ITIL 4 Glossary: 55 Key Terms for Foundation (2026)

Adding, modifying or removing anything that could directly or indirectly affect a service. The scope is deliberately wide: hardware, software, documentation, processes and suppliers all count.

On the examA recall question gives the definition with the word anything or direct or indirect effect. Distractors swap in ‘incident’ or ‘service request’; a change is planned, never an interruption.

The practice that maximizes the number of successful service and product changes by making sure risks are properly assessed, changes are authorized and the change schedule is managed.

On the examPurpose questions hinge on maximize the number of successful changes. Watch the change schedule: it plans changes, helps avoid conflicts and supports incident and problem work.

Guiding principle that says working together across boundaries produces better buy-in and results, and that making work and its progress visible exposes bottlenecks and waste.

On the examScenario cue: a team works in silos, stakeholders are surprised by decisions, or nobody can see work in progress. Insufficient visibility leads to poor decisions is a phrase to recognize.

Any component that has to be managed so that an IT service can be delivered. Configuration items and the relationships between them are recorded by service configuration management.

On the examMissing-word item: ‘any component that needs to be managed in order to deliver an IT service’. The distractor is IT asset, which is about financial value, not delivery.

Don’t confuse with IT asset

A seven-step loop for improvement at any level: what is the vision, where are we now, where do we want to be, how do we get there, take action, did we get there, how do we keep the momentum going.

On the examExpect a step-order question or ‘which step defines measurable targets’ (where do we want to be). Continual improvement is everyone’s responsibility; ideas are tracked in a continual improvement register.

The role that defines the requirements for a service and takes responsibility for the outcomes of consuming it. One person can be customer, user and sponsor at once.

On the examClassic missing-word stem: ‘A [?] defines requirements for services and takes responsibility for outcomes from service consumption.’ Options will be customer, user, sponsor and supplier.

Don’t confuse with User

Value chain activity that ensures services are delivered and supported according to agreed specifications and stakeholder expectations. Most day-to-day operational work, such as resolving incidents, sits here.

On the examPurpose wording is according to agreed specifications and stakeholders’ expectations. Do not confuse it with design and transition, which is about quality, cost and time to market.

The practice that moves new or changed hardware, software, documentation, processes or other components into live environments, and also into testing or staging environments.

On the examKeyword is move components to live environments. If the option says ‘make new and changed services available for use’, that is release management, not deployment.

Don’t confuse with Release management

Value chain activity that ensures products and services continually meet stakeholder expectations for quality, costs and time to market as they are designed and moved into use.

On the examRecognize the triple quality, costs and time to market. Distractors borrow obtain/build wording about components being available when and where they are needed.

Don’t confuse with Obtain/build

A change that must be implemented as soon as possible, for example to fix an incident or apply a security patch. It still gets assessed and authorized, but through an expedited route.

On the examKey facts tested: not usually on the change schedule in advance, may have a separate change authority, and documentation may be reduced or completed afterwards. It is never skipped entirely.

Don’t confuse with Normal change

Value chain activity that builds a good understanding of stakeholder needs, transparency, continual engagement and good relationships with all stakeholders, internal and external.

On the examIf the option mentions understanding stakeholder needs or relationships with all stakeholders, the answer is engage. It is the value chain’s main contact point with the outside world.

Any change of state that matters for the management of a service or configuration item. Events are spotted through monitoring and are classed as informational, warning or exception.

On the examDefinition question uses change of state. Not every event is an incident; only some events need action. That nuance is a common list-style item.

Don’t confuse with Incident

Guiding principle that everything the organization does should link, directly or indirectly, to value for itself, its customers and other stakeholders, starting with knowing who the service consumer is.

On the examScenario cues are customer experience (CX), user experience (UX) or working out who the consumer is. Value is judged by the consumer, not the provider.

The means by which an organization is directed and controlled. In the service value system, a governing body evaluates, directs and monitors the organization’s activities.

On the examOne of the five SVS components. The correct triple is evaluate, direct, monitor; options that list plan, build or deliver describe value chain activities, not governance.

Don’t confuse with Plan

Value chain activity that ensures continual improvement of products, services and practices across all value chain activities and the four dimensions of service management.

On the examWatch for ‘across all value chain activities’. Improve interacts with every other activity, which makes it an easy answer to spot in interconnection questions.

An unplanned interruption to a service, or a reduction in its quality. Something a user notices breaking or slowing down is almost always an incident.

On the examKeywords are unplanned interruption or reduction in quality. If the stem talks about a cause, the answer is problem; if it says a normal request, service request.

Don’t confuse with Problem

The practice that minimizes the negative impact of incidents by restoring normal service operation as quickly as possible. It logs, prioritizes and manages every incident to agreed timescales.

On the examDetail questions: incidents are prioritized by an agreed classification based on business impact, low-impact ones are handled efficiently, and complex ones may pull in suppliers or specialist teams.

Don’t confuse with Problem management

Dimension covering the information and knowledge needed to manage services, plus the technologies that support them, such as databases, communication systems, AI and cloud platforms.

On the examScenario asks what information is created, managed and protected, or which technology supports a service. Security and compliance of information fit here, not in organizations and people.

Any financially valuable component that can contribute to delivering an IT product or service. IT asset management plans and tracks these assets across their whole lifecycle.

On the examMissing word: ‘any financially valuable component’ points to IT asset. Pair it against configuration item, which is defined by being managed to deliver a service.

Don’t confuse with Configuration item

Guiding principle that favors the minimum number of steps needed to reach an objective, removing any process, service or metric that does not create useful outcomes.

On the examCue: a process is bloated with steps or reports nobody uses. Answer eliminates non-value work and uses outcome-based thinking. Distractor is optimize and automate, which comes after simplifying.

Don’t confuse with Optimize and automate

A problem that has been analyzed but not yet resolved. The cause is understood, and often a workaround exists, but a permanent fix has not been applied.

On the examDefinition item: ‘a problem that has been analyzed and has not been resolved’. Error control manages known errors; problem control is where analysis happens.

Don’t confuse with Problem

The practice that systematically observes services and their components, and records and reports selected changes of state identified as events.

On the examPurpose recall with the keyword systematically observe. It detects events; it does not resolve incidents, which belongs to incident management.

A change that is scheduled, assessed and authorized through the standard process. The change authority depends on the type of change, from a local team to top management.

On the examTested against standard changes: a normal change needs authorization every time. Low-risk normal changes can still use a lighter, decentralized authority.

Don’t confuse with Standard change

Value chain activity that ensures service components are available when and where they are needed and meet agreed specifications, whether bought, built or rented.

On the examRecognize available when and where they are needed. Options about moving into live use point to design and transition or deployment, not obtain/build.

Don’t confuse with Design and transition

The two inputs to the service value system. Opportunity is a chance to add value or improve; demand is the need or desire for products and services from customers.

On the examSVS diagram question: inputs are opportunity and demand, output is value. Options offering ‘requirements’ or ‘outcomes’ as inputs are distractors.

Guiding principle to get the most value from human and technical resources: optimize a workflow first, then automate the frequent, repetitive parts so people handle complex decisions.

On the examOrder matters: optimize before automating. An option that automates a broken process first is wrong. Metrics should be used to check the effect of optimization.

Don’t confuse with Keep it simple and practical

Dimension covering roles and responsibilities, formal structures, culture, staffing levels and the competencies people need to create, deliver and continually improve services.

On the examCues are culture, skills, leadership and roles. Everyone should understand how their work contributes to value; that line signals this dimension.

A result for a stakeholder that one or more outputs make possible. The customer cares about the outcome, such as being able to work, not the individual deliverables.

On the examMissing-word definition: ‘a result for a stakeholder enabled by one or more outputs’. Swap-trap with output; the word enabled belongs to outcome.

Don’t confuse with Output

A tangible or intangible deliverable produced by an activity, such as a report, a configured laptop or a completed ticket. Outputs contribute to outcomes but are not the goal.

On the examWatch for ‘a tangible or intangible deliverable of an activity’. If the stem describes what the customer achieves, it is outcome, not output.

Don’t confuse with Outcome

Dimension covering the organization’s relationships with other organizations that help design, deliver and improve services, including contracts and sourcing strategy decisions.

On the examScenario involves outsourcing, service integrators or choosing whether to source a capability externally. Factors such as strategic focus and corporate culture influence the sourcing strategy.

Shorthand for the six external factors that constrain or influence how an organization works across all four dimensions of service management. The organization cannot control them, only respond to them.

On the examQuestion asks which factors influence the four dimensions from outside. Answer is the PESTLE set. They are not a fifth dimension, which is a distractor.

Value chain activity that ensures a shared understanding of the vision, current status and improvement direction for all four dimensions and all products and services.

On the examKeyword is shared understanding of the vision. It is often confused with governance; plan is an internal value chain activity, governance directs and controls.

Don’t confuse with Governance

A cause, or potential cause, of one or more incidents. Problems can be found from recurring incidents, trend analysis or information from suppliers and developers.

On the examKey phrase cause, or potential cause. A problem can exist before any incident happens, which is a common list-style statement to mark as correct.

Don’t confuse with Incident

The practice that reduces the likelihood and impact of incidents by finding their actual and potential causes and managing workarounds and known errors, across three phases.

On the examKnow the phases: problem identification, problem control, error control. Problem control analyzes and documents workarounds; error control manages known errors and reassesses workarounds.

Don’t confuse with Incident management

Guiding principle to break work into smaller, manageable pieces that can be finished and reviewed quickly, using feedback to adjust before moving on.

On the examCue: a big-bang project is failing or scope is too large. The answer breaks it into iterations with feedback loops. Iterations still need an overall view of the whole.

Don’t confuse with Start where you are

The practice that makes new and changed services and features available for use. A release can be deployed and then released later, for example with feature flags.

On the examPurpose wording: make available for use. Deployment moves components; release makes them usable. Swapping these two is the most common trap in this pair.

Don’t confuse with Deployment management

A way to enable value co-creation by making the outcomes customers want possible, without the customer having to manage the specific costs and risks involved.

On the examMissing-word classic: the definition ends with ‘without the customer having to manage specific costs and risks’. Options may offer product, output or service offering.

The practice that captures demand for incident resolution and service requests. It is the entry point and single point of contact between the provider and all its users.

On the examDetail questions stress empathy, understanding of the wider business context and supporting people and business, not just technology. A service desk can be virtual; it need not be one room.

The practice that sets clear, business-based targets for service performance so delivery can be properly assessed, monitored and managed against those targets.

On the examDetail: SLM focuses on the whole service, not just components, and uses customer engagement and feedback. SLAs should link to outcomes, not only operational metrics.

A formal description of one or more services built for a target consumer group. It may bundle goods, access to resources and service actions.

On the examKnow the three parts: goods, access to resources, service actions. Goods transfer ownership to the consumer; access to resources does not.

A request from a user, or their authorized representative, that starts a service action agreed as a normal part of service delivery, such as a password reset or new laptop.

On the examDistinguish from incident: a service request is not a failure. Fulfillment should be standardized and automated where possible, with clear policies on what needs approval.

Don’t confuse with Incident

A documented agreement between a service provider and a customer that identifies the services required and the expected level of service.

On the examQuestions about the SLA itself focus on its content and wording. Watch for the claim that SLAs should be simple and relate to defined outcomes that customers recognize.

The role that authorizes the budget for service consumption. The sponsor pays or approves spending but may never use the service or define its requirements.

On the examMissing-word trigger: ‘authorizes budget for service consumption’. Customer defines requirements, user uses, sponsor funds.

Don’t confuse with Customer

A low-risk, pre-authorized change that is well understood and fully documented, so it can be carried out without additional authorization each time.

On the examKey fact: risk is assessed when the procedure is created, not every time. Standard changes are often raised as service requests. Options demanding per-change approval are wrong.

Don’t confuse with Normal change

Guiding principle to assess and reuse what already exists before building anything new, observing the current state directly instead of relying on second-hand reports.

On the examCue: a manager wants to discard everything and start fresh. Answer: observe and measure the current state first and reuse what works; measurement must not replace direct observation.

Don’t confuse with Progress iteratively with feedback

The operating model at the heart of the SVS: six interconnected activities that combine in different sequences, as value streams, to turn demand into value.

On the examKnow all six: plan, improve, engage, design and transition, obtain/build, deliver and support. Activities can be combined in many sequences; there is no fixed order.

Don’t confuse with SVS

The model showing how all parts of an organization work together to create value. Its components are guiding principles, governance, the service value chain, practices and continual improvement.

On the examComponent list question: five components. Distractors include the four dimensions or specific practices named as components. Inputs are opportunity and demand; output is value.

Don’t confuse with SVC

Guiding principle that no service or component stands alone, so results suffer unless the organization treats its services as a whole and not as separate parts.

On the examCue: a fix in one team causes problems elsewhere, or the stem stresses end-to-end view across all four dimensions. Answer is think and work holistically.

The role that actually uses a service. Users experience the service directly and raise incidents and requests, but may not define requirements or pay for it.

On the examMissing-word item: ‘a person who uses services’. Scenario options mix customer, user and sponsor; match each to requirements, use and budget respectively.

Don’t confuse with Customer

The functionality a product or service offers to meet a particular need; in short, what the service does. Utility makes a service fit for purpose.

On the examRecall definition: functionality offered to meet a particular need. Both utility and warranty are needed for a service to create value.

Don’t confuse with Warranty

The perceived benefits, usefulness and importance of something. Value is subjective and is judged by the stakeholder receiving it, not by the provider.

On the examWatch the word perceived. Questions test that value is co-created and depends on the consumer’s view, not solely on provider effort or cost.

The idea that value is created jointly by the provider and consumer working together, rather than delivered one way from provider to a passive consumer.

On the examList-style item: organizations co-create value through active collaboration with consumers and other stakeholders. Any option saying the provider alone creates value is incorrect.

Dimension covering how the parts of the organization work together: value streams are the series of steps that create and deliver value, and processes turn inputs into outputs.

On the examCue: a scenario about workflow, steps or how activities are coordinated to deliver a product. Value stream steps map to value chain activities.

Assurance that a product or service will meet agreed requirements; in short, how the service performs. Warranty covers areas such as availability, capacity, security and continuity.

On the examRecall definition: assurance of meeting agreed requirements. If the stem says availability, capacity or security, the answer is warranty, not utility.

Don’t confuse with Utility

A solution that reduces or removes the impact of an incident or problem when a full resolution is not yet available. Some workarounds reduce the likelihood of incidents.

On the examTested inside problem management: workarounds are documented in problem records during problem control and can be reassessed during error control.