Managed IT Service Desk
Give business users one accountable route to IT support.
A structured enterprise support channel for incidents and service requests, with clear priority, ownership, escalation and communication.
Based in Boksburg and supporting organisations across Gauteng: IT support in Johannesburg and IT support on the East Rand.
Discuss this managed service →Defined scope. Clear ownership. Visible service.
A structured enterprise support channel for incidents and service requests, with clear priority, ownership, escalation and communication. Namandla Consultants begins with discovery, agrees responsibilities and measures the service against operational outcomes.
What the service can cover.
Request intake and triage
Capture incidents and service requests with the context required for effective prioritisation.
Prioritisation and ownership
Apply agreed impact and urgency rules, assign ownership and track the request through resolution.
Escalation
Escalate specialist, supplier or business-critical issues without losing accountability.
User communication
Provide useful progress updates, resolution notes and closure confirmation.
Knowledge and repeatability
Document common resolutions and reduce avoidable repeat effort.
Service reporting
Report volumes, response, resolution, recurring issues and improvement opportunities.
Controlled from onboarding to improvement.
Service desk against help desk
The terms get used interchangeably and the difference is real.
A help desk answers questions and fixes breakage. Reactive, incident-focused, measured on how fast tickets close.
A service desk is the single point of contact for everything IT-related. Incidents, service requests, changes, information requests and access. It owns the user’s experience of IT end to end, including the parts it escalates to someone else.
The practical difference is what happens to a request the desk cannot resolve. A help desk passes it on. A service desk passes it on and keeps ownership, so the user has one place to ask and one person accountable for the answer arriving.
What runs through the desk
Incidents
Something is broken. Restore service.
Service requests
Something is needed. New user, software installation, access to a share, a replacement device, a mailbox. These follow a request catalogue with defined fulfilment steps and defined approvals, so they are repeatable rather than improvised.
Access requests
Handled through the request catalogue with approval routing, because access granted informally is the finding at the top of every access review.
Information requests
How do I do this. Frequently the leading indicator of a training gap or a badly designed process, and worth counting for that reason.
Change requests
Routed to change control rather than actioned at the desk.
Response commitments
| Severity | Definition | Response target | Hours |
|---|---|---|---|
| P1 | Business stopped. A site, a core system or a production service is unavailable, or a security incident is in progress. | 30 minutes | Business hours and after hours through the standby escalation |
| P2 | Major degradation. Multiple users affected and a workaround exists. | 4 business hours | Business hours |
| P3 | A single user is blocked, or a service request. | Next business day | Business hours |
| Non-contract work | No support agreement in place. | Next business day, scheduled | Business hours |
Response means an engineer who can work the problem has made contact and started, not an automated ticket receipt.
Business hours are 08:00 to 17:00, Monday to Friday, excluding South African public holidays. Outside those hours a standby rota carries P1 only. Automated monitoring runs continuously.
Response time and resolution time are different things
Response is a commitment we control. Resolution depends on the fault, on third parties and on access, and any provider quoting a guaranteed resolution time across all incidents is quoting something they cannot hold.
What we do commit to is response, continuous work on a P1 until service is restored, and communication at defined intervals so you are never waiting without an update.
How the desk is run
Contact channels
Phone, email and a self-service portal. All three create a ticket. Phone matters more than vendors admit, because a user with a genuine P1 will phone, and an arrangement that routes everything through a portal adds friction at exactly the wrong moment.
Triage
Every contact is categorised and assigned a severity on arrival, against the definitions agreed with you during onboarding. Categorisation is not administrative overhead, it is the input to problem management, and a desk that does not categorise consistently produces reporting that cannot be acted on.
First contact resolution
Resolving at the first contact is faster for the user and cheaper for everyone. The rate is driven by three things: the knowledge base, the access the first-line engineer has, and whether the recurring issues have been documented.
A realistic target on a mature arrangement is sixty-five to seventy-five percent. Providers quoting ninety percent are either counting differently or triaging out anything difficult before it is logged.
Shift-left
Work moves to the cheapest capable level over time.
Third line to second line through documentation. Second line to first line through runbooks. First line to self-service through the knowledge base and the request catalogue. Self-service to no ticket at all through fixing the underlying cause.
That last step is the one that matters and it is where problem management connects to the desk. A password reset that has been shifted to self-service is an improvement. A password reset that no longer happens because the expiry policy was rationalised is a better one.
Knowledge base
Written as the desk works rather than as a project. Every ticket that took investigation and might recur gets an article. The measure of a useful knowledge base is not article count but the proportion of tickets resolved using one.
Confirmation and closure
Tickets are closed with the user, not unilaterally. A ticket closed by the engineer without confirmation is how “it is still broken” surfaces a week later, and it corrupts the resolution statistics along the way.
Reporting
Monthly, and built to be acted on rather than filed.
Volume by category and severity, with trend. Response performance against target. First contact resolution rate. Recurring issues, which is the section that generates the problem records. Top requesters and top categories, which frequently identify a training need or a badly designed process rather than a technical fault. Ageing, so nothing sits unlooked-at.
Quarterly service review covering the trend across the period, the problem records opened and closed, what changed in the environment and what is proposed next.
A report that only counts tickets closed tells you how busy the provider was. It does not tell you whether your environment is improving, and those are different questions.
What Namandla delivers
Single point of contact across phone, email and portal. Triage and severity assignment against agreed definitions. First and second line resolution. Escalation to third line and to third-party vendors, with ownership retained. Request catalogue design and fulfilment. Onboarding and offboarding as defined processes. Knowledge base development. Monthly reporting and quarterly service review. Integration with monitoring, so alerts become tickets automatically and the desk sees infrastructure events alongside user contacts.
Remote delivery nationally. Onsite attendance in Gauteng where a ticket needs hands.
Common questions about Managed Service Desk
What is a managed service desk?
A managed service desk is an outsourced single point of contact for all IT requests, run by a provider against agreed response times, with the ticket data used to identify and remove recurring causes.
It covers incidents, service requests, access requests and information requests. The distinguishing feature against ad-hoc support is that it is measured: response times against target, first contact resolution, recurring issues and trend, reported monthly.
What are your response times?
P1, meaning business stopped or a security incident in progress, is 30 minutes including after hours through the standby escalation. P2, major degradation with a workaround, is 4 business hours. P3 and non-contract work is next business day.
Response means an engineer who can work the problem has made contact and started. Ask any provider to define what their response time measures, because a fifteen-minute figure that counts an automated email receipt is not comparable to one that counts a person starting work.
Do you guarantee resolution times?
No, and be cautious of anyone who does across all incident types. Resolution depends on the nature of the fault, on third-party vendors and on access, none of which a provider fully controls.
What we commit to is response, continuous work on a P1 until service is restored, and communication at defined intervals. Where a specific recurring incident type has a known resolution path, we will commit to a time for that specific type, because that is a commitment we can actually hold.
How do users contact the desk?
Phone, email and a self-service portal. All three create a ticket and all three are equally valid routes.
Phone matters more than it is fashionable to admit. A user with a genuine business-stopping problem will phone, and routing everything through a portal adds friction at the worst moment. The portal earns its place for routine requests and for status checking, not as the only door.
What is first contact resolution and what rate should we expect?
First contact resolution is the proportion of tickets resolved during the initial contact without escalation. A realistic target on a mature arrangement is sixty-five to seventy-five percent.
It is driven by the knowledge base, by how much access first-line engineers have and by whether recurring issues have been documented. Be sceptical of quoted rates above about eighty-five percent. They usually mean something is being counted differently or that difficult contacts are being triaged out before they become tickets.
Will you replace our internal IT person?
Not unless that is what you want. The more common arrangement is co-managed, where the desk handles high-volume user contact and your internal person keeps the application knowledge, the business-specific vendor relationships and the project work.
That split puts your internal person on work nobody external can do as well. It is also the arrangement they generally prefer, because the volume of interruption is what makes an internal IT role unsustainable rather than the difficulty of the work.
How does onboarding work?
Two to four weeks. Environment documentation, contact channel setup, severity definitions agreed against your specific systems, request catalogue built, knowledge base seeded from your existing documentation and a communication to your users.
The user communication is the part most often rushed and it determines adoption. People need to know the number, the address and what to expect. A desk nobody uses because they carried on phoning the person they always phoned is a common and entirely avoidable failure.
Do you use our ticketing system or yours?
Either. Using ours is faster to start and gives you our reporting immediately. Using yours keeps the history in one place and matters where you have integrations or an existing process built around it.
Where you use ours, the ticket data is yours and it is exportable. Confirm that with any provider before starting, because ticket history that cannot leave the provider’s platform is a genuine constraint on ever changing provider.
What reporting do we get?
Monthly: volume by category and severity with trend, response performance against target, first contact resolution rate, recurring issues, top requesters and categories and ageing. Quarterly: a service review covering trend, problem records and what is proposed next.
The recurring issues and top categories sections are the useful ones. They routinely identify a training gap or a badly designed process rather than a technical fault, and those are cheaper to fix than anything technical.
Should ticket volume go down?
Yes. In a well-run arrangement volume should be measurably lower by the end of the second quarter as recurring causes are removed. Flat volume after six months means tickets are being closed and causes are not being addressed.
This is the single most useful measure of whether a service desk is doing more than answering the phone. Ask for the trend rather than the count, and ask what was done about the top three recurring categories.
Can the desk handle our line-of-business application?
For first-line support, usually yes, once we have documentation and access. Deeper support depends on the application and is normally a shared arrangement with the vendor or with your internal expert.
We are direct about the boundary. Taking first-line contact and escalating to the right place with context is genuinely valuable even where we cannot resolve it, because it removes the routing burden from your users. Claiming full support for an application we do not know would not survive contact with the first real ticket.
When is a managed desk more than you need?
Below roughly twenty to twenty-five users, a managed service desk is generally more structure than the volume justifies. Direct access to an engineer is faster and cheaper at that size.
The case gets strong once volume is high enough that tickets queue behind each other, once you have more than one site, or once you need response commitments you can point to. If you are below that, ad-hoc support with an agreed rate and a good relationship will serve you better, and we are happy to work that way.