Mixed Deck — All ITIL Topics Flashcards

Which approach to compliance is considered most effective?

Answer: A proactive approach that integrates compliance into daily operations

A proactive compliance approach that integrates regulatory requirements into daily operations is most effective at preventing violations and maintaining standards.

Which sourcing strategy involves delivering IT services exclusively using internal organizational resources and capabilities?

Answer: Insourcing

Insourcing means the organization uses its own internal staff and resources to deliver IT services, retaining full control and accountability within the organization.

What is co-sourcing in the context of ITIL Service Strategy?

Answer: A combination of internal staff and external supplier resources for service delivery

Co-sourcing blends internal resources with external supplier capabilities, enabling organizations to leverage both in-house knowledge and external expertise.

What are the key characteristics of effective documentation?

Answer: Accurate, complete, timely, legible, and objective

Effective documentation must be accurate, complete, timely (recorded promptly), legible, and objective to serve its intended purposes reliably.

What is a root cause analysis used for?

Answer: To identify the underlying cause of a problem rather than just addressing symptoms

Root cause analysis is a systematic method used to identify the fundamental underlying cause of a problem, enabling solutions that prevent recurrence rather than just treating symptoms.

What is the first step in the risk management process?

Answer: Risk identification — recognizing potential threats and vulnerabilities

Risk identification is the critical first step in risk management, involving systematic recognition and documentation of potential threats and vulnerabilities.

What should be considered before implementing new technology?

Answer: Cost, compatibility with existing systems, training needs, and security implications

Before implementing new technology, organizations should evaluate total cost, system compatibility, staff training requirements, security implications, and alignment with strategic goals.

Which role is primarily responsible for Service Portfolio Management in ITIL?

Answer: Service Portfolio Manager

The Service Portfolio Manager oversees the governance and lifecycle management of all services in the portfolio, ensuring alignment with business strategy.

What should be the first action when a new regulation is enacted that affects your practice?

Answer: Review the regulation, assess its impact, and develop an implementation plan

When new regulations are enacted, professionals should promptly review them, assess their impact on current practices, and develop a structured implementation plan.

How does Knowledge Process Outsourcing (KPO) differ from Business Process Outsourcing (BPO)?

Answer: KPO focuses on outsourcing knowledge-intensive, judgment-based processes requiring domain expertise

KPO outsources processes that require significant domain knowledge, analytical judgment, and expertise — going beyond the routine execution that characterizes BPO.

What defines a "best practice" in professional settings?

Answer: A method or technique that has consistently shown superior results through evidence

Best practices are methods or techniques that have consistently demonstrated superior results through evidence, research, and widespread professional validation.

Which ITIL process receives service requirements from the Service Portfolio and translates them into detailed service designs?

Answer: Service Design

Service Design takes the approved service requirements from the portfolio and translates them into detailed designs covering architecture, processes, and SLAs.

Why is data security important when using professional technology tools?

Answer: To protect sensitive information from unauthorized access, breaches, and loss

Data security protects sensitive professional, client, and organizational information from unauthorized access, breaches, theft, and loss, maintaining trust and compliance.

What is an audit trail in the context of documentation?

Answer: A chronological record that allows tracing of changes and decisions back to their source

An audit trail is a chronological sequence of records that provides documentary evidence of activities, enabling any change or decision to be traced back to its source.

Which ITIL Service Strategy principle states that IT services should deliver value that exceeds their cost?

Answer: Net benefit principle

The net benefit principle holds that services are justified only when the value they deliver—utility and warranty—exceeds the total cost of providing them.

When communicating with diverse stakeholders, what approach is recommended?

Answer: Adapt communication style and detail level to each stakeholder group

Different stakeholders have different needs, interests, and levels of expertise, requiring adapted communication approaches for each group.

Why is regular risk reassessment important?

Answer: Because the risk landscape changes as conditions, activities, and environments evolve

Regular risk reassessment is essential because risks are dynamic — new threats emerge, existing risks change in severity, and the effectiveness of controls may vary over time.

What should a communication plan include at minimum?

Answer: Stakeholder list, message content, channels, frequency, and responsible parties

A comprehensive communication plan identifies stakeholders, defines message content, specifies communication channels, sets frequency, and assigns responsible parties.

When should established methodologies be reconsidered?

Answer: When evidence shows better alternatives exist or when outcomes decline

Established methodologies should be reconsidered when new evidence suggests better alternatives, when outcomes decline, or when the operating context changes significantly.

What distinguishes a certified professional from a non-certified practitioner?

Answer: Demonstrated knowledge through standardized assessment and adherence to professional standards

Certification validates that a professional has met established standards of knowledge and competence through standardized assessment.