Business Continuity Planning in a Hospital Environment II

Risk Assessment and Efficiency Measurement

Abstract

In Hungary, the identification and designation of critical infrastructures of the healthcare sector began in 2016, including the subsector of the inpatient care. The Act on the identification, designation and protection of critical systems and facilities and its implementing decree requires  operators of designated system components to prepare an  Operator Security Plan. The ISO 22301 standard, which is a  proven in international practice for operator security  planning, is available and describes how professionals can  design Business Continuity Management Systems (BCMS). Additional requirements for the health sector are set out in a separated government decree on the identification,  designation and protection of health-critical systems and  facilities. In public administration and thus in healthcare  sector, the practical application of a profit-oriented  approach, and the focusing on the maintenance of “production”, is not the common practice. The concepts of  profit and production are difficult to apply. The study  examines the fundamentals of BCM thus the Risk Analysis,  and Key Performance Indicators (KPI), as the BCMS  efficiency measurement in public health.