DS9 Manage the Configuration
Management of the process of Manage the configuration that satisfies the business requirement for IT of optimising the IT
infrastructure, resources and capabilities, and accounting for IT assets is:
0 Non-existent when
Management does not have an appreciation of the benefits of having a process in place that is capable of reporting on and managing
the IT infrastructure, for either hardware or software configurations.
1 Initial/Ad Hoc when
The need for configuration management is recognised. Basic configuration management tasks, such as maintaining inventories of
hardware and software, are performed on an individual basis. No standard practices are defined.
2 Repeatable but Intuitive when
Management is aware of the need for controlling the IT configuration and understands the benefits of accurate and complete
configuration information, but there is implicit reliance on technical personnel knowledge and expertise. Configuration management
tools are being employed to a certain degree, but differ amongst platforms. Moreover, no standard working practices are defined.
Configuration data content is limited and not used by interrelated processes, such as change management and problem management.
3 Defined when
The procedures and working practices are documented, standardised and communicated, but training and application of the
standards is up to the individual. In addition, similar configuration management tools are being implemented across platforms.
Deviations from procedures are unlikely to be detected, and physical verifications are performed inconsistently. Some automation
occurs to assist in tracking equipment and software changes. Configuration data are being used by interrelated processes.
4 Managed and Measurable when
The need to manage the configuration is recognised at all levels of the organisation, and good practices continue to evolve.
Procedures and standards are communicated and incorporated into training, and deviations are monitored, tracked and reported.
Automated tools, such as push technology, are utilised to enforce standards and improve stability. Configuration management
systems do cover most of the IT assets and allow for proper release management and distribution control. Exception analyses, as
well as physical verifications, are consistently applied and their root causes are investigated.
5 Optimised when
All IT assets are managed within a central configuration management system that contains all necessary information about
components, their interrelationships and events. The configuration data are aligned with vendor catalogues. There is full integration
of interrelated processes, and they use and update configuration data in an automated fashion. Baseline audit reports provide
essential hardware and software data for repair, service, warranty, upgrade and technical assessments of each individual unit. Rules
for limiting installation of unauthorised software are enforced. Management forecasts repairs and upgrades from analysis reports,
providing scheduled upgrades and technology refreshment capabilities. Asset tracking and monitoring of individual IT assets protect
them and prevent theft, misuse and abuse