A frozen laptop is an annoyance in most businesses. In a law firm, it can be a missed filing window or a hearing with no exhibits. That is why help desk expectations for a firm differ from those of a generic office, and why the response commitments in your IT agreement deserve a close read.
Below is a practical guide to what to ask for, and how to tell a real service level from a marketing line.
Response, resolution and escalation are different things
- Response time is how quickly a qualified person acknowledges and begins working on your issue.
- Resolution time is how long the fix takes. It depends on the problem and on third parties, so providers are often cautious about promising it.
- Escalation is the path a stubborn issue takes to a more senior engineer, and eventually to management.
Ask for all three in writing. A provider that only quotes an average resolution figure may be hiding slow handling of urgent problems.
Severity levels that make sense for a firm
A useful agreement defines severity by business impact, not technical jargon. Here is a sample structure to compare against what you are offered. The target times are examples to prompt discussion, not an industry standard.
- Critical: Firm-wide outage, ransomware suspicion, email down, or an attorney unable to work before a deadline. Expect immediate acknowledgment and a live person working the issue until stabilized.
- High: A department or several users affected, such as a printer server down or a key application failing. Expect same-day attention.
- Normal: Single-user problems with a workaround. Expect response within a business day.
- Low: Requests such as new equipment or software installs, handled on a scheduled basis.
Notice that a suspected security incident should always sit in the top tier, regardless of how small it seems at first.
Hours of coverage
Law practice does not follow nine-to-five. Ask whether the provider offers:
- Early-morning and evening coverage for attorneys who start and finish late
- Weekend and holiday support, and what it costs
- An emergency number that reaches a human, not just a ticket portal
- Coverage plans for vacation and illness, so your issue is not stuck with one technician
Deadline-aware handling
Ask whether the provider can flag court-deadline situations. A simple practice is a "deadline" tag on a ticket that triggers priority handling. Some firms also give the provider a list of trial dates and major filings, so outages near those times get extra attention.
Measuring performance
Request regular reporting, ideally reviewed in a quarterly meeting. Useful measures include:
- Number of tickets opened and closed
- Average and longest response times by severity
- Repeat issues, which signal underlying problems
- Patch compliance and backup success
- User satisfaction feedback
Be wary of reports that show only averages. A single missed critical ticket can matter more than a hundred prompt password resets.
Signs of a weak help desk
- Tickets can only be opened by email, with no phone option
- No named account manager or escalation contact
- Technicians frequently ask you to repeat information
- Same problems return month after month
- No documentation of your environment, so each tech starts from scratch
What happens when the SLA is missed
An agreement without remedies is a wish. Ask what happens when targets are missed: service credits, management review, a remediation plan, or a right to exit. The remedy does not need to be dramatic, but there should be one.
Connecting service to supervision
Because an outside provider has access to systems containing client information, ABA Model Rule 5.3 on supervising nonlawyer assistance is relevant. Reviewing performance reports regularly is one practical way to show you are paying attention. Confirm specifics with your state bar.
Next step
Take your current agreement, mark the response times, hours and escalation path, and ask whether they match how your attorneys really work. Counsel Cyber supports law firms with a help desk that understands deadline pressure, and we are happy to compare your existing terms against what firms of your size should expect.