Change Management - IT Services

advertisement
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Change Management
IT Initiator Training
http://www.stanford.edu/services/changemgt
March 6, 2006
Presented by John Klemm, Bill Heiser &
Bill Bauriedel
© 2006 IT Services Stanford University
Page 1
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Desired Outcomes for this Training Session
By the end of this training session, you will:
•
Understand the basic concepts, definitions, and policies related to the new
Change Management Process;
•
Understand the scope and expectations related to the IT Initiator role; and
•
Be prepared to initiate change requests via the web or via email.
© 2006 IT Services Stanford University
Page 2
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Change Management Process
Introduction to Basic Concepts
•
The goal of Change Management is to ensure that standardized methods and
techniques are used for efficient and prompt handling of IT changes to minimize
the likelihood of disruption, unauthorized alterations, and errors.
•
The Change Management process focuses on entering previously authorized
change/implementation plans as a record into a system; obtaining approval for
those changes; scheduling, implementing, and notifying key groups/staff/clients
about those changes; and afterward reviewing changes.
© 2006 IT Services Stanford University
Page 3
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
What’s new or different about the new CM system?
•
•
•
Modern web interface
Allows interaction via email (entering change notice, approving, closing)
Process has been formalized
– Lead-times of 3-10 days required for some categories of changes
– New Change Advisory Board (tied into weekly Operations Review)
– Buy-in from CM Steering Group and Executive Directors
•
•
•
New application, relatively new vendor (Infra)
Complex application designed for a larger “change management process”
Still some issues: Missing features, login idiosyncrasies (mostly 1st time only),
unusual interface
© 2006 IT Services Stanford University
Page 4
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Change Management Process
Introduction to the IT Initiator Role
© 2006 IT Services Stanford University
•
The IT Initiator is the person who
enters a Change Request into the
Change Management System
•
The IT Initiator submits and owns
the Change Request
Page 5
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Change Management Process
High-Level Process Flow
Change Planning
Process
(includes approval from
governance groups and
business owners as well
as design, development,
testing, etc.)
Approval
© 2006 IT Services Stanford University
(optional)
Emergency / FoO
Implementation
Implementation
and Review
Initiate Change
Request (CR)
See Process
Document for
detailed process
flows and detailed
procedures
Page 6
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Change Management Process
Definitions: Change Management Terms
Change Request (CR)
The request to implement an IT change that includes impact information,
scheduling information, and Domain / Secondary Domain information
Change Categories
determined by the IT
Initiator
•
•
•
•
•
•
Major Change
Significant Change
Minor Change (General)
Minor Change (“Fixes of Opportunity / FOO”)
Standard Pre-Approved Change (SPA)
Special Category: Emergency Change
Change Priorities
determined by the IT
Initiator
•
•
•
Emergency (service is down)
Urgent (service is at risk)
Routine (service is not down; “business as usual” change request)
Note that Routine is the standard default priority.
In the new Change Management System,
Change Request Category/Priority Combinations are called STENCILS
© 2006 IT Services Stanford University
Page 7
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Change Management Process
Policy: Change Request Approvals and Lead-Times
Change Request STENCIL
(Priority/Category)
Approval Required
Recommended Lead-time
Emergency
Retroactive approval (acknowledgment) required
No minimum lead-time is required
Routine – Minor
Domain / Secondary Domain authorization
Three (3) business days
(or as required by an existing SLA)
Routine – Minor FOO (“Fix of
Opportunity”)
Retroactive Domain / Secondary Domain
authorizations (acknowledgement) required
No minimum lead-time is required
Routine – Significant
CAB Authorization
Domain / Secondary Domain authorization
Five (5) business days
(or as required by an existing SLA)
Routine – Major
CAB MCR Authorization
Domain / Secondary Domain authorization
Ten (10) business days
(or as required by an existing SLA)
Urgent – Minor
Retroactive approval (acknowledgment) required
No minimum lead-time is required
Urgent – Minor FOO
Retroactive approval (acknowledgment) required
No minimum lead-time is required
Urgent – Significant
Retroactive approval (acknowledgment) required
No minimum lead-time is required
Urgent – Major
Retroactive approval (acknowledgment) required
No minimum lead-time is required
Standard Pre-Approved Change
(SPA)
Pre-approved (SPA change requests have been
previously reviewed and approved)
No minimum lead-time is required
because no review is needed
© 2006 IT Services Stanford University
Page 8
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Change Management Process
Definitions: Change Management Roles
Change Coordinator
•
•
•
•
Reviews and coordinates changes
Creates Standard Pre-Approved (SPA) Change Request Stencils
Creates compliance reports and performs ITS-driven audit reviews
Leads weekly CAB meetings; calls meetings of the CAB MCR
Change Advisory Board (CAB)
•
Meets weekly to review and gives final authorization to the Forward
Schedule of Changes (FSC), which is the consolidated calendar of all
authorized changes
Reviews Standard Pre-Approved (SPA) requests and Significant
Change Requests
Conduct Post-Implementation Reviews (PIRs) of Significant and Major
Changes, or any change that resulted in a service outage
•
•
CAB: Major Change Review
Committee (CAB MCR)
•
Subset of the CAB that meets as needed to review and give final
authorization to Major Changes
Stakeholder(s)
•
Person (or persons) interested in changes to specific items; Stanford is
using Mailman distribution lists (lists.stanford.edu) to manage
notification mailings to stakeholders
© 2006 IT Services Stanford University
Page 9
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Change Management Process
Definitions: Change Management Roles
Continued from previous page
Domain / Secondary Domain
Authorizers (Approvers)
•
Authorize (approve) Minor, Significant, and Major Changes in
particular domains
EQUIVALENT TERM IN THE CM SYSTEM:
Approver
IT Change Initiator
•
The person (or group of people)
responsible for approving Change
Requests.
Uses the Change Management System to initiate a Change Request
EQUIVALENT TERM IN THE CM SYSTEM:
Officer or
Request
Manager
Customer
© 2006 IT Services Stanford University
•
The person who submits and owns
a Change Request. [an Infra term]
Business User for whom the Change Request is being submitted
Page 10
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Scope of the Change Management Process
All production services, as
well as all services with
agreements that
specifically state service
levels and environment
up-time (e.g., SLAs), are
subject to the Change
Management process and
policies.
Change Management
Software
Application
Server
Hardware
Operating System
Client
See the OECM Process Document for a full list of the types of
changes covered, including an expanded version of this diagram.
© 2006 IT Services Stanford University
Page 11
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Additional Detail:
Configuration Changes Covered by the CM Process
Any configuration change that can impact an existing SLA and/or is identified by a
workgroup as having a significant negative impact on a service and affecting multiple
users should be managed through the Change Management process.
A list of typical changes normally handled by each workgroup that require a change
notice appears as Appendix B “Scope of the Change Management Process”
including a list of configuration changes that do or do not require change notices.
© 2006 IT Services Stanford University
Page 12
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Demo: Submitting a Change Request (Web)
Production Environment URL: http://cmr.stanford.edu
(https://InfraAppProd.stanford.edu)
Refer to QuickGuide for IT Initiators
© 2006 IT Services Stanford University
Page 13
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Demo: Checking Status of a Change Request (Web)
© 2006 IT Services Stanford University
Page 14
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Demo Result: Request Details Screen (Web)
© 2006 IT Services Stanford University
Page 15
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Reference: Template for Submitting an Email Change Request
REQUIRED FIELDS:
Note: do not use square brackets except as specified below
[Stencil: xxxxxxx]
[Primary Domain: xxxxxxx]
[Change Title: xxxxxxx]
[Class: xxxxxxx]
e.g. Routine - Minor
e.g. Student & HR Systems
up to 80 characters
e.g. App-Student/HR - must be a valid
Class
[Type: xxxxxxx]
e.g. HRSA-Technical - must be a valid
Type
[Item: xxxxxxx]
e.g. HRSA-Technical-CI - must be a
valid Item
[Description: xxxxxxx]
can span multiple lines
[Schedule Date/Time: mm/dd/yyyy hh:mm:ss]
the hh:mm:ss is optional.
the time will be 00:00:00.
the time may be left out.
becomes 17:00:00 and hh:mm
becomes 17:30:00.
[Source: Email]
© 2006 IT Services Stanford University
If left out,
Any part of
Eg. hh=17
= 17:30
required for email submissions
ADDRESS: changemanagement@infraap
pprod.stanford.edu
SUBJECT LINE:
[createrequest]
REQUIRED FIELDS:
[Stencil: ]
[Primary Domain: ]
[Change Title: ]
[Class: ]
[Type: ]
[Item:]
[Description: ]
[Schedule Date/Time:]
[Source: Email]
Page 16
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Reference: Template for Submitting an Email Change Request
OPTIONAL FIELDS:
[Secondary Domains: xxxxxxx]
separated
[Secondary Item:xxxx,yyyy]
[Activity: xxxxxxx]
e.g. Windows Systems, Unix Systems (each additional domain
with a comma. Each must be a valid domain name.)
specify here if the items aren't shown in the pick list
e.g. reboot or additional capacity or application upgrade,
etc. - must be a valid activity
[Outage Start Date/Time: mm/dd/yyyy hh:mm:ss]
[Outage End Date/Time: mm/dd/yyyy hh:mm:ss]
[Install Plan: xxxxxxx]
Install plan goes here
[Backout Plan: xxxxxxx]
Backout plan goes here
[Impact Analysis: xxxxxxx]
Impact Analysis goes here
[Notes: xxxxxxx]
Notes go here
[Tested: xxx]
Yes or No
[Maintenance Window: xxx]
Yes or No
[Standard Pre-Approved Change Template: xxx] Yes or No
[Cross Reference: xxxxxx]
enter CPT number, otherwise leave out this line. It is for
system use only
[Secure Information: xxxxxx]
secure information goes here
[Business Requestor: xxxxxx]
name must be a business user
defined in the system
[Business Requestor (If not in CMDB): xxxxxxx] any name can be
entered here
[Requestor's Organization: xxxxxxx]
must be a valid organization as
specified in the system
© 2006 IT Services Stanford University
Page 17
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Demo: Submitting a Change Request (Email)
© 2006 IT Services Stanford University
Page 18
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Should I initiate a Change Request via the Web App or Email?
Web Application
• Easy to use
• Choices in menus
• No worries about typing labels
• Instant feedback
• Consider for infrequent or
variable (different types of
entries) use
© 2006 IT Services Stanford University
Email
• Templates can be made
• Notes can be included
• No login to web app required
• Resubmit after correction (on
initial entry failure, or on approver
rejection)
• Your sending email address
must match your address in Infra
database
• Consider for frequent or
repeated (same type of entries)
use
Page 19
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
What Happens After You Submit the Change Request?
•
(Specific details depend on the Stencil you choose)
•
•
Approvers receive email asking them to approve (via email or web app)
Initiator receives a confirmation email
•
Then, if/when all approvers approve, you receive email notification that the task of
implementing the change and closing the change request record are yours to do
If any approver disapproves, you receive email notification that the task of closing the
change request record is yours to do
•
•
•
•
You cannot change the change request record after submitting it. You cannot cancel it
either. Solution: An approver can reject it, and you can submit a new change request.
You can check the status/history of the change by going into the web application, finding
the Request, going to the detail page (yellow arrow), and looking at the history section.
Instructions for closing a change request record appear in the email you’ll receive - you can
close it via email.
© 2006 IT Services Stanford University
Page 20
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
General Usage Tips for the New Change Management System
•
Change Request = (Initiation Task + Notification Task (automatic) + Approval Task +
Implementation Task)
IMPORTANT NOTE: tasks = requests
/
•
Clicking
for any Task or Approval means that you are actioning that Task or
Approval and that you now own it - to “disown” it without taking action (if you need to),
choose “forward” and send it back to your group
•
When entering the date and time for a change request, specify time first, then select the
date (if you select the date first, then the box closes having selected the date with the current
time); note that date and time must be formatted in 24-hour/military time
Avoid using the browser BACK button; instead use the application BACK button (if you
use the browser BACK button, you will likely see undesirable results)
•
© 2006 IT Services Stanford University
Page 21
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
General Usage Tips, continued
•
BOLD fields on the “Request Entry” and “New Task” web pages are required; all other fields
are optional; the email template on (Page#) also specifies which fields are required as
opposed to optional
•
Two types of notification emails:
a. Users can subscribe to a Mailman list to receive “all” notifications about changes
affecting a given domain
b. Users can subscribe to another Mailman list to receive “limited” notifications about
changes for a given domain (i.e., user would receive notifications of Significant, Major,
and Emergency changes only)
•
Particularly when submitting email change requests, [square brackets], syntax, and
spelling are critical; pulldown choices must be entered exactly as they appear in the web
pulldown menu(s)
•
IMPORTANT NOTE: It is not possible for a user to make changes or corrections (e.g., of
spelling, to add another item) to a change request once it has been submitted; for critical
correction, the Change Coordinator may make edits
© 2006 IT Services Stanford University
Page 22
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
General Usage Tips, continued
•
•
Multiple concurrent sessions are not allowed: Due to the way the
application’s licensing mechanism works, a single user can only have a single
instance of the application in use at any given time. This includes logins via the
web interface and via email submissions. This means if you are logged in to the
web interface, and submit a request (or approval) via email, your web session
will be logged out.
Errors during request entry require re-selection of file attachment (if any)
If you select a file attachment while submitting a Change Request, and
encounter an error (e.g. an incorrectly specified Schedule Date/Time), the file
attachment selection is cleared. In this case you need to re-select the
attachment. This is by design due to security concerns in the web application.
© 2006 IT Services Stanford University
Page 23
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Some Frequently Asked Questions (FAQ)
What happens when there is a scheduling conflict?
The Change Coordinator or (more likely) the Change Advisory Board (CAB) will work
with the parties requesting the conflicting date/time to resolve the conflict.
Essentially this is a negotiation.
How do you delegate approvals during vacations, when someone’s out sick,
etc.?
There should be multiple approvers per domain. It is their responsibility to hand off
approval responsibility if one is out.
How do you pick the right stencil?
Use the Process QuickGuide to guide your decision-making.
Other Questions?
© 2006 IT Services Stanford University
Page 24
OPERATIONAL EXCELLENCE – CHANGE MANAGEMENT
IT Initiator Training
Key Links
Web Site (w/ link to web application): http://www.stanford.edu/services/changemgt
Web Application: http://cmr.stanford.edu (for http://InfraAppProd.stanford.edu)
Email: oe-cm-project@lists.stanford.edu
Process Document (available at Web Site above):
https://www.stanford.edu/services/changemgt/documents/OECM_Process_Document_v
2.7.pdf
HelpSU (for issues reporting and help): http://remedy-prod.stanford.edu/cgibin/helpsu2?pcat=cms (Category=Administrative Applications, Type=Change Management,
Item=*General)
Project Web page: http://www.stanford.edu/dept/itss/projects/OE/changemanagement.html
© 2006 IT Services Stanford University
Page 25
Download