Home > CA Community > Service Management

CA Community





This Blog

Service Management

The importance of Service Management from building a strategy to applying best practices with ITIL is paramount in realizing real world, practical implementations. Learn how you can go from strategy to implementation

Is the “ITIL” CMDB Still Relevant in Cloud Era?

Published: January 29 2013, 03:45 PM
by Robert Stroud

A client calls your service desk to report that your retail banking service is unavailable. But the base metrics indicate that all the components are available, so you log the incident and tell the caller that you'll look into it. A deeper investigation reveals that a component in the service chain isn't mapped as part of the dependency map and it has been unavailable for almost an hour. So instead of one irate caller, you now have thousands. You long for the days when you knew all the components in the service and could check them off one by one. Today, the complexity of the environment doesn't allow this and we have to rely on accuracy and completeness of service in the Configuration Management Database or CMDB.

The CMDB is often seen as a mystery, a failed project or an expensive asset repository. For those who have executed well, however, it is vital cog of IT that ensures highly available services, especially in this emerging hybrid world.

The hybrid IT estate implies multiple suppliers including "cloud" and "cloud" implies virtualization. Most of these implementations have been rushed into production without the quality and control afforded traditional investments by process standardization and best practices like ITIL. The very nature and complexity of these services mandates automation, including the optimization of resources in order to deliver highly available and dynamic IT services.

So why do some think that these environments, with their aura of self-management, don't require the structure and rigor of process such as ITIL and the CMDB? I believe they do-but based on their complexity and level of automation, they require it in an automated form.

Most organizations I talk with have some form of investment in their CMDB journeys. Typically, they have some from Configuration Items based on the IT service view and not business services as the highest order CI's. Implementations that are more mature are linking the CI's to metrics that are business-like. That said, much of this is manual or semi-manual and the implementation evolves in the more mature organizations based on gaps and a strong change rigor that ensures updates when change is moved to production.

This works quite well in an environment of controlled change and discipline. But it adds significant overhead and effort in the cloud and hybrid world, where automation isn't leveraged, leading rapidly to an incorrect CMDB. The IT Director at an organization I visited this week told me that they were now totally virtualized and were abandoning the CMDB!

The reality is that automation of process actually allows for greater accuracy of your CMDB since you can ensure that it is updated automatically as part of the process. You just have to include time as part of your automation process development to ensure the repository is updated and then allow for automated change collision detection, and proactive alerting. This will also enable the Service Desk to be aware of the current configuration just in case there is an incident....

So the next time you hear from an irate caller, you can quickly resolve the incident. Or, even better, you can identify the component failure and restore it before you even get the call!

Share this post:  
Tags: , ,

 

By: Robert Stroud
Robert Stroud is vice president of innovation and strategy for Service and Portfolio Management at CA Technologies. Rob is dedicated to the development of industry trends, strategy and communication of industry best practices. Rob is a strong advocate for the governance, security, risk and assurance...
Read More..

9 people have left comments:

Cloud is part of the infraestructure, where it is and how you pay for it doesn't change the need to have control. With Cloud computing the challenge is getting bigger.

Posted by: Marlon Molina | January 29, 2013 4:39 PM

In dynamic pooled resource environment (aka cloud) - it is MORE important to have process and controls that in static even highly virtualized environment. However, boundaries and controls are more likely to be implemented via automation in cloud era, than by a manual process overlay common with many ITIL deployments. Think "best practice" encapsulated in script or executed via API call - rather than change advisory board meeting.

Posted by: Kurt Milne | January 29, 2013 7:57 PM

Rob, good post, a few comments...... I, like you, run into situations and/or clients who make similar comments. "...now totally virtualized and were abandoning the CMDB!" What I do not understand is how they convince themselves that virtualization negates the need to know what IT components collectively deliver a service. IF they at least made the argument that, since they are virutalized, they have established such a sophisticated layering of redundancy that, their environment will NEVER GO DOWN, then okay, I might buy it. The problem is, I have NEVER seen an organization offset the savings of going virtual by duplicating or triplicating (that isn't a real word is it) the environment. And of course, it WILL go down at some point. The other alternative, as you state is automation....I would stress EXTENSIVE automation with LOTS of audit & verification. I will respect the individual/executive that at least steps up and is honest when they admit, "hey, it is in the cloud and I offloaded the responsibility". I don't agree with it but, okay, it is always an option. How wise it is however, is another question especially since you CANNOT offload accountability. I simply demand / ask of my clients that they make "conscious and informed decisions". Beyond that, I am not sure what we can do to drive home the fact that users & customers frankly do not care WHO is doing it behind the scenes. They just want their service operational. Simply ask how many NetFlix customers were mad at Amazon ( AWS US-East ) when they lost service last April. From my perspective, as a NetFlix customer I DID NOT CARE whatsoever that NetFlix uses Amazon as a provider and it was Amazon who had issues. I just know that my money goes to NetFlix for a service to be provided and it wasn't.

Posted by: Carlos Casanova | January 29, 2013 9:33 PM

Kurt, As you mentioned the in the Cloud\virtualised world it is indeed MORE critical to have effective processes with effective controls implemented to ensure the effective execution. As you mention the implementation of those environments whether private, public or hybrid cloud or as I more frequently see automation and virtualization, the manual process employed by some of the older "ITIL" implementations are being replaced with the use of requests directly from the user, automated through the use of API's. Without effective controls, automatic configuration of estate linked to assurance of quality of service it will fail.

Posted by: Robert Stroud | January 30, 2013 9:48 AM

Carlos, One of the aspects your Netflix\Amazon example reminded me of the changing attitudes to leveraging cloud services. Yes, the service was down, and it affected me, I was annoyed and was happy once the service was restored. The challenge for Netflix was to restore my service before they reached what I  call my "swap-ability threshold" is exceeded, when I will seek an alternative. Interestingly they can tell me it was someone else's fault but I pay the bill to Netflix so they are accountable as you mentioned. Without a good service value chain they couldn't guarantee or restore service so I am shocked how organizations can consider not mapping at least their critical services to components and partners… I guess some organizations have to learn based on experience…

Posted by: Robert Stroud | January 30, 2013 3:07 PM

In a recent blog post by Rob Stroud , he discusses the relevancy of the ITIL CMDB in the era of the cloud

Posted by: Cloud Storm Chasers | January 31, 2013 5:10 PM

If those who don't think they have to have things documented, they are not looking at what Netflix is actually doing. They do have things documented ... because that is how they control things. I am not sure what saying Netflix was to blame has anything to do with this discusssion ... other then because of how Netflix system is set up, they were able to figure out where the problem was (although they could not do anything about it) and that not EVERYTHING was affected. They also are now able to something about it. If this happened in your own datacenter, you would have been totally down. That is what is great about the cloud. If you do it right, at least not every service will be down. FYI - once i read what happened .. I was mad at AWS. So there is at least one customer who was.

Posted by: Mark | February 2, 2013 4:37 PM

Pingback from  Fresh Links Sundae from David Lowe of Actionable ITSM | Actionable ITSM

Posted by: Fresh Links Sundae from David Lowe of Actionable ITSM | Actionable ITSM | February 3, 2013 9:43 AM

Good Read

Posted by: Paul | February 13, 2013 6:17 PM

Leave a Comment

* An asterisk indicates a required field

* :  

:

* :  

  Submit