Safety Norms: IT Service Management

1Purpose, Scope, and Safety Principles

The purpose of these norms is to protect people, facilities, data, and service continuity while IT service management work is carried out. They cover service desk operations, incident and problem management, change and release management, service request fulfillment, configuration and asset management, and service level reporting. They apply to employees, contractors, and vendors who access production systems, physical sites, or customer information.

Three principles guide every activity. First, no one performs unauthorized work on live systems or hazardous equipment. Second, every production change has a documented risk decision before work begins. Third, anyone may stop work when a hazard is unclear and must then escalate. Key terms: a change is any addition, modification, or removal of a service component; a configuration item is a recorded component such as a server, switch, or application; a service level agreement is a contract that defines agreed service targets.

2Roles, Competence, and Accountability

The service owner is accountable for the safety and continuity of a service. The change manager reviews and approves or rejects changes. The incident manager coordinates response to major incidents. The asset custodian keeps accurate records of hardware, including location, serial number, and power requirements. The facilities lead controls physical access, power, cooling, and fire systems. The information security officer sets access and data handling requirements. Each role must be named in the local service catalog or responsibility matrix, and each name must have a deputy.

Competence comes before technical work. Staff need documented training or supervised experience for each task, such as rack installation, cable termination, privileged administration, or field repair. Electrical isolation, fire suppression work, and heavy lifting are performed only by qualified persons, and service desk staff do not open power distribution units or battery cabinets. Authorization is granted in writing by the responsible manager and reviewed when duties change or after a period of inactivity set by local policy.

• Mandatory: privileged access is granted only to named individuals with a current authorization record.
• Mandatory: shared or generic accounts are not used for administrative changes.
• Recommended: pair new technicians with an experienced colleague for their first several live changes.

3Course-Specific Hazards and Risk Assessment

IT service management involves three groups of hazards: physical, operational, and informational. Physical hazards include electrical shock from power distribution units and uninterruptible power supplies, crush injuries from heavy equipment, trips over cabling, heat and noise in equipment rooms, and fire from overloaded circuits or failing lithium batteries. Field work adds driving, work at height on ladders, and contact with cleaning agents or battery electrolyte.

Operational hazards include outages caused by unapproved changes, data loss from untested backups, and incidents that spread because escalation was delayed. Informational hazards include exposure of personal data, passwords pasted into tickets, and misdirected reports containing customer records. Risk is rated as low, medium, or high using likelihood and severity. High risks require documented controls and approval before work begins, and any hazard involving electricity, fire, chemicals, or regulated data must be reviewed by a qualified specialist.

A risk assessment is required for every production change, every site visit involving equipment, and every new tool that handles data. It records the task, hazards, people exposed, existing controls, residual risk, and accountable owner.

• Electrical: treat all racks and distribution panels as energized; isolation is performed only by qualified staff under a documented permit.
• Lifting: equipment heavier than the manufacturer's stated limit requires mechanical aids or at least two trained persons.
• Batteries: swollen, leaking, or damaged batteries are removed from service, isolated from other items, and reported; they are not charged, opened, or punctured.
• Data: production data is never copied to personal devices or unapproved storage.
• Verification: weight, electrical, and battery limits come from manufacturer instructions and local codes, which must be confirmed with qualified professionals.

4Preventive Controls and Safe Work Practices

The change process is the most important preventive control. Every change to a production service requires a request with description, risk rating, implementation steps, test evidence, back-out plan, and approval from the change authority. Emergency changes may skip normal lead times only with a recorded rationale, approval from a duty manager, and a retrospective review completed within the period set by local policy.

Routine safe work practices reduce error. Technicians confirm the correct device by asset tag and serial number before acting, not by location or memory. Maintenance windows are communicated to affected users in advance. Live equipment is avoided where a redundant path or test environment exists. Two-person verification is required for changes to core network devices, storage arrays, identity systems, and firewall rules. The second person checks the plan and the target before execution and records the check.

Access control is a preventive measure. Credentials are stored in an approved vault and rotated under the security policy. Remote sessions use approved tools with logging enabled. Server room access is controlled by badge or key register, visitors are escorted and logged, and doors are never propped open. Work at height is limited to approved step ladders inspected before use; chairs, desks, and stacked boxes are never used as platforms.

• Mandatory: no production change proceeds without an approved change record and a tested back-out plan.
• Mandatory: privileged sessions are logged, and the logs are reviewed by someone other than the operator.
• Mandatory: bulk changes to access rights are checked by a second person before execution.
• Mandatory: cable work follows labeled routing, and cables are not stepped over or left across walkways.
• Mandatory: service request fulfillment verifies requester identity and authority before granting access or moving equipment.
• Recommended: rehearse high-impact changes in a test environment and record the results.

5Equipment, Environment, Information, and Protective Safeguards

Equipment safeguards include tested power distribution, labeled circuits, approved uninterruptible power supplies, temperature and humidity monitoring, and fire detection and suppression maintained by qualified contractors. Staff must not bypass alarms, block cooling airflow, store combustible materials in equipment rooms, or place spare batteries near exits. Environmental controls such as cooling capacity and fire suppression design are set by facilities specialists and verified against manufacturer and local code requirements.

Personal protective equipment depends on the task and site assessment. Field technicians wear safety footwear when lifting, gloves when handling sharp or hot components, eye protection when cutting cable ties or working near compressed air, and high-visibility clothing near roadways. Hearing protection is provided where noise assessments show it is needed. Hygiene matters: wash hands after handling dust, toner, or cleaning agents, and never eat or drink in server rooms. Used batteries, toner, and electronic waste go to authorized disposal or recycling routes.

Information safeguards protect personal and confidential data. Tickets must not contain passwords, full payment card numbers, or health details unless the system is designed for that data. Screens are locked when unattended, printed records are collected or shredded under the records procedure, and screenshots are redacted before sharing. Privacy and data protection obligations vary by jurisdiction and must be confirmed with the privacy officer.

• Mandatory: decommissioned storage media is wiped or physically destroyed under a documented destruction record.
• Mandatory: sensitive data is redacted from logs and screenshots before they leave the controlled system.

6Incident Reporting, Emergency Response, and Escalation

Anyone who observes an injury, electrical burning smell, smoke, water ingress, chemical spill, unauthorized access, suspected data exposure, or service-affecting failure reports it immediately. Life-threatening situations are handled by calling local emergency services first, then the facilities or site lead. Staff do not touch a person in contact with energized equipment. They isolate the power only if trained and it is safe to do so; otherwise they call emergency services and keep clear.

Every incident is logged in the service management tool with time, location, people involved, systems affected, and immediate actions. Near misses, such as an overloaded power strip caught in time or a change started on the wrong device, are reported with the same rigor because they reveal weakness before harm occurs. Major incidents follow the escalation matrix, and the incident manager informs the service owner and, where personal data may be involved, the privacy or security lead within the timeframe set by local policy.

• Fire: activate the nearest alarm, evacuate by the approved route, and do not use elevators.
• Electric shock: do not touch the casualty until power is isolated by a trained person; call emergency services.
• Suspected breach: follow security direction for containment, preserve logs, and do not delete evidence or reboot affected systems unless instructed.
• Emergency numbers and assembly points differ by site and jurisdiction and must be posted and verified locally.
• Recommended: run tabletop exercises for data center outage and ransomware scenarios at each review cycle.

7Records, Training, Inspection, and Review

Records demonstrate that norms are followed. Keep change records, access authorizations, training completions, risk assessments, inspection reports, asset registers, and incident reports in the approved repository. Retention periods depend on contractual, legal, and regulatory obligations, which vary by jurisdiction and must be verified with competent authorities or qualified advisers.

Training covers these norms, emergency procedures, manufacturer instructions for equipment in use, and information handling rules. Refresher training is scheduled by the service owner and triggered by new tools, significant incidents, or role changes. Inspections of equipment rooms, cabling, fire equipment, and power systems are carried out by qualified personnel using a documented checklist, and defects are logged and tracked to closure.

Monitoring closes the loop. Management reviews failed change rate, incident recurrence, overdue inspection actions, access review exceptions, and near-miss trends. Findings produce corrective actions with an owner and due date, and the norms themselves are revised when services, tools, or legal obligations change.

• Mandatory: each authorized person completes role-specific training before privileged access is granted.
• Mandatory: inspection defects that affect life safety or power integrity are escalated immediately and isolated until repaired by a qualified person.
• Recommended: review administrative audit logs for unusual activity at the interval set by the service owner.

8Practical Checklist and Conclusion

These norms are a starting point, not a finished safety program. Local procedures must be adapted to the organization, contracts, equipment, and legal obligations, and approved by accountable managers. Electrical, fire, chemical, and regulated data matters require qualified professionals, formal training, and supervision. This guidance does not replace professional authorization or emergency services. Review the norms after significant service changes, after serious incidents, and at intervals set by management.

Implementation checklist

• Confirm an approved change record and tested back-out plan exist before any production work.
• Verify the asset tag or serial number before altering any device.
• Use only named, authorized accounts for privileged work, and confirm the session is logged.
• Report electrical smells, overheating, damage, or water near equipment to facilities immediately and keep clear.
• Never copy production data to personal devices or unapproved storage, and redact sensitive data from tickets.
• Confirm current training for the task before lifting heavy equipment, working at height, or handling batteries.
• Know the local emergency number, the fire exit route, and the incident escalation contact.
• Log incidents and near misses on the day they are found.
• Verify jurisdiction-specific laws, standards, and manufacturer instructions with competent authorities or qualified professionals.