ITIL process management to mitigate operations risk in cloud architecture infrastructure for banking and financial services industry

Abstract

Banking and Financial Services Corporations need to update information systems with logic and data of various applications on everyday basis to remain consistent with change in economy and business activity. This helps to work with latest information included in information system available in current economic and business scenario. This enables information systems and empowers work force to complete tasks in rapidly changing flow of monetary resources. With several employees in Banking and Financial Services Corporations using cloud infrastructure and reporting incidents arising in using cloud infrastructure, it is of prime importance to fix incidents reported within specific timelines. IT change management process is followed in order to adhere to IT governance & compliance framework and reduce risk of failure while performing changes in cloud infrastructure. With incident management and change management processes are aligned to keep cloud infrastructure available and secure, they become integral part of IT operations everyday activity. To make ITIL processes efficient, further organization specific policies are developed. With global standards and organization level controls in place, there are failures in IT incident and change management processes and implementation. In this paper, we have identified the risk arising due to incident management and change management processes that lead to emergency changes being implemented on cloud infrastructure architecture and discussed the steps to mitigate risks to bring greater responsibility and accountability for cloud services providers.

Keywords

Incident management change management operational control information technology infrastructure library (ITIL)emergency change

Get full access to this article

View all access options for this article.

References

Abbasipour,

Khendek and

Toeroe, A model-based framework for SLA management and dynamic reconfiguration, ECE, Concordia University, Montréal, Canada, pp. 1–3.

Anantharaman, Agile incident management using Kanban board for data visualization, IOSR Journal of Computer Engineering (IOSR-JCE), e-ISSN: 2278-0661, p-ISSN: 2278-8727, 4th – Somaiya International Conference on Technology and Information Management (SICTIM’18) 17, pp. 17–20.

Bosworth, IT change management, enterprise change management process, UCSF IT Change Management, Version 3.4, 06/23/17, pp. 3–30.

Cichonski,

Millar,

Grance and

Scarfone, Computer security incident handling guide recommendations of the National Institute of Standards and Technology, National Institute of Standards and Technology, NIST Special Publication 800-61 Revision 2, pp. 15–79.

Doherty and

Waterhouse, Change management: A CA IT service management process map, CA, Inc., June 2006, pp. 2–5.

Happe,

Theilmann,

Edmonds and

Kearney, A reference architecture for multi-level SLA management, in: Service Level Agreements for Cloud Computing, SAP Research, Vincenz-Priessnitz-Str. 1, 76131 Karlsruhe, Germany,

Wieder et al., eds, 2011, pp. 1–10. doi:10.1007/978-1-4614-1614-2_2.

ISACA , Incident management and response, An ISACA White Paper, 2012, pp. 1–13.

Jackson, Change management process, computing & telecommunications services, Wright State University, Change Management Project Team, pp. 1–21.

Jäntti and

Cater-Steel, Proactive management of IT operations to improve IT services, JISTEM – Journal of Information Systems and Technology Management 14(2) (2017), 191–218. doi:10.4301/S1807-17752017000200004.

10.

Jantti and

Niskala, Improving change management systems and processes, in: ICONS 2014: The Ninth International Conference on Systems, School of Computing, University of Eastern Finland, Kuopio, Finland, pp. 1–6.

11.

Kapella, A framework for incident and problem management, Incident and Problem Management Framework April 2003 INS Whitepaper 2003, pp. 1–20.

12.

Kosiński,

Nawrocki,

Radziszowski,

Zieliński,

Przybylski and

Wnęk, SLA monitoring and management framework for telecommunication services, in: Fourth International Conference on Networking and Services, AGH University of Science and Technology, IEEE Computer Society, 2008, pp. 2–5. doi:10.1109/ICNS.2008.31.

13.

Mansfield and

Basner-Katz, Change management process, Northwestern University Information Technology, June 1, 2011, Version 2.7.

14.

Martins de Andrade,

Albuquerque,

Dourado and

Aguiar da Silva, Change management: Implementation and benefits of the change control in the information technology environment, Graduate Studies in Computer Science, University of Regina, Regina, SK, Canada, International Journal of Advanced Information Technology (IJAIT) 6(1) (2016), 1–11.

15.

Martins and

Pais, Implementing ITIL change management, Extended abstract, Instituto Superior Tecnico, Lisboa, Portugal, pp. 1–9.

16.

Motta,

Barroero,

Galvani and

Longo, IT service level management: Practices in large organizations, Communications of the IBIMA 2011 (2011), Article ID 635464.

17.

Paschke,

Dietrich,

München and

Kuhla, A logic based SLA management framework, Internet-based information systems, Technische Universität München, Information Sciences & Technology, Massey University, pp. 1–3.

18.

Schaaf, Frameworks for business-driven service level management – A criteria-based comparison of ITIL and NGOSS, Munich Network Management Team, Ludwig-Maximilians University (LMU), Oettingenstr. 67, 80538 Munich, Germany, pp. 1–5.

19.

Sebaaoui and

Lamrini, Implementation of ITIL in a Moroccan company: The case of incident management process, Quality Statistic Computing Laboratory, Faculty of Science Dhar el Mahraz, Fes, P.O. box 1796 Atlas, 30000, Morocco, IJCSI International Journal of Computer Science Issues 9(4) (2012), 3, 1–7.

20.

Šimková, Service level management and its link to CobiT’s, DS1 (define and manage service levels) and to DS2 (manage third-party services) processes, SYSTÉMOVÁ 58 INTEGRACE 2/2005, 2005, pp. 1–18.

21.

Soomro and

Bashir, Comparative study on change management, College of Eng. & IT Al Ain University of Science & Technology, Al Ain, UAE„ Department of IT SZABIST, Dubai Campus United Arab Emirates (UAE), International Journal of Computer Applications 39(1) (2012), 2–7.

22.

Strahonja, Proactive approach to the incident and problem management in communication networks, University of Zagreb, Faculty of Organization and Informatics, Varazdin, Croatia, COM CS S IN, Siemens d. d., Zagreb, Croatia, UDK 004.41:005, Original scientific paper, pp. 1–15.

23.

Talla and

Valverde, An implementation of ITIL guidelines for IT support process in a service organization, International Journal of Information and Electronics Engineering 3(3) (2013), 1–7.

24.

Talla and

Valverde, An implementation of ITIL guidelines for IT support process in a service organization, International Journal of Information and Electronics Engineering 3(3) (2013), 1–7.

25.

Tehrani and

Mohamed, A CBR-based approach to ITIL-based service desk, Faculty of Information Technology Multipmedia University, Cyberjaya, Malaysia, Journal of Emerging Trends in Computing and Information Sciences 2(10) (2011), 1–9.

26.

Zhao,

Sakr and

Liu, A framework for consumer-centric SLA management of cloud-hosted databases, National ICT Australia (NICTA), School of Computer Science and Engineering, University of New South Wales, Australia, pp. 1–14.

27.

Zhu,

Song and

Song, ITIL-based IT service management applied in telecom business operation and maintenance system, School of Electrical Engineering in Beijing University of Posts and Telecommunications, Beijing, China, ISBN 978-952-5726-07-7 (Print), 978-952-5726-08-4 (CD-ROM) Proceedings of the Second Symposium, pp. 2–6.