About this assessment
The service desk is where most employees experience IT, and it is now one of the easiest ways into an organization. When it works, users reach help through the right channel, get a fix the first time and rarely call back. When it fails, tickets bounce between teams, users repeat themselves, a few senior agents hold all the know-how, and a convincing caller or an automated agent can talk the desk into resetting someone else's account.
The model follows the desk in the order it must be built and proven: the charter, business alignment, sourcing, channels, hours and resolver agreements; then skills, forecasting, scheduling, the platform, telephony, integrations and AI readiness; then catalog requests and joiner, mover and leaver work, ticket logging, classification, priority and aging, knowledge coverage and contribution, and tiered resolution, escalation, swarming and major incidents. A dedicated domain tests the desk as a security control point, from identity verification and high-risk request controls to inbound AI agent contacts, sensitive data and continuity. It closes with self-service, automation and AI guardrails, key performance indicators (KPIs), experience and cost, and quality, complaints and improvement.
Each question is scored on three dimensions: Documented, Implemented and Effective. This exposes practices that exist on paper but not in daily work, work that is done but never written down, and practices that run but are never measured, such as a verification standard agents bypass under pressure or surveys that never drive change. Sibling models own adjacent depth: Incident Management, Problem and Root Cause Management, Knowledge Management, Service Level Agreements and Performance, Technology Service Catalog and AI Governance, while this model tests the desk's hand-off to each.
Citation notes: EU AI Act Art. 50(1) (9.4) applies only where the virtual agent interacts with people in the EU; the duty sits with the provider and is passed to the desk by contract. UAE Federal Decree-Law No. 45 of 2021 (1.3, 8.09) applies to UAE private-sector desks; UAE government entities follow emirate data laws instead. The Saudi PDPL citations apply to Saudi desks.