ITIL-130 · Lesson 3 of 12 · 29 min

The service value chain and its six activities

At the heart of the service value system sits the service value chain: an operating model that describes the key activities an organization needs to respond to demand and turn it into value. ITIL 4 names six activities: plan; improve; engage; design and transition; obtain/build; and deliver and support. This lesson introduces all six, explains how they connect through inputs and outputs, and shows why the chain is a network of activities rather than a production line. Lessons 4 to 7 then examine the activities in depth.

What an operating model is

An operating model describes how an organization does its work: which activities happen, how they connect and what flows between them. It sits between strategy (what the organization wants to achieve) and day-to-day execution (who does what, with which tools). The value chain is ITIL's generic operating model for creating, delivering and continually improving services. It is generic on purpose. Every service organization performs these activities in some form, but each configures them differently.

The word chain can mislead. In manufacturing, a value chain often implies a linear sequence: raw materials in, finished goods out. The ITIL service value chain is better pictured as a set of interconnected activities, each of which can trigger, feed or receive from any other. A piece of work might pass through engage, then design and transition, then back to engage, then obtain/build, then deliver and support, with improve touching all of them.

Six boxes arranged around a central hub. Plan sits at the top, engage on the left, improve, obtain/build and design and transition on the right, and deliver and support at the bottom. Lines connect every box to the hub to show that each activity can exchange inputs and outputs with any other. Demand enters at engage on the left and value leaves from engage, because engage is the main interface with stakeholders.
The six value chain activities are interconnected; engage is the main interface with demand and stakeholders.

The six activities at a glance

The descriptions below are written in plain language. They capture the purpose of each activity without reproducing official wording.

The six activities of the ITIL 4 service value chain, described in plain language.
ActivityPurpose in plain termsTypical outputs
PlanCreate a shared understanding of the vision, the current status and the direction of improvement across the organizationStrategic, tactical and operational plans; portfolio decisions; policies
ImproveMake sure products, services and practices keep getting better across every activity and dimensionImprovement initiatives and plans; value stream performance information; status reports
EngageUnderstand stakeholder needs, keep communication open and transparent and maintain good relationshipsConsolidated demand and opportunities; requirements; contract and agreement inputs; change requests
Design and transitionMake sure products and services keep meeting expectations for quality, cost and time to marketRequirements and specifications for components; new and changed services; contract requirements
Obtain/buildMake sure service components are available when and where needed and meet agreed specificationsService components; contracts and agreements with suppliers; knowledge about new components
Deliver and supportMake sure services are delivered and supported according to agreed specifications and stakeholder expectationsServices delivered; information on performance; improvement opportunities; change requests

Inputs and outputs

Each activity receives inputs and produces outputs. Some inputs come from outside the organization (demand from consumers, components from suppliers). Others come from other value chain activities. For example, deliver and support produces information about how services are performing; that information is an input to improve and to plan. Engage produces requirements; those are inputs to design and transition. Obtain/build produces service components; those are inputs to deliver and support.

Thinking in inputs and outputs makes dependencies visible. If design and transition is waiting for requirements, the problem may lie in engage, not in design. If deliver and support keeps receiving poorly tested components, the problem may lie in obtain/build or in design and transition. Mapping the flows lets the organization find the real constraint rather than blaming the team where the symptom appears.

Worked problem

Tracing a dependency through inputs and outputs

An operations team complains that new services keep arriving without support documentation, causing long incident resolution times. Which activities produce and consume the documentation, and where should the fix be made?

Show solution
  1. The consumer of the documentation is deliver and support, which needs knowledge to resolve incidents.
  2. The documentation should be produced during design and transition (service design packages, operating procedures) and obtain/build (component knowledge from suppliers or developers).
  3. The symptom appears in deliver and support, but the cause is missing outputs from earlier activities.
  4. The fix is to make support documentation a required output of design and transition, with acceptance criteria checked before services go live.

Answer: Fix the output of design and transition (and obtain/build), not the support team. Inputs and outputs reveal where the problem originates.

Engage as the interface

Engage has a special position. It is the main point at which the value chain interacts with stakeholders outside it: customers, users, suppliers, partners and other parts of the organization. Demand typically enters through engage, and the value created leaves through engage when products and services are handed to consumers and feedback is gathered. That does not mean every conversation with a stakeholder happens in one team; it means the activity of understanding and communicating with stakeholders is recognized as essential and deliberately managed.

Value streams use the chain

Because the activities are generic, they do not describe how a particular piece of work flows. That is the job of value streams: specific combinations of activities, in a specific order, used to handle a specific type of demand. Restoring a failed service follows one value stream; onboarding a new employee follows another; developing a new product follows a third. Each uses some or all of the six activities, possibly more than once. Lessons 8 and 9 cover value streams in detail.

Three value streams combine the same activities differently. Arrows here show order of use, not a fixed chain.
Value streamActivities used, in order
Restore a failed serviceEngage → deliver and support → (obtain/build if a component must be replaced) → deliver and support → engage → improve
Fulfill a standard laptop requestEngage → deliver and support → obtain/build → deliver and support → engage
Launch a new digital serviceEngage → plan → design and transition → obtain/build → design and transition → deliver and support → engage → improve

In tables and diagrams, arrows are used to show the order in which a particular value stream uses activities. The chain itself has no fixed order.

Practices support the activities

Activities describe what has to happen; practices supply the resources to make it happen. ITIL 4 describes 34 practices, grouped as general management, service management and technical management practices. Every activity draws on several practices, and every practice contributes to several activities. Incident management, for example, contributes most to deliver and support but also to engage (communicating with users) and improve (identifying improvement opportunities). ITIL-140 and ITIL-141 examine the practices; here the point is the many-to-many relationship.

Worked problem

Mapping practices to an activity

List four practices that contribute to the obtain/build activity when a team procures and configures a new software-as-a-service product.

Show solution
  1. Supplier management: selects the vendor and negotiates the contract.
  2. Information security management: checks the product's security controls and data handling.
  3. Service configuration management: records the new configuration items and their relationships.
  4. Software development and management or infrastructure and platform management: configure integrations and environments.

Answer: Supplier, information security, service configuration and development or platform practices all contribute. One activity draws on many practices.

The ITIL (Version 5) lifecycle view

ITIL (Version 5), released in February 2026, keeps the value chain and adds a product and service lifecycle. Published Version 5 course outlines, checked in October 2026, list eight lifecycle activities: discover, design, acquire, build, transition, operate, deliver and support. They describe the activities as iterative and non-linear, much as the value chain activities are. The lifecycle gives a finer-grained view of how a product or service comes into being and is run, while the value chain remains the operating model at the center of the value system.

Two columns. The left column lists the six ITIL 4 value chain activities. The right column lists the eight lifecycle activities reported for ITIL Version 5. Connecting lines show approximate correspondence: engage and plan with discover; design and transition with design and transition; obtain/build with acquire and build; deliver and support with operate, deliver and support; improve connects to all lifecycle activities.
An approximate mapping between the six ITIL 4 value chain activities and the eight lifecycle activities reported for Version 5. The mapping is a study aid, not an official crosswalk.
An informal correspondence for learners moving between editions. Check your edition's materials before relying on it in an exam.
ITIL 4 value chain activityClosest Version 5 lifecycle activities (approximate)
Engage and planDiscover
Design and transitionDesign; transition
Obtain/buildAcquire; build
Deliver and supportOperate; deliver; support
ImproveApplies across all lifecycle activities

Two cautions apply. First, this correspondence is our own study aid, not an official crosswalk, and some activities overlap. Second, exam questions should always be answered in the terms of the edition you are sitting. A Version 4 question about the six activities expects the six names exactly; a Version 5 question about the lifecycle expects the eight.

Activities versus departments

A frequent mistake is to map each activity to a department: a planning office, an engagement team, a design team, a build team, an operations team. That recreates the silos the system model was designed to remove. In practice, a single product team might perform engage, design and transition, obtain/build and deliver and support for its own product, while a central function performs plan and coordinates improve. Another organization might outsource obtain/build entirely to a partner. The value chain describes what must happen, not who must do it.

Worked problem

One team, many activities

A five-person product team runs an internal expense-claims application. In one week, they: meet finance to discuss a new approval rule; update the design and test it; buy an additional license for a reporting add-on; deploy the change; answer user questions about the new rule; and review last month's incident data for patterns. Map each task to a value chain activity.

Show solution
  1. Meeting finance about a new rule: engage.
  2. Updating and testing the design: design and transition.
  3. Buying an additional license: obtain/build.
  4. Deploying the change: design and transition (moving it into live use).
  5. Answering user questions: deliver and support, with engage where users give feedback.
  6. Reviewing incident data for patterns: improve.

Answer: One small team performed five of the six activities in a week. Activities are not departments.

Why six activities are enough

Six activities may seem too few to describe everything a service organization does. The answer is that they are deliberately broad. Within each, many practices, procedures and tasks operate. The benefit of keeping the list short is that it provides a common language across very different organizations and makes it easier to see the whole. When a conversation stalls on whose process is broken, asking which activity is failing to produce the output another activity needs often unlocks it.

Common mistakes

  • MistakeDrawing the value chain as a fixed sequence from plan to deliver and support.

    InsteadTreat the activities as interconnected; value streams combine them in whatever order the work requires.

  • MistakeAssigning each activity to a single department.

    InsteadRecognize that one team may perform several activities and one activity may span many teams or partners.

  • MistakeFixing problems where symptoms appear.

    InsteadTrace inputs and outputs to find which activity is failing to produce what another needs.

  • MistakeTreating the Version 5 lifecycle as replacing the value chain.

    InsteadVersion 5 adds the lifecycle view alongside the value chain; the value chain remains a component of the value system.

  • MistakeConfusing activities with practices.

    InsteadActivities describe what happens; practices supply the resources to do it, in a many-to-many relationship.

Summary and key terms

  • The service value chain is ITIL's generic operating model, with six interconnected activities.
  • The activities are plan; improve; engage; design and transition; obtain/build; and deliver and support.
  • Each activity takes inputs and produces outputs; tracing them reveals where problems originate.
  • Engage is the main interface with stakeholders, where demand enters and value is handed over.
  • Value streams combine activities in specific orders for specific types of demand.
  • Practices supply resources to the activities in a many-to-many relationship.
  • ITIL (Version 5) adds a product and service lifecycle of eight activities, reported as discover, design, acquire, build, transition, operate, deliver and support.
Operating model
A description of how an organization performs its work and how activities connect.
Value chain activity
One of the six generic steps an organization takes in creating value.
Plan
The activity that creates shared understanding of vision, status and direction.
Improve
The activity that ensures continual improvement across all activities and dimensions.
Engage
The activity that understands stakeholder needs and maintains communication and relationships.
Design and transition
The activity that ensures products and services meet quality, cost and time-to-market expectations.
Obtain/build
The activity that makes service components available and fit for specification.
Deliver and support
The activity that delivers and supports services to agreed specifications.
Service component
A part of a service, such as software, hardware, a supplier service or a team's capability.
Product and service lifecycle
The ITIL (Version 5) view of eight activities through which products and services are created and run.

Practice problems

Work each problem on paper first, then reveal the answer to check.

  1. List the six ITIL 4 value chain activities.

    Show answer

    Plan; improve; engage; design and transition; obtain/build; deliver and support.

  2. Which activity is the main interface with stakeholders?

    Show answer

    Engage.

  3. What is the difference between an activity and a value stream?

    Show answer

    An activity is a generic step; a value stream is a specific combination of activities for a type of demand.

  4. Deliver and support produces performance information. Name two activities that use it.

    Show answer

    Improve and plan.

  5. Why can it be misleading to call it a chain?

    Show answer

    It suggests a fixed sequence, but the activities are interconnected and used in any order.

  6. Name the eight lifecycle activities reported for ITIL (Version 5).

    Show answer

    Discover, design, acquire, build, transition, operate, deliver and support.

  7. Which activity makes sure components meet agreed specifications?

    Show answer

    Obtain/build.

  8. Give an example of one practice contributing to several activities.

    Show answer

    Incident management contributes to deliver and support, engage and improve.

  9. A design team waits weeks for requirements. Which activity may be the constraint?

    Show answer

    Engage, which produces requirements.

  10. Does each activity need its own department?

    Show answer

    No. Activities describe what happens, not who does it.

Lesson quiz · 5 questions

Score 60% or more to complete this lesson.

Take the quiz