Service Management Discipline
This group looks at whether day-to-day IT work runs on defined, repeatable processes rather than heroics and habit. It covers how incidents and problems are logged and resolved, how changes to systems are controlled to avoid outages, and whether documentation is good enough for a competent newcomer to support.
- Incident and problem process
- Change control
- Documentation
Chaos replaces process; outages and rework become routine.
Monitoring & Incident Response
This group assesses whether you can see what is happening across your technology estate and act on it quickly. It covers visibility of health and security through monitoring tools, the speed at which issues are detected and addressed before users notice, and credible arrangements covering problems outside business hours.
- Estate visibility
- Response speed
- Out-of-hours coverage
Failures go unseen until users and customers suffer.
Strategic vs Operational Balance
This group looks at how your IT team's time and energy are actually spent. It covers the balance between firefighting and improvement work, whether project demands are met without core operations suffering, and whether the team has genuine headroom to evaluate new technologies, including AI, properly.
- Firefighting ratio
- Project delivery capacity
- Innovation headroom
Firefighting consumes everything; strategy and AI ambitions stall.
Tooling & Vendor Sprawl
This group examines whether your tools, licences and suppliers are actively managed or quietly accumulating. It covers knowing what tools you own, what they cost and where they overlap, keeping licensing aligned to actual use, and managing supplier contracts and renewals deliberately rather than letting them roll over unexamined.
- Tool rationalisation
- Licence optimisation
- Vendor management
Sprawling tools and unmanaged vendors bleed budget silently.
IT Capacity & Key-Person Risk
This group examines whether your IT team can actually carry the load placed on it. It covers whether capacity matches demand, whether critical knowledge is dangerously concentrated in single individuals, and whether you can recruit or grow the specialist skills your organisation needs at the pace the business moves.
- Capacity vs demand
- Key-person exposure
- Skills coverage
Overstretched teams and single points of failure collapse together.