&
(Best Practice)
Version Control
October 2008 Version 1.0 Jacky Frew
December 2008 Version 1.1 Jacky Frew
September 2009 Version 1.2 Jacky Frew – Incident Type
October 2009 Version 1.3 Jacky Frew – Reject, Due Date, Resolution, Feedback
SOURCE ......................................................................................................................................................... 7
PRIORITY........................................................................................................................................................ 7
STATUS .......................................................................................................................................................... 8
PRIORITY: ..............................................................................................................................................................................................................................................9
STATUS: ................................................................................................................................................................................................................................................9
NO TASK REQUIRED:.........................................................................................................................................................................................................................10
JOURNAL: ............................................................................................................................................................................................................................................15
PROBLEMS:.........................................................................................................................................................................................................................................17
ESCALATIONS: ...................................................................................................................................................................................................................................17
HISTORY: .............................................................................................................................................................................................................................................17
Global QuickActions
Searches by:
Any field
in ITSM Colours of Grids:
Incidents coloured Red are incidents with
uncompleted Tasks and are not ready to resolve
Classification:
Type
Category
Service Incident Team & Owner
Component
Further Detail
Primarily used by Comms Admin team – (Optional)
Incident Tabs:
Quick Searches: Tasks
Resolution
Feedback
Billing Info History:
Incident Billing This an audit trail of entries and actions by the system and
Problem technical staff.
Journal
Attachment
Time/Date Stamp
History
* Compulsory fields
Select drop down lists for Category, Service and Component the appropriate selection or best fit.
• Type in the summary, make it meaningful describing the fault or service request required
• Type a more detailed entry of the fault/service request described by the client and including any Not a compulsory field
useful information i.e. QUT asset number, PC name, printer name etc.
Further Detail is not a compulsory field but you can make an appropriate selection if required.
• Use consistent, meaningful and client friendly terminology
• Describe symptoms, error messages, reoccurring issues and any initial tests performed NOTE: This field can be blank, so no selection is required.
* Compulsory field
The source field describes how the incident was reported, such as e-mail or phone etc... The initial priority is determined at the discretion of the IT Helpdesk, or support staff member logging
the incident. The default priority is MEDIUM and should be reassessed by 2nd or 3rd level support
The source by default is Phone. If you would like to change this, select the drop down arrow and when a task is assigned.
highlight your selection in the list.
When determining a priority, consider the following descriptive guide that is used by fire fighters, as
they cannot respond to every fire in the same way.
TEAM & OWNER
Example: 1 building as opposed to multiple buildings, in other words, impact to QUT Business.
Also QUT specific points are listed below to assist correct selection of the priority.
* Compulsory fields LOW - This priority means responding using standard operating procedures and as time allows.
TEAM: This field is defaults the team of the person who logs the incident
MEDIUM - This priority means responding using standard procedures and operating within normal
Example: IT Helpdesk, CSI etc... supervisory management structures.
OWNER: This field defaults to the person who logged the incident and team member.
HIGH - This priority means technicians respond immediately, assess the situation, may interrupt
Example: Jacqueline Frew, who is a member of the IT Helpdesk team, logged this incident. other staff working low or medium priority jobs for assistance.
Important: CRITICAL - This priority means an immediate and sustained effort using all available resources until
Incident TYPE (Service Request or Fault) also determines ownership. resolved. On-call procedures activated, vendor support invoked and describes how the IT
organisation will respond taking into account any service catalogues and service level agreements.
Incident Faults – All faults are to be reported, recorded and owned by the IT Helpdesk. No other
service provider can own an incident fault only the IT Helpdesk and 2nd level support can resolve
incidents by moving the status to RESOLVED. NOTE: Default is MEDIUM; you can select another priority if required.
Incident Service Requests – All IT support staff can record and own a service request, including
incident resolution. However, if an incident service request is reported and recorded by the IT Helpdesk
they will maintain the ownership and can resolve the incident by moving the status to RESOLVED.
LOW=4 MEDIUM=3 HIGH=2 CRITICAL=1 DRAFT - This status is used by Self Service and the status is only viewable by the client prior to
entering their request details and selecting the Submit button. On Submit the status will then move
Escalations will occur at the following elapsed times or status and initiate an email to the incident owner. to Logged and owner as Self Service.
This will also be visually available in the Incident as a colour coded bar.
LOGGED - This is the status before an Incident has been classified and saved. This is also the
Escalations in ITSM are calculated from the time the request is in an ACTIVE status until it reaches a status used by Self Service when logged by the client and prior to IT Helpdesk classification of the
RESOLVED status. The escalations are associated with one standard SLA until Service Level Self Service request. For self service requests only, this will initiate the start of the SLA.
Management module is implemented and as such resolution times are a guide only.
ACTIVE – This is the status when an Incident has been created and SAVED. This will then occur
automatically and move the status from Logged to Active. This status also initiates the start of the
Service Level Agreement (SLA) and the escalation process.
NOTE: The Standard SLA for QUT is for business hours only - 8am to 6pm Monday to Friday outside
RESPONDED - The Incident will automatically move to this status when the first associated task is
these hours will not be included. There is only one global SLA for QUT outlined in the table below.
Time is calculated between creation and resolution of the incident. accepted. However, if the Incident has no associated task(s), then the status can manually be
changed to Responded.
WAITING - Status used when technical support staff are waiting on hardware, software, Request
Status = Responded – Escalation to owner if Incident has not been responded to in set time period for Change (RFC), feedback from client, etc. generally anything that could be considered beyond
their control. Documentation of the reason is required in the Journal or Task. This will stop the
50% of Resolution time – Escalation to Incident owner when 50% of resolution time has elapsed. progression of the Service Level Agreement (SLA) and the escalation process.
75% of Resolution time – Escalation to Incident owner when 75% of resolution time has elapsed. INVESTIGATE - This status is only to be used if the Incident Manager or system as follows. If the
90% of Resolution time – Escalation to Incident owner when 90% of resolution time has elapsed. resolution of an Incident is unsatisfactory and the client response is NO. The system will
automatically move the Incident from Resolved to Investigate status. If support staff are unable to
100% of Resolution time – Status = Resolved. Escalation to Incident owner classify an Incident, or for any reason are impeded in responding to, or the resolution of an Incident
and require the Incident Manager to investigate.
RESOLVED - This status initiates a resolution email to the client for sign off of an Incident. An
Incident that is a fault can only be moved to this status by the IT Helpdesk or 2nd level support as
they are the owners. An Incident that is a service request can be moved to this status by the owner
of the Incident. The Resolved status is the point when the Incident Service Level Agreement (SLA)
and the escalation process will stop.
CLOSED – This is the final status when the customer signs off an Incident or provides a YES
NOTE: The SLA and escalations are on the incident only, not the task. response. If there is no feedback received from the customer in 5 days, the Incident will
automatically move to a closed status.
Important:-– All incidents that are more than 1 month old and still remain in the IT Helpdesk queue will
be moved to the service providers queue for actioning. This will occur at the beginning of each month.
SERVICE LEVEL AGREEMENTS- SLA’s: STATUS:
The Standard SLA for QUT is for business hours only - 8am to 6pm Monday to Friday outside these The following are included: Draft, Logged, Active, Responded, Waiting, Investigate, Resolved and Closed.
hours will not be included. There is only one global SLA for QUT. Important:
WAITING - Status used when technical support staff are waiting on hardware, software, Request for
Important:-– Incident Types – Procurement and Project are excluded from SLA’s. Change (RFC), etc.
INVESTIGATE - This status is only to be used if the Incident Manager is required to investigate or
Escalation notifications automatically by the system if the client provides feedback that is required to be followed up.
The incident owner will receive notifications when the incident reaches the following: RESOLVED - The resolution email to the client for sign off of an Incident. An Incident that is a fault
• Responded can only be moved to this status by the IT Helpdesk or 2nd level support as they are the owners.
• 50% of resolution time CLOSED – This is the final status when the customer signs off an Incident or if there is no feedback
• 75% of resolution time received in 5 days.
• 90% of resolution time NOTE: No IT Support staff should use the Closed status as this prevents the client from providing
• 100% of resolution time feedback. Quick Close should also not be used for this reason.
Incident Tabs:
If you are unable to resolve the incident at first point of contact then you will need to create a task and
assign to a support team as follows:
NOTE: External tasks are not used by the majority of teams in QUT, mainly internal.
You will now need to complete the Summary and Description fields.
SUMMARY: Type in a short summary of the work required.
DESCRIPTION: Type in the description any information, tests performed or details etc. that may be
• By default the task tab will be viewable useful to support team members in completing the task or the resolution of the incident.
• You can also use the button, but this is only if you wish to create a task
for yourself not a team. This will populate with all incident information as above including, your
team, assignee, phone, email and status to accepted etc.
NOTE: The final stage is to select SAVE on the incident form. This is very important as it will
automatically forward the task and the notification to the assigned team.
• Select the team you would like to assign the task to by using the drop down arrow and type the first
letter, this will display teams beginning with this letter. • The task count will now be 1 as shown on the incident form and coloured
red indicating the task will need to be completed before it can be resolved.
• The Task Email field will automatically populate with the team or daily event coordinator (DEC)
address. • If you require work to be done by more than 1 team then follow the previous steps to create
more tasks. You will also note the task number will change on the incident form indicating the
• You are only required to assign to a Team not a Team Subgroup or an Assignee. number of tasks for that incident.
• All other fields required at this stage are automatically populated with the current incident
• Remember to SAVE the incident following the creation of each task.
information.
• To assign to a team member, select drop down arrow and the team member • Another popup window will appear as below and you will need to select a team to forward the
task to. Select OK and SAVE on incident form.
• The assignee information will automatically be populated with their phone number and email
address.
• When you have completed these steps SAVE the incident on the incident form and the assignment
of the task will be completed.
NOTE: If you do not have a Sub Group then assign the task to a team member for actioning. If the task
is not assigned to an individual it will remain in the team’s unassigned queue.
Some teams may not have a daily event coordinator (DEC) or team leader to assign tasks. In this
instance the whole team my monitor the unassigned queue and assign tasks to themselves.
*
• To make a Journal entry. Select the Journal tab → Journal Notes *
*
• Enter a Summary and the Note you would like to record as shown below and SAVE the incident.
• The cause code field is optional you can make a selection from the drop down menu and select
the best fit.
• If you intend to send an email from the journal to the client then, you must address it like an email • Complete the First Call Resolution? If the incident has a task then, first call resolution = NO
and provide your contact information or signature so the client can contact you if required.
*
• To send an email select the button and then SAVE the incident.
• Following the saving of the incident the journal status will automatically be updated as shown below.
NOTE: You can also make a Secure journal note. This journal note will only be viewable to members of
your team.
• Enter the resolution text. This should be in a client friendly language, advising the client of action
taken that includes a signature sign off with your contact details. • The incident manager will then contact the client to confirm there is still a problem also advising
the incident will be reopened and the service provider will be contacted.
*
• The incident manager will record all client interaction in the journal. If the client is not
contactable by phone then, the incident manager will send the client an email from the journal
advising of steps taken.
• The incident manager will then create a new task and assign to appropriate service provider
• If you select the Workaround then, it is only valid for this incident. requesting client follow up required.
• SAVE the incident • The service provider upon accepting the task, will document any client interaction in the journal
NOTE: You must complete all the compulsory fields before the incident can be resolved. so the incident manager has a record of steps taken to resolve the incident.
• When the service provider has completed the task, the incident manager will then read all
Important: An Incident - fault can only be moved to a Resolved status by IT Helpdesk or 2nd level entries and determine if the incident can now be moved to a Closed status.
support, (CSO’s).
If you are not a member of above support teams e.g. service provider or 3rd level support then, you must Important: Quick Close on the navigator bar or moving an incident directly to Closed status is not
complete the resolution and save, but do not move the status to Resolved. allowed. This does not allow the client to provide feedback.
When the status has been moved to Resolved and saved, an email will automatically be sent to the client • An incident can only move to a Closed status by; client sign off, incident manager following an
requesting sign off. investigation or automatically by the system if the client does not sign off in 5 days.
ITSM incident reports can be viewed by selecting the reporting icon on the incident or problem form
view.
• You must have access to view the reports. If you do not have access you can log a request to the
ITSM support team.
• You need to enter your QUT Access username, password and authentication is LDAP.
• Select Public Folders then, ITSM Reports.
• Select the area you would like to run a report on.