ServiceNow Change Enablement Requirements Workshop Questions
What a Requirements Workshop Achieves
A Change Enablement requirements workshop is a structured conversation with stakeholders (IT operations staff, change managers, compliance teams, business process owners) to understand what the organisation needs from change management and how Change Enablement should work in their specific context. The workshop produces a question bank and requirements document that guide later implementation decisions. It is not a software specification; it is a business requirements exercise that prepares teams for platform configuration.
The workshop focuses on: what changes happen in the organisation (categorisation), who makes decisions about changes (governance), how fast must changes move (approval timelines), what happens if a change fails (rollback procedures), and how do we stay compliant (audit requirements). Each question reveals assumptions that teams hold, sometimes incorrectly. A good workshop surfaces these assumptions and builds alignment.
Questions Grouped by Change Governance Theme
Governance questions establish who decides about changes and what authority they hold. Who can submit a change? (Any employee or only authorised teams?) Who approves urgent changes versus routine changes? (Different approvers for different severities?) What is the fastest an urgent change can be approved, and is that time written down? How often does the change advisory board meet, and is there an out-of-cycle process for emergencies? Are there changes that require executive approval, and if so, what triggers that? Can changes be cancelled once approved, or are they locked? These questions establish the governance culture.
Categorisation questions address how to classify changes. Standard changes (common, low-risk, pre-approved procedures) versus normal changes (normal workflow, approval required). Emergency changes (responding to outages) versus planned changes (scheduled maintenance). Do different types follow different approval paths? Are some changes automatically approved because they are low-risk (resetting a password, patching a test server)? Clear categorisation prevents arguing about approval timelines during an outage.
Implementation questions address the mechanics of change execution. Who implements changes? (IT staff, contractors, automation?) How is change success verified? (Automated tests, manual checklist, customer feedback?) How long does a change have to stay “implemented” before it can be closed? (A fixed period, or until verified?) If a change causes issues, who decides whether to rollback or forward-fix? These questions expose the difference between what teams think happens and what actually happens.
What Each Answer Changes in the Design
Answers to governance questions drive workflow configuration. If the organisation has three approval paths (standard, normal, emergency), that requires three different workflow definitions. If the CAB meets Fridays and no out-of-cycle process exists, change implementation is constrained to post-CAB approval. If some changes are auto-approved and others require human review, ServiceNow must be configured to distinguish them and route appropriately.
Answers to categorisation questions drive the change type definitions and selection criteria. If changes are categorised by risk level rather than by type, the interface prompts for risk (high, medium, low) not change type. The selection criteria must be clear enough that submitters make correct categorisations without constant guidance. Vague categories create inconsistent data.
Answers to implementation questions drive integration design. If manual checklists verify success, workflows must include a step for manual sign-off. If automation is used, scripts must be written and tested. If rollback is automatic, you need rollback procedures. Each design choice has implementation cost and operational implications; the workshop makes that cost visible.
Warning Signs from Workshop Answers
Red flags from workshops often predict implementation problems. If teams disagree about what qualifies as a change (one team says configuration changes require approval, another does not), implementation will fail because stakeholders will not trust the system. Spend time in the workshop reaching consensus on definitions. If no one can articulate the current change approval timeline, the organisation probably has no process; implement a simple one first before automating complexity. If stakeholders expect changes to be implemented immediately but audit requires a 7-day waiting period, there is a mismatch that must be resolved before the tool is built.
Another warning: teams that have strong opinions but have never measured current performance. “Change approval is too slow” might be a real bottleneck or an exaggeration. Collect baseline data (how long did recent changes take?) before deciding to automate. Automate what is actually broken, not what feels broken.
Using Workshop Questions in Configuration
After the workshop, the question bank becomes the specification for configuration. Each question about governance becomes a configuration choice (how many approval levels, who are approvers, what are SLAs). Each question about categorisation becomes a change type or category field with defined values. Each question about implementation becomes a workflow step (approval, implementation, verification, closure). The workshop questions are not thrown away; they become the traceability between business requirements and platform configuration.
Matching questions to the people who can answer them
A workshop with the wrong mix of attendees produces confident answers that the people implementing the change cannot use. Before the session, map each question area to the role best placed to answer it, drawing on the roles and RACI guidance, then invite that role for the portion of the session where it matters. Attendance does not need to be constant. The table below shows the question areas that often go unanswered, and the attendee who usually holds the knowledge.
| Question area | Best-placed attendee | Sign of a weak answer |
|---|---|---|
| Which changes actually happen today | Team leads who submit changes, not the change manager | An answer that describes the policy rather than practice |
| Who may approve at each risk level | Approvers themselves, in their own words | A list of job titles with no statement of what each may decide |
| What data the change process depends on | Owners of the configuration data and the source systems | Confidence in data that nobody has measured |
| How changes are reported to leadership | Whoever prepares the current reports | A wish for dashboards with no definition of the numbers |
| What audit must be able to show | Compliance or internal audit representative | Requirements phrased as we will be compliant, without a named evidence source, which the audit trail evidence notes address |
Questions about the data the process will rely on
Many workshops skip data questions because they feel technical, and then discover in testing that the process has nothing reliable to act on. Ask which configuration items a typical change touches, and whether anyone can say how current those records are. The CMDB data quality rules give a useful vocabulary for that conversation. Ask which fields submitters currently fill in by hand and which they copy from elsewhere, because copied fields are where stale data enters the record. Ask what happens to a change whose target no longer exists. Each answer decides whether the workflow needs a validation step, a lookup or a manual check.
Questions about notification and who must know
Ask who needs to hear about a change before it happens, who needs to hear after it has finished, and who needs to hear only if it fails. These three groups often differ, and a workshop that collapses them into a single distribution list can create noisy notices and missed alerts. Ask also how people currently learn that a change is happening. If the answer is a chat channel or a hallway conversation, the new process has to replace that channel, not sit beside it.
A procedure for running the session
- Send the question bank to attendees in advance, with the areas they are expected to answer marked.
- Open with two or three real changes from the last quarter, and ask the room to walk through how each one was actually approved.
- Work each question area in turn, and when an answer begins with it depends, write down the conditions in the room’s own words.
- Record every disagreement in a decision log, in the same spirit as the requirements workshop decisions notes, with the names of the people who disagreed and the question that will settle it.
- End by reading the decision log aloud and having the room confirm each entry. Anything that is not confirmed goes to a named owner with a date for the next review.
Questions to leave out of the first session
Some questions cannot be answered well in a workshop and should be parked. Detailed reporting layouts, the exact wording of notification templates and the choice of approval tool for minor changes are often better handled after the decision log exists. Including them early lengthens the session and can move the room from requirements into preferences. Park them explicitly, so attendees can see the question is still on the list. They can then be picked up in the implementation roadmap.
Turning answers into configuration
The output of the workshop is a decision log that a platform administrator can read without attending. Each entry should state the decision, the condition under which it applies, the owner and the configuration element it affects, such as an approval rule, a change type or a notification. Entries that do not map to any configuration element are either policy, which belongs in the governance material, or unfinished thinking, which should be returned to the room.
Questions readers ask about running a session
How many people should attend?
Enough to answer every question area, and no more. Observers can join for one session, but a room of people who are only listening rarely produces decisions.
What if two senior people disagree about a category?
Record both positions in the decision log, test each against two real recent changes, and let the evidence decide. Do not settle a disagreement by seniority, because the people who lose can then work around the result.
Can the workshop be replaced by a survey?
A survey can gather the inventory, but it cannot surface the assumptions that differ between teams. Use it to prepare the session, not as a substitute for it.
Frequently asked questions
What is the difference between standard and normal changes?
Standard changes are pre-approved, low-risk changes with documented procedures. Examples: reset a forgotten password, patch a test server using established procedures. They can be implemented immediately without additional approval. Normal changes require approval and are tracked individually. Emergency changes are unplanned responses to outages. Clearly separating these categories speeds up change management and reduces unnecessary approvals.
Do we need CAB approval for every change?
Not for low-risk changes. A typical change management strategy uses CAB approval for high-risk or high-impact changes (touching production systems, crossing departments, affecting customers). Standard changes and routine maintenance use auto-approval or delegated approval. CAB approval for everything creates bottlenecks; CAB approval for nothing provides no governance. Find the middle ground appropriate to your risk tolerance.
What data should we collect in a change request?
Collect what you need to make the approval decision: what is changing, why is it changing, who is implementing it, when will it happen, how long will it take, what is the rollback plan, and who is affected. Avoid collecting data that no one uses. If auditors require extensive documentation, collect it, but do not collect it just to have it. Some fields can be auto-populated from the CMDB (affected CIs) rather than manually entered.
Related guides
Related Oblytech services
Where this topic turns into delivery work, these are the Oblytech services that cover it.
Planning, running or fixing a ServiceNow programme? Tell us where you are and we will suggest a sensible next step.
Contact us