 October 2007).
186. Gould, S.J. (1996) Mismeasure of Man, London: Penguin Books.
187. Government Centre for Information Systems (CCTA) (1995a) An Introduction to Business Continuity Management, London: HMSO.
188. Government Centre for Information Systems (CCTA) (1995b) A Guide to Business Continuity Management, London: HMSO.
189. Grande, C. (2000) “Innovators are back to net a second e-fortune”, Financial Times, 17 October, p. 8.
190. Grant, R.M. (1991) “The resource-based theory of competitive advantage”, California Management Review, 33 (3): 114–135.
191. Gray, E. and Balmer, J.T. (1998) “Managing corporate image and reputation”, Long Range Planning, 31 (5): 695–702.
192. Green, C. (2006) “You can’t manage what you can’t measure”, The Business Continuity Journal, 1 (1): 9–20.
193. Greifeld, B. (2006). “The business of being a stock market”, Vital Speeches of the Day, 72 (13): 408–411. (Retrieved 23 April 2008, from ABI/INFORM Global database).
194. Greiner, L.E. (1972) “Evolution and revolution as organisations grow”, Harvard Business Review, July–August: 37–46.
195. Greve, H.R. (1998) “Managerial cognition and the mimetic adoption of market positions: What you see is what you do”, Strategic Management Journal, 19: 967–988.
196. Grimshaw, A.S. and Wulf, W.A. (1997) “The legion vision of a worldwide virtual computer”, Association for Computing Machinery, Communications of the ACM, 40 (1): 39–46.
197. Guardian (2008) “Series of sensitive data losses call into question safety of National Biometric Database”, The Guardian, 21 January. Online: http://www.guardian.co.uk/military/story/0,,2244578,00.html.
198. Hall, R. (1992) “The strategic analysis of intangible resources”, Strategic Management Journal, 13: 135–144.
199. Hamilton, A. (2003), “Full steam ahead”, The Times, 4 November, p. 1.
200. Hammer, M. (1990), “Re-engineering work: don’t automate, obliterate”, Harvard Business Review, July–August, pp. 104–112.
201. Handy, C. (1990) The Age of Unreason, Boston, MA: Harvard Business School Press.
202. Hanson, N. (1969) “There is more to seeing than meets the eye”, in M.J. Smith (ed.) Social Science in Question, London: Sage.
203. Hansson, S.O. (2005) “Seven myths of risk”, Risk Management – An International Journal, 7 (2): 7–17.
204. Hardin, G. (1971) “Nobody ever dies of overpopulation”, Science, 171: 524–532.
205. Harrison, A. (2006) “Can airlines recover after terror ordeal?”, The Observer, 20 August, p. 14.
206. Hearnden, K. (1993) “Up the creek – the perils of computer failure”, Loughborough University Report in association with Computing Services Association and The Kingswell Partnership for IBM.
207. Hemp, T. (2001) “Managing for the next big thing: EMC’s Michael Ruettgers”, Harvard Business Review, January: 130–141.
208. Hemphill, T.A. (1996) “The new era of business regulation”, Business Horizons, 39 (4): 26–31.
209. Heng, G.M. (1996) “Developing a suitable business continuity planning method-ology”, Information Management and Computer Security, 4 (2): 11–13.
210. Henry T. (2006) “Review”, Business Continuity Journal, 1 (1).
211. th April, pp. 79–88.
212. Herbane, B. (2004) “Basel Committee on Banking Supervision”, Risk Management – An International Journal, 6 (1): 65–66.
213. Herbane, B. and Rouse, M.J. (2000) Strategic Management: An Active Learning Approach, Oxford: Blackwell.
214. Herbane, B., Elliott, D. and Swartz, E. (1997) “Contingency and continua: achieving excellence through business continuity planning”, Business Horizons, 40 (6): 19–25.
215. Herbane, B., Elliott, D. and Swartz, E. (2004) “Business continuity management – time for a strategic role?” Long Range Planning, 37 (5): 435–457.
216. Higgs, D. (2003) The Combined Code On Corporate Governance. Online: http://www.fsa.gov.uk/pubs/ukla/lr_comcode2003.pdf (accessed 7 June 2008).
217. Hiles, A. and Barnes, P. (eds) (1999) The Definitive Handbook of Business Continuity Management, Chichester: John Wiley.
218. Hirokawa, R. (1988) “Understanding the sources of faulty decision making”, Small Group Behaviour 19: 411–433.
219. Hirschheim, R., Earl, M., Feeny, D. and Lockett, M. (1988) “An exploration into the management of the information systems function: key issues and an evolutionary model”, Proceedings Information Technology Management for Productivity and Strategic Advantage, IFIP TC-8 Open Conference Singapore.
220. Hirschheim, R.A. and Verrijn-Stuart, A.A. (1996) Office Systems, London: Elsevier Science.
221. HKMA (2002) Supervisory Policy Manual TM-G-2 Business Continuity Planning, Hong Kong: The Hong Kong Monetary Authority.
222. HMSO (2004) Civil Contingencies Act 2004. Online: http://www.opsi.gov.uk/acts/acts2004/20040036.htm (accessed 25 July 2006).
223. Hofstede, E. (1990) “Measuring organisational cultures: a qualitative and quantitative study across twenty cases”, Administrative Science Quarterly, June: 286–316.
224. Hogge, B. (2008) “The sky’s the limit”, New Statesman, 5 May, 137 (4895): 48.
225. Home Office (1997a) Business as Usual: Maximising Business Resilience to Terrorist Bombings, London: Home Office.
226. Home Office (1997b) Bombs, Protecting People and Property, 3rd edn, London: Home Office.
227. Honour, D. (2002) “Lessons from 11 September”, International Journal of Business Continuity, 2 (1): 13–17.
228. Honour, D. (2006) “The BIA under the microscope, II”, The Business Continuity Journal, 1 (1): 36–45.
229. HSE (2001) “Health and Safety Executive guidance notes on stress”. Online: http://www.hse.gov.co.uk/pubns/stress2.htm (accessed 4 June 2001).
230. Huber, P. (1997) “The health scare industry”, Forbes, 160 (7): 114.
231. Hughes, J., Eaglesham, J., Cox, A. and Croft, J. (2009) “FSA had HBOS risk fears in 2002”, The Financial Times, 12 February. Online: http://www.ft.com/cms/s/0/98f6f584-f8a5–11dd-aae8–000077b07658.html (accessed 12 February 2009).
232. Hurley-Hanson, A.E. (2006) “Organisational responses and adaptations after 9–11”, Management Research News, 29 (8): 480–494.
233. Hurricane Pam: a failure of initiative. Online: http://a257.g.akamaitech.net/7/257/2422/15feb20061230/www.gpoaccess.gov/katrinareport/hur-ricanepam.pdf (accessed 13 June 2008).
234. Huws, U. and O’Regan, S. (2001) eWork in Europe: Results from the EMERGENCE 18-country Employer Survey, London: Institute for Employment Studies.
235. Huy, Q.N. and Mintzberg, H.(2003) “The rhythm of change”, MIT Sloan Management Review, Summer, 44 (4).
236. Imerson, M. (1997) “Helen Liddell: taking a tough approach to regulation”, Chartered Banker, December, pp. 10–15.
237. International Organization for Standardization (2005) ISO/IEC 17799: 2005 Information Technology – Security Techniques – Code of Practice for Information Security Management. Online: http://www.iso.org/iso/en/prods-services/popstds/informationsecurity.html (accessed 25 July 2006).
238. Intertek (2004) Product Safety in Europe: A Guide to Corrective Action Including Recalls, London: Intertek Research and Testing Centre on behalf of the UK Consumers Association.
239. Irwin, R. (2001) What is Fud? Online: www.geocities.com/siliconvalley/hills/ 9267/ (accessed 20 January 2001).
240. ISA (2004) Business Continuity and Disaster Recovery. Online: http://www.ida.gov.sg/idaweb/marketing/infopage.jsp?infopagecategory=factsheet: marketing&infopageid=I2259> (accessed 25 July 2006).
241. ISF (2005) “The ISFs standard of good practice – the standard for information security (Version 4.1)”, Information Security Forum.
242. ISO (2008a) ISO/DIS 22399 Societal Security – Guidelines for Incident Preparedness and Operational Continuity Management, Geneva: International Organization for Standardization.
243. ISO (2008b) ISO 24762 Security Techniques – Guidelines for Information and Communications Technology Disaster Recovery Services, Geneva: International Organization for Standardization.
244. IT 2000 (1997) A Legal Guide for Users and Suppliers, London: Monitor Press.
245. Jablonowski, M. (2006) Precautionary Risk Management – Dealing with Catastrophic Loss Potentials in Business, the Community and Society, Basingstoke: Palgrave Macmillan.
246. Jackson, C.B. (2001) “The business impact analysis process”, in K. Doughty (ed.) Business Continuity Planning: Protecting Your Organization’s Life, Boca Raton, FL: CRC Press.
247. Jacobs, J.A. and Portman, R.M. (1998) “Beware the threat of product liability litigation”, Association Management, June, pp. 81–82.
248. Janis, I. (1982) Groupthink, Boston: Houghton Mifflin.
249. Janis, I. (1983) Victims of Groupthink, 2nd edn, Boston: Houghton Mifflin.
250. Johnson, G. and Scholes, K. (2008) Exploring Corporate Strategy: Text and Cases, 8th edn, London: Prentice Hall.
251. Johnson, G., Scholes, K. and Whittington, R. (1997) Exploring Corporate Strategy: Text and Cases, 7th edn, London: Prentice Hall.
252. Jones, M., Rahman, B. and Newman, C. (2000) “Dismay as BNFL agrees to take back Japanese fuel”, Financial Times, 12 July, p. 2.
253. Jones, M.E. and Sutherland, G. (1999) Implementing Turnbull: A Boardroom Briefing, London: Institute of Chartered Accountants in England and Wales.
254. Karakasidis, R. (1997) “A project planning process for business continuity”, Information Management and Computer Security, 5 (2): 72–78.
255. Kasperson, R.E., Renn, O. and Slovic, P. (1988) “The social amplification of risk: a conceptual framework”, Risk Analysis, 6: 177–187.
256. Kassler, P. (1995), “Scenarios for world energy: barricades or new frontiers?” Long Range Planning, 28(6): 38–47.
257. Keeley, G. (2008) “Protests spread as prices soar”. Online: http://www.guardian.co.uk/business/2008/jun/14/oil (accessed 16 June 2008).
258. Keeney, M., Kowalski, E., Cappelli, D., Moore, A., Shimeall, T. and Rogers, S. (2005) Insider Threat Study: Computer Systems Sabotage in Critical Infrastructure Sectors, May 2005, National Threat Assessment Center, U.S. Secret Service and CERT/SEI. Online: http://www.cert.org/archive/pdf/insidercross011105.pdf (accessed 7 July 2006).
259. Kelleher, E. (2005) “MasterCard sales boost”, Financial Times (London), 3 August, p. 21.
260. Kharbanda, O. and Stallworthy, E. (1991) “Industrial disasters – will self-regulation work?”, Long-Range Planning, 24 (3): 84–89.
261. Kielmas, M. (1999) “Interest in recall covers rises: Coca-Cola scare fuels awareness of risks”, Business Insurance, 33 (28): 18–22.
262. King, J. (1997) “Business continuity is focus of disaster recovery”, Computerworld, 1 September, 31 (35): 17.
263. Kirshenbaum, A. (2004) Chaos, Organisation and Disaster, New York: Marcel Dekker.
264. Klay Management Ltd. (2003) Mitigating Operational Risk – Not Just for the Field Anymore. Online: www.kimc.com/KLAY/pdfs/Mitigating_Op_Risk.pdf.
265. Kochan, A. (1999) “Rover’s e-build process assembles cars in the virtual world”, Assembly Automation, 19 (2): 118–120.
266. Kotter, J.P. and Schlesinger L.A. (1979) “Choosing strategies for change”, Harvard Business Review, March/April: 123–136.
267. Krcmar, H., Bjorn-Andersen, N. and O’Callaghan, R. (1995) EDI in Europe, Chichester: John Wiley.
268. Krell, E. (2006) “The case for business continuity management”, Business Finance, 12 (4): 20–26.
269. Kumar, N., Scheer, L. and Kotler, P. (2000) “From market driven to market driving”, European Management Journal, 18 (2): 129–142.
270. Kuong, J. and Isaacson, J. (1986) How to Prepare an EDP Plan for Business Contingency, Wellesley Hills, MA: Management Advisory Publications.
271. Kurzweil, R. (2007) “Frontiers”, The Atlantic Monthly, 300 (4): 14–15 (accessed 15 April 2009 from ABI-Inform).
272. L’Engle, M. (1995) A Wrinkle in Time, New York: Bantam Doubleday Books.
273. La Porte, T. and Consolini, P. (1991) “Working in practice but not in theory: theoretical challenges of ‘high-reliability organisations’”, Journal of Public Administration Research and Theory, 1 (1): 19–47.
274. Lagadec, P. (1993) Preventing Chaos in a Crisis, Maidenhead: McGraw-Hill.
275. Lawrence, F. (2004) “Things get worse with Coke”, The Guardian, 20 March, p. 21.
276. Lazarus, R.S. (1966) Psychological Stress and the Coping Process, New York: McGraw-Hill.
277. Lazarus, R.S. (1999) Stress and Emotion: A New Synthesis, London: Free Association Books.
278. Lazarus, R.S. and Folhman, S. (1984) Stress, Appraisal, and Coping, New York: Springer.
279. Lazarus, R.S. and Launier, R. (1978) “Stress-related transactions between person and environment”, in L.A. Pervin and M. Lewis (eds) Internal and External Determinants of Behavior, New York: Plenum.
280. Leana, C. and Van Buren, H. (1999) “Organisational social capital and employment relations”, Academy of Management Review, 24 (3): 538–555.
281. Lederer, A.L. and Sethi, V. (1992) “Meeting the challenges of information systems planning”, Long Range Planning, 25 (2): 69–80.
282. Lee, R.G. and Russo, R.J. (1996) “Dealing with disasters takes careful planning ahead of time”, Building Design and Construction, 37 (9): 37–38.
283. Lee, Y.J. and Harrald, J.R. (1999) “Critical issue for business area impact analysis in business crisis management: analytical capability”, Disaster Prevention and Management, 8 (3): 184–189.
284. Leemhuis, J.P. (1985) “Using scenarios to develop strategies”, Long Range Planning, 18 (2): 30–37.
285. Lemos, R. (2006) “U.S.B. drives pose insider threat”, SecurityFocus. Online: http://www.securityfocus.com/brief/239 (accessed 29 June 2006).
286. Lengnick-Hall, C.A and Beck, T.E. (2003) “Beyond bouncing back: the concept of organisational resilience”, paper presented at the National Academy of Management Meetings, Seattle, WA.
287. Lengnick-Hall, C.A. and Beck, T.E. (2005) “Adaptive fit versus robust transformation: how organisations respond to environmental change”, Journal of Management, 31 (5): 738–757.
288. Lettice, J. (2002) Chopped Cable Knocks dabs.com off the Web. Online: http://www.theregister.co.uk/2002/10/25/chopped_cable_knocks_dabs_com/> (accessed 25 October 2002).
289. Levitt, B. and March, J.G. (1988) “Organisational learning”, Annual Review Of Sociology, 14: 319–340.
290. Levitt, T. (1965) “Exploit the product life cycle”, Harvard Business Review, Nov–Dec, 43: 81–94.
291. Lewin, K. (1951) Field Theory in Social Science, New York: Harper & Row.
292. Lewis, S. (2005) “Business continuity and disaster recovery plans – things overlooked”, EDPACS, 33 (1): 19–20.
293. Locke, E.A. (1968) “Toward a theory of task motivation and incentives”, Organisational Behaviour and Performance, 3: 157–189.
294. Löfstedt, R. and Frewer, L. (1998) The Earthscan Reader in Risk and Modern Society, London: Earthscan Publications Ltd.
295. Louisiana Office of Homeland Security & Emergency Preparedness (2005) Lessons Learned, Event Name Hurricane Katrina/Rita 26 Aug–29 Nov 2005. Online: http://www.katrina.lsu.edu/downloads/LOHSEP%20LESSONS%20 LEARNED.pdf (accessed 13 June 2008).
296. Lower Manhattan Development Corporation (2007) Online: http://www.renewnyc.com/plan_des_dev/130Liberty/overview.asp (accessed 23 March 2007).
297. Lyman, P. and Varian, H (2001) “The democratization of data”, Harvard Business Review, January: 137.
298. Macalister, T. (2006) “Shell accused over oil rig safety”, The Guardian, 23 June, p. 17.
299. Mandela, N. (1994) The Long Walk to Freedom, London: Abacus Books.
300. Marlin, S. (2005) “Visa system targets credit-fraud rings”, InformationWeek, 20 June, 1044: 32.
301. Martin, K. (2006) “U.S. gov’t mandates laptop security”, SecurityFocus. Online: http://www.securityfocus.com/news/11397 (accessed 25 June 2006).
302. Martinson, J. and Elliott, L. (1999) “Ministers seek to still stock market panic G7 meeting: financial leaders forced to address dollar’s fall and crash predictions”, The Guardian, 25 September, p. 23.
303. MAS (2003) Business Continuity Management Guidelines, Singapore: Monetary Authority of Singapore.
304. Maurer, H. (2007) “O.K. we bid too high”, Business Week, 15 October, p. 30.
305. McCubbins, T.F. and Mosier, G.C. (1998) “Effects of product liability laws on small business: an introduction to international exposure through a comparison of US and Canadian law”, Journal of Small Business Management, 36 (3): 72–79.
306. McFadden, T. (1993) “World Trade Center”, New York Times, 6 February, p. 5.
307. McGregor, R. and Russell, A. (2008) “African protests repel arms ship”, Financial Times, 23 April, p. 10. (retrieved 23 April 2008, from ABI/INFORM Global database).
308. McKenna, E. (1994) Business Psychology and Organisational Behaviour, Hove: Lawrence Erlbaum Associates.
309. McKinnon, I. and Watts, J. (2008) “Protests spread as prices soar – Asia and Beijing”. Online: http://www.guardian.co.uk/business/2008/jun/14/oil (accessed on 16 June 2008).
310. McManus, D.J. and Carr, H.H. (2001) “Risk and the need for business continuity planning”, in K. Doughty (ed.) Business Continuity Planning: Protecting your Organization’s Life, Auerbach Best Practices Series, Boca Raton: CRC Press LLC.
311. Mellish, S. (2000) “J Sainsbury and the fuel crisis”, Continuity, 4 (4): 3–6.
312. Mellish, S. (2000) “When a BCP really comes into its own”, Continuity, 4 (4): 4–6.
313. Menkus, B. (1994) “The new importance of business continuity in data processing disaster recovery planning”, Computers and Security, 13 (2): 115–118.
314. Meredith, W. (1999) “Business impact analysis”, in A. Hiles and P. Barnes (eds) The Definitive Handbook of Business Continuity Management, Chichester: John Wiley.
315. Meyer, A.D. (1982) “Adapting to environmental jolts”, Administrative Science Quarterly, 27: 515–537.
316. Meyer, J.W. and Rowan, B. (1977) “Institutional organizations: formal structure as myth and ceremony”, American Journal of Sociology, 83: 340–363.
317. Microsoft (2006) Enabling an Adaptable, Aligned, and Agile Supply Chain with BizTalk Server and RosettaNet Accelerator. Online: http://www.microsoft.com/technet/itsolutions/msit/ecomm/scmbiztalktcs.mspx (accessed 17 July 2006).
318. Mintzberg, H. (1983a) Power In and Around Organisations, Englewood Cliffs, NJ: Prentice Hall.
319. Mintzberg, H. (1983b) The Structuring of Organisations, Englewood Cliffs, NJ: Prentice Hall.
320. Mintzberg, H. (1994) The Rise and Fall of Strategic Planning, London: Prentice Hall.
321. Mintzberg, H. and Waters J. (1985) “Of strategies, deliberate and emergent”, Strategic Management Journal, 6: 257–72.
322. Mintzberg, H., Quinn, J.B. and Ghoshal, S. (1998). The Strategy Process, rev. European edn, London: Prentice Hall.
323. Mitchell, R.K, Agle, B.R. and Wood, D.J. (1997) “Toward a theory of stakeholder identification and salience: defining the principle of who and what really counts”, Academy of Management Review, 22 (4): 853–886.
324. Mitroff, I., Pauchant, T. and Shrivastava, P. (1988) “The structure of man made organisational crisis”, Technological Forecasting and Social Change, 33: 83– 107.
325. Mitroff, I., Pauchant, T., Finney, M. and Pearson, C. (1989) “Do (some) organisations cause their own crises? Culture profiles of crisis-prone versus crisis-prepared organisations”, Industrial Crisis Quarterly, 3 (4): 269–283.
326. Mitts, J.S. (2005) “Business continuity and disaster recovery plans: how and when to test them”, EDPACS, November, 33 (5): 8–24.
327. MOD (2006) Joint Service Publication 503 Business Continuity Management, 3rd edn, London: Ministry of Defence.
328. Moore, T. and Lakha, R. (2006) Tolley’s Handbook of Disaster and Emergency Management, London: Butterworth-Heinemann.
329. Morgan, O. (2003) “Besieged BA left with strike baggage”, The Observer, 27 July, p. 16.
330. Moss-Kanter, R. (2001a) E-volve!: Succeeding in the Digital Culture of Tomorrow, Cambridge, MA: Harvard University Press.
331. Moss-Kanter, R. (2001b) “The ten deadly mistakes of wanna-dots”, Harvard Business Review, January: 91–100.
332. Moyer, K. (1996) “Scenario Planning at British Airways – a case study”, Long Range Planning, 29 (2): 172–181.
333. Mumford, E. and Hendricks, R. (1996) “Business process re-engineering RIP”, People Management, 2 May, pp. 22–29.
334. Murphy, B.L. (2007) “Locating social capital in resilient community-level emergency management”, Natural Hazards, 41 (2): 297–315.
335. Mwende, J. (2002) “Kenyans add too much realism to their crash exercise”, World News, The Times (London), 22 August.
336. Nahapiet, J. and Ghoshal, S. (1998) “Social capital, intellectual capital and organisational advantage”, Academy of Management Review, 23 (2): 242–266.
337. National Bureau of Standards (1979) Guideline for Automatic Data Processing Risk Analysis, FIPS PUB 65, Washington, DC: U.S. General Printing Office.
338. National Fire Protection Association (2004) NFPA 1600 Standard on Disaster/Emer-gency Management and Business Continuity Programs 2004 Edition. Online: http://www.nfpa.org/assets/files/PDF/NFPA1600.pdf> (accessed 25 July 2006).
339. National Fire Protection Association (2007) NFPA 1600 Standard on Disaster/ Emergency Management and Business Continuity Programs 2007 Edition, NFPA, 1 Batterymarch Park, Quincy, MA.
340. National Hi-Tech Crime Unit (2004) Hi-Tech Crime: The Impact on U.K. Businesses, London: NHTCU/NOP.
341. Nash, W.A. (1998) Schaum’s Outline of Theory and Problems of Strength of Materials, New York: McGraw-Hill.
342. NECSI (2008) About Complex Systems: New England Complex Systems Institute. Online: http://www.necsi.org/guide/study.html (accessed 20 January 2008).
343. Negroponte, N. (1996) Being Digital, New York: Vintage Books.
344. NERC (2002) Security Guidelines for the Electricity Sector, Version 1.0, 14 June, Princeton, NJ: North American Electric Reliability Council.
345. NFA (2003) RULE 2–38. Business Continuity and Disaster Recovery Plan, New York: National Futures Association.
346. Nielsen, J. (2006) “BCM & corporate governance – the chicken or the egg?” ContinuitySA. Online: http://www.continuitysa.co.za/Article1.asp (accessed 25 July 2006).
347. NIST (2002) Contingency Planning Guide for Information Technology Systems – Recommendations of the National Institute of Standards and Technology, NIST Special Publications (SP) 800–34, Washington: US Department of Commerce.
348. Nocera, J. (1995) “Fatal litigation”, Fortune, 132 (8): 60–74.
349. Nolan, R. (1979) “Managing the crises in data processing”, Harvard Business Review, 57 (2): 115–126.
350. Norton-Taylor, R (2008) “Recruits’ banks alerted after theft of laptop”, The Guardian, 21 January, p. 321.
351. O’Leary, M. (2006) “Can airlines recover after terror ordeal?” The Observer, 20 August, p. 14.
352. OCC (2006) Online: http://www.occ.treas.gov/pubs1.htm.
353. Olins, R. and Lynn, M. (1997) “A class disaster”, The Sunday Times (London), 16 November, p. 14.
354. Pabrai, U.O.A. (2005) “Contingency planning: business impact analysis”, Certification Magazine, May, pp. 30–31.
355. Panko, R.R. (1988) End User Computing, New York: Wiley.
356. Paraskevas, A. (2006) “Crisis management or crisis response system? A complexity science approach to organisational crises”, Management Decision, October, 44 (7): 892–907.
357. Parris, D. (1999) “Image conscious”, Survive, August, pp. 11–15.
358. Parthasarathi, P. (2005) Operational Risk Management – Business Continuity Planning, DBS.CO.IS Audit. No. 19/31.02.03/2004–05, Department of Banking Supervision, Mumbai: Reserve Bank of India.
359. Pascale, R.T. and Athos, A.G. (1982) The Art of Japanese Management, London: Penguin Books.
360. Paton, D. (2003) “Stress in disaster response: a risk management approach”, Disaster Prevention and Management, 12 (3): 203–209.
361. Pauchant, T. and Douville, R. (1993) “Recent research in crisis management: a study of 24 authors’ publications from 1986 to 1991”, Industrial and Environmental Crisis Quarterly, 7 (1): 43–66.
362. Pauchant, T. and Mitroff, I. (1988) “Crisis-prone versus crisis avoiding organisations: is your company’s culture its own worst enemy in creating crises?”, Industrial Crisis Quarterly, 2: 53–63.
363. Pauchant, T. and Mitroff, I. (1992) The Crisis-Prone Organisation, San Francisco: Jossey-Bass.
364. Perrow, C. (1997) Normal Accidents, New York: Basic Books.
365. Perry, K. (2000) “Cruise down the Swanee: Aurora’s maiden voyage halted”, The Guardian, 3 May, p. 5.
366. Peters, T.J. and Waterman, R.H. (1982) In Search of Excellence, New York: Harper & Row.
367. Petroni, A. (1999) “Managing information systems’ contingencies in banks: a case study”, Disaster Prevention and Management, 8 (2): 101–110.
368. Pettigrew, A.M. and Whipp, R. (1991) Managing Change for Competitive Success, Oxford: Basil Blackwell.
369. Pettigrew, A.M., Whipp, R. and Rosenfeld, R.H. (1989) “Competitiveness and the management of strategic change processes”, in A. Francis and P. Tharakan (eds) The Competitiveness of European Industry, London: Routledge.
370. Pew Internet and American Life Project (2007) Teens and Online Stranger Contact, 14 October. Online: http://www.pewinternet.org/pdfs/PIP_Stranger_Con-tact_Data_Memo.pdf (accessed 14 June 2008).
371. Pilger, J. (1998) Hidden Agendas, London: Vintage.
372. Pitt, M. (2008) The Pitt Review: Lessons Learned from the 2007 Floods, London: HMSO.
373. Pitt, M. and Goyal, S. (2004) “Business continuity planning as a facilities management tool”, Facilities, 22 (3/4): 87–99.
374. Plant, R. (1987) Managing Change and Making it Stick, London: Fontana.
375. Plunkett Research Ltd. (2006) Telecommunications Industry Center. Online: http://www.plunkettresearchonline.com.libaccess.fdu.edu/Profiles/Default.aspx? Industry=3 (accessed 12 July 2006).
376. Porter, M.E. (1980) Competitive Strategy, New York: The Free Press
377. Porter, M.E. (1985) Competitive Advantage, New York: The Free Press.
378. Powell, T.C. (2001) “Competitive advantage: logical and philosophical consider-ations”, Strategic Management Journal, 22: 875–888.
379. Power, M. (1997) The Audit Society: Rituals of Verification, Oxford: Oxford University Press.
380. Power, P. (1999) Business Continuity Management – Preventing Chaos in a Crisis, Management Action Notes, London: Department of Trade and Industry.
381. Pritchard, J.A.T. (1976) Contingency Planning, Manchester: NCC.
382. Prowse, R. (1998) “A legal moose on the loose?”, Motor Industry Management, October, p. 17.
383. Punch, M. (1997) Dirty Business, London: Sage.
384. Putnam, R. (1993) Making Democracy Work, Princeton: Princeton University Press.
385. Quinn, J.B. (1980) Strategies for Change, New York: Irwin.
386. Rahman, B. (2000) “Nuclear hopes dashed by furore”, Financial Times, 12 July, p. 2.
387. Raiffa, H. (1968) Decision Analysis, Reading, MA: Addison Wesley, cited in C. Smart and I. Vertinsky (1977) “Designs for crisis decision units”, Administrative Science Quarterly, 22: 640–657.
388. Ramprasad, A., Ambrose, P. and Komarov, M. (1998) “The power of stakeholders in continuity”, Disaster Recovery Journal, Fall, 11 (4): 11–13.
389. Ramsay, C.G. (1999) “Protecting your business: from emergency planning to crisis management”, Journal of Hazardous Materials, 65: 131–149.
390. Raphael, B., Meldrum, L. and McFarlane, A.C. (1995) “Does debriefing after psychological trauma work?”, British Medical Journal, 310: 1479–1480.
391. Rayport, J. and Sviokla, J. (1995) “Exploiting the virtual value chain”, Harvard Business Review, November–December: 75–85.
392. Reason, J. (1997) Managing the Risks of Organisational Accidents, Aldershot: Ashgate.
393. Reason, J. (2008) The Human Contribution – Unsafe Acts, Accidents and Heroic Recoveries, Ashgate: Farnham.
394. Red Cross (2008) “Leading CEOs launch alliance with American Red Cross to strengthen nation’s preparedness for disasters”, press release. Online: http://www.redcross.org/portal/site/en/menuitem.94aae335470e233f6cf911d-f43181aa0/?vgnextoid=96fc0f3cba57b110VgnVCM10000089f0870aRCRD &vgnextfmt=default.
395. Reed, R. and DeFillippi, R.J. (1990) “Causal ambiguity, barriers to imitation and sustainable competitive advantage”, Academy of Management Review, 15 (1): 88–102.
396. Regester, M. and Larkin, J. (1997) Risk Issues and Crisis Management, London: Kogan Page.
397. Reiman, K.M. (2002) “Position of the internal audit department in a BCP pro-ject”, in M. Wieczorek, U. Naujoks, and B. Bartlett (eds) Business Continuity: IT Risk Management for International Corporations, Berlin: Springer.
398. Rick, J. and Briner, R. (2000) Trauma Management vs. Stress Debriefing: What Should Responsible Organisations Do? London: HSE Books.
399. Rider, B. (2003) “RPO and RTO redefined for the decision maker”, Continuity Insights, Jan–Feb, 1 (1): 40.
400. Riel, V.C. (1995) Principles of Corporate Communications, London: Prentice Hall.
401. Risk Management (2002) “Dealing with disaster”, Risk Management, December, 49 (12): 12–17.
402. Robinson, J. (2006) “Measuring continuity”, Business Continuity Journal, 1 (1): 25–33.
403. Rohrer, Carly (2003) “Move retailers from dial-up to high-speed payment transac-tions”, Business Solutions. Online: http://www.bU.S.inesssolutionsmag.com/Articles/2003_11/031114.htm (accessed 7 August 2005).
404. Rothschild, M. (2006) “The threat from within: the evolution of cyber attacks”, Computer Technology Review, March/April, XXVI (2). Online: http://www.w-wpi.com (accessed 7 July 2006).
405. Royal Sun Alliance (1996) “The Manchester bombing incident” video.
406. Ryan, R. (2005) “BA staff begin returning to Heathrow”, The Guardian, 12 August.
407. Sarbanes-Oxley (2002) An Act to Protect Investors by Improving the Accuracy and Reliability of Corporate Disclosures made Pursuant to the Securities Laws, and for Other Purposes, 23 January.
408. Schein, E. (1992) Organisational Culture and Leadership, 2nd edn, San Francisco: Jossey-Bass.
409. Schneider, R.O. (2000) “Knowledge and ethical responsibility in industrial dis-asters”, Disaster Prevention and Management, 9 (2): 98–104.
410. Schwartz, H. (1987) “On the psychodynamics of organisational disaster”, Columbia Journal of World Disaster, 22, Part 1.
411. Searcy, D. (2005) “Consumer alert, technology: the journal report”, The Wall Street Journal, 18 July, p. R6.
412. Searle, D., Charter, D. and Bird, S. (2003), “Straw protests at spanish closure of Rock border”, The Times, 4 November, p. 11.
413. SEC (2002a) Interagency Paper on Sound Practices to Strengthen the Resilience of the U.S. Financial System. Online: http://www.sec.gov/news/studies/34–47638.htm (accessed 25 July 2006).
414. SEC (2002b) NYSE Rulemaking Self-Regulatory Organisations; Notice of Filing of Proposed Rule Change by the New York Stock Exchange, Inc. Relating to Business Continuity and Contingency Planning. Online: http://www.sec.gov/rules/sro/34– 46443.htm (accessed 25 July 2006).
415. SEC (2003) NASD Rulemaking re: Business Continuity Plans and Emergency Contact Information. Online: http://www.sec.gov/rules/sro/34–48503.htm (accessed 25 July 2006).
416. Semelka, S. (2007) “Hackers hit university’s staff records”, Knight Ridder Tribune Business News, May, 8 (1). Online: http://www.proquest.com/(accessed 7 April 2009).
417. Sheffi, Y. and Rice, J. (2005) “A supply chain view of the resilient enterprise”, MIT Sloan Management Review, Fall, 47 (1): 41–48.
418. Shipley, D. (1998) “Marketing strategies for growth, maturity and decline”, in C. Egan and M.T. Thomas (eds) The CIM handbook of Strategic Marketing, London: Butterworth-Heinemann.
419. Shrivastava, P. (1987a) Bhopal, London: Ballinger.
420. Shrivastava, P. (1987b) “Are we ready for another Three Mile Island, Bhopal, Tylenol?”, Industrial Crisis Quarterly, 1 (1): 2–4.
421. Shrivastava, P. and Mitroff, I. (1987) “Strategic management of corporate crises”, Columbia Journal of World Business, 22 (1): 5–11.
422. Shrivastava, P., Miller, D. and Miglani, A. (1991) “Understanding industrial crises”, Journal of Management Studies, 25, Part 4.
423. SHRM (2001) “Poll predicts change in the workplace as a result of terrorist attacks”. Online: www.shrm.org.
424. SHRM (2002) “HR implications of the attack on America”. Online: www.shrm.org.
425. Siegfried, W.A. (1998) “Guard against suits”, Design News, 53 (11): 230.
426. Simon, H.A. (1957) Administrative Behaviour, 2nd edn, New York: Macmillan.
427. Sinha, I. (2000) “Cost transparency: the net’s real threat to prices and brands”, Harvard Business Review, March–April: 43–50.
428. Siomkos, G.J. and Kurzbard, G. (1994) “The hidden crisis in product-harm crisis management”, European Journal of Marketing, 28 (2): 30–41.
429. Sipika, C., Smith, D. and Elliott, D. (1993) “Message in a bottle: Perrier”, Proceedings of the World Academy of Marketing, University of Istanbul, pp. 559–563.
430. Sirignano, M.A. (1997) “Unsafe hamburgers and unreasonably hot coffee”, LI Business News, 14: 7.
431. Skapinker, M. (2000) “FT survey”, FT Director, 31 March.
432. Slovic, P. (1998) “Perception of risk”, in R. Löfstedt and L. Frewer (eds) The Earthscan Reader in Risk and Modern Society, London: Earthscan Publications Ltd, pp. 31–43.
433. Smart, C. and Vertinsky, I. (1977) “Designs for crisis decision units”, Administrative Science Quarterly, 22: 640–657.
434. Smith, D. (1990) “Beyond contingency planning: towards a model of crisis management”, Industrial Crisis Quarterly, 4 (4): 263–275.
435. Smith, D. (2000) “Crisis management teams: issues in the management of operational crises”, Risk Management: An International Journal, 2 (3): 61–78.
436. Smith, D. and Elliott, D. (2007) “Exploring the barriers to learning from crisis organisational learning and crisis”, Management Learning, 38 (5): 519–538.
437. Smith, D. and Tombs, S. (1995) “Beyond self-regulation: towards a critique of self-regulation as a control strategy for hazardous activities”, Journal of Management Studies, 32 (5): 19–37.
438. Smith, J. and Frisby, J. (2004) “A five-step plan for comprehensive information security and privacy”, Bank Accounting and Finance, June, pp. 31–37.
439. Smith, M. and Sherwood, J. (1995) “Business continuity planning”, Computers and Security, 14: 14–23.
440. Smith, R. (1996) “Planning for contingencies”, Industrial Management and Data Systems, 96 (6): 27–28.
441. Smith-Spark, I. (2005) “New Orleans violence ‘overstated’”. Online: http://news.bbc.co.uk/1/hi/world/americas/4292114.stm (accessed 27 January).
442. Snellen, M. (2003) “How to build a ‘dark site’ for crisis management – using internet technology to limit damage to reputation”, Strategic Communication Management, April/May, 7 (3): 18–21.
443. Snyder, A.V. and Ebeling Jr, H.W. (1992) “Targeting a company’s real core com-petencies”, Journal of Business Strategy, 13 (6): 26–32.
444. Soo Hoo, K.J. (2000) “How much is enough? A risk management approach to computer security”, working paper, The School of Information Management and Systems (SIMS), The University of California, Berkeley. Online: www2.sims.berkeley.edu/resources/affiliates/workshops/econsecurity/econws/ 06.doc.
445. South China Morning Post (2000) 15 March. Online: http://www.globalarchive.ft.com/search-components/index.jsp (accessed 15 March 2000).
446. Spillan, J. and Hough, M. (2003) “Crisis planning in small businesses: importance, impetus and indifference”, European Management Journal, 21 (3): 398–407.
447. SPRING (2005) Technical Reference (TR19: 2005) on BCM. Online: http://www.spring.gov.sg/Content/WebPage.aspx?id=3179f0f0–0a7a-4142–905d-6f24bd7ddaa4> (accessed 25 July 2006).
448. Standards Australia (2004) BH 221: Business Continuity Management, 2nd edn, Sydney: Standards Australia.
449. Starbuck, W.H. (1996) “Unlearning ineffective or obsolete technologies”, IJTM (Special Publication on Unlearning and Learning) 11 (7/8): 725–737.
450. Starbuck, W.H. and Milliken, F.J. (1988) “Challenger: fine-tuning the odds until something breaks”, The Journal of Management Studies, 25 (4): 319–340 (retrieved 4 September 2009, from ABI/INFORM Global, Document ID: 1177177).
451. Starbuck, W., Greve, A. and Hedberg, B. (1978) “Responding to crisis”, Journal of Business Administration, spring. Reprinted in J. Quinn and H. Mintzberg (eds) (1992) The Strategy Process, Englewood Cliffs, NJ: Prentice Hall.
452. State Bank of Pakistan (2003) Risk Management Guidelines for Commercial Banks & DFIs, Karachi: State Bank of Pakistan, Central Directorate.
453. Stefanik, M. (2007) “Fear, uncertainty and doubt”. Online: http://mstefanik. spaces.live.com/blog/cns!E265B99124714E68!145.entry (accessed 2 October 2007).
454. Steves, B. (2006) “Ready, set... recall”, Insurance Journal, 8 May. Online: http://www.insurancejournal.com/magazines/west/2006/05/08/features/69887.htm (accessed 25 July 2006).
455. Stewart, T.A. and Champion, D. (2006) “Leading change from the top line”, Harvard Business Review, Jul/Aug, 84 (7/8): 90–97.
456. Stirpe, A. (1999) “Apple will focus on distribution in new year”, Channel Webnetwork. Online: http://www.crn.com/it-channel/18833092 (accessed 29 September 2007).
457. Stone, N. (1995) The Management and Practice of Public Relations, London: Macmillan.
458. Strohl Systems (1995) The Business Continuity Planning Guide, King of Prussia, PA: Strohl Systems.
459. Stucke, C. and Straub, D. (2005) “Business continuity and the protection of informational assets”, in D. Straub, S. Goodman and R. Baskerville (eds) Information Security and Management, New York: M E Sharpe.
460. Sun Microsystems (2001). Official Fudwatch Index. Online: java.sun.com/features/ fudwatch/ (accessed 29 January 2001).
461. Sun Microsystems (2007) “Think thin: thin client and server based computing group blog”, Online: http://blogs.sun.com/ThinkThin/entry/protocol_fud (accessed 2 October 2007).
462. Survive (1996) “A risk too far”, The Business Continuity Magazine, August, pp. 20–22.
463. Sutcliffe, K.M. and Vogus, T. (2003) “Organizing for resilience”, in K.S. Cameron, J.E. Dutton and R.E. Quinn (eds) Positive Organisational Scholarship: Foundations of a New Discipline, San Francisco: Berrett-Koehler, pp. 94–110.
464. Swartz, E., Elliott, D. and Herbane, B. (1995) “Out of sight, out of mind: the limitations of traditional information systems planning”, Facilities, 13 (9/10): 15–21.
465. Swartz, E., Elliott, D. and Herbane, B. (2003) “Greater than the sum of its parts: Business Continuity Management in the UK Finance Sector”, Risk Management – An International Journal, 5 (1): 65–80.
466. Tait, N. (2001) “Firestone in wider tyre recall”, Financial Times, 2 January.
467. Taleb, N.N. (2007) The Impact of the Highly Improbable, London: Penguin Books.
468. Tamburro, M. (2008) “Passenger criticises BA treatment”, BBC News online. Online: http://news.bbc.co.uk/1/hi/uk/7196128.stm (accessed 19 January 2008).
469. Tangen, S. and Seigel, M (2008) “ISO/PAS 22399 provides international best practice for preparedness and continuity management”, ISO Management Systems, January–February, pp. 5–9.
470. Taylor, A. (2000) “Jac Nasser’s biggest test”, Fortune, 18 September, 142 (6): 71–74.
471. ten Berge, D. (1990) The First 24 Hours, Oxford: Basil Blackwell.
472. Thomas, J.B., Clark, S.M. and Gioia, D.A. (1993) “Strategic sense-making and organisational performance – linkages among scanning, interpretation, action and outcomes”, Academy of Management Journal, 36: 239–270.
473. Tilley, K. (1998) “Fire shows disaster plans wanting”, Business Insurance, 5 October, 32 (40): 57.
474. Toft, B. and Reynolds, S. (1997) Learning from Disasters, 2nd edn, Leicester: Perpetuity Press.
475. Toigo, J.W. (2003) Disaster Recovery Planning, Preparing for the Unthinkable, 3rd edn, Englewood Cliffs, NJ: Prentice Hall.
476. Traynor, I. (2007) “Russia accused of unleashing cyberwar to disable Estonia”, The Guardian, 17 May, p. 9.
477. Tripsas, M. (2009) “Technology, identity, and inertia through the lens of ‘the digital photography company’”, Organization Science, 20 (2): 441–460, 479–480 (retrieved 14 September 2009, from ABI/INFORM Global, document ID: 1687270151).
478. Trompenaars, F. (1993) Riding the Waves of Culture, London: Nicholas Brearley Publishing.
479. Trosa, S. and Williams, S. (1996) cited in M. Bowerman, G. Francis, A. Ball and J. Fry (2002) “The evolution of benchmarking in UK local authorities”, Benchmarking: An International Journal, 9 (5): 429–449.
480. Tucker, E. (2006) “Business continuity planning”, in J.F. Broder (ed.) Risk Analysis and the Security Survey, 3rd edn, London: Butterworth-Heinemann.
481. Turchin, V. and Joslyn, C. (1999) “The metasystem in transition”, in F. Heylighen, C. Joslyn, and V. Turchin (eds) Principia Cybernetica Web (Principia Cybernetica, Brussels). Online: http://pespmc1.vub.ac.be/MST.html (accessed 27 June 2005).
482. Turnbull, N. (1999) Internal Control: Guidance for Directors on the Combined Code, London: Institute of Chartered Accountants in England and Wales.
483. Turner, B. (1976) “The organisational and interorganisational development of disasters”, Administrative Science Quarterly, 21: 378–397.
484. Turner, B. (1978) Man-Made Disasters, London: Wykeham.
485. Turner, B. and Pidgeon, N. (1997) Man-Made Disasters, 2nd edn, London: Butterworth-Heinemann.
486. UK Online for Business (2000) Business in the Information Age, London: Department of Trade and Industry.
487. UKresilience (2006) Civil Contingencies Act. Online: http://www.ukresilience.info/ccact/index.shtm (accessed 25 July 2006).
488. Vancoppenolle, G. (1999) “What are we planning for?” in A. Hiles and P. Barnes (eds) Business Continuity Management, London: Wiley.
489. Vasagar, J. and Tremlett, G. (2003) “Anglo-Spanish relations on the sick list as cruise liner sails out, The Guardian, 4 November, p. 3.
490. Vaughan, D. (1996) The Challenger Launch Decision: Risky Technology, Culture, and Deviance at NASA, Chicago: University of Chicago Press.
491. Vaughan, D. (1997) “The trickle-down effect: policy decisions, risky work, and the challenger tragedy”, California Management Review, 39 (2): 80–102.
492. Vodafone (2007) “Flooding at Vodafone UK headquarters fails to dampen employee spirits”, Vodaphone.
493. Wagner, C.G. (2006) Information security’s biggest enemy, The Futurist, July–August, p. 11.
494. Waldmeir, P. (2000) “Monitoring poses threat to cyber-anonymity”, Financial Times 11 May, p. 4.
495. Walker, B. and Meyers, J.A. (2004) “Thresholds in ecological and social– ecological systems: a developing database”, Ecology and Society, 9 (2): 3. Online: http://www.ecologyandsociety.org/vol9/iss2/art3/.
496. Walker, P. (2007) “Animal rights militants losing the war”, The Guardian, 1 May, p. 11.
497. The Wall Street Journal Report Online (2005) “The journal report”, The Wall Street Journal, 18 July, p. R2.
498. Walsh, C. (2001) “Leadership on 9/11: Morgan Stanley’s challenge”, HBS Working Knowledge: Leadership. Online: http://hbswk.hbs.edu/item.jhtml?id=2690&t= leadership> (accessed 7 July 2005).
499. Warr, P. (1990) “The measurement of wellbeing and other aspects of mental health”, Journal of Occupational Psychology, 63: 193–210.
500. Waterman, R.H., Peters, T. and Phillips, J.R. (1980) “Structure is not organisa-tion”, Business Horizons, 23 (3): 14–26.
501. Weick, K.E. (1993) “The collapse of sensemaking in organizations: the Mann Gulch disaster”, Administrative Science Quarterly, December, 38: 4.
502. Weiner, S. (1995) “Business risk, internal control and audit implications of EDI”, The CPA Journal, November, pp. 56–58.
503. Wieczorek, M., Naujoks, U. and Bartlett, B. (eds) (2002) Business Continuity: IT Risk Management for International Corporations, Berlin: Springer.
504. Wiersema, M. and Bowen, H.P. (2008) “Corporate diversification: the impact of foreign competition, industry globalization, and product diversification”, Strategic Management Journal, February, 29 (2): 118–132.
505. Wildavsky, A. (1988) Searching for Safety, New Brunswick, NJ: Transaction Press.
506. Wilkinson, S. (2004) “Focus group research”, in D. Silverman (ed.) Qualitative Research, Theory, Method and Practice, London: Sage.
507. Williams, A., Dobson, P. and Walters, M. (1989) Changing Culture, 2nd edn, London: Institute of Personnel Management.
508. Williams, D.M. (2001) Private communication with the authors.
509. Williams, R. (2007) “Global hackers threaten net security in cyber warfare aimed at top targets”, The Guardian Online. Online: http://www.guardian.co.uk/technology/2007/nov/29/hacking.news(accessed 25 January 2008).
510. Wilson, D.C. (1992) A Strategy of Change, London: Routledge.
511. Womack, J.P., Jones, D.T. and Roos, D. (1990) The Machine That Changed the World, New York: Rawson Associates.
512. Woodman, P. (2006) Business Continuity Management, Chartered Management Institute. Online: http://www.ukresilience.info/publications/bcm2006.pdf (accessed 28 August 2006).
513. Worren, N., Ruddle, K. and Moore, K. (1999) “From organisational development to change management: emergence of a new profession”, The Journal of Applied Behavioural Science, 35 (3): 273–286.
514. Wu, T. and Yoo, C.S. (2007) “Keeping the internet neutral?: Tim Wu and Christopher Yoo Debate”, Federal Communications Law Journal, 59 (3): 575–592, 456 (retrieved 30 April 2008 from ABI/INFORM Global database).
515. Yeoh, P. and Roth, K. (1999) “An empirical analysis of sustained advantage in the U.S. pharmaceutical industry: impact of firm resources and capabilitites”, Strategic Management Journal, 20: 637–653.
516. Zsidisin, G.A., Melnyk, S.A. and Ragatz, G.L. (2005) “An institutional theory perspective of business continuity planning for purchasing and supply chain management”, International Journal of Production Research, 43 (15/16): 3401–3420.