Checklist Incident Priority: Difference between revisions
No edit summary |
No edit summary |
||
Line 1: | Line 1: | ||
<itpmch><title>Checklist Incident Priority | IT Process Wiki</title> | <itpmch><title>Checklist Incident Priority | IT Process Wiki</title> | ||
<meta name="keywords" content="incident priorities, incident priority, incident priorizitation, major incident, incident priority matrix, major incident identification" /> | <meta name="keywords" content="incident priorities, incident priority, incident priorizitation, major incident, incident priority matrix, major incident identification" /> | ||
<meta name="description" content="Incident Prioritization Guideline | <meta name="description" content="The Incident Prioritization Guideline describes the rules for assigning 'priorities to Incidents', including the definition of what constitutes a 'Major Incident'. An Incident's priority is usually determined by assessing its impact and urgency." /> | ||
<meta property="og:url" content="https://wiki.en.it-processmaps.com/index.php/Checklist_Incident_Priority" /> | |||
<meta property="og:title" content="Checklist Incident Priority | IT Process Wiki" /> | |||
<meta property="og:description" content="An Incident's priority is usually determined by assessing its impact and urgency: 'Urgency' is a measure how quickly a resolution of the Incident is required. 'Impact' is measure of the extent of the Incident and of the potential damage caused by the Incident before it can be resolved." /> | |||
<meta property="og:site_name" content="IT Process Wiki - the ITIL® Wiki"> | |||
<meta property="og:type" content="article" /> | |||
<meta property="article:publisher" content="https://www.facebook.com/itprocessmaps" /> | |||
<meta property="fb:admins" content="100002035253209" /> | |||
<meta property="fb:admins" content="100002592864414" /> | |||
<meta property="og:image" content="https://wiki.en.it-processmaps.com/images/7/79/Incident-prioritization.jpg" /> | |||
<meta property="og:image:width" content="519" /> | |||
<meta property="og:image:height" content="718" /> | |||
<link href="https://plus.google.com/108613479011811316823/posts" rel="publisher" /> | |||
</itpmch> | </itpmch> | ||
<imagemap> | <imagemap> | ||
Image:ITIL-Wiki- | Image:ITIL-Wiki-share.jpg|right|share this page|141px | ||
rect 55 0 99 36 [https://www.linkedin.com/shareArticle?url=https%3A%2F%2Fwiki.en.it-processmaps.com%2Findex.php%2FChecklist_Incident_Priority&hl=en_US&source=IT%20Process%20Wiki share this page on LinkedIn] | |||
rect 97 0 141 36 [https://twitter.com/intent/tweet?url=https%3A%2F%2Fwiki.en.it-processmaps.com%2Findex.php%2FChecklist_Incident_Priority&text=%23ITILwiki%20%7C%20Free%20ITIL%20checklist%3A%20Incident%20Priority%0A%E2%96%BA&lang=en&via=itprocessmaps share this page on Twitter] | |||
desc none | |||
</imagemap> | |||
<imagemap> | |||
Image:ITIL-Wiki-deutsch.jpg|Checklist Incident Priority - Template Incident Priority | |||
default [https://wiki.de.it-processmaps.com/index.php/Checkliste_Incident-Priorität diese Seite auf Deutsch] | default [https://wiki.de.it-processmaps.com/index.php/Checkliste_Incident-Priorität diese Seite auf Deutsch] | ||
desc none | desc none | ||
Line 10: | Line 28: | ||
<br style="clear:both;"/> | <br style="clear:both;"/> | ||
< | '''<span id="incident-priority">Definition:</span>''' <html><span id="md-webpage-description" itemprop="description">An <i>Incident's priority</i> is usually determined by assessing its impact and urgency: 'Urgency' is a measure how quickly a resolution of the Incident is required. 'Impact' is measure of the extent of the Incident and of the potential damage caused by the Incident before it can be resolved.</span></html> | ||
''' | |||
''' | '''ITIL Process''': [[ITIL Service Operation|ITIL Service Operation]] - [[Incident Management]] | ||
''' | '''Checklist Category:''' [[ITIL-Checklists#ITIL 2011 Templates|Templates ITIL 2011]] | ||
<p> </p> | <p> </p> | ||
Line 22: | Line 38: | ||
__TOC__ | __TOC__ | ||
==<span id="guideline">Incident Prioritization Guideline</span>== | |||
[[Image:Incident-prioritization.jpg | [[Image:Incident-prioritization.jpg|link=https://wiki.en.it-processmaps.com/index.php/File:Incident-prioritization.jpg|thumb|300px|right|alt=Incident Prioritization template|[[media:Incident-prioritization.jpg|ITIL Incident Prioritization Guideline (view full size)]]]] | ||
The <i>Incident Prioritization Guideline</i> describes the rules for assigning 'priorities to Incidents', including the definition of what constitutes a 'Major Incident'. Since Incident Management escalation rules are usually based on priorities, assigning the correct priority to an Incident is essential for triggering appropriate 'Incident escalations'. | |||
<br style="clear:both;"/> | <br style="clear:both;"/> | ||
==Incident Urgency (Categories of Urgency)== | ==<span id="incident-urgency">Incident Urgency (Categories of Urgency)</span>== | ||
This section establishes ''categories of urgency''. The definitions must suit the type of organization, so the following table is only an example: | This section establishes ''categories of urgency''. The definitions must suit the type of organization, so the following table is only an example: | ||
To determine the '' | To determine the ''Incident's urgency'', choose the highest relevant category: | ||
<p> </p> | <p> </p> | ||
{| | {| class="wikitable" style="background: white;" | ||
|- | |- | ||
! style=" | ! style="background:#ffcc66; width:25%" | Category | ||
! style=" | ! style="background:#ffffcc; width:75%" | Description | ||
|- | |- | ||
| style="vertical-align: top;" | '''High (H)''' | | style="vertical-align: top;" | '''High (H)''' | ||
Line 70: | Line 79: | ||
<p> </p> | <p> </p> | ||
==Incident Impact (Categories of Impact)== | ==<span id="incident-impact">Incident Impact (Categories of Impact)</span>== | ||
This section establishes ''categories of impact''. The definitions must suit the type of organization, so the following table is only an example: | This section establishes ''categories of impact''. The definitions must suit the type of organization, so the following table is only an example: | ||
To determine the '' | To determine the ''Incident's impact'', choose the highest relevant category: | ||
<p> </p> | <p> </p> | ||
{| | {| class="wikitable" style="background: white;" | ||
|- | |- | ||
! style=" | ! style="background:#ffcc66; width:25%" | Category | ||
! style=" | ! style="background:#ffffcc; width:75%" | Description | ||
|- | |- | ||
| style="vertical-align: top;" | '''High (H)''' | | style="vertical-align: top;" | '''High (H)''' | ||
Line 108: | Line 117: | ||
<p> </p> | <p> </p> | ||
==Incident Priority Classes== | ==<span id="incident-priority-classes">Incident Priority Classes</span>== | ||
''Incident Priority'' is derived from [[#Incident Urgency (Categories of Urgency)|urgency]] and [[#Incident Impact (Categories of Impact)|impact]]. | ''Incident Priority'' is derived from [[#Incident Urgency (Categories of Urgency)|urgency]] and [[#Incident Impact (Categories of Impact)|impact]]. | ||
==== <span id=" | ==== <span id="incident-priority-matrix">Incident Priority Matrix</span> ==== | ||
If classes are defined to rate urgency and impact (see above), an ''Urgency-Impact Matrix'' (also referred to as ''Incident Priority Matrix'') can be used to define priority classes, identified in this example by colors and priority codes: | If classes are defined to rate urgency and impact (see above), an ''Urgency-Impact Matrix'' (also referred to as ''Incident Priority Matrix'') can be used to define priority classes, identified in this example by colors and priority codes: | ||
Line 118: | Line 127: | ||
<p> </p> | <p> </p> | ||
{| | {| class="wikitable" style="background: white;" | ||
|- | |- | ||
!style="background:#ffffff;" colspan="2" rowspan="2"| | !style="background:#ffffff;" colspan="2" rowspan="2"| | ||
!style="background:#f2f2f2;" colspan="3"| Impact | !style="background:#f2f2f2;" colspan="3"| Impact | ||
|- | |- | ||
| H | | H | ||
| M | | M | ||
| N | | N | ||
|- | |- | ||
|rowspan="3" style="background:#f2f2f2;" | '''Urgency''' | |rowspan="3" style="background:#f2f2f2;" | '''Urgency''' | ||
|H | | H | ||
| style="background:#e36c0a;" | 1 | | style="background:#e36c0a;" | 1 | ||
| style="background:#fabf8f;" | 2 | | style="background:#fabf8f;" | 2 | ||
| style="background:#fbd4b4;" | 3 | | style="background:#fbd4b4;" | 3 | ||
|- | |- | ||
|M | | M | ||
| style="background:#fabf8f;" | 2 | | style="background:#fabf8f;" | 2 | ||
| style="background:#fbd4b4;" | 3 | | style="background:#fbd4b4;" | 3 | ||
| style="background:#fde9d9;" | 4 | | style="background:#fde9d9;" | 4 | ||
|- | |- | ||
|L | | L | ||
| style="background:#fbd4b4;" | 3 | | style="background:#fbd4b4;" | 3 | ||
| style="background:#fde9d9;" | 4 | | style="background:#fde9d9;" | 4 | ||
|5 | | 5 | ||
|} | |} | ||
<p> </p> | <p> </p> | ||
{| | {| class="wikitable" style="background: white;" | ||
|- | |- | ||
!style="background:#f2f2f2;" | Priority Code | !style="background:#f2f2f2;" | Priority Code | ||
Line 181: | Line 190: | ||
<p> </p> | <p> </p> | ||
==<span id=" | ==<span id="major-incident-handling">Circumstances that warrant the Incident to be treated as a Major Incident</span>== | ||
''Major Incidents'' call for the establishment of a Major Incident Team and are managed through the [[Incident Management#Handling-of-Major-Incidents|Handling of Major Incidents]] process. | ''Major Incidents'' call for the establishment of a Major Incident Team and are managed through the [[Incident Management#Handling-of-Major-Incidents|Handling of Major Incidents]] process. | ||
Line 227: | Line 236: | ||
==Notes== | ==Notes== | ||
<html>Is based on: Template "Incident Prioritization Guideline" from the <a href="https://en.it-processmaps.com/products/itil-process-map.html" title="The ITIL Process Map" class="external text">ITIL Process Map</a>.</p> | <html>Is based on: Template "Incident Prioritization Guideline" from the <a href="https://en.it-processmaps.com/products/itil-process-map.html" title="The ITIL Process Map" class="external text">ITIL Process Map</a>.</p> | ||
Line 235: | Line 242: | ||
<p> </p> | <p> </p> | ||
<p><small> | |||
<span itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb"> | |||
<a href="https://wiki.en.it-processmaps.com/index.php/Checklist_Incident_Priority#incident-priority" itemprop="url"><span itemprop="title">Definition</span></a> › | |||
</span> | |||
<span itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb"> | |||
<a href="https://wiki.en.it-processmaps.com/index.php/Checklist_Incident_Priority#guideline" itemprop="url"><span itemprop="title">Incident Prioritization Guideline</span></a> › | |||
</span> | |||
<span itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb"> | |||
<a href="https://wiki.en.it-processmaps.com/index.php/Checklist_Incident_Priority#incident-urgency" itemprop="url"><span itemprop="title">Urgency</span></a> › | |||
</span> | |||
<span itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb"> | |||
<a href="https://wiki.en.it-processmaps.com/index.php/Checklist_Incident_Priority#incident-impact" itemprop="url"><span itemprop="title">Impact</span></a> › | |||
</span> | |||
<span itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb"> | |||
<a href="https://wiki.en.it-processmaps.com/index.php/Checklist_Incident_Priority#incident-priority-classes" itemprop="url"><span itemprop="title">Priority Classes</span></a> | |||
</span> | |||
</small></p> | |||
<!-- define schema.org/WebPage --> <span itemscope itemtype="https://schema.org/WebPage" itemref="md-webpage-description"> | <!-- define schema.org/WebPage --> <span itemscope itemtype="https://schema.org/WebPage" itemref="md-webpage-description"> |
Revision as of 17:22, 23 January 2017
![share this page](/images/5/50/ITIL-Wiki-share.jpg)
![Checklist Incident Priority - Template Incident Priority](/images/f/f8/ITIL-Wiki-deutsch.jpg)
Definition: An Incident's priority is usually determined by assessing its impact and urgency: 'Urgency' is a measure how quickly a resolution of the Incident is required. 'Impact' is measure of the extent of the Incident and of the potential damage caused by the Incident before it can be resolved.
ITIL Process: ITIL Service Operation - Incident Management
Checklist Category: Templates ITIL 2011
Incident Prioritization Guideline
![Incident Prioritization template](/images/thumb/7/79/Incident-prioritization.jpg/300px-Incident-prioritization.jpg)
The Incident Prioritization Guideline describes the rules for assigning 'priorities to Incidents', including the definition of what constitutes a 'Major Incident'. Since Incident Management escalation rules are usually based on priorities, assigning the correct priority to an Incident is essential for triggering appropriate 'Incident escalations'.
Incident Urgency (Categories of Urgency)
This section establishes categories of urgency. The definitions must suit the type of organization, so the following table is only an example:
To determine the Incident's urgency, choose the highest relevant category:
Category | Description |
---|---|
High (H) |
|
Medium (M) |
|
Low (L) |
|
Incident Impact (Categories of Impact)
This section establishes categories of impact. The definitions must suit the type of organization, so the following table is only an example:
To determine the Incident's impact, choose the highest relevant category:
Category | Description |
---|---|
High (H) |
|
Medium (M) |
|
Low (L) |
|
Incident Priority Classes
Incident Priority is derived from urgency and impact.
Incident Priority Matrix
If classes are defined to rate urgency and impact (see above), an Urgency-Impact Matrix (also referred to as Incident Priority Matrix) can be used to define priority classes, identified in this example by colors and priority codes:
Impact | ||||
---|---|---|---|---|
H | M | N | ||
Urgency | H | 1 | 2 | 3 |
M | 2 | 3 | 4 | |
L | 3 | 4 | 5 |
Priority Code | Description | Target Response Time | Target Resolution Time |
---|---|---|---|
1 | Critical | Immediate | 1 Hour |
2 | High | 10 Minutes | 4 Hours |
3 | Medium | 1 Hour | 8 Hours |
4 | Low | 4 Hours | 24 Hours |
5 | Very low | 1 Day | 1 Week |
Circumstances that warrant the Incident to be treated as a Major Incident
Major Incidents call for the establishment of a Major Incident Team and are managed through the Handling of Major Incidents process.
Indicators
The above prioritization scheme notwithstanding, it is often appropriate to define additional, readily understandable indicators for identifying Major Incidents (see also the comments below on identifying Major Incidents). Examples for such indicators are:
- Certain (groups of) business-critical services, applications or infrastructure components are unavailable and the estimated time for recovery is unknown or exceedingly long (specify services, applications or infrastructure components)
- Certain (groups of) Vital Business Functions (business-critical processes) are affected and the estimated time for restoring these processes to full operating status is unknown or exceedingly long (specify business-critical processes)
Identifying Major Incidents
It is not easy to give clear guidelines on how to identify major incidents although the 1st Level Support often develops a "sixth sense" for these. It is also probably better to err on the side of caution in this respect.
A Major incidents tend to be characterized by its impact, especially on customers. Consider some examples:
- A high speed network communications link fails and part of or all data communication to and from outside the organization is cut off.
- A website grinds to a halt because of unexpected heavy demand prior to a deadline (for example to reserve tickets or make a legal submission) resulting in large numbers of customers failing to meet that deadline.
- A key business database is found to be corrupted.
- More than one business server is infected by a worm.
- The private and confidential information of a significant number of individuals is accidentally disclosed in a public forum.
Note also that all disasters (covered by the IT Service Continuity Strategy and underpinning ITSCM Plans) are Major Incidents and that smaller incidents that are compounded by errors or inaction can become major incidents.
Major Incidents - Key Characteristics
Some of the key characteristics that make these Major Incidents are:
- The ability of significant numbers of customers and/or key customers to use services or systems is or will be affected.
- The cost to customers and/or the service provider is or will be substantial, both in terms of direct and indirect costs (including consequential loss).
- The reputation of the Service Provider is likely to be damaged.
AND
- The amount of effort and/or time required to manage and resolve the incident is likely to be large and it is very likely that agreed service levels (target resolution times) will be breached.
A Major Incident is also likely to be categorized as a critical or high priority incident.
Notes
Is based on: Template "Incident Prioritization Guideline" from the ITIL Process Map.
By: Stefan Kempter , IT Process Maps.
Definition › Incident Prioritization Guideline › Urgency › Impact › Priority Classes