YTYK You think you know

Card 14 of 15 Practices in daily use ●●○ Working knowledge

Three types of change

Change enablement recognises three types: standard (pre-authorised, low risk, procedural — no approval needed each time), normal (assessed and authorised through the usual path), and emergency (expedited, with a separate authority and often documentation completed afterwards).

Why it is like this

Routing every change through one authority is both a bottleneck and a rubber stamp. Separating the three lets scrutiny concentrate where risk actually is.

Not to be confused with

A severity scale. Standard changes are a class authorised once in advance, not small changes approved quickly — and ITIL 4 renamed the practice *change enablement* because its job is to maximise successful changes, not to slow them down.

In practice

A password reset is standard. A schema migration is normal. Patching an actively exploited vulnerability at 02:00 is emergency.

Source: ITIL 4 Foundation (AXELOS / PeopleCert), 2019 edition — change enablement practice. Read on .

ITIL® is a registered trade mark of the PeopleCert group. ytyk.org is not affiliated with, endorsed by or licensed by PeopleCert. These cards are independent commentary written in our own words; no part of the ITIL publications, and no ITIL diagram, is reproduced here.

Odd one out Check yourself

Three of these are true of a standard change. Which is not?

  1. It is pre-authorised as a class
  2. It follows a documented procedure
  3. It is low risk and well understood
  4. It is approved individually by the change authority before each execution
Show the answer

It is approved individually by the change authority before each execution

Pre-authorisation is the whole point — per-instance approval would make it a normal change with extra paperwork.