Posted in: ITIL Implementation  Tags:

Be the first to rate this post

  • Currently 0/5 Stars.
  • 1
  • 2
  • 3
  • 4
  • 5
TonyIanetta posted on September 30, 2005 01:24

Configuration Management
A couple weeks ago I wrote about the challenges of implementing a CMDB. As luck would have it, I’ve now been asked to help scope a CMDB implementation project. This project is being initiated for the purpose of supporting an upcoming data center move. This data center move is a large project that will impact many mission critical business systems.

In preparation for the project I’ve done some research on CMDB planning. I came across this article on ZDNet that I felt did a good job of summarizing the requirements of a CMDB:

What Do You Need From a Configuration Management Database?

The article focuses on technical requirements for a CMDB and is aligned with ITIL.

Of course, technical requirements and technology solutions are only half the battle. The real challenge will be defining processes that ensure the CMDB data is accurately maintained and easily accessible to those who need it. This will require coordinated efforts on the part of everyone involved in the following processes at a minimum:

  • Service Management
  • Incident Management
  • Change Management
  • Release Management
  • Service Level Management

And will also cover specific technology departments including:

  • Mainframe
  • Midrange
  • Database
  • Network
  • Servers
  • Applications Development
  • Facilities

Fortunately, the initial scope is limited to the CIs in the data center, but the long-term goal is for this to establish the foundation for an organization wide CMDB. Should be fun. I?ll keep you posted on the progress.

—–


Posted in: CMDB  Tags:

Be the first to rate this post

  • Currently 0/5 Stars.
  • 1
  • 2
  • 3
  • 4
  • 5
DonCasson posted on September 16, 2005 01:26

Central to IT Service Management is the concept of a Configuration Management Database or CMDB. Throughout my career I have been involved in dozens of service management/helpdesk implementations and close to a dozen IT asset management implementations. As the service management processes defined by ITIL continue to be adopted as the de-facto standard in the US and around the world, my company is being asked to help other companies develop a CMDB. The ITIL process set, while becoming increasingly popular, is by no means a new concept. However, I have yet to come across an organization that can say they have an accurate CMDB. Why is something so critical to the ITIL philosophy, so difficult to adopt? Furthermore, is something so challenging worth the effort to implement? If so, why, and how should you go about it?

I believe there are a couple of primary attributes of a CMDB that make it very difficult to create and maintain. First, is the fact that a CMDB has a very broad scope. By definition, a CMDB should contain accurate information on every Configuration Item (CI) within the organization. The definition of a CI can be rather broad in that a CI can be any entity related to your IT Infrastructure against which change should be managed. For each entity that your organization defines as a CI there is a long list of attributes and relationships that must be captured and maintained. Therefore, simply defining the scope of a CMDB within your organization can be a massive effort.

Another huge challenge is the fact that CIs are typically owned and managed by numerous different departments. Maintaining accurate information on all these items, particularly the relationships, requires significant coordination and cooperation between these departments. Often, corporate management structures and cultures impede this necessary cooperation. The ITIL processes seek to break down these barriers, but doing so often requires significant organizational and cultural changes that tend to occur slowly.

It is typical for IT organizations to believe they can overcome these organizational and cultural challenges through the implementation of additional technology. Technologists tend to understand technology and thus are more comfortable tackling problems with technology than through process. This is probably one of the biggest mistakes any company can make, and yet it is repeated over and over throughout the US corporate environment. While technologies are emerging that claim to be able to automate the collection and maintenance of data for a CMDB, processes cannot be ignored. This is evident by the fact that the Configuration Management process, as defined by ITIL, has a direct link to every other ITIL process.

At the beginning of this article I intended to answer the questions of whether implementing a CMDB is worth it, and if so, why, and how to go about it. If you?re not already asleep, you might agree with my intent to get deeper into those questions in a follow-up blog. I will say this on those topics however to fulfill the obligation set forth in the first paragraph.

When considering whether to implement a CMDB review and consider the benefits as defined by ITIL. Determine which of these benefits will have the greatest impact and provide the greatest value to your business. With business objectives clearly understood you?ll have the direction you need to define the scope of your initial CMDB. This involves defining your CIs, the important attributes to maintain, and the critical relationships that must be maintained. Finally, focus on the process for obtaining and managing this data and not technologies. Technology should be sought to automate manual processes defined and implemented where possible; technology should not drive the definition of process.

—–


Posted in: CMDB  Tags:

Be the first to rate this post

  • Currently 0/5 Stars.
  • 1
  • 2
  • 3
  • 4
  • 5
DonCasson posted on September 14, 2005 01:27

The creation of a CMDB across an organization’s enterprise has been highly scrutinized within the industry. Clearly the term CMDB is on the radar screen of many organizations that desire an end state that will satisfy compliance and continuity planning requirements. A significant percentage of the time this desire is fueled by the catalyst of political pressure which requires a CMDB to be developed in an illogical fashion which either provides segmented views into the enterprise or risks data integrity. Keeping that in mind, this repeatable model has been derived with the assumption that these pressures are trumped by logic and that the iterative approach ensures a more comprehensive CMDB.

The following working model is to logically establish a method to develop a CMDB.

The intent of this approach is first to focus on laying the proper foundation in order to ensure a comprehensive logical data structure. Then focusing on the linkage between the individual items that comprise a CMDB.

10 steps to creating a CMDB

  1. Document current state
  2. Develop a product portfolio
  3. Formulate Future State
  4. Formulate a Roadmap
  5. Position for Organizational Change
  6. Establish a Comprehensive Foundation
  7. Establish Data Integrity
  8. Integrate with the Enterprise
  9. Establish Linkage
  10. Perform Audits

Clearly, creating a CMDB offers unquestionable value to an organization. It is my opinion that the CMDB is not an end state but rather the inception of something greater. Any thoughts? Any opinions? Any interest for additional information on this subject? I hope so because I am in the final throws of developing a white paper on this topic which should be out shortly.

Technorati Tags:

—–


Posted in: CMDB  Tags:

Be the first to rate this post

  • Currently 0/5 Stars.
  • 1
  • 2
  • 3
  • 4
  • 5
JoeKoester posted on September 2, 2005 01:31

So you think you have the need to request an emergency change. Did you consider all of the following when making your determination that the change really is an emergency:

  • Is the change truly time sensitive? Time sensitive doesn’t mean that someone forgot to request the change soon enough to allow for the standard change process to be followed.
  • Is the change required to protect your IT systems from external access (for example to protect from a bug)?
  • Is the change required to resolve an issue that has a critical impact on your business?
  • Can you effectively identify and mitigate any risks associated with the change?
  • Does your change meet the rules established within the published change management policy?

Okay - looks like you’ve passed all of these tests so you really do have an emergency change on your hands. You’re ready to go, but tread carefully. Note that Emergency Changes must be kept to a minimum - less than 5% of all changes should fall into the emergency category. Also remember that emergency changes must be properly documented and approved following established procedures. As a minimum the following actions must be completed (most of them prior to implementation):

  • Must document the specific criteria for identifying what conditions specify the need for an emergency change (security patch to protect from a bug is an example). This should be completed prior to obtaining approval.
  • Identify the risks and the risk mitigation efforts. Part of the risk identification and mitigation will include identification of other systems which could be impacted. This should be completed prior to obtaining approval.
  • Establish the minimum testing required to ensure success. This should be completed prior to obtaining approval.
  • There must be at least one approval level. This is normally the Change Manager or IT Department Manager. The approval authority must validate that the change is truly an emergency. Most established change management programs will identify a Change Advisory Board/Emergency Committe who has the responsibility of establishing emergency change approval processes.
  • All Emergency Changes must be thoroughly and accurately documented. Any documentation not completed throughout the emergency change process must be completed prior to closing the change record.

Whenever you consider the Emergency Change process remember that it has been established to expedite the change management process. It does open the possibility for greater risk and must only used when an emergency truly exists.

—–


Posted in: Change Management  Tags:

Be the first to rate this post

  • Currently 0/5 Stars.
  • 1
  • 2
  • 3
  • 4
  • 5

Posted in: ITIL Implementation  Tags:

Be the first to rate this post

  • Currently 0/5 Stars.
  • 1
  • 2
  • 3
  • 4
  • 5

Search

Calendar

«  March 2010  »
MoTuWeThFrSaSu
22232425262728
1234567
891011121314
15161718192021
22232425262728
2930311234
View posts in large calendar