as

1. Ҿ཰ᔼၮ࡭ុᆅ౛‫ೌמ‬Ћн
Ҟ ᒵ
ಃ΋ക ߻‫ق‬ ...........................................................................................................1
1.1! ጔଆ ..................................................................................................1
1.2! Ћнϣ৒Ϸ٬Ҕᇥܴ ......................................................................3
1.3! ஑ԖӜຒှញ ..................................................................................5
ಃΒക Ҿ཰ᔼၮ࡭ុᆅ౛ϟಏ ...........................................................................11
2.1! ୯ሞ BCM ௢৖౜‫ݩ‬ .......................................................................11
2.1.1! ᐞࢪʏફՋើ॥ᓀᆅ౛኱ྗ AS/NZS4360:1999 ...............17
2.1.2! म୯኱ྗ‫཮ڐ‬ PAS 56 ᔼၮ࡭ុᆅ౛ࡰᏤᆜा………….20
2.1.3! ऍ୯ٛО‫্ؠ཮ڐ‬٣ࡺ/ᆙ࡚ᔈᡂᆅ౛Ϸᔼၮ࡭ុी
ฝ኱ྗ (NFPA1600).............................................................23
2.1.4! ISO 17799 ၗૻӼӄ኱ྗ....................................................26
2.1.5! DRII Professional Practices...................................................27
2.1.6! ཥу‫ڵ‬ᔼၮ࡭ុᆅ౛ࢎᄬϷ኱ྗ .......................................29
2.2! BCM ௢୏ࢎᄬϷࢬำ ....................................................................36
ಃΟക Ҿ཰॥ᓀຑ՗Ϸ฼ౣೕჄ .......................................................................42
3.1! Ҿ཰॥ᓀϩ‫݋‬Ϸਢ‫ٯ‬ᇥܴ ..............................................................42
3.2! ᔼၮፂᔐϩ‫݋‬ ..................................................................................51
3.3! ᔼၮ࡭ុᆅ౛฼ౣೕჄ ..................................................................56
3.4! ൺচ฼ౣᒧ᏷ ..................................................................................63
ಃѤക Ҿ཰࡭ុीฝว৖ ...................................................................................70
4.1! ᆙ࡚ᔈᡂीฝೕჄ ..........................................................................70
4.2! Ӓᐒྎ೯ीฝೕჄ ..........................................................................71
4.2.1! ࡌҥӒᐒೀ౛λಔ .............................................................72
4.2.2! Ӓᐒ٣ҹϐϩᜪ .................................................................73
4.2.3! Ӓᐒૻ৲ୀෳ .....................................................................73
I

2. 4.2.4! Ӓᐒ‫ྗޑ‬ഢϷႣٛ .............................................................74
4.2.5! Ҿ཰Ӓᐒ‫ޑ‬௓‫ڋ‬Ϸೀ౛ .....................................................74
4.2.6! Ӓᐒೀ౛ϐࢬำϷำ‫ׇ‬ .....................................................75
4.2.7! ࡌҥӒᐒྎ೯ीฝ .............................................................76
4.2.8! ࡰࢴӒᐒ٣ҹว‫ق‬Γ .........................................................76
4.3! ൺচीฝೕჄ ..................................................................................81
ಃϖക ၗྍྗഢǵෳ၂ᆶ૽ግ ...........................................................................87
5.1 ၗྍྗഢ………………………………………………………...…88
5.2! ᄽግᆶෳ၂ ......................................................................................89
5.3! ᇡ‫ޕ‬ᆶ૽ግ ......................................................................................92
5.4! ीฝᆢៈϷᡂ‫׳‬ᆅ౛ ......................................................................95
ಃϤകʳ ่ፕ ...........................................................................................................97
ୖԵЎ᝘ ...................................................................................................................99
ߕᒵ ...........................................................................................................................101
ߕᒵ 1-1 XXX Ҿ཰ࡌ࿼ BCM ϣ৒.....................................................................101
ߕᒵ 1-2 XXX ଄ߎϦљࡌ࿼ᔼၮ࡭ុीฝϐ࿶ᡍ ...........................................105
ߕᒵ 2 Ҿ཰॥ᓀϩ‫݋‬ ..........................................................................................132
ߕᒵ 3 BCM ᕮਏຑ՗߄.....................................................................................146
II

3. ߄Ҟᒵ!
߄ 1 ӄౚ‫্ؠ‬ൺচᆶᔼၮ࡭ុೕჄ࣬ᜢ‫ݤ‬ೕ༼᏾߄ ........................................14
߄ 2! FEMA CAR / NFPA 1600 / BSI PAS56 / DRII Professional Practices
ཷॊ ...............................................................................................................34
߄ 3! FEMA CAR / NFPA 1600 / BSI PAS56 / DRII Professional Practices
Кၨ߄ ...........................................................................................................36
߄ 4! Ҿ཰॥ᓀϐϣ఼ᆶਢ‫ٯ‬ϟಏ ........................................................................46
߄ 5! ॥ᓀᆅ౛ᆶᔼၮ࡭ុᆅ౛ϐКၨ߄ ............................................................51
߄ 6! ᔼၮፂᔐϩ‫ޑ݋‬ԋ݀՗ीᆶ୺ՉБԄ ........................................................54
߄ 7! Ҿ཰ᔼၮфૈϩᜪጄ‫ٯ‬ ................................................................................56
߄ 8! BCM ൻᕉύϐ RACI ୖᆶ‫ޣ‬.......................................................................69
߄ 9! Ӓᐒೀ౛λಔᖄ๎Γ঩Ӝнጄ‫ٯ‬ ................................................................72
߄ 10! Ӓᐒ٣ҹϐϩᜪ ..........................................................................................73
߄ 11! Ҿ཰Ӓᐒ٣ҹೀ౛ࢗਡ߄...........................................................................78
߄ 12! Ҿ཰Ӣᔈ SARS ٣ҹӒᐒೀ౛ᖂܴዺጄ‫ٯ‬ ..............................................80
߄ 13! Ҿ཰ᔼၮൺচλಔҺ୍ጓಔ߄ ..................................................................82
߄ 14! Ӓᐒวғࡕ 24 λਔϣ‫ޑ‬ൺচࢬำ ............................................................84
߄ 15! Ӓᐒวғࡕ߻ 7 Ϻϐൺচࢬำ ..................................................................85
߄ 16! Ӓᐒวғࡕ߻ 7~14 Ϻϐൺচࢬำ ............................................................86
߄ 17! ᄽግ‫ࠠޑ‬ԄϷБ‫ݤ‬ ......................................................................................90
III

4. კҞᒵ!
კ 1! AS/NZS 4360BCM ࣴᔕำ‫ׇ‬............................................................………18
კ 2! PAS56 ගр BCM ‫ޑ‬ำ‫ׇ‬..............................................................................21
კ 3! BCM ᆶ‫ځ‬дᆅ౛ीฝϐᜢ߯.......................................................................21
კ 4! BCM ϐൻᕉᆢៈკ......................................................................................23
კ 5! SPRING ϐᇡ᛾ࢬำ .....................................................................................31
კ 6! ཥу‫ڵ‬ᔼၮ࡭ុʏ‫্ؠ‬ൺচ୍ܺ‫ٮ‬ᔈ୘኱ྗࢎᄬ ....................................33
კ 7! Ҿ཰ᔼၮ࡭ុᆅ౛(BCM)௢୏ࢬำ.............................................................41
კ 8! ӚᅿҾ཰॥ᓀ‫ྍٰޑ‬ ....................................................................................47
კ 9! Ҿ཰॥ᓀϩ‫݋‬ ................................................................................................48
კ 10! ॥ᓀᆅ౛ኳԄ ..............................................................................................49
კ 11! ॥ᓀᆅ౛ᆶ BCM ‫ޑ‬ᜢ߯(ᐞࢪ AS/NZS 4360 ॥ᓀᆅ౛ࢎᄬ) ................50
კ 12! Ҿ཰ᔼၮፂᔐϩ‫݋‬ᆶ॥ᓀຑ՗‫ޑ‬ၸำ ......................................................52
კ 13! Ҿ཰ᔼၮፂᔐϩ‫ࢬ݋‬ำᇥܴ ......................................................................53
კ 14! BCP ࢎᄬว৖ၸำ......................................................................................57
კ 15! Ӓᐒೀ౛ϐࢬำ ..........................................................................................75
კ 16! Ӓᐒೀ౛ϐำ‫ׇ‬ ..........................................................................................75
კ 17! BCM ‫ޑ‬ёҔ‫܄‬ϐᆢ࡭ൻᕉ.........................................................................87
IV

5. ಃ΋കʳ ߻‫ق‬
1.1 ጔଆ
྽Ҿ཰ᔼၮӢࡺค‫ݤ‬ග‫ٮ‬Вத‫୍ܺޑ‬ᆶၮբਔǴ཮೷ԋԖ‫׎‬Ϸค‫׎‬΢‫ޑ‬ཞѨǴ
Ԗ‫׎‬΢‫ޑ‬ཞѨхࡴ଄୍ԏΕᆶѱ൑՞Ԗ౗ǴԶค‫ޑ׎‬ཞѨ߾ቹៜҾ཰‫׎‬ຝ฻ǹӵ
ВДӀεОǵᖄྷᆶ๮ٖႝηεОǵΐΒ΋εӦ᎜ǵԤЗܿБࣽᏢ༜୔εОǵߎ
ႽႝηО‫ؠ‬ǵયಹᆶਲ޲ረ॥ǵ๮ૐȐӜђࡂǵε༜ǵଭϦȑ‫ޜ‬ᜤ٣ҹǵᆒ‫ݨ‬О
‫ؠ‬ᛈࣆǵᝳࢪεОǵߥӄϦљᅱӺԾหਢǵѠ᡼ሌՉߎᑼьหሦ٣ҹΏԿ౛ࡓ‫ݤ‬
ࡓ٣୍‫܌‬ၗߎหሦǵ࿥ࢬགϐቹៜ฻Ǵ‫্ؠ‬٣ࡺᇸ‫ޣ‬ቹៜϦљ/ঁΓ‫ޑ‬଄୍ԏΕᆶ
ѱ൑՞Ԗ౗Ǵख़‫ޣ‬ቹៜ‫཮ޗ‬જ‫ׇ‬ᆶ୯ৎӼӄǶࡺԜǴ॥ᓀᆅ౛πբϐ௢৖ςॐӧ
࣭࿋ǴЪߚᐱ๓‫׳يځ‬ሡঋ๓ϺΠǶ
ӄౚ߈ԃٰࣁӢᔈᛈࣆǵᏯ‫ݾ‬ǵY2KӒᐒǵᗮ॥/ረ॥ǵН‫܈ؠ‬ଳ‫ײ‬฻Ϻ‫ؠ‬ǵ
SARSǵࣗԿΓࣁᆸᄄ฻٣ҹ٬ᔼၮค‫ុ࡭ݤ‬Ǵ911‫װ‬ᔐ٣ҹϷьᆧিᗮ॥ᄇۭᜬ
ᙟΑऍ୯ჹ‫ܭ‬॥ᓀᆅ౛‫ޑ‬ᇡ‫ޕ‬ǴԶѠ᡼߾‫ډڙ‬SARS‫᠍ߟޑ‬ᡣҾ཰ख़ཥ‫ׯ‬ቪ॥ᓀᆅ
౛‫ޑ‬ӦՏǴ೭΋Ϫ೿ࡨᄐภжሽ‫܌‬ඤ‫ޑڗ‬࿶ᡍǶၸѐǴҾ཰ᇡࣁ‫׫‬ၗ॥ᓀᆅ౛ࢂ
΋ҹόኦԋҁਏ੻‫ޑ‬πբǴਸό‫্ؠޕ‬วғ‫׫‬Εख़ࡌ‫܌‬ሡ࿶຤ࠅଯၲႣٛπբ࿶
຤ϐኧΜ७а΢Ǵ‫़ځ‬ғ‫ޑ‬ୢᚒςߚख़ࡌ‫܈‬ൺচѸाᔼၮࢬำǴ‫҉ࢂޣࣗ׳‬ᇻଏ
рѱ൑Ǵಖ่Ҿ཰ғ‫وڮ‬ΕᐕўǶണՕྷxь‫ݢ‬ѭလࢶ‫܌‬๱ϐȬӒᐒᆅ౛ȭ΋ਜύ
ගϷȨӵ݀΋ৎҾ཰ԾᇡؒԖ॥ᓀǴ೭ৎҾ཰൩Ӹӧཱུε‫ޑ‬॥ᓀȩ
ǴԜ҅‫ڥ‬ᔈ๮౰
ႥЎϯၗౢߥӸಔᙃ‫܌‬ϦѲ‫ޑ‬΋໨ፓࢗൔ֋Ǵၗ਑ᡉҢǴШຩε༺ϣଯၲ54%ϐҾ
཰ค‫ݤ‬ӣൺၮբ‫ޑ‬ЬाচӢࢂǴؒԖ‫ۓڋ‬ᆙ࡚ᔈᡂᆶӣൺीฝǴᏤठΓ঩คவᔈ
ᡂǴаठόૈӧന‫ז‬ਔ໔ϣӣൺᔼၮǹਥᏵШཥεᏢ໺ኞࣴ‫܌ز‬ϐࣴ‫ز‬Ψว౜Ǵ
Ѡ᡼߻500εҾ཰ύϝԖ34%Ҿ཰คӒᐒᔈᡂीฝǶӵϞ”மϯ॥ᓀᆅ౛ཷ‫ۺ‬ᆶૈ
Κ”ςࢂӄ୯1000εҾ཰ύǴ83.7%‫ޑ‬CEOӅӕᇡࣁ྽୍ϐ࡚Ǵ‫׳‬ుቫ‫఼ޑ‬ကࢂӵ
Ֆஒ॥ᓀᆅ౛ᙯϯࣁҾ཰Ўϯϐ‫ڀ‬ᡏϣ఼ǴԜஒԋࣁҾ཰ଓ‫ڑ؃‬ຫ‫ޑ‬ѸฅၸำǶ
ӣ៝ᐕўόᜤว౜Ǵӧ911‫װ‬ᔐ٣ҹύǴШຩεኴനε‫܍‬ચЊነਥў‫ڶ‬ճ
(Morgan Stanley)‫׫‬ၗሌՉԖ3528Ӝ঩πϩණӧ25ቫኴύǴӧΖᗺѤΜΖϩ৮‫܀‬ҽ
ηᎯᐒና΢ಃ΋εኴࡕǴӼӄЬᆅӧ΋ϩដࡕᆙ࡚ቶኞǴ঩πҥջ຾Չ౧ණǴ٠
1

6. ‫ܭ‬ΐᗺΜϖϩӧSeventh Avenue೛ҥᔈᡂࡰචύЈǴ‫ܭ‬ΐᗺΒΜϖϩ௴୏Տ‫ܭ‬
Varickຉ‫ޑ‬ၗૻഢජύЈᆶࡌҥՏ‫ܭ‬ફᐛՋԀHarberside‫ޑ‬ಃΒᒤϦ࠻ǴࡠൺӚ‫س‬
಍ၮբǶ᏾ঁ911٣ҹǴነਥў‫ڶ‬ճӢࣁҥջ௴୏ᔼၮ࡭ុीฝ٬ளᔼၮൺচِ
ೲǴᡣ࠼Њ‫ֹ੻៾ޑ‬ӄ‫ߥډڙ‬ៈǴନᆢ࡭ჹ࠼Њ‫܍ޑ‬ᒍǴ‫ࡌ׳‬ҥΑߏᇻ‫ߞޑ‬Һᜢ
߯Ƕ921εӦ᎜ѠᑈႝϦљǴᗨฅ‫ڙܕ‬ख़ബǵଶႝ฻ቹៜǴฅ٣߻ς൩Ӛᅿ‫্ؠ‬٣
ࡺࣴुᆙ࡚ᔈᡂǵ‫্ؠ‬ൺচᆶᔼၮ࡭ុ฻ीฝǴӢԜёаӛ࠼ЊբȨҬ೤ό཮‫ۯ‬
ᇤǼȩϐߥ᛾ǶԜࣣࣁҾ཰үധϐ኱ंǴ‫ځ‬բ‫ݤ‬គ‫ޑډ‬όѝࢂुൂǴԶࢂ‫ߏࢂ׳‬
ᇻ‫ߞޑ‬ҺགǴߦ٬Ҿ཰҉ុ࿶ᔼǶ
ӧӭᡂ‫ޑ‬ШжύǴ࠶ુᆶ॥ᓀς೸ၸࣽ‫מ‬ᆶӄౚϯ‫ޑ‬ဌ‫؁‬ుΕ‫؂‬΋ৎҾ཰㚊Ǵ
ӢԜҾ཰॥ᓀኳԄςߚӄฅࣁϣ೽॥ᓀǴ‫׳‬ӭٰԾ‫ܭ‬Ѧ೽॥ᓀǴঃऩҾ཰คຎ॥
ᓀӸӧǴӒᐒ΋᝻ջวǶਥᏵऍ୯Gartner Group‫زࣴޑ‬ว౜
Ȭӄऍຬၸ60%‫ޑ‬Ҿ཰Ǵ
คჹ฼аӢᔈ‫্ؠ‬٣ࡺวғ‫܌‬೷ԋϐᔼၮύᘐȭ
Ǵ
៳ฅMorgan Stanley‫ޑ‬ԋф‫ڂ‬ጄς
ԋࣁӄౚүധϐჹຝǴҾ཰ᔼၮ࡭ុೕჄ(Business Continuity Planning, BCP)‫׳‬ԋ
ࣁӄౚҾ཰ᜢ‫ݙ‬ขᗺᆶӅӕᇟ‫ق‬ǶਥᏵऍ୯Gartner Group‫ޑ‬ፓࢗว౜
ȬԿՋϡ2005
ԃǴӄऍஒԖຬၸ60%‫ޑ‬Ҿ཰ֹԋBCPϐࡌ࿼ȭ
ǶԜፓࢗ࣬ၨ‫ܭ‬ଯࣽ‫מ‬ౢ཰໹ຎӄ
ౚ‫ךޑ‬୯Ǵό࿣зΓኁЈᦼᦼǴӧදၹલЮֹ๓॥ᓀᆅ౛ᐒ‫ڋ‬ᆶᔼၮ࡭ុೕჄ‫ޑ‬
߻ᚒΠǴय़ჹᝄ৚‫ޑ‬୯ሞѱ൑ᝡ‫ݾ‬ᆶा‫؃‬Ǵᡉฅ‫ॺך‬ς‫ي‬ೀ‫ཱུܭ‬ଯ‫ޑ‬॥ᓀϐΠǴ
Ԝ‫ࡌڅ‬ҥҾ཰॥ᓀᆅ౛ᆶᔼၮ࡭ុೕჄǴஒԋࣁҾ཰ᆶӚΓᝡ‫ݾ‬Κ‫ޑ‬ཥࡰ኱Ƕ
ӢԜҾ཰ӧय़ᖏ೚ӭค‫ݤ‬௓‫ޑڋ‬ཀѦȐх֖ᕉӼፁ฻॥ᓀȑǴӵՖૈِೲࡠൺ
ᔼၮᐒ‫ڋ‬Զό٬ᔼၮύᘐǴࢂҾ཰ᔠຎҁ‫ي‬ᝡ‫ݾ‬Κϐख़ाᜢᗖǶӢԜҾ཰Ѹ໪ࡘ
Ե྽ᎁၶख़εཞѨ٣ҹȐӵεӦ᎜‫܈‬εО‫ؠ‬ǵ‫܈‬ၴϸ‫ݤ‬ೕଶπਔȑǴӵՖِೲ৖
໒ൺচπբǴ٬Ҿ཰ِೲӣൺᔼၮϐ҂ߘᆞᕯीฝᆀϐȨҾ཰ᔼၮ࡭ុᆅ౛
(Business Continuity Management, BCM)ȩǶ
ᆢ࡭Ҿ཰ӧᔼၮύᘐ‫܈‬ᎁ೹Ѯ‫ؠ‬ਔૈᝩុග‫ٮ‬ౢࠔᆶ୍ܺǴᆢ࡭୘൑ᓬ༈ςԋ
ࣁ୯ሞεࠠҾ཰ᆶၠ୯‫܄‬Ϧљଓ‫ޑ؃‬Ҟ኱ǴԶBCM‫ޑ‬௢୏‫ࢂ׳‬Ҿ཰ӧ॥ᓀᆅ౛‫ޑ‬
२ाπբख़ᗺǶਥᏵ಍ीၗ਑ᡉҢǴԾ1995ԃଆҾ཰ӧᎁ೹ख़εཀѦ٣ࡺਔǴς
ԖऩυҾ཰ᙖҗȬᔼၮ࡭ុᆅ౛ȭ‫ޑ‬ჴࡼϷӝբუՔϐଛӝǴԖਏӦ෧ᇸᎁ೹‫ؠ‬
ᜤ٣ࡺϐፂᔐǴ٠ӧ಄ӝ࣬ᜢ‫ݤ‬ೕϷߥᓀϦљϐा‫؃‬ΠǴό໻խନᜢቷଶπϐϵ
2

7. ၮǴҭளаӧനอ‫ޑ‬ਔ໔ϣࡠൺϦљϐᔼၮǴBCM ૈ‫׳‬຾΋‫ޑ؁‬ஒϦљᔼၮ‫ޑ‬ᜢ
ᗖୖኧǴ೸ၸඹжႝတᆛၡ‫ޑ‬໺ᒡǴ٣ӃೕჄ‫্ؠܭ‬٣ࡺวғࡕǴҾ཰უՔӵՖ
Ϸਔ‫ޑ‬ௗඹѸा‫ޑ‬ၮբǴаᆢᛠҾ཰ϐ࠼ЊϷ‫׎‬ຝǴӕਔаֹ᏾‫ޑ‬ᔼၮୖኧǴග
‫ٮ‬Ҿ཰‫ܭ‬നอ‫ޑ‬ਔ໔ϣख़ࡌ҅தϐᏹբၮᙯǴа2005ԃ5ДǴВДӀύᚱቷ‫ޑ‬วғ
εОբࣁҾ཰ࡌ࿼BCMǴჹ‫্ؠܭ‬ൺচ‫੻ޑ‬ೀǴВДӀ໣ი୺Չᔼၮ࡭ុᆅ౛໘
ࢤǴӃ፾೹εଯ໢ԾٰН‫ٮ‬ᔈύᘐ٣ҹǴࡕӢύᚱቷวғઔᑼϐ‫ؠ‬Ǵ҅ёԵᡍВ
ДӀ໣იࡌ࿼BCP‫ޑ‬ԋਏǴЪӢѳВϦљջ೴‫؁‬ஒᔼၮ࡭ុೕჄ‫ޑ‬ᆒઓᆶᄊࡋǴပ
ჴࡌ࿼‫ܭ‬Ӛ೽ߐѳВၮբύǴ‫܌‬аલН٣ҹวғϐ߃ǴϦљӚ೽ߐջૈҥջϸᔈǴ
ᒥൻϦљӒᐒᆅ౛ࡹ฼ᆶᐒ‫ڋ‬Ǵ଺ӳНྍፓࡋπբǴዴߥϦљᔼၮόύᘐǴӵය
ғౢҬ೤ǹԶύᚱቷวғεОǴ໣იϣ೽ᔈᡂள‫ە‬Ǵ٠ҥջஒౢૈ౽ᙯԿ‫ځ‬дቷ
୔Ǵচύᚱቷ঩πΨૈӧಃ΋ਔ໔ϣ߻۳ଯ໢ቷǴ຾ՉၮբǴ٠ӧ‫্ؠ‬ᔈᡂ‫ޑ‬ၸ
ำύǴคϼӭཉ໶Ǵᔈᡂი໗ࣣ٩ྣBCP‫ޑ‬ೕჄΠ຾Չ‫ࡕؠ‬ൺচǶ࠼ЊϸԶᇡ᛽‫ډ‬
ВДӀӄౚթֽ‫ޑ‬ᝡ‫ݾ‬ΚǴЪВДӀऍ୯ӸૼᏧ᛾(ADR)൳Яؒ‫ډڙ‬О‫ؠ‬٣ҹ‫ޑ‬ቹ
ៜǴࣗԿև౜΢ᅍ‫ޑ‬ᖿ༈ǴҭёᆀࣁӒᐒ൩ࢂᙯᐒǴӢԜBCP‫ࡌޑ‬࿼ჹ‫ܭ‬ВДӀय़
ჹ‫ޑࡕ্ؠ‬ᔈᡂǴᔼၮ‫ޑ‬౽ᙯ฻Ǵ‫ڀ‬Ԗόёᑃྐ‫ޑ‬ਏ݀Ǵό໻ᕇள࠼Њ‫ߞޑ‬ҺǴ
ჹ‫ܭ‬Ҿ཰‫׎‬ຝҭԖගϲ‫ޑ‬ਏ݀Ƕ
ඤ‫ق‬ϐǴBCM‫ޑ‬фૈӧ‫ܭ‬ග‫ٮ‬҂‫ޑޕ‬॥ᓀᆅ౛Ǵ٠аֹ᏾‫ޑ‬ᔈᡂ/ൺচीฝǴ
‫ڐ‬շҾ཰‫্ؠܭ‬٣ࡺࡕǴ٩ႣӃᔕ‫ۓ‬ϐीฝ຾Չ‫ࡕؠ‬ൺচπբǶ
1.2 Ћнϣ৒Ϸ٬Ҕᇥܴ
ҁЋнጓኗҞ‫ޑ‬२ӧග‫ٮ‬᠐‫ِޣ‬ೲΑှӵՖᒣ᛽Ҿ཰॥ᓀǵຑ՗॥ᓀ೷ԋϐፂ
ᔐำࡋǵु‫ׯۓ‬๓฼ౣϷගԐ຾ՉႣٛྗഢǴᙖаගଯҾ཰ᔼၮय़ᖏѮ‫ؠ‬ϐ॥ᓀ
‫ૈڙ܍‬ໆǴِೲࡠൺҾ཰ᔼၮ୍ܺНѳǴᙖаᆢ࡭୘൑ᓬ༈ǴԶᔼၮ࡭ុᆅ౛
(Business Continuity Management, BCM)ीฝϐ௢୏Ǵ‫ࢂ׳‬୯ሞεࠠҾ཰ᆶၠ୯‫܄‬
ϦљӧҾ཰॥ᓀᆅ౛‫ޑ‬ख़ाπբख़ᗺǶ
ҁ‫ೌמ‬ЋнӅϩԋϤঁക࿯Ǵ२ӃᇥܴጓኗጔଆϷҞ‫ޑ‬Ǵௗ๱ϟಏҾ཰ᔼၮ࡭
ុᆅ౛ǵҾ཰॥ᓀຑ՗Ϸ฼ౣೕჄǵҾ཰‫ុۯ‬ीฝว৖аϷෳ၂ᆶ૽ግ฻ा໨Ǵ
3

8. ӧ‫؂‬ക࿯ஒග‫࣬ٮ‬ᜢਢ‫ٯ‬ᇥܴǴ‫ځ‬Ӛക࿯ϐϣ৒εᆜᇥܴӵΠǺ
ಃ΋കӧᇥܴጓኗҾ཰ᔼၮ࡭ុᆅ౛‫ೌמ‬ЋнϐጔଆϷҁЋнϣ৒ǵ٬Ҕᇥܴ
Ϸ஑ԖӜຒϟಏǹ
ಃΒകЬाӧᇥܴҾ཰ᔼၮ࡭ុᆅ౛୯ሞว৖౜‫ݩ‬Ǵ‫ڐ‬շ᠐‫ޣ‬ჹBCMԖ୷ҁ
‫ޑ‬ᇡ᛽Ǵ٠ᇥܴBCM௢୏ࢎᄬϷБԄǶ
ಃΟകϣ৒ԖΟǴх֖ǺҾ཰॥ᓀϩ‫݋‬Ϸਢ‫ٯ‬ᇥܴǵᔼၮፂᔐϩ‫݋‬ǵᔼၮ࡭ុ
ᆅ౛฼ౣೕჄǴԑӧΑှ॥ᓀ‫ޑ‬ᅱ௓ᆶᇡ‫ޕ‬ჹ‫ܭ‬ᔼၮ࡭ុ‫ޑ‬ᜢ߯Ǵ٠٩Ᏽᔼၮፂ
ᔐϩ‫݋‬ȐBusiness Impact Analysis , BIAȑ‫่݀ޑ‬຾ՉBCM฼ౣೕჄǴЬाᇥֹܴ
ԋᔼၮፂᔐϩ‫݋‬ൔ֋ࡕǴჿႻൂՏѸሡࣴගଯ໘Ьᆅ،‫ۓ‬Ԗব٤฼ౣёа଺ࣁҾ
཰Ꮓೲࡠൺᜢᗖ‫܄‬ᔼၮфૈၮբǴаफ़եᔼၮύᘐ‫܌‬஥ٰ‫ޑ‬ፂᔐϷཞѨǶ฼ౣว
৖Ьाπբхࡴ฼ౣว৖߻ϐྗഢǵϣѦ़ғ॥ᓀ຾Չຑ՗ǵዴ‫ۓ‬฼ౣϐᓬӃ໩
‫ׇ‬ǵԋҁϩ‫݋‬Ƕ
ಃѤകϣ৒х֖Ǻᆙ࡚ᔈᡂीฝ(Emergency Response Plan, ERP)ೕჄǵӒᐒྎ
೯ीฝ(Crisis Communication Plan, CMP)ೕჄǵൺচीฝ(Disaster Recovery/
Business Continuity Plan, BCP/DRP)ೕჄ฻Ο೽ҽǹԑӧග‫ٮ‬Ҿ཰य़ᖏ‫ؠ‬ᜤ‫ޑ‬ᔈᡂ
Б‫ݤ‬Ϸࡕុൺচ‫ୖޑ‬Ե٩ᏵǴᗉխ‫ؠ‬ᜤ٬Ҿ཰೷ԋᔼၮύᘐǴϷ෧ϿᔼၮፂᔐǶ
ಃϖകх֖ᄽግᆶෳ၂ǵᇡ‫ޕ‬ᆶ૽ግǹᄽግᆶෳ၂ࢂϟಏᙖҗ‫ۓ‬යᔠຎǴෳ၂Ǵ
٣ࡺࡕᔠ૸ൔ֋ǴᒱᇤᏢಞǴᕮਏᑽໆǴ‫ک‬ᄽግٰຑ՗Бਢ‫ޑ‬ीฝǴำ‫ׇ‬Ǵфૈ
ᄽግѸ໪ࣁෳ၂ঁձѸााનǴԖ࣬ϕᜢ߯‫ޑ‬ाન‫܈‬᏾ঁीฝԶ೛ी٠ࡌҥаዴ
ߥຑ՗ीฝᒣ᛽рό‫ى‬೽ϩ‫ޑ‬຾Չঅ҅Չ୏Ƕ
ಃϤകЬाӧᕴ่ҁЋнǴԶߕᒵ߾ӧᇥܴୖԵЎ᝘ၗ਑٠ӈр୯ϣѦBCM
ϐख़ाᆛ֟Ǵ཰ࣚё‫ܭ‬ᆛઠ΢ᕇளख़ा‫ୖޑ‬ԵၗૻǴёբࣁ‫্ؠ‬ٛЗჹ฼‫ޑ‬٩Ᏽ
Ϸ‫س‬಍ࡌҥ‫ୖޑ‬ԵǶ
ҁ‫ೌמ‬ЋнёբࣁӚҾ཰ࡌҥ॥ᓀᆅ౛ϷҾ཰࡭ុᆅ౛ϐ٩ᏵǶӕਔ೸ၸҁ‫מ‬
ೌЋнϐගҢǴBCM ૈ‫׳‬຾΋‫ޑ؁‬ஒϦљᔼၮ‫ޑ‬ᜢᗖୖኧǴග‫ٮ‬Ҿ཰‫ܭ‬നอ‫ޑ‬ਔ
໔ϣख़ࡌ҅தϐᏹբၮᙯǶඤ‫ق‬ϐǴҁBCM‫ೌמ‬Ћн‫ޑ‬фૈӧ‫ܭ‬ග‫ٮ‬҂‫ޑޕ‬॥ᓀ
ᆅ౛Ǵ٠аֹ᏾‫ޑ‬ᔈᡂ/ൺচीฝǴ‫ڐ‬շҾ཰‫্ؠܭ‬٣ࡺࡕ٩ႣӃᔕ‫ۓ‬ϐीฝ຾Չ
4

9. ‫ࡕؠ‬ൺচπբǴ຾ԶගܹԿҾ཰ᔼၮύᘐ॥ᓀϐᆅ౛Ǵа᏾ᡏ॥ᓀᆅ౛ೕჄࣁচ
߾Ǵය٬ԖਏஒեӒ্॥ᓀϷᔼၮ॥ᓀǴᙖԜ‫ڀ‬ᡏගܹౢ཰ࣚ୯ሞѱ൑‫ޑ‬ᝡ‫ݾ‬ΚǶ
1.3 ஑ԖӜຒှញ
1. ቹៜ (Consequence)
΋ঁ٣ҹ‫่݀ޑ‬Ǵа‫ۓ‬ໆ‫߄ٰ܄ۓ܈‬ҢǴёૈࢂཞѨǵ໾্ǵ፝ᒲ‫܈‬ᕇճǶ
΋ঁ٣ҹԖ೚ӭόӕ‫ޑ‬ёૈ่݀Ƕ
2. ԋҁ (Cost)
‫ޔ‬ௗ‫܈‬໔ௗ‫୏ࢲޑ‬ཞѨǴੋϷҺՖ‫ॄޑ‬य़ቹៜǴхࡴΑߎᒲǵਔ໔ǵമΚǵ
ϩ຋ǵ୘៉ǵࡹ‫کݯ‬ค‫׎‬ၗౢ΢‫ޑ‬ཞѨǶ
3. ٣ҹ (Event)
΋ঁ੝‫ۓ‬ਔයϣǴӧ΋ঁ੝‫ۓ‬Ӧᗺ‫܌‬วғ‫ޑ‬٣ᄊǶ
4. ٣ҹᐋϩ‫݋‬ (Event Tree Analysis)
΋ᅿБ‫ݤ‬Ƕӧ٣ҹখวғ‫ޑ‬ਔংǴҔٰඔॊ‫ځ‬ёૈቹៜ‫ޑ‬ጄൎϷ໩‫ׇ‬Ƕ
5. ѨਏኳԄϷቹៜϩ‫݋‬ ( Failure Mode and Effect Analysis, FMEA)
΋঺ำ‫ׇ‬ǴҔٰϩ‫سೌמ݋‬಍ϣወӧ‫ޑ‬Ѩ௳ኳԄǶFMEAёа຾΋‫؁‬ว৖
ԋࣁ‫܌‬ᒏ‫ޑ‬ȨѨਏኳԄǵቹៜϷᝄख़‫(܄‬criticality)ϩ‫݋‬ȩ(FMECA)ǶӧFMECA
ύǴ‫؂‬΋ঁѨ௳ኳԄ೿཮ਥᏵ‫ځ‬วғ‫ޑ‬ᐒ౗аϷ‫ځ‬ቹៜ‫ޑ‬ᝄख़ำࡋٰ຾Չϩ
ᜪǶ
6. Ѩᇤᐋϩ‫݋‬ (Failure Tree Analysis)
΋঺‫س‬಍πำБ‫ݤ‬ǴҔٰᇥܴόӕ‫سޑ‬಍௃‫ݩ‬ᆶ੝‫ۓ‬٣ҹ‫ޑ‬ёૈ่݀‫ޣٿ‬
ϐ໔‫่ޑ‬ӝǶ
7. ᓎ౗ (Frequency)
΋ঁ٣ҹ‫ޑ‬วғ౗Ǵа΋ঁ੝‫ۓ‬ਔ໔ϣ၀٣ҹวғ‫ޑ‬ԛኧٰ߄ҢǶፎୖྣ
ᐒ౗‫܈ک‬ฅ౗Ƕ
5

10. 8. Ӓ্ (Hazard)
΋ঁወӧ‫ޑ‬ཞ্‫܈‬΋ঁёૈ཮೷ԋཞѨ‫ޑ‬٣ᄊǶ
9. ᐒ౗ (Likelihood)
Ҕٰඔॊᓎ౗Ϸ‫܈‬ฅ౗‫ޑ‬ჴሞኧॶǶ
10. ཞѨ (Loss)
ӧ࿶ᔮ΢‫ځ܈‬дБय़‫܌‬วғ‫ॄޑ‬य़ቹៜǶ
11. ᅱ࿎ (Monitor)
‫ۓ‬යЪᝄ਱ӦᔠࢗǵࡰᏤǵᢀჸϷइᒵࢲ୏ǵ୏բ‫س܈‬಍‫ޑ‬ၸำǴҞ‫ࢂޑ‬
ӧว౜ᡂϯǶ
12. ಔᙃ (Organization)
ϦљǵҾ཰ǵ‫ځࢂ܈཮ڐ‬д‫ޑ‬ӝ‫ݤ‬იᡏǴᏱԖԾρ‫ޑ‬фૈϷᆅ౛่ᄬǴό
ፕ‫ࢂځ‬ցࣁ‫ݤ‬ΓಔᙃǴҭόፕ‫ࢂځ‬Ϧৎ‫د܈‬ΓᐒᄬǶ
13. ‫܈‬ฅ౗ (Probability)
΋ঁ੝‫ۓ‬٣ҹ‫่݀ځ܈‬วғ‫ޑ‬ᐒ౗Ǵа੝‫ۓ‬٣ҹ‫่݀܈‬ӧ‫܌‬Ԗ‫ޑ‬ёૈ٣ҹ
‫่݀܈‬ύ‫܌‬՞‫ޑ‬К౗ٰ߄ҢǶ‫܈‬ฅ౗ࢂаϟ‫ܭ‬0‫ډ‬1ϐ໔‫ޑ‬ኧӷٰ߄ҢǴ0߄Ң
٣ҹόёૈวғǴ1߄Ң٣ҹ΋‫཮ۓ‬วғǶ
14. ූᎩ॥ᓀ (Residual Risk)
୺Չ॥ᓀჹ฼ࡕ‫܌‬ഭΠ‫ޑ‬॥ᓀ฻ભǶ
15. ॥ᓀ (Risk)
཮ቹៜҞ኱٣ҹ‫ޑ‬วғᐒ౗Ǵаቹៜ่݀Ϸᐒ౗ٰෳໆ॥ᓀ‫ޑ‬ำࡋǶ
16. ॥ᓀௗ‫ڙ‬ (Risk Acceptance)
،‫ۓ‬ௗ‫ڙ‬΋ঁ੝‫ۓ‬॥ᓀ‫ޑ‬ቹៜϷ‫ځ‬วғ‫ޑ‬ᐒ౗Ƕ
17. ॥ᓀϩ‫݋‬ (Risk Analysis)
Ԗ‫س‬಍ӦၮҔԖਏ‫ޑ‬ၗૻǴٰղᘐ੝‫ۓ‬٣ҹวғ‫ޑ‬ᐒ౗‫ځ܈‬ቹៜ‫ޑ‬ᝄख़ำ
ࡋǶ
6

11. 18. ॥ᓀຑ՗ (Risk Assessment)
΋ঁхࡴ॥ᓀϩ‫݋‬Ϸ॥ᓀຑໆ‫ޑ‬ၸำǶ
19. ॥ᓀೕᗉ (Risk Avoidance)
،‫ۓ‬όੋϷԖ॥ᓀ‫ޑ‬٣ᄊǶ
20. ॥ᓀ௓‫ڋ‬ (Risk Control)
॥ᓀᆅ౛‫ޑ‬΋೽ϩǴхࡴࡹ฼ǵ኱ྗᆶ‫؁‬ᡯ‫୺ޑ‬ՉϷᐒૈ‫ׯޑ‬ᡂǴа੃ନ
‫܈‬फ़եόճ‫ޑ‬॥ᓀǶ
21. ॥ᓀπำ (Risk Engineering)
ஒπำᏢ‫ޑ‬౛ፕϷБ‫ݤ‬ᔈҔ‫ډ‬॥ᓀᆅ౛Ƕ
22. ॥ᓀຑໆ (Risk Evaluation)
Ҕٰ،‫ۓ‬॥ᓀᆅ౛Ӄࡕ໩‫؁ޑׇ‬ᡯǴஒ॥ᓀᆶ٣Ӄ‫ޑۓڋ‬኱ྗ଺КၨǴа
،‫ۓ‬၀॥ᓀ‫ޑ‬฻ભϷ‫ځ‬д࣬ᜢ໨ҞǶ
23. ॥ᓀ଄୍ (Risk Financing)
Ҕٰ‫ٮ‬ᔈ॥ᓀჹ฼‫܌‬ሡ‫ޑ‬຤ҔаϷံշ॥ᓀ‫܌‬஥ٰ‫ޑ‬଄୍ཞѨǶ
ഢຏǺჹࢌ٤ౢ཰Զ‫ق‬Ǵ॥ᓀၗߎѝхࡴံշ॥ᓀ‫܌‬஥ٰ‫ޑ‬଄୍ཞѨǶ
24. ॥ᓀዴᇡ (Risk Identification)
ว౜ёૈวғ‫ޑ‬٣ᄊϷ‫ځ‬วғ‫ޑ‬চӢ‫ک‬วғБԄǶ
25. ॥ᓀᆅ౛ (Risk Management)
ࣁΑԖਏӦᆅ౛ёૈวғ‫ޑ‬٣ҹϷ‫ځ‬όճ‫ޑ‬ቹៜ‫୺܌‬Չ‫؁ޑ‬ᡯϷ่ᄬǶ
26. ॥ᓀᆅ౛ำ‫ׇ‬ (Risk Management Process)
Ԗ‫س‬಍ӦၮҔᆅ౛ࡹ฼ᆶำ‫ׇ‬ǴٰࡌҥࢎᄬǴаϷว౜ǵϩ‫݋‬ǵຑໆǵೀ
౛ǵྎ೯‫ុ࡭ک‬ᅱ࿎॥ᓀǶ
27. ॥ᓀफ़ե (Risk Reduction)
ᒧ᏷٬Ҕ፾྽‫מޑ‬ѯϷᆅ౛চ߾ٰ෧ե॥ᓀ‫ځ܈‬ቹៜวғ‫ޑ‬ᐒ౗Ƕ
28. ॥ᓀߥԖ (Risk Retention)
7

12. ੝ཀ‫ߚ܈‬੝ཀӦ‫܍‬ᏼ॥ᓀ‫܌‬೷ԋ‫ޑ‬ཞѨǴ‫ࣁ܈‬ಔᙃϣ‫ޑ‬଄‫ނ‬ཞѨॄೢǶ
29. ॥ᓀᙯ༬ (Risk Transfer)
೸ၸҥ‫ݤ‬ǵӝऊǵߥᓀ‫ځ܈‬дБԄஒཞѨ‫ޑ‬ೢҺϷཞѨ‫܌‬஥ٰ‫ޑ‬ख़ᏼᙯ౽
๏‫ځ‬дიᡏǶ॥ᓀᙯ༬Ψёаࡰᙯ౽‫ނ‬౛॥ᓀ(physical risk)Ϸ‫ځ‬೽ϩǶ
30. ॥ᓀჹ฼ (Risk Treatment)
ᒧ᏷٠୺Չ፾྽‫ޑ‬॥ᓀೀ౛Б‫ݤ‬Ƕ
31. ௵གࡋϩ‫݋‬ (Sensitivity Analysis)
྽ࢌঁႣෳॶ‫ׯ‬ᡂਔǴᔠࢗीᆉ่݀ϷኳԄ‫ޑ‬ᡂϯ௃‫׎‬Ƕ
32. ճ্࣬ᜢ‫ޣ‬ (Stakeholders)
ჹ‫ܭ‬،฼‫୏ࢲ܈‬Ǵ‫ڀ‬ԖቹៜΚǵёૈ‫ځڙ‬ቹៜǵ‫܈‬Ծᇡࣁёૈ೏ቹៜ‫ঁޑ‬
Γ‫܈‬ಔᙃǶ
33. Ҿ཰࡭ុБਢ(Business Continuity Program)
΋ঁҗၗుЬᆅЍ࡭ԋҥόᘐ຾Չ‫ࢬޑ‬ำǶЪࣁዴߥᒣ᛽‫্ؠ‬ወӧཞѨቹ
ៜǴᆢៈёՉ‫ޑ‬ൺচ฼ౣǴᙖҗΓ঩૽ግǵीฝෳ၂Ǵᆢៈаዴߥ୍ܺёаᝩ
ុග‫ٮ‬ϐൺচीฝ‫ޑ‬Ѹा‫؁ޑ‬ᡯ೿೏୺ՉԶԋҥǶ
34. ཞ্ຑ՗ȐDamage Assessmentȑ
‫্ؠ‬ჹΓ঩ǴჴᡏǴ࿶ᔮǴԾฅၗྍቹៜ‫ޑ‬ຑሽ‫܈‬،‫ۓ‬Ƕ
35. ‫্ؠ‬/ᆙ࡚٣ҹᆅ౛БਢȐDisaster/Emergency Management Programȑ
୺Չ‫ے‬ԑǵᜫඳǵ฼ౣБଞ‫ک‬Ҟ኱ϷБਢ‫ک‬ಔᙃᆅ౛ࢎᄬ‫ޑ‬ीฝǶ
36. ᐒᄬȐEntityȑ
Ԗ‫্ؠ‬/ᆙ࡚٣ҹᆅ౛‫ុ࡭ک‬ᔼၮೢҺ‫۬ࡹޑ‬ᐒᄬǴ‫د‬ΓϷ΢ѱϦљǴӝუ
٣཰Ǵߚᔼճᐒᄬ‫ځ܈‬дಔᙃǶ
37.ᔼၮፂᔐϩ‫݋‬ȐBusiness Impact AnalysisǴBIAȑ
ᆅ౛໘ቫჹ‫ܭ‬ᒣ᛽഼ѨᐒᄬȐentityȑၗྍ೷ԋ‫ޑ‬ፂᔐ‫ޑ‬ϩ‫݋‬ǶԜϩ‫݋‬ᑽໆ
ၗྍ഼Ѩ‫ޑ‬ቹៜ‫ک‬ᒿਔ໔ಕी‫ޑ‬ཞѨǶ٠ග‫ٮ‬ᐒᄬ‫ڀ‬ё᎞ࡋ‫ޑ‬ၗ਑аࣁफ़եӒ
8

13. ্ǵൺচ฼ౣǵ‫ុ࡭ک‬ीฝ،฼‫ྗ୷ޑ‬Ƕ
38. ‫্ؠ‬٣ࡺᆅ౛‫س‬಍ ȐIncident Management Systemȑ
ӧ‫্ؠ‬ᆶᆙ࡚٣ҹᆅ౛‫ޑ‬ჴ୍΢Ǵჹ‫ܭ‬੝‫ۓ‬ၗྍᆅ౛ॄԖೢҺ‫ൂޑ‬Տ‫܈‬ಔ
ᙃǴᔈ಍ӝ‫ڬځ‬ᜐ೛ࡼǵᐒᏔ೛ഢǵ঩πǵբ཰ำ‫ׇ‬ᆶྎ೯БԄǴаԖਏֹԋ
࣬ᜢ‫্ؠ‬٣ࡺϐ‫ׯ‬๓Ҟ኱Ƕ
39. ෧ᇸȐMitigationȑ
ӧ‫܈্ؠ‬ᆙ࡚٣ҹวғ߻/วғࡕǴࣁ෧Ͽǵफ़ե٣ҹวғᐒ౗Ǵ‫܈‬෧եᝄ
ख़ࡋ‫܌่݀܈‬௦‫ޑڗ‬Չ୏Ƕ
40. ࣬ϕ௱շ‫ڐ‬᝼ȐMutual Aid Agreementȑ
΋໨٣߻Ӽ௨ӧΒঁ‫܈‬а΢‫ޑ‬ᐒᄬ໔Ǵࣁ๏ϒ‫ڐ‬᝼྽٣Γ‫ڐ‬շǴԶว৖р
‫ޑ‬΋ঁ٣߻Ӽ௨‫ڐޑ‬᝼Ƕ
41. ྗഢȐPreparednessȑ
ࣁЍජ‫܈‬ගଯ‫্ؠ‬/ᆙ࡚٣ҹ‫ޑ‬෧ᇸǴϸᔈ‫ک‬ൺচǶԶӧ‫্ؠ‬/ᆙ࡚٣ҹว
ғ߻Ǵ‫୏ࢲޑ଺܌‬ीฝ‫س܈‬಍‫ޑ‬ว৖ᆶ୺ՉǶ
42. ൺচȐRecoveryȑ
ࣁ٬‫ރ‬ᄊӣᙟ‫ډ‬ᐒᄬёаௗ‫ޑڙ‬НѳǴ‫܌‬௦Ҕ‫ޑ‬Չ୏‫ک‬БਢǶ
43. ϸᔈȐResponseȑ
Ҕ‫্ؠܭ‬Ϸᆙ࡚٣ҹᆅ౛Ǵࣁ‫্ؠ‬/ᆙ࡚٣ҹ଺рҥջ‫ک‬อයਏᔈ‫ޑ‬Չ୏Ƕ
44. ௃༈ϩ‫݋‬ȐSituation Analysisȑ
ຑ՗ཀѦ٣ҹ‫ޑ‬ᝄख़ࡋϷࡕ݀‫ک‬໺ၲ่݀‫ࢬޑ‬ำǶ
45. ൺচਔ໔Ҟ኱(Recovery Time Object)
Һ୍ᜢᗖࢲ୏‫܌‬ሡൺচ‫ޑ‬ਔ໔Ҟ኱Ƕ
46. ཀѦ٣ᡂ(Incident)
ࡰ΃٣ҹёૈ཮೷ԋҾ཰य़ᖏᔼၮύᘐǴ‫܈‬٬Ҿ཰ుഐ॥ᓀ௃ნύǶ
47. Ьाᕮਏࡰ኱(Key Performance Indictor)
9

14. ਥᏵҾ཰Ҟ኱ǵว৖БӛϷౢ཰኱ྗٰु‫ۓ‬Ҿ཰‫ޑ‬ᕮਏࡰ኱Ƕ
48.Һ୍ᜢᗖࢲ୏(Mission Critical Actity)
ᜢᗖ‫ޑ‬ᏹբϷᔼၮ΢‫܌‬ሡ‫ޑ‬ЍජǵౢࠔϷ୍ܺ฻Ǵჹ‫ܭ‬Ҿ཰࡭ុࣣࢂख़ा
ࢲ୏Ƕ
49. ᔼၮ࡭ុНྗ(Level of Business Continuity)
ࣁΑࢂҾ཰ၲ‫ុ҉ډ‬࿶ᔼǴ‫܌‬ሡၲԋ‫ޑ‬നλҞ኱Ƕ
50. πբ୔ୱൺচ(Work Area Recovery)
ග‫ٮ‬Ҿ཰ϣѦ೽ӧӒᐒวғ߻Ǵπբ൑‫ޑ܌‬നλൺচ೛ഢ‫ྗޑ‬ഢǴа෧Ͽ
‫্ؠ‬ൺচ‫ޑ‬ਔ໔Ƕ
51. നεϢ೚ύᘐਔ໔(Maximum Allowable Time)
྽‫্ؠ‬วғࡕǴҾ཰‫ૈ܌‬Ϣ೚Ъ৒‫ה‬ཞѨ‫ޑ‬ύᘐਔ໔Ƕ
10

15. ಃΒകʳ Ҿ཰ᔼၮ࡭ុᆅ౛ϟಏ
೚ӭ‫ޑ‬Ӓᐒ٣ҹύǴӵ৮‫װ܀‬ᔐǵᏯ‫ځࢂޣ܈ݾ‬д‫ޑ‬Ϻ‫ؠ‬฻Ǵ཮ჹҾ཰஥ٰ
ᜤаᑃྐ‫ޑ‬ፂᔐǹӧҾ཰ϣ೽ࣗԿࢂ‫ٮ‬ᔈ೯ၡ΢‫܌‬य़ᖏϐወӧ॥ᓀǴ೿ஒ཮ჹҾ
཰‫׎‬ຝ΢Ԗ๱࣮ό‫ޑـ‬ቹៜǴࣗԿჹ‫ܭ‬Ҿ཰ҭ཮วғᔼၮύᘐ‫ޑ‬ख़ε٣ҹǶ
Ҟ߻ᔼၮ࡭ុᆅ౛(BCM)ςӧӄౚ೚ӭҾ཰‫܌‬ௗ‫ڙ‬٠௦ҔϐǴԶ BCM ‫ځ‬ϣ
఼ࣁ΋॥ᓀᆅ౛‫ޑ‬౛‫ۺ‬ǴЪёග‫ٮ‬Ҿ཰ֹ๓‫ޑ‬ᔼၮǴ٠а҉ុว৖ࣁҞ኱Ƕ
2.1 ୯ሞ BCM ௢৖౜‫ݩ‬
ШࣚሌՉ՗ी‫ܭ‬ 2001 ԃ 911 ྽ϺӢଶЗᔼၮǵިѱೱុҶѱѤВǵ०ᐒଶ०
΋ࢃයǵҾ཰ኩଶΠൂǵԭԴ༊Ϸᙍ཰ၮ୏ଶЗᄽрኧВ฻ǴᏤठऍ୯୯ϣғౢ
Лᚐ(GDP)෧Ͽ 250~350 ሹऍϡǹ1995 ԃВҁઓЊεӦ᎜Ǵࡌᑐ‫ނ‬ཞѨ 1,200 ሹ
ऍϡȐэ GDP ‫ޑ‬ 2.5%ȑ
Ǵ࿶ᔮࢲ୏‫ޑ‬ኩਔύᘐཞѨэ GDP ‫ޑ‬ 4%ǹ411 ѠႝคႣ
᝾ଶႝ೷ԋԮࣽቷ୘΋λਔཞѨၻ 15 ሹѠჾǶਥᏵ಍ीǴऍ୯Ҿ཰ӧय़ᖏόёႣ
ය‫ؠޑ‬ᜤϐࡕǴԖ 43%‫ޑ‬Ҿ཰வԜค‫ݤ‬ख़ཥ໒஭ǴќѦ‫ޑ‬ 29%Ψ཮ӧΒԃϣ่‫״‬
ᔼၮ
Ǵ
Զ೭٤‫ؠ‬ᜤᏤठ‫ޑ‬ႝတύᘐ‫؂‬ԃ཮޸௞ऍ୯Ҿ཰ 40 ሹऍߎ
Ƕ
ќ٩Ᏽ Ontrack
Data Int’l, Inc. ϐϩ‫݋‬ᡉҢႝη୘୍ᔼၮύᘐཞѨࣁ 640 ࿤ऍߎ/λਔǵႝߞ೯ૻ
ᔼၮύᘐཞѨࣁ 32 ࿤ऍߎ/λਔǵҬ೯ၮᒡᔼၮύᘐཞѨࣁ 10 ࿤ऍߎ/λਔǶ
ԶਥᏵऍ୯ Gartner Group ‫ޑ‬ፓࢗว౜Ǵ‫ܭ‬Ջϡ 2005 ԃǴӄऍஒԖຬၸ 60%
‫ޑ‬Ҿ཰ֹԋ BCM ‫ࡌޑ‬࿼Ǵ٠ЪаӼፁ॥ᓀᆅ౛ࣁ୷ᘵǴ຾ՉҾ཰ύᘐ॥ᓀᆅ౛Ǵ
ᙖԜ‫ڀ‬ᡏගܹౢ཰ᝡ‫ݾ‬ΚǹҾ཰ᔼၮ࡭ុीฝ(Business Continuity Plan, BCP)‫ޑ‬ख़
ाǴёаவ‫ځ‬ว৖ᐕำ࣮рᆄইǶ1960 ԃж҃ය‫ډ‬ 1970 ԃж߃යǴҗ‫ܭ‬ႝတܺ
୍ᆶၗૻ‫(ೌמ‬Information Technology, IT)‫זޑ‬ೲԋߏǴᡣҾ཰ཀ᛽‫ډ‬ IT ύᘐёૈ
ჹ‫ܭ‬Ҿ཰ᜢᗖၮբфૈ೷ԋᝄख़ፂᔐǴӢԜ IT ౢ཰ଞჹฯᡏǵ೬ᡏѳѠᆶᆛၡࢎ
ᄬ຾Չ Single Points of Failure ϩ‫݋‬Ǵයఈᆢ࡭ᔼၮ҅தǶ1970 ԃж҃යǴ‫ٮ‬ᔈ୘
‫ࢂ׳‬೸ၸӝऊǴග‫ٮ‬ႝတᔼၮύᘐൺচ୍ܺǶ1980 ԃжǴ‫׳‬ӭ‫׫ޣ཰ޑ‬Εᜪ՟ IT
ᔼၮൺচ୍ܺ(Operational Recovery Services)Ǵ‫ځ‬ύന‫ڀ‬ж߄‫ࢂޑ‬ IBM ග‫܌ٮ‬ᒏ
‫ޑ‬ӄၩഢජ(Hot Site)Ǵ‫ڐ‬շ࠼Њൺচख़ा(Major)ᆶᜢᗖ(Critical)‫ޑ‬ᔼၮфૈǶԿ
11

16. ϞǴ IT ᔼၮൺচ୍ܺς຾Ε‫ࣁ׳‬ቶ‫ޑݱ‬Ҿ཰ᔼၮ࡭ុीฝǶ
2000 ԃࡕ୯ሞ΢࣬ᜢ኱ྗхࡴǺम୯ᔼၮ࡭ុ‫(཮ڐ‬Business Continuity
Institute, BCI)ӧ 2002 ԃϦթȬᔼၮ࡭ុᆅ౛ჴ୍Ћн(Business Continuity
ManagementǺGood Practice Guidelines)ȭ
ǵम୯኱ྗ‫(཮ڐ‬British Standard Institute,
BSI) ӧ 2003 ԃϦթ PAS 56
Ȭᔼၮ࡭ុᆅ౛ࡰᏤᆜा(Guide to Business Continuity
Management)ȭᆶऍ୯୯ৎٛО‫(཮ڐ‬National Fire Protection Association, NFPA)ӧ
2000 ԃϦթ NFPA 1600Ȭ‫্ؠ‬ǵᆙ࡚٣ࡺᆅ౛ᆶᔼၮ࡭ុीฝ(Standard for
Disaster/Emergency Management and Business Continuity Program)ȭ
ǶԶ୯ሞ΢ᔼၮ
࡭ុᆅ౛኱ྗёϩࣁΟঁቫԛǴϩձࣁၗૻӼӄǵߎᑼӼӄᆶӄౢ཰ϐᔼၮӼӄǴ
ӄౚၮբ‫ൂޑ‬Տϐ௶ॊӵΠǶ
1.ၗૻӼӄǺऍ୯ᖄٖ‫୍ݤ‬೽(USA Department of Justice)ϐٛጄѦ೽ઇᚯ‫ݤ‬ਢ
(Foreign Corrupt Practices Act)Ƕ
2.ߎᑼӼӄǺऍ୯ᖄٖ୯ิֽ(USA Internal Revenue Service)ϐऍ୯ᖄٖ୯ิֽբ
཰ำ‫ׇ‬ 86-19 and IRS Procedure 86-19ǵऍ୯ᖄٖ཮ीᕴ࿿(USA General
Accounting Office)ϐި౻Ҭܰѱ൑ႝတӼӄ௓‫ڋ‬ೕ‫ۓ‬(GAO/IMTEC-91-56
Financial Markets: Computer Security Controls)ǵऍ୯ᖄٖߎᑼ཰ᇡ᛾‫ہ‬঩཮
(USA Federal Financial Institutions Examination Council)ϐ FEIEC FILL-67-97
ǵ
ऍ
୯ ߎ ᑼ ܺ ୍ ཰ ౜ ж ϯ ‫ݤ‬ ਢ (Financial Services Modernization Act of 1999,
Gramm-Leach-Bliley Act) ǵम୯଄ࡹ೽(UK Financial Service Agency)ϐम୯ϣ
೽௓ᆅ‫ݤ‬ೕ(Turnbull Report: Combined Code on Internal Controls in the UK)ǵ३
ෝߎᑼᆅ౛ֽ(Hong Kong Monetary Authority)ϐᔼၮ࡭ុीฝ(TM-G-2)ǵम୯
଄ ࡹ ೽ (UK Financial Service Agency) ϐ ᔼ ၮ ॥ ᓀ ‫س‬ ಍ Ϸ ௓ ᆅ ࡌ ᝼ ൔ ֋
(Consultation paper: 142 Operational Risk Systems and Controls) ǵཥу‫ߎڵ‬ᑼᆅ
౛ֽ(Singapore Monetary Authority of Singapore) ϐᔼၮ࡭ុᆅ౛ࡰᏤᆜा
(Business Continuity Management Guidelines)Ƕ
3.ӄౢ཰ϐᔼၮӼӄǺу৾ε଄ࡹ೽(Treasury Board of Canada)ϐߥӄϷᔼၮ࡭ុ
ᆅ౛኱ྗ(Security and Contingency Management Standard) ǵऍ୯ᖄٖᆙ࡚ᔈᡂ
ᆅ౛ᕴ࿿(USA FEMA)ϐ(FEMA FRPG 01-94 1994) ǵऍ୯୯ৎٛОᏢ཮(USA
12

17. National Fire Protection Association)ϐ‫্ؠ‬٣ࡺ/ᆙ࡚ᔈᡂᆅ౛Ϸᔼၮ࡭ុीฝ
኱ ྗ (Standard on Disaster/Emergency Management and Business Continuity
Programs) ǵу৾εख़ε୷ᘵ೛ࡼٛៈϷᆙ࡚ᔈᡂྗഢ‫ہ‬঩཮(Canada Office of
Critical Infrastructure Protection and Emergency Preparedness)ϐᔼၮ࡭ុीฝࡰ
Ꮴᆜा(A Guide to Business Continuity Planning) ǵम୯኱ྗ‫ڐ‬཮(British
Standard Institute, BSI)ϐ PAS 56 Guide to Business Continuity Management)Ƕ
य़ჹᝄ৚‫ޑ‬ᕉნǴӃ຾୯ৎ઱઱ࣴᔕᔼၮ࡭ុᆅ౛኱ྗǴவၗૻӼӄǵߎ
ᑼӼӄว৖Կӄౢ཰ϐᔼၮӼӄǶҞ߻Ѡ᡼ჹ‫ܭ‬ᔼၮ࡭ុᆅ౛‫س‬಍ϐว৖ၨࣁ
ୁख़‫ܭ‬ၗૻӼӄǴԜᆶ ISO 17799 ϐ௢୏Ϸၗૻౢ཰‫܌‬ග‫ٮ‬ϐഢජ‫س‬಍ᕉნԖ
ᜢǶନԜϐѦǴߎᑼӼӄᆶӄౢ཰ϐᔼၮӼӄۘค΋ှ،БਢǶ୷‫ܭ‬а΢ϐԵ
ໆǴѠ᡼ᔈᑈཱུࡌҥᔼၮ࡭ុᆅ౛‫س‬಍Ǵߦ຾୯ሞᝡ‫ݾ‬ᓬ༈ᆶӄౢ཰ୖᆶϐচ
߾ǴаၲԋബཥҾ཰ਏ੻ǵଯߕуሽॶᆶଯԋߏወΚϐҞ኱Ƕ
߈ٰǴ୯ѦҾ཰ჹ‫ܭ‬ҁ୯Ҿ཰ϐᔼၮᆅ౛ा‫؃‬ҭВ੻ቚуǴ‫ځ‬Ҟ‫ޑ‬ӧ‫ܭ‬ዴ
ߥ‫ٮځ‬ᔈ᜘ϐ࣬ᜢౢࠔૈᛙ‫ۓ‬ၲԋࠔ፦‫୍ܺ܈‬Нѳǹനத‫ـ‬Ώ୯Ѧ࠼Њϐዽਡ
ा໨хࡴ‫ٮ‬ᔈ୘ࢂցࡌҥҾ཰ᔼၮ࡭ុीฝȐBusiness Continuity Plan, BCPȑ
฻Ǵ೽ϩ୯ѦҾ཰ࣗԿ‫ܭ‬ዽਡൔ֋ύܴዴुр‫ׯ‬๓යज़Ǵऩ҂ૈ಄ӝ‫ׯ‬๓ा‫؃‬Ǵ
߾ӈΕόӝ਱‫ٮ‬ᔈ୘ӜൂǶԶ୯ሞεࠠӆߥϦљΨВ੻ख़ຎ࠼ЊӧѮ‫ؠځࡕؠ‬
ࡕൺচૈΚǴ຾Զຑ՗၀࠼Њӧᔼၮύᘐ‫ߥ׫‬ϐ࣬ჹ॥ᓀǴ٠჋၂ӝ౛ϸࢀ‫ܭ‬
ߥ຤΢Ƕ
Ӛ୯ჹ‫ܭ‬ BCM ว৖Ϸ௢Չཱུࣁ౰ՉЪ҅य़ǴЪ୯ሞ΢Ԗᜢᔼၮ࡭ុᆅ౛
ϐ኱ྗҭВᖿֹ᏾Ǵ೽ϩӃ຾୯ৎӵऍ୯ǵу৾εࣗԿஒ BCM ुࣁ୯ৎ኱ྗǴ
Զ࣬ၨа۳ଞჹၗૻౢ཰ϐ BCM ว৖ǴӚ୯֡ཀ᛽‫ځ‬໺಍‫ۓ‬ကό‫ى‬Ъ੟႕Ǵ
ࡺჹౢ཰ϐ BCM Ԗ‫ܴ׳‬ዴЪֹ᏾ϐᖿ༈Ǵӵ߄ 1 ‫܌‬ҢǴࣁӄౚ‫্ؠ‬ൺচᆶᔼ
ၮ࡭ុೕჄ࣬ᜢ‫ݤ‬ೕ༼᏾߄Ƕ
13

18. ߄ 1 ӄౚ‫্ؠ‬ൺচᆶᔼၮ࡭ុೕჄ࣬ᜢ‫ݤ‬ೕ༼᏾߄
ԃҽ ୯ৎ/೽ߐ ‫ݤ‬зೕക⁄኱ྗ Ҟ‫ޑ‬
1977 ऍ୯ᖄٖ‫୍ݤ‬೽
USA Department of
Justice
ٛጄѦ೽ઇᚯ‫ݤ‬ਢ
(Foreign Corrupt Practices Act )
„ ा‫؃‬ϦҔ٣཰ᐒᜢ‫ޑ‬ᆅ౛໘
ቫሡॄೢჹႝတၗ਑‫س‬಍ග
‫ٮ‬΋‫ۓ‬ำࡋ‫ޑ‬ٛៈǶ
1986 ऍ୯ᖄٖ୯ิֽ
USA Internal
Revenue Service
ऍ୯ᖄٖ୯ิֽբ཰ำ‫ׇ‬
86-19
IRS Procedure 86-19
„ ҁ‫ݤ‬ೕ፾Ҕ‫܌‬ԖҾ཰Ǵ‫܌‬Ԗ
ႝတ࣬ᜢ‫୍ิޑ‬ၗ਑೿ሡ‫ڋ‬
‫ۓ‬ഢҽϷൺচิ୍ၗ਑Ўҹ
‫ޑ‬ा‫؃‬Ƕ
1991 ऍ୯ᖄٖ཮ीᕴ࿿
USA General
Accounting Office
ި౻Ҭܰѱ൑ႝတӼӄ௓‫ڋ‬ೕ
‫ۓ‬
(GAO/IMTEC-91-56 Financial
Markets: Computer Security
Controls)
„ ҁ‫ݤ‬ೕ፾Ҕߎᑼ୍ܺ཰Ǵा
‫ިۓڋ؃‬౻ѱ൑‫ޑ‬ႝတӼӄ
௓‫ࡰڋ‬ᏤᆜाǶ
1993 у৾ε଄ࡹ೽
Treasury Board of
Canada
ߥӄϷᔼၮ࡭ុᆅ౛኱ྗ
(Security and Contingency
Management Standard)
„
„
ዴߥ୍ܺǵीฝϷᔼၮ‫ޑ‬ё
‫ڗ‬Ҕ‫܄‬Ǵхࡴ೽ߐᔼၮѸा
ϐၗૻǵ‫ނ‬਑ǵၗૻࣽ‫מ‬೛
ഢǵΓ঩Ϸ೛ࡼǶ
኱ྗѸा໨ҞǺว৖Ϸෳ၂
ᔼၮൺচीฝǵ୺Չ࠶ુϷ
॥ᓀຑ՗ǵϩ‫ߥ݋‬ӄૈໆǶ
1994 ऍ୯ᖄٖᆙ࡚ᔈᡂ
ᆅ౛ᕴ࿿ USA
FEMA
(FEMA FRPG 01-94 1994) „ ‫܌‬Ԗࡹ۬೽ߐϷᐒᄬ‫ॄޑ‬ೢ
Γ঩Ѹ໪҅ԄೕჄᆢ࡭‫ځ‬೽
ߐѸा‫ޑ‬ᔼၮբ཰Ƕ
1997 ऍ୯ᖄٖߎᑼ཰ᇡ
᛾‫ہ‬঩཮USA
Federal Financial
Institutions
Examination
Council
FEIEC FILL-67-97
Comptroller of Currency
BC-177 (1983, 1987)
superceded by EFIEC and
Federal Home Loan Bank
Bulletin R-67 (1986)
superceded by FEIEC
Inter-Agency Policy from
Federal Financial Institutions
Examination Council (FEIEC -
1989, revised and made stronger
1997)
„ ߎᑼ୍ܺ཰‫ޑ‬Ϧљဠ٣཮ሡ
ॄೢዴᇡ‫ځ‬ϦљϷӚঁϩϦ
љࣣԖ୺Չֹ᏾‫ޑ‬ᔼၮൺচ
ीฝϷᔼၮᆢ࡭ीฝǴ࣬ᜢ
Ѧх཰୍‫ޑ‬ቷ୘Ψሡु‫୺ۓ‬
Չֹ᏾‫ޑ‬ᔼၮൺচϷᆢ࡭ी
ฝǶ
14

19. ԃҽ ୯ৎ/೽ߐ ‫ݤ‬зೕക⁄኱ྗ Ҟ‫ޑ‬
1999 ऍ୯ ߎᑼ୍ܺ཰౜жϯ‫ݤ‬ਢ
(Financial Services
Modernization Act of 1999,
Gramm-Leach-Bliley Act)
„ ҁ‫ݤ‬ਢा‫؃‬ሌՉ཰ǵߥᓀ
཰ǵຓ‫཰چ‬ᆢ࡭፾྽‫ޑ‬Ӽӄ
аִ๓ߥៈ࠼Њ‫ޑ‬Ӛ໨ၗ
ૻǴ‫ঁ؂‬Ϧљ໪٩‫ځ‬ᔼၮೕ
ኳϷፄᚇࡋ୺Չਜय़Ўҹၗ
਑ӼӄीฝǴхࡴᆅ౛ǵ‫מ‬
ೌϷߥӄ௛ࡼ฻໨ҞǶ
1999 म୯଄ࡹ೽
UK Financial
Service Agency
म୯ϣ೽௓ᆅ‫ݤ‬ೕ
(Turnbull Report: Combined
Code on Internal Controls in the
UK)
„
„
ҁ‫ݤ‬ೕ໻፾Ҕ‫ܭ‬উඩ᛾‫چ‬Ҭ
ܰ‫܌‬ວ፤ި౻ϐҾ཰
म୯ϣ೽௓ᆅ‫ݤ‬ೕೕ‫཮ۓ‬ी
ৣा‫؂؃‬ԃ‫ۓ‬ය຾Չ॥ᓀᆅ
౛Ϸࢬำ௓‫ޑڋ‬ЎҹϷᆅ౛
ቩࢗǶ
2000 ऍ୯୯ৎٛОᏢ཮
USA National Fire
Protection
Association
‫্ؠ‬٣ࡺ/ᆙ࡚ᔈᡂᆅ౛Ϸᔼ
ၮ࡭ុीฝ኱ྗ
(Standard on
Disaster/Emergency
Management and Business
Continuity Programs)
„ ೭኱ྗࡌҥΑว৖ǵ୺Չǵ
ᆢ࡭‫্ؠ‬٣ࡺᆅ౛ǵᆙ࡚ᔈ
ᡂᆅ౛ǵᔼၮ࡭ុीฝ‫ޑ‬Ӆ
ӕຑ՗୷ᘵǴа੃෧ǵೀ౛
‫্ؠ‬٣Ϸᆙ࡚٣ҹǶ
2001 у৾εख़ε୷ᘵ೛
ࡼٛៈϷᆙ࡚ᔈᡂ
ྗഢ‫ہ‬঩཮
Canada Office of
Critical
Infrastructure
Protection and
Emergency
Preparedness
ᔼၮ࡭ុीฝࡰᏤᆜा
(A Guide to Business Continuity
Planning)
„ ග‫ٮ‬ϦҔ٣཰Ϸ‫د‬ΓҾ཰࣬
ᜢ‫ޑ‬၁ಒೕჄำ‫ׇ‬ϷЎҹၗ
਑ٰว৖ᔼၮ࡭ុीฝǴа
ዴߥӧᔼၮύᘐ‫্ؠ܈‬٣ࡺ
ਔǴᜢᗖ‫ޑ‬ᔼၮ໨Ҟૈ࡭ុ
ᆢ࡭ၮբǶ
2002 ३ෝߎᑼᆅ౛ֽ
Hong Kong
Monetary Authority
ᔼၮ࡭ុीฝ
(TM-G-2 Business Continuity
Planning)
„
„
ዴᇡߎᑼ୍ܺ཰ᇡёᐒᄬᔈ
‫ۓڋ‬ೕჄֹ᏾Ъ‫ڀ‬ᡏёՉ‫ޑ‬
ᔼၮ࡭ុीฝǴٰߥៈ‫܌‬Ԗ
‫ޑ‬ᜢᗖᔼၮ൑‫܌‬Ϸёૈ‫ߏޑ‬
ਔ໔ᔼၮύᘐ௃ნǶ
ߎ ᑼ ܺ ୍ ཰ ᇡ ё ᐒ ᄬ
(Authorized Institutions)໪ว
৖Ϸ௢Չᔼၮ࡭ុीฝǴЪ
ሡԵໆёૈวғ‫ޑ‬നᝄख़‫ؠ‬
15

20. ԃҽ ୯ৎ/೽ߐ ‫ݤ‬зೕക⁄኱ྗ Ҟ‫ޑ‬
্٣ࡺ௃ნǴ‫ٯ‬ӵǺ᏾⁥ࡌ
ᑐ‫ނ‬Ϸຼᎁ୷ᘵ೛ࡼֹӄᄛ
྄ǵѨѐख़ाΓ঩ǵߏਔ໔
٬ҔഢජπբӦᗺ฻Ƕ
2002 म୯଄ࡹ೽
UK Financial
Service Agency
ᔼၮ॥ᓀ‫س‬಍Ϸ௓ᆅࡌ᝼ൔ֋
(Consultation paper: 142
Operational risk systems and
controls)
„
„
ߎᑼ୍ܺ཰΋ѿԖค‫ݤ‬ᗉխ
‫ޑ‬ᔼၮύᘐਔǴᔈԖೀ౛‫ؠ‬
্٣ࡺ೷ԋ‫ޑ‬Ӛ໨ፂᔐϐྗ
ഢǴዴߥ‫ૈځ‬ᝩុᆢ࡭ၮբ
а಄ӝ‫ݤ‬ೕ‫ޑ‬ा‫؃‬Ǵ೭٤ྗ
ഢᔈԵໆҾ཰ᔼၮ‫ޑ‬ឦ‫܄‬ǵ
ೕኳϷፄᚇࡋǴ‫ۓ‬ය຾Չෳ
၂Ϸ‫׳‬ཥ‫ځ‬Ԗਏ‫܄‬Ƕ
ᔼၮ॥ᓀ‫س‬಍Ϸ௓ᆅࡌ᝼ख़
ᗺπբ໨ҞǺຑ՗ᔼၮύᘐ
‫ޑ‬ёૈ‫܄‬Ϸፂᔐǵ୺Չ࣬ᜢ
‫ྗޑ‬ഢ٣໨Ϸ‫ۓڋ‬฼ౣаᆢ
࡭҅தᔼၮǵຑ՗ഢජӦᗺ
‫ޑ‬፾྽‫܄‬Ƕ
2003 म୯୯ৎ኱ྗ‫཮ڐ‬
UK British
Standard Institute
PAS 56 ᔼၮ࡭ុᆅ౛ࡰᏤᆜ
ा
(PAS 56 Guide to Business
Continuity Management)
„
„
ࡌҥ฼ౣϷၮբ‫ࢎޑ‬ᄬǴᑈཱུ
ӦமϯҾ཰ᡏ፦Ǵ٬Ҿ཰ӧ
ၶ‫ډ‬ᔼၮύᘐ‫܈‬ཞѨ୍ܺϷ
ౢࠔਔǴΨૈᝩុᆢ࡭Ҿ཰
ᔼၮǶ
ҁࡰᏤᆜा፾Ҕ‫܌‬ԖಔᙃϷ
ౢ཰ǴЬाϣ৒хࡴु‫ۓ‬ᔼ
ၮ࡭ុᆅ౛‫ࢬޑ‬ำǵচ߾ǵ
஑ߐҔᇟǴග‫ٮ‬ᓬ‫ؼ‬ჴ୍ǵ
‫܌‬ሡ୺Չ‫ޑ‬Ӛ໨բ཰Ϸၮբ
ࡌ᝼ǵຑ՗୷ᘵǶ
2003 ཥу‫ߎڵ‬ᑼᆅ౛ֽ
Singapore
Monetary Authority
of Singapore
ᔼၮ࡭ុᆅ౛ࡰᏤᆜा
(Business Continuity
Management Guidelines)
„ ‫܌‬Ԗ‫ߎޑ‬ᑼ୍ܺ཰ᐒᄬ೿ሡ
୺ՉϷᆢ࡭а॥ᓀࣁЬື‫ޑ‬
ᔼၮ࡭ុीฝࢎᄬǴ٠Եໆ
‫ࡕؠځ‬ൺচϷҾ཰ᔼၮ࡭ុ
‫ޑ‬ૈໆᆶ‫ځ‬Ҿ཰ᔼၮ‫ޑ‬ឦ
‫܄‬ǵೕኳϷፄᚇࡋǶ
16

21. аΠ൩ჹ୯ѦൂՏǴჹ‫ܭ‬ᔼၮ࡭ុ‫ۓޑ‬ကᆶεཀ຾ՉϟಏǴхࡴǺ
1.ᐞࢪ/ફՋើ॥ᓀᆅ౛኱ྗ AS/NZS4360:1999
2.म୯኱ྗ‫཮ڐ‬ϐ PAS 56 ᔼၮ࡭ុᆅ౛ࡰᏤᆜा
3.ऍ୯ٛО‫্ؠ཮ڐ‬٣ࡺ/ᆙ࡚ᔈᡂᆅ౛Ϸᔼၮ࡭ុीฝ኱ྗ(NFPA1600)
4.ISO 17799 ၗૻӼӄ኱ྗ
5.DRII BCP Professional Practices
6.ཥу‫ڵ‬ᔼ཰࡭ុᆅ౛ࢎᄬϷ኱ྗ
2.1.1 ᐞࢪʏફՋើ॥ᓀᆅ౛኱ྗ Australian Standard AS/NZS
4360:1999
AS/NZS 4360ࢂЬाࢂа॥ᓀႣٛ‫ۺཷޑ‬բࣁҾ཰࡭ុ‫ޑ‬٩ᏵǴ٠ගрᇡࣁ‫ؼ‬
ӳ‫ޑ‬Ϧљ‫ݯ‬౛ᄊࡋёаࣁҾ཰஥ٰ҉ុ࿶ᔼ‫ࠨޑ‬ᐒ
ǹ
ӧAS/NZS 4360ᇡࣁࡌ࿼BCM
ёаࣁၠ୯‫ޑ܄‬Ҿ཰஖ԋфၲ‫ډ‬॥ᓀᆅ౛‫ޑ‬Ҟ‫ޑ‬ǵ٬Ҿ཰ᗌӛԋфϷ҉ុҞ‫ޑ‬బ
у‫׳‬ε‫ޑ‬០୏ΚǴკ1ࣁAS/NZS 4360‫ޑ‬ीฝࢬำǴӢԜAS/NZS 4360ჹ‫ܭ‬BCM๏
Α΋ঁܴዴЪᙁा‫ۓޑ‬ကǴ‫ۓځ‬ကࣁǺBCMёаග‫ٮ‬Ҿ཰Ԗਏ‫ޑ‬ၗྍϷำ‫ׇ‬аၲ
‫ډ‬Ҿ཰ु‫ޑۓ‬ЬाҞ኱Ƕ
AS/NZS 4360:1999‫ځ‬ЬाࢎᄬӵΠǺ
1.ጄൎǵᔈҔᆶ‫ۓ‬က
1.1 ጄൎ 1.2 ᔈҔ 1.3 ‫ۓ‬က
2.॥ᓀᆅ౛‫ޑ‬Ѹഢచҹ
2.1 Ҟ‫ޑ‬ 2.2 ॥ᓀᆅ౛ࡹ฼ 2.3 ु‫ۓ‬ीฝϷᝢഢၗྍ 2.4 ୺Չीฝ
2.5 ᆅ౛‫ޑ‬ᔠ૸
3.॥ᓀᆅ౛ཷፕ
3.1 εᆜ 3.2 Ьा‫؁ޑ‬ᡯ
4.॥ᓀᆅ౛‫؁‬ᡯ
17

22. 4.1 ࡌ ҥ ࢎ ᄬ 4.2 ॥ ᓀ ว ౜ 4.3 ॥ ᓀ ϩ ‫݋‬ 4.4 ॥ ᓀ ຑ ໆ
4.5 ॥ᓀჹ฼ 4.6 ᅱ࿎Ϸᔠ૸ 4.7 ྎ೯‫ڐک‬୘
5.इᒵ
5.1 εᆜ 5.2 इᒵ‫ޑ‬চӢ
‫؁‬ᡯ΋> ࣴᔕ໒‫ۈ‬
ሡᕇளଯ໘Ьᆅ‫ޑ‬Ѝ࡭
ࡌҥҞ኱‫ہ‬঩཮
ว৖ᔼၮ࡭ុࡹ฼Ϸ฼ౣ
‫؁‬ᡯΒ> ॥ᓀϷલѨϩ‫݋‬
،‫ۓ‬ಔᙃԋфϐᜢᗖӢન
ղձᜢᗖำ‫ׇ‬Ϸၗౢ
‫؁‬ᡯΟ> ่ӝᔼၮፂᔐϩ‫่݀݋‬
،‫ۓ‬ಔᙃӧคᜢᗖၗྍΠǴനε
ёᔼၮਔ໔
‫؁‬ᡯѤ> ‫ۓ‬ကᔈᡂ฼ౣ
ᆙ࡚ᔈᡂ
࡭ុᔈᡂ
ൺচၸำ
‫؁‬ᡯϖ> ၗྍᆶᜢೱ‫܄‬೛ഢ‫ޑ‬ว৖
ਥᏵၗྍ೛ഢϷ‫ځ‬д࣬ᜢᖄ‫ޑ܄‬
ำ‫ׇ‬Ǵٰ‫̉˿˾ۓڋ‬
‫؁‬ᡯϤ> ٩Ᏽᒧ‫ޑڗ‬฼ౣٰ‫࡭ۓڋ‬
ុीჄ
хࡴ΋‫س‬ӈ‫ޑ‬ЍජЎҹϷ೛ഢٰ
ว৖˾˿̉
‫؁‬ᡯΎ> ว৖΋ᖄ่฼ౣ
፾Ҕ‫ܭ‬঩πǴѦ೽ቷ୘Ϸ‫ٮ‬ᔈ୘
‫؁‬ᡯΖ> ᄽግ ᆢ࡭ϷीჄෳ၂
ග‫ݤٮ‬ೕϷीჄำ‫ޑׇ‬ᄽግǴ٬
ीฝֹ᏾
‫؁‬ᡯΐ> ୺ՉϷीჄว৖
ໆ
ෳ
Ϸ
ӣ
៝
Ֆ‫ޣ‬ჹҾ཰ಔᙃࢂख़ा‫ޑ‬
Ֆ‫ޣ‬ӧᔼၮၸำύǴࢂ‫܌‬ሡ٩ᒘ‫ޑ‬
ϙሶࢂҾ཰‫ޑ‬ᜢᗖᔼၮၗྍ
ϙሶ௃‫ݩ‬ΠǴ཮ቹៜಔᙃ‫ޑ‬Ԗਏᔼၮ
ϙሶ௃‫ݩ‬ΠǴ཮ፂᔐಔᙃ‫ޑ‬Ԗਏᔼၮ
࡛ኬ‫ޑ‬฼ౣёаೀ౛‫؂‬΋ᅿ௃ნ
ा࡛ኬωૈԋф‫ޑ‬ว৖ϷၮҔBCP
კ1! AS/NZS 4360 BCMࣴᔕำ‫ׇ‬
18

23. ࡌ࿼BCMሡाԵໆ೚ӭӢનǴхࡴǺ
1. ᕕှಔᙃ‫܌‬Ѹ໪ၲ‫ޑډ‬ᜢᗖҞ኱
2. ᠘ձಔᙃ཮ၶ‫ډ‬ᔼၮύᘐ‫ޑ‬Ӣન
3. ෳ၂Ϸໆෳ‫ځ‬д॥ᓀ௓‫ڋ‬Ϸ॥ᓀߺ෧‫ޑ‬฼ౣǴ‫ځ‬฼ౣ‫่݀ޑ‬೿ሡाమཱΑှǶ
4. ᕕှҾ཰ाၲ‫ډ‬ᜢᗖ‫ޑ‬Ҟ኱‫܌‬य़ᖏ‫ߔޑډ‬ᛖǶ
ඓඝΑ΢ॊ‫ޑ‬చҹǴӧ٩ᏵҾ཰ಔᙃ‫ޑ‬ೕኳ຾ՉԖਏ‫ޑ‬BCPࢬำ‫ޑ‬ว৖Ǵඤѡ
၉ᇥǴѝाඓඝΑচ߾ϐࡕǴѝा຾Չ٤೚‫ޑ‬অ‫୏ׯ‬բǴ٠࡭ុ๱ᆢ࡭ᆶዽਡ‫ޑ‬
୏բǴ߾BCMёࣁҾ཰ಔᙃ஥ٰԋфᆶ҉ុ࿶ᔼ‫ޑ‬០୏ΚǶ
ᐞࢪቩी೽ම຾Չ΋໨಍ीǴ಍ी‫ܭ‬2000ԃਔǴӧᐞࢪ‫܌‬ᖐᒤ‫ک‬Ҿ཰ᔼၮԖᜢ
‫཮૸ࣴޑ‬Ǵ༼᏾раΠჹ‫ܭ‬Ҿ཰ᔼၮ࡭ុԖቹៜ‫ޑ‬ӢનǺ
1. ൺচਔ໔Ǻεӭኧ‫ޑ‬Ҿ཰ಔᙃᇡࣁǴൺচਔ໔ऩຬၸ24λਔǴஒ཮ჹҾ཰ಔᙃ
Ԗ๱όёᑃྐ‫ޑ‬ቹៜǴ٠Ъ᏾ᡏ‫ޑ‬ൺচीฝஒ཮ख़ཥ຾ՉෳਔǴаዴߥ‫ځ‬ёՉ
‫܄‬ǹ΋ѿൺচਔ໔Ͽ‫ܭ‬8λਔǴё᛾ჴൺচीฝ‫ޑ‬ёՉ‫܄‬Ƕ
2. ‫ڐ‬ፓीฝǺхࡴीฝ‫ڐ‬ፓΓᆶ‫ڐ‬ፓ‫ہ‬঩཮‫ޑ‬ԋҥǴ‫ځ‬ЬाҞ‫ڐࣁޑ‬ፓӚ೽ߐӧ
຾ՉBCMਔᔈ‫ݙ‬ཀ‫ޑ‬٣໨Ǵ٠ЪჹBCM຾ՉЎҹϯǶ
3. ᔼၮीฝǺӧᐞࢪ໻Ԗ13.6%‫ޑ‬Ҿ཰ಔᙃ‫ځ‬ᔼၮीฝԖ຾ՉЎҹϯϷीฝ௤
៾ǹԶ36%‫ޑ‬Ҿ཰ಔᙃ٠ؒԖ຾Չीฝ‫ޑ‬ෳ၂ǴԶ΢ॊ‫ࣣޣٿ‬Ԗ຾Չ‫ޑ‬Ҿ཰ಔ
ᙃ໻9%Ǵ
ӢԜᐞࢪቩी೽ा‫؃‬Ҿ཰ಔᙃ໪຾Չीฝ‫ޑ‬ЎҹϯϷीฝෳ၂฻‫ٿ‬໨
πբǶ
4. IT࡭ុीฝ‫ޑ‬ႣᆉǺᐞࢪቩी೽ම຾Չ΋໨಍ीǴҾ཰ಔᙃ໻޸຤2%‫ޑ‬Ⴃᆉ຾
ՉIT࡭ុǴ‫܌‬аሡගଯԜБय़‫ޑ‬ႣᆉǶ
19

24. ҁЎҹࣁΑा٬BCM೭ᆅ౛‫س‬಍‫׳‬уు෌‫ܭ‬Ҿ཰ӚঁൂՏǴӢԜᔼၮ࡭ុी
ฝϐπբीฝ߄ჹ‫ܭ‬BCM‫ޑ‬ԋфว৖Ԗ‫܌‬շ੻ǹπբीฝ߄ࢂҗаΠ‫ޑ‬ϡન‫܌‬ಔ
ԋǴЪԜीฝ߄ё‫ڐ‬շBCM‫ޑ‬ว৖ࢬำ‫׳‬у໩ᄣϷᛙ‫ۓ‬ǴϡનхࡴǺ
1. ᔼၮፂᔐϩ‫݋‬ ฼ౣว৖໨Ҟ
2. നλၗྍሡ‫؃‬
3. ࡭ុीฝ
4. ࡭ុ໺ၲीฝ
5. Ӓᐒᆅ౛࡭ុीฝ
6. BCMനλᅈ‫ى‬ा‫؃‬
7. ว৖ᄽግϷෳ၂ำ‫ׇ‬
8. BCMࢗਡ߄
2.1.2 म୯୯ৎ኱ྗ‫཮ڐ‬ϐ PAS 56 ᔼၮ࡭ុᆅ౛ࡰᏤᆜा
PAS 56ࢂਥᏵBusiness Continuity Institute‫ޑ‬Business Continuity ManagementǺ
Good Practice Guidelines, 2002‫܌‬ኗቪрٰ‫ޑ‬ǹPAS 56ჹBCM‫ۓޑ‬ကࣁҾ཰ុ࿶ᔼ
ᆅ౛ (BCM) Ѹ໪ࢂঁ፾ӝҾ཰Ҟ኱Ǵ٠ࣁҾ཰‫܌‬ᏱԖЪჴࡼ‫ޑ‬΋໨πբǶBCM
ග‫ٮ‬Ҿ཰Ϸᆅ౛‫ޑ‬ቶ‫ݱ‬ጄൎύǴคፕӧϦሦୱ‫د܈‬ሦୱ΢Ԗ΋኱ྗ‫߾ྗޑ‬ǹхࡴǺ
Ӓᐒᆅ౛
ǵ
॥ᓀᆅ౛
ǵ
Ϸ‫ޑೌמ‬ൺচ
Ƕ
BCMόѝज़‫ܭ‬ၗૻ‫্ؠೌמ‬ൺচ (information
technology disaster recovery, ITDR)Ǵӵკ2‫܌‬ҢǴBCM‫ک‬Ҿ཰‫ޑ‬ሦᏤ໘ቫ৲৲࣬ᜢǶ
ӢԜǴѸ໪ࡌҥ΋ঁӳ‫ޑ‬ᆅ౛πբϐதೕǶ
20

25. BCM)
(
Ҿ཰ᔼၮ࡭ុᆅ౛
Θ Θ Θ Θ Θ
Θ Θ Θ Θ Θ
‫ؠ‬
ࡕ
ൺ
চ
!
଄
୍
ᆅ
౛
!
‫ٮ‬
ᔈ
᜘
ᆅ
౛
ࠔ
፦
ᆅ
౛
!
଼
ந
Ϸ
Ӽ
ӄ
ၗ
ૻ
ᆅ
౛
!
ᆙ
࡚
‫ރ‬
‫ݩ‬
ᆅ
౛
ߥ
ӄ
!
Ӓ
ᐒ
ૻ
৲
‫ޑ‬
໺
ၲ
॥
ᓀ
ᆅ
౛
!
კ2! PAS56ගрBCM‫ޑ‬ำ‫ׇ‬
BCM ଞჹҾ཰ӧय़ჹౢࠔ΢‫ٮޑ‬ሡϷ୍ܺ΢วғυᘋǵύᘐ‫܈‬ཞѨ‫ޑ‬௃‫ݩ‬
ਔϐِೲൺচૈΚǴࡌҥ΋঺฼ౣ΢Ϸᏹբ΢‫ࢎޑ‬ᄬǶBCM όѝࢂӧ٣ࡺวғࡕ
‫ޑ‬΋ঁᔈᡂБ‫ݤ‬ǶBCM Ѹ໪Μჹ᏾ঁҾ཰ӚБय़‫ޑ‬ୢᚒٰीฝ(ӵკ 3 ‫܌‬Ң)ǶҾ
཰ӧཀѦ٣ҹࡕ‫ޑ‬ൺচૈΚ‫ڗ‬،‫ܭ‬ҁ‫ޑي‬ᆅ౛Ϸᏹբ೽ߐǹ൩ӵӕ‫ೌמ‬΋૓Ǵӧ
ࡌҥ BCM ीฝਔѸ໪Ԗ΋঺ֹ᏾‫ޑ‬Б‫ݤ‬Ƕ
ሦᏤ໘ቫ
BCM
Ӓᐒᆅ౛ीჄ
‫ೌמ‬ൺচीჄ
ΓΚၗྍीჄ
൑‫܌‬ൺচीჄ
Ҿ཰҉ុ࿶ᔼीჄ
πբ୔ୱൺচीჄ
Ӓᐒᆅ౛ीჄ
ᜢᗖ঩π
ӵ۳த΋૓ᔼၮ
ख़ཥଛ࿼঩π
଄୍ཟ௱Ϸ
൑‫܌‬ൺচ
კ3! BCMᆶ‫ځ‬дᆅ౛ीฝϐᜢ߯
21

26. εӭኧ‫ޑ‬Ҿ཰೿ᇡࣁȨཀѦ҉ᇻό཮วғӧԾρ‫يޑ‬΢ȩ
Ǵ
ȨѝाԖߥᓀ൩ૈ
୼ᔅշдॺவཞѨ‫܈‬ཀѦ٣ҹύൺচȩ
Ƕ‫ځ‬ჴߥᓀࢂ BCM Ԗ‫ޑ‬ှ،Б‫ݤ‬ύ‫ޑ‬΋ঁ
ᜢᗖ೽ϩǴᗨฅߥᓀૈࣁ଄୍΢ёૈวғ‫ޑ‬ཞѨႣբྗഢǴՠࢂѬࠅόૈբࣁҾ
཰ҔٰႣٛཀѦ٣ҹวғǵख़ࡌ‫ࡠ܈‬ൺᔼၮૈΚ‫܈‬ख़ཥគள࠼ЊߞЈ‫ޑ‬Б‫ݤ‬Ƕ
྽ᛈࣆ٣ҹǵН‫ؠ‬ǵО‫ؠ‬฻ཀѦ٣ҹ΋ӆԋࣁൔર΢‫ޑ‬ᓐచཥᆪਔǴεӭኧ
‫ޑ‬Ӓᐒ൩Ԗӵँӵ‫ޑٰځ‬ε‫ؠ‬ᜤ΋૓Ǵ཮ჹঁձ‫ޑ‬Ҿ཰೷ԋቹៜǶԶ೭٤Ӓᐒჹ
‫ܭ‬Ҿ཰ค‫׎‬ЪԖሽॶ‫ޑ‬ၗౢ(ӵǺ୘኱ǵ‫׎‬ຝǵӜ៉)Ԗወӧ‫ޑ܄‬Ӓ্Ƕ΋ঁཀѦ
٣ҹวғ‫ޑ‬ೕኳϷೲࡋ۳۳ૈ୼ઇᚯ΋ঁҾ཰‫ޑ‬ᔼၮϷᆅ౛‫س‬಍ǴԶ೷ԋҾ཰‫׎‬
ຝϷӜ៉‫ޑ‬ཞᚯǹନߚૈӧวғཀѦਔջਔ‫ߥޑ‬ៈҾ཰‫س‬಍խ‫ܭ‬೏ઇᚯǶԶԖਏ
‫ޑ‬ BCM ൩วචΑߥៈБय़‫ޑ‬ϦҔ٠ૈ୼٬Ҿ཰ᔼၮᏃೲ‫ࡠޑ‬ൺǶ
ԜPASࢂ፾ҔBCMᆅ౛‫(ޣ‬The BCM manager)ǴΨ൩ࢂӧҾ཰ύૈஒዴჴӦѐ
୺ՉBCMЪᆅ౛‫ޑ‬ΓǶ
PAS ೏೛ीҔٰග‫ٮ‬ BCM ᆅ౛‫ޣ‬ӧΑှϷ୺Չ BCM ीฝਔ‫ޑ‬ᇶշπ‫ڀ‬Ƕ
‫؂‬΋ঁ BCM ᆅ౛‫ޣ‬೿Ѹ໪ຑ՗྽Ԝ PAS ‫܌‬ග‫ࡰޑٮ‬ᏤБଞᔈҔ‫ܭ‬ҁ‫܌ي‬ᏱԖਔ
ϐሽॶǶ
‫܌‬Ԗ‫ޑ‬Ҿ཰ҭ‫ڗ‬،‫ځܭ‬дӢનٰᆢ࡭‫ٮ‬๏᜘(ග‫ٮ‬ౢࠔ‫୍ܺ܈‬๏࠼Њ)ǶBCM
፾Ҕ‫ܭ‬ᐉၠҾ཰Ӛ೽ߐϷ࠼Њϐ໔‫ޑ‬ϩНᔂǶाၲ‫ډ‬΋ঁԖਏёՉ‫ޑ‬BCMीฝǴ
߾PAS‫ޑ‬ว৖ࢂ೏ᇡࣁࢂѸഢ‫ޑ‬ǶӢࣁPAS‫ޑ‬Ҟ‫ޑ‬ӧ‫ܭ‬ග‫ٮ‬΋ঁֹ᏾‫ࢎޑ‬ᄬϷࡰᏤ
চ߾ǶԜPAS๱ख़ӧBCM lifeϷำ‫ޑׇ‬Ϥঁ໘ࢤǶ
BCM ൻᕉᆢៈ߄ࢂ΋ঁೱុόᘐ‫ޑ‬ൻᕉၸำǴӵკ 4 ‫܌‬ҢǴхࡴаΠϤঁ
ၸำǶ
(1) Αှգ‫ޑ‬࿶ᔼ‫(ݩރ‬Understanding your business)
(2) ҉ុ࿶ᔼ฼ౣ(BCM strategies)
(3) ว৖Ϸ୺Չ BCM ीฝ(Development and implementing BCM plans)
(4) BCM Ўϯ‫ࡌޑ‬ҥ٠ಎਥ(Building and embedding a BCM culture)
(5) ୺Չǵᆢ࡭Ϸࢗਡ(BCM exercising, maintenance and audit)
(6) BCM ीฝᆅ౛(BCM program management)
22

27. კ 4 BCM ϐൻᕉᆢៈკ
ӢԜ٩Ᏽ΢ॊ‫ޑ‬Ϥঁ‫؁‬ᡯǴ຾ՉҾ཰BCM‫ࡌޑ‬࿼ǴஒёࣁҾ཰஥ٰനӝ፾ᆶ
ന٫‫ޑ܄‬BCMǴ෧ϿҾ཰य़ᖏ॥ᓀ‫ޑ‬ᐒ཮Ƕ
ԜࡌᄬBCMϐำ‫ׇ‬ǵচ߾Ϸ஑ҔೌᇟǴඔॊ࣬ᜢ‫ޑ‬πբϷ่݀Ǵග‫ٮ‬ჴࡼϐ
ࡌ᝼Ϸຑ՗ϐ኱ྗǶόᆅҾ཰‫ޑ‬ελ‫܈‬೽ߐ‫ޑ‬ӭჲǴPAS፾Ҕ‫܌ܭ‬Ԗ‫ޑ‬Ҿ཰Ƕ
2.1.3 ऍ୯ٛО‫্ؠ཮ڐ‬٣ࡺ/ᆙ࡚ᔈᡂᆅ౛Ϸᔼၮ࡭ុीฝ኱ྗ
(NFPA1600)
ԜЎҹ߯җऍ୯୯ৎ੃ٛ‫(཮ڐ‬National Fire Protection Association, NFPA)‫ڋ܌‬
‫ۓ‬ǹ‫ځ‬ೕጄ߯ӧࡌҥ΋঺‫্ؠ‬ᆅ౛ǵᆙ࡚٣ҹᆅ౛‫ک‬Ҿ཰࡭ុБਢ‫ޑ‬೯߾Ǵ٠ග
‫ٮ‬ჹ‫্ؠ‬ǵᆙ࡚٣ҹᆅ౛ϷҾ཰ᔼၮ࡭ុБਢ‫ޑ‬΋঺኱ྗǴёᙖаຑ՗౜Ԗ‫ޑ‬ी
ฝϣ৒‫܈‬բࣁว৖ǵჴࡼ‫ک‬ᆢៈ΋঺ёႣٛǵᔈᡂǵ෧ᇸǵൺচ‫্ؠ‬ᆶᆙ࡚٣ҹ
‫ޑ‬ीฝǶ
΋ǵᔼၮ࡭ុᆅ౛ϐ‫ۓ‬က
‫্ؠ‬/ᆙ࡚٣ҹᆅ౛ϷҾ཰ᔼၮ࡭ុი໗ࢂҗ೚ӭᐒᄬಔԋǴхࡴόӕቫભ‫ޑ‬
23

28. ࡹ۬ᐒᄬȐ‫ٯ‬ӵᖄٖǴԀ/ଗ‫ک‬྽Ӧቫભȑ
ǵ୘཰‫ک‬π཰ǵߚࡹ۬ᐒᄬϷ΋૓҇౲Ƕ
‫ঁ؂‬ᐒᄬࣣԖ‫ঁځ‬ձ‫ےޑ‬ԑϷᙍೢǴόӕ‫ޑ‬ၗྍǵфૈ‫ک‬ᔼၮ‫୷ޑ‬ҁচ߾Ϸำ‫ׇ‬Ƕ
‫ঁ؂‬ᐒᄬԖ‫ځ‬ҁ‫ي‬ჹ‫ۓޑ্ؠ‬ကǴόӕ‫ۓޑ‬ကӵΠ‫܌‬ӈǺ
1.วғ‫܈‬ջஒวғǴჹᐒᄬౢғӄय़‫܈܄‬ᝄख़‫ޑ‬Γ঩‫܈‬଄ౢཞѨǴ໾Ϋ‫ޑ‬Ϻฅ‫܈‬
Γࣁ‫ુ࠶ޑ‬Ƕ
2.ຬၸ΋૓ᐒᄬᔈᡂၗྍԶᔈ൨‫؃‬Ѧ೽ၗྍ‫ڐ‬շωૈൺচ‫ޑ‬ᆙ࡚٣ҹǶ
3.ँฅวғǴ‫܈‬ค‫ݤ‬ଶЗ‫ځ‬ว৖‫ޑ‬٣ҹǶ
(1)Γ঩ԝΫǴᎁ‫ڙ‬धᜤǴ഼ѨሽॶǴӒ্ᕉნ
(2)྽Ӧၗྍ‫׫܈‬Εค‫܍ݤ‬ᏼ
(3)ჹ‫܈཮ޗ‬Ծฅ‫ޑ‬ғ‫ڮ‬வ΋໒‫ۈ‬൩ԖЪᆢ࡭ߏය‫ॄޑ‬य़ፂᔐ
ֹ᏾‫ޑ‬॥ᓀຑ՗ᒣ᛽ወӧԖፂᔐ‫ޑ‬ᐒᄬǵᎃ߈୔ୱ‫܈‬Ѝ࡭ᐒᄬߕ߈ख़ाࡌ೛
‫ޑ‬Ӓ্ǵ࠶ુ‫܈‬Ӓᓀ٣ࡺǶ॥ᓀຑ՗໪ਥᏵӒ্ǵ࠶ુ‫܈‬Ӓᓀ٣ࡺдॺ‫࣬ޑ‬ჹว
ғᓎ౗Ϸᝄख़ࡋуаϩᜪǴଞჹወӧวғᓎ౗Ϸᝄख़ࡋଯ‫ޑ‬ಔӝǴᐒᄬ໪ჹёૈ
ᎁ‫ڙ‬ᝄख़ፂᔐ‫ޑ‬Γ঩ǵ଄ౢǵᔼၮǵᕉნϷᐒᄬҁ‫ޑي‬Ӓ্ǵ࠶ુ‫܈‬Ӓᓀ٣ࡺႣ
Ӄࡌҥᆙ࡚ᔈᡂǵӒᐒೀ౛ीฝᆶ‫ࡕؠ‬ൺচीฝǶ
ΒǵБਢᆅ౛
1. Бਢ୺Չ ᐒᄬᔈஒаΠϣ৒ЎҹϯǺ
(1)୺Չࡹ฼ǴхࡴᜫඳǴ‫ے‬ԑ‫ک‬௤៾
(2)БਢБଞϷҞ኱
(3)Бਢ‫ޑ‬ीฝϷำ‫ׇ‬
(4)፾྽‫ޑ‬ЬᆅᐒᜢǴ‫ݤ‬зǴ‫ݤ‬ೕϷ/‫ࣚ཰܈‬ჴ୍ೕጄ
(5)БਢႣᆉǴीฝਔ໔߄Ǵٚำ࿞
2. Бਢ‫ڐ‬ፓΓȐProgram Coordinatorȑ
ǴБਢ‫ڐ‬ፓΓᔈ೏ᐒᄬࡰ‫ۓ‬٠௤៾ᆅ౛Ϸ‫׳‬
ཥ᏾ঁБਢǶ
3. ᒌ၌‫ہ‬঩཮ȐAdvisory Committeeȑ
Ǻᔈ٩ྣᐒᄬࡹ฼ࡌҥǹᒌ၌‫ہ‬঩཮ᔈ‫׫‬Ε
24

29. ‫ڐ܈‬շБਢ‫ྗޑ‬ഢǴ୺ՉǴຑ՗Ǵঅ҅‫ޑ‬᏾ӝǶ
4. ҁ‫ہ‬঩཮ᔈхࡴБਢ‫ڐ‬ፓΓ‫ڀک‬ഢаΠచҹ‫ޑ‬ΓǺ‫ڀ‬Ԗӝ፾஑཰‫ک‬ҁᐒᄬ‫ޕ‬
᛽ǴϷԖૈΚᒣ᛽ᐒᄬύЬाфૈ୔ୱၗྍ‫ޑ‬ΓǶЪҁ‫ہ‬঩཮ᔈቻ‫؃‬፾྽‫ޑ‬ჹ
Ѧว‫៾ق‬Ƕ
5. Бਢຑ՗ ᐒᄬᔈჹБਢाનࡌҥᕮਏҞ኱Ǵ٠‫ۓ‬යຑ՗Ƕ
6. ၀ᐒᄬᔈᙖҗ‫ۓ‬යᔠຎǴෳ၂Ǵ٣ࡺࡕᔠ૸ൔ֋ǴᒱᇤᏢಞǴᕮਏᑽໆǴ‫ک‬ᄽ
ግٰຑ՗Бਢ‫ޑ‬ीฝǴำ‫ׇ‬ǴфૈǶ
(1)ᄽግᔈࣁෳ၂ঁձѸााનǴԖ࣬ϕᜢ߯‫ޑ‬ाન‫܈‬᏾ঁीฝԶ೛ीǶ
(2)ำ‫ׇ‬ᔈ೏ࡌҥǴаዴߥຑ՗Бਢᒣ᛽рό‫ى‬೽ϩ‫ޑ‬অ҅Չ୏Ǵ೏௦‫ڗ‬Ъঅ҅
࣬ᜢБਢीฝǶ
Οǵ॥ᓀຑ՗
ֹ᏾‫ޑ‬॥ᓀຑ՗Ǵёᒣ᛽ወӧ཮ፂᔐᐒᄬǴᎃ߈୔ୱǴ‫܈‬Ѝ࡭ᐒᄬ‫߈ߕޑ‬ख़
ाࡌ೛‫ޑ‬Ӓ্Ǵ࠶ુ‫܈‬Ӓᓀ٣ࡺǶӒ্ǵ࠶ુ‫܈‬Ӓᓀ٣ࡺ‫ޑ‬ወӧፂᔐǴ‫ڗ‬،‫ঁܭ‬
ձᝄख़ࡋϷΓ঩ǵ଄ౢǵᔼၮϷᕉნǴჹ‫ܭ‬य़ᖏӒ্ǵ࠶ુ‫܈‬Ӓᓀ٣ࡺ‫ޑ‬১ᗺǶ
॥ᓀຑ՗໪ਥᏵӒ্Ǵ࠶ુ‫܈‬Ӓᓀ٣ࡺдॺ࣬ჹ‫ޑ‬ᓎ౗Ϸᝄख़ࡋуаϩᜪǶा‫ݙ‬
ཀ‫ࢂޑ‬ǴԖёૈӸӧ೚ӭჹ‫ঁܭ‬ձ໨ҞԶ‫ق‬Ǵᓎ౗Ϸᝄख़ࡋ‫ޑ‬ወӧಔӝǶᐒᄬ໪
Ҿკ෧ϿǴྗഢǴೕჄуаϸᔈǴவٗ٤ёૈᝄख़ፂᔐΓ঩Ǵ଄ౢǴᔼၮǴᕉნ
Ϸᐒᄬҁ‫ޑي‬Ӓ্Ǵ࠶ુ‫܈‬Ӓᓀ٣ࡺࡠൺǶ
1. Ԗ΋٤ᙁܰ‫܈‬ፄᚇ‫ޑ‬॥ᓀᑽໆ‫ޑ‬Б‫ೌמکݤ‬Ƕ೭٤‫࣬کೌמ‬ᜢ‫ޑ‬ှញЎҹхࡴ
ՠόज़‫ܭ‬аΠǺ
(1) ଷ೛‫ݩރ‬
(2) ᔠࢗ߄
(3) ଷ೛‫ݩރ‬ᔠࢗ߄
(4) Ӓ্Ϸёᏹբ‫܄‬ᔠࢗ߄(HAZOP)
(5) ѨਏኳԄϷਏᔈϩ‫(݋‬FEMA)
25

30. (6) Ѩᇤᐋϩ‫݋‬
2. Ӓ্ᒣ᛽ሡхࡴՠόज़‫ܭ‬аΠወӧӒ্‫ޑ‬ᅿᜪ
Ӓ্ፂᔐϩ‫݋‬Ǻ೭ᅿϩ‫݋‬ჹаΠ൳ᗺᔈ๏΋ঁమཱ‫ޑ‬ှញǴჹ‫ܭ‬Ֆᅿ‫্ؠ‬ന
ёૈวғǴՖᅿᐒᄬ‫ޑ‬೛ഢǴфૈ‫ܭ୷୍ܺ܈‬၀‫্ؠ‬ౢғ‫ޑ‬১ᗺԶ‫ڙ‬ቹៜǴՖᅿ
௛ࡼ཮നԖਏ‫ޑ‬Ⴃٛ‫্ؠ‬ǴаϷӧ΋‫ۓ‬ය໔ϣᐒᄬёૈᎁ‫ޑڙ‬ወӧፂᔐǶፂᔐϩ
‫݋‬ύ၀ᐒᄬ໪Եໆፂᔐёаቹៜᐒᄬೀ౛‫্ؠ‬/ᆙ࡚٣ҹૈΚ‫ޑ‬ቹៜϐѦ೽୔ୱǶ
ᖐ‫ٰٯ‬ᖱǴ΋ঁᗮ॥‫ޑ‬΋ೱՍਏᔈǶ‫ޔ‬ௗፂᔐёхࡴ॥‫ؠ‬ཞѨ‫ࢫک‬НཞѨǹ໔ௗ
ፂᔐхࡴ೯ૻǵႝΚ‫ک‬ၮᒡύᘐǹჹ‫ޔ‬ௗፂᔐ୔ୱ‫ޑ‬ϣ೽ᆶѦ೽Ǵ‫ک‬΋‫ۓ‬ය໔ϣ
ჹᐒᄬ‫ޑ‬ወӧፂᔐǶ
3. ࿶ᔮϷ଄୍ፂᔐϩ‫݋‬Ǻ
Ϣ೚ፂᔐ‫ޑ‬ीໆϩ‫݋‬όԵໆ‫্ؠ‬/ᆙ࡚٣ҹ೷ԋ‫ޑ‬চӢǶԜϩ‫݋‬ஏϪӦᆶᒣ᛽
୷ҁ‫܈ޑ‬ख़ा‫ޑ‬фૈ‫ࢬ܈‬ำϐ࣬ᜢၸำǴ٠‫ڐ‬շ،‫ۓ‬ஒीฝԋਏख़Ј࿼‫ܭ‬ՖೀǶ
ҁϩ‫݋‬ᔠຎ΋ࢤය໔ϣᏤӢ‫ܭ‬фૈǴำ‫ׇ‬Ǵ‫୍ܺ܈‬ύᘐ‫܌‬ठወӧ‫ޑ‬࿶ᔮ‫܈‬଄୍ཞ
ѨǶ࿶ᔮϷ଄୍ፂᔐϩ‫ޑ݋‬Ҟ‫ࣁࢂޑ‬Αள‫ډ‬΋૓‫܄‬ཞѨ‫ޑ‬ႣයǴ၀Ⴃයᡉ౜рϙ
ሶೀ‫ܭ‬॥ᓀύǴаϷ㵝ΑЇᏤ෧ᇸ‫্ؠ‬/ᆙ࡚٣ҹቹៜ‫ޑ‬ำࡋǶ
2.1.4 ISO 17799 ၗૻӼӄ኱ྗ
ISO 17799ࢂϦϡ2000ԃҗISOಔᙃଞჹ‫ޕ‬᛽࿶ᔮਔжΠǴҾ཰ᆶҾ཰໔୘୍
຾ՉਔǴӵՖᆢៈᚈБඵችၗҁӼӄ‫ޑ‬୯ሞ኱ྗǶ‫ځ‬ೕጄ߾఼ᇂவಔᙃᆶ঩πၗ
ૻӼӄᆅ౛ǵၗૻၗౢӼӄᆅ౛ǵӸ‫ڗ‬௓‫ڋ‬ǵ೛ഢᆶᕉნӼӄǵӸ‫ڗ‬௓‫ډڋ‬Ҿ཰
࡭ុᔼၮೕჄ฻ӭ໨ǴࢂҞ߻Ҿ཰ӧ௢୏ၗૻӼӄਔ‫ޑ‬ന٫ୖԵǶ
΢ॊ೭٤ԵໆǴѸ໪ӕਔӆவѤঁ‫ٰࡋف‬ԵቾǶӵΠკ‫܌‬ҢǴѬॺϩձࢂȨಔ
ᙃȩ
ǵ
Ȩࢬำȩ
ǵ
ȨΓ঩ȩаϷȨ‫ೌמ‬ȩ
Ƕඤ‫ق‬ϐǴճҔ‫ڀ‬ഢϙሶኬ‫ޑೌמ‬Ϧљϣ೽Γ
঩‫ڐ܈‬Κቷ୘‫ޑ‬Ѧ೽Γ঩ǴᒥൻҾ཰ᆶಔᙃϣ೽‫ޑ‬πբᆶᆅ௓ࢬำǴ຾ԶၲԋҾ
཰ᆶಔᙃ‫ޑۓु܌‬Ҟ኱Ǵࢂ‫ۓڋ‬Ҿ཰ᆶಔᙃၗૻ‫ࡹೌמ‬฼‫ޑ‬ЬाᜢᗖǶԶၗૻ‫מ‬
ೌࡹ฼‫ޑ‬ပჴǴωૈ୼ග‫ٮ‬Ҿ཰ᆶಔᙃ΋ঁӧय़ჹ౜ӧᆶ҂ٰᝡ‫ࡷکݾ‬ᏯਔǴࡌ
࿼ၗૻ‫ޑೌמ‬ᒥൻᙔკǶ
26

31. 2.1.5 DRII Professional Practices
ҁЎҹࢂҗϖεക࿯‫܌‬ಔԋǴхࡴBCM‫ཷޑ‬ाǵЬाᔼၮ࡭ុीฝ‫ޑ‬ၗૻǵ
ीฝ‫ޑ‬ᆅ౛ᆶᆢ࡭ǵीฝෳ၂ᆶෳ၂ൔ֋ǴϷߕᒵ฻Ƕ
΃ǵBCMཷा
Ҿ཰టࡌ࿼ֹ᏾‫ޑ‬BCMǴ߯࿶ၸ೚ӭ‫؁‬ᡯǴൻ‫ׇ‬ᅌ຾Ӧ຾Չࡌ࿼Ǵ‫୷ځ‬ҁ‫؁‬
ᡯхࡴǺ
1. ीฝ‫ޑ‬ബ‫ۈ‬ᆶ௓‫ڋ‬
2. ॥ᓀຑ՗ᆶ௓‫ڋ‬
3. ᔼၮፂᔐϩ‫݋‬
4. ว৖ൺচ฼ౣ
5. ᆙ࡚ᔈᡂϷ௓‫ڋ‬Б‫ݤ‬
6. ᆶࡹ۬ൂՏϷϣ೽Ҿ཰໔‫ڐޑ‬ፓπբ
ਥᏵDRIIϐBCP஑཰ࡰࠄࡰрǴҾ཰‫ޑ‬BCPሡाΠॊ‫ޑ‬ϡન‫ޑ‬Ѝ࡭Ǵٰᆢ࡭᏾
ᡏBCM‫ֹޑ‬᏾Ϸ፾Ҕ‫܄‬ǴϡનхࡴǺ
1. ीฝ‫ޑ‬ᇡ‫ޕ‬ᆶෳ၂ࢬำ
2. ीฝ‫ޑ‬ᆢ࡭Ϸᄽግࢬำ
3. Ϧ໒‫ޑ‬Ӓᐒ‫ڐ‬ፓ‫ہ‬঩཮
ΒǵЬाᔼၮ࡭ុीฝ‫ޑ‬ၗૻ
ᔼၮ࡭ុᆅ౛Бਢ೯தёаவಔᙃ฼ౣय़ǵբ཰ࢬำय़ᆶၗྍ‫ڗ‬ளय़ԵໆǶ
ಔᙃ฼ౣय़ЬाԵໆᔼၮኳԄǴԖᔼၮ/ഢජኳԄ(Active/Backup Model)ǵϩ໒ᔼ
ၮኳԄ(Split Operation , Active/Active Model)ᆶ፺ࢬ٬ҔኳԄ(Alternate Site Model)
27

32. ΟᅿǶ
բ཰ࢬำय़ᆶಔᙃӚ཰୍ൂՏ‫ޑ‬фૈ‫ک‬Ҿ཰ᜢᗖೀ౛ࢬำԖᜢǴ‫ٯ‬ӵ౻ᏵҬ
ඤԾ୏ϯЍбೀ౛‫س‬಍(Clearing House Automated Payments System, CHAPS)ёૈ
‫ۓڋ‬Ȩ໻ज़‫ܭ‬ග‫ߎٮ‬ᑼ཰ӕ΋ϺϣϐεᚐЍбࡰз୍ܺȩࣁ‫ځ‬բ཰ࢬำय़฼ౣǶ
ၗྍ‫ڗ‬ளय़୷ҁ΢ᆶ཰୍ፂᔐϩ‫݋‬ԖᜢǴ‫ٯ‬ӵӧᔼ཰൑‫܌‬ൺচԵໆ΢Ǵಔᙃ
ᔈԵໆѳਔϩ໒բ཰‫ޑ‬Ӛ཰୍ൂՏ‫ؠܭ‬ᡂਔࢂցёаӝ‫ٳ‬ӧӕ΋൑Ӧբ཰Ǵӆᒧ
᏷஑ឦԄ(‫ޜ‬໔ελǵӦᗺǵԾࡌ‫܍܈‬ચ)ǵϕඁӅ٦/ᛝऊߥ᛾ৢԛБԄǵӅ٦/ᛝ
ऊҙፎБԄ(հԄǴ྽ග‫୍ܺٮ‬ቷ୘ၗྍϩଛֹࡕǴѝૈࣹᛗΑ)ᆶՉ୏ԄൺচБਢ
฻൑Ӧ‫ڗ‬ளБԄǶ྽ฅǴ٩ྣ཰୍ፂᔐϩ‫܌݋‬ሡၗྍۘхࡴΓΚၗྍǵ౜ߎࢬໆǵ
೯ૻǵᒤϦ೛ࡼǵႝတ೛ഢ‫ځک‬дၗྍ฻Ǵ่ӝӚᅿ‫ૼہ‬ೀ౛(Sourcing)Ǵคፕࢂ
‫ہ‬Ѧೀ౛(Out-Sourcing)‫ہ܈‬ϣೀ౛(In-Sourcing)೿ࢂԵቾ‫ޑ‬ӢનǶ
Οǵीฝᆅ౛ǵෳ၂ᆶᆢ࡭
ᔼၮ࡭ុᆅ౛ᔈӢᔈѦӧ‫܈‬ϣ೽բ཰ᕉნϐᡂϯǴ‫ۓ‬ය຾Չᔠ૸Ϸෳ၂Ǵ٠
җ٩Ᏽෳ၂่݀຾ՉѸाϐঅुǴஒෳ၂่݀Ϸঅुϣ৒ևൔഢࢗǶ
ෳ၂Ҟ‫ޑ‬ӧ‫ܭ‬Ꭱ‫ុ࡭୍཰ڰ‬ၮբीฝ‫ុ࡭ޑ‬Ԗਏ‫܄‬Ǵዴߥ‫؂‬΋Տୖᆶӣൺբ
཰‫ޑ‬ԋ঩֡ૈֹӄᕕှҞ߻‫ុ࡭୍཰ޑ‬฼ౣǵीฝᆶำ‫ׇ‬Ǵዴᇡёၲԋु‫ޑۓ‬ӣ
ൺҞ኱Ǵ‫פ‬рӣൺำ‫ׇ‬ύӸӧѸ໪ှ،‫ޑޑ‬ୢᚒǶ
ෳ၂‫ޑ‬ᅿᜪ΋૓Ԗ‫ೌמ‬ӣൺำ‫ޑׇ‬ર΢ኳᔕբ཰ǵჹ‫ؠ‬ᡂ٣ҹ‫ޑ‬ϸᔈำ‫ޑׇ‬
ኳᔕෳ၂ǴΓ঩ϐҬ೯ीฝǴᆛၡೱጕ‫ޑ‬ᙯௗෳ၂Ǵᆅ౛ำ‫ޑׇ‬ኳᔕર΢ෳ၂฻Ƕ
ෳ၂‫ޑ‬Б‫ݤ‬ԖଞჹӚᅿёૈ‫ݩރ‬຾Չ؅ዬ௢ᄽȐճҔύᘐ٣ҹ૸ፕӵՖӼ௨
ࡠൺᔼၮǴዽਡǵᡍ᛾ᆶዴᇡȑǵኳᔕෳ၂Ȑ੝ձଞჹ٣ࡺ‫܈‬Ӓᐒวғࡕϐ࣬ᜢ
ॄೢΓ঩຾Չ୻૽ȑ
ǵ‫܄ೌמ‬ൺচϐෳ၂
Ȑዴߥၗૻ‫س‬಍ૈԖਏࡠൺȑ
ǵჴሞ(Live)
ൺচᄽግෳ၂ǵ‫ٮ‬ᔈ୘೛ࡼϷ୍ܺϐෳ၂ȐዴߥѦ೽‫ٮ‬ᔈቷ୘‫܌‬ග‫ٮ‬ϐ୍ܺ‫ک‬ౢ
ࠔ಄ӝӝऊύϐೕ‫ۓ‬ȑǵჴሞኳᔕϐคႣ᝾(Unannounced)ෳ၂ȐаჴӦᄽግෳ၂
ಔᙃǵΓ঩ǵ೛ഢ‫ک‬ำ‫ࢂׇ‬ցૈ୼ᔈб੿ჴύᘐ௃‫ݩ‬ȑ฻Ƕ
྽ฅǴෳ၂‫܌‬ሡϐෳ၂ीฝᆶ่݀ᔠ૸Ѹ໪Ўҹ૶ᒵǴ࡭ុ໒ว‫ׯ‬๓௛ࡼǴ
28

33. ӈΕҾ཰҅Ԅࢗਡ໨ҞǶ
നࡕமፓᆢៈीฝ‫ុ࡭ޑ‬Ԗਏ‫܄‬ନෳ၂ѦǴᔈᑼΕಔᙃϣ೽‫ޑ‬௲‫૽ػ‬ግᡏ
‫س‬Ǵଛӝ፾྽‫ޑ‬ᡂ‫׳‬ᆅ౛ᆶᕮਏᆅ౛ǴωૈԋࣁȨҾ཰Ӛ೽ߐ‫ޑ‬ȩԶό໻ࢂȨၗ
ૻ୍ܺ೽ߐ‫ޑ‬ȩ࡭ុၮբᆅ౛Ƕ
2.1.6 ཥу‫ڵ‬ᔼၮ࡭ុᆅ౛ࢎᄬϷ኱ྗ
ཥу‫ߚڵ‬த‫ݙ‬ख़BCM೭໨ᆅ౛‫س‬಍Ǵ‫࣬ځ‬ᜢ‫ൂ۬ࡹޑ‬ՏԖཥу‫ڵ‬଄ࡹ೽ǵཥ
у‫ڵ‬኱ྗғౢΚϷബཥว৖ֽǴϷཥу‫ڵ‬ၗૻႝߞว৖೽
΃ǵཥу‫ڵ‬଄ࡹ೽(Monetary Authority of Singapore, MAS)Ǻ
Ϧթϐᔼၮ࡭ុᆅ౛ࡰᏤᆜा(Business Continuity Management Guidelines)
1. Ҟ‫ޑ‬Ǻཥу‫ڵ‬଄ࡹ೽ӧௗᕇߎᑼᐒᄬϸᔈǴᔈҗࡹ۬‫ۓڋ‬಍΋‫ޑ‬ᔼၮ࡭ុ
ᆅ౛ࡰᏤᆜाǴҥջᗎፎ஑ৎϷ཰ࣚ‫ڀ‬ჴ୍࿶ᡍΓ঩ଆ૛ᔼၮ࡭ុᆅ౛ࡰ
ᏤᆜाǴԜࡰᏤᆜाӅԖˤᗺ଺ࣁߎᑼᐒᄬࡌҥϷᆢ࡭ӄय़‫܄‬ᔼၮ࡭ុᆅ
౛ᒥൻϐ٩ᏵǴаமϯߎᑼᐒᄬᆢ࡭ᔼ཰࡭ុૈໆǴफ़եᔼၮύᘐ‫ޑ‬ፂᔐ
ϷཞѨǶ
2. ࢎᄬǺ
¾ ဠ٣཮ԋ঩Ϸଯ໘ЬᆅሡჹҾ཰୺Չॄೢᔼၮ࡭ុᆅ౛
¾ Ҿ཰ሡஒᔼၮ࡭ុᆅ౛ᏤΕВதᔼၮϷᆅ౛
¾ Ҿ཰ሡ‫ۓ‬යෳ၂ᔼၮ࡭ុीฝ
¾ Ҿ཰ሡว৖ൺচ฼ౣᆶ‫ۓڋ‬ख़ाᔼၮфૈϐൺচਔ໔Ҟ኱
¾ Ҿ཰ሡᕕှϷ੃෧ख़ाᔼၮфૈϐᜢೱ‫܄‬॥ᓀ
¾ Ҿ཰ሡว৖εೕኳᔼၮύᘐ௃ნ٠‫ۓڋ‬ᔼ཰࡭ុीฝ
¾ Ҿ཰ሡ‫࣬ۓڋ‬ᜢࡹ฼ٰ੃෧ख़ाᔼၮфૈϐଯࡋ໣ύ॥ᓀ
3. ଛ঺௛ࡼ
29

34. ¾ Ⴔᓰՠόம‫ڋ‬Ӛߎᑼᐒᄬ௦Ҕᔼၮ࡭ុᆅ౛ࡰᏤᆜा
ཥу‫ڵ‬଄ࡹ೽ஒࡌҥᔼၮ࡭ុᆅ౛୺ՉЋн٠‫ۓ‬යዽਡӚߎᑼᐒᄬǶ
Βǵཥу‫ڵ‬኱ྗғౢΚϷബཥว৖ֽ(Standards, Productivity, and Innovation
Board, SPRING)Ǻ
‫ܭ‬ 2004 ԃϦթҾ཰ᔼၮ࡭ុᆅ౛ᇡ᛾ᐒ‫(ڋ‬Business Continuity Management
Certification)Ǵаமϯཥу‫ڵ‬Ϧ୍ᐒᜢϷ‫د‬ΓҾ཰ӧᆢ࡭‫ځ‬ᔼၮόύᘐ‫ૈޑ‬ໆǴԜ
঺ᇡ᛾ᐒ‫ࢂڋ‬ਥᏵ SPRING ‫܌‬Ϧ֋‫ޑ‬ᔼၮ࡭ុᆅ౛኱ྗ(Standard on Business
Continuity Management)ࣁ୷ҡǶ
Ԝᇡ᛾ᐒ‫ޑڋ‬ᆒᡎӧ‫ܭ‬җҙፎൂՏ‫୺ޑ‬Չߏ(Chief Executive Officer)ዴᇡ‫ځ‬
ൂՏ୺Չᔼၮ࡭ុᆅ౛‫ޑ‬ԋਏǴᝤҗҙፎൂՏԾՉᔈҔᔼၮ࡭ុᆅ౛ᇡ᛾ᔠਡ߄
ӃՉਡ՗‫ځ‬ပჴำࡋǴӆஒ‫܌‬Ԗ࣬ᜢᇡ᛾ҙፎ߄ϷЎҹ஌‫ډ‬ SPRINGǴҙፎൂՏ
಄ӝϷֹԋਜय़ቩࢗำ‫ࡕׇ‬Ǵҗ SPRING ࢴрᔼၮ࡭ុᆅ౛ຑ՗λಔ຾Չ౜൑ዽ
ਡǴऩ၀ൂՏ೯ၸᔼၮ࡭ុᆅ౛౜൑ዽਡǴ߾җ SPRING ሦวཥу‫۬ࡹڵ‬ᇡ᛾ϐ
ᔼၮ࡭ុᆅ౛ၗ਱ǴԖᜢᇡ᛾ҙፎፎୖ᎙ΠЎǺ
1.ҙፎᔼၮ࡭ុᆅ౛ᇡ᛾ၗ਱Ǻ‫܌‬ԖϦ୍ᐒᜢϷ‫د‬ΓҾ཰֡ёගрҙፎǴՠ௨ନ
຾рαຩܰϦљǴ‫د‬ΓҾ཰ҙፎਔ‫ځ‬Ҿ཰ӧཥу‫ڵ‬໪Ԗᔼၮ٣ᕮϷ૶ᒵǶ
2.ၗ਱ज़‫ڋ‬ǺҾ཰໣ი‫܌‬ឦηϦљӧҙፎ SPRING ᇡ᛾ਔѸ໪಄ӝΠӈा‫؃‬Ǻ
(1) ηϦљѸ໪ࣁჴሞ࿶ᔼϐҾ཰ǴϦљѸ໪Ԗܴዴ‫ޑ‬ಔᙃࢎᄬɡϦљೕകϷԃ
ൔǶ
(2) ηϦљሡ‫ڀ‬ԖԾ‫ݯ‬ᆅ౛៾Ϸ஑Һ࿶ᔼ໘ቫǴٰ୺ՉҾ཰‫ٯ‬Չ‫܄‬ᆅ౛Ƕ
(3) ηϦљѝॄೢ୺ՉЍජҾ཰໣ი੝‫୍཰ۓ‬ǴӵՉᎍǵҾჄǵ࠼ܺǵࣴวǵ‫ݤ‬
୍ǵ௦ᖼǵ଄୍ϷΓΚၗྍᆅ౛Ǵ߾ό಄ӝҙፎၗ਱Ƕ
3.ҙፎᇡ᛾ЎҹǺ‫܌‬ԖҙፎЎҹ֡ሡҗҾ཰୺ՉߏᛝӜаҢॄೢǴҙፎЎҹሡྗ
ഢ΋ԄΟҽǴ‫܌‬ሡЎҹхࡴǺ
(1)ֹ᏾‫ޑ‬ᔼၮ࡭ុᆅ౛ᇡ᛾ҙፎਜ
30

35. (2)ֹ᏾‫ޑ‬Ҿ཰ԾՉᔼၮ࡭ុᆅ౛ᇡ᛾ᔠਡ߄
(3)ҙፎൂՏ‫ޑ‬ᔼၮ࡭ុᆅ౛Ћн
4.ᇡ᛾ࢬำǺᇡ᛾ࢬำхࡴϖεำ‫ׇ‬ǴፎୖԵკ 5 ᇥܴǴѝԖ಄ӝҙፎၗ਱‫ޑ‬Ҿ
཰ω཮ჴࡼ౜൑ዽਡǴֹԋ౜൑ዽਡࡕǴᔼၮ࡭ុᆅ౛ຑ՗λಔ཮ଌҬ SPRING
࣬ᜢࡌ᝼ൔ֋Ǵҗ SPRING ଺നࡕ،฼ࢂց೯ၸҙፎൂՏϐᔼၮ࡭ុᆅ౛ᇡ᛾
ҙፎǶ
ҙፎൂՏᔈҔBCMᔠਡ߄
຾Չϣ೽ዽਡ
ଌҬSPRINGֹ᏾
ҙፎ߄਱ϷЎҹ
SPRINGਜय़ቩࢗ
SPRING౜൑ዽਡ
ଌҬዽਡൔ֋
ϒҙፎൂՏ
კ 5 SPRING ϐᇡ᛾ࢬำ
5.ዽਡ຤ҔǺҙፎᇡ᛾όሡҺՖ຤ҔǴՠҙፎൂՏሡॄೢ౜൑ዽਡ຤ҔǴ຤Ҕࣁ
ཥѠჾ਎࿤ϡ᏾(ΒঁπբϺ)Ƕ
6.༤ቪᔼၮ࡭ុᆅ౛ᇡ᛾ᔠਡ߄Ǻҙፎᇡ᛾ൂՏӧ SPRING ࢴΓჴࡼ౜൑ዽਡ߻
ሡֹԋϣ೽ዽਡǶ‫܌‬Ԗᔠਡ߄ϣ 54 ໨ᒧ໨֡ሡֹԋǴऩӣเ“ࢂ”ᒧ໨Ǵ߾ሡྗ
ഢᇥܴၗ਑‫ୖ܈‬Եၗ਑Ƕ
31

36. 7.ྗഢᔼၮ࡭ុᆅ౛Ћн
Ǻ
ග‫ٮ‬ BCM Ћн‫ޑ‬Ҟ‫ޑ‬ӧ‫ܭ‬٬ዽਡΓ঩ᕕှҙፎൂՏ‫ޑ‬
ᔼၮ࡭ុᆅ౛ᆅ౛‫س‬಍Ǵࢂࡺᔼၮ࡭ុᆅ౛ЋнᔈԖΠӈΎε໨Ҟၗ਑Ъόᔈ
ຬၸ 50 ।Ƕ
(1)ᜫඳ/Һ୍ᇥܴ
(2)ᔼၮ࡭ុᆅ౛ࡹ฼ϷҞ኱
(3)ख़ाᔼၮൂՏ‫܈‬фૈ‫ޑ‬ಔᙃࢎᄬ
(4)ख़ाᔼၮࢬำკ
(5)ҙፎᇡ᛾ൂՏӵՖமፓᔼၮ࡭ុᆅ౛‫ޑ‬ϖε໘ࢤϐख़ा໨Ҟ
(6)ᔼၮ࡭ុᆅ౛‫س‬಍‫ޑ‬ीฝǵำ‫ࢬ܈ׇ‬ำϐϕ୏௃‫׎‬Ϸᜢ߯კ
(7)‫׳‬ཥϷ௓ᆅᔼၮ࡭ុᆅ౛Ћнǵीฝǵำ‫ׇ‬ϷЎҹၗ਑ϐᇥܴ
8. ᔼၮ࡭ុᆅ౛ᇡ᛾ᔠਡ߄Ǻ‫ځ‬ख़ा໨ҞӅԖ 12 ε໨ǴϩձࢂǺ
(1)ᆅ౛ᐒ‫ڋ‬
(2)ᅱ௓ᐒ‫ڋ‬
(3)॥ᓀຑ՗
(4)ᔼၮፂᔐϩ‫݋‬
(5)ᔼၮ࡭ុ฼ౣᒧҔ
(6)ҥջᔈᡂीฝ
(7)ᔼၮ࡭ុीฝ
(8)ᕕှᔼၮ࡭ុᆅ౛
(9)ᔼၮ࡭ុᆅ౛‫܍‬ᒍ
(10)ෳ၂Ϸᄽግ
(11)ᆢៈ
(12)ዽਡ
Ο ǵ ཥ у ‫ڵ‬ ၗ ૻ ႝ ߞ ว ৖ ೽ (Info-communications Development Authority of
32

37. Sinagpore, IDA)Ǻ
Ϧթϐཥу‫ڵ‬ᔼၮ࡭ុʏ‫্ؠ‬ൺচ୍ܺ‫ٮ‬ᔈ୘኱ྗ(Singapore Standard
for Business Continuity/Disaster Recovery Service Providers)
1. Ҟ‫ޑ‬Ǻࠆॶཥу‫ڵ‬ᔼၮ࡭ុʏ‫্ؠ‬ൺচ୍ܺౢ཰Ǵࡌҥ኱ྗٰೕጄ‫ٮ‬ᔈ୘
‫୍ܺޑ‬฻ભϷനե೛ഢሡ‫؃‬Ǵ೸ၸᇡ᛾Ϸዽਡ‫ٰࡋڋ‬ᆢ࡭୍ܺࠔ፦Ǵа‫ڐ‬
շҾ཰ᒧ᏷ന಄ӝԋҁԵໆ‫ޑ‬БਢǴफ़ե‫ہ‬Ѧ‫ޑ‬॥ᓀǴаߥምҾ཰ၗౢϷ
ዴߥҾ཰ᔼၮϐ࡭ុǴᔼၮ࡭ុʏ‫্ؠ‬ൺচ୍ܺ‫ٮ‬ᔈ୘኱ྗࢎᄬӵკ 6 ‫܌‬
ҢǶ
კ 6 ཥу‫ڵ‬ᔼၮ࡭ុʏ‫্ؠ‬ൺচ୍ܺ‫ٮ‬ᔈ୘኱ྗࢎᄬ
2. ࢎᄬ
¾ ΋૓ᔼ཰࡭ុʏ‫্ؠ‬ൺচೕጄǺၗౢᆅ౛ǵᕉნᛙ‫܄ۓ‬ǵ‫্ؠ‬ൺচ୍ܺ
‫܍‬ચК‫ٯ‬ǵफ़ե࠼Њ॥ᓀǶ
¾ ᔼ཰࡭ុʏ‫্ؠ‬ൺচ‫ٮ‬ᔈ୘ϐ୍ܺϷ‫ೌמ‬ा‫؃‬Ǻ஑཰‫ޕ‬᛽Ϸ࿶ᡍǵ೛ഢ
Ϸᔼၮྗഢǵ‫্ؠ‬ൺচЍජǵᆙ࡚ᔈᡂीฝǵ‫্ؠ‬ൺচλಔ૽ግෳ၂Ƕ
¾ ‫্ؠ‬ൺচ൑֟೛࿼ा‫؃‬Ǻႝߞ‫س‬಍ǵႝΚ‫ٮ‬ᔈ‫س‬಍ǵ੃ٛ‫س‬಍ǵߥӄ‫س‬
಍Ƕ
3. ଛ঺௛ࡼ
33

38. ¾ ᗎፎ཰ࣚୖᆶ኱ྗว৖ၸำǺԋҥ኱ྗπբλಔǴᗎፎӚᜪ‫ٮ‬ᔈ୘ǵ៝
ୢϦљǵߚࣦճಔᙃǵࡹ۬೽ߐуΕǴӅӕࣴᔕ኱ྗǶ
¾ ኱ྗϦթਔำ 2004 ԃ 3 Дֹԋ૛ਢǴ2004 ԃ 10 ДϦթ҅Ԅ኱ྗ
૟ஒFEMA CARǵNFPA 1600ǵBSI PAS56ϷDRIIȐDisaster Recovery Institute
International ,୯ሞ‫্ؠ‬ൺচ‫཮ڐ‬ȑϐ኱ྗϣ఼ᆶৡ౦༼᏾ӵ߄2‫܌‬ҢǴ٠ஒ೭Ѥ໨
኱ྗ຾Չϣ৒ೕጄ‫ޑ‬КၨǴ༼᏾ӵ߄3Ƕ
߄2 FEMA CAR / NFPA 1600 / BSI PAS56 / DRII Professional Practicesཷॊ
ൂՏ~ ϣ఼
ऍ୯ᖄٖᆙ࡚ᔈᡂᆅ౛ᕴ࿿
ϐFEMA FRPG01-94 1994
ҁೕ߾ࢂӧࡌҥ΋ᆙ࡚ᔈᡂ‫س‬಍Ǵа॥ᓀᆅ౛ࣁ୷ᘵǴࣁҾ཰ӧय़ᖏ
॥ᓀਔǴᗉխᔼၮ‫ڙ‬ၸε‫ޑ‬ፂᔐࣗԿύᘐǶ
ऍ୯୯ৎٛО‫཮ڐ‬ϐ‫্ؠ‬٣
ࡺ/ ᆙ࡚ᔈᡂᆅ౛Ϸᔼၮ࡭
ុीฝ኱ྗ
ҁ኱ྗೕጄ߯ӧࡌҥ΋঺‫্ؠ‬ᆅ౛ǵᆙ࡚٣ҹᆅ౛‫ک‬Ҿ཰࡭ុБ
ਢ‫ޑ‬೯߾Ƕ
ҁ኱ྗೕጄҞ‫ޑ‬ӧග‫ٮ‬ჹ‫্ؠ‬ǵᆙ࡚٣ҹᆅ౛ǵҾ཰࡭ុБਢॄ
ԖೢҺ‫ޑ‬Γ΋঺኱ྗǴ٠ᙖаຑ՗౜Ԗ‫ޑ‬ीฝϣ৒Ǵ‫܈‬բࣁว৖Ǵჴ
ࡼ‫ک‬ᆢៈ΋঺ёаႣٛǵᔈᡂǵ෧ᇸǵൺচ‫ک্ؠ‬ᆙ࡚٣ҹ‫ޑ‬ीฝǹ
ҁೕጄᔈҔ‫ܭ‬ϦӅϷ҇໔‫ޑ‬ीฝǶ
म୯኱ྗ‫཮ڐ‬ϐPAS 56 ᔼ
ၮ࡭ុᆅ౛ࡰᏤᆜा
Ԝ PAS ࢂ፾Ҕ‫ܭ‬ BCM ᆅ౛‫ޣ‬ǴΨ൩ࢂӧҾ཰ύૈஒዴჴӦѐ୺
Չ BCM Ъᆅ౛‫ޑ‬Γǹ‫؂‬΋ঁ BCM ᆅ౛‫ޣ‬೿Ѹ໪ຑ՗྽Ԝ PAS ‫܌‬ග‫ٮ‬
‫ࡰޑ‬ᏤБଞᔈҔ‫ܭ‬ҁ‫܌ي‬ᏱԖਔϐሽॶǶ
‫܌‬Ԗ‫ޑ‬Ҿ཰ҭ‫ڗ‬،‫ځܭ‬дӢનٰᆢ࡭‫ٮ‬ᔈ᜘(ග‫ٮ‬ౢࠔ‫୍ܺ܈‬๏࠼
Њ)ǶBCM፾Ҕ‫ܭ‬ᐉၠҾ཰Ӛ೽ߐϷ࠼Њϐ໔‫ޑ‬ϩНᔂǶाၲ‫ډ‬΋ঁԖ
ਏёՉ‫ޑ‬BCMीฝǴ߾PAS‫ޑ‬ว৖ࢂ೏ᇡࣁࢂѸഢ‫ޑ‬ǶӢࣁPAS‫ޑ‬Ҟ‫ޑ‬
ӧ‫ܭ‬ග‫ٮ‬΋ঁֹ᏾‫ࢎޑ‬ᄬϷࡰᏤচ߾
Ƕ
ԜPAS๱ख़ӧBCM life-ᐞύϷำ
‫ޑׇ‬Ϥঁ໘ࢤǶ
୯ሞ‫্ؠ‬ൺচ‫཮ڐ‬ϐᔼၮ࡭
ុीฝϐ஑཰ࡰࠄ
(A Professional’s Guide to
the Contents of a BCP)
DRIIගр΋ֹ๓‫ޑ‬BCPǴ໪ࡪ೽൩੤Ӧ຾ՉೕჄǴ‫؁ځ‬ᡯӵΠॊǺ
1. ߃යҞ኱‫ޑ‬ዴ‫ۓ‬
2. ॥ᓀຑ՗Ϸ௓‫ڋ‬
3. ᔼၮፂᔐϩ‫݋‬
4. ว৖ൺচ฼ౣ
5. ᆙ࡚ᔈᡂᐒ‫ڋ‬
6. Ϧ៾Κ຾Չ‫ڐ‬ፓ
7. ว৖Ϸࡌ࿼ᔼၮ࡭ុीฝ
8. ำ‫ޑׇ‬ᇡ‫ޕ‬Ϸෳ၂
9. BCP‫ޑ‬ᆢ࡭Ϸᄽግ
10. ಔᙃᆶϦӅᜢ߯ϷӒᐒ‫ڐ‬ፓ
34

39. ߄3 FEMA CAR / NFPA 1600 / BSI PAS56 / DRII Professional PracticesКၨ߄
ᆙ࡚٣ҹᆅ౛фૈ
(CAR Emergency
Management Functions,
EMF)
NFPA 1600 Standard
‫্ؠ‬/ᆙ࡚٣ҹᆅ౛ϷҾ཰
ᔼၮ࡭ុБਢ
(Disaster/Emergency
Management and Business
Continuity Programs)
BSI PAS 56:2003Ҿ
཰҉ុ࿶ᔼࡰࠄ
(Guide to Business
Continuity
Management)
DRII BCP Professional
Practices
ɡ
Бਢᆅ౛(Program
Management)
BCMीฝᆅ౛
(BCM Program
Management)
Бਢଆ‫ۈ‬ᆶᆅ౛(Project
Initiation and
Management)
ɡ ΋૓٣໨(General) ཷፕ(Overview) ɡ
‫ࡓݤ‬ϷЬᆅᐒᜢा‫؃‬
(Law and Authorities)
‫ࡓݤ‬ϷЬᆅᐒᜢा‫(؃‬Laws
and Authorities)
ᕕှா‫ޑ‬ᔼၮ
(Understanding your
Business)
ϦӅᜢ߯(Public
Relation)
Ӓᐒ‫ڐ‬ፓ(Crisis
Coordination)
ᆶࡹ۬ᐒᜢ‫ڐ‬ፓ
(Coordination with
Public Authorities)
Ӓ্ᒣ᛽Ǵ॥ᓀຑ՗
(Hazard Identification
and Risk assessment)
Ӓ্ᒣ᛽ǵ॥ᓀຑ՗‫ک‬ፂᔐ
ϩ‫(݋‬Hazard Identification,
Risk Assessment and Impact
analysis)
ᕕှா‫ޑ‬ᔼၮ
(Understanding your
Business)
॥ᓀຑໆᆶ௓‫(ڋ‬Risk
Evaluation and Control)
Ӓ্ߺ෧(Hazard
Mitigation)
Ӓ্ߺ෧(Hazard
Mitigation)
ၗྍᆅ౛(Resource
Management)
ᖄٛϕշ(Mutual Aid)
ᕕှா‫ޑ‬ᔼၮ
(Understanding your
Business)
॥ᓀຑໆᆶ௓‫(ڋ‬Risk
Evaluation and Control)
ᔼၮፂᔐϩ‫(݋‬Business
Impact Analysis)
ว৖BCP฼ౣ
(Developing Business
Continuity Strategies)
ೕჄ(Planning) ೕჄ(Planning) ᕕှா‫ޑ‬ᔼၮ
(Understanding your
Business)
BCMϐ฼ౣ
(Business Continuity
Strategies)
Бਢଆ‫ۈ‬ᆶᆅ౛(Project
Initiation and
Management)
॥ᓀຑໆᆶ௓‫(ڋ‬Risk
Evaluation and Control)
ᔼၮፂᔐϩ‫(݋‬Business
Impact Analysis)
ว৖BCP฼ౣ
(Developing Business
Continuity Strategies)
ว৖ᆙ࡚ᔈᡂᆅ౛ᆶၮ
բ(Emergency Response
and operation)
ว৖ᆶࡌ࿼(Developing
and Implementing BCP)
ࡰචǵ௓‫ڋ‬Ϸ‫ڐ‬ፓ
(Direction, Control and
Coordination)
ࡰචǵ௓‫ڋ‬Ϸ‫ڐ‬ፓ
(Direction, Control and
Coordination)
BCMीฝ‫ޑ‬ว৖ᆶ
ჴࡼ(Development
and Implementing
BCM Plan)
ᆙ࡚ᔈᡂᆅ౛ᆶၮբ
ว৖ᆶࡌ࿼BCP
ྎ೯Ϸ᝾ൔ
(Communication and
Warning)
ྎ೯Ϸ᝾ൔ
(Communication and
Warning)
BCMीฝ‫ޑ‬ว৖ᆶ
ჴࡼ(Development
and Implementing
BCM Plan)
ᆙ࡚ᔈᡂᆅ౛ᆶၮբ
ว৖ᆶࡌ࿼BCP
բ཰Ϸำ‫(ׇ‬Operation
and procedure)
բ཰Ϸำ‫(ׇ‬Operation and
procedure)
BCMीฝ‫ޑ‬ว৖ᆶ
ჴࡼ(Development
and Implementing
ᆙ࡚ᔈᡂᆅ౛ᆶၮբ
ว৖ᆶࡌ࿼BCP
35

40. ᆙ࡚٣ҹᆅ౛фૈ
(CAR Emergency
Management Functions,
EMF)
NFPA 1600 Standard
‫্ؠ‬/ᆙ࡚٣ҹᆅ౛ϷҾ཰
ᔼၮ࡭ុБਢ
(Disaster/Emergency
Management and Business
Continuity Programs)
BSI PAS 56:2003Ҿ
཰҉ុ࿶ᔼࡰࠄ
(Guide to Business
Continuity
Management)
DRII BCP Professional
Practices
BCM Plan)
ࡕ༇ЍජϷ೛ࡼ
(Logistics and Facilities)
ࡕ༇ЍජϷ೛ࡼ(Logistics
and Facilities)
BCMϐ฼ౣ
(Business Continuity
Strategies)
ว৖BCP฼ౣ
ว৖ᆶࡌ࿼BCP
ᇡ‫ޕ‬ᆶ૽ግ(Awareness
and Training)
૽ግ(Training) ૽ግ(Training) BCMЎϯ‫ࡌޑ‬ҥᆶ
ుϯ(Building &
Embedding a
Continuity Culture)
ᇡ‫ޕ‬ᆶ૽ግ(Awareness
and Training)
ᄽግǵຑໆ‫ک‬ᕖ҅Չ୏
(Exercises, Evaluation
and Corrective Actions)
ᄽግǵຑໆ‫ک‬ᕖ҅Չ୏
(Exercises, Evaluation and
Corrective Actions)
BCMϐᄽግǵᆢៈᆶ
ዽਡ(Exercising,
Maintenance &
Audit)
ᆢៈϷᄽግBCP
Ӓᐒྎ೯ϷၗૻϦ໒
(Crisis Communications,
Public Education and
Information)
Ӓᐒྎ೯ϷၗૻϦ໒(Crisis
Communications, Public
Education and Information)
BCM‫ޑ‬ीฝว৖ᆶ
ჴࡼ()
ᆶࡹ۬ᐒᜢ‫ڐ‬ፓ
଄୍‫ک‬Չࡹᆅ౛
(Finance and
Administration)
଄୍‫ک‬Չࡹᆅ౛(Finance
and Administration) ɡ
Бਢଆ‫ۈ‬ᆶᆅ౛
CAR: Capability Assessment of Readiness, BSI: British Standards Institution, DRII: Disaster Recovery
Institute International, NFPA: National Fire Protection Association
2.2 BCM ௢୏ࢎᄬϷࢬำ
BCM ௢୏ࢎᄬϷࢬำЬाჴࡼ‫؁‬ᡯᇥܴӵΠǺ
΃ǵीฝྗഢයǺ
ीฝྗഢ໘ࢤѸ໪ӃՉࣴᔕᆶࡌҥࡹ฼(Policy)
Ǵ
٠ᇥܴीฝᔕ఼
ᇂϐጄൎ(Scope)ελ
ǵ
౐୏ϐಔᙃ(Organization)ೕኳᆶၗྍ(Resources)
ӭჲ฻Ƕीฝྗഢ໘ࢤЬाπբхࡴǺ
ଆ‫཮ۈ‬᝼(Kick-off Meeting)Ǻ᝼ำೕჄхࡴҾ཰ଯቫ‫ۓ‬က୺Չጄ
ൎϷዴᇡπբਔำǵीฝ୺Չཷ‫ݩ‬ᇥܴǴаϷ࠹ҢϷ߄ၲȨҾ཰ᔼၮ
࡭ុीฝȩ‫୺ޑ‬Չ،ЈǶ
୷ҁၗ਑ԏ໣Ǻ୷ҁၗ਑ԏ໣ϣ৒хࡴǺᇙ೷ำ‫ׇ‬ǵғౢ௨ำǵ
ౢࠔሽॶஏࡋǵ‫ٮ‬ᔈᗗᆅ౛ǵ॥ᓀၗૻǵҾ཰ၗߎ଄୍ᆅ౛ǵಔᙃࢎ
ᄬᆶӚ೽ߐфૈǵ࠼Њϐा‫……؃‬฻࣬ᜢၗ਑Ƕ
36

41. ࢎᄬҾ཰ᔼၮ࡭ុᆅ౛(BCM)௢୏λಔхࡴ: (1)ࡰ‫ۓ‬ᔼၮ࡭ុी
ฝᕴє໣ΓǴа಍΋ჹϣϷჹѦϐᖄᛠྎ೯ᆅၰǴϷᆅ௓ीฝ຾ࡋϷ
ԋҁǶ(2)ዴᇡӚ೽ߐ஑ೢᅿηΓ঩Ǵёࡰࢴ೽ߐၗుΓ঩‫܈‬೽ߐЬᆅǴ
ᏼҺᔼၮ࡭ុीฝ஑ೢΓ঩Ǵа‫ڐ‬շϦљ௢୏ BCM ीฝǶ
ΒǵࢎᄬೕჄයǺ
२Ӄ೸ၸଯ໘Ьᆅ‫ޑ‬ჹ၉ǴΑှҾ཰ᔼၮ‫ޑ‬ᇻඳǵࡹ฼ǵҺ୍Ǵ
аճ‫ܭ‬ᔑჄࡕុ BCM ࢎᄬǴх֖॥ᓀຑ՗ǵᔼၮፂᔐϩ‫݋‬Ϸ BCM
௃ნᒧҔǴ٠ࡌҥ࣬ᜢᇶᏤ߄ൂǶ
1.॥ᓀຑ՗(Risk Assessment, RA)໘ࢤǺ
॥ᓀຑ՗‫ޑ‬Ҟ‫ࢂޑ‬ଞჹҾ཰ύ‫ޑ‬଄‫ނ‬ၗౢǵҾ཰‫׎‬ຝǵ୘៉ǵΓ
ΚၗྍϷኪ៛(ϣ೽ᆶѦ೽)॥ᓀ฻Ǵ೸ၸӒ্᠘᛽‫ࢬޑ‬ำǴϩ‫݋‬॥ᓀ
‫܌‬ӧՏ࿼ϐӒ্‫ރ‬ᄊǴ٠ຑ՗ԏ໣Ҿ཰౜໘ࢤϐӚᅿႣٛᐒ‫ڋ‬Ϸफ़ե
‫੃܈‬෧(Mitigation)Ӓ্॥ᓀჹҾ཰ϐፂᔐ‫܌‬຾Չ‫ޑ‬ϩ‫݋‬ၸำǶ၀ϩ‫݋‬
ࢬำхࡴว৖॥ᓀຑ՗Б‫ݤ‬ǵղ‫ۓ‬ᐒྗǵຑ՗Ϸ༼᏾Ҿ཰ᔼၮወӧ॥
ᓀᆶ࠶ુǵᒣ᛽ࡽԖٛៈᐒ‫ڋ‬ǵ॥ᓀ੃෧ᐒ‫ڋ‬ᆶԋҁϩ‫݋‬Ƕ
2.ᔼၮፂᔐϩ‫(݋‬Business Impact Analysis, BIA)໘ࢤǺ
BIA ‫ޑ‬Ҟ‫ࢂޑ‬යఈ‫פ‬рಔᙃኪ៛‫ܭ‬੝‫ુ࠶ۓ‬٣ҹ‫ޑ‬ำ‫ׇ‬Ǵ٠ϩ‫݋‬
೭ᜪኪ៛ჹᜢᗖᔼၮфૈ(Critical Business Function, CBF)ϐወӧઇᚯ
‫܄‬ፂᔐǶᔼၮፂᔐϩ‫݋‬Ьाπբхࡴᒣ᛽ᜢᗖ‫܄‬ᔼၮфૈ(Critical
Business Function)ǵᜢᗖ‫܄‬ᔼၮфૈ௨‫ׇ‬ǵᜢᗖ‫܄‬ᔼၮፂᔐ॥ᓀϩ‫݋‬ǵ
ᜢᗖ‫܄‬ၗྍᆶൺচਔ໔(Recovery Time Objective, RTO)ϩ‫݋‬Ƕᔼၮፂ
ᔐϩ‫݋‬ନёᒣᇡอයǵύයϷߏයᔼၮύᘐਔǴჹϦљᔼၮϷ଄୍‫ޑ‬
ፂᔐ‫ک‬ёૈ‫ޑ‬ᚳεᚐѦ຤ҔǴΨёа٬ଯ໘ЬᆅᕕှᔼၮύᘐਔǴჹ
Ϧљ‫ޑ‬ፂᔐ٠ගଯ‫ځ‬Ӓᐒཀ᛽Ǵ‫׳‬ёமϯϦљೀ౛‫্ؠ‬٣ࡺ‫ྗޑ‬ഢϷ
ૈΚǶ຾Չᔼၮፂᔐϩ‫݋‬ਔǴሡाԏ໣‫ޑ‬ၗ਑࣬྽ӭǴхࡴᜢᗖᔼၮ
໨Ҟ‫୔ޑ‬ୱǵሽॶϷ٩ᒘำࡋǵᔼၮ‫܌‬ሡၗྍǵ଄୍Ϸߚ଄୍य़ፂᔐǵ
ёௗ‫ڙ‬ύᘐਔ໔฻ၗ਑ǴӢԜଯਏ౗‫ޑ‬Չำᆅ౛ჹඓඝᔼၮፂᔐϩ‫݋‬
37

42. ‫ޑ‬຾ࡋஒࢂߚதख़ाǶ
3. BCM ฼ౣೕჄ
ӧֹԋᔼၮፂᔐϩ‫݋‬ൔ֋ࡕǴჿႻൂՏѸሡࣴගଯ໘Ьᆅ،‫ۓ‬Ԗ
ব٤฼ౣёа଺ࣁҾ཰Ꮓೲࡠൺᜢᗖ‫܄‬ᔼၮфૈၮբǴаफ़եᔼၮύ
ᘐ‫܌‬஥ٰ‫ޑ‬ፂᔐϷཞѨǴӚ೽ߐᔼၮ࡭ុीฝϐ஑ೢΓ঩ӆ٩΢ॊϐ
฼ౣǴว৖Ҿ཰ᔼၮ࡭ុीฝǴࣁ‫ុۯ‬Ҿ཰ϐ࿶ᔼᆶ٬‫ڙ‬ཞϐфૈ/
ᇙำ/ࢬำᏃೲࡠൺ҅தᔼၮǴѸ໪ᔕुᔼၮ࡭ុᆶൺচ฼ౣǶ฼ౣ
ว৖Ьाπբхࡴ฼ౣว৖߻ϐྗഢǵϣѦ़ғ॥ᓀ຾Չຑ՗ǵዴ‫ۓ‬
฼ౣϐᓬӃ໩‫ׇ‬ǵԋҁϩ‫݋‬Ƕ
ΟǵBCM ीฝว৖ය
BCM ࢂ΋ঁೱុόᘐ‫ޑ‬ൻᕉၸำǴхࡴаΠϤঁၸำǶ
1.Αှգ‫ޑ‬࿶ᔼ‫(ݩރ‬Understanding your business)
2.҉ុ࿶ᔼ฼ౣ(BCM strategies)
3.ว৖Ϸ୺Չ BCM ीฝ(Development and implementing BCM plans)
4.BCM Ўϯ‫ࡌޑ‬ҥ٠ಎਥ(Building and embedding a BCM culture)
5.୺Չǵᆢ࡭Ϸࢗਡ(BCM exercising, maintenance and audit)
6.BCM ीฝᆅ౛(BCM program management)
‫؂‬΋ঁ೽ߐଞჹ‫ځ‬ᜢᗖࢬำय़ჹ٣ҹፂᔐਔǴ೿ᔈᔕ‫ځۓ‬ BCP
(BCM ीฝ*ǴCDQ ࢂಔᙃჹ٣ࡺ௦‫ڗ‬ϸᔈ‫ޑ‬ख़ा٩ᏵǴಔᙃ‫ޑ‬ᔼၮ࡭
ុ฼ౣ࿶ଯ໘Ьᆅቩࢗ॥ᓀᆶԋҁࡕǴߡёҬбว৖ BCPǴBCP ೯
தхࡴᆙ࡚ᔈᡂीฝ(Emergency Response Plan, ERP)ǵӒᐒྎ೯ीฝ
(Crisis Communication Plan, CMP)ᆶᔼၮൺচ/࡭ុीฝ(Disaster
Recovery/ Business Continuity Plan, BCP/DRP)ǵ‫ځ܈‬дӒ্ߺ෧ीฝ
(Hazard Mitigation Plan)Ǵ‫ځ‬ीฝϣ৒Кख़ֹӄ‫ڗ‬،‫ܭ‬฼ౣҁ‫ي‬ᆶଛ঺
௛ࡼᆶցǶ
1.ᆙ࡚ᔈᡂीฝ
38

43. ‫୺ځ‬Չਔᐒ΋૓ࣁ٣ࡺวғࡕ΋λਔϣǴӵΓ঩໾ΫǵО‫ؠ‬ǵ
ࢫНǵϯᏢࠔѦࢻǵО‫ؠ‬ᛈࣆ฻วғࡕ΋ঁλਔѸ໪௦‫ڗ‬ϐՉ୏Ƕ
ԶӵՖӧ٣ҹวғࡕ൳ϩដ‫܌‬௦‫ڗ‬ϐՉ୏ࢂ،‫ۓ‬ᆙ࡚ᔈᡂीฝࢂ
ցԋфϐ،‫ۓ‬ाનǶ‫׆‬ఈวච‫ځ‬ጓಔᆶᆅ౛ϐᆒઓǴၮҔ‫্ؠܭ‬ٛ
௱ϐᆙ࡚ᔈᡂǴ᏾ӝӚ࣬ᜢൂՏΓΚᆶၗྍǴၲԋٛ௱ᔈᡂϐҞ
኱Ƕ‫ځ‬ಔᙃࢎᄬ௦ᕵӛ‫ޑ‬΢Πྎ೯ǴӚљ‫ځ‬ೢǴ۶Ԝೱ๎Ǵаၲ‫ډ‬
Ԗਏ಍΋ࡰච(Unity-of-Command)Ǵа‫ڐ‬շϦљଯ໘ЬᆅԖਏϐᔈ
ᡂࡰචᆶᆅ౛Ƕ
2.Ӓᐒྎ೯ीฝ
Ӓᐒྎ೯ीฝЬाҞ‫ޑ‬ӧ‫ܭ‬ග‫ٮ‬Ҿ཰வႣٛᆶჴ୍฻ᚈख़ᆅ
ၰٰႣٛӒᐒǵ௓‫ڋ‬Ӓᐒǵೀ౛ӒᐒǶ୤ԖుϪΑှӒᐒว৖ᆶᡂ
ᎂ‫ޑ‬ၸำǴωૈ੿ჴඓඝႣٛӒᐒ‫ޑ‬ϪΕᗺᆶ๱ΚᗺǶӢԜ୺Չਔ
ᐒёૈࣁ٣ࡺวғࡕ 0 λਔԿ 48 λਔϣǴ٣ࡺёૈҗϐ߻ᆙ࡚ᔈ
ᡂೀ౛ό཈‫ޑ‬О‫ؠ‬ǵᛈࣆǵӦ᎜ǵϯᏢࠔѦࢻ…฻Ӓ্٣ҹว৖ԋ
Ӓᐒ٣ҹࣁЬǶԶ‫্ؠ‬ཞѨ‫ޑ‬ຑ՗ᆶ‫ڐ‬ፓࣁҁ໘ࢤനख़ाϐπբǴ
ӧ٣ࡺวғࡕǴӵՖ੿҅຾ՉӒᐒೀ౛Ƕ΋ঁԖਏ‫ޑ‬Ӓᐒೀ౛ी
ฝǴёаᔅշҾ཰Ьᆅ‫ي‬ೀӒᐒ٣ҹύҭૈِೲԖਏ‫଺ޑ‬р،‫ۓ‬Ǵ
٠ᆶ‫཮ޗ‬ε౲଺ӳԖਏྎ೯Ǵаᆢ࡭Ϧљ҅य़Ҿ཰‫׎‬ຝᆶϦљި
ሽǶ
3.‫ࡕؠ‬ൺচीฝ
ᔼၮൺচ/࡭ុीฝ໘ࢤ୺Չਔᐒ
Ǵ
ёૈࣁ٣ࡺวғࡕ‫ޑ‬ኧϺԿ
ኧঁঁДϣǴൺচीฝ‫ޑ‬фૈࢂ೛‫ۓ‬΋‫س‬ӈ‫ࢬޑ‬ำკᆶՉ୏БਢǴ
ஒ࿶ᆅ౛໘ቫዴᇡϐᔼၮ࡭ុϷ‫ࡕؠ‬ൺচ฼ౣ຾Չಒ೽৖໒Ǵҗࡽ
Ԗ‫ޑ‬Չࡹಔᙃࣁ୷ҁࢎᄬǴ٠ዴҥൺচπբচ߾Ǵ٠‫ک‬Ӛ೽ߐ຾Չ
ྎ೯ٰዴᇡ‫ࡕؠ‬ൺচीฝ‫ޑ‬ਔำϷёՉ‫܄‬Ǵϩձ‫ۓڋ‬ӚঁՉࡹ೽ߐ
ӧӚਔำϣ‫܌‬ሡ୺Չπբϣ৒Ǵ٬ள‫ڙ‬ཞᔼၮфૈϷቹៜϐ࠼ЊϷ
ౢࠔૈᏃೲࡠൺғౢ‫ٮ‬೤Ǵаߡӧ٣ࡺวғϷ೴‫ࡠ؁‬ൺҾ཰ၮբǴ
аफ़ե‫্ؠ‬ჹҾ཰‫ޑ‬ፂᔐǶ
39

44. Ѥǵ‫س‬಍ᕖ҅යǺ
1.௲‫૽ػ‬ግǺ
ଞჹᔼၮ࡭ុीฝᕴє໣ΓϷӚ೽ߐ஑ೢᅿηΓ঩
Ǵ
຾ՉBCM
Ӛว৖໘ࢤϐ஑཰૽ግǴԶ‫܌‬ԖЎҹा‫؃‬ᔈӣᘜԿᆅ౛‫س‬಍ύᆢ
ៈǶ
2.ीฝᄽግϷᕖ҅Ǻ
ᙖҗ‫ۓ‬යᔠຎǴෳ၂Ǵ٣ࡺࡕᔠ૸ൔ֋ǴᒱᇤᏢಞǴᕮਏᑽໆǴ
‫ک‬ᄽግٰຑ՗Бਢ‫ޑ‬ीฝǴำ‫ׇ‬ǴфૈᄽግѸ໪ࣁෳ၂ঁձѸााનǴ
Ԗ࣬ϕᜢ߯‫ޑ‬ाન‫܈‬᏾ঁीฝԶ೛ी٠ࡌҥаዴߥຑ՗ीฝᒣ᛽рό
‫ى‬೽ϩ‫ޑ‬຾Չঅ҅Չ୏Ƕ
40

45. πբ໨ҞϷౢрԋ݀
BCM ௢୏ࢬำ
ԋҥȨBCMȩ௢୏λಔϷ!
є໒௴‫཮ۈ‬᝼!
ྗ
ഢ
ය
1.ֹԋȨBCMȩ௴‫཮ۈ‬᝼
ȨBCMȩࡹ฼ೖፋ!
ࢎ
ᄬ
ೕ
Ⴤ
ය
2.ֹԋᇶᏤ࣬ᜢ߄ൂ
3.ֹԋȨҾ཰॥ᓀϩ‫݋‬ȩ
4.ֹԋȨᔼၮፂᔐϩ‫݋‬ȩ
5.ֹԋ
ȨBCM ௃ნೕჄȩ
Ҿ཰॥ᓀϩ‫!݋‬
ᔼၮፂᔐϩ‫݋‬
ी
ฝ
ว
৖
ය
‫س‬
಍
ᕖ
҅
ය
BCM ीฝ৖໒
‫ٯ‬ӵȐᆙ࡚ᔈᡂीฝȑ
ȐӒᐒྎ೯ीฝȑ
Ȑ‫ࡕؠ‬ൺচीฝȑ
ीฝᄽግϷᕖ҅
૽ግᆶЎҹᆅ‫ڋ‬
BCM ฼ౣೕჄ
7.ֹԋȨीฝ૽ግȩ
8.ֹԋȨीฝᄽግȩ
6.ֹԋ
ȨBCM ௃ნीฝȩ
კ 7! Ҿ཰ᔼၮ࡭ុᆅ౛ȐBCMȑ௢୏ࢬำ
41

46. ಃΟക Ҿ཰॥ᓀຑ՗Ϸ฼ౣೕჄ
3.1 Ҿ཰॥ᓀϩ‫݋‬Ϸਢ‫ٯ‬ᇥܴ
ӣ៝॥ᓀᆅ౛࣬ᜢЎ᝘ᆶၗ਑Ǵ೚ӭቹៜಔᙃ॥ᓀ፺ᄂ‫ޑ‬ӢનǴ҅ࢂ॥ᓀᆅ
౛ᄽ຾‫ޑ‬চ୏ΚǶεठԶ‫ق‬Ǵ೭٤ӢનёϩࣁѦ೽Ӣનᆶϣ೽ӢનǶ
Ѧ೽ӢનхࡴǺ
1. ࿶ᔮᕉნ‫ׯޑ‬ᡂǴջ٬ᐒᄬҁ‫ي‬٠คҺՖ‫ׯ‬ᡂǴՠ࿶ᔮᕉნ‫ׯޑ‬ᡂஒ‫ׯ‬ᡂᐒ
ᄬ‫ޑ‬॥ᓀ፺ᄂǶ
2. ᝡ‫ݾ‬Ӣન ჹ‫ࣦܭ‬ճ೷ԋᓸΚ٠ёૈ‫ׯ‬ᡂ࠼Њ‫ޑ‬ᒧ᏷ᆶႣයǶ
3. ‫ࡓݤ‬/ᅱ౛΢‫ׯޑ‬ᡂ ࢌ٤௃‫ݩ‬Π೷ԋཥ཰୍‫ޑ‬ౢғǴӵ Gramm-Leach-Bliley
‫ݤ‬ਢ೯ၸࡕǴߎᑼᐒᄬளၠ཰࿶ᔼǹ‫ځ‬д௃‫ݩ‬ёૈౢғჹ཰୍‫ޑ‬ཥज़‫ڋ‬Ǵӵ
߻ॊ‫ݤ‬ਢύԖᜢ‫د‬ஏ‫ݤ‬ೕ೽ϩǴ٬ளᐒᄬӧ࿶ᔼ཰୍΢ǴሡᚐѦԵໆঁΓၗ
਑ᗦ‫ߥد‬ም‫ޑ‬ୢᚒǶ
ϣ೽Ӣન߾хࡴǺ
1. ࿶җಔᙃӆ೷(reengineering)‫܈‬ౢ཰໔(inter-)ᆶౢ཰ϣ(intra-)‫ٳ‬ᖼ(M&A)‫܌‬Ї
ଆ‫ޑ‬ಔᙃ‫܈‬ሦᏤ៾‫ׯޑ‬ᡂǶ
2. ߥ࡭Ϧљ౜Ԗѱ൑ӦՏᆶว୏‫װ‬༈຾Εཥѱ൑‫ޑ‬ཥ฼ౣǶ
3. ཥౢࠔ‫܈‬ᙑౢࠔ‫ׯ‬ᡂǶ
4. ཥ‫ೌמ‬ǵཥଛᎍᆅၰǴаϷཥำ‫ޑׇ‬٬ҔǶ
౛ፕ΢Ǵ೭٤Ӣનค‫܌‬όӧǴோӢᕉნǵಔᙃ‫ޑ‬ᄽᡂǴӧόӕਔයǴࢌ໨Ӣ
નႥਔ᝻ว྽ਔ॥ᓀᆅ౛‫ޑ‬ཥขᗺǴ٠Ъ࿶ᔼ‫ޣ‬ᕴࢂӧᐒᄬᎁ೹ѮεཞѨࡕǴ໒
‫ۈ‬ᡏᇡᔈ၀‫׳‬ᑈཱུӦᆅ౛॥ᓀǴ຾Զ௦‫ڗ‬ჴሞՉ୏уа‫ׯ‬๓ǶᕴᘜٰᇥǴ೭٤Չ
୏хࡴǺ
1. ᅱ౛‫ޣ‬ቚुཥೕ‫ۓ‬ņёૈ఼ᇂᑽໆǵൔᏤǴ‫܈‬ගӈၗҁņ‫ڐ‬շ‫ځ‬ᅱ௓ᆶ෧ᇸ॥
ᓀፂᔐǶ
42

47. 2. ѱ൑ୖᆶ‫ޣ‬ჹ‫ܭ‬॥ᓀӵՖᆅ౛ౢғཥ‫ޑ‬ႣයǶ
3. ᐒᄬѸ໪௓‫ڋ‬॥ᓀаᆢ࡭ᕮਏǶ
4. ၗૻᆶ‫ޑೌמ‬຾‫؁‬೷൩‫ࣁ׳‬ᆒஏ‫ޑ‬ᆅ౛‫מ‬ѯǶ
೭٤ჴࣁ॥ᓀᆅ౛Б‫ݤ‬ᆶπ‫ޑڀ‬຾‫ޑ؁‬চ୏ΚǶ‫ٯ‬ӵǴऍ୯ӧ 1980 ԃжԐය
‫ޑ‬ᓯᆽᆶສීӒᐒǴ೷ԋ྽ਔεৎჹճ౗॥ᓀ‫ޑ‬ख़ຎǹ1980 ԃжύයቺԀሌՉॹ
ഈᆶҡ‫ݨ‬ӒᐒǴ٬ளສී໣ύࡋୢᚒ‫ډڙ‬ख़ຎǹ߈ٰǴҗ‫ܭ‬ᗖҡಃ΋୯ৎሌՉ(First
National Bank of Keystone)ᆶ៙๯ሌՉ(Barings)ॹഈ٣ҹǴ٬ள཰‫ޣ‬໒‫ݙۈ‬ཀբ཰
॥ᓀኪ៛‫ޑ‬ୢᚒǹќѦǴЬᆅ྽ֽᜢЈ྽ౢࠔВᖿӭኬᆶፄᚇ‫ޑ‬௃‫׎‬ΠǴᐒᄬӵ
Ֆ຾Չᕴӝ॥ᓀᆅ౛Ǵٛጄ҂ฅǶ
ฅԶǴཥࠠπ‫ڀ‬ᆶБ‫ݤ‬Ǵς࿶ᚐѦӦஒ॥ᓀᆅ౛‫ޑ‬ขᗺǴҗঁձҬܰ॥ᓀ(ӵ
ສී‫܈‬Ҭܰ)ᙯ౽Կಔӝ॥ᓀ(ӵ‫׫‬ၗಔӝ‫ޑ‬॥ᓀॶ(value at risk))ᆶӄय़‫܄‬ᆅ౛॥
ᓀǶᒿ๱॥ᓀᆅ౛ර๱‫ࣁ׳‬ቶ‫ޑݱ‬БӛǴၗྍᆶ࿶ᔮၗҁଛ࿼ஒᡂள‫׳‬Ԗਏ౗Ǵ
ӧ॥ᓀ‫ޑ‬෧ᇸᆶൾϯёӕਔԵໆΠǴ᏾ᡏϦљ‫ޑ‬ၗྍന፾ଛ࿼ஒ‫ࣁ׳‬ᆒዴǶ
BCM ϐЬा೽ϩ൩ࢂዴߥҾ཰‫্ؠܭ‬วғࡕૈफ़եᜢᗖ‫(୏ࢲ܄‬Mission
Critical Activities, MCAs)Ǵ෧Ͽᎁ‫ڙ‬ཀѦ٣ࡺፂᔐวғ‫ޑ‬ёૈ‫܄‬ǴаϷ΋٤፾྽
‫ޑ‬௓‫୼ૈڋ‬೏మཱӦᇥܴǵ୺ՉЪ፾ϪӦᆅ౛Ƕ
୯ሞϯᆶӄౚϯჹ‫ܭ‬೚ӭၠ୯εҾ཰Ǵ‫ࢂ܈‬ύλҾ཰೿ஒࢂ΋ᅿࡷᏯǴ‫܌‬ሡ
Եໆ‫ޑ‬॥ᓀय़ҭ‫׳‬ቶǴӢԜҾ཰॥ᓀନΑ఼ᇂΑ΋૓‫ޑ‬॥ᓀ໨ҞѦǴ‫׳‬хࡴΑ଄
୍ǵ‫׎‬ຝǵᔼၮǵᕉნǵ‫ࡓݤ‬ǵΓΚǵ཰୍…฻ӭБय़‫ޑ‬॥ᓀӸӧӢηǴԶਥᏵ
୯ሞཞѨ௓‫(཮ڐڋ‬International Loss Control Institute, ILCI) ჹ‫ܭ‬ऍ୯Ҿ཰ 18,000
ҹ‫ޑ‬Ѯ‫ؠ‬಍ीǴ‫ځ‬ύ 70ʘ҂೛࿼॥ᓀᆅ౛‫س‬಍ϐҾ཰Ǵӧᎁ‫ڙ‬Ѯ‫ࡕؠ‬ϖԃϣ཮่
‫״‬ᔼ཰Ƕ
॥ᓀᆅ౛‫ۺཷޑ‬Ԑς౰Չ‫ܭ‬ኻऍǴ߈ԃٰ‫ঀ׳‬Ꮴ᏾ӝ‫܄‬॥ᓀᆅ౛‫܈‬౜жϯ॥
ᓀᆅ౛౛‫ۺ‬ǴԶ୯ϣ‫ق܌‬ϐ॥ᓀᆅ౛Ьाࢂࡰ଄୍य़ϐᆅ௓฼ౣǴԶߚ୯Ѧ‫ق܌‬
ϐҾ཰॥ᓀᆅ౛ཷ‫ۺ‬Ƕ᏾ᡏԶ‫ق‬ǴҾ཰॥ᓀхࡴԖ،฼॥ᓀ(Strategic Risk)ǵ଄୍
॥ᓀ(Financial Risk)ǵᔼၮ॥ᓀ(Operational Risk)ᆶӒ্॥ᓀ(Hazard Risk)…฻Ǵ
‫ځ‬ύ،฼॥ᓀᆶ଄୍॥ᓀӧ᏾ᡏҾ཰॥ᓀύ‫܌‬՞Кख़ε‫ܭ‬ᔼၮ॥ᓀᆶӒ্॥ᓀǴ
43

48. ԶӒ্॥ᓀΞаӼӄፁғᕉߥπբࣁЬाਡЈǶԜѦኻᡏΨӧ௢୏Ҿ཰॥ᓀᆅ౛
(Enterprise Risk Management)Ǵ‫ࢎځ‬ᄬхࡴ଄ౢᆶଶπයϐӒ্॥ᓀ(೛ഢѨਏǵ
ၗ਑॥ᓀǵО‫ؠ‬ǵН্ǵҍ࿾Չ୏ǵၮᒡӒ্…)ǹ଄୍॥ᓀ(ԏ੻‫܄‬ǵֹ᏾‫܄‬ǵ
ᓭбૈΚ…)ǹಔᙃၮբ॥ᓀ(ၮբว৖ǵߕឦൂՏǵᖄᛠᆶೢҺက୍…)ǹճ্ᜢ
߯‫ޣ‬॥ᓀ(៝࠼ǵ଄୍ǵϩх୘ǵ‫۔‬Б…)ǹᔼၮ॥ᓀ(ᐒఓᆶ೛ഢǵচ਑ᆶඹж‫ނ‬ǵ
ቲక‫ނ‬ᆶ௨‫ނܫ‬ǵπբ൑‫܌‬ǵౢࠔᆶ୍ܺϐࠔ፦…)฻Ƕ
൩྽߻ֽ༈Զ‫ق‬Ǵ‫ॺך‬຾΋‫؁‬ϩ‫݋‬Ҿ཰ӧ॥ᓀᆅ౛΢‫ޑ‬ୢᚒࣁՖ?
1. ᇡ‫ޕ‬ό‫ى‬ǺҾ཰॥ᓀᆅ౛‫ࢎޑ‬ᄬᆶ౛‫ځۺ‬ჴ୯ѦՉϐԖԃǴ୯ϣ໻ԖϿኧҾ
཰Ǵ੝ձࢂଯࣽ‫מ‬ౢ཰‫ࢂ܈‬୯ሞϯҾ཰Ԗࡌ࿼Ԝᡏ‫س‬Ǵ๊εӭኧҾ཰߾ࢂ٩‫ݤ‬
ೕᆶߥᓀϦљ‫܌‬ග‫ׯ‬๓ϣ৒ࣁЬǶ
z લЮ॥ᓀຑ՗π‫ڀ‬Ǻࣁᔼ೷Ҿ཰Ӽӄπբᕉნᆶଓ‫؃‬ӝ౛ߥᓀ຤౗Ǵమ
ཱᒣ᛽Ҿ཰ϣወӧϐӒᐒ‫܄‬॥ᓀǵӒᓀ‫܄‬॥ᓀǵሡᅱ௓॥ᓀᆶёௗ‫ڙ‬॥
ᓀࣗࣁख़ाǶϸᢀፏӭҾ཰ӧ຾ՉӒ্॥ᓀ‫ׯ‬๓ϐሞǴ๊εӭኧ߯٩Ᏽ
Ѧ೽ճ্ᜢ߯‫ޣ‬ϐཀ‫ـ‬຾Չ‫ׯ‬๓ǴԜբࣁ٠ค‫ݤ‬మཱඓඝ੿҅ॐϪЪᝄ
ख़ϐ॥ᓀՖӧǴ‫׳‬ၺፕჹ‫ܭ‬Ҿ཰ϐਏ੻ࣁՖǶӢԜǴమཱ‫ۓ‬ကటϩ‫݋‬ϐ
॥ᓀҞ‫ޑ‬ᆶᒧҔӝ፾ϐ॥ᓀຑ՗Б‫ݤ‬ፕᆶπ‫ڀ‬Бૈӄय़‫س܄‬಍‫܄‬ᒣ᛽р
Ҿ཰ϣወӧϐӒᐒ‫܄‬॥ᓀǵӒᓀ‫܄‬॥ᓀǵሡᅱ௓॥ᓀᆶёௗ‫ڙ‬॥ᓀǶ
z ‫ۓ‬ကటϩ‫݋‬ϐ॥ᓀጄᛑǴёҗҾ཰ᄬԋϐाન‫ํܜ‬গᛡԶᕇளǴԜाન
х ࡴ Γ ঩ (People) ǵ ೛ ഢ (Equipment) ǵ চ ‫ނ‬ ਑ (Material) ǵ ᕉ ნ
(Environment)Ǵҗൂ΋ाનߡё຾΋‫ࡘ؁‬઩‫׆‬ఈϩ‫݋‬ՖᅿӒ্Ǵ‫ٯ‬ӵচ
‫ނ‬਑ӧ೛ഢ‫ޑ‬ᕉნύёૈౢғϐӒ্ࣁՖ?೛ഢѨਏ೷ԋচ‫ނ‬਑Ѧࢻ٬
ளᕉნёૈ‫ډڙ‬Ֆᅿፂᔐ?Γ঩ӧচ‫ނ‬਑ᓯӸ‫ޑ‬ᕉნύёૈӒ্ࣁՖ?…
z ዴҥటϩ‫݋‬ϐ॥ᓀӒ্ࡕǴߡёᒧҔӝ፾ϐ॥ᓀຑ՗Б‫ݤ‬ፕᆶπ‫ڀ‬຾Չ
ӄय़‫س܄‬಍‫ޑ܄‬Ӓ্ᒣ᛽Ƕ‫ٯ‬ӵటϩ‫݋‬ᡂᓸᏔวғᛈࣆϐӢ݀ᜢ߯ߡё
ජҔ٣ҹᐋ(Event Tree Analysis, ETA)‫܈‬Ѩᇤᐋ(Fault Tree Analysis, FTA)
‫ޑ‬Б‫ݤ‬уаϩ‫݋‬ǹऩाΑှҾ཰О‫ؠ‬॥ᓀ‫ޑ‬ελᆶਡߥϐᜢ߯Ǵёаୖ
Եӵቺ୯ኀѭ໵ӆߥϦљǵᅇᒍґӆߥϦљϷ‫ځ‬дߥᓀϦљ‫܈‬஑཰ಔᙃ
ϐО‫ؠ‬॥ᓀຑ՗Б‫ݤ‬ (Fire Insurance Risk Evaluation) ٰϩ‫݋‬Ҿ཰ϐࡌ
44

49. ᑐ่ᄬ٬Ҕ‫܄‬፦Ӓ্ǵ੃ٛٛៈǵπቷӼӄᆅ౛…Ƕ
z ΢ॊୢᚒ΋ѿլܺǴߡёаమཱҾ཰ӧόӕϟय़΢ϐ॥ᓀ੝‫ࣁ܄‬ՖǴ٠
٩Ᏽ॥ᓀ‫ׯ‬๓ᓬӃ໩‫ׇ‬ǴջӒᐒ‫܄‬॥ᓀĺӒᓀ‫܄‬॥ᓀĺሡᅱ௓॥ᓀĺё
ௗ‫ڙ‬॥ᓀǴ೴ԃीฝ‫ׯ܄‬๓ǴԾฅԶฅҾ཰॥ᓀஒᕇளӄय़‫ޑ܄‬௓‫ڋ‬Ǵ
٠ள‫ډ‬ӆߥϦљ‫ۓޭޑ‬ᆶЍ࡭ǴࣁҾ཰‫ڗݾ‬നεᅽࣸǶ
2. ٣៾ό΋ǺҾ཰ߥᓀ٣୍೯தҗ଄୍೽ߐॄೢҬੋǴჹ‫ܭ‬ჴሞவ٣ཞѨႣٛᆶ
௓‫ޑڋ‬೽ߐԶ‫ق‬Ǵ٠҂ჴሞୖᆶ‫ځ‬ύǴ࿶தᏤठҾ཰Ӽӄᕮਏᆶ‫ׯ‬๓ոΚϐԋ
݀҂ӧ஑཰хး‫ޑ‬௃‫ݩ‬Πфᖝ΋ውࣗԿፋղᝢዸᅰѨ
Ǵ
ӢԜ೽ҽҾ཰ς೴‫؁‬ஒ
଄୍ǵӼӄǵፁғǵᕉߥᑼӝ‫ܭ‬॥ᓀᆅ౛೽ߐϐύǶ൩୯ϣҾ཰Զ‫ق‬ǴεࠠҾ
཰೯த཮൨‫ߥ؃‬ᓀ࿶इΓ‫܈‬॥ᓀᆅ౛៝ୢᐒᄬϐ‫ڐ‬շаँᡉҾ཰॥ᓀᆅ౛ᕮ
ਏǴฅεӭኧҾ཰ۘ҂٩ԜኳԄ຾ՉǴॶள‫ݙ‬ཀ‫ڀࢂޑ‬ഢ॥ᓀႣٛᆶ௓‫ೌמڋ‬
ૈΚϐߥᓀ࿶इΓ‫܈‬॥ᓀᆅ౛៝ୢᐒᄬǴჹ‫ܭ‬Ҿ཰॥ᓀϐ‫ׯ‬๓‫ڀ׳‬ቹៜΚǶ
3. ‫׫‬ᐒЈᄊǺҗ‫ܭ‬୯ϣѦࡹ࿶ֽ༈‫ׯޑ‬ᡂǴ೽ϩ཰‫ޣ‬Եໆ҂ٰёૈᙯॅ‫ځ‬дӦ୔
‫׫‬ၗǴԶόᜫᑈཱུय़ჹࡽӸ॥ᓀ຾ՉႣٛᆶ௓‫ڋ‬Ǵ‫܈‬ᒧ᏷కߥ΋೼ǴԜ‫ݤ‬ჴό
ॶਏЀǴঁΓࡌ᝼཰Ьჹ‫ܭ‬Ӓᐒ‫܄‬॥ᓀᆶӒᓀ‫܄‬॥ᓀϝᔈуம᏾ႥǴӢࣁပჴ
ӼӄωࢂҾ཰നεߥምǴߥᓀࢂӧ࿤όளа‫ޑ‬௃‫ݩ‬Π‫ޑ‬ᔈᡂϐၰǶ
‫ڙ‬୯ϣѦ‫ؠ‬ᜤ٣ࡺ‫ޑ‬ቹៜǴѠ᡼ౢ཰ߥᓀ຤౗ᆶԾॄᚐε൯ᚹϲǴӧ࿶ᔮե
଎‫ޑ‬ൣоύǴନΑౢ཰ϣѦဎእ‫ޑ‬ቹៜѦǴԜᖐ‫ࣁ׳‬Ҿ཰ѳబፏӭኁཆǴय़ჹᓀ
ൾ‫ޑ‬ᕉნǴҾ཰ऩόࢂᆶ྽ӦߥᓀϦљ‫܈‬୯ѦӆߥϦљִ‫ڐ‬ǴߡѝԖకߥ΋೼Ǵ
ோԜբࣁ৮ஒЇวҾ཰‫׳‬εӒᐒǴуೲҾ཰ీΫϐဌ‫؁‬ǶԖ᠘‫ܭ‬ԜǴӣᘜ॥ᓀᆅ
౛‫ޑ‬ਥҁБૈࣁҾ཰ബ೷നεճዎᆶගϲᝡ‫ݾ‬ΚǶ
வ 1990 ԃԿϞ‫ޑ‬ΜᎩၩύǴѠ᡼Ҿ཰ჹ‫ܭ‬ӼӄЎϯ‫ޑ‬༟೷ᆶӒ্॥ᓀ‫ޑ‬Ⴃ
ٛᆶ௓‫ڋ‬ǴዴჴԖҞӅ࿏ǴฅӼӄπբ‫ޑ‬ပჴǴࠅϝа୯ϣ‫ݤ‬ೕ‫܌‬ೕጄ‫ޑ‬ϣ৒‫܈‬
ჴ୍଺‫ࣁݤ‬ЬǴ‫ݤ‬ೕ߯ೕጄᔈԖϐനեНѳᆶा‫؃‬ǴࡺԜᜤᕇ୯ѦӆߥϦљϐᇡ
ӕǴΨ࿶த೷ԋҾ཰޸ΑεᒲǴࠅค‫ݤ‬ᕇளӝ౛‫ߥޑ‬຤ჹࡑǴ྽ฅаѠ᡼Ҟ߻೏
ӈࣁ႐‫ؠ‬Ӧ୔‫ޑ‬௃‫ݩ‬Զ‫ق‬Ǵૈ୼ᆢ࡭ߥ຤НྗᘉεӆߥϦљ‫ߥ܍‬ጄൎǴᔈࢂҾ཰
45

50. ёଓ‫؃‬ϐҞ኱Ƕ
Ҿ཰ᔼၮ࡭ុीฝࢂଞჹӚᅿёૈ‫্ؠ‬٣ࡺ॥ᓀǴхࡴО‫ؠ‬ǵᔼၮ฼ౣᒱᇤǵ
ౢࠔೢҺୢᚒǵᐒஏѦࢻǵࣴว຾ࡋပࡕǵᛈࣆǵख़ा༸೽೏໣ᡏࡩ‫ف‬ǵ໺ࢉੰ(ӵ
SARS)ǵԖࢥ਻ᡏѦࢻǵ१‫ނ‬ύࢥǵႝΚύᘐǵҡ‫ݨ‬Ӓᐒǵ੃຤‫ޟޣ‬઱ǵࡹ‫ݯ‬ኪ
୏ǵ৮‫܀‬ҽη฻฻Ǵᔕ‫ۓ‬ᔈᡂᆶൺচीฝǴаᔈбёૈჹϦљ‫܌‬೷ԋϐᔼၮᆶ଄
୍‫ݩރ‬ǶӢԜ BCP όѝࢂ‫্ؠ‬ൺচǵӒᐒᆅ౛ǵ॥ᓀᆅ౛௓‫ޑೌמࢂ܈ڋ‬ൺচǶ
Ѭ৖౜р΋ঁҾ཰‫ک‬ᆅ౛໘ቫӧ࿶ᔼቫय़‫ޑ‬ᇻ‫ـ‬ᆶ،ЈǴ೭ό໻ࢂҾ཰ϣ୺Չൂ
Տ‫ঁޑ‬ձ૽ግǴ‫ࢂ׳‬᏾ঁҾ཰Ӆӕୖᆶ‫ޑ‬ӄय़ीฝǶӧҾ཰य़ᖏ౦த‫ݩރޑ‬ਔǴ
BCP ග‫ٮ‬Ҿ཰ᝩុᔼၮ‫ޑ‬฼ౣ‫ک‬ၮբ‫ޑ‬ኳԄǴӧҾ཰ᔼၮύᘐ‫ࢂ܈‬ཞѨਔǴૈᝩ
ុග‫ٮ‬Ѭ‫ޑ‬ౢࠔ‫୍ܺک‬Ƕᔼၮ࡭ុीฝς࿶೏ᇡࣁࢂ΋ঁ‫ؼ‬ӳ‫ޑ‬Ҿ཰Ѹ໪ჴՉ‫ޑ‬
ࡹ฼‫ک‬ᄬԋ೭ঁҾ཰ࢂցૈ୼ᝩុғӸΠѐ‫ޑ‬ाનϐ΋ǶҾ཰ϣ೛࿼ BCP ᔈӧ
ᔼၮύᘐ฼ౣ‫ޑ‬Ёࡋ΢๱Ꮐ
Ǵ
Զόᔈ၀໻‫ע‬Ҟ኱߳ज़ӧӒᐒၮբϐᕉნϷచҹ΢
Ƕ
Ҿ཰‫ޑ‬॥ᓀϩԋ฼ౣ॥ᓀȐхࡴϣ೽‫ޑ‬ᆅ౛฼ౣϷѦ೽ᝡ‫ݾ‬฼ౣȑǵҾ཰ᔼ
ၮਔ཮೷ԋ‫ޑ‬॥ᓀǵ୯ሞ༊౗ᡂ୏ᆶሌՉճ౗ᡂ୏‫܌‬य़ᖏ‫ޑ‬଄୍॥ᓀǴӵ߄4‫܌‬
ҢǴϷၶ‫ډ‬Ϻ‫ځ܈ؠ‬дόёᗉխ‫܌‬೷ԋ‫ޑ‬Ӓᐒ॥ᓀǴ٠Ъ‫؂‬ᜪ॥ᓀ೿Ԗϣ೽ᆶѦ
೽‫ޑ‬όӕᡉ๱ᆶወӧ॥ᓀӢનǴӵკ8‫܌‬ҢǶ
߄ 4 Ҿ཰॥ᓀϐϣ఼ᆶਢ‫ٯ‬ϟಏ
฼ౣ॥ᓀ ᔼၮ॥ᓀ ଄୍॥ᓀ Ӓ্॥ᓀ
ҁ፦
ଯ໘Ьᆅჹ‫ܭ‬Ҿ
཰ϣѦ೽‫׎ޑ‬Ԅ
όమཱǴ٬Ҿ཰
‫ޑ‬ᔼၮ฼ౣᒱᇤ
୯ϣѦ‫ݤ‬ೕ‫ޑ‬ᡂ
ᎂǴ٬ϐᔼၮ॥
ᓀ‫ޑ‬ቚуǶ
ӢҾ཰ϣ஦୍ୢ
ᚒ‫܈‬Ѧ೽࿶ᔮᡂ
୏‫ޑ‬ቹៜǶ
ӢϺฅ‫ؠ‬্‫܈‬Γ
ࣁ౧Ѩ‫܌‬೷ԋख़
εᔼၮፂᔐ
ਢ‫ٯ‬
HP ‫ܭ‬ 90 ԃжύ
යǴӢ฼ౣᒱᇤ
Ꮴठᕇճև౜ॄ
ԋߏȐቚуȑ
RoHS ᆶ WEEE
‫ޑ‬௢Չ
റၲਢ
ૻᅷ
ϼႝ
921 Ӧ᎜
ВДӀύᚱቷઔ
ᑼϐ‫ؠ‬
46

51. ඵౢ៾‫ݾ‬೜
‫ೌמ‬௤៾ᡂϯ
៾ճߎ㑱ϲ
ౢࠔ‫ܕ‬ӣ
ǾǾ
ࡹ࿶ᡂ୏
‫ݤ‬з‫ࡹ܈‬฼ᡂϯ
ख़ε࠼Њᡂࡺ
ǾǾ
༊౗ᡂ୏
೯೤ᑩ๞‫܈‬ᆙᕭ
ᝡ‫ޣݾ‬ൾ‫܄‬ఠሽ
চ‫ނ‬਑ሽ਱㑱ϲ
࿶ᔮᑵచ
ճ౗ፓ᏾
ǾǾ
Ӧ᎜
ረ॥
Н‫ؠ‬
О‫ؠ‬ᛈࣆ
৮‫װ܀‬ᔐ
ǾǾǾ
Ϧљ‫ݯ‬౛Ѩፓ
ౢࠔೢҺ
‫ࡓݤ‬ນ೜
ࣴว೛ी‫ۯ‬ᇤ
Ӹ೤௓ᆅѨ྽
ࢬѨᜢᗖΓ঩฻
ᕉӼፁ٣ࡺ
೛ഢ೛ࡼࡺም
ၗૻ‫س‬಍Ѩᡫ
О‫ؠ‬ᛈࣆ
ᠷห
ᕵО‫܈‬ൾཀઇᚯ฻
౜ߎࢬໆѨፓ
‫׫‬ၗѨճ
ߞҔፓफ़
D&OೢҺ
ǾǾ
Бଞ฼ౣᒱᇤ
ၗҁЍрѨ྽
Γ٣ᆶ‫ೌמ‬ᒱ࿼
ᒱ՗ѱ൑ሡ‫؃‬
࠼Њ௨‫ׇ‬Ѩ྽
ǾǾ
კ8 ӚᅿҾ཰॥ᓀ‫ྍٰޑ‬
ᕕှҾ཰॥ᓀ‫ޑ‬ϣ఼ᆶٰྍϐࡕ
Ǵ
٠ЪਥᏵ॥ᓀวғٰྍ
ȐёϩԋϣѦ೽Ϸ(ߚ)
Γࣁȑ
Ǵ຾Չ॥ᓀϩᜪǴಉϩԋѤε໨ҞǴӵკ9ǴхࡴǺ
1. ϣ೽ɡ‫ೌמ‬/࿶ᔮ(ߚΓࣁ)Ǻ
2. ϣ೽ɡঁΓ/‫཮ޗ‬/ಔᙃ(Γࣁ)
3. Ѧ೽ɡ‫ೌמ‬/࿶ᔮ(ߚΓࣁ)
4. Ѧ೽ɡঁΓ/‫཮ޗ‬/ಔᙃ(Γࣁ)
47

52. ౢࠔ/୍ܺ΢‫ޑ‬લѨ
πቷ‫ޑ‬ཀѦϷπӼ٣ࡺ
ႝတࡺም
όֹӄ‫܈‬ඟ៛‫ૻޑ‬৲
଄୍֚ᜤ‫܈‬ઇౢ
Ѯε‫ޑ‬ᕉნ‫ׯ‬ᡂ
‫ࡋڋ‬Ѩ௳
Ծฅ‫(্ؠ‬Ӧ᎜ǵ
ǵረ॥ǵӇ႞)
ࡹ۬ᐒᜢ
୯ሞӒᐒ(ߎᑼ॥ኪ)
࡙π
ख़ा༸೽ԝΫ‫܈‬೏࿹ࢎ
ቷѦౢࠔ೏Πࢥ
ᖳ‫ق‬ύ໾
πΓጝπ
ಔᙃྎ೯Ѩ௳
ϣ೽ର‫ݾ‬
മၗ‫ݾל‬
ቷϣౢࠔᎁΠࢥ
ࠔ፦લ೤
ᖳ‫ق‬Ѻᔐγ਻
ߚ‫୏ࢲݤ‬
‫܄‬ផᘋ
໺ࢉੰጭ‫(ۯ‬SARS)
ϣ
೽
Ѧ
೽
‫ೌמ‬0࿶ᔮ)ߚΓࣁ*
ঁΓ0‫཮ޗ‬0ಔᙃ)Γࣁ*
კ 9 Ҿ཰॥ᓀϩ‫݋‬
Ҿ཰‫ޑ‬॥ᓀຑ՗(Risk Assessment, RA)ૈ୼ග‫ٮ‬Ҿ཰ၗૻ٬Ҕ‫ޑ‬Ҿ཰ૈ୼،
‫ۓ‬Ѭ‫ޑ‬॥ᓀཀᜫǴ‫ځ‬॥ᓀຑ՗Б‫ݤ‬ёஒ॥ᓀ٩‫ځ‬วғᓎ౗ᆶᝄख़‫܄‬຾Չ॥ᓀ฻ભ
‫୔ޑ‬ձǴ୔ձрҾ཰ӧ॥ᓀ௓‫ڋ‬΢‫܌‬ሡ‫׫‬Ε‫ޑ‬ၗྍϷЈΚǴӵკ 10 ‫܌‬ҢǹRA ‫ޑ‬
Ҟ‫ޑ‬ӧ‫୼ૈܭ‬ᒣձǵዴᇡǵమཱӦᇥܴϷຑ՗΋ঁҾ཰‫܌‬य़ჹ‫کޑ‬ MCAs ࣬ᜢ‫ޑ‬
॥ᓀǹ೭ࢂࡌҥ॥ᓀཀᜫϷՉ୏ीฝٰफ़ե॥ᓀǶ॥ᓀჹ‫ܭ‬΋ঁҾ཰Զ‫ق‬ёૈٰ
Ծ‫ܭ‬ϣ೽‫܈‬Ѧ೽ǴԶ‫ॺך‬ᔈ၀а೭٤॥ᓀวғ‫ޑ‬ёૈ‫(܄‬ᐒ౗Ϸᓎ౗)ٰຑ՗ѬǶ
җ RA ‫܌‬ள‫่݀ޑډ‬ᔈ၀хࡴᒣձǵዴᇡЪమཱ‫ޑ‬ᇥܴΠӈ٣໨Ǻ
1. Ҿ཰ኪ៛‫ܭ‬੝‫ۓ‬ᜪձ‫ޑ‬ཀѦ٣ҹ‫ޑ‬ёૈ‫܄‬Ƕ
2. ॥ᓀ໣ύǴ‫ٯ‬ӵǺஒ΋٤ MCAs Կ‫࣬ܭ‬ӕ‫ࡌޑ‬ᑐ‫܈ނ‬൑‫܌‬ϣǶ
3. ΋ঁ่ӝ‫ޑ‬ BIA Ϸ RAǴૈ୼ᓬӃೀ౛ BCM Ϸ॥ᓀ௓‫ޑڋ‬ขᗺǹЪ٬ள॥
ᓀཀᜫૈ୼೏Ҿ཰‫ޑ‬،฼ൂՏ‫܈‬ଯ໘Ьᆅᛝ࿿Ƕ
4. ຑ՗Ӛᅿ॥ᓀჹҾ཰೷ԋ‫ޑ‬ӒᐒǶ
5. ॥ᓀᆅ౛‫ޑ‬௓‫ڋ‬฼ౣϷπբीฝ೏ଯ໘Ьᆅ‫܌‬ᇡӕЪᛝ࿿Ƕ
48

53. ሡ຾Չ
॥ᓀᆅ౛
ሡ຾Չ
॥ᓀᔠෳ
ᆶᆅ౛
ሡᘉε
॥ᓀᆅ౛
ጄൎ
ሡ຾Չ
॥ᓀᆅ౛
॥ᓀᆅ౛
Ԗ୺Չ‫ޑ‬
ሽॶ
॥ᓀ‫ܭ‬
ᅱෳΠ
Ϣ೚วғ
Ϣ೚॥ᓀ
‫ޑ‬วғ
॥ᓀ‫ܭ‬
ᅱෳΠ
Ϣ೚วғ
ᆅ౛Ъᅱ
ෳ॥ᓀ
კ10 ॥ᓀᆅ౛ኳԄ
ਥᏵ॥ᓀຑ՗‫่݀ޑ‬ǴёаΑှҾ཰‫܌‬य़ᖏ‫ޑډ‬॥ᓀ௃‫׎‬Ǵӵ݀ा٬Ҿ཰‫ڙ‬
‫ޑډ‬॥ᓀ෧ϿǴёᙖҗ॥ᓀᆅ౛‫ޑ‬БԄஒ॥ᓀբന፾྽‫ޑ‬௓‫ڋ‬ᆶ੃ନǴӢԜ॥ᓀ
ᆅ౛‫ޑ‬фૈхࡴǺ
(1) ΑှҾ཰ϣ೽‫ޑ‬ᕉნǵಔᙃલѨᆶᜢᗖᔼၮǶ
(2) ᒣ᛽ԾฅϷወӧፂᔐ٣ҹჹ‫ܭ‬ᔼၮ࡭ុ‫ޑ‬ቹៜǴ‫ځ‬ύхࡴܴዴᆶё۹ౣ‫ޑ‬٣
ҹǶ
(3) Ҿ཰໪Αှӧ΋ࢤਔ໔ϣ‫܌‬วғ‫ޑ‬٣ҹǴ཮஥ٰ‫่݀ޑ‬Ƕ
(4) ࡌ࿼ᔈᡂ฼ౣǴа෧Ͽ॥ᓀ‫܌‬஥ٰ‫ޑ‬ፂᔐǶ
(5) ਥᏵ॥ᓀϩ‫่݀ޑ݋‬Ǵ۹ౣ॥ᓀॶե‫ޑ‬٣ҹǹ٠໪ᆢ࡭ᔼၮ࡭ុीฝ‫ޑ‬ଯ፾
ᔈ‫܄‬Ƕ
49

54. კ 11 ॥ᓀᆅ౛ᆶ BCM ‫ޑ‬ᜢ߯(ᐞࢪ AS/NZS 4360 ॥ᓀᆅ౛ࢎᄬ)
ϐ߻Ҿ཰а॥ᓀᆅ౛‫ޑ‬БԄբࣁҾ཰॥ᓀೕᗉ‫ޑ‬Б‫ݤ‬Ǵаයૈ٬Ҿ཰ᗌӛ҉
ុ࿶ᔼǴ‫܌‬ϩ‫݋‬БԄࣁ॥ᓀวғ‫܈ޑ‬ฅ౗ᆶᝄख़ࡋϐ४ᑈǴջࣁ॥ᓀǹԶᔼၮ࡭
ុᆅ౛ࠅஒ॥ᓀᆅ౛‫ۺཷޑ‬યΕǴ٠аᔼၮፂᔐϩ‫(݋‬BIA)ϐ่݀଺ࣁᔼၮ࡭ុᆅ
౛‫୷ޑ‬ᘵǴЪ‫ޔ‬ௗԵໆ॥ᓀ೷ԋ‫ޑ‬ፂᔐᆶቹៜਔ໔Ǵ଺നِೲ‫ࡕؠޑ‬ൺচԵໆǴ
നख़ा‫ޑ‬΋ᗺࣁǴᔼၮ࡭ុᆅ౛ёբࣁҾ཰ϣ೽‫܌‬Ԗᆅ౛БԄ‫ޑ‬ќ΋᏾ӝѳѠǴ
٩Ᏽ PDCA ᆅ౛‫߾ݤ‬Ǵ᏾ӝрന፾ӝҾ཰‫ޑ‬ᆅ౛ᕉნǶ
50