The ITSM Practice: Elevating ITSM and IT Security Knowledge

Without a Service Management Office, ITSM Is Just Theatre

The ITSM Practice: Elevating ITSM and IT Security Knowledge

Show Notes

Discover why 70% of ITSM initiatives fail and how a strategic Service Management Office (SMO) transforms ITIL from theory into business value. Learn the six-step SMO blueprint, key metrics, and pitfalls to avoid to elevate ITSM maturity and governance.

In this episode, we answer to: What is a Service Management Office and why is it critical for ITSM success? How do you build an SMO with governance, value alignment, and CIO-level sponsorship? Which metrics and maturity levels define real ITSM performance and business impact?

Resources Mentioned in this Episode: Pink Elephant website, whitepaper "The IT Service Management Office", link https://www.pinkelephant.com/uploadedfiles/Resources/PinkPapers/The-IT-Service-Management-Office.pdf

Littlefish website, article "Strategic Power of a Service Management Office (SMO)", link https://www.littlefish.co.uk/insights/service-management-office-smo/

IT Process Maps, article "ITIL Service Strategy", link https://wiki.en.it-processmaps.com/index.php/ITIL_Service_Strategy

Echolon website, article "The importance of an effective ITIL® service strategy for success in IT service management", link https://www.echolon.de/en/blog/itil-it-service-strategy/

Scrumprep website, article "Answering: Which metrics will help a Product Owner determine if a product is deliverying value?", link https://scrumprep.com/answering-which-metrics-will-help-a-product-owner-determine-if-a-product-is-delivering-value/

Value Delivery Metric website, video https://youtu.be/pjnkWgq7I6I

ITSM Tools website, article "The Making of an IT Service Management (ITSM) Maturity Model", link https://itsm.tools/the-making-of-a-maturity-model-an-approach-to-culture-and-client-support/

Navvia website, whitepaper "The Making of an IT Service Management (ITSM) Maturity Model", link https://navvia.com/hubfs/MKTG Folder/Learn center - Courses Slides/SMO Service Management Office -Slides.pdf

Connect with me on: LinkedIn: https://www.linkedin.com/in/theitsmpractice/ Website: http://www.theitsmpractice.com And if you want more tips and guidance, follow me on LinkedIn. I am sharing daily posts regarding Enterprise Service Management, IT Service Management, and IT Security.

Credits: Sound engineering by Alan Southgate - http://alsouthgate.co.uk/

Graphics by Yulia Kolodyazhnaya

More from The ITSM Practice: Elevating ITSM and IT Security Knowledge

Oct 20, 2026

How can an MSP grow revenue without growing headcount at the same rate? In this episode of The ITSM Practice Podcast, Luigi Ferri explores how MSPs can protect margins through a scalable Target Operating Model, standardization, automation, AI, knowledge management, self-service, suppliers, and Professional Services.

Oct 13, 2026

What happens when a cyber-physical threat crosses Cybersecurity, Physical Security, Facilities and IT Operations? This episode explores how SOC teams can correlate signals, establish incident ownership, define escalation thresholds and build a unified operating model to protect critical infrastructure and business services.

Oct 6, 2026

Does your SOC really protect the entire business, or does its visibility stop at the firewall? In this episode of The ITSM Practice Podcast, Luigi Ferri explores drone threats against data centers and what they reveal about gaps between Cybersecurity, Physical Security, Facilities, IT Operations and Business Continuity. Discover why CISOs need to rethink the traditional cyber attack surface and focus on protecting the complete service.

Sep 29, 2026

AI that summarizes an incident is one thing. AI that disables accounts, isolates endpoints and blocks connections is another. In this episode of The ITSM Practice Podcast, Luigi Ferri explains the ITIL 5 6C Model for AI and why CIOs, CISOs and MSPs need to stop asking, “Are we using AI?” and start asking, “What are we allowing AI to do?”

Sep 22, 2026

A critical vulnerability is not automatically a critical business risk. If your CMDB only tells you which server is affected but not the customer, service, contract, SLA, or revenue behind it, you are missing the information that matters. This episode explains why CISOs need a business-aware CMDB to connect technical risk with real business impact.

See all episodes →