Do not just define which systems a partner supports. Agree who handles alerts, approves changes and makes decisions during an incident. Your internal IT retains oversight when access, documentation and decisions remain transparent.
In-house
Business priorities and approvals
Together
Architecture, maintenance planning and escalation
Delegated
Specifically agreed technical operations
Example allocation of responsibilities
| Task | Internal IT | Operations partner |
|---|---|---|
| Monitoring | Identify business impact and contacts | Monitor agreed systems and handle alerts within the agreed service hours |
| Updates | Agree the maintenance window and business impact | Prepare, implement and technically validate the change |
| Incident | Coordinate business teams and set priorities | Analyse, intervene and escalate within the agreed scope |
| Change | Own the requirement and approval | Assess impact, carry out the change and document it |
Distinguish support hours from an operational mandate
A block of support hours provides assistance. It does not automatically mean someone continuously monitors your environment or responds outside business hours. Agree scope, service hours, response times and cover explicitly. Response time and recovery time are different commitments.
Walk through an incident together
For example, a storage path fails overnight but applications keep running. Who acknowledges the alert in the ticket? Who checks the remaining paths? May the partner restart the switch, or is approval required? Who decides if nobody can be reached? Record the owner, cover, authority and escalation path. Emailing both teams answers none of these questions.
Keep knowledge and access within the company
The internal team needs usable documentation, traceable changes and defined administrative access. Agree how new colleagues are onboarded and how the service could be handed over later. Regular joint reviews of incidents, capacity and outstanding actions prevent operations becoming a series of isolated requests.
Questions to resolve
- Are systems, tasks and excluded services specified?
- Who handles alerts during which service hours?
- Who can approve changes and emergency action?
- Can internal IT access documentation and the agreed accounts?