An e-commerce platform hosted on the cloud is experiencing frequent outages, impacting its availability. To align with ITIL and ISO/IEC 20000-1…

The scenario describes frequent outages, which is a service availability issue. According to ITIL and ISO/IEC 20000-1, the primary process for managing active service interruptions and restoring normal operations as quickly as possible is Incident Management. Establishing a formal Incident Management process provides a structured and efficient approach to detect, log, diagnose, and resolve incidents (outages). This directly addresses the problem of frequent outages and is the foundational step to improving service availability as prescribed by these standards. The other options are supporting activities but not the primary process for handling outages.

B. Penetration testing is a security activity to find vulnerabilities; it does not manage or resolve active outages to restore service availability.

C. Logging and monitoring are essential for detecting incidents, but they are inputs to the Incident Management process, not the process itself that restores service.

D. Data encryption is a security control for confidentiality and integrity, not a process primarily focused on ensuring service availability or managing outages.

1. ISO/IEC 20000-1:2018, Information technology — Service management — Part 1: Service management system requirements. Clause 8.6.2, "Incident management," states the purpose is "to restore normal service operation as quickly as possible and to minimize the adverse impact on business operations."

2. AXELOS. (2019). ITIL Foundation, ITIL 4 Edition. Section 5.2.5, "Incident management," defines the practice's purpose as minimizing the negative impact of incidents by restoring normal service operation as quickly as possible.

3. Iden, J., & Eikebrokk, T. R. (2013). Implementing IT Service Management: A systematic literature review. International Journal of Information Management, 33(3), 512-523. https://doi.org/10.1016/j.ijinfomgt.2013.01.004. The paper discusses the centrality of Incident Management in ITSM frameworks like ITIL for maintaining service levels.