Plan de Continuidad de negocio para los servicios digitales de COAC Yuyay Ltda basado en la norma ISO 22301:2019

Abstract

The growing reliance on digital technology in financial institutions has increased the need for tools to manage and restore operations during technology failures, cyberattacks, human error, power outages, and other disruptive events. The purpose of this research is to develop a business continuity plan for the digital services of Cooperativa de Ahorro y Crédito “Yuyay” Ltda. using the framework provided by the ISO 22301:2019 standard. The research is conducted using a mixed-methods approach, descriptive and applied, which employs qualitative analyses of internal processes and business continuity capabilities, as well as a quantitative assessment of vulnerabilities. The investigation involves gathering institutional information, identifying the processes and technologies in use, conducting a business impact analysis, analyzing risks, and defining recovery parameters such as Maximum Tolerable Period of Disruption (MTPD), Recovery Time Objective (RTO), and Recovery Point Objective (RPO). Based on the information obtained during the investigation, recovery priorities will be selected, and business continuity measures will be developed. The research focuses on developing a business continuity plan that includes guidelines for contingency planning, recovery, and continuous improvement during implementation. The research will not include the full implementation of the strategies provided or the organization’s certification under the ISO 22301:2019 standard. Keywords: business continuity, ISO 22301, digital services, business impact analysis, risk management