Skip to main content
VSI Technologies

Technology Services

Someone answers at two in the morning.

Monitoring, support and change management for the estate you already have.

The problem

Why this comes up

Most internal teams are sized for the good days. The estate runs, until a person leaves, an incident lands out of hours, or a project consumes the same people who keep the lights on. The result is not usually a catastrophe, it is a slow accumulation of deferred work that nobody has time to name.

The staffing arithmetic rarely works and rarely gets stated. Covering nights and weekends properly takes more people than most estates can justify on volume, so what actually happens is an informal rota of the same two or three people, who are also the people the projects need. Nobody signed off that arrangement; it emerged, and it holds until one of them takes a holiday at the wrong time.

What degrades first is not availability but hygiene. Patching slips because the change window competes with a project. The asset inventory drifts because updating it is nobody’s ticket. Monitoring accumulates alerts that everyone has learned to ignore, which is worse than no monitoring because it produces the belief that something is being watched. None of these is an incident, and together they are the conditions for one.

Key-person concentration is the risk that nobody prices. One person understands the backup configuration, another is the only one who has ever recovered the identity platform, and the documentation for both is a mixture of out of date and absent. This is fine until it is not, and the trigger is usually mundane, a resignation, an illness, a promotion.

The out-of-hours experience is where the gap becomes visible to the business. Something breaks at eleven at night, and the honest answer is that it will be looked at in the morning, or that someone will be woken who has no runbook and no authority to make the decision the situation needs. The cost is not the outage duration; it is that the business learns not to rely on the estate.

The reason this persists is that fixing it looks like admitting something. Bringing in support reads internally as a judgement on the team, when the actual finding is almost always that a competent team is covering more surface than its headcount supports. That framing matters, because an engagement that arrives as a criticism does not work.

Recognise any of these

What it looks like from inside

If three or more of these are true, this page is about your estate.

  • The same two people are on the informal out-of-hours rota
  • Patching slips whenever a project needs a change window
  • There are alerts everyone has learned to ignore
  • One person is the only one who has recovered a given system
  • The asset and licence position gets rebuilt annually rather than maintained
  • A holiday by the wrong person creates genuine anxiety

What we build

Specifically

  • Monitoring on the outcomes that matter, not only on uptime
  • Tiered support with escalation paths that reach a named person
  • Patch and change management on a cadence, with a record
  • Asset and licence position kept current rather than rebuilt annually
  • Quarterly review against what actually broke

What it integrates with

Named platforms, not categories. If you run one of these, this is the conversation.

  • ServiceNow
  • Microsoft Intune
  • Datadog
  • Zabbix
  • Jira Service Management

Monitoring on outcomes

Monitoring gets built around whether the thing the business depends on is working, not only whether the servers are up. A server that is up while the transaction it serves is failing is a green dashboard describing an outage. That means synthetic checks on the actual user journey, and thresholds set from your data rather than from a vendor default.

Escalation to a named person

Tiered support where each tier has a defined scope and the escalation path terminates in a named individual with the authority to decide. The most common failure in managed services is not slow response; it is a competent first-line engineer who cannot get a decision made at two in the morning, so the incident waits for business hours anyway.

Patching on a cadence, recorded

Patching happens on an agreed cadence with an agreed exception process, and the record is kept because the record is what you need during an audit or an insurance renewal. The exception process matters more than the cadence, every estate has systems that cannot be patched on schedule, and the difference between a managed estate and an unmanaged one is whether those are documented decisions or accidents.

Inventory as a living record

Assets, support contracts, licence entitlements and renewal dates maintained continuously rather than reconstructed for an annual true-up. The commercial value is straightforward: organisations that rebuild this annually consistently discover they are paying for entitlements they no longer use and are exposed on ones they do.

Quarterly review against reality

A quarterly session on what actually broke, what nearly broke, and what the pattern says. The purpose is to change something, a threshold, a runbook, a design decision, rather than to present a service report. A review with no decision in it is a meeting.

How the engagement runs

The service loop, and what runs against it

Your estate todayWhat VSI runs against it
01

Monitor

The estate watched continuously, endpoints to servers to SaaS.

VSI delivers

Monitoring tuned to your environment, with alerts triaged before they become calls.

02

Resolve

Incidents and requests worked to agreed response and resolution targets.

VSI delivers

A staffed desk with your runbooks, measured on first-contact resolution and SLA attainment.

03

Prevent

Patterns in the queue become engineering work.

VSI delivers

Root-cause analysis and patching that remove ticket categories instead of closing tickets.

04

Report

The service reviewed against the numbers, monthly.

VSI delivers

Volume, cost and downtime against your baseline, the same figures your renewal decision should use.

Monitor, resolve, prevent, report, the loop that separates a managed service from a ticket-taking contract. The navy rail is what VSI operates; the report stage is where the return is demonstrated rather than asserted.

How it deploys

The shape of the engagement

And what we need from you at each step. A timeline with no client obligations in it is a timeline that slips.

  1. 01Weeks 1-2

    Estate discovery, tooling review and runbook capture

    Estate discovery, tooling review and runbook capture.

  2. 02Weeks 3-4

    Monitoring deployed, escalation paths agreed and tested

    Monitoring deployed, escalation paths agreed and tested.

  3. 03Ongoing

    Support, patching, change control and quarterly review

    Support, patching, change control and quarterly review.

What you provide

  • Access to the estate and to existing monitoring
  • Whatever runbooks exist, however incomplete
  • A named counterpart for escalation

How this goes wrong

The four ways it fails

Published because it is only writable by somebody who has had the failure. Each of these has happened on this kind of work, and each has a specific thing that prevents it.

Tickets get bounced between us and the internal team

Why it happens
The responsibility boundary was described in general terms rather than drawn system by system.
What prevents it
A written split per system, agreed in the first two weeks, including who owns the ambiguous cases. Ambiguity is where the bouncing happens.

Monitoring goes in and generates noise nobody actions

Why it happens
Vendor defaults, deployed at scale, tuned to a generic environment.
What prevents it
Tuning during deployment and a deliberately smaller detection set that somebody has agreed to act on. Fewer alerts that get read beats complete coverage that does not.

An out-of-hours incident still waits for the morning

Why it happens
Response was contracted but decision authority was not, so the engineer could act on nothing that carried risk.
What prevents it
Pre-authorised actions defined per scenario during onboarding, what may be restarted, isolated, failed over or rolled back without waking anyone.

The engagement lands as a judgement on the internal team

Why it happens
It was introduced as a fix for underperformance rather than as capacity for surface area.
What prevents it
Be honest about the actual finding, which is nearly always that a capable team is covering more than its headcount supports. Co-operation is a delivery dependency, not a nicety.

Return on investment

Where the return comes from

Every lever names the mechanism and how it is measured against your own baseline, captured before the work starts. That is how the return stays a number your finance team can audit rather than a promise on a slide.

  1. 01

    Cost per ticket, and fewer tickets

    The service desk is measured on two curves: what each contact costs and how many there are. Root-cause discipline pulls recurring incidents out of the queue permanently, measured monthly as ticket volume by category against your pre-engagement baseline.

  2. 02

    First-contact resolution

    Every escalation multiplies the cost of a request and the wait of the person behind it. Knowledge-base discipline and proper triage raise first-contact resolution, measured from the ticketing system, not from a survey.

  3. 03

    Downtime moved to maintenance windows

    Proactive patching and monitoring convert unplanned outages into planned windows. The measurement is unplanned-downtime hours by system, trending against the history that predates the engagement.

  4. 04

    Predictable spend against variable staffing

    A managed contract replaces the recruit-train-retain cycle for coverage your headcount cannot justify, nights, weekends, niche skills. Measured as fully-loaded support cost per user against your internal cost to deliver the same coverage.

Run your own numbers in the ROI calculator

An engineer running a hands-on hardware diagnostic at a repair bench.

Timing

Now, soon, or not yet

Most of the value in this decision is in when, not whether. Find the row that matches your situation.

When to start managed services work
CriterionVerdictWhy
Someone who is the only person who can do something is leavingNowThe knowledge capture is worth more than the ongoing support, and it has a deadline set by their notice period.
A project is about to consume the people who keep the lights onNowThis is the most common cause of hygiene decay, and it is entirely predictable in advance.
Out-of-hours coverage is an informal rota nobody signed offNowIt works until it does not, and the failure arrives at the least convenient possible moment.
You are about to migrate or refresh a major part of the estateSoonScope the operations model at the same time as the project, not after handover. A migration landing on a team without capacity regresses.
Coverage is genuinely staffed, hygiene is current, documentation existsIt can waitYou have what this buys. Revisit if the surface area grows or the team shrinks.

Buying for a public-sector body

Public-sector support carries requirements that shape the service rather than decorate it: personnel screening for anyone touching the estate, incident reporting timelines set by the agency rather than by the contract, and change control that has to satisfy an existing authorisation rather than an internal process. Continuous monitoring evidence is a deliverable, which means the logging and reporting design has to satisfy it from the first month rather than being assembled for an assessment. We will tell you honestly where a requirement is one we cannot currently meet, that answer is more useful to a contracting officer than a qualified yes.

The federal profile

Objections

What you are probably thinking

We do not want to lose control of our estate.
You do not. Change control stays with your named owner; what moves is the work of watching, patching and answering. Most clients keep architecture decisions entirely in-house.
Our environment is too unusual to outsource.
The first two weeks are discovery for that reason. If the environment turns out to need more than a standard model supports, we will scope it that way or tell you it is not a fit.
What is the actual response commitment?
It is published rather than implied, see the response commitment on this page. Where it is not yet shown, it is because the terms are being written rather than because they are being avoided.

Questions

Asked often enough to answer here

Does this replace our internal team?
No, and an engagement sold on that basis tends to fail. What moves is the work of watching, patching, answering out of hours and maintaining the records. Architecture decisions and change approval stay with your named owner. The internal team usually gets the thing it was short of, which is time for the work only it can do.
How is the responsibility boundary defined?
System by system, in writing, during the first two weeks, including who owns the cases that could plausibly belong to either side. That last part is the one that matters: general statements about scope are exactly where tickets get bounced back and forth at the moment when speed matters most.
Can you support systems we built ourselves?
Yes, with the caveat that support quality tracks the documentation and access we get during onboarding. Runbook capture in the first two weeks exists for this, and it is worth doing properly even for a bespoke system, because the alternative is escalating every incident to the one person who wrote it, which is the risk you were trying to reduce.
What can you actually do at two in the morning without waking anyone?
Whatever was pre-authorised during onboarding, which is a specific list per scenario: restart this, isolate that, fail over the other, roll back a change within a defined window. Anything outside the list escalates to your named counterpart. Getting that list right is the single largest determinant of whether out-of-hours support is real or nominal.
How does pricing work as our estate changes?
Monthly, by estate size and support tier, reviewed quarterly against what the estate actually became. Estates grow and shrink; a price that only moves in one direction is a price that will eventually be renegotiated in a bad atmosphere. Discovery is priced separately so you can stop after it.
What happens if we want to bring it back in-house?
You get the runbooks, the monitoring configuration, the inventory and the ticket history, because they were maintained as your records throughout rather than as ours. An exit that requires a discovery project is a lock-in dressed as an operational detail, and it is worth checking that in any supplier’s terms including ours.

Stay current on our services

Occasional updates across every VSI service, new capabilities, new offerings, and what changed. No sales sequence; leaving is one reply.

Used only for these updates, see the privacy statement.

What it costs

Pricing

Monthly, by estate size and support tier. The discovery phase is separately priced and you can stop after it.

Book a 20-minute assessment