Thank you for your feedback.
Form temporarily unavailable. Please try again or contact docfeedback@servicenow.com to submit your comments.

Run audits to determine invalid and missing configuration data

Log in to subscribe to topics and get notified when content changes.

Run audits to determine invalid and missing configuration data

Run the scripted audits and desired state audit to know the gaps or missing information in the configuration data of business capability, business application, software models, and the lifecycle information.

Before you begin

Role required: sn_apm.apm_admin

About this task

You can identify records that have gaps in their relationship with the other configuration items by running the scripted audits. Such breaks in establishing the relationship between the business capability and the business application, between the business application and the software models, and the software models with no lifecycle data cannot give you a realistic appraisal of the business capabilities and the business applications they are tied to.

As an enterprise architect, you require all the configuration items to be related and tied appropriately to assess your business applications and estimate and evaluate the business capabilities of your enterprise.

Procedure

  1. Navigate to Application Portfolio Management > Administration > Desired State Audits or Scripted Audits.
  2. Click the audit name.
  3. Click Run Audit button.
    Running the following audits helps you to:
    • Identify the records that match the respective criteria.
    • Create tasks to address the disparity in the records.
    • Communicate to the owners of the IT business application, software model, and the business capability by an email notification to resolve the gap or certify the data.

      To facilitate addressing these notifications and to access the applications data, the IT business application owners, software model owners, and the business capability owners are granted sn_apm.apm_user role. Users with this role can navigate to Compliance > My Follow On Tasks to update the data.

    Orphaned business capabilities
    The scripted audit checks for capabilities that have neither parent capability nor child capabilities, and do not have any business applications tied to it. Based on such capabilities retrieved from the CI relationship [cmdb_rel_ci] table, tasks are created and email notifications are sent to the owner of the business capability notifying them of the assigned task.
    Software Models with no lifecycle data
    The scripted audit retrieves software model records used by the business applications that have no lifecycle data such as lifecycle type, its phase, beginning and end dates of the lifecycle phase, and risk. The audit generates tasks and sends email notifications to the software model owner.
    Note: The system checks for the lifecycle data only for production instances of the business application. That is, it does not consider non-production instances such as development and test.
    Business applications related to multiple business capabilities in the same hierarchy
    The scripted audit checks the CI relationship [cmdb_rel_ci] table for a possibility where the same business application is tied to multiple business capabilities at the same level of the hierarchy. For example, BA1 is tied to Cap 1.1.2 and is also tied to Cap 1.1.2.1. The hierarchy level of the capability can be understood from the Business Capability [cmdb_ci_business_capability] table.
    Business applications not related to any software model
    The audit checks the CI relationship [cmdb_rel_ci] table for business applications that are not related to any software model. The scripted audit considers only the production instances of business services. The notification is sent to the IT application owner.
    Note: The system checks only for production instances of the business application and does not consider non-production instances such as development or test.
    Business applications not related to any business capability
    The desired state audit checks the CI relationship [cmdb_rel_ci] table for business applications that are not related to any business capability.
    Information Objects not related to any Business Application

    The desired state audit checks the Information Object [cmdb_ci_information_object] table and looks for an information object that is not tied to any business application. You can audit the information object table on demand and if the audit check reveals any unrelated information object, then a notification is sent to the owner assigned to the information object in the Assign to field.

    In addition, whenever a certification schedule either On Demand or Quarterly is executed a notification is shown on the Application Portfolio Management Home page. For each certification schedule that is executed a notification entry appears in the home page correspondingly. The notification shows certification instances that are open and those that are not complete 100%. Conversely, certification instances that are 100% complete and those that have not been generated at all are not notified in the Home page section.

    Notifications are also shown for software models that are at high and moderate risks as on the current date and within the next 90 days. The risk factors of software models tied to business applications that are related to production instances are only considered. Click the notification to open the related records from the software model table.

    The scripted and desired state audit results are also posted in the Notification section of the Application Portfolio Management Home page. Click the notification to open the related tasks or the related data certification tasks.

Feedback