Data Domains & Information Objects

[bkopitzke]

Background: 

The question is around Data Domains and Information Objects.  The data domains serve as a grouping of data elements.  Where the Information Objects are the elements within that domain.  Example below is from a PDI with loaded sample data.

The Information Object CIs are related to the Business Application.  The Business Application an entry defining information about an application the company purchased.  The Application Services is the instances of that application.  

Example:

Business Application: 

• ServiceNow

Application Services:

1. ServiceNow - NA Prod
2. ServiceNow - NA Test
3. ServiceNow - NA Dev
4. ServiceNow - EMEA Prod
5. ServiceNow EMEA Test
6. ServiceNow EMEA Dev

The Business Application is related to these Application Services.

Now I need to know what type of information is stored on Applications.  Documentation points to align information objects to the Business Applications.  Screen shot below is demo data from the same PDI with loaded data.

Question/Issue:

You always want to simplify the number of data review points.  However, by putting that relationship at the Business Application record doesn't realistically identify where that data is.  If you don't have an automated method to determine it, it feels like 1 more layer lower would be accurate.  So - at the Application Service, identify the information Objects as there are instances that do not have the same data elements due to regulatory alignment.  GDPR may limit the system from having certain data for EMEA while North America may have some of the elements.  Even within the regional instance, the pre-prod instances may not have these elements.

Application Services:

1. ServiceNow - NA Prod - Related Information Object
2. ServiceNow - NA Test - Related Information Object
3. ServiceNow - NA Dev - N/A
4. ServiceNow - EMEA Prod - N/A
5. ServiceNow EMEA Test - N/A
6. ServiceNow EMEA Dev - N/A

What is ServiceNow's perspective on this?  If the Information Object isn't mapped at the Business App but at the Application Service?  Are there implications to other functionality in the tool like IRM?

[yveswullaert]

You can link it to cmdb_ci_db_catalog "ServiceNow - NA Prod - Related Information Object" and then link this to the cmdb_ci_db_instance. You just have a 1-1 between your application Service and db_catalog.

See : https://docs.servicenow.com/bundle/sandiego-it-business-management/page/product/application-portfoli...

[Mark178]

HI Mark, is there any more to share on this subject yet?

[Jimmers]

Thanks Mark and everyone else in this thread for the input.

As I read through the thread it seems our organization is experiencing a little bit of everything here. 

On the post by ‘bkoitzke’ on Data Domains, our Security Organization wants to track Data Classification at the database catalog level and implement approval processes for access.  That’s really getting down in the weeds and far below the Business Application level. I understand that MSSQL allows for a Data Classification when creating Instance/Catalog, but it does now seem that ServiceNow at that class level has an attribute to catch the Data Classification if it were sent to the CMDB.

A similar challenge is we can have one Business Application with runs at different geo locations and the Application Service has been modified at those location where data can be at a different Data Classification. We’re considering using information Object for both of the above Use Cases.  I would like to understand if a Best Practice is really or even a Reasonable Practice.

Overall, I’m really wondering if there is a line that should not be crossed, as to what classes of Cis we should not relate Information Objects to.

By the way Mr. Mark Bodman, that’s for everything you do. I learn so much.😀

[bkopitzke]

So basically, they can be linked anywhere.  There really isn't a standard where updates by ServiceNow will break?  Reason - we do not have the resources to maintain it at the infrastructure level.  Just knowing what instance of a business application has the information is a good landing at this time.