TJ Hoag

Your SLA Might Be Lying to You

TJ
Timothy J. Hoag
IAM & IT Operations Specialist

Your response time SLA says four hours. You acknowledged the ticket in two.

The user is still waiting on day three.

By one measure, you are meeting your SLA. By the measure the user actually cares about, you are not. This gap (between response time as a performance metric and resolution time as a user experience) is one of the more persistent and less-discussed problems in IT service management.

Two SLAs, Two Different Things

Response time SLA measures how quickly your team acknowledges an incoming ticket. It is the time between ticket creation and the first substantive response from a support agent. This metric is entirely within your team's control, measurable with high precision, and easy to report on.

Resolution time SLA measures how quickly the issue is actually resolved. It is the time between ticket creation and confirmed fix. This metric depends on the nature of the problem, the availability of resources, and often on factors outside the support team's direct control.

Both are legitimate operational metrics. The problem arises when organizations use response time as a proxy for resolution time, when "we responded quickly" becomes evidence that "we resolved the issue well."

Meeting your response time SLA is a floor, not a ceiling. The user's experience is determined by resolution time.

Where Does This Break in Practice?

The most consequential version of this breakdown is in escalation criteria.

In many ITSM configurations, automated escalation triggers are tied to response time. A ticket that has not been acknowledged within four hours gets flagged. An alert goes to a manager. Action is taken.

But a ticket that was acknowledged in thirty minutes can sit without meaningful progress for two days without triggering a single alert. The response clock stopped when the agent sent the first reply. The resolution clock is still running. The system thinks everything is fine.

This is not a hypothetical failure mode. It is a routine one in any environment where response time is tracked carefully and resolution time is tracked loosely. The queue looks healthy from the manager's dashboard. The user's experience is that they submitted a ticket three days ago and nothing has changed.

The Escalation Criteria Problem

Escalation criteria built entirely on response time create a perverse incentive: the safest thing for an agent to do is acknowledge a ticket quickly, even if there is no progress to report. The acknowledgment stops the clock. The ticket can then age without triggering an escalation, as long as the response time metric stays clean.

This is not bad behavior on the part of the agent. It is a rational response to the metrics they are being evaluated on. If the system measures response time and not resolution time, agents will optimize for response time.

The fix requires changing what the system escalates on:

  • Resolution SLA breach alerts: A ticket approaching resolution SLA should trigger an alert before it crosses the threshold, not after. This gives the team time to act rather than just to apologize.
  • Active ticket age reviews: A queue review that flags tickets by age (not just unacknowledged tickets, but all open tickets past a defined age) provides visibility into resolution time regardless of response time status.
  • Resolution time in reporting: If management dashboards show closure rate and response time but not average resolution time, the reporting is telling an incomplete story.

What Does the User Actually Experience?

A user who submits a ticket does not experience your response time SLA. They experience whether their problem was resolved, how long it took, and whether they felt informed along the way.

A ticket acknowledged in thirty minutes with no follow-up for three days is not a good support experience. The fast acknowledgment may even make it worse: the user was expecting action, got a form response, and then heard nothing.

This is where resolution time tracking and active status communication intersect. If resolution is going to take longer than expected, the user should know. Not because it changes the outcome, but because it changes the experience. A user who knows "this is being worked on and we expect to have an update by Thursday" is in a fundamentally different position than a user who has heard nothing since the initial acknowledgment.

The Practical Takeaway

If your team is meeting response time SLAs consistently but still receiving feedback that support is slow or unresponsive, resolution time is almost certainly the gap.

Audit your escalation triggers. Check whether they are tied to response time, resolution time, or both. If resolution time is not triggering escalations, fix that first. Then check your reporting to ensure resolution time is visible at the management level alongside response time.

The metric you escalate on is the metric your team optimizes for. Make sure it is the one that matches what your users actually experience.

Opportunities
Open to Remote Roles

IAM Analyst, Junior Systems Administrator, or IT Operations Analyst - ideally in healthcare or higher education. Direct hire, W-2.

Discuss opportunities