ITIL Essentials
ITIL Essentials
ITIL Essentials
IT is the business
And
The business is IT
The Three P’s
• Customer
This term is used for the Customer management who
have responsibility for the funding of the service
• User
This term is used for the person using the service
• Super or Expert User
The User to deal with first-line support problems and
queries
Challenges to the IT Organization
• Professionalism
• Focus on benefits to the customer/business
• Decision making metrics
• Clear points of contact
• Part of a QM strategy - focus on continuous
improvement
• Cost reduction - based on the standardization of the
expensive processes (20/80)
• Avoid reinventing the wheel
• Long term survival!
The Objectives of ITSM
Objective Result
Activities
Operational Level
Input Output
Process
Materials, Goods,
Machines, Information,
Information, Services
Labor
Quality
Continuous
Maturity
Step by step
improvement
Act Plan
Check Do
H8988S ITIL SM1 H6885S Config Mgmt H6889S Availability Mgmt H7084S OV Service Desk
H8989S ITIL SM2 H6886S Help Desk Mgmt H6890S Capacity Mgmt H6876S OV Service Desk Impl’n
H8990S ITIL SM H6887S Problem Mgmt H6891S Cost Mgmt and Process Design
Exam Prep exam H6888S Change Mgmt H6892S SL Mgmt
H8991S ITIL SM3 exams
Model (According to ITIL)
Capacity Management
Service Level Management
Availability Management
Service Delivery
Security Management
HP Reference Model
Business - IT Alignment Operations Bridge
Service Delivery
Assurance
• Document and track service
infrastructure information
• Document infrastructure
attributes and relationships
• Evaluate and control changes
IT Strategy
Development Service Delivery Problem
Assurance Management
Configuration
Management
Service Change
Planning Management
Service Level Release to
Management Production
Security
Management
Applications
Servers
Business Strategy
Internet/
Intranet Networks
Value Chain
Problems/ Delivered Environment Environment
Requests Service Status Administration
Business - IT Alignment Operations Bridge
Service Performance
(Quality)
Service Objectives
& Measures
ITIL
ITIL
Incident
Service Desk
Management
ITIL
Management Problem
Management
IT Strategy
Development Service Delivery Problem
Assurance Management
ITIL
Service
ITIL
Level Configuration Configuration
ITIL
Management Management Management Release
Management
Service Change
ITIL
Planning Management Change
Service Level Management Release to
Management Production
ITIL
ITIL
ITIL
IT Service
Availibility Capacity FinancialITIL
ContinuitySecurity Management
Management Management
Management
Management for IT Services
IT Strategy
Development Service Delivery Problem
Assurance Management
ITIL
Configuration Configuration
Management Management
Service Change
Planning Management
Service Level Release to
Management Production
Security
Management
IT
Infrastructure
Planning
Identification
Status Accounting
CMDB
Control
Verification
and Audit
Configuration Item (CI)
• A Configuration Item
– Is needed to deliver a
service
– Is uniquely identifiable
– Is subject to change
– Can be managed
• A Configuration Item has
– a Category
– Relationships
– Attributes
– a Status
CIs — Scope and Detail
Documen- Environ-
Service Hardware Software
tation ment
Network
D printer PC
E Bundled
T Local
s/w
printer No break
A power
I
L VDU Keyboard CPU
DBMS W.P. E-mail
SLA
SCOPE
Naming and Attributes
• Naming Conventions
– Unique
– Logical
– Unchanging
– Suitable for the tools being used
• Examples of Attributes
– CI Name
– Type
– Location
– Version
– Service Details
Impact of Relationship
S/W Printer
S/W
S/W
Printer
Monitor Printer
Virus
Keyboard Protection
Po
w er
Users
Server
O/S
Backup
Security
Pl
an
ne
d
O
rd
er
In ed
de
v
Status of CIs
el
op
In m
te en
st t
In
w
ar
Scope of the CMDB eh
ou
In
Lifecycle of a CI
pr se
od
uc
In tio
m n
ai
nt
en
an
Ar ce
ch
iv
ed
Baseline
• Configuration Baseline
– Configuration of a product or system established
at a specific point in time, which captures both the
structure and details of the product or system
• Asset
– Component of a business process
• Configuration Item (CI)
– Component of an infrastructure - or an item
associated with an infrastructure - which is (or is to
be) under the control of Configuration
Management
• Configuration Management Database (CMDB)
– A database, which contains all relevant details of
each CI and details of the important relationships
between CIs
Essentials
• Goals
– Provide information about the IT infrastructure
– Monitor & Control the IT Infrastructure
• Responsibilities
– Planning, Identification, Control, Status Accounting,
Verification & Audit
– Role in assessing impact of changes
• Configuration item
– Categories, Attributes, Relationships, Status, History,
Unique Ref. No.
• Scope and detail (value of the information)
• Baselines
• Supports all other processes
• More than an asset register
Service Desk
Business - IT Alignment Operations Bridge
ITIL
Service Desk
IT Strategy
Development Service Delivery Problem
Assurance Management
Configuration
Management
Service Change
Planning Management
Service Level Release to
Management Production
Security
Management
• Call Center
Handling large call volumes of telephone-based
transactions, registering them and refering them to
other parts of the organization
• Help Desk
Managing, coordinating and resolving Incidents as
quickly as possible
• Service Desk
Allowing business processes to be integrated into the
Service Management infrastructure. It not only
handles Incidents, Problems and questions, but also
provides an interface for other activities
Inputs and Outputs
Telephone Fax
Requests Requests
Internet/ Hardware/
Email/Voice
Browser Application
Requests
Requests Events
Management
Information & Monitoring
Service Desk
External Internal
Product Sales & Contract
Service Service
Support Marketing Support
Support Support
Structures: Local Service Desk
Systems &
Desktop Network Application Third Party
Operations
Support Support Support Support
Support
Structures: Centralized Service Desk
Customer Customer Customer
Site 1 Site 2 Site 3
Second-line Support
Systems &
Desktop Network Application Third Party
Operations
Support Support Support Support
Support
Structures: Virtual Service Desk
Virtual
Service
Management
Database
Amsterdam
Service Desk
Seattle Service Desk
Local Users
Third Party/Supplier
Remote Users Service Desks
Considerations
ITIL
Incident
Management
IT Strategy
Development Service Delivery Problem
Assurance Management
Configuration
Management
Service Change
Planning Management
Service Level Release to
Management Production
Security
Management
Incident Investigatio
Incident Management n&
control diagnosis
Resolution
Incident
& recovery
closure
Terminology
• Incident
Any event which is not part of the standard operation
of a
service and which causes, or may cause, an
interruption to,
or a reduction in, the quality of that service
• Work-Around
Method of avoiding an Incident or Problem
• Service Request
Every Incident not being a failure in the IT
Infrastructure
The Incident Life Cycle
Incident Detection
and Recording
Progress Control
Classification and
Initial Support
Ownership Yes
Communication
Service Service Request
Request? Procedure
No
Reporting Investigation
And Diagnosis
Resolution
And Recovery
Quality Control
Incident Closure
Classification — Prioritization
• Impact
– Evidence of effect upon business activities
– Service Levels in danger
• Urgency
– Evidence of effect upon business
deadlines
• Prioritize resources
– Manpower
– Money
– Time
Classification — Categorization
Examples of Incident categories are:
• Application
– Service not available
– Application bug/query
• Hardware
– Automatic alert
– Printer not printing
• Service Request
– Password forgotten
• Security Incident
– Virus
Classification — Matching
Known
Open
Problems Error/
Incidents
Workarounds
Yes
Detect and Service Initial Resolution, Incident
Resolved?
Record Request? Support Recovery Closure
No
Second Line
Yes
Investigation Resolution,
Resolved?
Diagnose Recovery
No
Third Line
Yes
Investigation Resolution,
Resolved?
Diagnose Recovery
No
Etcetera
Escalation and Referral
Inform / Support
(vertical escalation)
Helpdesk
ITIL
Management Problem
Management
IT Strategy
Development Service Delivery Problem
Assurance Management
Configuration
Management
Service Change
Planning Management
Service Level Release to
Management Production
Security
Management
• Problem
– The unknown root cause of one or more
incidents (not necessarily - or often -
solved at the time the incident is closed)
• Known Error
– A condition that exists after the successful
diagnosis of the root cause of a problem
when it is confirmed that a CI is at fault.
(The error is removed by implementing a
change)
Problem Control
Identification and
Progress Control registration
Classification
Ownership
Assigning
Resources
Reporting
Investigation
and Diagnosis
Establish
Quality Control Known Error
Error Control
Successful completion
Proactive
Prevention
Targeting
Informing the Support
Organization Actions
Incidents versus Problems
Problem mgt.
problem investigate KE
Known No
Errors,
Known
Workarounds Investigation Solution
& Diagnosis found ? Change mgt.
Incident(s) Match ?
Yes
Get Incident
Solve Incident
Solution Resolved
Processing Known Errors from the
Development Environment
Live Change
Release
Service Building
Problem
Problem Management
Dev.
Production
Known
Known
Errors
Errors
Investigation & Issues Investigation
and diagnosis and diagnosis
RfC
Change
Management
Reactive — Proactive
Reactive Proactive
Prevention of problems on
other systems and
applications
Monitoring of Change Management
Problem identification
Problem diagnosis
• Goals
– Minimize impact of Incidents & Problems
– Prevent recurrence of Incidents
– Improving productive use of resources
• Responsibilities
– Problem Control, Error Control (including raising
RfCs), Assist with Major Incidents, Proactive
Prevention, Management Information, Complete
Major Problem Reviews
• Reactive to proactive (stop problems
occurring/recurring)
Change Management
Business - IT Alignment Operations Bridge
IT Strategy
Development Service Delivery Problem
Assurance Management
Configuration
Management
Service Change
ITIL
Planning Management Change
Service Level Management Release to
Management Production
Security
Management
• Change
The addition, modification or removal of approved,
supported or baselined CIs
• Request for Change
Form, or screen, used to record details of a request
for a change to any CI or to procedures
• Forward Schedule of Changes
Schedule that contains details of all the Changes
approved for implementation and their proposed
implementation dates
Change Management Process
Project Change Mgnt
Build Approval
Refusal
Authorization
Test
Implementation Refusal
Implementation
Backout
Evaluation (PIR)
Request for Change (RfC) — Scope
Change
Software Sponsor &
Hardware Change
Originator Advisory Board
CIs
SLA etc.
Documentation
etc. Justification
RfC
Environment Category
Priority
Resources
What, Why, Service Estimates
When impact
Priority Setting
• Urgent
Change necessary now (otherwise severe business impact),
approval by CAB/Emergency Committee (CAB/EC)
• High
Change needed as soon as possible (potentially damaging)
• Medium
Change will solve irritating errors or missing functionality (can
be scheduled)
• Low
Change leads to minor improvements (that are not contractually
necessary)
Impact of Change
• Standard
The change may be executed without prior contact
with the Change Manager
• Category 1
Little impact on current services. The Change
Manager is entitled to authorize this RfC
• Category 2
Clear impact on the services. The RfC must be
discussed in the CAB. The Change Manager
requests advice on authorization and planning
• Category 3
Significant impact on the services and the business.
Considerable manpower and/or resources needed.
Management is involved in the decision process
The Change Advisory Board (CAB)
Change Manager
(Chair)
Service Level
Finance Manager Manager
CAB
Application
Release Manager Manager
IT Strategy
Development Service Delivery Problem
Assurance Management
Configuration
ITIL
Management Release
Management
Service Change
Planning Management
Service Level Release to
Management Production
Security
Management
Release
Distribution
Release policies acceptance
and planning
Audits Rollout
Before and After Managing Planning
DSL / DHS
Preparation
Communication, Testing
Training
Signoff Release
For Implementation
Release and Distribution Process
Development Environment RfC CMDB
V 1.1a-d V 1.0 operational and also
Authorize?
Copy in the DSL. Build approval
V 1.0 given.
V 1.1a (based on V1.0)
untrusted in development
Build Management Build and
V 1.1 V 1.0 operational and also
Deliver test in the DSL
V 1.1d software V1.1d untrusted In test
One or More
Spares for Physical
Recovery Stores
DHS
Linked Components
with CMDB for Changes
Releases
Full, Package
And Delta Release
Emergency
Release Unit Release
Release
policy
Release Version
Frequency Numbering
Software Roll-out and Distribution
Network Software
Mainframes Computer Management
Systems
Internet Planning
Software
distribution
Laptops
Compact Disks
Client/server Personal
computers
Essentials
• Goals
– Plan and oversee rollout of SW & HW
– Design & implement distribution & installation procedures
– Ensure SW & HW changes are traceable
– Work closely with Configuration Management & Change
Management during implementations
• Responsibilities
– Control DSL & DHL; define release plans & policies; build release;
testing; acceptance & sign off; manage release; distribute and install
SW & HW; software audits; communication & training
• Releases & Version Control
– Release unit: Full/package/delta/emergency; numbering; frequency;
development; testing; live; archive
• Process
– Release Management (operational)
– Change Management (control)
– Configuration Management (control & administration)
Capacity Management
Business - IT Alignment Operations Bridge
IT Strategy
Development Service Delivery Problem
Assurance Management
Configuration
Management
Service Change
Planning Management
Service Level Release to
Management Production
ITIL
Security Capacity
Management
Management
Balancing Act
To determine
the right, cost justifiable, capacity of IT
resources such that
the Service Levels agreed with the business
are achieved at the right time
Capacity Management — Responsibilities
Demand Management
Iterative Activities
Capacity
Plan
Capacity
Database
Note: these are in fact sub processes of the main process – see
next slide
The Capacity Management Process
Sub-processes
Business Capacity Management
Inputs Outputs
Service Capacity Management
• Application Sizing
To estimate the resource requirements to
support a proposed application change to
ensure that it meets its required service levels
• Modeling
– Trend analysis
– Analytical modeling
– Simulation modeling
– Baseline models
– Used to answer the “What if …” questions
Essentials
• Goal
– Right amount, right time, efficiently and cost
effectively
• Activities - From Business Needs to Resources
– Business Capacity Management
– Service Capacity Management
– Resource Management
– Demand Management
– Best Value for Money – Monitoring etc.
– Capacity Planning
– Capacity Database
• Application Sizing and Modelling
• Defining and monitoring thresholds
Availability Management
Business - IT Alignment Operations Bridge
IT Strategy
Development Service Delivery Problem
Assurance Management
Configuration
Management
Service Change
Planning Management
Service Level Release to
Management Production
ITIL
Availibility
Security
Management
Management
– Availability
– Reliability
– Maintainability Recoverability
– Serviceability
– Resilience (Redundancy)
– Security
Confidentiality
e n t s…
Work on Security awareness In cid
rit y
Secu
Security
Secu Integrity
Availability rity S
ection
in SL
A
Risk Analysis
Value of
Threats Vulnerabilities
Assets
Planning
Countermeasures Managing outage
for potential
outage
The Unavailability Life-cycle
MTTR - Mean Time To Repair (Downtime) =>
MAINTAINABILITY or SERVICEABILITY
n
n
io
tio
at
r
ec
r
ai
to
ep
et
es
D
R
s
ry
Incident Incident
si
e
o
ov
gn
ec
ia
R
D
(AST-DT)
Availability X 100
= AST
Monitor CPU
Disk B
Avail = 90% Avail = 80%
Avail = 80%
IT Strategy
Development Service Delivery Problem
Assurance Management
Configuration
Management
Service Change
Planning Management
Service Level Release to
Management Production
ITIL
IT Service
ContinuitySecurity
Management
Management
Why Plan???
• Increased business dependency on IT
• Reduced cost and time of recovery
• Cost to customer relationship
• Survival
Business Impact
Analysis
Business Continuity
Strategy
Organization and
Implementation
Planning
Implement Implement
Develop
Stand-by Risk Reduction
Implementation Recovery Plans
Arrangements Measures
Develop Procedures
Initial Testing
Business Impact Analysis
Value of
Threats Vulnerabilities
Assets
Planning
Countermeasures Managing a disaster
for potential
disasters
The Process (2): Operational
Management
Assurance
The Options
• Do nothing
• Manual workarounds
• Reciprocal arrangements
• Gradual Recovery (cold standby)
• Intermediate Recovery (warm standby)
• Immediate Recovery (hot standby)
IMPORTANT: HAVE YOU PLANNED TO RESTORE THE NORMAL SERVICE…..
1. Administration
2. The IT infrastructure
3. IT infrastructure management & operating
procedures
4. Personnel
5. Security
6. Contingency site
7. Return to normal
Roles in Normal Operation and in a
Crisis
• Board Level
• Senior Management
• Junior Management
• Supervisors & IT Staff
IT Strategy
Development Service Delivery Problem
Assurance Management
Configuration
Management
Service Change
Planning Management
Service Level Release to
Management Production
FinancialITIL
Security Management
Management for IT Services
Financial targets
Costing models
Charging policies
• Direct
Costs that can be directly allocated
• Indirect
Costs apportioned across a number of Customers
• Capital
Assets that are depreciated over time
• Operational
Day to day running costs
Charging
Charging
• No charging
• Notional Charging
• Actual/Real Charging
Pricing
• Recover of costs
• Cost price plus
• Going Rate
• Market prices
• Fixed Price
Essentials
• Budgeting & IT Accounting
– Knowing & understanding costs
– Needed to manage changes
– Input cost units (HSPAET)
– Input cost types (F/V, D/I, C/O)
– Need for good estimates of business workloads
• Charging (but not policy)
– Determine charges in SLAs
– Influence customer behavior
– Charging does not affect costs
• General
– Sound stewardship
– Minimize risk in decision making
– Estimating, planning, budgeting
– Targets & measures
Service Level Management
Business - IT Alignment Operations Bridge
IT Strategy
Development Service Delivery Problem
Assurance Management
ITIL
Service
Level Configuration
Management Management
Service Change
Planning Management
Service Level Release to
Management Production
Security
Management
Balance between:
By:
– Knowing the requirements of the business
– Knowing the capabilities of IT
Service Level Management — Goals
Customer
relationship
management Operational
Service Level
Level Agreements
Management
& Contracts
Service
Improvement
Service
Programs
Specsheet
Monitor, Review & Service Quality
Report Plan
Pl
an
Re n in
vi g
AU e w S
DI LA Im
TS s ple
Re me
vi n tat
Pr e w ion
o c SL
ESTABLISH FUNCTION
es M
s
PERIODIC REVIEW
Ca
Se talog
rvi ue
ce
s
Dr
aft
Ne
go
tia
te
Re
v
IMPLEMENT SLAs
An iew
d S UC
LA s
s
Mo
nit Ag
or re
e
Re
po
rt
Re
v iew
MANAGE THE ONGOING PROCESS
Define
Control
The Service Level Management Process
Execute
Agreements and Contracts
Service
Customer
Level
Agreement
(SLA)
Operational
IT Organization Level
Agreement
External suppliers
• Targeted at IT staff
• Objective
– Controlled improvement
• Drawn whenever there is a need
– Deviation from agreed levels
– Strategic choice
– Continuous Improvement
• More than one simultaneously
Elements of an Service Level Agreement
&
&
=