InstinctIQ
    Back to Blog
    IT & CMMC

    When Your MSP Ticket Queue Is Really an Operations Problem

    A mid-size CM firm wins a county library project. Over the next two weeks, the IT queue fills up with requests that all trace back to that one win:

    • A SharePoint site and folder structure for the new job
    • PMIS access for the PM, the project engineer, and two inspectors
    • Bluebeam licenses for the inspectors, who had been sharing one
    • A shared project mailbox, so the owner's correspondence does not live in one person's inbox
    • A laptop and a hotspot for the field trailer
    • Access to the owner's document portal, which runs on its own login and its own MFA rules

    Every person, every license, and every login turns into its own ticket. Each one gets triaged, assigned, worked, and closed. On the MSP's monthly report, it all looks fine: lots of tickets resolved, a decent average response time.

    The report never asks the useful question. Why did a completely predictable event, winning a project, turn into a pile of separate requests that someone had to remember to make, one at a time, usually after the PM was already sitting there without access?

    The queue is a record of how your firm operates

    Most firms grade IT, in-house or outsourced, on how fast tickets close. That is a fair thing to measure. It also treats every ticket as a random event, like a printer jam.

    At an AEC firm, a lot of IT work is not random at all. It follows the project lifecycle and the staffing calendar. Read through a quarter of tickets with that in mind and you can usually sort most of them into a few buckets.

    Project starts

    New job, new site, new folders, new PMIS project, new distribution list, new owner portal. The same requests come in every time, in a slightly different order, from whoever happens to think of them first.

    People moving between jobs

    A project engineer rolls off a hospital job and onto a school bond program. They need access to the new project and, ideally, should lose access to the old one. The first half gets requested because they cannot work without it. The second half often never does.

    Licenses that follow projects, not people

    Bluebeam, P6, Autodesk, and PMIS seats get bought for a project and then stay assigned to whoever had them when the job ended. When renewal season comes, nobody can say with confidence which seats are in use and which are attached to someone who has not opened the software since closeout.

    Closeout

    Archiving the project site, removing outside users, handing records to the owner, shutting down the trailer hardware. This work is easy to skip because the team has already moved on.

    Owner and agency requirements

    A federal or defense-adjacent owner may require MFA, specific handling of controlled information, or CMMC-related controls. Those requirements show up mid-pursuit or at contract award and get handled as one-off tickets instead of as a standard project setup.

    Then there is the last bucket: things that are actually broken. A file server that will not mount from the trailer VPN. A laptop that blue-screens every afternoon. That is the work you hired IT experts for.

    If the first five buckets outweigh the last one, the queue is not mainly telling you about technology. It is telling you about your operations.

    Why the MSP model does not fix this

    This is not a knock on MSP technicians. Many of them are good at their jobs. The problem is structural.

    The MSP sees tickets, not your pipeline. Your operations lead knows the library job starts in three weeks. The help desk finds out when the first request lands.

    The incentives point the wrong way. When the contract is priced by seat, by hour, or by ticket volume, nobody on the vendor side is paid to make the queue smaller. Recurring requests are, in a sense, the product.

    Every request starts from zero. A ticket portal asks the requester to describe what they need. The PM does not know which security group the inspectors belong in. So the ticket bounces back with questions, and a ten-minute task takes three days of email.

    Nobody is looking across tickets. Each ticket gets closed on its own merits. The fact that the same six requests follow every project win never becomes anyone's job to notice.

    The result is an IT function that responds well and learns nothing.

    What it looks like before and after

    Before. The PM wins the job and starts emailing the help desk as needs come up. Some requests go through a portal, some through a call, some through a hallway conversation that never gets logged. Inspectors share a license for a week. Access to the old project lingers. At renewal time, finance pays for every seat on the invoice because nobody can prove otherwise.

    After. A project start is a defined event. Someone in operations says, in the chat tool the firm already uses, that the library job is starting on a given date with this team. The standard setup gets drafted from that one message: folders, PMIS access, licenses, mailbox, hardware, owner portal. A person reviews and approves it. Routine pieces get done without a ticket for each one. Anything unusual goes to a specialist, in the same thread, with the context already attached.

    The same thinking applies to staff moves, closeout, and renewals. Each one becomes a repeatable process with a human checkpoint, instead of a scramble someone has to remember.

    None of this requires the PM to learn a new system. It requires the firm to admit that most of its IT requests are predictable, and to treat them that way.

    Where automation helps, and where it does not

    Where it helps:

    • Answering routine questions like "what devices and licenses does this person have"
    • Drafting onboarding, offboarding, and access requests so they are complete before anyone approves them
    • Showing license usage and upcoming renewals, so the renewal conversation starts with facts
    • Reading through past support history to spot the requests that keep coming back

    Where people still matter:

    • Deciding who should see a claims folder or a sensitive owner file. That is a judgment call, and it needs an approval trail.
    • Troubleshooting a superintendent's laptop that drops the VPN every time the trailer's LTE signal dips
    • Anything involving controlled information on federal work, where the firm needs a clear, defensible record of who changed what

    What gets in the way:

    • Messy ticket data. If half the queue is categorized as "General" and phone requests are never logged, the first pass at finding patterns will be rough. It gets better once requests start flowing through one place.
    • Unclear ownership. If nobody in operations owns project setup, automating it just moves the confusion faster.
    • Security shortcuts. Faster access is not the goal if it means weaker controls. Approvals and logging have to be part of the design from the start.

    How we approach it

    At InstinctIQ, we work as a forward-deployed team. Before we change anything, we sit with your operations lead, read through your ticket history, and map requests back to the project and staffing events that caused them. That map usually says more about where IT time goes than any MSP report.

    From there, IQ-IT puts a real human team, including security analysts and Microsoft 365, Google Workspace, and infrastructure specialists, behind an AI IT Copilot that lives inside Microsoft Teams or Slack. Your staff ask for what they need in the tool they already use. Routine work like ticket updates, license and asset lookups, access requests, and onboarding or offboarding drafts gets handled in the conversation. Complex issues go to a human specialist in the same thread. Admins can look across support history to see which requests keep recurring and fix the process behind them.

    It can sit alongside your current MSP or replace it. Either way, the point is the same: IT that knows a project is starting before the PM has to ask.

    For firms pursuing federal work, the same visibility into access, accounts, and devices is the foundation for CMMC readiness, which is where IQ-CMMC picks up.

    A useful next step

    Export the last 90 days of IT tickets. Add one column and tag each ticket with its cause: project start, staff move, license or renewal, closeout, owner requirement, or something actually broken.

    Then count.

    If the first five columns add up to more than the last one, your IT queue is really an operations problem, and it can be fixed as one. If you want a second set of eyes on that export, we are happy to go through it with you and show what the same requests look like when they are handled as a process instead of a pile of tickets.

    Ready to simplify IT and CMMC?

    Join hundreds of AEC teams already saving hours every week.