The operating plan
Three phases. Clear ownership.
Each phase has a goal, work owned by both teams, a checkpoint, and a test before the next one begins.
Stabilize & baseline
Know the environment, close top risks, and prove the service desk.
- Map the environment and close top risks.
- Bring monitoring, RMM, and the AI service desk live.
- Verify backups with a real restore.
- Name contacts and approve the risk list.
- Route requests through the service desk.
- Confirm the environment map.
- Agree the Day-30 report and roadmap.
Checkpoint
State of Environment report + prioritized 12-month roadmap.
Done when
An agreed map and roadmap, top risks closed, and a service desk answering in minutes.
Harden & standardize
Turn the roadmap into standards so the environment stops drifting.
- Execute the agreed roadmap.
- Set endpoint, patch, backup, and security baselines.
- Document runbooks and reporting cadence.
- Approve change windows and share renewal dates.
- Join runbook and report reviews.
- Coordinate with existing vendors.
- Sign off runbooks and reporting.
Checkpoint
Progress review: gaps closed, monitoring coverage, response metrics, and open items.
Done when
Green patch and backup baselines, a passed restore, runbooks, and the first report.
Optimize & prove
Prove the service in numbers and begin the next quarter from a run rate.
- Expand proven automation and AI.
- Review SLA targets and prepare phase 2.
- Send the first quarterly review pack.
- Bring phase-2 priorities.
- Check reported figures against your experience.
- Hold the quarterly review.
- Agree the Day-91 operating rhythm.
Checkpoint
Optimization and handover review: automation, SLA, roadmap phase 2, and documentation.
Done when
SLA reviewed, phase 2 underway, quarterly review held, and steady state documented.