Chapter 18 of 20
ITIL and AI: AI‑Ready Service Management and Responsible AI
Explore how ITIL (Version 5) incorporates AI into modern service management and what responsible AI looks like in real exam and workplace scenarios.
Big Picture: ITIL Version 5 Meets AI
ITIL V5 + AI: The Connection
AI in ITIL Version 5 is not a new framework. It is a powerful set of tools that support almost every part of the service value system and service value chain activities.
Service Management + AI
Service management is "A set of specialized organizational capabilities for enabling value for customers in the form of services." AI is one of those capabilities, not a replacement.
Where AI Shows Up
You see AI especially in the guiding principle optimize and automate and in updated practices like incident management, monitoring and event management, and service request management.
Responsible AI
The exam also expects you to understand responsible AI: transparent, fair, accountable, and compliant with laws like GDPR and newer AI regulations such as the EU AI Act.
What You Will Do
In this module you will map AI to value streams and practices, link it to the seven guiding principles, and practice spotting responsible vs irresponsible AI in scenarios.
Key AI Concepts for ITIL Students
AI vs ML vs Automation
AI performs tasks needing human-like intelligence. ML is AI that learns from data. Automation is executing tasks with minimal human intervention; AI often powers smarter automation.
Generative AI
Generative AI creates new content (text, images, code). In ITSM it can draft knowledge articles, summarize incidents, or power conversational virtual agents.
Algorithmic Decisions
Algorithmic decision-making means decisions or recommendations come from algorithms, sometimes with limited human review, such as auto-approving low-risk changes.
Value Co-Creation and AI
Value co-creation is "The joint activities performed by a service provider and a service consumer to create value." AI changes how those joint activities happen, e.g. via AI chat or predictive alerts.
Common Exam Trap
Do not confuse AI with simple scripts. If the scenario mentions learning from history or predicting outcomes, think AI/ML rather than basic automation.
AI in the Service Value System and Value Streams
Service Value System + AI
The service value system is "a model representing how all the components and activities of an organization work together as a system to enable value creation." AI can enhance each component.
AI Along a Value Stream
In a "Restore user productivity" value stream, AI can triage issues, classify them, suggest fixes, and feed insights back into improvement.
AI in Engage and Support
AI-powered virtual agents handle first contact, while AI recommends ticket priority, assignment, or triggers auto-remediation for known errors.
AI Across the Value Chain
AI supports plan, engage, design and transition, obtain/build, deliver and support, and improve through forecasting, personalization, simulation, and analytics.
Exam Angle
When a scenario mentions predictive, self-service, or data-driven behavior, identify which service value chain activities AI is supporting and how that creates value.
AI and the Guiding Principles: Especially Optimize and Automate
Seven Guiding Principles
The seven guiding principles are: focus on value, start where you are, progress iteratively with feedback, collaborate and promote visibility, think and work holistically, keep it simple and practical, optimize and automate.
Optimize Before Automate
With AI, first simplify and improve the process. Automating a poor process with AI just makes bad experiences happen faster and more often.
Focus on Value
Apply AI where it measurably improves outcomes, like faster resolution or better reliability, not just because it is fashionable technology.
Iterative AI Deployment
Use existing data, deploy AI features in small steps, collect feedback, and refine. This reflects start where you are and progress iteratively with feedback.
Holistic and Practical
Think about how AI in one practice affects others, and prefer simple, transparent solutions where possible. Exam answers that just say "automate everything" are red flags.
AI-Enabled Practices: Incidents, Requests, Monitoring, and Changes
Incidents + AI
AI can classify incidents, recommend resolutions, and predict major incidents from monitoring data. This speeds restoration but can misclassify or bias priorities.
Requests + Virtual Agents
In service request management, AI chatbots handle common requests and route complex ones. Great for 24/7 support but risky if there is no clear human escalation.
Monitoring + Event Correlation
AI in monitoring and event management correlates many events into likely root causes and detects anomalies, reducing noise but risking misses or false alarms.
Change Enablement + Risk Scoring
AI can score change risk and auto-approve low-risk changes under policy, improving speed and consistency but raising concerns about opaque or unfair scoring.
Utility and Warranty
Link AI use to utility ("The functionality offered by a product or service to meet a particular need.") and warranty ("Assurance that a product or service will meet agreed requirements.").
Responsible AI: Fairness, Transparency, Accountability, Risk
Responsible AI in ITIL
Responsible AI is about how you use AI. ITIL offers structures to manage risk, quality, and value but does not replace legal or ethical frameworks.
Transparency
People should know when they interact with AI and what data is used. Important decisions should be explainable at a level matching their risk.
Fairness
AI should not systematically disadvantage groups. Check training data and outputs for bias, such as unfair workload routing.
Accountability
Humans stay responsible. Someone must own the AI system, monitor it, and retain authority to override or disable it.
Risk and Compliance
AI must respect privacy and security rules like GDPR. High-risk AI needs stronger controls and oversight, as seen in laws such as the EU AI Act.
Thought Exercise: Value, Risk, and AI in a Service Desk
Work through this scenario mentally and, if you can, jot down notes. This will train you to think like the exam.
Scenario
Your organization runs a 24/7 IT service desk for global customers. Management wants to introduce an AI-powered virtual agent to handle up to 60% of incoming contacts.
The proposed AI will:
- Answer common "how do I" questions
- Reset passwords after verifying identity
- Create incident tickets and suggest priority
- Escalate to humans when confidence is low
Task 1: Identify value and risks
- List at least three potential value gains for:
- Users
- The service provider
- List at least three key risks (think about fairness, transparency, accountability, and compliance).
Task 2: Map to guiding principles
For each of these principles, write one sentence on how it should shape the AI deployment:
- focus on value
- progress iteratively with feedback
- collaborate and promote visibility
- optimize and automate
Task 3: Decide what to automate
Imagine you are in a design workshop. Which of these would you automate immediately, and which would you keep under human control at first?
- Password resets
- Priority assignment
- Identity verification
- Closing incidents automatically after a proposed solution
There are no single "correct" answers here. The important part is the reasoning: do your choices increase value while managing risk and keeping humans accountable?
Quiz 1: AI, Value, and Guiding Principles
Answer this question to check your understanding of AI’s role and the guiding principles.
An organization wants to use AI to auto-assign incident tickets to support teams. Which option best reflects ITIL Version 5 guidance on using AI in line with the guiding principles?
- Deploy the AI model immediately and route all incidents through it to maximize automation.
- First analyze the current assignment process, simplify categories, pilot the AI with a subset of incidents, and adjust based on feedback.
- Allow each support team to build its own AI model independently so that innovation is not slowed down by central governance.
- Replace all human triage with AI as soon as the model reaches 70% accuracy, because further optimization will happen automatically.
Show Answer
Answer: B) First analyze the current assignment process, simplify categories, pilot the AI with a subset of incidents, and adjust based on feedback.
Option B aligns with multiple guiding principles: **start where you are** (analyze current process), **keep it simple and practical** (simplify categories), **optimize and automate** (improve before automating), and **progress iteratively with feedback** (pilot and adjust). The other options over-automate without optimization, ignore governance, or remove human oversight too quickly.
Quiz 2: Spotting Irresponsible AI Use
This question checks your understanding of responsible vs irresponsible AI in ITIL scenarios.
A monitoring team deploys an AI system that automatically closes "low-priority" alerts without human review. After a few weeks, a serious outage occurs because a critical alert was misclassified and closed. Which ITIL-aligned critique is MOST accurate?
- The problem is using AI in monitoring and event management; AI should only be used for service request management.
- The team failed to apply responsible AI practices by removing human oversight from decisions with significant risk and not validating the model’s impact.
- The outage shows that AI models can never reach 100% accuracy, so they should not be used in any production environment.
- The team should have optimized the change enablement practice first; monitoring and event management is not part of the service value chain.
Show Answer
Answer: B) The team failed to apply responsible AI practices by removing human oversight from decisions with significant risk and not validating the model’s impact.
Option B is correct. ITIL encourages using AI but with appropriate risk management, validation, and human oversight, especially where failures have serious impact. Option A is wrong because AI is valid in monitoring and event management. Option C is too extreme; ITIL expects risk-based use, not a ban. Option D misunderstands the service value chain; monitoring and event management clearly supports deliver and support and improve.
Flashcards: Core Terms for ITIL and AI
Use these flashcards to reinforce key ITIL definitions and how they relate to AI.
- service
- A means of enabling value co-creation by facilitating outcomes that customers want to achieve, without the customer having to manage specific costs and risks.
- service management
- A set of specialized organizational capabilities for enabling value for customers in the form of services.
- value co-creation
- The joint activities performed by a service provider and a service consumer to create value.
- service value system
- A model representing how all the components and activities of an organization work together as a system to enable value creation.
- service value chain activities (list all 6)
- plan, improve, engage, design and transition, obtain/build, deliver and support.
- Seven guiding principles (list all 7)
- focus on value, start where you are, progress iteratively with feedback, collaborate and promote visibility, think and work holistically, keep it simple and practical, optimize and automate.
- utility
- The functionality offered by a product or service to meet a particular need.
- warranty
- Assurance that a product or service will meet agreed requirements.
- continual improvement
- A recurring activity performed at all levels to ensure that an organization’s performance continually meets stakeholders’ expectations.
- How does AI typically support the guiding principle "optimize and automate"?
- By analyzing data to improve (optimize) processes and then automating well-understood, high-value, low-risk tasks, while keeping appropriate human oversight.
- What is a key ITIL-aligned safeguard when using AI for decision-making?
- Maintain human accountability and oversight for decisions with significant risk, ensuring transparency, fairness, and compliance with policies and law.
Exam-Style Scenarios: Responsible vs Irresponsible AI
Scenario A: Change Risk AI
AI scores change risk; low-risk standard changes may be auto-approved under clear rules, with monthly CAB review. This is responsible, with oversight and continual improvement.
Scenario B: Employee Monitoring AI
AI scores "productivity" from keystrokes, triggering HR action without transparency or appeal. This is irresponsible, raising fairness, privacy, and accountability issues.
Scenario C: Banking Chatbot
A generative AI chatbot sometimes invents loan terms; leadership ignores the problem. This fails focus on value and trust, and is likely non-compliant.
Exam Strategy
In questions, favor options where AI enhances value, risks are managed, humans stay accountable, and guiding principles like optimize and automate are clearly applied.
Pulling It Together and Next Steps in Your Path
What You Should Now Be Able to Do
Explain basic AI concepts, map AI to value streams and service value chain activities, and relate AI use to the seven guiding principles.
Responsible AI Recap
You should recognize when AI use is transparent, fair, accountable, and risk-managed, and spot when it irresponsibly replaces human judgment.
Workplace Application
When someone proposes AI, ask: Where is the value? What are we optimizing? Who is accountable? How do we manage risk and compliance?
Your Next Study Steps
In this Skarp course, take the diagnostic for "ITIL and AI", try the mock exam, and let spaced review highlight any gaps to revisit.
Key Terms
- service
- A means of enabling value co-creation by facilitating outcomes that customers want to achieve, without the customer having to manage specific costs and risks.
- utility
- The functionality offered by a product or service to meet a particular need.
- warranty
- Assurance that a product or service will meet agreed requirements.
- generative AI
- AI models that create new content (such as text, images, or code) based on patterns learned from training data.
- responsible AI
- The practice of designing, deploying, and operating AI systems in ways that are transparent, fair, accountable, and compliant with applicable laws and risk management expectations.
- value co-creation
- The joint activities performed by a service provider and a service consumer to create value.
- service management
- A set of specialized organizational capabilities for enabling value for customers in the form of services.
- service value chain
- A set of interconnected activities that an organization performs to deliver a valuable product or service to its consumers and to facilitate value realization.
- service value system
- A model representing how all the components and activities of an organization work together as a system to enable value creation.
- continual improvement
- A recurring activity performed at all levels to ensure that an organization’s performance continually meets stakeholders’ expectations.
- machine learning (ML)
- A subset of AI where models learn patterns from data instead of being explicitly programmed.
- algorithmic decision-making
- Decisions or recommendations produced by algorithms, sometimes with limited human review, that can affect services and stakeholders.
- AI (Artificial Intelligence)
- Systems that perform tasks normally requiring human intelligence, such as understanding language, recognizing patterns, making predictions, or taking decisions under uncertainty.