Building a business continuity plan operating model
Koski, Saara (2026)
2026
All rights reserved. This publication is copyrighted. You may download, display and print it for Your own personal use. Commercial use is prohibited.
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-202603114146
https://urn.fi/URN:NBN:fi:amk-202603114146
Tiivistelmä
The purpose of this thesis was to develop an operational model for building a business continuity plan (BCP) for the case company. The research was conducted to respond to the need to create a structured approach to strengthen organizational resilience.
The theoretical basis of the thesis is an overview of risk management, enterprise risk management (ERM), business impact analysis (BIA) and business continuity planning (BCP). The experimental part uses an action research approach, which includes a pilot study and participatory methods to involve stakeholders in the development and refinement of the operational model. The research method is based on a literature review and an analysis of the case company's existing ERM framework. This process supports the identification of key elements of the case company's risk assessment, business impact analysis and continuity planning and the integration of these elements into a coherent whole.
The results showed that the systematic development of a business continuity plan based on ERM principles and guided by BIA helps organizations anticipate, prepare for and respond effectively to operational risks and disruptions. The operating model provides clear guidelines for the design, implementation and continuous improvement of business continuity plans.
Implementing this operating model strengthens the organization's resilience and supports long-term sustainability, as well as creating a culture of continuous improvement in the case company. The approach developed in this thesis can be applied to various organizational environments and provides a generally applicable framework for strengthening business continuity management practices.
The theoretical basis of the thesis is an overview of risk management, enterprise risk management (ERM), business impact analysis (BIA) and business continuity planning (BCP). The experimental part uses an action research approach, which includes a pilot study and participatory methods to involve stakeholders in the development and refinement of the operational model. The research method is based on a literature review and an analysis of the case company's existing ERM framework. This process supports the identification of key elements of the case company's risk assessment, business impact analysis and continuity planning and the integration of these elements into a coherent whole.
The results showed that the systematic development of a business continuity plan based on ERM principles and guided by BIA helps organizations anticipate, prepare for and respond effectively to operational risks and disruptions. The operating model provides clear guidelines for the design, implementation and continuous improvement of business continuity plans.
Implementing this operating model strengthens the organization's resilience and supports long-term sustainability, as well as creating a culture of continuous improvement in the case company. The approach developed in this thesis can be applied to various organizational environments and provides a generally applicable framework for strengthening business continuity management practices.