企业安全管理和业务连续性管理

Discussion on Enterprise Safety Management and Business Continuity Management

风险管理和业务连续性管理是以系统安全理念推进企业安全管理的核心内容。结合ISO 31000对风险管理的要求,剖析了风险管理的基本要素,分析了如何引入风险管理,从安全文化的高度来推进企业安全管理。基于ISO 22301的要求,剖析了企业安全生产业务连续性管理内涵,提出了企业如何将业务连续性管理体系嵌入风险管理,尤其是用风险评估的方法和工具进行业务影响分析,从而提高企业应急响应与应急处置能力。

Risk management and business continuity management are the core of system safety. Safety management should embrace the concept of system safety in enterprises. Based on the content of ISO 31000, the paper analyzes basic elements and requirements of risk management, and discusses the methods of improving safety management in perspective of safety culture with risk management concept. Based on the requirements of ISO 22301, the paper analyzes the connotation of work safety business continuity management of enterprise, the way for the enterprises to embed business continuity management system into risk management, proposing the way to adopt risk assessment methods and tools for business impact analysis to improve emergency response and disposal ability.