During a major IT infrastructure transition, a Tier 1 help desk technician receives an escalated user ticket regarding access failure to an encrypted network share containing time-sensitive financial records. Following initial troubleshooting, the technician determines that the issue stems from an unmapped Kerberos Service Principal Name (SPN) and missing Active Directory group delegation, which requires Tier 3 System Administration permissions to remediate. According to standard ticketing system lifecycle workflows, which of the following actions must the Tier 1 technician take before reassigning ownership of the ticket?
- Document all completed diagnostic steps, specific error codes, and the technical reason for escalation in the ticket work log, then reassign the ticket to the Tier 3 queue with an active in-progress status.Cevap
- BMark the ticket status as Resolved with the note 'Escalated to Infrastructure Team' to maintain Tier 1 Service Level Agreement (SLA) compliance metrics.
- CClose the initial incident ticket and instruct the user to open a new formal Service Request ticket targeted specifically at the Security Operations queue.
- DImmediately transfer the ticket to the Tier 3 manager without adding work notes so that the original timestamp remains unaltered for compliance auditing.
Cevap
Document all completed diagnostic steps, specific error codes, and the technical reason for escalation in the ticket work log, then reassign the ticket to the Tier 3 queue with an active in-progress status.
The correct response highlights the fundamental ITSM requirement to thoroughly document all preliminary diagnostic actions, findings, error codes, and escalation justifications prior to transferring ticket ownership. Keeping the ticket active ensures that the ticket lifecycle continues seamlessly through Tier 3 without falsifying SLA metrics or losing incident history.
Adım Adım Çözüm
Anahtar Kavram
Incident Escalation and Ticket Worklog Lifecycle Documentation