--- title: "Incident Management in Managed Services: How It Works" description: "Incident management in managed services explained: how IPTel logs, prioritises and resolves network incidents so IT leaders get service back sooner." image: https://blog.iptel.com.au/hubfs/Blogs/Managed%20Services%20Incident%20Management/incident-management-square-feature.jpg --- [![IPTellogo-byline-2020-dark-v2-pnd-optimised-500 (1)](https://blog.iptel.com.au/hs-fs/hubfs/IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png?width=200&height=59&name=IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png "IPTellogo-byline-2020-dark-v2-pnd-optimised-500 (1)")](https://iptel.com.au) - [Home](https://iptel.com.au/) - [Solutions](https://iptel.com.au/solutions) Technologies - [Cisco Access Manager](https://iptel.com.au/technologies/cisco-access-manager) - [Cisco Catalyst Center](https://iptel.com.au/technologies/cisco-catalyst-center) - [Cisco Meraki](https://iptel.com.au/technologies/cisco-meraki) - [Cisco SDA Fabric](https://iptel.com.au/technologies/cisco-sda-fabric) - [Cisco Spaces](https://iptel.com.au/technologies/cisco-spaces) - [Everpure Storage](https://iptel.com.au/technologies/everpure-storage) - [Industrial IoT](https://iptel.com.au/technologies/industrial-iot) - [LAN](https://iptel.com.au/technologies/lan) - [Security and Cisco ISE](https://iptel.com.au/technologies/security-and-cisco-ise) - [ThousandEyes](https://iptel.com.au/technologies/thousandeyes) - [Virtualisation](https://iptel.com.au/technologies/virtualisation) - [Wi-Fi](https://iptel.com.au/technologies/wi-fi) Services - [Backup Assure](https://iptel.com.au/services/backup-assure) - [Cisco Network Upgrades](https://iptel.com.au/services/cisco-network-upgrades) - [Cisco URWB](https://iptel.com.au/services/cisco-urb) - [Cisco Webex Calling](https://iptel.com.au/services/cisco-webex-calling) - [Eco-Friendly Network Refresh](https://iptel.com.au/services/eco-friendly-network-refresh) - [Network Equipment Supply](https://iptel.com.au/services/network-equipment-supply) - [Splunk](https://iptel.com.au/services/splunk) - [Wi-Fi Assurance Review](https://iptel.com.au/services/wi-fi-assurance-review) - [Wi-Fi Surveys](https://iptel.com.au/services/wi-fi-surveys) - [Industries](https://iptel.com.au/industries) Education and Healthcare - [Education and Campuses](https://iptel.com.au/industries/education) - [Healthcare and Clinical](https://iptel.com.au/industries/healthcare) - [Hospital Wi-Fi Onboarding](https://iptel.com.au/services/hospital-wi-fi-onboarding-cisco-ise) - [Aged Care](https://iptel.com.au/industries/aged-care) Enterprise - [Enterprise Networks](https://iptel.com.au/industries/enterprise) Industrial - [Mining and Camps](https://iptel.com.au/industries/mines) - [Utilities](https://iptel.com.au/industries/utilities) Retail & Warehousing - [Retail](https://iptel.com.au/industries/retail-and-stores) - [Warehousing](https://iptel.com.au/industries/warehousing) Entertainment - [Stadiums](https://iptel.com.au/industries/stadiums) - [Hospitality](https://iptel.com.au/hospitality-and-hotels) - [MSP](https://iptel.com.au/managed-services) Meraki - [Meraki Access](https://iptel.com.au/managed-services/meraki-access-and-security) - [Meraki Security and SD-WAN](https://iptel.com.au/managed-services/meraki-sd-wan) Cisco - [Cisco Campus Access](https://iptel.com.au/managed-services/cisco-campus-access) - [Cisco SD-WAN](https://iptel.com.au/managed-services/cisco-sd-wan) - [Cisco ISE](https://iptel.com.au/managed-services/cisco-ise) Security and Collaboration - [Security Service Edge](https://iptel.com.au/managed-services/security-service-edge) - [Meeting Rooms](https://iptel.com.au/managed-services/meeting-rooms-as-a-service) Data Centre and More - [AI Infrastructure](https://iptel.com.au/managed-services/ai-infrastructure) - [Non-Cisco Devices](https://iptel.com.au/managed-services/non-cisco-device-management) Free Assessment - [Managed Services Assessment](https://score.iptel.com.au/managed-network-services) - [Equipment](https://iptel.com.au/services/network-equipment-supply) Equipment Supply - [Network Equipment Supply](https://iptel.com.au/services/network-equipment-supply) - [Buy Cisco Equipment](https://iptel.com.au/services/cisco-equipment-supply) - [Buy Meraki Equipment](https://iptel.com.au/services/meraki-equipment-supply) Get Pricing - [Get a Hardware Quote](https://iptel.com.au/services/network-equipment-supply#hardware-quote) - [Wi-Fi AP Estimator](https://iptel.com.au/resources/wifi-access-point-estimator) - [Blog](https://blog.iptel.com.au) - [Resources](https://iptel.com.au/resources) Free Resources - [Top Wi-Fi Secrets](https://iptel.com.au/top-8-wi-fi-secrets) - [Cisco SDA Fabric](https://iptel.com.au/the-cios-guide-to-sda-fabric) - [Catalyst Center Enablement](https://iptel.com.au/cisco-catalyst-center-enablement) Assessments - [ASD Essentials Assessment](https://score.iptel.com.au/asd-essentials-network-assessment) - [Cloud AI Assessment](https://score.iptel.com.au/cloud-ai-assessment) - [Collaboration Assessment](https://score.iptel.com.au/collaboration-assessment) - [Managed Services Assessment](https://score.iptel.com.au/managed-network-services) - [Network Assessment](https://score.iptel.com.au/network-assessment) - [Security Assessment](https://score.iptel.com.au/security-assessment) - [Splunk Assessment](https://score.iptel.com.au/splunk-assessment) Tools - [Automating Meraki](https://www.automatingmeraki.com) - [MAC Address Converter](https://iptel.com.au/resources/mac-address-converter) - [ThousandEyes Option Tool](https://score.iptel.com.au/thousandeyes) - [Wi-Fi AP Estimator](https://iptel.com.au/resources/wifi-access-point-estimator) Demos and Design - [Request a Meraki Demo](https://iptel.com.au/free-meraki-demo) - [FREE Meeting Room Design](https://iptel.com.au/schedule-meeting-room-design-session) - [Catalyst Center Enablement](https://iptel.com.au/cisco-catalyst-center-enablement) - [About](https://iptel.com.au/about-us) IPTel Solutions - [About us](https://iptel.com.au/about-us) - [Job Applications](https://careers.iptel.com.au/job-application) - [Privacy Policy](https://iptel.com.au/privacy-policy) - [Careers Blog](https://careers.iptel.com.au) Contact Us - [Contact Us Form](https://iptel.com.au/contact-us) - [Email Us](mailto:sales@iptel.com.au) Customer - [Customer Feedback](https://iptel.com.au/customer-feedback) - [Customer Referral](https://iptel.com.au/customer-referral) - [Terms and Conditions](https://iptel.com.au/terms-and-conditions) News Stories - [Project Guardian uses Networking Infrastructure as a Sensor](https://www.dailytelegraph.com.au/news/nsw/transport-for-nsw-launches-worldfirst-sensor-trial-to-stop-rail-and-bridge-trespassers/news-story/8dc52e8fbca4c471da408e670cf0163e) - [IPTel partners for monitoring for Meeting Rooms as a Service](https://www.commsbusiness.co.uk/content/news/highlight-partners-with-iptel-solutions) - [Webex Monitoring with Highlight](https://itbrief.co.uk/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [ITBrief with Meeting Room Monitoring](https://itbrief.com.au/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [Cisco Webex Meeting Rooms Monitoring](https://telconews.co.uk/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [IPTel adopts Highlight](https://itbrief.com.au/story/iptel-adopts-highlight-to-enhance-managed-services) - [Highlight MSP Upgrade](https://datacentre.solutions/news/71753/iptel-solutions-upgrade-with-highlights-service-platform) - [Cisco 360](https://www.crn.com.au/news/2026/networking/aussie-partners-react-cisco-360) - [DP World Transformation](https://www.cisco.com/site/us/en/about/case-studies-customer-stories/dp-world.html) - [Cisco Managed Services](https://www.arnnet.com.au/article/1251771/how-partners-can-take-a-leap-of-faith-with-managed-services.html) - [Project Delivery Excellence](https://channellife.com.au/story/cisco-honours-top-nz-partners-cisco-live) - [Great Place to Work](https://greatplacetowork.com.au/companies/iptel-solutions/) - [Wi-Fi Doesn't have to be Unreliable](https://www.techpartner.news/feature/iptel-wi-fi-doesnt-have-to-be-unreliable-494069) Buying from IPTel - [Buying Panels](https://iptel.com.au/professional-supply-panels) - [IPTel Store](https://store.iptel.com.au) - [Request a Quote](https://iptel.com.au/request-a-quote) - [Managed Services](https://iptel.com.au/managed-services-enquiry) Case Studies - [DP World Video](https://blog.iptel.com.au/hubfs/Case%20Studies/DP%20World_Case_Study.mp4) - [DP World](https://blog.iptel.com.au/dp-world-case-study) - [Backup Assure](https://blog.iptel.com.au/backup-assure-a-disaster-recovery-case-study) [Contact Us](https://iptel.com.au/contact-us) This is a search field with an auto-suggest feature attached. - There are no suggestions because the search field is empty. ## Incident Management in Managed Services: How It Works Nov 27, 2025 Something has broken, or at least slowed down, and people are noticing. What happens next depends on how well incident management works. An incident is any unplanned interruption to an IT service, or a drop in its quality. In this blog, we'll explain how incident management works in our managed service, from the first alert to the root-cause analysis. ![Incident management in managed services: detection, prioritisation, investigation and stakeholder communication](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Managed%20Services%20Incident%20Management/incident-management-hero.png?width=1792&height=960&name=incident-management-hero.png) --- ## Incident Framework: Who Does What? [![Change Management: How Our Managed Service Handles Change](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Managed%20Services%20Change%20Management/change-management-square.png?width=173&height=173&name=change-management-square.png)](https://blog.iptel.com.au/managed-services-change-management)Incident management starts with a clear framework that sets out roles, responsibilities and procedures before anything goes wrong. Ours aligns with ITIL 4 incident management practice, adapted to each customer, so everyone involved knows their part the moment an incident is raised and no time is lost working out who owns it. Several groups share the life cycle of an incident: management, service management, the service desk, major incident management and the technical teams. Each has a defined job, from logging and triage through to escalation and resolution. In our [managed services](https://iptel.com.au/managed-services), those technical teams are the same senior network and security engineers who do our consulting, design and integration work. When an incident lands, it's handled by people who understand how networks like yours are built, not a generalist help desk working from a script. Related reading - [Change Management: How Our Managed Service Handles Change](https://blog.iptel.com.au/managed-services-change-management) - [Cisco Powered Managed Services: What It Means for You](https://blog.iptel.com.au/cisco-powered-managed-services) --- ## Detection: How Do Incidents Get Logged? Incidents reach us three ways: you log them through our customer portal, you contact our service desk, or our monitoring raises them automatically. Whichever route they take, each becomes a record in Jira Service Management, our IT service management platform, and is tracked from that point until it's resolved and closed. Automated detection carries a lot of the load. [Highlight](https://blog.iptel.com.au/highlight-service-observability) watches device health and performance across your sites, and the open incidents on its live dashboard are the ones our engineers are working, so you're looking at the same picture we are. A good record is the foundation of a fast fix. Each one captures a clear description, the date and time, the affected systems and the impacted users. Gaps at this stage cause confusion later, so we gather the detail properly up front, and you can follow progress on every ticket in the portal. Related reading - [Highlight: Service Observability for Managed Networks](https://blog.iptel.com.au/highlight-service-observability) - [ThousandEyes Managed Services: Networks You Don't Own](https://blog.iptel.com.au/thousandeyes-managed-services) --- ## Priority: Impact, Urgency and Hours of Cover [![Managed Network Services: Build the Business Case](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Managed%20Network%20Services%20Business%20Case/msp-business-case-square.jpg?v=2&width=173&height=173&name=msp-business-case-square.jpg)](https://blog.iptel.com.au/managed-network-services-build-the-business-case)Each incident is prioritised by impact and urgency: how many users or services are affected, and how quickly the business needs service back. We use an internal matrix to classify both on a per-customer basis, because a fault that's minor for one organisation can stop another one cold. Priority decides who works an incident and how quickly it escalates. Your service tier decides the hours in which that work happens. Essential provides monitoring and incident response during business hours. Advanced stretches cover to extended business hours and adds security-aware operations. Critical, built for mission-critical and operational technology environments, provides 24x7 incident response with a named Level 3 engineer. Some service domains spell this out as 24x7x365 support for P1 incidents (for non-Cisco devices, subject to vendor TAC availability). Enablement, our adoption and lifecycle tier, doesn't include monitoring or incident response, so it suits teams that run their own operations. **Pro-Tip:** Agree your priority definitions with us in plain business terms before go-live. "The pick floor can't scan" is far easier to classify in the moment than "high impact", and it saves a debate when every minute counts. Related reading - [Managed Network Services: Build the Business Case](https://blog.iptel.com.au/managed-network-services-build-the-business-case) - [Managed Services FAQs Part 1: Support, Hardware and Skills](https://blog.iptel.com.au/managed-services-faq-part-1) --- ## Investigation: Restoring Service and Finding the Cause Investigation has two jobs: get the service back, then find the root cause so the same incident doesn't return. The first is incident management; the second is problem management. We handle both, and we record what we learn so the next engineer who meets a similar fault starts well ahead. Highlight shows device health and performance across your sites in one view, which narrows down quickly where a fault sits. If the trouble lies outside your network, with an ISP, a cloud platform or a SaaS service, ThousandEyes can be added for internet, cloud and SaaS path visibility. When a fault turns out to be a Cisco software bug or a hardware failure, our engineers' direct relationships into Cisco engineering and Cisco TAC shorten the path to a fix. Lessons learnt go into a known error database and internal knowledge sharing, and root-cause analyses are published to the customer portal so the explanation sits alongside the ticket. Related reading - [ThousandEyes vs Cisco Catalyst Center](https://blog.iptel.com.au/thousandeyes-vs-catalyst-center) - [Troubleshooting with Cisco Catalyst Center](https://blog.iptel.com.au/troubleshooting-with-cisco-catalyst-center) --- ## Communication: Keeping the Right People Informed [![Managed Service Pain Points and How to Avoid Them](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Managed%20Service%20Pain%20Points/managed-service-pain-points-square.png?width=173&height=173&name=managed-service-pain-points-square.png)](https://blog.iptel.com.au/managed-service-customer-pain-points)Stakeholders should hear about an incident from their provider, not from frustrated users. The level of communication matches the severity: a low-impact fault might need a ticket update and a note to one contact, while a major incident brings regular, scheduled updates to a wider group, including senior leaders. The principle is the same at both ends. The people who need to know are told at the right stage: what's happened, what's being done and when they'll hear next. Then we look back. Incident data feeds into your regular service reviews (quarterly or monthly, depending on your tier), where we look at trends, recurring faults and capacity, and agree what to improve. On Critical, executive reporting gives leadership the view they need without wading through tickets. Related reading - [Managed Service Pain Points and How to Avoid Them](https://blog.iptel.com.au/managed-service-customer-pain-points) - [Managed Network Services: 5 Benefits for Your Business](https://blog.iptel.com.au/managed-services-top-5-benefits) --- ## Incident Management: FAQs ### What Is an IT Incident? An unplanned interruption to an IT service, or a reduction in its quality. A failed switch is an incident, and so is Wi-Fi that's up but too slow for staff to work. ### How Are Incidents Prioritised in a Managed Service? By impact and urgency: how many users or services are affected and how fast the business needs service restored. We agree the matrix with each customer, so priorities reflect how your organisation actually works. ### What Is the Difference Between Incident and Problem Management? Incident management restores service as quickly as possible. Problem management finds and removes the underlying cause so the incident doesn't come back. A good managed service does both. ### Do You Provide 24x7 Incident Response? Yes, on our Critical tier, which includes 24x7 incident response and a named Level 3 engineer. Essential is business hours only, while Advanced runs across extended business hours. ### How Do I Log an Incident? Through the customer portal or our service desk, or our monitoring raises it automatically. Every incident is then tracked in the portal until it's closed. --- ## Incident Management: Summary Good incident management is less about heroics and more about preparation: a clear framework, reliable detection, honest prioritisation, thorough investigation and steady communication. In our managed service, the portal, Highlight and your chosen tier hours work together so service comes back quickly and the same fault is less likely to return. ### Need Help With Incident Management? If you'd like a team of senior engineers handling your network incidents, find out more about our [Cisco Powered managed services](https://iptel.com.au/managed-services) or [make an enquiry](https://iptel.com.au/managed-services-enquiry). Want to know which tier suits your environment? Our free 10-minute [Build Your Business Case assessment](https://score.iptel.com.au/managed-network-services) recommends a service tier and the value at stake. You can also email us at [sales@iptel.com.au](mailto:sales@iptel.com.au). #### Related Articles ###### [Change Management: How Our Managed Service Handles Change](https://blog.iptel.com.au/managed-services-change-management) Dec 19, 2025 ###### [ThousandEyes Managed Services: Top 5 Reasons](https://blog.iptel.com.au/top-5-reasons-thousandeyes-managed-services) Oct 24, 2025 ###### [Managed Network Services: Build the Business Case](https://blog.iptel.com.au/managed-network-services-build-the-business-case) Oct 16, 2026 ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Mark McSherry", "url" : "https://blog.iptel.com.au/author/mark-mcsherry" }, "dateModified" : "2026-10-03T00:24:20.331Z", "datePublished" : "2025-11-27T04:11:24.000Z", "headline" : "Incident Management in Managed Services: How It Works", "image" : [ "https://blog.iptel.com.au/hubfs/Blogs/Managed%20Services%20Incident%20Management/incident-management-square-feature.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.iptel.com.au/managed-services-incident-management", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.iptel.com.au/hubfs/IPTel_Solutions_February2020%20-%20Header%20SiteMap/Images/IPTellogo-byline-2020-dark-v2.png" }, "name" : "IPTel Solutions Pty Ltd" } } ```