A major incident occurs, and the IT team restores service by implementing a workaround. They then create a problem record to investigate the root cause. Which practice are they following?
Trap 1: Service desk and incident management
The Service Desk functions as the single point of contact for users, logging incidents and facilitating their initial assessment and escalation, but it is not a practice that directly restores service functionality. While Incident Management is indeed crucial for restoring service, the Service Desk's role is primarily communication and coordination, not the technical restoration itself. Therefore, this option incorrectly identifies the Service Desk as a practice responsible for actively restoring service during a major incident.
Trap 2: Problem management and change management
Problem Management is focused on identifying the root causes of incidents to prevent their recurrence, which is a long-term, post-restoration activity, not the immediate action to restore service operation. Change Management, conversely, is the practice of ensuring that changes to services and infrastructure are implemented in a controlled manner, typically for improvements or permanent fixes. Neither practice is primarily responsible for the initial, urgent restoration of service after a major incident has occurred.
Trap 3: Change management and release management
Change Management is the practice of controlling the lifecycle of all changes, enabling beneficial changes to be made with minimal disruption, and is typically a controlled, planned process, not an immediate incident response. Release Management focuses on making new and changed services and features available for use, coordinating their deployment into live environments. Neither practice is directly responsible for the urgent, reactive restoration of an existing service that has failed due to an incident, as their roles are more about planned service evolution.
- A
Service desk and incident management
Why it fails: The Service Desk functions as the single point of contact for users, logging incidents and facilitating their initial assessment and escalation, but it is not a practice that directly restores service functionality. While Incident Management is indeed crucial for restoring service, the Service Desk's role is primarily communication and coordination, not the technical restoration itself. Therefore, this option incorrectly identifies the Service Desk as a practice responsible for actively restoring service during a major incident.
- B
Problem management and change management
Why it fails: Problem Management is focused on identifying the root causes of incidents to prevent their recurrence, which is a long-term, post-restoration activity, not the immediate action to restore service operation. Change Management, conversely, is the practice of ensuring that changes to services and infrastructure are implemented in a controlled manner, typically for improvements or permanent fixes. Neither practice is primarily responsible for the initial, urgent restoration of service after a major incident has occurred.
- C
Incident management and problem management
Incident Management is the primary practice focused on restoring normal service operation as quickly as possible, often through temporary workarounds, to minimize business impact during a major incident. Concurrently or subsequently, Problem Management investigates the underlying causes of the incident to prevent its recurrence, ensuring long-term stability and service improvement. Together, these practices provide both immediate resolution and lasting prevention, which is critical for effectively managing major incidents.
- D
Change management and release management
Why it fails: Change Management is the practice of controlling the lifecycle of all changes, enabling beneficial changes to be made with minimal disruption, and is typically a controlled, planned process, not an immediate incident response. Release Management focuses on making new and changed services and features available for use, coordinating their deployment into live environments. Neither practice is directly responsible for the urgent, reactive restoration of an existing service that has failed due to an incident, as their roles are more about planned service evolution.