When new services are deployed in an ITSM (IT Service Management) environment, the process includes a major role in dealing with the risks. IT risk could occur in several areas during service delivery, including operational, legal and financial risks.
Besides minimizing problems in service delivery, many government and regulatory agencies also routinely review organizational risk management policies and responses. Implementing and controlling risk in an ITSM environment is not only smart business; it can also be a regulatory requirement.
IT risk management is a continuous process with its own lifecycle. A simple IT risk management process usually includes the steps as demonstrated in the below figure :
The identification phase could include brainstorming, organizational historical records, Internet search and networking. In ITIL this process comes in the Service Design phase or Continuous improvement phase.
Probability of risk occurring and prioirtizing risksis another important phase where the probabilities and priorities of the risk are performed. This phase acts as a supporting phase in defining the response plans.
The risk response planning phase determines how the service desk and IT department will respond to the risks. This could include use of any of the techniques like Avoidance, Mitigation, Planned contingency, Shifting the risk, Acceptance of risk and so on.
Monitoring phase is where the risks are monitored and the triggering points of risks are identified. This phase comes in ITIL's operation phase, where proactive monitoring methods are used.
Improvement phase denotes, how the system could be improved to avoid the risks in future. In ITIL service life cycle this process comes in the Continual service improvement practice.
Reference
IT Risk Management Framework & Process for ITSM Environments. (n.d.). Retrieved from https://www.bmc.com/blogs/risk-management-framework-process-itsm-environments/
Comments