{"id":4682,"date":"2013-05-21T23:45:44","date_gmt":"2013-05-21T23:45:44","guid":{"rendered":"https:\/\/multiacademstg.wpengine.com\/20000academy\/blog\/2013\/05\/21\/incident-management-itil-solid-foundations-operational-processes\/"},"modified":"2025-05-24T14:45:15","modified_gmt":"2025-05-24T14:45:15","slug":"incident-management-itil-solid-foundations-operational-processes","status":"publish","type":"post","link":"https:\/\/staging.advisera.com\/20000academy\/blog\/2013\/05\/21\/incident-management-itil-solid-foundations-operational-processes\/","title":{"rendered":"Incident Management in ITIL \u2013 solid foundations of operational processes"},"content":{"rendered":"<p>I am sure that you have heard users of an IT service say that they have problems, errors, malfunctioning or something similar when there is degradation in the service. Based on <a href=\"https:\/\/staging.advisera.com\/20000academy\/what-is-itil\/\" target=\"_blank\" rel=\"noopener noreferrer\">ITIL<\/a> methodology, they are having Incident(s). ITIL defines an Incident as \u201cunplanned interruption to an IT service or reduction in the quality of an IT service or a failure of a CI (Configuration Item) that has not yet impacted an IT service.\u201d We define normal operating state of a Service through <a href=\"https:\/\/staging.advisera.com\/20000academy\/iso-20000-documentation-toolkit\/?rel=relationship-and-agreement-processes&#038;doc=service-level-agreement-sla-\" target=\"_blank\" rel=\"noopener\">SLA<\/a> parameters, service description and operational parameters. If they are not achieved \u2013 an Incident has occurred.<\/p>\n<h2 style=\"padding-top: 10px; padding-bottom: 10px;\">Importance of Incident Management<\/h2>\n<p>Why are Incidents and the Incident Management process so important? Because Incidents are a user&#8217;s introduction to a support organization. When an Incident occurs, users need support from their service provider, and the Incident Management process starts.<\/p>\n<p>If we consider the complete lifecycle of an IT service, Service Operation (where Incident Management is defined) is part of the service lifecycle, for most of the services that last longest. This means that the support organization is around for a long time when needed by their users. That\u2019s one of the reasons why an efficient Incident Management process is important. Another reason is that users typically don\u2019t see Problem Management or Change Management (or, at least, the bulk of the change process). They are also very important, but not right in front of users like Incident Management.<br \/>\n<div id=\"middle-banner\" class=\"banner-shortcode\"><\/div><script>loadMiddleBanner();<\/script><br \/>\n<div id=\"side-banner-trigger\" class=\"banner-shortcode\"><\/div><\/p>\n<h2 style=\"padding-top: 10px; padding-bottom: 10px;\">Island with many bridges<\/h2>\n<p>Incident Management is not an \u201cisolated island\u201d in IT Service Management. It influences, or is influenced by, many other processes in IT Service Management. Incident Management\u2019s task is to restore normal service operation as quickly as possible. This will quite often include implementation of various workarounds &#8211; just to enable service operation as quickly as possible. But, that doesn\u2019t mean that we know what really caused an Incident. That is the aim of Problem Management. When Problem Management defines the root cause of one or more Incidents, it could start Change Management. Since change includes equipment or CIs (Configuration Items) in most of the cases, for efficient Change Management it is advisable to have Service Asset and Configuration Management in place. On the other side, an Incident could be started by an Event, which is handled by Event Management.<\/p>\n<h2 style=\"padding-top: 10px; padding-bottom: 10px;\">Handling<\/h2>\n<p>Besides Event Management and monitoring tools, an Incident could be started in several ways:<\/p>\n<ul>\n<li>By users \u2013 usually via Service Desk or self-service portal<\/li>\n<li>By suppliers or vendors<\/li>\n<li>By technical staff (inside the support organization)<\/li>\n<\/ul>\n<p>It\u2019s important that the lifecycle of all Incidents are managed by the Incident Management process. Efficient support organizations use <a href=\"https:\/\/staging.advisera.com\/20000academy\/iso-20000-documentation-toolkit\/?rel=resolution-and-fulfillment-processes&amp;doc=incident-record\" target=\"_blank\" rel=\"noopener\">tools to manage Incidents<\/a>. Tools provide many functions, but from experience, there are a few elements that are important for Incident handling:<\/p>\n<p><strong>Self-service portal<\/strong>\u00a0\u2013 web-based interface that users use to open, escalate or control status of Incidents they open. The portal is an integral part of the IT Service Management tool. It should be simple to use and it should not require too much information from the user (requestor\/user data, subject, description, category\/topic and priority).<\/p>\n<p><strong>Incident category<\/strong>\u00a0(or Incident topic) \u2013 information that relates to the <a href=\"https:\/\/staging.advisera.com\/20000academy\/iso-20000-documentation-toolkit\/?_gl=1*1c227dk*_ga*MTM1NjQ0NTEwMS4xNjcxNTI4MDcz*_ga_SBHEDSXFP5*MTY3MTcwOTg0Ny44LjEuMTY3MTcxMDc5My41NS4wLjA.\" target=\"_blank\" rel=\"noopener noreferrer\">Incident catalogue<\/a>, used to categorize the Incident and (optionally) direct the Incident ticket to a specific support group. Incident ticket routing based on category can speed up resolution of an Incident, but I saw some examples where an Incident was routed to a group which contained only one person. If that person is absent, the Incident will not be resolved. The category is defined in the Incident catalogue.<\/p>\n<p><strong>Priority<\/strong>\u00a0\u2013 correct prioritization is important due to the obligations defined in the <a href=\"https:\/\/staging.advisera.com\/20000academy\/iso-20000-documentation-toolkit\/?rel=relationship-and-agreement-processes&#038;doc=service-level-agreement-sla-\" target=\"_blank\" rel=\"noopener\">SLA<\/a>. That directly impacts the order in which Incidents will be handled. For example, if two Incidents are not assigned to a support person, the Incident that requires less time to resolve must be handled first. To learn more about setting priorities, read this article:\u00a0<a href=\"https:\/\/staging.advisera.com\/20000academy\/knowledgebase\/incident-classification\/\" target=\"_blank\" rel=\"noopener noreferrer\">All About Incident Classification<\/a>.<\/p>\n<p><strong>Service Desk<\/strong>\u00a0\u2013 one of the functions according to ITIL. It\u2019s a single point of contact for users and, if not opened via self-service portal, the starting point of an Incident. Incident Management and Service Desk are tied together. If a user contacts the Service Desk, it is important that the Service Desk gathers as much information as possible about the Incident. This will contribute to the quality and time effectiveness of the Incident resolution.<\/p>\n<p><strong>Support groups<\/strong>\u00a0\u2013 it is common situation that Incident Management has several support levels. There are many reasons for that, I will mention just few. Sometimes there are many services in use. Or they are specific and it is hard to have knowledge about every single service or services that are customer specific (e.g. custom implementation of networking technology). Therefore, more expert knowledge is needed to solve Incidents. So organizations have 2<sup>nd<\/sup>\u00a0or 3<sup>rd<\/sup>\u00a0level support. Or they include vendors in their <a href=\"https:\/\/staging.advisera.com\/20000academy\/iso-20000-documentation-toolkit\/?rel=resolution-and-fulfillment-processes&amp;doc=incident-management-process\" target=\"_blank\" rel=\"noopener\">Incident (or Problem) Management process<\/a>. This is functional escalation. It is important to have governance on Incidents so they don\u2019t get lost in re-routing between support groups.<\/p>\n<p style=\"text-align: center;\"><img decoding=\"async\" class=\"aligncenter size-full wp-image-10641\" src=\"https:\/\/staging.advisera.com\/wp-content\/uploads\/\/sites\/6\/2015\/07\/Example_of_Functional_and_Hierarchical_escalation_of_Incidents1.png\" alt=\"Example_of_Functional_and_Hierarchical_escalation_of_Incidents\" width=\"610\" height=\"345\" \/><em>Figure: Example of Functional and Hierarchical escalation of Incidents<\/em><\/p>\n<h2 style=\"padding-top: 10px; padding-bottom: 10px;\">Value creator<\/h2>\n<p>When implementing IT Service Management (based on ITIL) Incident Management is usually first (or one of the first) processes to implement. With or without tool implementation, quality of above mentioned elements is equally important. \u00a0If not implemented, either clear communication and reachability of the support organization will fail (missing self-service portal or service desk), or the Incident process will be incomplete (lack of technical expertise needed to solve complicated incidents if there are no support teams in functional escalation, or difficulties in compliance with <a href=\"https:\/\/staging.advisera.com\/20000academy\/iso-20000-documentation-toolkit\/?rel=relationship-and-agreement-processes&#038;doc=service-level-agreement-sla-\" target=\"_blank\" rel=\"noopener\">SLA<\/a> if priorities and categories are not defined and matched).<\/p>\n<p>Efficient Incident Management is the foundation of a support organization. It highly influences users\u2019 perception of the IT support organization, and serves as a starting point for other processes inside the IT support organization like Change Management or Problem Management. With poorly implemented Incident Management, other processes will lack the data needed to provide results. Therefore, value created by the Incident Management process will be seen both externally by customers, and internally by other processes and functions in IT Service Management. Incident Management should be the rock on which IT Service Management processes and organizations are built.<\/p>\n<p><em>To implement ISO 20000 easily and efficiently, use our<\/em> <a href=\"https:\/\/staging.advisera.com\/20000academy\/iso-20000-documentation-toolkit\/\" target=\"_blank\" rel=\"noopener\">ISO 20000 Documentation Toolkit<\/a> <em>that provides step-by-step guidance for full ISO 20000 compliance.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>I am sure that you have heard users of an IT service say that they have problems, errors, malfunctioning or something similar when there is degradation in the service. Based on ITIL methodology, they are having Incident(s). ITIL defines an Incident as \u201cunplanned interruption to an IT service or reduction in the quality of an &#8230;<\/p>\n","protected":false},"author":32,"featured_media":4683,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[416,344,360,385],"class_list":["post-4682","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-incident","tag-itil","tag-service-desk","tag-service-operation"],"acf":[],"_links":{"self":[{"href":"https:\/\/staging.advisera.com\/20000academy\/wp-json\/wp\/v2\/posts\/4682","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/staging.advisera.com\/20000academy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/staging.advisera.com\/20000academy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/staging.advisera.com\/20000academy\/wp-json\/wp\/v2\/users\/32"}],"replies":[{"embeddable":true,"href":"https:\/\/staging.advisera.com\/20000academy\/wp-json\/wp\/v2\/comments?post=4682"}],"version-history":[{"count":3,"href":"https:\/\/staging.advisera.com\/20000academy\/wp-json\/wp\/v2\/posts\/4682\/revisions"}],"predecessor-version":[{"id":18305,"href":"https:\/\/staging.advisera.com\/20000academy\/wp-json\/wp\/v2\/posts\/4682\/revisions\/18305"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/staging.advisera.com\/20000academy\/wp-json\/wp\/v2\/media\/4683"}],"wp:attachment":[{"href":"https:\/\/staging.advisera.com\/20000academy\/wp-json\/wp\/v2\/media?parent=4682"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/staging.advisera.com\/20000academy\/wp-json\/wp\/v2\/categories?post=4682"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/staging.advisera.com\/20000academy\/wp-json\/wp\/v2\/tags?post=4682"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}