Glossary

ServiceNow speak, translated. ITIL-aligned summaries explain service-management concepts; practitioner explanations and examples show how to use them. These are plain-English guides, not verbatim ITIL definitions or product prerequisites.

Agent (which kind?)

Practitioner explanation: an overloaded word. A human support agent is a person; an AI agent uses AI to reason and act; a software agent may simply collect data or run predefined instructions. Ask what it can decide, what it can access, and who authorizes its actions - the word alone does not tell you.

Agentic workflow

Practitioner explanation: a process where one or more AI agents interpret a goal and choose or adapt some steps using context and tool results. Example: investigate an unfamiliar error by choosing which approved diagnostic to run next. This can include deterministic steps and human approval; agentic does not mean unconstrained or fully autonomous.

AI agent

Practitioner explanation: software that uses an AI model to interpret a goal, reason about the next step, and use available tools within configured permissions. Example: investigate a login issue by checking approved knowledge and account information, then propose a remedy. It is not a human support agent, and a useful answer does not itself authorize a record update. See agentic workflow and human approval.

Autonomous execution

Practitioner explanation: specified actions proceed without a person approving each execution, within defined permissions and policy. Example: an approved low-risk process automatically classifies incoming tickets. Autonomy is scoped, not unlimited authority; sensitive actions can still require human approval, and guardrails still apply.

AWA (Advanced Work Assignment)

The engine that pushes work to the right agent automatically - by availability, capacity, and skills - instead of agents cherry-picking from a queue. See Advanced Work Assignment (AWA).

Catalog Item

One orderable thing in a service catalog - "MacBook Pro," "VPN access," "new hire onboarding" - with its own form, approvals, and fulfillment workflow. The building block behind every Request (Service Request).

Change

ITIL-aligned summary: an addition, modification, or removal that could affect a service. Change enablement manages risk and authorization; not every change needs a meeting or individual approval, since standard changes can be pre-authorized. Example: replace a failing email server under an agreed change model, rather than treating the incident ticket itself as permission. See Change Management.

CMDB (Configuration Management Database)

ServiceNow's inventory of the things your business runs on - servers, apps, laptops, cloud resources - and how they connect. See CMDB Foundation for what it takes to build one.

Configuration Item (CI)

One entry in the CMDB: a single tracked thing, like "the payroll server" or "Jane's laptop." Incidents and changes link to CIs so the system knows what's affected.

CSM (Customer Service Management)

Supporting your external customers the way ITSM supports employees: intake from any channel, cases tracked to resolution, and front-office work connected to the back-office teams who fix things. See the Customer Service Management (CSM) family.

Deterministic workflow

Practitioner explanation: workflow control follows predefined rules for the supplied inputs and state. It can branch, loop, wait for approvals, call integrations, and use AI steps; an AI result is not thereby deterministic. Example: route a laptop request by cost and department, then wait for approval. Contrast an agentic workflow, where AI can choose some next steps.

GRC (Governance, Risk & Compliance)

Managing enterprise risk and regulatory compliance as continuous programs instead of spreadsheet exercises: risk registers, policies and controls, and internal audit. See the Governance, Risk & Compliance (GRC) family.

Guardrails

Practitioner explanation: controls that constrain AI inputs, outputs, access, or actions. Example: limit an agent to approved read-only tools, validate its proposed values, and require human approval before a sensitive write. ServiceNow also uses the term for content-safety checks. Instructions alone are not an access-control boundary, and guardrails do not eliminate hallucinations.

Hallucination

Practitioner explanation: AI-generated content that sounds plausible but is false or unsupported by the available evidence. Example: an agent invents a knowledge article or claims an account was updated without a successful tool result. Check sources and actual outcomes; confident wording is not proof. Guardrails reduce risk but do not guarantee correctness.

HRSD (HR Service Delivery)

The HR team's service desk: employee questions and requests handled as confidential cases, plus automated onboarding/offboarding journeys. See HR Service Delivery (HRSD) and the Employee Service Management (ESM) family.

Human approval

Practitioner explanation: an authorized person explicitly accepts or rejects a proposed action before it proceeds. Example: an AI drafts an access change, but the designated owner approves the specific change before execution. Reading a draft or an AI saying “approved” is not approval. Tool-level supervision and business approval are distinct controls; design the required checkpoint. Compare autonomous execution.

Human support agent

Practitioner explanation: a person who handles support work, such as a service-desk analyst investigating a login failure. They may use AI suggestions, but remain distinct from the AI agent producing them. In assignment or capacity discussions, confirm whether “agent” means a person or software.

Incident

ITIL-aligned summary: an unplanned interruption to a service or reduction in its quality. Incident management prioritizes restoring service; it can use a workaround before the cause is understood. Example: restart the email service to get people working, then investigate the problem. See Incident Management.

Instance

Your company's own copy of ServiceNow, running in the cloud at its own web address (like yourcompany.service-now.com). Most organizations have at least two: one for real work (production) and one for testing changes safely.

ITAM (IT Asset Management)

Managing what you own and what it costs: hardware from purchase to disposal (HAM), software licenses and audit risk (SAM), and non-IT equipment (EAM). See the IT Asset Management (ITAM) family.

ITOM (IT Operations Management)

Keeping the IT estate healthy and known: automatically discovering what you run, correlating monitoring alerts into action (Event Management), and mapping infrastructure to business services (Service Mapping). See the IT Operations Management (ITOM) family.

ITSM (IT Service Management)

How an IT department supports the business: handling outages (incidents), fixing root causes (problems), and making changes safely (changes). The most common starting point for ServiceNow. See the IT Service Management (ITSM) family.

OTM (Operational Technology Management)

Extending asset, service, and security management to industrial systems - the machines and controllers that run factories and utilities, where safety and uptime rules differ sharply from IT. See Operational Technology Management (OTM).

Problem

ITIL-aligned summary: a cause, or potential cause, of one or more incidents. The cause need not be known when investigation starts, and a problem is not simply a severe incident. Example: investigate why email repeatedly crashes even after each outage is restored. A fix may require a change. See Problem Management.

Request (Service Request)

ITIL-aligned summary: a user asks for an agreed, normal part of service delivery, rather than reporting a service interruption. Example: request VPN access for a new starter; report an incident when existing VPN access unexpectedly stops working. A password reset can be a request when offered as a standard service action. In ServiceNow, catalog items provide a common request entry point; not every request needs approval.

SecOps (Security Operations)

The security team's workflows on the platform: responding to security incidents (SIR), prioritizing vulnerabilities (Vulnerability Response (VR)), and enriching investigations with threat intel. See the Security Operations (SecOps) family.

Service

ITIL-aligned summary: a way to help customers achieve outcomes without having to manage all the underlying costs and risks themselves. Example: an email service lets staff communicate without operating mail servers. The service is the ongoing outcome, not one request, server, or catalog item. Compare a service offering.

Service offering

Practitioner explanation: a defined way a service is made available to a particular consumer group, with stated scope and commitments. Example: the same email service might have a standard office-hours offering and a premium round-the-clock support offering. A catalog item is an orderable entry point, not automatically the offering itself.

Single Sign-On (SSO)

Letting people log in to ServiceNow with the same company login they already use everywhere else (via tools like Azure AD/Entra or Okta), instead of another username and password. Set up during Platform Core Setup.

Software agent

Practitioner explanation: software that performs work on behalf of a user or system. It need not use AI or choose its own plan. Example: a monitoring agent on a server sends CPU measurements on a schedule. An AI agent is a more specific use of the term, not a synonym for every background program.

SPM (Strategic Portfolio Management)

Planning work at the portfolio level: capturing ideas (Demand Management), running projects (PPM), staffing them (Resource Management), and connecting it all to strategy (Strategic Planning). Formerly called ITBM. See the IT Business Management / Strategic Portfolio Management (SPM) family.

TNI (Telecom Network Inventory)

The authoritative model of a carrier's network - physical equipment, logical services, and how they relate - that telecom order management and assurance depend on. The telecom-grade version of a CMDB. See Telecom Network Inventory.

TSOM (Telecom Service Operations Management)

A carrier's network-operations toolkit: detecting network faults and mapping them to the services and customers they affect, using the network inventory (TNI). See Telecom Service Operations Management (TSOM).

Workaround

ITIL-aligned summary: a way to reduce or remove the impact of an incident or problem when full resolution is not yet available. Example: use webmail while the desktop mail client is failing. Service can be restored without proving the underlying problem is fixed.