Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Improving Security with ITIL: How to Respond to Security Incidents Part I | Main | Article: What to Expect in an IT Audit »

ITIL is Dead! Long live ITIL!

I’ve posted a few entries about ITIL last week. Since it is such a popular framework in the systems management and service management world, it’s a good way of discussing the links between systems management and security. But not everyone in IT is thrilled with ITIL and its demise is already predicted (assumed?) – it’s successors are already lining up to assume the throne of IT “best practice.” But are the critics missing something here?

For starters, see Noel Burton’s comments on ITIL. He seems to think that ITIL did not do enough to provide guidance and there is nothing to take its place.:

And what about IT itself? The king is gone, leaving no heir. A leadership vacuum emerges. No longer can IT managers utter the vicariously decisive sentence "We're going down the ITIL route" with solemn confidence, because ITIL has shown itself to have no particular route in mind. So what are we supposed to do for operational guidance now?

The IT Skeptic (http://www.itskeptic.org/node/94) is less pessimistic:

Perhaps I am a little less apocalyptic than Noel, but I feel the signs he sees [read the article] for ITIL being "peaked" are not signs of its demise so much as signs we are now hurtling down the slope of the Gartner Hype Cycle. Noel sees the wreckage of ITIL at the bottom. The Gartner model sees an eventual recovery to a calmer steady state after the hype wave, i.e. ITIL may not go away, just settle into whatever is its rightful place without all the hysteria. I have myself predicted ITIL's possible displacement by something else ...

ITIL may be replaced by something else but we are not talking about replacing alchemy with modern chemistry. The “son of ITIL” will still have to cover similar territory (managing changes, tracking patches, etc) and do it in a way that provides only a rough outline, just like ITIL. Whether we’re going to put COBIT or some ISO standard on the throne, we still need to think for ourselves. No “best practice” will turn IT management into a mechanical process. Stop looking for it.

There is no silver bullet. (I for one don’t see much purpose in complaining about the fact that there isn’t one.) There are, however, useful frameworks that we can selectively draw from. What do you think, is the debate about ITIL actually producing useful results or just a distraction from your real work?

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/201

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net