FitSM-3 Role Model
FitSM-3 Role Model
FitSM-3 Role Model
Document control
Document Title Part 3: Recommended role model
Document version 2.2
Release date 2016-06-14
Table of Contents
1. Foreword ............................................................................................................................................. 1
2. Introduction ........................................................................................................................................ 1
3. Scope and applicability ....................................................................................................................... 2
4. Terms and definitions ......................................................................................................................... 2
5. Important concepts............................................................................................................................. 3
5.1 Generic and specific roles ................................................................................................................. 3
5.2 RACI matrix........................................................................................................................................ 3
6. Generic ITSM roles .............................................................................................................................. 5
6.1 SMS owner ........................................................................................................................................ 5
6.2 SMS manager .................................................................................................................................... 6
6.3 Service owner.................................................................................................................................... 7
6.4 Process owner ................................................................................................................................... 8
6.5 Process manager ............................................................................................................................... 9
6.6 Case owner...................................................................................................................................... 10
6.7 Member of process staff ................................................................................................................. 10
6.8 Summary and visualisation of the role model ............................................................................... 11
7. Process-specific ITSM roles ............................................................................................................... 12
7.1 Context: Service Portfolio Management (SPM) .............................................................................. 12
7.2 Context: Service Level Management (SLM) .................................................................................... 13
7.3 Context: Service Reporting Management (SRM) ............................................................................ 15
7.4 Context: Service Availability & Continuity Management (SACM)................................................... 16
7.5 Context: Capacity Management (CAPM) ........................................................................................ 18
7.6 Context: Information Security Management (ISM) ........................................................................ 19
7.7 Context: Customer Relationship Management (CRM) ................................................................... 21
7.8 Context: Supplier Relationship Management (SUPPM) .................................................................. 22
7.9 Context: Incident & Service Request Management (ISRM) ............................................................ 23
7.10 Context: Problem Management (PM)........................................................................................... 24
7.11 Context: Configuration Management (CONFM) ........................................................................... 25
7.12 Context: Change Management (CHM) .......................................................................................... 26
7.13 Context: Release & Deployment Management (RDM) ................................................................. 28
FitSM was co-funded by the European Commission under contract number 312851.
Part 3: Recommended role model
FitSM was co-funded by the European Commission under contract number 312851.
Part 3: Recommended role model
1. Foreword
FitSM is a lightweight standards family aimed at facilitating service management in IT service
provision, including federated scenarios. The main goal of the FitSM family is to maintain a clear,
pragmatic, lightweight and achievable standard that allows for effective IT service management
(ITSM).
FitSM is and will remain free for everybody. This covers all parts of the standard, including the core
parts and implementation aids. All parts of the FitSM standard and related material published by the
FitSM working group are licensed under a Creative Commons International License.
The development of FitSM was supported by the European Commission as part of the Seventh
Framework Programme. FitSM is owned and maintained by ITEMO e.V., a non-profit partnership of
specialists in the field of IT management, including experts from industry and science.
FitSM is designed to be compatible with the International Standard ISO/IEC 20000-1 (requirements
for a service management system) and the IT Infrastructure Library (ITIL). Although the FitSM
process model, requirements, recommended activities and role model target a lightweight
implementation, it can act as a first step to introducing “full” ITSM, i.e. applying ITIL good practices
and / or achieving compliance against ISO/IEC 20000-1. The FitSM family is made up of several
documents, providing guidance and input on different aspects of ITSM in federated ICT
infrastructures:
All documents are available and published in their most recent version through the website
www.fitsm.eu. Enquiries about the standard and its applicability should be directed by e-mail to
[email protected].
2. Introduction
Wherever ITSM is implemented and related ITSM processes are defined, clearly defined roles are
vital to ensure that people involved in these processes are aware of their authorities and
responsibilities. FitSM-3 defines these roles.
FitSM-3 supports FitSM-1 (requirements) and FitSM-2 (objectives and activities) in seeking to
achieve an achievable level of capability for the ITSM processes considered. The role model defined
in FitSM-3 is not intended to be exhaustive or the only valid role model that can be used to meet the
requirements, but it gives some initial guidance on setting up a landscape of roles and
responsibilities in support of meeting the FitSM-1 requirements.
This standard is applicable to all types of organisation (e.g. commercial enterprises, government
agencies, non-profit organizations) from which IT services are provided, regardless of type, size and
the nature of the services delivered. It is especially suitable for groups new to service management,
or for federated scenarios.
5. Important concepts
Prior to presenting the FitSM role model, the idea of generic and specific roles as well as the concept
of a RACI matrix is explained.
The FitSM role map provides both a generic role model (section 6) and advice on how to translate
this into specific roles (section 7).
Generic role A conceptual class of role which is Process manager Flight captain
instantiated in a specific context to
create a specific role
Specific role A concrete role which can be assigned Process manager Flight captain for
to a person or team in order to give for the incident and flight XX123 from
this person or team the responsibility service request Munich to Brussels
for something management
process of an IT
service provider
(process manager
ISRM)
In the context of the role model, it is important to understand that different individuals and their
roles imply different levels of involvement in a process or activity. A RACI matrix shows these
relationships and can be a helpful way of describing the contributions of different roles in the
context of the regarded process or activity. For example:
Activity 1 A R I
Activity 2 AI C R
Activity 3 AC R C
To produce a valid RACI matrix, the following set of simple rules should be followed:
Every row should contain exactly one “A”. The rationale behind this rule is that there should
be clear accountability for every activity; at the same time, it might lead to confusion and
lack of individual commitment or enforceability, if two or more persons or roles are
accountable at the same point in time.
Every row should contain at least one “R”. This is an obvious constraint, since it requires that
there are no activities for which the responsibilities of executing them are undefined.
It should be avoided that the same person or role is accountable and responsible at the
same time, i.e. for the same activity.
SMS owner
SMS manager
Service owner
Process owner
Process manager
Case owner
Member of process staff (process practitioner)
These roles are specified in the subsequent sections. Please note that in practice, and as the
achieved level of maturity increases, there may be additional generic roles, such as “internal
consultant” or “internal auditor”.
SMS owner • Senior accountable owner of the entire 1 for the overall SMS
service management system (SMS)
Often, the person
• Overall accountability for all ITSM-related taking over the SMS
activities owner role may also
take over the process
• Act as the primary contact point for concerns
owner role (see next
in the context of governing the entire SMS
slide) for the entirety
• Define and approve goals and policies for the or a subset of the ITSM
entire SMS processes.
SMS manager • Act as the primary contact point for all 1 for the overall SMS
tactical concerns (including planning and
development) in the context of the entire
SMS
Service owner • Overall responsibility for one specific service 1 per service in the
which is part of the service portfolio service portfolio
• Act as the primary contact point for all One person may take
(process-independent) concerns in the over the service owner
context of that specific service role for one or more
(or even all) services.
• Act as an “expert” for the service in technical
and non-technical concerns
Process owner • Act as the primary contact point for concerns 1 per process
in the context of governing one specific ITSM
(optional, see In many situations in
process
comment in right practice, the SMS
column) • Define and approve goals and policies in the owner takes over the
context of the process according to the role of the process
overall SMS goals and policies owner for all ITSM
processes. If this is the
• Nominate the process manager, and ensure
case, it is not required
he / she is competent to fulfil this role
to establish the
• Approve changes / improvements to the process owner role as
operational process, such as (significant) a dedicated role at all,
changes to the process definition since it is merged with
the SMS owner role.
• Decide on the provision of resources
dedicated to the process and its activities
Process manager • Act as the primary contact point for 1 per process
operational concerns in the context of the
One person may take
process
over the process
• Maintain the process definition / description manager role for one
and ensure it is available to relevant persons or more processes.
Note: The role of a case owner is usually required in a process, if occurrences (e.g. incidents, service
requests, problems, changes, releases, …) or logical entities / artefacts (e.g. different types of
agreements, reports or plans, …) are managed by the process, and the process manager him- /
herself does not take over specific responsibility for all of these occurrences or entities. If no specific
case owner is defined and assigned for an important occurrence or artefact belonging to a process,
the process manager will own it by default.
Case owner • Overall responsibility for one specific case 1 per case
occurring in a process context (e.g. one
There may be different
specific incident to be resolved)
cases per process at a
• Act as the primary contact point for all time. One person or
concerns in the context of that specific case group may be assigned
the case owner role for
• Coordinate all activities required to handle /
one or more (or even
resolve the specific case
all) concurrent cases.
• Escalate exceptions to the process manager,
where required
Member of • Carry out defined activities according to the 1 or more per process
process staff defined / established process and, as
One person may take
applicable, its procedures (e.g. the activity of
(sometimes also over the member of
prioritizing an incident)
referred to as process staff role for
process • Report to the case owner and / or process one or more processes.
practitioner) manager
SLA / OLA / UA • Maintain the SLA, OLA or UA under his/her 1 per SLA, OLA and UA
owner ownership and ensure it is specified and
documented according to relevant
specifications
Service report • Maintain the service report specification for 1 per service report
owner the report under his/her ownership
Availability plan • Create and maintain the availability or 1 per availability plan /
owner / continuity plan under his/her ownership continuity plan
continuity plan
• Ensure that relevant stakeholders in the
owner
context of the plan are consulted and
informed when creating, updating or
implementing the plan
Capacity plan • Create and maintain the capacity plan under 1 per capacity plan
owner his/her ownership
Asset owner • Maintain and review the description and 1 per (information)
classification of a specific (information) asset asset
in the asset inventory
Customer • Act as the primary contact point for a specific 1 per identified
relationship customer customer
manager
• Maintain the relationship with that customer
(Account by regular communication
manager)
• Process formal customer complaints
Supplier • Act as the primary contact point for a specific 1 per identified
relationship supplier supplier
manager
• Maintain the relationship with that supplier
by regular communication
Incident owner / • Coordinate and take over overall 1 per incident / service
service request responsibility for all activities in the lifecycle request
owner of a specific incident or service request
Process owner PM
Process manager PM
Problem owner
Change owner • Control and coordinate all activities in the 1 per change
lifecycle of a specific change
Change advisory • Evaluate non-standard changes, taking into 1 board for a certain
board (CAB) account at least: number of changes
• Benefits
• Risks
• Potential impact
• Technical feasibility
• Effort / cost
Important notes:
Release owner • Control and coordinate the activities in the 1 per release
lifecycle of a specific release, including
planning, building, testing and deploying
In a tightly integrated situation, the model presented in the previous sections is straight-forward to
implement, but it is harder in looser federations. However, even if ITSM responsibility is spread
across multiple organisations, it still resembles a single-organisation service management system in
that there is a discrete hierarchy dealing with ITSM that is not the same as existing line
organisations. Thus, the three key factors, in all federation types are:
An agreed upon SMS owner (see section 6.1) of sufficient seniority to oversee ITSM across
the whole federation;
very clear communal understanding of the responsible organisation, unit or group for each
ITSM process;
a joint agreement that the hierarchy within ITSM activities will be respected by other
hierarchies within the service provider or federation. Thus, process staff will follow
instructions and meet goals set by process owners and process managers, even if they are in
different legal organisations.
If these factors are considered, roles can be assigned in a federation just as they can within a single
organisation.