IT Audit (8) IT Operations (29) IT Security (11)

What Changed?

In Visible Ops under “Modify First Response” we discussed integrating reported and detected Change records to the Incident Management.  Right now, we’ll just assume the Service Desk is performing Incident Management to keep things simple. 

 

To review, the goal of Incident Management is to restore service as quickly as possible in order to minimize impacts to the business.  One key performance indicator of this activity is Mean Time to Recover (MTTR).  By harnessing the power of an integrated configuration management database (CMDB) tool, the system can help empower the service desk agents.

 

The CMDB should look up the configuration item(CI), which could be a service, hardware, software, and so on, and then identify all CIs that comprise, or are involved with, the CI the Incident record is about.  This allows the service desk person to see that Service X is comprised of the LAN Segments 1 and 2, Network Switches 33 & 34, Application Server 22 and Database Servers 101 and 201. 

 

Because the most frequent cause of problems is the combination of change and human error.  Once the Incident record is open, sufficiently filled out for the system to look up relationships and match against existing Incidents, problems and known errors by the software, it should look up any change records and sort them for each CI in descending order because the very next question from the service desk agent, or person handing the Incident, should be “What changed?” and the software should have that information immediately available.

 

Having the system present the service desk and others performing Incident Management with the available relevant change data can dramatically shorten the MTTR by arming the people with the ability to answer the question of “What changed?”

Published Sunday, April 30, 2006 3:44 PM by George Spafford
Filed Under:

Comment Notification

If you would like to receive an email when updates are made to this post, please register here

Subscribe to this post's comments using RSS

Comments

# re: What Changed?

In your experience what percent of organizations actually have the integrated CMDB necessary between the configuration item information and incident and problem management functions?
Friday, May 05, 2006 11:43 AM by Jay Richmond

# re: What Changed?

That's a very interesting question.  Between cfg, incident and problem, the number is growing as the help desk software vendors readily understood the need to link those items together.  From what I hear, fewer have the change integration to incident and problem.

I don't have a number.  Does anyone have any thoughts that they can share on this?
Friday, May 05, 2006 3:06 PM by George Spafford

# re: What Changed?

> Once the Incident record is open,
> sufficiently filled out for the system
> to look up relationships and match against
> existing Incidents, problems and known
> errors by the software, it should look up
> any change records and sort them for each
> CI in descending order because the very
> next question from the service desk agent,
> or person handing the Incident, should
> be “What changed?” and the software
> should have that information immediately
> available.

This kind of tools will be useful to implement
'the Visible Ops' methodolgy based Incident
and Problem Management process.

George, are you saying that some helpdesk tools
already have this kind of function?
Monday, May 08, 2006 1:32 AM by Atsushi Kanno

# re: What Changed?

I don't know who all has implemented the connections.  One group that I know that has is IP Services in their Interchange system.

I believe some of the European systems have.  Maybe we can get some people to comment on systems they have encountered that have integrated the aforementioned records.
Monday, May 08, 2006 7:23 AM by George Spafford

What do you think?

(required) 
required 
(required)