What exists
Assets, services, settings, capacity, owners, current state, and change history.
An Infrastructure Operating Model, or IOM, is a live model of an organization’s infrastructure and the rules used to operate it. It brings together what exists, how it connects, who owns it, what should be true, and what changes are allowed.
This page defines the category. AuthorIOM is one commercial implementation of it.
Cloud, network, security, apps, data, service management, and providers each hold part of the picture.
No single tool explains the full environment. Teams must rebuild that view from dashboards, tickets, diagrams, exports, and memory before they can act.
This creates three common problems:
Assets, services, settings, capacity, owners, current state, and change history.
Connections, dependencies, service paths, shared resources, and likely impact.
Standards, policy, approved patterns, limits, decision rights, and required checks.
Facts + Relationships + Rules = Infrastructure Operating Model
A useful IOM is not a one-time diagram. It keeps three views in step.
Approved design, policy, owners, and expected state.
Current settings, connections, capacity, and health.
Changes, approvals, events, and proof of the result.
The IOM compares intent with running state. Evidence shows whether a change produced the right result.
Model → Reason → Govern → Apply → Verify → Model
It should link assets, services, dependencies, owners, and current state.
It should hold intent, policy, standards, limits, and approved exceptions.
It should use the current environment, relationships, and rules before a connected change runs.
It should compare the result with the intended outcome and keep the decision record.
A CMDB records items. An IOM must also show live relationships, intent, and operating rules.
Observability shows what is happening. An IOM adds what the signal means and what action is allowed.
Automation performs work. An IOM gives that work context, limits, and a way to verify the result.
Existing tools still do their jobs. The IOM gives them a shared view and a shared operating process.
Model first. Everything else follows.
Anything represented in the IOM can be understood and checked. When the needed rules, permission, evidence, and connected change path exist, it can also be governed before action and verified after it. Read it backwards and it becomes a scope question: it can be governed if it is in the model. Coverage is the boundary — what the model does not hold is not governed, which makes the first useful question not can this be governed but what is not in your model today.