Classify support work, set priority from impact and urgency, and manage ownership and SLA timing visibly.
What you will be able to do
- Explain the five core support decisions involved in tickets priorities and slas.
- Choose a safe inspection or support method that matches a stated user need.
- Interpret the result as evidence before deciding whether to change system state.
- Apply an identify, inspect, act, verify, document, and recover workflow to a realistic support case.
01
Build the Support Map
Classify support work, set priority from impact and urgency, and manage ownership and SLA timing visibly.
Reliable support begins by separating the user's visible symptom from the system layers that could produce it. Record the affected user, exact device or service, timing, scope, expected behavior, observed behavior, and any recent change before proposing a cause.
Use read-only evidence first. Preserve the starting state, ask one focused question at a time, and compare an affected example with a known-good example whenever that comparison is safe and relevant. This creates a baseline another technician can review.
02
Request classification
Incidents restore disrupted service while service requests deliver a standard item, access, or information. In this lesson, it answers one specific support question. Record its evidence separately from the other layers instead of folding everything into a general guess.
Restate the user's need and choose the case type that matches the actual outcome required. Start with this approved method: Select the approved incident or request category. Keep the target, time, user context, and visible result together so the reasoning remains reproducible.
The safety boundary is specific: A familiar subject line can hide a different request. The expected result is also specific: The ticket follows the correct workflow. If the observation does not match that result, preserve it and return to diagnosis instead of adding unrelated changes.
03
Impact and urgency
Impact measures affected scope while urgency measures how quickly delay creates additional harm. In this lesson, it answers one specific support question. Record its evidence separately from the other layers instead of folding everything into a general guess.
Record affected users, business function, workaround, deadline, and safety or security consequences. Start with this approved method: Apply the support priority matrix. Keep the target, time, user context, and visible result together so the reasoning remains reproducible.
The safety boundary is specific: Requester seniority alone should not set priority. The expected result is also specific: Priority is supported by observable impact and urgency. If the observation does not match that result, preserve it and return to diagnosis instead of adding unrelated changes.
04
SLA clock
An SLA clock measures defined response or resolution targets under configured start, pause, and stop conditions. In this lesson, it answers one specific support question. Record its evidence separately from the other layers instead of folding everything into a general guess.
Confirm the applicable agreement and record any valid waiting state instead of changing timestamps informally. Start with this approved method: Review the case SLA timer and conditions. Keep the target, time, user context, and visible result together so the reasoning remains reproducible.
The safety boundary is specific: Changing status can affect measured SLA time. The expected result is also specific: Time targets and clock state are visible. If the observation does not match that result, preserve it and return to diagnosis instead of adding unrelated changes.
05
Ticket ownership
Ticket ownership assigns responsibility for the next action even when other teams contribute work. In this lesson, it answers one specific support question. Record its evidence separately from the other layers instead of folding everything into a general guess.
Name the current owner, next action, dependency, and update time whenever the case changes hands. Start with this approved method: Update owner, status, and next action together. Keep the target, time, user context, and visible result together so the reasoning remains reproducible.
The safety boundary is specific: A queue assignment is not a complete handoff. The expected result is also specific: The case always has an accountable next step. If the observation does not match that result, preserve it and return to diagnosis instead of adding unrelated changes.
06
Escalation threshold
An escalation threshold is the evidence or deadline that requires additional authority, skill, or coordination. In this lesson, it answers one specific support question. Record its evidence separately from the other layers instead of folding everything into a general guess.
Escalate with impact, evidence, actions tried, remaining risk, and time target before a breach. Start with this approved method: Use the documented functional or management path. Keep the target, time, user context, and visible result together so the reasoning remains reproducible.
The safety boundary is specific: Escalation is not closure or abandonment. The expected result is also specific: The receiving team can act without repeating discovery. If the observation does not match that result, preserve it and return to diagnosis instead of adding unrelated changes.
07
Apply One Controlled Support Action
Before changing state, name the exact target, required authorization, expected result, user impact, and recovery or reversal path. Protect unsaved work and relevant data, then explain any interruption or privacy exposure to the user in plain language.
Make one narrow change and stop. If a prompt, error, identity, device, path, or result differs from the approved plan, do not improvise with broader access or several fixes. Capture the new evidence and reassess the system layer that produced it.
A successful button, command, or progress message only confirms that an operation ran. Repeat the original user workflow and compare it with the baseline to decide whether the support objective was actually met without a new side effect.
08
Verify, Document, and Handoff
Verification should test the original success condition and one safe boundary condition. Record what changed, what remained unchanged, who confirmed the result, and which temporary permissions, sessions, files, or tools were removed after the work.
Write the support record so another person can continue without repeating completed steps. Include exact evidence and outcomes, but remove passwords, tokens, private content, and any personal information that the support purpose does not require.
Escalate when the required authority, product support, safety procedure, privacy permission, recovery evidence, or diagnostic certainty is missing. A complete escalation packages the symptom, scope, evidence, actions, results, risk, and next decision rather than forwarding an empty ticket.
09
Recap Before Practice and Prove
Start with request classification. Restate the user's need and choose the case type that matches the actual outcome required. The result to preserve is the ticket follows the correct workflow.
Keep impact and urgency separate. Record affected users, business function, workaround, deadline, and safety or security consequences. Respect this boundary: requester seniority alone should not set priority.
Use sla clock to narrow the case. Confirm the applicable agreement and record any valid waiting state instead of changing timestamps informally. Verify that time targets and clock state are visible.
Before a broader action, review ticket ownership. Name the current owner, next action, dependency, and update time whenever the case changes hands. Stop if a queue assignment is not a complete handoff.
Finish with escalation threshold. Escalate with impact, evidence, actions tried, remaining risk, and time target before a breach. Record the final evidence, user outcome, and any remaining escalation or recovery boundary.