An analysis of business continuity practices within Maltese companies

Abstract

Purpose: The aim of the study is to analyse the extent to which Maltese companies operating in the financial and non-financial industries embrace the concept of business continuity plan, and to assess its overall implementation. The study explores the benefits and challenges of business continuity plan implementation. Additionally, it determines the attitude and role of the internal audit function towards business continuity plan assessment.

Design: In order to achieve these objectives, face-to-face interviews were conducted with senior management responsible for business continuity, or other individuals involved in business continuity related decision making, as well as internal auditors within local companies.

Findings: Results demonstrate that all financial companies and some of the non-financial companies have a formal business continuity system. Some non-financial companies are currently developing the plan or intend to initiate the process. There is an element of similarity among those companies with an established plan since there is lack of regular testing and awareness among operational employees. Companies seem to understand the benefits that the business continuity plan delivers. The identified challenges that may hold back business continuity developments are lack of budget and absence of knowledge of business continuity plan. The attitude towards business continuity plan assessment varies across companies, with some performing an independent audit review or self-review.

Conclusion: The majority of the companies, mostly the non-financial ones, still have some way to go in order to have a well-integrated continuity culture and high level of maturity. This is due to the fact that such companies are either laid back in the process, lack awareness, or do not perform testing and an independent review.

Value: This study provides information through recommendations on how local companies can enhance their continuity culture and the maturity of the business continuity plan. Furthermore, it can be used as a benchmark between companies. This study is also feasible to those companies which do not have an established plan as they can understand its importance.