The evaluating consistency standards of business continuity management sector, Department of Disease Control

Abstract

This study is evaluation research and the purposes were to evaluate the level of Business Continuity Management in health agencies under the Department of Disease Control (DDC) and compare business continuity management between the DDC’s national- and regional-level agencies. The samples included 30 health agencies under the DDC. The tool used for the study is an evaluation form for compliance of business continuity management developed by the study team. The statistics used for data analysis included frequency, percentage, mean, standard deviation, and t-test. The results of the study revealed that the DDC-affiliated agencies had achieved an overall score with respect to compliance with the standard requirements for business continuity management at a high level (X ̅ = 1.69), with the planning aspect achieving the highest score, followed by the performance evaluation, and the operations (X ̅ = 1.89, 1.83, and 1.76, respectively), while the improvement aspect received the lowest average score (X ̅ = 1.33). Based on the evaluation of average scores from 36 indicators of standard requirements, it was found that the indicator receiving the lowest average was the implementation of documented policy announcement on business continuity management, followed by analysis of the needs and expectations of customers and stakeholders, corrective actions and preventive actions to prevent nonconformity, reporting to follow-up on corrective actions, and exercising and testing of business continuity plan (X ̅ = 1.00, 1.03, 1.13, 1.13, and 1.20, respectively). Regarding the comparison study of business continuity management between the DDC’s national- and regional-level agencies, an overall assessment and the leadership, the operations, and the improvement aspects were found to have statistically significant difference of 0.05, while the organization context, planning, and support and improvement aspects had no statistically significant difference. To ensure efficient operations and compliance with the standard requirements with respect to business continuity management, senior management at DDC-affiliated organizations are recommended to review and announce a written policy on business continuity management so as to fulfil the commitment to implementing the activities that cover the survey of the needs and expectations of customers and stakeholders, prioritization of activities in support of the products, and provision of services that responds to the actual needs and appropriate expectations. In addition, the executive committee should also actively support the implementation of corrective actions and prevention of nonconformity identified through performance evaluation. Moreover, exercising and testing of the business continuity plan based on good international practices are also encouraged so as to ensure continued improvement of existing business continuity plan, concrete implementation of the plan, and periodical review. This will enable organizations to respond to and recover from disruptive incidents when they arise.