LAUSR

ABSTRACT Organizations use information systems to automate their processes. Similar to other types of information systems, hospital information systems face a variety of risks (i.e. potential hazards to human health). For responding to such risks, a practical fuzzy risk assessment framework is developed under the business continuity management concepts. The proposed framework benefits from a fuzzy multi-criteria decision-making method and a fuzzy inference system to quantify and analyze the uncertain information gathered from experts. A procedure for developing suitable business continuity plans is also presented. Finally, the applicability of the proposed framework is demonstrated through a real case study.