Service Desk & Escalation Processes Flashcards
7 cards from real CIM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Service Desk & Escalation Processes flashcards as text
In ITIL-aligned incident management, what is the service desk's role during a major incident?
Answer: Act as the single point of contact for user communication while the major incident team handles resolution
During a major incident, the service desk maintains user communication and updates while a dedicated major incident team focuses on technical resolution.
Which type of escalation should be triggered when an incident is likely to cause reputational damage to the organization?
Answer: Hierarchical escalation involving senior management and possibly communications teams
Reputational risk requires senior management awareness and may involve communications or legal teams, making hierarchical escalation appropriate.
What is the recommended approach when a Tier 2 specialist cannot resolve an incident and needs to return it to the service desk?
Answer: Update the ticket with findings, revert ownership to service desk, and brief them on next steps
Returning a ticket to the service desk requires full documentation of findings and a briefing so the service desk can manage the user relationship and next escalation path.
How should the service desk handle duplicate incident tickets submitted by the same user through multiple channels (phone, email, chat)?
Answer: Identify the duplicate tickets, merge them into one, and communicate the consolidated ticket ID to the user
Merging duplicates into a single ticket prevents fragmented effort and keeps the user informed with one reference point.
What does 'time to escalate' (TTE) measure and why is it important?
Answer: The elapsed time between incident detection and the decision to escalate, used to identify delays in Tier 1 triage
TTE identifies whether Tier 1 agents are holding incidents too long before escalating, which can cause SLA breaches downstream.
A service desk receives an incident about a security breach in progress. What should the escalation process prioritize?
Answer: Immediate escalation to the security incident response team, bypassing standard triage steps
Active security breaches require immediate escalation to the security incident response team, overriding normal prioritization procedures.
Which practice BEST reduces repeat escalations for the same category of incidents?
Answer: Conducting root cause analysis and updating Tier 1 knowledge base with documented solutions
Root cause analysis followed by knowledge base updates enables Tier 1 to resolve recurring incident types without repeated escalation.