Educause Security Discussion mailing list archives

ITIL in Higher Ed


From: Michael S Hines <mshines () PURDUE EDU>
Date: Thu, 1 Jun 2006 09:39:30 -0400

Security Management fits under the Service Level Management aspect of ITIL.  The aspects
of Security addressed relate to meeting service level agreements (confidentiality,
reliability, availability).

ITIL documents are proprietary - which hinders the adoption of ITIL principles in my
opinion.

Some say that ITIL is documentation of good business practices - which may already be in
place in some organizations.

In the realm of change management - mainframe systems people have used change management
principles for years - because of the size of the impact of making a change that affects
availability (taking all users out of service).

A good and economical introduction to ITIL is the book "The Visible Ops Handbook:
Implementing ITIL in 4 Practical and Auditable Steps" by Kevin Behr, Gene Kim, and George
Spafford.  It's interesting that they introduce the idea of change management in terms of
medical triage "first, do no harm".

We're adopting ITIL here in IT@P (IT at Purdue) various forms.

-----------------------------------
Michael S Hines
Purdue University
mshines () purdue edu

Current thread: