| Service desk and user support | Owns end to end, all tiers, all hours for P1 | Reports issues, provides business context | Agrees priority definitions annually |
|---|
| Endpoint fleet | Imaging, patching, encryption, endpoint protection, lifecycle tracking | Approves the refresh budget and standard build | Agrees the hardware standard per role |
|---|
| Identity and access | Runs Entra, conditional access, MFA, privileged access | Owns the joiner, mover, leaver trigger from HR | Quarterly access review and attestation |
|---|
| Backup and recovery | Configures, monitors, and restore-tests on schedule | Signs off the RPO and RTO the business can live with | Annual full disaster-recovery exercise |
|---|
| Security operations | Detection, triage, containment, forensics, reporting | Approves the containment mandate in advance | Incident-response plan and tabletop exercise |
|---|
| Line-of-business applications | First-line support, vendor liaison, integration and access | Owns the vendor commercial relationship and roadmap | Escalation to the software vendor |
|---|
| Network and connectivity | Firewall, switching, wireless, VPN, monitoring | Owns the ISP contract and circuit commercials | Carrier escalation during an outage |
|---|
| Compliance evidence | Produces technical evidence and control documentation | Owns the regulatory relationship and submissions | Audit preparation and auditor walkthroughs |
|---|
| Budget and strategy | vCIO builds the roadmap and models the cost | Approves spend and sets business priorities | Quarterly business review and annual planning |
|---|