Foundation / 02

Define the work behind ongoing IT support

Turn a broad support label into a clear record of recurring tasks, incident handling, responsibilities and handover requirements.

Managed IT is an arrangement for assigning continuing technology responsibilities. The useful question is not whether a package carries that label, but which tasks someone will perform, for which systems, and under which conditions. A written scope turns a broad description into work that an office can understand and review.

An unoccupied desk with a monitor, keyboard, chair, lamp and plant
A computer workstation with separate display and input devices.

Separate ongoing work from individual incidents

Break-fix support begins with a particular fault or request: a computer will not start, an application will not print, or a user cannot sign in. Managed support assigns recurring work alongside whatever incident handling the agreement includes. Neither term establishes the details of a particular arrangement. An office still needs to read the scope and identify who owns each responsibility.

Consider an ordinary laptop. Fixing a failed sign-in is an incident. Checking whether it is still receiving updates is a recurring task. Replacing it as part of an office move is a project. Keeping those categories separate helps an owner understand which work is already covered and which work needs another decision.

Build a scope around assets and tasks

Start with a list of systems rather than a list of attractive package names. Include workstations, hosted applications, network equipment, backup arrangements and administrative accounts. For each item, identify the business owner, the technical administrator and the person who can authorize a change. Those roles may overlap, but the overlap should be deliberate.

AreaQuestion to settleUseful evidence
Device upkeepWho checks updates and exceptions?A device list and an exception record
Account changesWho approves new access and removes old access?An approved request and completion record
BackupsWho reviews failures and attempts restores?A job record and a recovery exercise
Network changesWho documents configurations and dependencies?A current diagram and change log

These are planning examples, not a universal service list. A small organization may retain some tasks internally and assign others externally. The point is to leave as few responsibilities as possible resting on an assumption.

Read the boundaries as carefully as the inclusions

An agreement may distinguish ordinary support from office moves, application migrations, specialist software or work outside stated hours. Ask how those boundaries apply to an example from the actual office. If an accounting application stops opening after a computer update, who investigates the workstation, who works with the application publisher, and who keeps the office informed?

Check how changes in headcount, device count and locations affect the scope. A new remote employee may add a laptop, an account and a home-network dependency. A new branch may introduce internet, power and physical access questions. The agreement should explain how the parties decide that the original scope needs updating.

Review understandable evidence

Reporting should answer a business question. A list of alerts is less useful than an explanation of an unresolved update, its affected device and the next action. Ask what records the organization can retain and read without a specialist dashboard. A simple report can show completed work, open exceptions, ownership and decisions awaiting approval.

The NIST Cybersecurity Framework is a reference for organizing discussion of cyber risk. It does not define a particular support package. Use the security planning article to turn broad headings into questions about the office's actual accounts and equipment.

Plan the handover before it becomes urgent

Record where administrative access, configuration notes, software entitlements and backup instructions will be held. Establish who can obtain those records if the usual administrator is unavailable. Avoid leaving a necessary business account dependent on one individual's personal credentials.

A practical first deliverable is a responsibility sheet with one row per task, a named internal role and an agreed external role where applicable. Review it after a substantial change. The agreement questions cover response targets and leaving an arrangement; the planning worksheet helps assemble the office information needed first.