Determinants of the critical success factor of disaster recovery planning for information systems
Authors:
- Wing S. ChowWCWing S. Chow
- Wai On HaWHWai On Ha
- 17 July 2009
- journal article
- Published by Emerald Publishing in Information Management & Computer Security
- Vol. 17 (3) , 248-275
Abstract
Purpose: Recent disaster recovery planning (DRP) literature has mainly focused on qualitative research, while neglecting the quantification of critical success factors (CSFs) for information systems function (ISF). This paper aims to address this issue.Design/methodology/approach: This paper first conducts an extensive literature review, and then identifies 62 DRP measurement items for ISF. A questionnaire survey, which is based on these 62 measurement items, is used for data collection, and 129 managers of DRP in ISF participate in this paper.Findings: Through the use of convergent factoring analysis, this paper identifies ten DRP CSFs for ISF, they are: DRP documentations, DRP steering committee and DRP testing, DRP policy and goals, DRP training, DRP maintenance and staff involvement, DRP minimum IS processing requirements, top management commitment to DRP, prioritization IS functions/services, external, off‐site back‐up system, and internal, and on‐site back‐up system.Originality/value: This paper determines success factors based on a set of decision variables gathered from an extensive literature review in DRP in information systems.Keywords
This publication has 41 references indexed in Scilit:
- Preparing and Auditing an is Security Incident-Handling PlanEDPACS, 1999
- An Audit Work Program for Reviewing is Disaster Recovery Plans (Conclusion)EDPACS, 1998
- A GUIDE TO PLANNING FOR THE BUSINESS RECOVERY OF AN ADMINISTRATIVE BUSINESS UNITEDPACS, 1997
- Business continuity planningComputers & Security, 1995
- The Function of a Business Continuity PlanEDPACS, 1995
- Data Processing Disaster Recovery Planning Considerations for Tandem NetworksEDPACS, 1994
- Automated Disaster Recovery Plan Auditing: Prospects for Using Expert Systems to Evaluate Disaster Recovery PlansEDPACS, 1994
- Auditing the Disaster Recovery PlanEDPACS, 1993
- Performing a Business Impact AnalysisEDPACS, 1991
- Evaluating Data Security, The Initial ReviewJournal of Information Systems Management, 1988