ITIL v5 Compass
Leadership & Implementation
Complexity-Based Decisions

Complexity-Based Decision Making

The ITIL v5 Complexity Framework

ITIL v5 establishes that different contexts require fundamentally different management approaches. The framework defines four types of complexity context.

Four Types of Complexity Context

ContextCause and EffectApproachAnalogy
OrderedKnown or knowableApply known solutions; follow established procedures"Baking a cake: follow the recipe correctly, and the outcome is predictable."
ComplexUnderstood only in retrospectExperiment, observe, adapt; emergent practices"Raising a child: the same parenting approach might work differently with different children."
ChaoticNo discernible relationshipAct immediately, stabilize, then assess"A fire in a building: the priority is getting people to safety immediately."
ConfusedUnknown which context appliesGather information to determine the true contextThe situation has not been assessed yet; you do not know what type of problem you face.
⚠️

The most dangerous mistake: treating a complex problem as if it were ordered creates an illusion of control while missing actual dynamics.

Why ITIL v5 Uses Four Contexts (Not Five)

The original Cynefin framework uses five domains. ITIL v5 adapts this into four contexts:

Cynefin DomainITIL v5 ContextNotes
Clear (Simple)OrderedCombines "Clear" and "Complicated" where cause-and-effect is known or knowable
ComplicatedOrderedExpert analysis can determine the answer
ComplexComplexIdentical concept: emergent, probe-sense-respond
ChaoticChaoticIdentical concept: act-sense-respond
Confusion/DisorderConfusedThe state of not knowing which context applies

Applying Complexity Contexts to ITIL Practices

Incident Management

ContextExample ScenarioDecision Approach
OrderedKnown error: "printer offline." Documented fix exists.Apply the known fix from the knowledge base. Standard response.
ComplexIntermittent database latency affecting some users unpredictably. No clear pattern in logs.Form a cross-functional investigation team. Deploy additional monitoring. Test hypotheses incrementally.
ChaoticMajor security breach: customer data exposure. Situation evolving rapidly.Invoke Major Incident Management immediately. Contain first, investigate second. Centralized command.
ConfusedUsers report "the system feels slow" but metrics show normal performance.Gather more information. Is this a technical issue (ordered), an emergent pattern (complex), or a perception issue? Do not assume.

Change Enablement

ContextChange TypeGovernance Approach
OrderedStandard change (pre-approved): OS patch, configuration updateAutomated deployment through CI/CD. No manual approval needed. Post-deployment verification.
ComplexIntroducing a new AI-based service into productionIncremental deployment. Canary releases. Feature flags. Continuous feedback. Governance through observability.
ChaoticEmergency change during a major outageExpedited approval (single authorizer). Deploy the fix. Document and review after stability is restored.
ConfusedA proposed change with unclear scope and unknown dependenciesStop. Conduct impact analysis. Determine whether this is an ordered change with knowable effects or a complex change requiring experimentation.

Problem Management

ContextApproach
OrderedRoot cause analysis works well. Use techniques like Ishikawa diagrams, fault tree analysis, the "5 Whys." Cause-and-effect is traceable.
Complex"Root cause" may not exist as a single factor. Use systemic analysis: contributing factors, feedback loops, emergent interactions. Blameless post-mortems reveal more than single-cause investigation.
ChaoticNo time for analysis during chaos. Focus on stabilization. Conduct post-mortem only after the situation moves from chaotic to ordered or complex.
ConfusedBefore investing in analysis, determine: is this a known type of problem (ordered) or an emergent phenomenon (complex)? The analysis method must match the context.

Strategic Decisions by Complexity Context

Governance

ContextGovernance Pattern
OrderedDirective or Compliance-based governance works well. Clear rules, defined approval processes, standard procedures.
ComplexGuided or Federated governance is more effective. Set boundaries and principles, but let teams decide how to operate within them.
ChaoticCentralized, rapid-response governance. A single authority makes decisions quickly. Consensus-seeking during chaos creates paralysis.
ConfusedAssessment-first governance. Invest in understanding the situation before choosing a governance approach.

Team Structure

ContextTeam Approach
OrderedFunctional (specialized) teams work efficiently. Handoffs are manageable because processes are predictable.
ComplexCross-functional (product) teams are essential. The team needs diverse skills to probe, sense, and respond to emergent circumstances.
ChaoticCrisis response team (war room). Bring together the most experienced people regardless of organizational structure.
ConfusedAssessment team with diverse perspectives. Avoid premature commitment to a team structure before understanding the context.

PESTLE Analysis: Understanding External Complexity

ITIL v5 uses the PESTLE framework (Political, Economic, Social, Technological, Legal, Environmental) to systematically scan the external environment.

PESTLE Applied to ITIL v5

FactorQuestions for IT LeadersImpact on Complexity
PoliticalHow do government policies, trade regulations, or geopolitical tensions affect our IT supply chain and data residency?Can shift an ordered environment to complex/chaotic overnight (e.g., sanctions, data sovereignty laws)
EconomicHow do economic cycles, inflation, and budget pressures affect IT investment?Budget cuts force prioritization; economic uncertainty increases complexity
SocialHow do changing workforce expectations, remote work trends, and diversity requirements affect our operating model?Social shifts create complex adaptive challenges (not ordered problems)
TechnologicalHow do emerging technologies (AI, quantum computing, edge computing) disrupt our current architecture?New technology introduction is inherently complex (emergent, unpredictable effects)
LegalHow do regulations (GDPR, DORA, NIS2, AI Act) constrain or direct our technology decisions?Regulatory changes can shift a flexible environment to heavily ordered/constrained
EnvironmentalHow do sustainability requirements, carbon reporting, and green IT mandates affect our infrastructure and operations?Industry 5.0 context: sustainability is no longer optional

How to Conduct a PESTLE Analysis

  1. Assemble a cross-functional team (IT, legal, finance, HR, business stakeholders)
  2. Scan each factor systematically (use the questions above as starting points)
  3. Assess impact and uncertainty for each factor
  4. Map to the four dimensions (how does each factor affect Organizations and People, Information and Technology, Partners and Suppliers, Value Streams and Processes)
  5. Determine complexity context (does this factor create ordered, complex, or chaotic conditions?)
  6. Update quarterly (external factors change; your analysis must be current)

Common Leadership Mistakes with Complexity

MistakeConsequenceCorrection
Treating every problem as orderedComplex and chaotic problems get "best practice" solutions that do not workAssess complexity context first, then choose approach
Skipping directly to complex approaches for ordered problemsOver-engineering solutions; unnecessary experimentation on solved problemsIf the solution is known and documented, use it
Staying in chaos management mode after stabilizationOrganization remains in crisis mode; people burn out; no learning occursWhen stability is restored, transition to post-incident analysis (ordered or complex)
Assuming the context never changesA once-ordered environment (stable technology) becomes complex (AI disruption)Reassess complexity regularly; external factors (PESTLE) shift contexts
Ignoring the "confused" statePeople act based on false assumptions about the contextWhen uncertain, invest in assessment before action

Related Pages


Last updated on April 2, 2026

ITIL® is a registered trademark of PeopleCert. © 2026 ITIL v5 Compass