Most law firm administrators receive some kind of IT report each month: a count of tickets opened and closed, maybe a satisfaction score. These numbers can be useful, but on their own they can mask problems. A high ticket count may mean a busy, responsive team or a firm with recurring failures. A low count may mean stability or that people have stopped bothering to ask.
The goal of measurement is to learn whether technology is helping lawyers do billable, deadline-driven work, and whether your provider is doing what you pay for. These metrics help answer that. Use whichever fit your size.
Responsiveness
Time to first response
How long between a user submitting a request and a human acknowledging it? For urgent issues, minutes matter. Track this by severity, and compare it to the targets in your agreement.
Time to resolution
How long until the problem is fixed? Look at the median and at the slowest cases. Averages can hide a handful of tickets that dragged on for weeks.
First-contact resolution
What portion of issues are resolved in the first interaction? A high rate generally signals competent front-line support and well-documented fixes.
Quality
Reopened tickets
If a ticket closes and the same problem returns within days, the original fix was probably incomplete. A rising reopen rate is a warning sign.
User satisfaction
A short survey after each ticket, with a place for comments, gives you context that numbers do not. Read the comments. Pay particular attention to how attorneys describe their experience.
Escalations
How often do issues require senior engineers, and how quickly does escalation occur? Frequent, slow escalations suggest staffing or skill gaps.
Patterns
Recurring issues
Group tickets by category and by user, and look for repeats. Five people reporting slow remote access, or one person reporting the same printer failure monthly, points to a root cause that deserves a project rather than another ticket.
Top ticket categories over time
Is password resets the top category? That may justify single sign-on or self-service reset. Are many tickets about a particular application? That may indicate a training need or a vendor problem.
After-hours and urgent requests
How often do lawyers need help at night or on weekends, and how well does support handle them? For a litigation firm facing a filing deadline, after-hours responsiveness is a service differentiator.
Security and reliability
Beyond tickets, ask for operational measures.
- Patch compliance: the percentage of devices fully patched, and how long critical updates take to deploy.
- Backup success and restore test results.
- Endpoint protection coverage: any devices missing the agent.
- MFA coverage: accounts without it, and exceptions.
- Security alerts: how many were investigated, how many were real, and what was done.
- Uptime: for key systems like email, document management and remote access.
- Open risks: known issues awaiting budget or decisions.
These show whether the firm is getting safer, not just whether tickets are closing.
Business-side measures
Also consider asking attorneys directly:
- Does technology slow you down?
- What is the most frustrating recurring problem?
- How quickly can a new hire be productive on day one?
New-hire setup time and offboarding speed are practical measures that connect IT to the firm's operations and to confidentiality.
How to use the numbers
- Review them quarterly with your provider, ideally in a business review rather than an email.
- Compare against contract service levels, and ask for explanations when targets are missed.
- Look at trends, not single months.
- Turn findings into action: a training session, a replacement project or a process change.
- Keep the reports. They are useful evidence when clients or insurers ask how you manage IT and security.
What to be cautious about
- Metrics a provider can easily manipulate, such as closing tickets quickly without confirming the fix.
- Averages that hide outliers.
- Vanity statistics that do not correlate with attorney experience.
- Turning measurements into a blame exercise. The goal is improvement.
A starter dashboard
If you want a short list, track these six: median response time, median resolution time, reopen rate, top three recurring issues, patch and backup status, and user satisfaction with comments.
Where Counsel Cyber fits
We report on these measures for our law firm clients and are happy to share a sample report. If your current reports leave you with more questions than answers, we can help you define a dashboard that fits your firm.