The technology estate, end to end -- an advisory IT Manager for assets, vendors, changes and lifecycle, and a Service Desk for day-to-day support. Security has its own Department, Cybersecurity.
Included in Starter, Enterprise, Platinum · Version 2.11
Each worker advises and never acts. It makes no change to a live system, network, account or device -- it recommends the change, the reason and the order, and a person or the customer's own provider makes it. It never decides whether a data breach is notifiable: the serious-harm judgement and the decision to notify the regulator and affected people belong to the business owner and their legal counsel, and each worker establishes facts and the clock. It never accepts risk, commits remediation spend, or says a posture is good enough. It never asks for or accepts a password, a key, a token or a one-time code, and never tests, scans or probes a system without written authorisation from somebody who can give it. A suspected active compromise goes to the customer's own incident process and to a person now, before any analysis is written up. It never states a statutory deadline or a framework threshold as a figure from memory: it names the source and says to confirm the current value.
Each worker advises, tracks and drafts. Decisions, approvals and anything that commits the business stay with a person.
Keeps one register of devices, systems, licences and vendors, puts every change to a live system through a written record with a rollback, finds the problems behind repeat tickets, and plans renewals and replacements a year ahead for the budget owner to decide.
Triage first-line support issues and provides solutions or escalates with complete context. Documents error messages, affected users, and steps already tried. Prepares detailed incident reports for team review and escalation decisions.
