Business Continuity Management

Schinner, Zimmermann und Hoyer erklären das Thema Business Continuity Management verständlich, praxisnah und ohne unnötige Komplexität. Sie zeigen, wie Organisationen erkennen, welche Prozesse wirklich kritisch sind, welche Ressourcen sie im Notbetrieb benötigen und wie aus Plänen handlungsfähige Strukturen entstehen. Schritt für Schritt führt der Leitfaden durch die zentralen Bausteine eines BCMS nach BSI-Standard 200-4: von Business Impact Analyse und Risikoanalyse über Strategien, Geschäftsfortführungs- und Wiederanlaufpläne bis hin zu Alarmierung, Stabsarbeit, Kommunikation, Übungen und kontinuierlicher Verbesserung.

»Business Continuity Management«: Schinner, Zimmermann, and Hoyer explain the topic of business continuity management in a clear, practical way, without unnecessary complexity. They show how organizations can identify which processes are truly critical, what resources they need during emergency operations, and how plans can be turned into actionable structures. Step by step, the guide walks readers through the key components of a BCMS in accordance with BSI Standard 200-4: from business impact analysis and risk analysis, through strategies, business continuity and recovery plans, to alerting, crisis management, communication, drills, and continuous improvement.

Prof. Dr. Alexander Schinner earned his doctorate in computer-oriented theoretical physics and has been working on various aspects of IT security for over 35 years. His areas of expertise include security consulting, crisis communication, incident response, and security awareness. Professionally, he serves as a partner at BDO Cyber Security GmbH, where he and his team assist clients in responding to security incidents. In addition, he is a lecturer at the DHBW and a professor of information security at the Würzburg-Schweinfurt University of Applied Sciences. Occasionally, he also takes the stage as a hacker or guides audiences on a “harbor tour” through the dark web.

Stefan Zimmermann studied materials engineering and gained practical experience as a quality management representative and auditor in the automotive industry before transitioning to the consulting sector. His focus is on integrated management systems, particularly quality, information security, and business continuity management systems. He is a certified auditor for ISO 9001, IATF 16949, ISO 27001, and ISO 22301. At BDO Cyber Security GmbH, he serves as manager of the BCM/ITSCM division and has given guest lectures at institutions including the Zittau-Görlitz University of Applied Sciences.

Jan Hoyer holds a degree in Information Systems Engineering and has been deeply involved in information security, business continuity management, and risk management for over 10 years. His areas of expertise include the implementation and operation of management systems in accordance with ISO 27001 and BSI IT-Grundschutz, as well as business continuity management. Professionally, he works as a consultant on BCMS and ISMS at BDO Cyber Security GmbH, where he supports clients in the implementation and continuous improvement of business continuity management and information security systems. He is a certified auditor for ISO 27001, a BSI IT-Grundschutz Practitioner, and an Information Security Officer.

• By (author) Jan Hoyer
• By (author) Alexander Schinner
• By (author) Stefan Zimmermann