IT Service Management Assessment

Service Desk Maturity Assessment

Evaluates service desk maturity across governance and channels, workforce, technology, request fulfillment, ticket handling, knowledge use, resolution and escalation, desk security and continuity, self-service and AI, performance and experience measurement, and quality and continual improvement.

Already have an account? Log in to start

Who it is for

  • Desk Operations and Workforce Management
  • Resolver and Service Management Teams
  • Platform, Automation and AI
  • Security, Identity and Privacy
  • Process Owner/Full Model Assessor

Service Desk Manager / Head of IT Support / Desk Team Leads / Service Management Platform Owner. Secondary: identity and security operations, workforce and quality analysts, knowledge managers, IT leaders who fund the desk.

What you will gain

Shows where users wait too long, get inconsistent answers or repeat themselves, where the desk depends on a few people, where an impersonator or an AI agent could get past the desk, and where measures do not drive change. Gives the desk leader a path to faster resolution, safer support, higher satisfaction and lower avoidable demand.

About this assessment

The service desk is where most employees experience IT, and it is now one of the easiest ways into an organization. When it works, users reach help through the right channel, get a fix the first time and rarely call back. When it fails, tickets bounce between teams, users repeat themselves, a few senior agents hold all the know-how, and a convincing caller or an automated agent can talk the desk into resetting someone else's account.

The model follows the desk in the order it must be built and proven: the charter, business alignment, sourcing, channels, hours and resolver agreements; then skills, forecasting, scheduling, the platform, telephony, integrations and AI readiness; then catalog requests and joiner, mover and leaver work, ticket logging, classification, priority and aging, knowledge coverage and contribution, and tiered resolution, escalation, swarming and major incidents. A dedicated domain tests the desk as a security control point, from identity verification and high-risk request controls to inbound AI agent contacts, sensitive data and continuity. It closes with self-service, automation and AI guardrails, key performance indicators (KPIs), experience and cost, and quality, complaints and improvement.

Each question is scored on three dimensions: Documented, Implemented and Effective. This exposes practices that exist on paper but not in daily work, work that is done but never written down, and practices that run but are never measured, such as a verification standard agents bypass under pressure or surveys that never drive change. Sibling models own adjacent depth: Incident Management, Problem and Root Cause Management, Knowledge Management, Service Level Agreements and Performance, Technology Service Catalog and AI Governance, while this model tests the desk's hand-off to each.

Citation notes: EU AI Act Art. 50(1) (9.4) applies only where the virtual agent interacts with people in the EU; the duty sits with the provider and is passed to the desk by contract. UAE Federal Decree-Law No. 45 of 2021 (1.3, 8.09) applies to UAE private-sector desks; UAE government entities follow emirate data laws instead. The Saudi PDPL citations apply to Saudi desks.

What we assess: 11 domains

Each domain is a group of related questions, scored on its own and rolled up into your overall result.

01 · 7 questions

1 Service Desk Governance and Channel Strategy

Covers Service Desk Charter and Governance, Business Outcome Alignment, Operating and Sourcing Model, Channel Strategy, Support Hours and Coverage Model, Resolver Group Operational Agreements and Accessible and Inclusive Support.

02 · 9 questions

2 Workforce and Culture

Covers Agent Skills Matrix, Agent Onboarding, Continuous Technical and Customer Skills Training, Demand Forecasting and Capacity Planning, Scheduling and Shrinkage Management, Surge Capacity, Agent Career Development, Agent Satisfaction Measurement and Agent Wellbeing and Retention.

03 · 7 questions

3 Technology and Tooling

Covers Service Management Platform Configuration, Telephony and Contact Integration, Remote Support Capability, System Integration, Proactive Support and Digital Experience Monitoring, Service Desk Technology Roadmap and AI and Automation Readiness.

04 · 6 questions

4 Service Catalog and Request Fulfillment

Covers Catalog-Based Request Intake, Fulfillment Targets, Approval Workflow, New Joiner Provisioning, Mover Access Changes and Leaver Access Removal.

05 · 6 questions

5 Ticket Management and Workflow

Covers Universal Ticket Logging, Ticket Classification, Priority Matrix, Ticket Lifecycle Enforcement, Aging Ticket Management and Reopened Ticket Management.

06 · 6 questions

6 Knowledge Use and Contribution

Covers Knowledge Coverage of Top Contact Reasons, User-Facing Knowledge, Agent Knowledge Contribution, Article Flagging and Feedback, Approved Knowledge for Desk AI and Knowledge Effectiveness.

07 · 9 questions

7 Incident Resolution and Escalation

Covers Tiered Support Model, Functional Escalation Paths, Management Escalation, Warm Handoff, Swarming and Collaborative Resolution, Major Incident Desk Role, Workaround and Known Error Use, Problem Management Linkage and Change and Release Readiness.

08 · 11 questions

8 Desk Security, Privacy and Continuity

Covers Caller Identity Verification, Spoofing and Deepfake Resistance, Requester Entitlement Check, High-Risk Request Controls, Change Notification and Reset Abuse Monitoring, Inbound AI Agent Contacts, Automated Abuse Protection on Desk Channels, Social Engineering Defense, Sensitive Data in Tickets and Recordings, Agent Access and Privileged Tool Control and Service Desk Continuity.

09 · 9 questions

9 Self-Service, Automation and AI

Covers Self-Service Portal, Intelligent Routing, Task and Workflow Automation, Virtual Agent, AI Assistance for Agents, AI Agent Action Guardrails, Prompt Injection Protection, AI Pause and Rollback and Self-Service Adoption.

10 · 8 questions

10 Performance and Experience Measurement

Covers Service Desk KPI Framework, Real-Time Operational Dashboard, Resolution Time Analysis, First-Contact Resolution, Transactional Satisfaction, Experience and Segment Measurement, Service Desk Cost and Efficiency and Service Desk Benchmarking.

11 · 7 questions

11 Quality and Continual Improvement

Covers Quality Assurance Program, Agent Coaching, Complaint Management, Detractor Follow-Up and Feedback Action, Demand Trend Analysis, Continual Improvement Register and Service Desk Maturity Review.

KPIs to track

Measures that show whether the improvements hold.

KPI
First-contact resolution - Share of resolvable contacts resolved in one interaction. Target: at least 70%.
Closed ticket satisfaction - Average satisfaction score on closed tickets on a 1 to 5 scale, reported only for channels meeting the minimum response rate and count. Target: at least 4.3.
Day-one readiness - Share of new joiners with devices and access ready and working on their first day. Target: at least 95%.
Verified before action - Share of sampled account-related contacts with identity verified to the standard before any action. Target: 100%.
Demand resolved without an agent - Share of all support demand resolved through the portal or virtual agent with no agent contact on the same issue within 7 days. Target: at least 30%.

Framework alignment

Questions are written in plain language and mapped to:

  • SDI Global Best Practice Standard Version 9.0
  • HDI Support Center Standard v5.3
  • COBIT 2019
  • ISO/IEC 20000-1:2018
  • ITIL 4
  • Saudi PDPL
  • Saudi PDPL Transfer Regulation v2 (2024)
  • UAE Federal Decree-Law No. 45 of 2021
  • ISO/IEC 30071-1:2019
  • W3C WCAG 2.2
  • ISO/IEC 42001:2023
  • ISO/IEC 27001:2022
  • ADHICS v2
  • UAE Information Assurance Standard v2.1
  • KCS v6 Practices Guide
  • NIST AI RMF 1.0
  • Consortium for Service Innovation Intelligent Swarming
  • NIST SP 800-63B-4
  • OWASP Top 10 for Agentic Applications 2026
  • NCA ECC-2:2024
  • ISO 22301:2019
  • Regulation (EU) 2024/1689
  • OWASP Top 10 for LLM Applications 2025
  • ISO 10004:2018
  • ISO 10002:2018

Works best with

Practices this assessment relies on. Assessing them too gives a fuller picture.

Incident Management (v9.9.6): owns the incident process and major incident management; this model tests only the desk role in recognizing, reporting and handing over (7.6).
Knowledge Management (v10.9.6): owns the knowledge process, KCS program, article lifecycle and AI knowledge governance; this model tests desk coverage, contribution, flagging and AI use of approved knowledge (domain 6).
Service Level Agreements and Performance (v5.9.6): owns service level and operational level agreements; this model tests that resolver agreements support desk targets (1.6, 7.2).
AI Governance (v11.9.6): owns enterprise AI policy and risk assessment; this model tests how the desk applies it to assistants, the virtual agent and AI agents (3.7, 9.4 to 9.8).
Security Operations Center Cyber and Incident Response (v8.9.6): owns triage of reset abuse, channel floods and pretext calls; this model tests desk detection and handoff (8.05, 8.07, 8.08).
Recommended: assess Knowledge Management and Service Level Agreements and Performance (v5.9.6) first, then this model, with Incident Management alongside.

What you get

Maturity scores

An overall score and a score for each of the 11 domains.

Gap analysis

A clear view of where current practice falls short, and why it matters.

Improvement recommendations

Prioritized next steps to move each area to the next level.

Detailed report

Results you can share with leadership and track over time.

See where you stand on Service Desk Maturity Assessment

Register, take the assessment, and get your maturity score with a clear improvement roadmap.

Register to take this assessment

Start Measuring Your Maturity Today

© 2026 ITSGovernance, part of SMCE. All rights reserved. Cookie settings