Abstract
This paper deals with the Change Management process within IT Service Management. Change Management includes several activities, some of which need to evaluate the risk exposure associated with changes to be made to the infrastructure and services. We present a method by which risk exposure associated with a change can be evaluated and the risk exposure metric is applied to the problem of automatically assigning priorities to changes. A formal model is developed to this end; the model captures the business perspective by using financial metrics in the evaluation of risk. A case study, performed in conjunction with a large IT service provider, is reported and provides good results when compared to decisions made by human managers.
Chapter PDF
Similar content being viewed by others
Keywords
References
IT Governance Institute, Cobit 3rd edn. (2000), www.isaca.org/cobit.htm
IT Infrastructure Library, ITIL Service Delivery and Support, OGC, UK (2003)
Kaplan, S., Garrick, B.J.: On the Quantitative Definition of Risk. Risk Analysis 1, 11–27 (1981)
Rohatgi, V.K.: An Introduction to Probability Theory and Math. Statistics. Wiley, Chichester (1976)
Rebouças, R., Sauvé, J., Moura, A., Bartolini, C., Trastour, D.: A Decision Support Tool for Optimizing Scheduling of IT Changes. In: 10th IFIP/IEEE Symp. on Integrated Mgmt., IEEE Computer Society Press, Los Alamitos (2007)
PMBOK - Project Management Book of Knowledge, http://www.pmi.org
Cisco IT Balances Innovation and Risk With Change Management Process, http://www.cisco.com/web/about/ciscoitatwork/case_studies/business_management_dl2.html
IT Service Management - Change and Configuration Management: Reducing Risk by understanding your infrastructure, http://www-03.ibm.com/solutions/itsolutions/doc/content/bin/itsol_it_service_management_change_and_configuration_management.pdf
Goolsbey, J.: Risk-Based IT Change Management, http://web.reed.edu/nwacc/programs/awards/excellence_award/pnnl_submissions_07/pnnl_ risk-based_it_change_management.pdf
Benoit A., Rivard S., Patry M.: Managing IT Outsourcing Risk, Cirano, Montreal (2001)
Mosier, S., Gutenberg, S., Raphael, R.: The Relationship of Technology Change Management to Risk Management, Engineering Management Society (2000)
Keller, A., Hellerstein, J.L., Wolf, J.L., Wu, K.-L., Krishnan, V.: The CHAMPS system: change management with planning and scheduling. In: Network Operations and Management Symposium, pp. 395–408 (2004)
Brown, A.B., Keller, A., Hellerstein, J.L.: A model of configuration complexity and its application to a change management system. In: IM 2005, pp. 631–644 (2005)
Sauvé, J., Rebouças, R., Moura, A., Bartolini, C., Boulmakoul, A., Trastour, D.: Business driven support for change management: planning and scheduling of changes. In: DSOM 2006. 17th IFIP/IEEE International Workshop on Distributed Systems: Operations and Management, Dublin, Ireland (October 23–25, 2006)
Menascé, D., Almeida, V.A.F., Fonseca, R., Mendes, M.A.: Business-Oriented Resource Management Policies for e-Commerce Servers, Performance Evaluation 42, pp. 223–239. Elsevier Science, Amsterdam (2000)
Author information
Authors and Affiliations
Editor information
Rights and permissions
Copyright information
© 2007 IFIP International Federation for Information Processing
About this paper
Cite this paper
Sauvé, J.P., Santos, R.A., Almeida, R.R., Moura, J.A.B. (2007). On the Risk Exposure and Priority Determination of Changes in IT Service Management. In: Clemm, A., Granville, L.Z., Stadler, R. (eds) Managing Virtualization of Networks and Services. DSOM 2007. Lecture Notes in Computer Science, vol 4785. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-75694-1_13
Download citation
DOI: https://doi.org/10.1007/978-3-540-75694-1_13
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-75693-4
Online ISBN: 978-3-540-75694-1
eBook Packages: Computer ScienceComputer Science (R0)