On the Risk Exposure and Priority Determination of Changes in IT Service Management

This paper deals with the Change Management process within IT Service Management. Change Management includes several activities, some of which need to evaluate the risk exposure associated with changes to be made to the infrastructure and services. We present a method by which risk exposure associated with a change can be evaluated and the risk exposure metric is applied to the problem of automatically assigning priorities to changes. A formal model is developed to this end; the model captures the business perspective by using financial metrics in the evaluation of risk. A case study, performed in conjunction with a large IT service provider, is reported and provides good results when compared to decisions made by human managers. Keywords. Change Management, Risk, Change Prioritization, IT Service Management, Business-Driven IT Management.

• Type: Conference
• Year: 2007
• Where: DSOM
• Authors: Jacques Philippe Sauvé, Rodrigo A. Santos, Rodrigo R. Almeida, José Antão Beltrão Moura
• Keywords: Change Management, DSOM 2007, IT Service Management, Risk Exposure