ITIL AITR Workshop Change Configuration Release Management April

ITIL® AITR Workshop: Change, Configuration & Release Management April 4, 2007 0

ITIL® AITR Workshop Agenda • ITIL®: What is it and How Can it Help You? • How Fast Will Change Requests be Approved? • ITIL®: Process Roll-Out – Change, Configuration, Release • How to Get Changes (Code) Out in a Timely Manner? • Why are We Implementing ITIL® Processes? • Testing Expectations from Agencies • Agency Onboarding Schedule • Who Will Perform the Change? • What are the Impacts to an Agency? • Forward Schedule Of Change (FSC) • Agency Interface to Change • When to Submit a Change Request? • Security Concerns • ITIL® information Sources 1

ITIL® AITR Workshop ITIL®: What is it and How Can it Help You? • ITIL® stands for Information Technology Infrastructure Library - - - set of books • ITIL® is a “Framework” to establish and manage quality IT processes - - - based on industry “best practice” • ITIL® will address IT business problems that are caused by unmanaged change (e. g. unplanned changes that affect other operations, which may cause an outage) 2

ITIL® AITR Workshop ITIL®: Process Onboarding Note: Only Phase I Has Direct Customer Impact 3

ITIL® AITR Workshop Phase I - Change Management Goal/Objective: • Use standardized methods and procedures • Efficient and prompt handling of all Changes • Minimize the impact of any related Incidents upon service 4

ITIL® AITR Workshop Phase I - Configuration Management Goal/Objective: • Make accurate information accessible (physically but also logically) to everybody who needs it in a timely manner • Enable control of the infrastructure by monitoring and maintaining information on all resources needed to deliver services, their status, history and relationships 5

ITIL® AITR Workshop Phase I - Release Management Goal/Objective: • Ensure quality of production environment by using formal procedures and checks when implementing new versions. 6

ITIL® AITR Workshop Why Are We Implementing ITIL® Processes? To provide standard and repeatable processes To provide better customer service, there needs to be controls and metrics Reduce downtime and increase productivity – System and Personnel 7

ITIL® AITR Workshop Messaging Services Enterprise Exchange/Outlook Email Enterprise Collaboration tools Active Directory, DNS Desktop Mass Desktop Refresh Projects Network Printer Consolidation and Refresh Enterprise Desktop Management Systems Mainframe and Servers Service Desk Enterprise Service Desk in Lebanon and Meadowville Field Based agents and technicians for Level 3 Enterprise Help Desk System (Service. Center) Security ITIL® New IBM and Unisys Mainframes in new Data Center Consolidation and refresh of servers Migration of servers to the data center Facilities Tier 3 and Tier 2 New Data Center/Office Building in Meadowville New Disaster Recovery Center and Help Desk in Lebanon/Russell County Moving from agency-centric operation to an enterprise-managed service “People – Process – Tools” Network New Commonwealth-wide MPLS Core WAN LAN upgrades to local switches/routers as needed Network Re-addressing of IP, DHCP Enterprise Security Operations Center Computer Security Incident Respon Center Secure Internet Gateway Voice / Video Voice over IP Network optimized for voice and video traffic 8

ITIL® AITR Workshop Messaging Services Enterprise Exchange/Outlook Email Enterprise Collaboration tools Active Directory, DNS Desktop Mass Desktop Refresh Projects Network Printer Consolidation and Refresh Enterprise Desktop Management Systems Mainframe and Servers Service Desk Enterprise Service Desk in Lebanon and Meadowville Field Based agents and technicians for Level 3 Enterprise Help Desk System (Service. Center) Security ITIL® New IBM and Unisys Mainframes in new Data Center Consolidation and refresh of servers Migration of servers to the data center Facilities Tier 3 and Tier 2 New Data Center/Office Building in Meadowville New Disaster Recovery Center and Help Desk in Lebanon/Russell County Moving from agency-centric operation to an enterprise-managed service “People – Process – Tools” Network New Commonwealth-wide MPLS Core WAN LAN upgrades to local switches/routers as needed Network Re-addressing of IP, DHCP Enterprise Security Operations Center Computer Security Incident Respon Center Secure Internet Gateway Voice / Video Voice over IP Network optimized for voice and video traffic 9

ITIL® AITR Workshop Transformation: A Three-Year Program FROM TO Ø 68, 000 desktops (varying standards) Ø Standard platform and images Ø 40+ help desks Ø 1 Enterprise Help Desk Ø 3, 000+ servers Ø 1, 000 Physical Servers (Target) Ø 85+ Internet connections Ø 2 Redundant Internet Connections Ø No common SLA management Ø Enterprise SLA Standards Ø Ad hoc, Inconsistent Processes / Procedures Ø ITIL® Compliant Processes / Procedures “If you got best practices in place for a well-managed environment, you can reduce your total cost of ownership by as much as 25% to 30%. ” - Gartner 10

ITIL® AITR Workshop Agency Onboarding Schedule Phase 1 Key Dates: ITIL® Change, Configuration and Release Management – User Test Training: 19 Feb 07 – 2 Mar 07 – User Test: 5 Mar 07 to 30 Mar 07 – Process Implementation: – Agency Pilot (VITA) - April – IT Partnership Onboarding – May / June – Other Agencies – As Scheduled (beginning July) 11

ITIL® AITR Workshop Agency Impacts: Pre-Agency Onboarding Agencies will continue to use their current Software Engineering Processes for Change, Configuration, and Release Management IT Partnership staff will be following the Enterprise Change Management Process for the IT Partnership Infrastructure (no Agency impact) 12

ITIL® AITR Workshop Agency Impacts: Post-Agency Onboarding Change Requests are required for any addition, modification or removal of IT components in the IT Partnership Production Infrastructure (Includes Software and Hardware) Agency Software Releases need to be coordinated with ITP Release Management for Planning, Build and Roll-Out of the Release (Triggered by a Change Request) Agencies will identify interface points within their current process to interact with the IT Partnership Change Management process 13

ITIL® AITR Workshop Agency Interface to Change Development and Test Environments IT Partnership Production Infrastructure (Controlled) When there is impact to the Production Infrastructure, a Change Request is submitted by the Requestor. 14

ITIL® AITR Workshop When to submit a Change Request? The timing of a change request submission depends on the classification of the request: Minor Change Request– For smaller changes, such as requesting a new version of MS Visio, we ask that you submit the change request after testing for compatibility within your environment. Major Change Request: Type 1– For a large proposed change that does not require a new design for a solution, we ask that you submit the change request after you have unit and system tested the change. Major Change Request: Type 2– For a large proposed change that does require a new design for a solution, we ask that you submit the change request during the Design Phase. Ideally, the submission should occur when enough data has been gathered to properly communicate and coordinate with Change Management. All questions and concerns about when, and how to submit your CR should be communicated with your Regional Change Manager or the IT Partnership Service Level Director 15

ITIL® AITR Workshop When Do I Create a Change Request? 16

ITIL® AITR Workshop How Fast Will Change Requests be Approved? Change Class Emergency Criteria • Unplanned changes • Service is down, requires immediate attention to restore • Always High Priority Expected Approval • Emergency CAB (ECAB) approves • As soon as the ECAB can be contacted • Immediately to same day Major Minor • Planned changes of higher complexity • Scheduled CAB approves • Service has potential to be impacted, but planning and scheduling mitigate outage • 1 -5 days • Planned changes of lower to medium complexity • Change Manager approves, or • Service generally not impacted. Standard • Planned, routine changes • Scheduled CAB approves • 1 -5 days Pre-approved • No impact to services First occurrence needs to go through full process to be identified • Low impact, Low priority changes typically as a “Standard” change repeated and well known 17

ITIL® AITR Workshop What are the basic mechanics of the Change Advisory Board (CAB)? Ø The Regional ITIL® Change Manager will set a regular meeting schedule Ø Regional IT Partnership and Agency employees will participate in the CAB meetings Ø Agency CAB members will be identified as part the ITIL® Onboarding process Ø Agency CAB members will only need to meet about their Agency’s change requests Ø The Peregrine tool will send a ‘notification’ regarding when change requests require CAB participation Ø CAB members are expected to review and comment on CRs independently Ø The CAB will only discuss CRs when there is disagreement or when clarification is needed 18

ITIL® AITR Workshop Forward Schedule of Change (FSC) Allows for Approved Planned Maintenance Proper Changes Events Schedules Planning and Coordination Change Data Contains: Ø Change Title Ø Estimated Time For Change (Start / End) Ø What / Who is Affected Ø Primary Contact (Team/Agency) 19

ITIL® AITR Workshop How to Get Changes (Code) Out in a Timely Manner? Identify all areas that may be impacted by the change and ensure that the Stakeholders understand the risks. Must have buy-in and acknowledgement to proceed. PLAN Communicate: Stakeholders Coordinate with all stakeholders to properly plan for the event. Change Manager Properly Document the Prior Planning Prevents Poor Performance It is best to communicate with Change Management as soon as all of the details are known about the change that has been identified. Change Details: Be thorough when completing the Change Request (CR) Who, What, When, Where Tips: q Submit Change Requests as soon as details are known q DO NOT submit requests at last minute. 20

ITIL® AITR Workshop Testing Expectations From Agencies Test Plan “EVIDENCE” Documented Test Results attached to the CR: Ø Unit Test – Results Ø (Include Screen Shots if available) Test Ø Functional Test - Results Procedure Testing is required for all changes that will be introduced into the IT Partnership Production Environment. (Rigor of test is dependent upon complexity of the change) 21

ITIL® AITR Workshop Who Will Perform the Change? Changes to the ITP Production Infrastructure will be made by ITP Operations Staff Agency staff may be present, and are encouraged to participate in the overall change process. POC’s need to be identified and available for questions and/or assistance during change activities. Release, or deployment scripts/instructions, need to accompany all Change Requests. 22

ITIL® AITR Workshop ITIL® Information Sources There are multiple sources for you to obtain more information about ITIL® : • Agency Customers: Go to http: //www. vita. virginia. gov/itpartnership/updates/coins. cfm#itil • ITP and VITA employees: ITIL® page on VITAWeb contains ITIL® information: Go to https: //vitaweb. virginia. gov/C 2/ITIL/default. aspx – Use your DITLAN account to access the site • Future COIN meetings – next April 25 • Monthly AITR meetings • Transformation Kick-Off meetings • Monthly newsletters (e. g. IT Partnership News) • VITA Transformation POC • ITIL® Change Champions • Process Documentation – Send a request to questions@vita. virginia. gov 23

ITIL® AITR Workshop Additional Security Concerns Outside Change, Configuration & Release Management 24

ITIL® AITR Workshop - Security Concerns Question: How will the partnership ensure that infrastructure staff have the appropriate security clearances to access sensitive data? Answer: Ø Agency requirements have been gathered for protection of Sensitive data. Ø All IT Partnership personnel will go through a criminal background check. Ø Additionally, staff with proximity to an agency with additional background check requirements (VSP, Tax, HIPPA for example) will also go through those additional checks at the customer agency expense. 25

ITIL® AITR Workshop Access Policy Question: Will Agency personnel have “Admin Access? ” Answer: Agency personnel will not have these access rights except on an documented, and agreed upon, exception basis. 26