Open Access
CMDB Data Governance and Business Continuity: Identifying Research Gaps in AI-Driven IT Operations
4
Senior Web Application Developer, MathWorks Inc
Abstract
The Configuration Management Database (CMDB) is widely positioned as the authoritative record of IT infrastructure and its relationships to business services, yet industry surveys consistently report accuracy levels around 60 percent and find that a majority of CMDB implementations fail to meet their intended objectives. This gap between the CMDB's intended role and its practical reliability has been studied from several angles: general data governance frameworks, machine learning approaches to configuration data quality, and, increasingly, artificial intelligence integration within IT service management platforms. This paper reviews that literature and argues that one consequential intersection remains comparatively under-examined: the relationship between CMDB data governance and Business Continuity and Disaster Recovery (BCDR) outcomes, particularly as AI-driven and increasingly agentic IT operations begin to act on CMDB data with reduced human review. Drawing on recent work in CMDB-focused machine learning, AI integration in IT service management, general data governance frameworks, business continuity and cyber-resilience research, and the longer-standing literature on trust in automation, this review identifies a structural gap: existing work addresses CMDB data quality in general terms, or business continuity in general terms, but rarely connects specific CMDB governance dimensions to specific continuity and recovery outcomes. This is a targeted, narrative literature review rather than a systematic one, and its contribution is a research agenda rather than a new empirical study: an explicit characterization of this gap, expressed as a set of governance dimensions and framework requirements capable of addressing it, intended as the basis for continued research.
Keywords
Configuration Management Database,
CMDB,
Data Governance,
Business Continuity,
Disaster Recovery,
IT Service Management,
ITIL,
Artificial Intelligence,
AI-Driven IT Operations,
Agentic IT Operations,
Trust in Automation
References
ReadyWorks, "CMDB accuracy issues: Time for a new strategy," ReadyWorks Blog, 2025. [Online]. Available: https://www.readyworks.com/blog/cmdb-accuracy-woes-its-time-for-a-new-approach
ScienceLogic, "Achieve real-time CMDB accuracy," ScienceLogic Resources, 2023. [Online]. Available: https://sciencelogic.com/product/resources/achieve-cmdb-accuracy-with-real-time-sync-of-monitored-environment
Virima, "CMDB health score: What it is, how to measure it," Virima Blog, 2026. [Online]. Available: https://virima.com/blog/cmdb-health-score
DAMA International, DAMA-DMBOK: Data Management Body of Knowledge, 2nd ed. Basking Ridge, NJ: Technics Publications, 2017.
F. Dande, X. Li, M. A. Shofoluwe, and A. McLeod, "Artificial intelligence integration in IT service management: An ITIL configuration management process review," in Proc. Industrial Engineering and Operations Management (IEOM) World Congress, 2024.
J. K. R. Darreddy and M. K. Munagala, "AI-powered CMDB health and autonomous service graph reconciliation: Graph machine learning for configuration data quality in large-scale ServiceNow ITOM deployments," International Journal of Computer Information Systems and Industrial Management Applications, vol. 18, no. 5s, pp. 727–737, 2026.
S. Niewiadomski and G. Mzyk, "ML support for conformity checks in CMDB-like databases," in Artificial Intelligence and Soft Computing (ICAISC 2023), Lecture Notes in Computer Science, vol. 14126, L. Rutkowski et al., Eds. Cham: Springer, 2023, pp. 366–376.
Y. Chinthapatla, "AI integration with ServiceNow and CMDB: Revolutionizing industries and society," Journal of Science & Technology, 2024. [Online]. Available: https://www.researchgate.net/publication/379261632
L. Zhang, T. Jia, M. Jia, Y. Wu, A. Liu, Y. Yang, Z. Wu, X. Hu, P. S. Yu, and Y. Li, "A survey of AIOps in the era of large language models," ACM Computing Surveys, 2026, early access, doi: 10.1145/3746635.
R. D. Zota, C. Bărbulescu, and R. Constantinescu, "A practical approach to defining a framework for developing an agentic AIOps system," Electronics, vol. 14, no. 9, art. 1775, 2025.
L. Li, "Service dependency modeling and failure propagation prediction in distributed systems based on graph neural networks," Discover Artificial Intelligence, vol. 6, no. 1, art. 512, 2026.
S. Snedaker and C. Rima, Business Continuity and Disaster Recovery Planning for IT Professionals, 2nd ed. Waltham, MA: Syngress, 2013.
M. M. Alshammari, A. A. Alwan, and I. F. Al-Shaikhli, "Data recovery and business continuity in cloud computing: A review of the research literature," International Journal of Advancements in Computing Technology, vol. 8, no. 5, pp. 30–36, 2016. https://www.researchgate.net/publication/312166397_Data_recovery_and_business_continuity_in_Cloud_computing_A_Review_of_the_Research_Literature
O. Ibrahim, "Impact of cloud computing on business continuity and disaster recovery," Journal of Technology and Systems, vol. 6, no. 5, pp. 16–28, 2024.
M. Hernández-Bejarano, R. J. Rodríguez, and J. Merseguer, "A vision for improving business continuity through cyber-resilience mechanisms and frameworks," in Proc. 16th Iberian Conf. Information Systems and Technologies (CISTI), 2021, pp. 1–5.
V. Tzavara and S. Vassiliadis, "Tracing the evolution of cyber resilience: A historical and conceptual review," International Journal of Information Security, vol. 23, no. 3, pp. 1695–1719, 2024.
Virima, "Business continuity dependency mapping and IT resilience," Virima Blog, 2026. [Online]. Available: https://virima.com/blog/boost-resilience-with-business-continuity-dependency-mapping
R. Parasuraman and V. Riley, "Humans and automation: Use, misuse, disuse, abuse," Human Factors, vol. 39, no. 2, pp. 230–253, 1997.
J. D. Lee and K. A. See, "Trust in automation: Designing for appropriate reliance," Human Factors, vol. 46, no. 1, pp. 50–80, 2004
Most read articles by the same author(s)
- Dr.Jvalant Kumar Kanaiyalal Patel, Survey of Artificial Intelligence-Driven Zero-Day Vulnerability Detection Techniques in Cloud Computing Systems , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 07 (2026): Volume 03 Issue 07
- Dr. Elena Marovic, Dr. Sofia Markovic, Cybersecurity Governance and Resilience in Small and Medium-Sized Enterprises: A Socio-Technical, Resource-Based, and Regulatory Framework for Sustainable Digital Competitiveness , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 04 (2026): Volume 03 Issue 04
- Muhammad Hamza Khan, Ayesha Noor Malik, AI Governance and Cybersecurity Policy in the Public Sector: Balancing National Security, Data Privacy, and Ethical Risk , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 08 (2026): Volume 03 Issue 08
- Dr. Nyra Quellin, Strategic Risk-Based Cybersecurity Governance: Integrating Policy Frameworks, Organizational Controls, and Compliance Mechanisms for Contemporary Information Systems , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 01 (2026): Volume 03 Issue 01
- Dr. Wei-Lin Cheng, COLLATERAL EFFECTS AND UNINTENDED REPERCUSSIONS IN OFFENSIVE CYBER OPERATIONS: A SYSTEMATIC LITERATURE REVIEW , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 2 No. 03 (2025): Volume 02 Issue 03
- Dr. Hemant N. Patel, A Survey on Ransomware Detection and Prevention Using Machine Learning Models , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 08 (2026): Volume 03 Issue 08
- Dr. Lin K. Chen, A Novel Energy-Efficient and Secure Opportunistic Routing Protocol for Data Transmission in Wireless Sensor Networks , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 06 (2026): Volume 03 Issue 06
- Dr. Evelyn R. Chen, Dr. Adrian M. Vella, A Comprehensive Taxonomy and Critical Survey of Scientific Workflow Scheduling Paradigms in IaaS Cloud Computing: Evaluating Fitness for High-Stakes Environmental Modeling , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 2 No. 11 (2025): Volume 02 Issue 11
- Ashutosh Palia, CMDB Data Governance and Business Continuity: Identifying Research Gaps in AI-Driven IT Operations , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 09 (2026): Volume 03 Issue 09
- Prof. Hans-Peter Vogel, Dr. Farah Al-Dabbagh, UNINTENDED CONSEQUENCES AND SPILLOVER EFFECTS IN OFFENSIVE CYBER OPERATIONS: A SYSTEMATIC LITERATURE REVIEW , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 1 No. 01 (2024): Volume 01 Issue 01
Similar Articles
- Julia H. Whitaker, PROACTIVE CYBER THREAT HUNTING AND PREDICTIVE INTELLIGENCE IN CLOUD-ENABLED CRITICAL INFRASTRUCTURE: AN INTEGRATED FRAMEWORK FOR RESILIENT DIGITAL ECOSYSTEMS , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 02 (2026): Volume 03 Issue 02
- Nguyen Minh Khoa, Tran Thi Lan Anh, Strategic Business Transformation through Data Analytics, Sustainable Practices, and Innovation Management , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 09 (2026): Volume 03 Issue 09
- Lukas Schneider, Anna Müller, A STRIDE-Based Cybersecurity Framework for Threat Detection in Federated Identity and Access Management Systems , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 09 (2026): Volume 03 Issue 09
- Dr. Dmitry V. Sokolov, Synergizing Generative AI and Explainable Machine Learning in Security Operations Centers: Mitigating Alert Fatigue and Enhancing Analyst Performance , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 2 No. 10 (2025): Volume 02 Issue 10
- Muhammad Hamza Khan, Ayesha Noor Malik, AI Governance and Cybersecurity Policy in the Public Sector: Balancing National Security, Data Privacy, and Ethical Risk , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 08 (2026): Volume 03 Issue 08
- John M. Callahan, Advancing Cyber Threat Intelligence Frameworks: Integrative Models, Sharing Mechanisms, and Predictive Analytics , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 2 No. 07 (2025): Volume 02 Issue 07
- Dr. Mateo Alvarez-Ruiz, From Reactive to Predictive Security: Integrating Threat Intelligence with SIEM for Proactive Threat Hunting , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 01 (2026): Volume 03 Issue 01
- Elena M. Kovacs, Predictive Intelligence Across Physical and Financial Systems: A Comparative Research Framework for Packed-Bed Thermal Energy Storage and AI-Driven Forecasting , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 03 (2026): Volume 03 Issue 03
- Dr. Layla Hassan, Reem Al-Mazrouei, EVOLVING PARADIGMS AND FUTURE TRAJECTORIES IN CYBER THREAT INTELLIGENCE , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 2 No. 06 (2025): Volume 02 Issue 06
- Dr. Elena Marovic, Dr. Sofia Markovic, Cybersecurity Governance and Resilience in Small and Medium-Sized Enterprises: A Socio-Technical, Resource-Based, and Regulatory Framework for Sustainable Digital Competitiveness , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 04 (2026): Volume 03 Issue 04
1-10 of 52
Next
You may also start an advanced similarity search for this article.