M5 Purposes of 15 practices Flashcards
Which practice has the following purpose?
To protect the information needed by the organization to conduct its business. This includes understanding and managing risks to the confidentiality, integrity, and availability of information, as well as other aspects of information security such as authentication (ensuring someone is who they claim to be) and non-repudiation (ensuring that someone can’t deny that they took an action).
Information security management
Which practice has the following purpose?
To establish and nurture the links between the organization and its stakeholders at strategic and tactical levels. It includes the identification, analysis, monitoring, and continual improvement of relationships with and between stakeholders
Relationship management
Which practice has the following purpose?
To ensure that the organization’s suppliers and their performances are managed appropriately to support the seamless provision of quality products and services. This includes creating closer, more collaborative relationships with key suppliers to uncover and realize new value and reduce the risk of failure
Supplier management
Which practice has the following purpose?
To plan and manage the full lifecycle of all IT assets, to help the organization:
• maximize value‚
• control costs‚
• manage risks‚
• support decision-making about purchase, re-use, retirement, and disposal of assets‚
• meet regulatory and contractual requirements
IT asset management
Which practice has the following purpose?
To systematically observe services and service components, and record and report selected changes of state identified as events. This practice identifies and prioritizes infrastructure, services, business processes, and information security events, and establishes the appropriate response to those events,including responding to conditions that could lead to potential faults or incidents
Monitoring and event management
Which practice has the following purpose?
To make new and changed services and features available for use
Release management
Which practice has the following purpose?
To ensure that accurate and reliable information about the configuration of services, and the CIs that support them, is available when and where it is needed. This includes information on how CIs are configured and the relationships between
Service configuration management
Which practice has the following purpose?
To move new or changed hardware, software, documentation, processes, or any other component to live environments. It may also be involved in deploying components to other environments for testing or staging
Deployment management
Which practice has the following purpose?
To align the organization’s practices and services with changing business needs through the ongoing improvement of products, services, and practices, or any element involved in the management of products and services
Continual improvement
Which practice has the following purpose?
To maximize the number of successful service and product changes by ensuring that risks have been properly assessed, authorizing changes to proceed, and managing the change schedule
Change Enablement
Which practice has the following purpose?
To minimize the negative impact of incidents by restoring normal service operation as quickly as possible
Incident management
Which practice has the following purpose?
To reduce the likelihood and impact of incidents by identifying actual and potential causes of incidents, and managing workarounds and known errors
Problem management
Which practice has the following purpose?
To support the agreed quality of a service by handling all pre-defined, user-initiated service requests in an effective and user-friendly manner
Service request management
Which practice has the following purpose?
To capture demand for incident resolution and service requests. It should also be the entry point and single point of contact for the service provider with all of its users
Service desk
Which practice has the following purpose?
To set clear business- based targets for service levels, and to ensure that delivery of services is properly assessed, monitored, and managed against these targets
Service level management
