Open Access
CMDB Data Governance and Business Continuity: Identifying Research Gaps in AI-Driven IT Operations
4
Senior Web Application Developer, MathWorks Inc
Abstract
The Configuration Management Database (CMDB) is widely positioned as the authoritative record of IT infrastructure and its relationships to business services, yet industry surveys consistently report accuracy levels around 60 percent and find that a majority of CMDB implementations fail to meet their intended objectives. This gap between the CMDB's intended role and its practical reliability has been studied from several angles: general data governance frameworks, machine learning approaches to configuration data quality, and, increasingly, artificial intelligence integration within IT service management platforms. This paper reviews that literature and argues that one consequential intersection remains comparatively under-examined: the relationship between CMDB data governance and Business Continuity and Disaster Recovery (BCDR) outcomes, particularly as AI-driven and increasingly agentic IT operations begin to act on CMDB data with reduced human review. Drawing on recent work in CMDB-focused machine learning, AI integration in IT service management, general data governance frameworks, business continuity and cyber-resilience research, and the longer-standing literature on trust in automation, this review identifies a structural gap: existing work addresses CMDB data quality in general terms, or business continuity in general terms, but rarely connects specific CMDB governance dimensions to specific continuity and recovery outcomes. This is a targeted, narrative literature review rather than a systematic one, and its contribution is a research agenda rather than a new empirical study: an explicit characterization of this gap, expressed as a set of governance dimensions and framework requirements capable of addressing it, intended as the basis for continued research.
Keywords
Configuration Management Database,
CMDB,
Data Governance,
Business Continuity,
Disaster Recovery,
IT Service Management,
ITIL,
Artificial Intelligence,
AI-Driven IT Operations,
Agentic IT Operations,
Trust in Automation
References
ReadyWorks, "CMDB accuracy issues: Time for a new strategy," ReadyWorks Blog, 2025. [Online]. Available: https://www.readyworks.com/blog/cmdb-accuracy-woes-its-time-for-a-new-approach
ScienceLogic, "Achieve real-time CMDB accuracy," ScienceLogic Resources, 2023. [Online]. Available: https://sciencelogic.com/product/resources/achieve-cmdb-accuracy-with-real-time-sync-of-monitored-environment
Virima, "CMDB health score: What it is, how to measure it," Virima Blog, 2026. [Online]. Available: https://virima.com/blog/cmdb-health-score
DAMA International, DAMA-DMBOK: Data Management Body of Knowledge, 2nd ed. Basking Ridge, NJ: Technics Publications, 2017.
F. Dande, X. Li, M. A. Shofoluwe, and A. McLeod, "Artificial intelligence integration in IT service management: An ITIL configuration management process review," in Proc. Industrial Engineering and Operations Management (IEOM) World Congress, 2024.
J. K. R. Darreddy and M. K. Munagala, "AI-powered CMDB health and autonomous service graph reconciliation: Graph machine learning for configuration data quality in large-scale ServiceNow ITOM deployments," International Journal of Computer Information Systems and Industrial Management Applications, vol. 18, no. 5s, pp. 727–737, 2026.
S. Niewiadomski and G. Mzyk, "ML support for conformity checks in CMDB-like databases," in Artificial Intelligence and Soft Computing (ICAISC 2023), Lecture Notes in Computer Science, vol. 14126, L. Rutkowski et al., Eds. Cham: Springer, 2023, pp. 366–376.
Y. Chinthapatla, "AI integration with ServiceNow and CMDB: Revolutionizing industries and society," Journal of Science & Technology, 2024. [Online]. Available: https://www.researchgate.net/publication/379261632
L. Zhang, T. Jia, M. Jia, Y. Wu, A. Liu, Y. Yang, Z. Wu, X. Hu, P. S. Yu, and Y. Li, "A survey of AIOps in the era of large language models," ACM Computing Surveys, 2026, early access, doi: 10.1145/3746635.
R. D. Zota, C. Bărbulescu, and R. Constantinescu, "A practical approach to defining a framework for developing an agentic AIOps system," Electronics, vol. 14, no. 9, art. 1775, 2025.
L. Li, "Service dependency modeling and failure propagation prediction in distributed systems based on graph neural networks," Discover Artificial Intelligence, vol. 6, no. 1, art. 512, 2026.
S. Snedaker and C. Rima, Business Continuity and Disaster Recovery Planning for IT Professionals, 2nd ed. Waltham, MA: Syngress, 2013.
M. M. Alshammari, A. A. Alwan, and I. F. Al-Shaikhli, "Data recovery and business continuity in cloud computing: A review of the research literature," International Journal of Advancements in Computing Technology, vol. 8, no. 5, pp. 30–36, 2016. https://www.researchgate.net/publication/312166397_Data_recovery_and_business_continuity_in_Cloud_computing_A_Review_of_the_Research_Literature
O. Ibrahim, "Impact of cloud computing on business continuity and disaster recovery," Journal of Technology and Systems, vol. 6, no. 5, pp. 16–28, 2024.
M. Hernández-Bejarano, R. J. Rodríguez, and J. Merseguer, "A vision for improving business continuity through cyber-resilience mechanisms and frameworks," in Proc. 16th Iberian Conf. Information Systems and Technologies (CISTI), 2021, pp. 1–5.
V. Tzavara and S. Vassiliadis, "Tracing the evolution of cyber resilience: A historical and conceptual review," International Journal of Information Security, vol. 23, no. 3, pp. 1695–1719, 2024.
Virima, "Business continuity dependency mapping and IT resilience," Virima Blog, 2026. [Online]. Available: https://virima.com/blog/boost-resilience-with-business-continuity-dependency-mapping
R. Parasuraman and V. Riley, "Humans and automation: Use, misuse, disuse, abuse," Human Factors, vol. 39, no. 2, pp. 230–253, 1997.
J. D. Lee and K. A. See, "Trust in automation: Designing for appropriate reliance," Human Factors, vol. 46, no. 1, pp. 50–80, 2004
Most read articles by the same author(s)
- Dr. Marcus A. Rodriguez, A Longitudinal Analysis of Cybersecurity Technology and Innovation: A Technology Mining Approach Using Bibliometric and Patent Analysis , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 05 (2026): Volume 03 Issue 05
- Dr. Nguyen Van Minh, Dr. Tran Thi Lan, Cross-Layer Protocol Design and Integration Strategies for IoT and IoRT Convergence: An Analytical Review of Enabling Technologies, Challenges, and Emerging Solutions , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 08 (2026): Volume 03 Issue 08
- Dr. Jakob R. Neumann, Prof. Leila F. Mahmoud, Securing the Virtual Meeting Space: An Analysis of Cybersecurity Risks and Mitigation Strategies for Video Conferencing Platforms , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 2 No. 09 (2025): Volume 02 Issue 09
- Aghasi Gevorgyan, Automation of Compliance Control Processes According to PCI DSS Standards in Hybrid Cloud Environments , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 04 (2026): Volume 03 Issue 04
- Mr. Kapil Ahir, Modern Software Management Practices in Agile and DevOps Environments: A Review , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 07 (2026): Volume 03 Issue 07
- Dr. Samuel O. Adebayo, A Socio-Technical Approach to Mitigating Cybersecurity Risks in Industrial Control Systems: The Vulnerability Analysis Critical Impact Point (VACIP) Methodology , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 06 (2026): Volume 03 Issue 06
- Dr. Chinedu Okafor, Dr. Aisha Bello, An Intelligent Risk-Aware Security Framework for Detection and Prevention of Cyber Attacks on Critical Power Grid Infrastructure in Nigeria’s Electricity Sector , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 08 (2026): Volume 03 Issue 08
- Prof. M. B. T. Hazarika, An Examination of Cybersecurity Practices and Resilience in the Global Mining Critical Infrastructure Sector , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 06 (2026): Volume 03 Issue 06
- Dr. Ahmed Raza, Dr. Sanaullah Khan, A Context-Aware Input Normalization Framework for Medical Prescription Interpretation in Text-to-Speech Systems for Clinical Decision Support Applications , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 08 (2026): Volume 03 Issue 08
- Dr. Arjun Pratap Singh, Dr. Neha Verma, Research on Unusual Transmission Pattern Recognition in Telecommunication Infrastructure Using Fuzzy Equation Approach , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 04 (2026): Volume 03 Issue 04
Similar Articles
- Julia H. Whitaker, PROACTIVE CYBER THREAT HUNTING AND PREDICTIVE INTELLIGENCE IN CLOUD-ENABLED CRITICAL INFRASTRUCTURE: AN INTEGRATED FRAMEWORK FOR RESILIENT DIGITAL ECOSYSTEMS , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 02 (2026): Volume 03 Issue 02
- Nguyen Minh Khoa, Tran Thi Lan Anh, Strategic Business Transformation through Data Analytics, Sustainable Practices, and Innovation Management , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 09 (2026): Volume 03 Issue 09
- Lukas Schneider, Anna Müller, A STRIDE-Based Cybersecurity Framework for Threat Detection in Federated Identity and Access Management Systems , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 09 (2026): Volume 03 Issue 09
- Dr. Dmitry V. Sokolov, Synergizing Generative AI and Explainable Machine Learning in Security Operations Centers: Mitigating Alert Fatigue and Enhancing Analyst Performance , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 2 No. 10 (2025): Volume 02 Issue 10
- Muhammad Hamza Khan, Ayesha Noor Malik, AI Governance and Cybersecurity Policy in the Public Sector: Balancing National Security, Data Privacy, and Ethical Risk , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 08 (2026): Volume 03 Issue 08
- John M. Callahan, Advancing Cyber Threat Intelligence Frameworks: Integrative Models, Sharing Mechanisms, and Predictive Analytics , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 2 No. 07 (2025): Volume 02 Issue 07
- Dr. Mateo Alvarez-Ruiz, From Reactive to Predictive Security: Integrating Threat Intelligence with SIEM for Proactive Threat Hunting , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 01 (2026): Volume 03 Issue 01
- Elena M. Kovacs, Predictive Intelligence Across Physical and Financial Systems: A Comparative Research Framework for Packed-Bed Thermal Energy Storage and AI-Driven Forecasting , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 03 (2026): Volume 03 Issue 03
- Dr. Layla Hassan, Reem Al-Mazrouei, EVOLVING PARADIGMS AND FUTURE TRAJECTORIES IN CYBER THREAT INTELLIGENCE , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 2 No. 06 (2025): Volume 02 Issue 06
- Dr. Elena Marovic, Dr. Sofia Markovic, Cybersecurity Governance and Resilience in Small and Medium-Sized Enterprises: A Socio-Technical, Resource-Based, and Regulatory Framework for Sustainable Digital Competitiveness , International Journal of Cyber Threat Intelligence and Secure Networking: Vol. 3 No. 04 (2026): Volume 03 Issue 04
1-10 of 52
Next
You may also start an advanced similarity search for this article.