Back to Assessments & Documents
IT Service Management Active

Service Desk Maturity Assessment

An 85-question diagnostic across 11 domains that follows the employee IT service desk from its mandate and channels through people, tools, requests, ticket handling, knowledge use and escalation, to desk security, self-s...

Overview

An 85-question diagnostic across 11 domains that follows the employee IT service desk from its mandate and channels through people, tools, requests, ticket handling, knowledge use and escalation, to desk security, self-service, automation and artificial intelligence (AI), measurement and improvement. Written for the Service Desk Manager or Head of IT Support who needs to answer: do employees get fast, consistent and safe help, and can we prove it?

Detailed Description

The service desk is where most employees experience IT, and it is now one of the easiest ways into an organization. When it works, users reach help through the right channel, get a fix the first time and rarely call back. When it fails, tickets bounce between teams, users repeat themselves, a few senior agents hold all the know-how, and a convincing caller or an automated agent can talk the desk into resetting someone else's account.

The model follows the desk in the order it must be built and proven: the charter, business alignment, sourcing, channels, hours and resolver agreements; then skills, forecasting, scheduling, the platform, telephony, integrations and AI readiness; then catalog requests and joiner, mover and leaver work, ticket logging, classification, priority and aging, knowledge coverage and contribution, and tiered resolution, escalation, swarming and major incidents. A dedicated domain tests the desk as a security control point, from identity verification and high-risk request controls to inbound AI agent contacts, sensitive data and continuity. It closes with self-service, automation and AI guardrails, key performance indicators (KPIs), experience and cost, and quality, complaints and improvement.

Each question is scored on three dimensions: Documented, Implemented and Effective. This exposes practices that exist on paper but not in daily work, work that is done but never written down, and practices that run but are never measured, such as a verification standard agents bypass under pressure or surveys that never drive change. Sibling models own adjacent depth: Incident Management, Problem and Root Cause Management, Knowledge Management, Service Level Agreements and Performance, Technology Service Catalog and AI Governance, while this model tests the desk's hand-off to each.

Citation notes: EU AI Act Art. 50(1) (9.4) applies only where the virtual agent interacts with people in the EU; the duty sits with the provider and is passed to the desk by contract. UAE Federal Decree-Law No. 45 of 2021 (1.3, 8.09) applies to UAE private-sector desks; UAE government entities follow emirate data laws instead. The Saudi PDPL citations apply to Saudi desks.

Assessment Details

Audience

Service Desk Manager / Head of IT Support / Desk Team Leads / Service Management Platform Owner. Secondary: identity and security operations, workforce and quality analysts, knowledge managers, IT leaders who fund the desk.

Purpose

Shows where users wait too long, get inconsistent answers or repeat themselves, where the desk depends on a few people, where an impersonator or an AI agent could get past the desk, and where measures do not drive change. Gives the desk leader a path to faster resolution, safer support, higher satisfaction and lower avoidable demand.

Effort

Initial assessment: 6-8 hours of workshops with the desk manager, team leads, workforce and quality analysts, the platform owner and identity and security staff. Evidence gathering: 1-2 weeks. Reassessment: 3 hours.

Cadence

Every 6 months. Reassess after a platform change, a new sourcing model, a major reorganization, a new AI capability on the desk, a help desk security incident or a sustained drop in satisfaction.

Framework Alignment

SDI Global Best Practice Standard Version 9.0 HDI Support Center Standard v5.3 COBIT 2019 ISO/IEC 20000-1:2018 ITIL 4 Saudi PDPL Saudi PDPL Transfer Regulation v2 (2024) UAE Federal Decree-Law No. 45 of 2021 ISO/IEC 30071-1:2019 W3C WCAG 2.2 ISO/IEC 42001:2023 ISO/IEC 27001:2022 ADHICS v2 UAE Information Assurance Standard v2.1 KCS v6 Practices Guide NIST AI RMF 1.0 Consortium for Service Innovation Intelligent Swarming NIST SP 800-63B-4 OWASP Top 10 for Agentic Applications 2026 NCA ECC-2:2024 ISO 22301:2019 Regulation (EU) 2024/1689 OWASP Top 10 for LLM Applications 2025 ISO 10004:2018 ISO 10002:2018

KPIs

  • First-contact resolution - Share of resolvable contacts resolved in one interaction. Target: at least 70%.
  • Closed ticket satisfaction - Average satisfaction score on closed tickets on a 1 to 5 scale, reported only for channels meeting the minimum response rate and count. Target: at least 4.3.
  • Day-one readiness - Share of new joiners with devices and access ready and working on their first day. Target: at least 95%.
  • Verified before action - Share of sampled account-related contacts with identity verified to the standard before any action. Target: 100%.
  • Demand resolved without an agent - Share of all support demand resolved through the portal or virtual agent with no agent contact on the same issue within 7 days. Target: at least 30%.

Dependencies

Incident Management (v9.9.6): owns the incident process and major incident management; this model tests only the desk role in recognizing, reporting and handing over (7.6). Knowledge Management (v10.9.6): owns the knowledge process, KCS program, article lifecycle and AI knowledge governance; this model tests desk coverage, contribution, flagging and AI use of approved knowledge (domain 6). Service Level Agreements and Performance (v5.9.6): owns service level and operational level agreements; this model tests that resolver agreements support desk targets (1.6, 7.2). AI Governance (v11.9.6): owns enterprise AI policy and risk assessment; this model tests how the desk applies it to assistants, the virtual agent and AI agents (3.7, 9.4 to 9.8). Security Operations Center Cyber and Incident Response (v8.9.6): owns triage of reset abuse, channel floods and pretext calls; this model tests desk detection and handoff (8.05, 8.07, 8.08). Recommended: assess Knowledge Management and Service Level Agreements and Performance (v5.9.6) first, then this model, with Incident Management alongside.

Assessment Outline

(11 domains · 85 questions)
  1. 1

    1 Service Desk Governance and Channel Strategy

    Covers Service Desk Charter and Governance, Business Outcome Alignment, Operating and Sourcing Model, Channel Strategy, Support Hours and Coverage Model, Resolver Group Operational Agreements and Accessible and Inclusive Support.

    • 1.1 Service Desk Charter and Governance 1 questions
    • 1.2 Business Outcome Alignment 1 questions
    • 1.3 Operating and Sourcing Model 1 questions
    • 1.4 Channel Strategy 1 questions
    • 1.5 Support Hours and Coverage Model 1 questions
    • 1.6 Resolver Group Operational Agreements 1 questions
    • 1.7 Accessible and Inclusive Support 1 questions
  2. 2

    2 Workforce and Culture

    Covers Agent Skills Matrix, Agent Onboarding, Continuous Technical and Customer Skills Training, Demand Forecasting and Capacity Planning, Scheduling and Shrinkage Management, Surge Capacity, Agent Career Development, Agent Satisfaction Measurement and Agent Wellbeing and Retention.

    • 2.1 Agent Skills Matrix 1 questions
    • 2.2 Agent Onboarding 1 questions
    • 2.3 Continuous Technical and Customer Skills Training 1 questions
    • 2.4 Demand Forecasting and Capacity Planning 1 questions
    • 2.5 Scheduling and Shrinkage Management 1 questions
    • 2.6 Surge Capacity 1 questions
    • 2.7 Agent Career Development 1 questions
    • 2.8 Agent Satisfaction Measurement 1 questions
    • 2.9 Agent Wellbeing and Retention 1 questions
  3. 3

    3 Technology and Tooling

    Covers Service Management Platform Configuration, Telephony and Contact Integration, Remote Support Capability, System Integration, Proactive Support and Digital Experience Monitoring, Service Desk Technology Roadmap and AI and Automation Readiness.

    • 3.1 Service Management Platform Configuration 1 questions
    • 3.2 Telephony and Contact Integration 1 questions
    • 3.3 Remote Support Capability 1 questions
    • 3.4 System Integration 1 questions
    • 3.5 Proactive Support and Digital Experience Monitoring 1 questions
    • 3.6 Service Desk Technology Roadmap 1 questions
    • 3.7 AI and Automation Readiness 1 questions
  4. 4

    4 Service Catalog and Request Fulfillment

    Covers Catalog-Based Request Intake, Fulfillment Targets, Approval Workflow, New Joiner Provisioning, Mover Access Changes and Leaver Access Removal.

    • 4.1 Catalog-Based Request Intake 1 questions
    • 4.2 Fulfillment Targets 1 questions
    • 4.3 Approval Workflow 1 questions
    • 4.4 New Joiner Provisioning 1 questions
    • 4.5 Mover Access Changes 1 questions
    • 4.6 Leaver Access Removal 1 questions
  5. 5

    5 Ticket Management and Workflow

    Covers Universal Ticket Logging, Ticket Classification, Priority Matrix, Ticket Lifecycle Enforcement, Aging Ticket Management and Reopened Ticket Management.

    • 5.1 Universal Ticket Logging 1 questions
    • 5.2 Ticket Classification 1 questions
    • 5.3 Priority Matrix 1 questions
    • 5.4 Ticket Lifecycle Enforcement 1 questions
    • 5.5 Aging Ticket Management 1 questions
    • 5.6 Reopened Ticket Management 1 questions
  6. 6

    6 Knowledge Use and Contribution

    Covers Knowledge Coverage of Top Contact Reasons, User-Facing Knowledge, Agent Knowledge Contribution, Article Flagging and Feedback, Approved Knowledge for Desk AI and Knowledge Effectiveness.

    • 6.1 Knowledge Coverage of Top Contact Reasons 1 questions
    • 6.2 User-Facing Knowledge 1 questions
    • 6.3 Agent Knowledge Contribution 1 questions
    • 6.4 Article Flagging and Feedback 1 questions
    • 6.5 Approved Knowledge for Desk AI 1 questions
    • 6.6 Knowledge Effectiveness 1 questions
  7. 7

    7 Incident Resolution and Escalation

    Covers Tiered Support Model, Functional Escalation Paths, Management Escalation, Warm Handoff, Swarming and Collaborative Resolution, Major Incident Desk Role, Workaround and Known Error Use, Problem Management Linkage and Change and Release Readiness.

    • 7.1 Tiered Support Model 1 questions
    • 7.2 Functional Escalation Paths 1 questions
    • 7.3 Management Escalation 1 questions
    • 7.4 Warm Handoff 1 questions
    • 7.5 Swarming and Collaborative Resolution 1 questions
    • 7.6 Major Incident Desk Role 1 questions
    • 7.7 Workaround and Known Error Use 1 questions
    • 7.8 Problem Management Linkage 1 questions
    • 7.9 Change and Release Readiness 1 questions
  8. 8

    8 Desk Security, Privacy and Continuity

    Covers Caller Identity Verification, Spoofing and Deepfake Resistance, Requester Entitlement Check, High-Risk Request Controls, Change Notification and Reset Abuse Monitoring, Inbound AI Agent Contacts, Automated Abuse Protection on Desk Channels, Social Engineering Defense, Sensitive Data in Tickets and Recordings, Agent Access and Privileged Tool Control and Service Desk Continuity.

    • 8.01 Caller Identity Verification 1 questions
    • 8.02 Spoofing and Deepfake Resistance 1 questions
    • 8.03 Requester Entitlement Check 1 questions
    • 8.04 High-Risk Request Controls 1 questions
    • 8.05 Change Notification and Reset Abuse Monitoring 1 questions
    • 8.06 Inbound AI Agent Contacts 1 questions
    • 8.07 Automated Abuse Protection on Desk Channels 1 questions
    • 8.08 Social Engineering Defense 1 questions
    • 8.09 Sensitive Data in Tickets and Recordings 1 questions
    • 8.10 Agent Access and Privileged Tool Control 1 questions
    • 8.11 Service Desk Continuity 1 questions
  9. 9

    9 Self-Service, Automation and AI

    Covers Self-Service Portal, Intelligent Routing, Task and Workflow Automation, Virtual Agent, AI Assistance for Agents, AI Agent Action Guardrails, Prompt Injection Protection, AI Pause and Rollback and Self-Service Adoption.

    • 9.1 Self-Service Portal 1 questions
    • 9.2 Intelligent Routing 1 questions
    • 9.3 Task and Workflow Automation 1 questions
    • 9.4 Virtual Agent 1 questions
    • 9.5 AI Assistance for Agents 1 questions
    • 9.6 AI Agent Action Guardrails 1 questions
    • 9.7 Prompt Injection Protection 1 questions
    • 9.8 AI Pause and Rollback 1 questions
    • 9.9 Self-Service Adoption 1 questions
  10. 10

    10 Performance and Experience Measurement

    Covers Service Desk KPI Framework, Real-Time Operational Dashboard, Resolution Time Analysis, First-Contact Resolution, Transactional Satisfaction, Experience and Segment Measurement, Service Desk Cost and Efficiency and Service Desk Benchmarking.

    • 10.1 Service Desk KPI Framework 1 questions
    • 10.2 Real-Time Operational Dashboard 1 questions
    • 10.3 Resolution Time Analysis 1 questions
    • 10.4 First-Contact Resolution 1 questions
    • 10.5 Transactional Satisfaction 1 questions
    • 10.6 Experience and Segment Measurement 1 questions
    • 10.7 Service Desk Cost and Efficiency 1 questions
    • 10.8 Service Desk Benchmarking 1 questions
  11. 11

    11 Quality and Continual Improvement

    Covers Quality Assurance Program, Agent Coaching, Complaint Management, Detractor Follow-Up and Feedback Action, Demand Trend Analysis, Continual Improvement Register and Service Desk Maturity Review.

    • 11.1 Quality Assurance Program 1 questions
    • 11.2 Agent Coaching 1 questions
    • 11.3 Complaint Management 1 questions
    • 11.4 Detractor Follow-Up and Feedback Action 1 questions
    • 11.5 Demand Trend Analysis 1 questions
    • 11.6 Continual Improvement Register 1 questions
    • 11.7 Service Desk Maturity Review 1 questions

At a Glance

Category IT Service Management
Type Free
Roles 5
Domains 11
Questions 85

Still have questions? Get in touch

ITSGovernance