Incident Management Process Flow Description August 2011 2 of 19
PROCESS NAME: Incident Management Process ORIGINAL DOCUMENT DATE: 1/4/2011 PROCESS MANAGER: Lisa Callihan LAST REVISION: 8/10/2011 APPLIES TO: Information and Technology Services ATTACHMENT(S): <N/A>
DOCUMENT PURPOSE The purpose of this document is to describe at a high level the process steps and activities of the Incident Management Process.
This document aligns directly with the Incident Management Process Flow Diagram.
Related information can be found at: Incident Management Process Flow Diagram Incident Management Process Summary ITS Operating Level Agreement Significant Incident Process Flow Diagram Significant Incident Procedures Incident Management J ob Aids
Incident Management Process Flow Description August 2011 3 of 19 Table of Contents DOCUMENT PURPOSE ...........................................................................................................................................2 INCIDENT MANAGEMENT PROCESS OVERVIEW ...........................................................................................4 1100 Incident Registration .........................................................................................................................................4 1200 Research and Assignment ..................................................................................................................................6 1300 Investigation and Diagnosis ...............................................................................................................................9 1400 Resolution ....................................................................................................................................................... 11 1500 Incident Closure .............................................................................................................................................. 13 1600 Service Request .............................................................................................................................................. 15
Incident Management Process Flow Description August 2011 4 of 19 INCIDENT MANAGEMENT PROCESS OVERVIEW 1100 Incident Registration 1200 Research and Assignment 1300 Investigation and Diagnosis 1400 Resolution 1500 Incident Closure 1600 Service Request
1100 INCIDENT REGISTRATION
1110 Record User and Determine Nature of Incident Workflow Status: Identification and Recording Record Status: New Fields: Customer, Corporate ID, Contact, Quick Action Link, and Customers Incidents Description: In the Record user and Determine Nature of Incident step, the Incident Initiator enters the user uniqname into the Customer field, hits enter. The Initiator can then hover over the field to review and validate data for accuracy and the uniqname populates in the Corporate ID field. The data comes from a People record stored within the application. The People record is populated with a load from an authoritative source such as HEODS or M-Community. If the Incident Initiator is unable to find the end user record using search capabilities then the record must be entered as Unknown by using --- in the Customer field. The Incident Initiator cannot add new people records. Errors in the Customer record, must be corrected at the authoritative source. If the phone number is different, updates can be made to the phone number by clicking the double arrows, then edit Phone Number field, but will only be attached to the specific record being worked on and will not update the overall people record for the end user.
A. New or existing Incident? At this stage the question is asked, Is this a new Incident or existing Incident? This can be determined by reviewing the Customers Incidents under the Quick Action link. This link populates after the customer name information is entered from the uniqname. The Incident Initiator will review Incidents and determine if there is an open Incident for this issue for the customer. If there is, the process moves to 1160, Update Existing Incident where the existing record is worked. If there is not an existing record, then the process moves to step 1120, Record Incident Notes and Summary. NOTE: if the customer information is Unknown then the information returned in the Customers Incident link will not be valid. 1160 Update Existing Incident Workflow Status: Identification and Recording Record Status: New Fields: Customers Incidents Link Description: In the Update Existing Incident step, the Incident Initiator highlights the existing Incident and clicks View, the existing Incident is now in Modify mode and can be updated as appropriate, then Save. The Incident Initiator clicks Close to close the existing incident, then Close again and Ok to navigate away from incident form without saving.
Incident Management Process Flow Description August 2011 5 of 19
B. Template available? At this stage the question is asked, Is a Template available? to use for this Incident. The Incident Initiator clicks in the Template field and hits enter. The Incident Template Selection box appears. Choose the Support Group, highlight the Template Name and click View to review or Select to use. Information from the Template is automatically populated into the Incident fields. Verify information is correct and Save.
1170 Use Template to fill out Incident Workflow Status: Identification and Recording Record Status: New Fields: Template Description: In the Use Template to fill out Incident step, the Incident Initiator clicks in the Template field and hits Enter, the Incident Template Selection box is displayed. The Initiator selects from the drop down to view templates for Support Groups, and highlights the desired Template, then selects View to review or Select to Use, then Close. The contents of the Template are added into the Incident fields. 1120 Record Incident Notes and Summary Workflow Status: Identification and Recording Record Status: New Fields: Notes and Summary Description: In the Record Incident Notes and Summary step, the Incident Initiator enters a description of the issue as it is currently understood. The Summary field is used for a short description and the Notes field is used for a long, more detailed description of the issue the end user is experiencing. Attachments, such as screenshots of error codes, reports, etc should be included as a Work Detail entry using the Work Info Type of General Information. Use Initiator Script if available found under the Initiator Script link, step 1180. Note: The Summary and Notes field are for issue description only and is the information sent the Assignment Notification to the Support Group when Assigned. Any notes regarding resolution investigation must be in a Work Info entry with a Work Info Type of Working Log.
1180 Use Initiator Script if available Workflow Status: Identification and Recording Record Status: New Fields: Initiator Script, Notes and Summary Description: In the Use Initiator Script if available step, the Incident Initiator clicks on the Initiator Script link, the Select Initiator Script box is displayed. Select from the Viewing Scripts for Support Group drop down menu, highlight the desired Script and the details are displayed. The Initiator adds the necessary data to the Script box and clicks Select. The Notes and Summary fields are populated with the data. 1130 Identify Configuration Item and Service Workflow Status: Identification and Recording Record Status: New
Incident Management Process Flow Description August 2011 6 of 19 Fields: Service and CI Description: In the Identify Configuration Item and Service step, the Incident Initiator selects the service for which the Incident request has been submitted by filling out (part of) the service's name and subsequently pressing the Enter key or selecting the Service in the drop down menu. Then select the configuration item (CI) that is causing the service disruption or that the requester wants to know something about. 1140 Establish Impact, Urgency and Priority Workflow Status: Identification and Recording Record Status: New Fields: Impact, Urgency and Priority Description: In the Establish Impact, Urgency and Priority step, the Incident Initiator selects a value from the Impact field to reflect how many people or widespread the issue is. The Urgency value represents how quickly the Incident needs to be resolved. Together, the Impact and Urgency fields are calculated to determine the Priority value based on weight. The definitions for Impact and Urgency values can be found in the ITS Operating Level Agreement. 1150 Classify Type, Source, and Save Workflow Status: Identification and Recording Record Status: New Fields: Service Type, Reported Source, Assign to Me, Assignee Group, Assignee and Save Description: In the Classify Type and Source step, the Incident Initiator uses the Service Type field to identify if the issue is an Incident (break/fix) by selecting the User Service Restoration value, or by selecting the User Service Request option to indicate the issue is a Service Request or question. The Infrastructure Restoration value is used when Incidents are automatically generated from a monitoring event. The Incident Initiator uses the Reported Source field to indicate the incoming source of the issue. Commonly used values include Email, Phone, Direct Input or Web (SRM). Other values, such as Voice Mail, External Escalation, Fax, Systems Management, Walk In and Other are rarely used. Use the Assign to Me Quick link to update Assignee Group and Assignee name field with Incident Initiator data, then clicks Save to save the Incident record. The Incident automatically assigns a Support Group Owner Group (either ITS Service Desk or IS Operations, depending on the Incident Type.)
C. What type of request? There are three different type of issues handled by the Incident Management Process; Service Request, Incident (Service Restoration) and Events (Infrastructure Event). After the records are initiated and classified, the Incident and Event records are handled in the same fashion. If the recorded issue is a Service Request, then the process is slightly different. At this stage of the process the Incident Initiator reviews the record type and moves to the 1600 series in the process for Service Requests and the 1200 series for Incidents.
1200 RESEARCH AND ASSIGNMENT
1210 Review Broadcast Message Workflow Status: Investigation and Diagnosis Record Status: Assigned
Incident Management Process Flow Description August 2011 7 of 19 Fields: View Broadcast Link, and Relationship Type Description: In the Review Broadcast message step, the Incident Initiator reviews any open Broadcast messages from the View Broadcast link to determine if there is a related issue already shared via Broadcast. If there is a related issue then the Incident Initiator will complete the relationship with the appropriate Relationship Type. Normally, this is Related to, or Duplicate of. The relationship will be visible on the Relationships tab of the record. 1220 Search Knowledge Workflow Status: Investigation and Diagnosis Record Status: Assigned Fields: Search Knowledge Base Link Description: It is important to perform a knowledge search and determine if there are any similar issues currently open, contained in historical data or documented in the Knowledge Base. The Search Knowledge process is a search process completed by the Incident Initiator and is done to determine if there are existing Knowledge, Problem, Known Error or Incident records that are similar in nature. Being able to locate a similar issue has the potential to expedite a resolution, or add more insight into the overall impact the issue is having. The Incident Initiator clicks the Search Knowledge Base link under Links. To modify results, the Advanced Search is used.
A. Duplicate Exists? The results of Reviewing Broadcast, 1210 and Search Knowledge, 1220 A, consist of finding a duplicate Incident record. In the question Does a Duplicate Exist? the Incident Initiator is reviewing the results of Broadcast Message and the Search Incident results to determine if a match is found. In this case, the process is specifically referencing matched Incidents even though the Search Knowledge process brings back match information from Knowledge, Problem, Known Errors and Incidents. If a match is found the process moves to step 1250. If duplicate Incident is not found the process moves to Decision B, Solution Available?
1250 Relate duplicate as child and join with parent Incident Workflow Status: Investigation and Diagnosis Record Status: Assigned Fields: Relationships Tab and Fields Description: In the Relate duplicate as a child and join with parent Incident step, the Incident Initiator clicks on the Incident link in the Search results, this will open the record in a Modify Incident window. Review the details, if the new Incident is the same as the existing Incident displayed, go back to the new Incident, click the Relationships Tab, under Request Type choose Incident click Search. Type the Incident ID from the Search results into the Incident ID field click Search. In the Relationship Type box choose, Duplicate of, Relate, Ok then Close. The Relationship will be displayed on the Relationships tab and the Child Incident will be Resolved when the Parent Incident is updated.
B. Solution Available? The results of Reviewing Broadcast (1210) and Knowledge Search (1220) include finding similar Incidents, Problems, Known Error or Knowledge documents that may provide a viable workaround. If, after reviewing the records it is felt that viable workaround is available, the Incident Initiator moves to step 1260, Use Knowledge or Relate to a Problem or Known Error. If no workaround is identified, then the process moves to Decision C, Broadcast Required?
Incident Management Process Flow Description August 2011 8 of 19
1260 Use Knowledge or Relate to Problem or Known Error Workflow Status: Investigation and Diagnosis Record Status: Assigned Fields: Search Knowledge Base Link Description: In the Use Knowledge or Relate to Problem or Known Error, the Incident Initiator has found a Knowledge Article, (KBA) Problem Investigation, (PBI) or Known Error, (PKE) that relates to the Incident. If a KBA, the Incident Initiator clicks on the KBA link, reviews the article and if appropriate, clicks Use. The Relationships Tab is updated with the Knowledge Base information with a Relationship Type of Resolved by. If a PBI or PKE, the Incident Initiator closes the Search Knowledge window, clicks on the Relationships Tab, clicks the Request Type drop down menu, chooses Known Error or Problem Investigation and clicks Search. In the window, add the Known Error or Problem ID number and click Search. In the Relationship Type drop down menu, select Resolved by and click Relate, then Close.
C. Broadcast Required? In some cases the Incident has a large enough impact to warrant further notification to support staff. In the question, Is a Broadcast Required? the Incident Initiator reviews the details of the Summary, Notes, Impact, Urgency, Work Detail and Relationships tab to understand the need to further notification. If needed the process moves to step 1230, Broadcast Incident. Otherwise, the process moves to step 1240, Assign to Support Group for Investigation and Diagnosis.
1230 Broadcast Incident Workflow Status: Investigation and Diagnosis Record Status: Assigned Fields: Broadcast Incident Quick Action, Broadcast Incident Fields Description: In the Broadcast Incident step, the Incident Initiator clicks the Broadcast Incident link under Quick Action then clicks Create to launch the New/Modify Broadcasts Form. The Incident Initiator completes the following fields: Subject, Broadcast Message, Broadcast Type, Broadcast Start Date and View Access as the default Internal. Select Yes from the Notify Field Drop Down and Select Support Group from the Support Group Field Drop Down to receive Broadcast Notification. 1240 Assign to Support Group for Investigation and Diagnosis Workflow Status: Investigation and Diagnosis Record Status: Assigned Fields: Assigned Group, Assign to Me, Owner Group, Owner Description: In the Assign to Support Group for Investigation and Diagnosis step, the Incident Initiator completes the Assignee Group field by filling out (part of) the Support Group name or selecting the Support Group in the drop down menu, which allows the record to be worked by Support Staff. It is often the case that the Incident Initiator is the Incident Assignee, in this case the Assign to Me Quick Action link should be used, but in some cases a different skill set is required and the assignment is made to a specific support group.
Incident Management Process Flow Description August 2011 9 of 19 The Incident Owner is the second assignment that is completed as part of the Assign to Support Group for Investigation and Diagnosis. The Owner Group assignment is automatically assigned by the system, which is always the ITS Service Desk or IS Operations Support Groups. Specific Support Staff information is added in the Owner field. After completing the assignments, the Incident Initiator then uses the Save button to save the record. As a result, the record status will change from New to Assigned or In Progress and a Notification to the Assigned Group is sent.
D. Incident correctly assigned? A member of the Assigned Support Group will review the Incident details and decide if the Incident is appropriate for that Support Group. If the answer is Yes, the process moves to 1300 Investigation and Diagnosis. If the answer is No, the process moves to 1270 Assign to correct Support Group or Incident Owner.
1270 Assign to Correct Support Group or Reassign to Incident Owner Workflow Status: Investigation and Diagnosis Record Status: Assigned Fields: Assigned Group Description: In the Reclassify and Assign to Incident Owner step, the Assignee knows the original assignment was either done in error or knows another group would be more appropriate and needs to be assigned to another group. In order to accomplish this step, the Assignee creates a Work Info entry describing the issue and if the correct Support Group is known, updates the Assigned Group with the correct information. If the correct Support Group is not known, the Assigned Group is moved to the Incident Initiator Support group, either the ITS Service Desk or IS Operations.
1280 Reassign Incident for Investigation and Diagnosis Workflow Status: Investigation and Diagnosis Record Status: Assigned Fields: Assigned Group Description: In the Reassign Incident for Investigation and Diagnosis step, the update is completed by the Incident Owner. In order to accomplish this step the Incident Owner creates a Work Info entry describing the issue and updates the Assigned Group field to the correct Support Group. As a result, a Notification to the updated Assigned Group is sent.
1300 INVESTIGATION AND DIAGNOSIS
1310 Perform Preliminary Diagnosis Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Assign to Me, Assignee, Status, Summary, Notes, and Work Detail Description: In the Perform Preliminary Diagnosis step, the Assignee clicks the Assign to Me link under Quick Actions to indicate they are working the Incident, then clicks Save. The Workflow Status changes to Investigation and Diagnosis, the
Incident Management Process Flow Description August 2011 10 of 19 Assignee field is updated with the Assignee name, and the Status is moved to In Progress. The Assignee then reviews the Incident Summary, Notes and any Work Detail entries. 1320 Search for Knowledge Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Search Knowledge Base Link Description: The Search Knowledge process is done to determine if existing Knowledge, Problem, Known Error or Incident records that are similar in nature are available to assist with the resolution of the incident. The Assignee clicks the Search Knowledge Base link under Links. To modify results, the Advanced Search can be used.
A. Solution or Workaround available? At this stage, the Assignee asks, Is a known Solution or Workaround available? to resolve the Incident. If yes, the process moves to 1400, Resolution otherwise the process moves to 1330, Gather Facts and Investigate. 1330 Gather Facts and Investigate Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Work Detail, Work Info Type, Source, Summary, Notes, Add Attachments, and View Access. Description: In the Gather Facts and Investigate step, the Assignee is troubleshooting and researching a solution for the Incident. Any work completed during this step is documented in Work Detail. The Assignee clicks Create to record a Work Info entry. Selects the Work Info Type and Source from the Drop Down Menus, includes a Work Info Summary, Notes, Adds Attachments and chooses View Access as Internal or External, clicks Save. This information will be displayed in the Work Detail Box.
B. Assistance Needed? At this stage the Assignee asks, Is additional assistance needed to resolve the Incident? If Yes, the Assignee works with other support staff to gather facts and investigate to resolve the Incident. If the Incident has a Priority Value of Critical, the process moves to Decision C, Critical Incident? If specific tasks are necessary, the Assignee can use Optional steps 1340 and 1350 to assign tasks. If No, the process moves to Decision D, Solution or Workaround Available?
1340 Generate Tasks Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Tasks Description: In the Generate Tasks step, the Assignee assigns Tasks to other Support Groups while maintaining assignment of the Incident. Click Tasks under Links, under Request Type select Ad hoc and click Relate. In the Task box, add Name, Summary and complete Task Assignment and Dates/Times under the Assignment/Dates tab. Save, then Close.
Incident Management Process Flow Description August 2011 11 of 19
1350 Close Task Activities Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Tasks Description: In the Close Tasks step, the Assignee clicks on Tasks and highlights the desired Task and clicks View. Work task through process and once complete, update Status to Closed.
C. Critical Incident? At this stage the Assignee asks, Does the Incident Priority Value =Critical? If Yes, the process moves to 1700, Initiate Significant Incident Process. If No, the process moves to Decision E, Reassignment Possible?
D. Solution or Workaround Available? At this stage the Assignee asks, Is a Solution or Workaround Available? If Yes, the process moves to 1400, Resolution, if No, the process moves to Decision E, Reassignment Possible?
E. Reassignment possible? At this stage the Assignee asks, Is Reassignment of the Incident possible? If the Assignee know the correct Support Group or Individual to resolve the Incident, the process moves to 1240, Assign Incident for resolution. If the answer is No, the process moves to 1360, Request Problem Investigation.
1360 Request Problem Investigation Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Create Problem, Relationships Tab Description: In the Request Problem Investigation step, the Assignee clicks on the Create Problem link under Create Other Requests (reference Problem documentation for details in creating a Problem Investigation) Save Problem Investigation, Close. The Problem Investigation is listed under the Relationships Tab.
1400 RESOLUTION
1410 Determine How to Resolve Incident Workflow Status: Investigation and Diagnosis Record Status: In Progress to Resolution Fields: Work Detail, Resolution
Incident Management Process Flow Description August 2011 12 of 19 Description: In the Determine How to Resolve Incident step, the Assignee determines what needs to be done to Resolve the incident and the process moves to Decision A.
A. Change Required? At this stage the Assignee asks, Does the Resolution require a Change Request? If Yes, the process moves to 1450 Create Request for Change. If No, the process moves to Decision B, Root Cause Analysis Required?
B. Root Cause Analysis required?
At this stage the Assignee asks, Is Root Cause Analysis of the Incident needed? If Yes, the process moves to 1460, Request Problem Investigation. If No, the process moves to 1420, Resolve Incident
1420 Resolve Incident Workflow Status: Resolution and Recovery Record Status: Resolved Fields: Resolution Categorization Tier 1, Tier 2, Tier 3, Resolution, Status Reason, Service, CI, Work Info Type, Summary, Notes, View Access Description: In the Resolve Incident step, the Assignee records the Resolution to the Incident. The Assignee clicks Resolve, then on the Modify Incident form, the Assignee selects Resolution Categorization Tier 1, Tier 2 and Tier 3 from the drop down menus, records the Resolution Details in the Resolution Field and selects a Status Reason. The Assignee adds a Work Info entry with the Work Info Type, Resolution Communications so the end user can reference the solution using SRM and Save. The Incident moves from the Resolution and Recovery Status to Incident Closure and the Status is changed to Resolved. A Resolution Notification is sent to the Incident Owner. Where appropriate, the Assignee communicates the Resolution to the end user in step 1430, otherwise the Incident Owner communicates the Resolution to the end user in step 1430.
1430 Communicate and Execute Solution or Workaround Workflow Status: Incident Closure Record Status: Resolved Fields: Resolution Details, Work Detail Description: In the Communicate and Execute Solution or Workaround step, the Assignee or Incident Owner communicates the solution or workaround to the end user, this communication can be done verbally or electronically.
C. User Immediately Available? At this stage the Assignee or Incident Owners asks, Is the User Immediately Available? to confirm the Resolution works. If Yes, the process moves to Decision D, if NO, the process moves to 1500 Incident Closure.
D. Resolution Confirmed?
Incident Management Process Flow Description August 2011 13 of 19 At this stage the Assignee or Incident Owners asks the end user if the Solution or Workaround resolves the Incident. If Yes, the process moves to 1500, Incident Closure. If No, the process moves to 1240, Assign Incident for Resolution. The Workflow Status returns to Investigation and Diagnosis and the Record Status returns to Assigned.
1450 Create Request for Change Workflow Status: Incident Closure Record Status: Resolved Fields: Create Change, Relationships Tab Description: In the Create Request for Change step, the Assignee clicks on the Create Change link under Create Other Requests (reference Change documentation for details in creating a Change Request) Save Change Request, Close. The Change Request is listed under the Relationships Tab. 1460 Create Problem Investigation Workflow Status: Investigation and Diagnosis Record Status: Resolved Fields: Create Problem, Relationships Tab Description: In the Request Problem Investigation step, the Assignee clicks on the Create Problem link under Create Other Requests (reference Problem documentation for details in creating a Problem Investigation) Save Problem Investigation, Close. The Problem Investigation is listed under the Relationships Tab. 1470 Create Knowledge Management document if missing Workflow Status: Incident Closure Record Status: Resolved Fields: Create Knowledge Description: In the Create Knowledge Management document if missing step, the Assignee or Incident Owner add the Incident resolution to the Knowledge Base. The Assignee or Incident Owner clicks Create Knowledge under Links and completes the Create Knowledge form (reference Knowledge Management documentation for details in creating a Knowledge record.)
1500 INCIDENT CLOSURE
1510 Validate and Update Work Detail Workflow Status: Incident Closure Record Status: Resolved
Incident Management Process Flow Description August 2011 14 of 19 Fields: Work Detail Description: In the Validate Work Info step, the Incident Owner verifies the Work Info is correct under Work Detail. If Yes, the process moves to 1530, Validate Categorization. If No, the Incident Owner updates the Work Detail.
1520 Validate and Update Categorization Workflow Status: Incident Closure Record Status: Resolved Fields: Categorizations, Resolution Categorization Tier 1, Tier 2, Tier 3, Resolution Product Categorization Description: In the Validate Categorization step, the Incident Owner verifies the Resolution Categorization is correct using the Categorizations Link under Links. If No, the Incident Owner updates the Categorization fields. If Yes, the process moves to Decision A, Broadcast exists?
A. Broadcast Exists? At this stage the Incident Owner asks, Does a Broadcast Message exist? for this Incident. If Yes, the process moves to 1530, Update Broadcast Message. If No, the process moves to Decision B, Did User confirm Resolution?
1530 Update Broadcast Message Workflow Status: Incident Closure Record Status: Resolved Fields: View Broadcasts Description: In the Update Broadcast Message step, the Incident Owner highlights the Broadcast Message and clicks View. On the View Broadcast Form, the Incident Owner clicks Modify, updates the Broadcast Message and Broadcast End Date, then Save, Close.
B. Did User confirm Resolution? At this stage the Incident Owner asks, Did User confirm Resolution? If the User confirmed the resolution was satisfactory and no further work is needed for the Incident, the process moves to 1550, Close Incident. If the user has not confirmed the resolution was satisfactory, the process moves to 1540, Resolved Incident, Auto Close in 8 days.
1540 Resolved Incident, Auto Close in 8 Days Workflow Status: Incident Closure Record Status: Resolved Fields: Status
Incident Management Process Flow Description August 2011 15 of 19 Description: In the Resolved Incident, Auto Close in 8 Days step, the Incident Owner leaves the Incident in Resolved Status. Using this status gives the User time to contact the ITS Service Desk to report the Incident Resolution was not satisfactory. If the User does not respond, the Incident will automatically close in 8 days.
1550 Close Incident Workflow Status: Incident Closure Record Status: Closed Fields: Status Description: In the Close Incident step, the Incident Owner can either click the Status field drop down menu and choose Closed or click the drop down menu from Incident Closure and choose Close, then Save to Close the Incident record. Once updated to Closed Status, no additional changes can be made to the Incident record.
1600 SERVICE REQUEST
A. Request for Information or Enhancement? At this stage, the Incident Owner determines if the User Service Request is a request for information or an Enhancement Request. If the User Service Request is a request for information, the process moves to 1610, Search Knowledge. If the User Service Request is an Enhancement Request, the process moves to 1640, Assign to Support Group for Answer.
1610 Search Knowledge Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Search Knowledge Base link Description: It is important to perform a knowledge search and determine if there are any similar issues currently open, contained in historical data or documented in the Knowledge Base. The Search Knowledge process is a search process completed by the Incident Initiator and is done to determine if there are existing Knowledge, Problem, Known Error or Incident records that are similar in nature. Being able to locate a similar issue has the potential to expedite a resolution, or add more insight into the overall impact the issue is having. The Incident Initiator clicks the Search Knowledge Base link under Links. To modify results, the Advanced Search can be used.
1620 Research Information Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Work Detail Description: In the Research Information, the Incident Initiator is researching an answer for the user question. Any work completed during this step is documented in Work Detail. The Assignee clicks Create to record a Work Info entry. Selects
Incident Management Process Flow Description August 2011 16 of 19 the Work Info Type and Source from the Drop Down Menus, includes a Work Info Summary, Notes, Adds Attachments and chooses View Access as Internal or External, clicks Save. This information will be displayed in the Work Detail Box.
B. Answer Available? At this stage the Incident Owner determines if an Answer is available for the Requested information. If Yes, the process moves to 1400, Resolution. If No, the process moves to 1630, Assign to Support Group for Answer
1630 Assign to Support Group for Answer Workflow Status: Investigation and Diagnosis Record Status: Assigned Fields: Assigned Group, Owner Group, Owner Description: In the Assign to Support Group for Answer step, the Incident Initiator completes the Assignee Group field by filling out (part of) the Support Group name or selecting the Support Group in the drop down menu, which allows the record to be worked by support staff. The Incident Owner is the second assignment that is completed as part of the Assign to Support Group for Answer step. The Owner Group assignment is automatically assigned by the system, which is always the ITS Service Desk or ITS Operations Support Groups. Specific Support Staff information is added in the Owner field. After completing the assignments, the Incident Initiator then uses the Save button to save the record. As a result, a Notification to the Assigned Group is sent.
1640 Review and Evaluate Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Assign to Me, Incident Notes, Summary, and Work Detail Description: In the Review and Evaluate step, the Assignee assigns the Service Request to themselves using the Assign to Me button, and moves the Service Request to In Progress. The Assignee reviews and evaluates the enhancement request details in the Incident Notes, Summary and Work Details recommended by the User.
C. Valid for Change Request? At this stage the Assignee asks, Is the user request valid for a Change Request? If the Enhancement Request is a valid request, the process moves to 1650, Create Request for Change. If the Enhancement Request is not valid and will not be considered further, the process moves to 1660 Update Work Detail.
1650 Create Request for Change Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Create Change Link
Incident Management Process Flow Description August 2011 17 of 19 Description: In the Create Request for Change step, the Assignee clicks on the Create Change link under Create Other Requests (reference Change documentation for details in creating a Change Request) Save Change Request, Close. The Change Request is listed under the Relationships Tab, the process moves through Change Management (see Change Management documentation) to 1670, Update Work Detail.,
1660 Update Work Detail Workflow Status: Investigation and Diagnosis Record Status: In Progess Fields: Work Detail Description: In the Update Work Detail step, the Incident Owner or Assignee adds information to the Work Detail. Click Create to record a Work Info entry. Select the Work Info Type and Source from the Drop Down Menus, include a Work Info Summary, Notes, Add Attachments and choose View Access as Internal or External, click Save. This information will be displayed in the Work Detail Box, the process then moves to 1400, Resolution.
1700 SIGNIFICANT INCIDENT (REFER TO RUNNING A SIGNIFICANT INCIDENT STEP BY STEP GUIDE) 1700 Initiate Significant Incident Process, contact ITS Service Center or IS Data Center Operations Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Work Info Description: The Incident Assignee contacts the Service Center (or Operations after hours) to initiate the process as soon as it is suspected that a significant incident is occurring. 1710 Notify Incident Manager Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Work Info Description: The Incident Manager (or backup SPOCs ) is contacted based on the Callback Listing. 1720 Begin Significant Incident Tracking Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Work Info, Broadcast
Description: Establish the authoritative or parent incident record for tracking purposes and Broadcast. Remind staff working the issue that all findings and effort must be recorded in the incident record to ensure shared status and knowledge.
Incident Management Process Flow Description August 2011 18 of 19 1730 Coordinate Initial Stand Up Meeting Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Work Info
Description: Coordinate an initial stand-up meeting. This meeting should be conducted within the first 30 minutes of when the significant incident was identified.
1740 Build Working Team Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Work Info Description: Team should include a list of technical and product support personnel as identified by the incident assignee. The Incident Manager will expand the list to ensure all technical areas are represented as well as related process managers and ITS Leadership. 1750 Assist Resolution Efforts as Directed Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Work Info Description: Cross ITS Support Groups will assist with resolution efforts as needed. 1760 ITS Leadership Communication Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Work Info
Description: Send email notification to ITS AVP Lead Team (its.extended.lead.team@umich.edu) regarding the issue, see template and examples.
1770 Ongoing Meeting and Communication Coordination Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Work Info Description: The purpose of ongoing stand-up meetings is to ensure appropriate progress is being made and troubleshooting options are discussed.
Incident Management Process Flow Description August 2011 19 of 19 1780 Ongoing Significant Incident Recording Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Work Info
Description: Ensure all ITSM incidents are related appropriately.
1790 Work Incident Workflow Status: Investigation and Diagnosis Record Status: In Progress Fields: Work Info