Synergy potential between business continuity management and incident response management and the resulting added value to strengthen the competitiveness of companies in the market

Christoph Clavadetscher and Peter E. Fischer
Additional contact information
Christoph Clavadetscher: La Mobilière – Swiss Mobiliar Insurance Company Ltd, Switzerland
Peter E. Fischer: Professor Emeritus, Lucerne University of Applied Sciences and Arts, Switzerland

Journal of Business Continuity & Emergency Planning, 2025, vol. 19, issue 1, 77-96

Abstract: To identify the synergy potential between business continuity management (BCM) and incident response management (IRM), the two concepts must be considered in the business context of cyber resilience management. A professional information security management focuses on protecting the confidentiality, integrity and availability of data and information during normal operations. Its main process is through proactive risk management to minimise possible failures and threats. BCM unfolds its protection of core business processes in the event of a cyber incident by swift detection, response and recovery. IRM is the technical process of cyber crisis management, whereby existing IRM processes are activated in the event of a cyber incident. Besides the key differences in terms of the protection goals or type of measures, several synergy potentials can be identified between BCM and IRM. Furthermore, both BCM and IRM place great importance on employee awareness in cyber risk and continuous improvement. These are key elements to sustainably strengthen cyber resilience in the continuity and stabilisation phase. Both a business-orientated BCM and an IT-focused IRM mitigate the consequences of a cyberattack. Utilising the synergies of BCM and IRM ensures optimum business continuity, minimal loss impact and rapid restoration of normal operations. This article is also included in The Business & Management Collection which can be accessed at https://hstalks.com/business/.

Keywords: cyber resilience management; business continuity management; incident response management; cyber risk protection; cyber insurance; information and cyber security (search for similar items in EconPapers)
JEL-codes: M1 M10 M12 (search for similar items in EconPapers)
Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
https://hstalks.com/article/9680/download/ (application/pdf)
https://hstalks.com/article/9680/ (text/html)
Requires a paid subscription for full access.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:aza:jbcep0:y:2025:v:19:i:1:p:77-96

Access Statistics for this article

More articles in Journal of Business Continuity & Emergency Planning from Henry Stewart Publications
Bibliographic data for series maintained by Henry Stewart Talks ().