ServiceNow ITOM Training
Run IT operations on ServiceNow. Discovery, Service Mapping, Event Management, the CMDB and CSDM, plus AIOps and Cloud, the full IT Operations Management suite mapped to CIS-ITOM.
ServiceNow ITOM (IT Operations Management) training gives IT visibility and control. You populate the CMDB with Discovery, model business services with Service Mapping, set up Event Management for alerting, and apply AIOps and Cloud Management, aligned to the CIS-ITOM certification.
Who this course is for
Prerequisite: Basic administration and a working idea of infrastructure (servers, networks, credentials). ITOM is an advanced suite and we cover the platform prerequisites early.
What makes this different
You build, not just watch
From the first session you are on your own developer instance, configuring, scripting and breaking things safely. That is what makes it stick.
Taught on the current release
No outdated screenshots. Everything maps to the release ServiceNow runs today, including current AI and platform features.
One trainer who still implements
One working consultant for the whole batch, no rotation, so the teaching is consistent and grounded in real projects.
Support continues to the offer
Resume review, mock interviews on real scenario questions, and referrals. Support does not stop when the last class ends.
ServiceNow ITOM curriculum
7 modules and 3 projects, updated to the current release. Every module maps to real ITOM work and expands into its full topic list, practised on a live developer instance.
ServiceNow ITOM Training module list: 7 modules, what each one covers, and how many topics it expands into. Full topic lists are in the accordions below.
| # | Module | What you configure | Topics |
|---|---|---|---|
| 01 | ITOM and CMDB foundations7 hours | Map the CMDB class structure and identification rules for a set of configuration items. | 4 |
| 02 | MID Server6 hours | Install, secure and troubleshoot a MID Server for ITOM workloads. | 4 |
| 03 | Discovery7 hours | Configure Discovery schedules and debug the probe and pattern results. | 4 |
| 04 | Service Mapping7 hours | Build and maintain an application service map from its entry points. | 4 |
| 05 | Event Management6 hours | Route external events into alerts and incidents using event and alert rules. | 4 |
| 06 | AIOps and health6 hours | Apply operational intelligence and CMDB health measures to reduce alert noise. | 4 |
| 07 | Cloud6 hours | Discover and govern cloud resources across accounts and providers. | 4 |
1ITOM and CMDB foundationsModule 1 of 7 · 7 hours
Map the CMDB class structure and identification rules for a set of configuration items.
- ITOM suite and licensing
- ITOM Visibility, Health and Optimization families
- subscription entitlement counting
- plugin activation order
- roles for ITOM administration
- CMDB, CI classes and the data model
- cmdb_ci base class and extensions
- table inheritance in the class hierarchy
- CI relationships and dependency views
- attributes and reference fields
- CSDM framework
- CSDM domains and layers
- application service versus technical service
- service offerings and business applications
- mapping existing data onto CSDM
- Identification and Reconciliation Engine (IRE)
- identification rules and criterion attributes
- reconciliation rules and authoritative sources
- duplicate CI tasks
- data source precedence
2MID ServerModule 2 of 7 · 6 hours
Install, secure and troubleshoot a MID Server for ITOM workloads.
- MID Server architecture and setup
- host requirements and sizing
- installation and validation steps
- ECC queue input and output
- configuration parameters
- Capabilities and clustering
- capability records for discovery
- IP range and application assignment
- load balancing clusters
- failover cluster behaviour
- Credentials and security
- credential records and credential affinity
- credential free discovery options
- external credential stores
- least privilege service accounts
- Troubleshooting the MID Server
- agent logs and common error patterns
- connectivity and certificate checks
- ECC queue backlog analysis
- restart and upgrade handling
3DiscoveryModule 3 of 7 · 7 hours
Configure Discovery schedules and debug the probe and pattern results.
- Discovery schedules and ranges
- schedule types and behaviours
- IP ranges and exclusions
- port scanning phase
- run windows and throttling
- Probes, sensors and patterns
- classification and identification phases
- probe and sensor pairs
- pattern designer operations
- extension sections in patterns
- Horizontal Discovery
- server, network and storage discovery
- application discovery from running processes
- relationship creation between CIs
- credential affinity results
- Debugging discovery runs
- discovery log and status records
- device status and error codes
- pattern debug in the designer
- ECC queue payload inspection
4Service MappingModule 4 of 7 · 7 hours
Build and maintain an application service map from its entry points.
- Top down and tag based mapping
- top down discovery from entry points
- tag based mapping of cloud resources
- manual mapping for gaps
- choosing a mapping approach
- Entry points and connections
- entry point types and URLs
- connection sections in patterns
- traffic based connection discovery
- reviewing unmapped connections
- Business services
- application service records
- service to CI relationships
- service ownership and impact
- CSDM alignment of mapped services
- Map maintenance
- map change review and approval
- recertification of service maps
- handling decommissioned CIs
- scheduled remapping
5Event ManagementModule 5 of 7 · 6 hours
Route external events into alerts and incidents using event and alert rules.
- Event connectors and rules
- event collection through the MID Server
- connector instances and schedules
- event rules and field mapping
- event field normalisation
- Alert correlation
- aggregation and correlation rules
- CI based grouping
- primary and secondary alerts
- alert severity mapping
- Alert to incident
- alert management rules
- incident creation and binding
- impacted service population
- alert closure on a clear event
- Remediation
- remediation subflows and tasks
- manual versus automatic remediation
- approval gates before remediation
- feeding the result back to the alert
6AIOps and healthModule 6 of 7 · 6 hours
Apply operational intelligence and CMDB health measures to reduce alert noise.
- Operational Intelligence and anomalies
- metric bound calculation
- anomaly alerts and scoring
- seasonality in metric behaviour
- tuning anomaly sensitivity
- Metric ingestion
- metric connectors and MID Server collection
- binding metrics to CIs
- retention and aggregation windows
- custom metric sources
- CMDB health and data certification
- completeness, correctness and compliance measures
- health dashboards and scorecards
- data certification tasks
- remediation ownership
- Dashboards for operations
- operator workspace views
- service health and impact tiles
- analytics widgets for alerts
- sharing dashboards with stakeholders
7CloudModule 7 of 7 · 6 hours
Discover and govern cloud resources across accounts and providers.
- Cloud Discovery for AWS, Azure and GCP
- service account setup per provider
- cloud discovery schedules
- logical datacenter modelling
- provider API call limits
- Cloud accounts and resources
- cloud service account records
- cloud resource CI classes
- relationships between cloud CIs
- resource lifecycle changes
- Tagging and governance basics
- required tag policies
- tag based CI grouping
- untagged resource reporting
- ownership attribution from tags
- Multi cloud visibility
- consolidated cloud resource views
- naming normalisation across providers
- orphaned resource detection
- reporting across cloud accounts
Discover a set of hosts, map an application service on top of them, then drive an event through alert correlation to an incident raised against that service.
How this course covers the CIS-ITOM exam blueprint.
| Exam area | Weight | Covered in |
|---|---|---|
| CMDB, CSDM and data foundations | - | Module 1 |
| MID Server | - | Module 2 |
| Discovery | - | Module 3 |
| Service Mapping | - | Module 4 |
| Event Management and AIOps | - | Module 5, Module 6 |
| Cloud visibility and governance | - | Module 7 |
Not covered: Administration of the underlying operating systems and network devices; Configuration of third party monitoring tools outside ServiceNow.
Curriculum version 2026-09-01 · approved by mohsin
What you'll be able to do
Real projects you'll build
Interview-ready scenarios on a live instance, not toy demos.
Discovery to CMDB
Stand up a MID Server, run Discovery against a range and verify the CIs and relationships land correctly in the CMDB.
Business service map
Build a top down service map for an application, define entry points and validate the dependency view.
Event to incident flow
Ingest events, write correlation rules to cut noise and auto create an incident for a real alert scenario.
Certification and hands-on
Every session runs on a real ServiceNow developer instance, so you configure and build rather than watch. The course maps to the CIS-ITOM exam and finishes with an IT Canvass certificate plus a certification roadmap. The CIS-ITOM exam costs US$300 (ServiceNow University, 2026). IT Canvass does not issue the official ServiceNow credential.
ServiceNow has an official certification catalog with four tiers: Expert (Certified Technical Architect, Certified Master Architect), Mainline (Certified System Administrator, Certified Application Developer, Certified Application Specialist and the Certified Implementation Specialist product tracks), Micro-Certifications (focused product skills such as Now Assist, Flow Designer and CMDB), and Suite Certifications (bundled credentials such as the ITSM and CSM Professional suites).
Certification facts. Vendor figures change, so confirm against the official ServiceNow catalogue before booking.
| Exam code | CIS-ITOM |
|---|---|
| Credential | ServiceNow CIS-ITOM |
| Issued by | ServiceNow, Inc. (not by IT Canvass) |
| Exam duration | 90 minutes |
| Exam cost | US$300 per exam attempt, plus the mandatory training where required |
| Prerequisite | CSA is the prerequisite for every CIS exam. Mandatory paid training applies to most CIS tracks. |
| What IT Canvass issues | An IT Canvass course completion certificate and a certification roadmap |
Your ITOM career roadmap
The ITOM path from CMDB foundations to operations architecture, with indicative 2026 bands.
Salary snapshot: ITOM Consultant
Indicative ranges aggregated from public salary data. Actual pay varies by location, employer and experience.
How IT Canvass compares
Against a typical training provider, this ITOM course is taught on the current ServiceNow release, gives you your own developer instance from day one, and keeps one working consultant for the whole batch instead of rotating trainers. Every module is mapped to the CIS-ITOM exam, sessions are recorded with lifetime access, and job support (resume review, mock interviews and referrals) is included in one transparent fee. Most providers still teach older release material, run slide-first sessions with limited lab time, and bill support and recordings as add-ons.
Fees and training modes
Choose how you want to learn ITOM. No-cost EMI available on all modes.
Interactive live batches, weekday or weekend, with the full cohort and lifetime recordings.
Private one-on-one coaching at your pace, whether you need interview-ready fast or hands-on help with your current project.
Learn on your own time with recorded sessions, labs and Q&A doubt support.
Train your team on ServiceNow ITOM Training
Tailored curriculum, flexible scheduling, a dedicated ServiceNow architect, and progress reporting for your managers. Delivered live online or on-site for cohorts of any size.
Your trainer
Neelima, ServiceNow Architect, 12+ years
I still deliver ITSM, ITOM and HRSD implementations for enterprise clients, so I teach from what is breaking in production this quarter, not from a slide deck. In class I show the patterns that scale and the mistakes that cost teams days.
Learner reviews
Discovery and the MID Server finally made sense because we broke and fixed real runs. That is what the job actually is.
The CMDB and CSDM module changed how I model data. Our CMDB health score is real now, not wishful.
Event correlation cut our alert noise dramatically. I applied the exact patterns from class at work.
Fees, batches and policies
The questions people actually ask before enrolling, answered plainly.