15 foundational practices Flashcards
Information security management
protect the info needed by the organization to conduct its business
(Managing risk to CIA triad)
Relationship management:
Establish + nurture the links between the organization and its stakeholders (Nurture link- to identify, analyze, mentor, and improve relationship with stakeholders)
Supplier Management:
Ensure the Organization suppliers & their performances are managed appropriately. Thus support an efficient and seamless provision of services
IT Asset Management:
Plan and manage the full lifecycle of all IT assets
Monitoring and Event management:
Systematically observing systems and system components (monitoring : reporting) Event management: reporting changes that have been deemed significant
Release management:
Make new or changed services available for use
Deployment management:
Moving hardware, software, documentation, and processes to a new, usually live, environment
Service configuration management:
Ensures that accurate and reliable information about the configuration of services and the CIs (configuration items) that support are available when needed
Continual Improvement:
Align the organization practices and services with changing business needs through ongoing identification and improvement services, service components, practices, or any element involved in the efficient and effective management of products and services.
Change enablement:
Maximize the number of successful IT changes. Ensure risks are properly assessed, authorization changes to proceed, and managing a changed schedule.
Change, how many and what are they
addition or removal of anything that impacts services
3 types: Standard, normal, emergency
Incident management:
minimize the negative impact of interruptions of service by restoring business operations ASAP
Problem management:
Reduce the likelihood of incidents by identifying actual and potential causes of incidents and managing workarounds and known errors
Phases of problem management
- Problem ID 2. Problem Control 3. Error Control
Service request management:
Support the agreed upon quality of a service by handling all predefined user initiated service requests in a user-friendly manner.