DevOps Institute

How ITIL4 and SRE align with DevOps

DevOps Basics, SRE, Upskilling

Updated January 18, 2023
Jayne Groll, CEO, DevOps Institute

In the early days of DevOps, there was a lot of debate about the ongoing relevancy of ITIL and IT service management (ITSM) in a faster-paced agile and DevOps world. Thankfully, that debate has come to an end.

ITSM processes are still essential, but, like all aspects of IT, they too must transform. The update to ITIL (ITIL4), as well as increased interest in Site Reliability Engineering (SRE), provides insights into how to manage services in a digital world.    

Here’s a look at ITIL4 and SRE and how each underpins the “Three Ways of DevOps,” as defined in The Phoenix Project, by Gene Kim, Kevin Behr, and George Spafford.‎

What is ITIL4?

ITIL4 is the next evolution of the well-known service management framework from Axelos. It introduces a new Service Value System (SVS) that’s supported by the guiding principles from the ITIL Practitioner Guidance publication. The framework eases into its alignment with DevOps and agile through a bi-modal approach that retains many of the activities from previous versions but acknowledges DevOps practices such as value streams and continuous delivery. 

Site Reliability Engineering

Site Reliability Engineering (SRE) is Google’s approach to service management. It is a post-production set of practices for operating large systems at scale, with an engineering focus on operations. 

SRE is “what happens when you ask a software engineer to design an operations function.” It is both a role and set of practices that have attracted the interest of large enterprises as an adjunct to agile teams and DevOps automation practices.

The three ways of DevOps and ITSM

Automation is essential to improving flow and service quality because it reduces human error, removes toil, and introduces consistency. During the initial ITSM period, automation was used to automate IT tasks, processes and sometimes even decisions. In the digital age, improvements around the employee and customer experience are the highest priority for both IT and business teams. This results in the necessary adoption of intelligent automation across more than just IT. The goals are to underpin ITIL4 processes with tools, particularly during transition and operation processes as part of the service operation delivery. 

Automation is inherent in SRE because it is an engineering practice for operational service management. SREs can code, and therefore will make pervasive use of automation to manage reliability and reduce manual work known, in Google-speak, as toil. 

In addition to automation, the following steps are crucial no matter if applying SRE, ITIL, DevOps or other process and framework models.

1. Increase flow and reliability through change management

The crossroads of agile, DevOps, and ITSM form the cornerstone of change management. Simplify current change management practices, and you can increase flow many times over.

ITIL4 and SRE take very different approaches to change management. In SRE, the team is given an error budget that represents the gap between perfect reliability and agreed service level objectives (SLOs). While the team is allowed to regulate its own workload, there are policies and consequences that govern what happens if an error budget is blown or service levels breached. Since error budgets are meant to be spent, the team can make autonomous decisions to increase flow.   

ITIL4 has a stronger emphasis on governance and change approvals. The latest guidance now provides different options for assessing changes based on the change category, ranging from a central decision authority to peer-to-peer reviews. 

By definition, the purpose of the ITIL4 change control practice is “to maximize the number of successful IT changes by ensuring that risks have been properly assessed, authorizing changes to proceed, and managing a change schedule.” 

ITIL4 does support the use of automation and rapid decision-making to expedite change decisions.

2. Shorten feedback loops by improving incident response

The best way to shorten feedback on the quality of a product or service is through incident management. Fewer incidents equal higher quality.

Both ITIL4 and SRE refer to incident swarming—a model of networked collaboration—as a means to provide simultaneous and fast engagement to reduce the time and impact of a significant incident. Monitoring systems and dashboards visualize current state and can be shared with key stakeholders. ChatOps systems open engagement opportunities for collaboration, input, and feedback on past, present, and even predictive incidents.

Since SREs are an established role with direct access to developers, feedback on both sides can be fairly continuous. SREs also have the technical ability to diagnose and potentially fix incidents independently, so the ability to capture knowledge at the source is shortened. For its part, ITIL4 advocates for the breakdown of silos—capturing knowledge at the source—and emphasizes the importance of recording incident activities and knowledge management.

3. Foster continuous learning and experimentation

DevOps encourages a culture of experimentation where “fail fast and learn fast” are the keys to practice, mastery, and improvement. This principle is supported by ITIL4, SRE, and virtually every agile and previous ITIL framework. The spirit of continuous learning and improvement is embedded in every ITSM activity. In SRE, failure is an opportunity to improve. In ITIL4, “improve” is called out as a value chain activity.

Process skills are critical to DevOps

The Upskilling IT: Global Skills Report proved that process skills are statistically equal to technical and soft skills in the current talent landscape.

It is interesting to note that the upper half of “must-have” process skills do not map to a specific framework or method. These are higher-level, critical process skills that can be applied universally in the management of products and services. While still strongly “nice to have,” experience with frameworks such as ITIL, Scrum, and project management were not considered essential by the 2,200-plus respondents to the survey.

Which service management framework is right for you?

Both ITIL4 and SRE have their merits, and both claim to support the DevOps three ways. 

Culturally, SRE is more aligned to DevOps values and agile principles in encouraging self-organization, error budgets, smaller and faster increments, and an engineering mindset. 

ITIL4 promotes a more command-and-control-oriented structure than do DevOps and agile, but it hints at closer alignment. However, for traditional organizations that are not ready to take the leap from change control to self-organization, ITIL4’s bi-modal approach may be attractive, if not sustainable for the long term.

Regardless of the framework you choose, it is imperative that you adopt an agile service management mindset to determine how much is “just enough” or “minimally viable” process for the business.

Either way, IT service management is here to stay.


Upskilling IT 2023 Report

Community at DevOps Institute

related posts

[EP109] From a DBA Jerk to a Collaborator!

[EP109] From a DBA Jerk to a Collaborator!

Join Eveline Oehrlich and Grant Fritchey, Product Advocate at Redgate Software, to discuss product advocacy, collaboration, and leadership. Grant has worked for more than 30 years in IT as a developer and a DBA. He has built systems from major enterprises to...

[EP108] Leading an Engineering Team Today

[EP108] Leading an Engineering Team Today

Join Eveline Oehrlich and Nickolas Means, VP of Engineering at Sym, to discuss the best practices and challenges of leading an engineering team, collaboration, and more. Nick is the VP of Engineering at Sym, the adaptive access tool built for developers. He’s been an...

[EP106] Identity Orchestration Tidbits

[EP106] Identity Orchestration Tidbits

Join Eveline Oehrlich and Topher Marie, CTO and Co-founder of Strata, to discuss Container Orchestration. Before Strata, Topher was the CTO and a co-founder of JumpCloud. In the past, he has also been an Architect for Oracle’s global cloud identity and security...