On the Risk Exposure and Priority Determination of Changes in IT Service Management

  • Jacques P. Sauvé
  • Rodrigo A. Santos
  • Rodrigo R. Almeida
  • J. Antão B. Moura
Part of the Lecture Notes in Computer Science book series (LNCS, volume 4785)


This paper deals with the Change Management process within IT Service Management. Change Management includes several activities, some of which need to evaluate the risk exposure associated with changes to be made to the infrastructure and services. We present a method by which risk exposure associated with a change can be evaluated and the risk exposure metric is applied to the problem of automatically assigning priorities to changes. A formal model is developed to this end; the model captures the business perspective by using financial metrics in the evaluation of risk. A case study, performed in conjunction with a large IT service provider, is reported and provides good results when compared to decisions made by human managers.


Change Management Risk Change Prioritization IT Service Management Business-Driven IT Management 


  1. 1.
    IT Governance Institute, Cobit 3rd edn. (2000),
  2. 2.
    IT Infrastructure Library, ITIL Service Delivery and Support, OGC, UK (2003)Google Scholar
  3. 3.
    Kaplan, S., Garrick, B.J.: On the Quantitative Definition of Risk. Risk Analysis 1, 11–27 (1981)CrossRefGoogle Scholar
  4. 4.
    Rohatgi, V.K.: An Introduction to Probability Theory and Math. Statistics. Wiley, Chichester (1976)zbMATHGoogle Scholar
  5. 5.
    Rebouças, R., Sauvé, J., Moura, A., Bartolini, C., Trastour, D.: A Decision Support Tool for Optimizing Scheduling of IT Changes. In: 10th IFIP/IEEE Symp. on Integrated Mgmt., IEEE Computer Society Press, Los Alamitos (2007)Google Scholar
  6. 6.
    PMBOK - Project Management Book of Knowledge,
  7. 7.
  8. 8.
  9. 9.
    Cisco IT Balances Innovation and Risk With Change Management Process,
  10. 10.
    IT Service Management - Change and Configuration Management: Reducing Risk by understanding your infrastructure,
  11. 11.
  12. 12.
    Benoit A., Rivard S., Patry M.: Managing IT Outsourcing Risk, Cirano, Montreal (2001) Google Scholar
  13. 13.
    Mosier, S., Gutenberg, S., Raphael, R.: The Relationship of Technology Change Management to Risk Management, Engineering Management Society (2000)Google Scholar
  14. 14.
    Keller, A., Hellerstein, J.L., Wolf, J.L., Wu, K.-L., Krishnan, V.: The CHAMPS system: change management with planning and scheduling. In: Network Operations and Management Symposium, pp. 395–408 (2004)Google Scholar
  15. 15.
    Brown, A.B., Keller, A., Hellerstein, J.L.: A model of configuration complexity and its application to a change management system. In: IM 2005, pp. 631–644 (2005)Google Scholar
  16. 16.
    Sauvé, J., Rebouças, R., Moura, A., Bartolini, C., Boulmakoul, A., Trastour, D.: Business driven support for change management: planning and scheduling of changes. In: DSOM 2006. 17th IFIP/IEEE International Workshop on Distributed Systems: Operations and Management, Dublin, Ireland (October 23–25, 2006)Google Scholar
  17. 17.
    Menascé, D., Almeida, V.A.F., Fonseca, R., Mendes, M.A.: Business-Oriented Resource Management Policies for e-Commerce Servers, Performance Evaluation 42, pp. 223–239. Elsevier Science, Amsterdam (2000)zbMATHGoogle Scholar

Copyright information

© IFIP International Federation for Information Processing 2007

Authors and Affiliations

  • Jacques P. Sauvé
    • 1
  • Rodrigo A. Santos
    • 1
  • Rodrigo R. Almeida
    • 1
  • J. Antão B. Moura
    • 1
  1. 1.Federal University of Campina GrandeBrazil

Personalised recommendations