| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 1.84 MB | Adobe PDF |
Authors
Advisor(s)
Abstract(s)
Com o avanço tecnológico como uma constante da nossa realidade, a forte dependência das tecnologias por parte das organizações é cada vez mais um fator que influencia as decisões. Desta forma surgem novas preocupações diretamente relacionadas com os Sistemas de Informação (SI) no âmbito da gestão de risco, controlo interno, segurança, entre outras áreas. A dependência dos SI implica que estes sejam vistos como partes essenciais de muitos dos processos das organizações e as suas eventuais falhas, como situações críticas para a continuidade do negócio. Para garantir a resiliência da organização como um todo, importa que existam medidas bem definidas e testadas, que visem a recuperação do negócio em caso de desastre e não menos importante, a continuidade das operações vitais com as condições mínimas, nos momentos imediatos após os eventos disruptivos. Um bom Plano de Recuperação de Desastre (PRD) em sintonia com Planos de Continuidade de Negócio (PCN) são fatores críticos de sucesso em organizações com um nível de maturidade elevado, que demonstram perante os seus Stakeholders a capacidade de ultrapassar adversidades garantindo a continuidade e viabilidade dos seus serviços/produtos. A auditoria a PCN visa atestar que os procedimentos definidos são adequados à estrutura da organização, com meios suficientes para a sua execução a qualquer momento. A auditoria tem um papel determinante neste domínio confirmando a existência de testes e a conformidade entre os resultados e o que foi planeado numa fase inicial. Com o objetivo de reunir um conjunto das melhores práticas de Continuidade de Negócio e que deverão ser objeto de auditoria, a presente investigação aborda diversos conceitos neste âmbito de forma a sustentar através da análise e revisão bibliográfica, o trabalho empírico que visa esclarecer se estas práticas são de facto tidas como relevantes e aplicadas por profissionais com experiência em Continuidade de Negócio.
With technological advance as a constant of our reality, the strong dependence on technologies on the part of organizations is increasingly a factor that influences decisions. Thus, new concerns directly related to Information Systems (IS) arise in the areas of risk management, internal control, security, among other areas. Dependence on IS implies that they are essential parts of many organizations processes and their eventual failures critical situations for business continuity. To guarantee the resilience of the organization as a whole, it is important that well defined and tested measures are in place, aimed at the recovery of the business in case of disaster and not less important, the continuity of vital operations with minimum conditions, in the immediate moments after disruptive events. A good Disaster Recovery Plan (DRP) in line with Business Continuity Plans (BCP) are critical success factors in organizations with a high level of maturity, which demonstrates to Stakeholders the ability to overcome adversities ensuring the continuity and viability of their services/products. The BCP audit aims to attest that the defined procedures are adequate to the structure of the organization, with sufficient means for their execution at any time. The audit plays a determining role in this area, it also confirms the existence of tests and compliance between results and what was planned at an early stage. With the objective of sharing some of the best practices on Business Continuity that should be Audited, this investigation addresses some of the most important definitions so that through the bibliographic analysis and review it is possible to support the field work that tries to find if this practice is considered relevant and are applied by professionals with Business Continuity experience.
With technological advance as a constant of our reality, the strong dependence on technologies on the part of organizations is increasingly a factor that influences decisions. Thus, new concerns directly related to Information Systems (IS) arise in the areas of risk management, internal control, security, among other areas. Dependence on IS implies that they are essential parts of many organizations processes and their eventual failures critical situations for business continuity. To guarantee the resilience of the organization as a whole, it is important that well defined and tested measures are in place, aimed at the recovery of the business in case of disaster and not less important, the continuity of vital operations with minimum conditions, in the immediate moments after disruptive events. A good Disaster Recovery Plan (DRP) in line with Business Continuity Plans (BCP) are critical success factors in organizations with a high level of maturity, which demonstrates to Stakeholders the ability to overcome adversities ensuring the continuity and viability of their services/products. The BCP audit aims to attest that the defined procedures are adequate to the structure of the organization, with sufficient means for their execution at any time. The audit plays a determining role in this area, it also confirms the existence of tests and compliance between results and what was planned at an early stage. With the objective of sharing some of the best practices on Business Continuity that should be Audited, this investigation addresses some of the most important definitions so that through the bibliographic analysis and review it is possible to support the field work that tries to find if this practice is considered relevant and are applied by professionals with Business Continuity experience.
Description
Mestrado em Auditoria
Keywords
Auditoria Planos de continuidade de negócio Resiliência Sistemas de informação Audit Business continuity plans Resilience Information systems
Citation
Bruno, D. M. F. (2021). Auditoria a planos de continuidade de negócio no âmbito dos sistemas de informação. (Dissertação de mestrado não publicada). Instituto Politécnico de Lisboa, Instituto Superior de Contabilidade e Administração de Lisboa. Disponível em http://hdl.handle.net/10400.21/13267