Development of a Multi-purpose Risk Assessment System for Multiple Management System Standards

抄録

After the Great East Japan Earthquake of March 11, 2011, business continuity management (BCM) has attracted more attention as a way to enhance the resilience of organizations in Japan. In addition, the ISO 22301 international standard for BCM was established in 2012 [1]. As a result, there are presently nineteen international standards for management systems (MS). Many organizations in Japan have already implemented multiple MS standards. Although there are many MS standards that require the implementation of risk assessment (RA), in reality, RA methods are not integrated and are individually conducted because their requirements differ from those of MS. The practice of applying RA methods for multiple MS standards often causes overlaps of a RA process and inconsistencies in RA results. A solution to these problems is the development of a “multi-purpose risk assessment system (MUPRAS).” This study aims to efficiently develop a MUPRAS by increasing the commonality between RA-required specifications of multiple MS standards on the basis of open architecture theory. This study proceeds as follows. First, types of the target MS standards are screened out. Second, the possession status of third-party certifications for MS standards is surveyed. Third, commonalities of RA-required specifications of MS standards are digitized. Fourth, assessment methods of commonality mentioned above are proposed. Fifth, a case study for a MUPRAS is conducted.