ITIL Updated ITIL-4-Foundation Exam Questions and Answers by philippa

Comprehensive and Detailed Explanation From Exact Extract:

In ITIL 4, stakeholders are individuals or organizations that have an interest in the service, or may be affected by its activities, objectives, or outcomes. Among these, customers are identified as the primary, key stakeholder group for a service provider because:

Customers define the requirements for services.

They determine what is considered value and which outcomes they want to achieve.

Services are specifically designed, delivered, and improved to meet customer needs and expectations.

Therefore, effective cooperation and collaboration with customers is essential for successful service management and value co-creation. While suppliers, relationship managers, and developers are important parties in service delivery, ITIL 4 emphasizes customers as the key stakeholder group with whom service providers must actively cooperate.

Relevant ITIL 4 Foundation references:

Key concepts of service management (stakeholders, customers, users, sponsors).

Discussions of value co-creation and the importance of understanding customer needs and outcomes.

Costs are the amount of money spent on a specific activity or resource. From the service consumer’s perspective, there are two types of cost involved in service relationships:

Costs removed from the consumer by the service (a part of the value proposition). For example, for a car sharing service, the customer does not pay for the actual cost of purchasing the car.

https://www.bmc.com/blogs/itil-key-concepts-service-management/

Customers are one of the key stakeholder groups that service providers should cooperate with. Customers are the persons who define the requirements for a service and take responsibility for the outcomes of service consumption1. Customers can be internal or external to the service provider’s organization2. Customers are essential for value co-creation, as they provide feedback, resources, and demand for services3. References: ITIL Foundation - ITIL 4 Edition, page 5; ITIL® 4 – A Pocket Guide, page 18; [ITIL® 4 Practice Guide: Customer Relationship Management], page 7.

In ITIL 4, the purpose of the information security management practice is to:

Protect the organization’s information by ensuring confidentiality, integrity, and availability of data, and also covering aspects such as authentication, non-repudiation, and reliability.

Authentication ensures that users or systems are who they claim to be.

Non-repudiation ensures that an action or transaction cannot later be denied by the party that performed it.

These are core topics within information security controls and are explicitly associated with the information security management practice.

Why the other options are incorrect:

Change enablement – Focuses on ensuring that changes are properly assessed, authorized, and managed to maximize value and reduce risk; it does not specifically manage authentication or non-repudiation.

Service configuration management – Ensures that accurate and reliable information about configuration items (CIs) and their relationships is available; it is not primarily about security controls like authentication and non-repudiation.

IT asset management – Manages IT assets to maximize value and control costs and risks; again, not about authentication or non-repudiation as a primary purpose.

Therefore, the practice whose purpose includes managing authentication and non-repudiation is information security management.