Configuration Management Databases
A Configuration Management Database (CMDB) is a repository that stores information about IT assets and their relationships. It tracks hardware, software, services, and dependencies so that change, incident, and problem management processes operate with accurate knowledge of the environment.
itIT service management and support | OpenSkills.info
Intro
Configuration Management Databases
An incident reaches the service desk: customers cannot check out. The web application looks healthy. The database is responding. A certificate changed an hour ago. Which component supports checkout, and what depends on that certificate?
A configuration management database, or CMDB, helps you answer those questions. It records configuration items and the relationships that connect them. A configuration item, or CI, is a component you choose to manage as one entity. A CI can represent hardware, software, an application, a service, or another resource that matters to service delivery.
The central mental model is a service map backed by governed records.
customer service
|
v
application -> database -> server -> network device
| |
owner version
|
incidents, changes, risks, and controls
The records tell you what exists. The relationships tell you why it matters. Governance keeps both trustworthy enough for decisions.
Why a CMDB exists
Technical information usually begins in many systems. Cloud platforms know about virtual machines. Endpoint tools know about laptops. Deployment systems know about applications. Monitoring tools know about live behavior. Procurement systems know about purchases and contracts.
A CMDB does not need to replace every source. It creates a managed view of selected CIs, their important attributes, and their relationships. That view supports work across service management.
You can use it to:
- trace a service interruption through technical dependencies;
- estimate which services a proposed change may affect;
- connect incidents, problems, changes, and requests to the same CI;
- identify owners and support groups;
- find stale, duplicate, missing, or unexpected components;
- support inventory, security, audit, and continuity decisions.
NIST requires a system-component inventory to reflect the system accurately, include the necessary components, avoid duplicate accounting, use suitable granularity, and support accountability. A CMDB can help meet those goals when its scope and controls match the organization.
A CMDB is more than an asset list
Continue the course
This section is part of the paid course.
See pricing to subscribe, or log in if you already have access.
Where this skill leads
Relevant careers
See how this topic contributes to broader role-level skill maps.
Sources
- https://csrc.nist.gov/pubs/sp/800/128/upd1/final
Supports
- Configuration management as establishing and maintaining managed system configurations
- Configuration items as components designated and treated as entities in configuration management
- Configuration control and monitoring across the system lifecycle
- Configuration management as support for security, business function, and risk management
- https://csrc.nist.gov/CSRC/media/Projects/risk-management/800-53%20Downloads/800-53r5/SP_800-53_v5_1-derived-OSCAL.pdf
Supports
- CM-8 requirements for accurate and complete system-component inventory
- Suitable inventory granularity for tracking and reporting
- Unique identifiers and system association to prevent duplicate accounting
- Inventory updates during installation, removal, and system updates
- Example accountability data for hardware, software, firmware, ownership, versions, and network identity
- https://support.atlassian.com/assets/docs/what-are-object-schemas/
Supports
- Object schemas as collections for assets, configuration items, and resources
- Relationships as a means to understand and visualize critical connections
- Object types, objects, attributes, references, statuses, and permissions as schema elements
- https://support.atlassian.com/analytics/docs/schema-for-asset-and-configuration-management/
Supports
- Asset and configuration data used to connect applications, services, infrastructure, and dependencies
- Unique object identifiers, types, schemas, and object attributes in a current product data model
- https://www.servicenow.com/docs/r/servicenow-platform/configuration-management-database-cmdb/r_CMDBRecordTypes.html
Supports
- CI records for computers, devices, and services with relevant attributes
- Typed, directional relationships between CIs
- Manual and discovery-based maintenance of CIs and relationships
- https://www.servicenow.com/docs/r/servicenow-platform/configuration-management-database-cmdb/c_CompsandProcessIDandReconcil.html
Supports
- Identification as deciding whether incoming data matches an existing CI or creates a new CI
- Reconciliation as restricting updates to designated authoritative sources at table and attribute level
- De-duplication and reclassification tasks for data-quality exceptions
- Centralized APIs applying identification and reconciliation before CMDB writes
- https://www.servicenow.com/docs/r/servicenow-platform/configuration-management-database-cmdb/best-practices-id-reconcile.html
Supports
- Independent and dependent identification rules
- Preference for strong identifiers and limited rule complexity
- Avoidance of duplicate input records
- https://www.servicenow.com/docs/r/servicenow-platform/configuration-management-database-cmdb/r_SuggestedRelationshipModel.html
Supports
- Relationship types appropriate to CI classes
- Directional hosting and power relationship examples
- Use of discovery patterns to identify and add CI relationships
- https://www.servicenow.com/docs/r/servicenow-platform/configuration-management-database-cmdb/r_CMDBHealthMetrics.html
Supports
- Correctness, completeness, and compliance health dimensions
- Duplicate, stale, orphan, required-field, and audit metrics
- Duplicate, orphan, stale, and rule-invalid relationship health checks
