Latest Articles

Quality Is Not an Accident — A Guide to Quality Assurance and Improvement The Quality Imperative Standard 12.1 requires the CAE to develop and conduct internal assessments of the internal audit function's conformance with the Global Internal Audit Standards and progress towards performance objectives . Standard 12.2 requires the CAE to develop objectives to evaluate the internal audit function's performance . Standard 12.3 requires the CAE to establish and implement methodologies for engagement supervision, quality assurance, and the development of competencies . The Quality Assurance Framework 1. Internal Quality Assessments Post-Engagement Reviews: Review of workpapers for compliance with policies and procedures  Evaluation of adherence to methodologies Identification of improvement opportunities Annual Self-Assessment: Annual internal self-assessment of compliance with professional standards  Review of performance against objectives Identification of improvement areas 2. External Quality Assessments Periodic External Validation: Periodic self-assessment with independent external validation of compliance with professional standards (every 5 years)  External perspective on quality Benchmarking against peers 3. Performance Measurement Standard 12.2 requires the CAE to develop objectives to evaluate the internal audit function's performance . Key performance indicators: Audit plan completion rate Stakeholder satisfaction Finding implementation rate Audit report timeliness Budget adherence Quality Assessment Example The Rochester Institute of Technology's IACA provides examples of conformance : IACA has implemented a comprehensive quality assurance program which consists of: Internal post-engagement review of workpapers for compliance with IACA policies and procedures Annual internal self-assessment of compliance with professional standards Periodic self-assessment with independent external validation of compliance with professional standards (every 5 years) Methodologies and Quality The CAE must establish methodologies to guide the internal audit function in a systematic and disciplined manner . These methodologies must be evaluated and updated as necessary to improve the internal audit function and respond to significant changes . Conclusion Quality assurance is essential for audit effectiveness. Organizations that implement comprehensive QAIP programs will achieve higher-quality audits and stronger stakeholder confidence. Action Items for Your Organization Implement a QAIP program Conduct post-engagement reviews Perform annual self-assessments Arrange periodic external validations Define performance objectives Review and update methodologies

Your AI Agent Is Only as Smart as Your CMDB — Why Configuration Data Is the Foundation of Intelligent Incident Management The CMDB's Forgotten Importance The Configuration Management Database (CMDB) has been a foundational element of ITSM for decades. But as organizations focus on AI and automation, the CMDB is often neglected. This neglect has consequences. Without trusted operational data: AI agents cannot make safe decisions Automated remediation becomes risky Root cause analysis becomes unreliable Detection accuracy deteriorates Operational resilience weakens The rise of AI is making foundational Service Management more important—not less. Why CMDB Quality Matters for AI AI Agents Need Context When an AI agent tries to resolve an incident, it needs to understand: What configuration items are involved? What dependencies exist between them? What's the impact of a change? What's the service history? The CMDB provides all of this context. Without an accurate CMDB, AI agents are operating in the dark. Automated Remediation Needs Trust When AI agents auto-remediate, they need to trust the data they're acting on. If the CMDB is inaccurate, auto-remediation becomes risky. CMDB Quality Automated Remediation Accurate AI can safely execute remediation Inaccurate AI may make things worse Incomplete AI may miss dependencies Outdated AI may act on obsolete data Root Cause Analysis Relies on CMDB Data When AI agents analyze incidents, they need to understand the service landscape. Without CMDB data, root cause analysis is incomplete. The CMDB Quality Problem Common CMDB Issues Issue Impact Incomplete data Missing configuration items Inaccurate data Wrong relationships, attributes Outdated data Changed systems not reflected Duplicate data Conflicting information Poorly defined relationships Incomplete dependency mapping The Impact of Poor CMDB Quality Impact Description AI cannot make safe decisions Without trusted data, AI can't act Automated remediation fails Risks outweigh benefits Root cause analysis incomplete Missing dependencies Incident routing broken Wrong assignment groups Business impact unclear Unclear which services affected Building a CMDB for AI 1. Define the Data Model What configuration items matter? What attributes are needed? What relationships are important? 2. Populate the CMDB Discover existing CIs Import from authoritative sources Manually add where needed 3. Ensure Data Quality Validate against authoritative sources Remove duplicates Correct errors 4. Maintain the CMDB Regular discovery Change management integration Quality monitoring 5. Integrate with AI Provide AI access to CMDB data Ensure AI can query CMDB Use CMDB data in AI decisions The Relationship Between CMDB and AI Incident Management CMDB Quality AI Incident Management Capability Excellent Full AI automation Good AI-assisted incident management Fair Limited AI capabilities Poor AI not feasible Conclusion: The CMDB Foundation The CMDB is not obsolete. In fact, it's more important than ever. As organizations deploy AI for incident management, the CMDB provides the trusted operational data AI agents need to make safe decisions. Your AI agent is only as smart as your CMDB. Action Items for Your Organization Assess CMDB quality: Understand completeness, accuracy, and currency Prioritize CMDB improvements: Focus on critical services Implement discovery: Automate CMDB population Integrate with change management: Keep CMDB current Make CMDB data available to AI: Enable AI to use CMDB data

Agentic AI Is Coming for Problem Management — Here's How ITIL Roles Are Evolving   What Is Agentic AI? Agentic AI refers to intelligent systems that can act autonomously. These systems can manage tasks without human involvement, challenging the traditional ITIL model which relies heavily on human intervention . In the context of problem management, Agentic AI systems can: ? Analyze patterns in incident data ? Identify underlying problems ? Propose solutions ? Implement preventive measures autonomously The Agentic AI Ecosystem for Problem Management The AI Agent for Proactive Problem Management is not a single monolithic system; it orchestrates a network of specialized agents : ? Perception Agents: Detect anomalies and recurring patterns ? Reasoning Agents: Perform root cause analysis and generate recommendations ? Internal Control Agents: Validate accuracy and compliance ? External Augmentation Agents: Engage human experts ? Action Agents: Trigger ITSM workflows and notifications ? Learning Agents: Adapt and evolve over time  How ITIL Roles Are Evolving The rise of Agentic AI is creating new roles and transforming existing ones: Traditional ITIL Role AI-Augmented Evolution Problem Manager Becomes an orchestrator of AI agents, focusing on validation and exception management rather than manual RCA Root Cause Analyst Focuses on validating AI-generated hypotheses and investigating complex cases that require judgment Knowledge Manager Ensures AI agents have access to authoritative knowledge and validates AI-generated known errors Change Manager Reviews and approves AI-proposed changes, ensuring safety and compliance Emerging Roles: ? AI Service Integration Manager: Ensures AI agents work together effectively ? AI Ethics & Compliance Officer: Ensures AI agents operate within governance boundaries ? AI-Enhanced Process Designer: Designs workflows that optimally combine human and AI capabilities ? Human-AI Collaboration Facilitator: Ensures effective partnership between humans and AI  The Human-AI Partnership Importantly, humans are not removed from the loop—they're elevated into a collaborative role: ? Through External Augmentation Agents and conversational AI interfaces, the system engages domain experts to validate findings, contribute context, and refine workflows ? This symbiotic relationship allows the AI to capture tacit knowledge and improve its predictive accuracy ? Rather than replacing experts, the AI amplifies their impact by scaling their insights across operations  Skills for the AI-Augmented Problem Management Professional Skill Why It Matters AI literacy Understanding how AI agents work and their limitations Data analysis Interpreting AI-generated insights and recommendations Critical thinking Validating AI outputs and identifying when human judgment is needed Collaboration Working effectively with AI agents and across teams Governance Ensuring AI agents operate within appropriate boundaries Conclusion Agentic AI is not replacing problem management professionals—it's transforming their role. The future of problem management is a partnership between human expertise and AI capabilities, where humans focus on strategic oversight and exception handling while AI handles the heavy lifting of pattern detection and analysis.   Action Items for Your Organization ? Assess the current AI capabilities in your problem management toolset ? Identify opportunities for AI augmentation in your existing problem management roles ? Develop AI literacy among problem management teams ? Establish governance for AI agent autonomy ? Define the boundaries between AI-automated and human-directed problem management

Headline: Generate Stakeholder Analyses, Communication Timelines, and Target Messages with AI The Communication Challenge Change managers need to communicate effectively with diverse stakeholders across the organization. But crafting the right message, for the right audience, at the right time, through the right channel is complex and time-consuming. AI is changing this. AI-Generated Communication Plans Change managers can use AI to craft entire communication plans. Sergi suggests a prompt like this: "I want you to act as a change management lead. Use this data or project brief to create a simple stakeholder analysis table. Then, I'd like you to give me the right groups I should communicate this change to, the right impact levels, the right messages, and a three-phase communication plan" . What AI can generate: Stakeholder analysis tables Audience segmentation Impact levels for different groups Key messages by audience Three-phase communication plans (pre-launch, launch, post-launch) Two to three key activities or messages for each phase Targeted Communications AI can also help by identifying how best to communicate with a specific team. Carlos Martinez, formerly at Salesforce, used AI to analyze survey data to understand the biggest pain points for a specific function and craft a narrative that resonates with their experiences . How it works: Collect survey data or feedback Use AI to analyze pain points by function Identify what's working and what's not Craft messages that address specific concerns Channel and Timing Optimization After crafting the message, AI can help determine: What channels to use: Based on your company's usage patterns When to communicate: Based on engagement metrics What format to use: Text, video, interactive, or a combination  The Human Oversight Imperative Karunakaran cautions that humans need to oversee the communication plan to make sure everything stays human-centered. Employees get flooded with messages and emails—which they'll ignore if there are too many . AI generates content; humans provide judgment. Practical Implementation Step 1: Upload Your Data Project briefs Stakeholder information Historical communication data Step 2: Generate the Plan Use AI to generate draft plans Review and refine Step 3: Execute and Optimize Implement the plan Use AI to track engagement Adjust based on data Conclusion AI-powered communication plans enable change managers to create targeted, timely, and effective communications at scale. By automating the drafting process, AI frees change managers to focus on strategy and human connection. Action Items for Your Organization Create AI prompt templates for communication planning Use AI to generate stakeholder analyses Segment audiences and tailor messages Optimize channel and timing based on data Maintain human oversight for authenticity and empathy

Headline: Two Changes, Same Service, Same Time — How to Manage the Chaos of Change Collisions What Is Change Collision? Change collision occurs when two or more changes are scheduled to execute against the same service within overlapping time windows. If both proceed, their combined execution creates ambiguity. The problem: If Change A depends on a state that Change B modified, rolling back Change B first might break Change A's rollback path. The Risks of Collisions Risk Impact Ambiguous failures Unclear which change caused the failure Rollback confusion Harder to roll back safely Service disruption Combined impact of multiple changes Extended downtime Longer to restore service Post-change issues Hidden issues from combined changes Managing Collisions 1. Set Collision Rules Based on Service Criticality Service criticality tiers: Tier Description Collision Rule Tier 1 Business-critical No overlapping changes Tier 2 Important Limited overlapping changes Tier 3 Low impact Overlapping allowed with coordination 2. Use Risk Multipliers for Concurrent Changes When changes overlap, apply risk multipliers: Concurrent Changes Risk Multiplier 1 change 1x (base risk) 2 changes 1.5x 3 changes 2x 4+ changes 3x 3. Apply Combined Risk Scoring Calculate combined risk: text Combined Risk = (Change A Risk + Change B Risk) × Concurrent Change Multiplier 4. Escalate High-Risk Collisions to CAB Set thresholds: Combined Risk Action Low Proceed with coordination Medium CAB review required High CAB review required Implementing Collision Detection Technical requirements: Change scheduling system Service mapping Time window overlap detection Risk scoring Automated alerts Process requirements: Change scheduling requirements Collision review procedures Escalation paths Exception handling Conclusion Change collision management prevents the chaos of conflicting changes. By detecting potential collisions, applying risk scoring, and escalating high-risk collisions, organizations can reduce change-related incidents. Action Items for Your Organization Implement collision detection in your ITSM platform Define collision rules based on service criticality Apply risk multipliers for concurrent changes Establish escalation paths for high-risk collisions Train teams on collision management  

Headline: AI Agents That Manage Change Themselves — What It Means for Change Practitioners What Is Agentic AI? Agentic AI refers to systems that can independently plan and execute multi-step workflows rather than simply generate outputs in response to prompts . In more advanced cases, agentic AI can take on parts of end-to-end processes with minimal human oversight . The Impact on Change Management The emergence of agentic AI is reshaping change management in several ways: New Skills Required Project and change teams need to develop skills in : Supervising autonomous AI activity Ensuring governance and ethical use Embedding AI into delivery processes Maintaining alignment with organizational intent Evolution from AI Literacy to Agent Supervision The role of change professionals is evolving from "How do I use AI tools?" to "How do I manage AI agents that act autonomously?" The Governance Challenge Agentic AI reshapes workflows, decision rights, team roles, and communication patterns—making structured change management essential . Key governance considerations: Who is accountable for agentic AI decisions? How do we ensure ethical use? What are the boundaries of agentic AI autonomy? How do we maintain human oversight? What happens when agentic AI systems fail? The Current State McKinsey reports that while some organizations are beginning to scale agentic AI within specific functions, most remain in the exploration phase, reinforcing the need for structured capability uplift rather than ad hoc experimentation . Preparing Your Organization 1. Assess Readiness What agentic AI capabilities are relevant? What governance frameworks exist? What skills are needed? 2. Build Capabilities Develop AI literacy across teams Create agent supervision skills Establish governance frameworks 3. Start Small Pilot agentic AI in low-risk areas Learn and iterate Scale gradually Conclusion Agentic AI is not a distant future—it's emerging now. Organizations that prepare for autonomous AI agents with governance, skills, and structured change management will be better positioned to benefit from this technology. Action Items for Your Organization Assess your organization's readiness for agentic AI Develop governance frameworks for autonomous AI Build agent supervision skills Pilot agentic AI in low-risk areas Plan for the evolution from AI literacy to agent supervision