Change Management
About 25% of the CIS-ITSM exam — see all 6 domains.
Purpose and the three change types
Change Management controls the lifecycle of changes to the IT environment to deliver them with the least risk and disruption. Change records live on the change_request table (extends task). The exam leans heavily on distinguishing the three baseline change types:
- Standard change — pre-authorized, low-risk, repeatable, with a proven implementation procedure. It is requested from the Standard Change Catalog as a pre-approved template, so it skips CAB and per-instance approval. Promoting recurring, low-risk normal changes into standard change templates is the recommended efficiency play.
- Normal change — anything not standard or emergency. It requires risk assessment, planning, approvals, and (when applicable) CAB review before implementation. This is the full workflow path.
- Emergency change — must be implemented fast to resolve a major incident, restore service, or close a critical security gap. Approval is expedited (an emergency CAB / e-CAB), and review may happen after the fact.
Change models and state flow
Baseline change uses change models (state-machine driven flows) rather than legacy workflows. The normal change moves through stages such as New / Assess → Authorize → Scheduled → Implement → Review → Closed, with Canceled available. Approvals are gated by state: a change typically cannot be implemented until it is approved and within its scheduled window.
Risk and the Change Risk assessment
Risk is central. ServiceNow offers two complementary mechanisms:
- Change Risk Calculator / risk conditions — enabled by default; uses predefined conditions and properties to compute risk automatically.
- Change Management – Risk Assessment plugin — lets you build a risk assessment questionnaire; the user's answers feed a scoring formula that sets the change's overall Risk (and often Impact). Newer releases also expose Change Risk via Predictive Intelligence.
Risk and impact together inform which approval path and CAB scrutiny a change needs.
CAB
The Change Advisory Board (CAB) is the group of IT decision-makers and technical experts who review and authorize changes (typically normal changes above a risk threshold). ServiceNow provides the CAB Workbench to schedule CAB meetings, build agendas from changes in scope, run the meeting, and record decisions. Standard changes do not go to CAB (already pre-approved); emergency changes use an expedited/emergency CAB.
Schedules, conflicts, and blackouts
Change scheduling uses maintenance windows, blackout windows, and the Change conflict detection engine, which flags overlapping changes on the same CI or conflicts with blackout/maintenance schedules. CIs are attached so impact and conflicts can be assessed against the CMDB.
Exam focus
- Standard (pre-approved, from catalog, no CAB) vs. Normal (full risk + approval + CAB) vs. Emergency (expedited).
change_requestextendstask; change models drive state.- Two risk paths: default Change Risk Calculator vs. Risk Assessment plugin questionnaire.
- CAB Workbench schedules and runs CAB; standard changes bypass it.
- Conflict detection and blackout/maintenance windows.
Sample questions from this domain
Three of the 75 in this domain, with the reasoning. The full set is in the question bank.
What is the primary purpose of Change Management in ServiceNow ITSM?
- A. To document configuration items
- B. To control the lifecycle of changes to IT services and infrastructure, minimizing risk and disruption ✓
- C. To restore service after an outage
- D. To fulfill service catalog requests
Why: Change Management controls the lifecycle of changes to minimize risk and disruption while enabling beneficial changes. Restoring service (A) is Incident Management, documenting CIs (C) is the CMDB, and fulfilling requests (D) is Request Fulfillment.
Which baseline change type is pre-authorized, low-risk, and follows a documented, repeatable procedure?
- A. Emergency
- B. Major
- C. Normal
- D. Standard ✓
Why: Standard changes are pre-authorized, low-risk, repeatable changes that follow a documented procedure, often delivered via a change template/catalog. Emergency changes (A) address urgent issues, Normal changes (B) require full assessment and approval, and 'Major' (D) is not a baseline change type.
Which baseline change type is used to address urgent situations, such as resolving a major incident, and typically uses an expedited approval path?
- A. Emergency ✓
- B. Standard
- C. Normal
- D. Routine
Why: Emergency changes handle urgent situations and use an expedited (often eCAB) approval path. Standard changes (A) are pre-authorized routine changes, Normal changes (B) follow the full assessment/approval flow, and 'Routine' (D) is not a baseline type.