Resilient Governance: Securing Public Services by Implementing Business Continuity Management Systems in German Municipal Administrations

Business Continuity Management (BCM) complements information security management by providing reactive capabilities. Establishing a BCM is resource intensive and only few materials are tailored to German municipalities. This paper examines the BSI 200-4 standard, particularly its usability in the public sector. Our results indicate that the standard offers sufficient baseline start implementation but additional support from the state government is needed. In particular, the official supplementary materials are perceived as insufficiently usable, which might also reflect organizational and cultural constraints within the German public administration.