Similarity metric for risk assessment in IT change plans

The proper management of IT infrastructures is essential for organizations that aim to deliver high quality services. Given the dynamics of these infrastructures, changes become imminent. In some cases, these changes might raise failures, causing disruption to provided services and consequently affecting the business continuity. Therefore, it is strongly recommended to evaluate the risks associated with changes before their actual execution. Learning from information of past deployed changes it is possible to estimate the risks for recently planned ones. Thereby, in this paper, we propose a solution to weigh the information available from past executed plans by the similarity calculated in relation with the analyzed change plan. A prototype system has been developed in order to evaluate the effectiveness of the solution over an emulated IT infrastructure. The results obtained show that the solution is capable of capturing similarity among activities in change plans, improving the accuracy of risk assessment for IT change planning.

[1]  Charles Elkan,et al.  The Field Matching Problem: Algorithms and Applications , 1996, KDD.

[2]  Lisandro Zambenedetti Granville,et al.  A template-based solution to support knowledge reuse in IT change design , 2008, NOMS 2008 - 2008 IEEE Network Operations and Management Symposium.

[3]  Kamal Bhattacharya,et al.  Decision support for service transition management Enforce change scheduling by performing change risk and business impact analysis , 2008, NOMS 2008 - 2008 IEEE Network Operations and Management Symposium.

[4]  Pradeep Ravikumar,et al.  A Comparison of String Distance Metrics for Name-Matching Tasks , 2003, IIWeb.

[5]  Wil M. P. van der Aalst,et al.  Process Equivalence: Comparing Two Process Models Based on Observed Behavior , 2006, Business Process Management.

[6]  Wil M. P. van der Aalst,et al.  Inheritance of workflows: an approach to tackling problems related to change , 2002 .

[7]  Manfred Reichert,et al.  On Measuring Process Model Similarity Based on High-Level Change Operations , 2007, ER.

[8]  Lisandro Zambenedetti Granville,et al.  Improving IT Change Management Processes with Automated Risk Assessment , 2009, DSOM.

[9]  G. Chartrand,et al.  Graph similarity and distance in graphs , 1998 .

[10]  Remco M. Dijkman,et al.  Measuring Similarity between Business Process Models , 2008, CAiSE.

[11]  Vladimir I. Levenshtein,et al.  Binary codes capable of correcting deletions, insertions, and reversals , 1965 .

[12]  Andreas Wombacher,et al.  Evaluation of Workflow Similarity Measures in Service Discovery , 2006, Service Oriented Electronic Commerce.

[13]  Jacques Philippe Sauvé,et al.  On the Risk Exposure and Priority Determination of Changes in IT Service Management , 2007, DSOM.

[14]  Jan Verelst,et al.  When are two Workflows the Same? , 2005, CATS.

[15]  Lisandro Zambenedetti Granville,et al.  A solution to support risk analysis on IT Change Management , 2009, 2009 IFIP/IEEE International Symposium on Integrated Network Management.