ITIL Change Management - Some Basics

If we are searching for a concise definition ofThe ITIL describes a Standard Change as "...a
'change' - in conformity with the ITIL Changechange to the infrastructure that follows an
Management principles- then here it is. It meansestablished path, is relatively common, and is the
addition, modification or removal - which can beaccepted solution to a specific requirement or set
termed as de-registration -of an authorized ( orof requirements." The standard changes, which
base-lined), planned and supported configurationare pre-authorized, can be implemented under
item/service or service component andestablished procedure, in other words, a standard
associated elements or documents. Theoperating procedure(SOP). Its risk and impact
circumstances often can be confusing in identifyingprofiles are low and known. It should have a
'change'. Requests for password reset, newtested set of Release-to-Production document
access, server installation, rebooting a server, newtemplates - build and test plans or scripts, support
hire setup may not be termed as 'change' per se,plans, implementation plans and back-out plans.
but they may generate change-managementCAB can pre-authorize the standard changes
activities. Many IT organizations often get caughtbased on risk and impact and CAB can also
up in bureaucratic frenzy that they getdelegate responsibility for accountability of delivery
programmed to label any service request asof the change to the change owner.
change. One just needs to bear in mind, justWhat is a 'Normal' change? The ITIL version 3 has
because it needs approval, tracking andintroduced this concept. It follows the full-blown
documentation, it is simply not a change. JustITIL Change Management process- assessment,
because it needs approval, tracking andauthorization, CAB approval, scheduling before
documentation doesn't mean it is a change.implementation. Based on the scope, complexity
Similarly, requests for administration are notand impact, a normal change can be further
requests for change. The IT organizations need tocategorized as minor, major and significant ones.
be aware and cognizant of these factors toAn ITIL emergency change is the highest priority
successfully drive the change managementchange that can be defined in an organization.
process within the boundary of the definition.Emergency changes are defined as changes that
The major object or the entity that instantiates aneed to be evaluated, assessed and either
change, is the Request -for-Change (RFC). What isrejected or approved in a short space of time. In
a change request? It is a formal communicationother words, emergency Change is reserved for
seeking an addition, modification or removalchanges intended to repair an error in an IT
(deregistration) to base-lined Configuration Item(s).service that is negatively impacting the business
We should not follow a straight jacket approach into a high degree. Simply defining a change as an
defining change and we might need multipleemergency does not automatically entail the
templates to capture different types and flavorschange should be implemented. The Emergency
of change. A change request should beChange Advisory Board (ECAB) will assess the
exhaustively descriptive of the change details, itschange and provide advice to the delegated
purpose, risks and impacts on other CIs and atperson responsible for approving or rejecting
the level of the organization at large, theemergency changes.
implementation plan, the back-out plan if it fails,In the context of ITIL, 'change priority' needs to
post-implementation review plans.be properly computed before scheduling the
Next, the important question is how do werequests. The formula for determining Change
categorize the change requests. The guideline is toPriorities is: Priority = Business Impact + Urgency.
categorize them, broadly speaking, based onTruly speaking, determination of 'priority' is not
business impact and complexity. We know that inpurely a matter of quantitative computation,
the simple scheme of categorization, we havebecause impact and urgency are not numeric
three categories - Standard, Normal andentities. But at least we can arrive at some ordinal
Emergency Changes.ranking of the priorities.