Capacity management is focused on strategic capacity, including capacity of personnel (e.g., human resources, staffing and training), system capacity, and component (or tactical) capacity.
IT service continuity management
IT service continuity management (ITSCM) covers the processes by which plans are put in place and managed to ensure that IT services can recover and continue even after a serious incident occurs. It is not just about reactive measures, but also about proactive measures – reducing the risk of a disaster in the first instance.
ITSCM is regarded by the application owners as the recovery of the IT infrastructure used to deliver IT services, but as of 2009 many businesses practice the much further-reaching process of business continuity planning (BCP), to ensure that the whole end-to-end business process can continue should a serious incident occur (at primary support level).
ITSCM involves the following basic steps:
• prioritising the activities to be recovered by conducting a business impact analysis (BIA)
• performing a risk assessment (aka risk analysis) for each of the IT services to identify the assets, threats, vulnerabilities and countermeasures for each service.
• evaluating the options for recovery
• producing the contingency plan
• testing, reviewing, and revising the plan on a regular basis.
Information security management system
Main article: ITIL security management
The ITIL-process Security Management describes the structured fitting of information security in the management organization. ITIL security management is based on the code of practice for information security management system (ISMS) now known as ISO/IEC 27002.
A basic goal of security management is to ensure adequate information security. The primary goal of information security, in turn, is to protect information assets against risks, and thus to maintain their value to the organization. This is commonly expressed in terms of ensuring their confidentiality, integrity and availability, along with related properties or goals such as authenticity, accountability, non-repudiation and reliability.