An IT support service level agreement (SLA) is the document that tells you exactly how long you will be waiting when your technology fails. It is a contractual commitment between your business and your IT provider. Without one, you are essentially relying on goodwill and hoping that your provider is not too busy when your server stops responding or your team cannot access their email.
Most business owners look at the headline figures in an SLA and assume they are protected. However, the difference between a 'response' and a 'resolution' can be the difference between a five-minute acknowledgement and a three-day wait for a fix. Understanding how these metrics are calculated, and how priority levels are assigned, is vital for any organisation that relies on its digital infrastructure to function.
The difference between hearing you and helping you
The most common misunderstanding in the IT industry is the gap between a response time and a resolution time. A response time is the period between you raising a ticket and a human being acknowledging it. In many cases, providers use automated systems to 'respond' instantly. If your contract says '1-hour response', and you get an automated email after 30 seconds saying 'We have received your ticket', some providers will claim they have met their SLA. This is useless to you. A meaningful response is when a qualified engineer has read the ticket, understood the problem, and started working on it.
Resolution time is the metric that actually matters. This is the total time it takes to fix the problem. If your internet is down and you cannot process orders, you do not care that someone said 'hello' within twenty minutes; you care that the connection was restored within four hours. Many providers are hesitant to guarantee resolution times because some problems involve third parties, such as an internet service provider (ISP) or a hardware manufacturer. However, a good managed IT support provider will still provide targets for resolution to give you a predictable baseline for your operations.
Categorising the chaos: Priority levels explained
Not every IT issue is an emergency. A printer that will not scan is an annoyance; a ransomware attack that has encrypted your finance folder is a business-ending event. To manage this, IT providers use priority levels, usually ranked from P1 to P4. The SLA times you are promised will vary wildly depending on which category your issue falls into.
- Priority 1 (P1) - Critical: This is a total loss of service for the entire organisation. The server is down, the office internet has failed, or a primary line of business application is inaccessible to everyone. Work has stopped.
- Priority 2 (P2) - High: A major department is affected, or a critical function is broken for several people. For example, the sales team cannot access the CRM, but the rest of the business is working fine.
- Priority 3 (P3) - Medium: An individual user has a problem that is preventing them from working, but the rest of the company is unaffected. A laptop that will not boot or a corrupted user profile falls here.
- Priority 4 (P4) - Low: These are requests for information, advice, or minor changes that do not stop work. Adding a new user, changing a folder permission, or asking how to use a feature in Microsoft Teams.
A pattern we see on most tenants we take on is that the previous provider had set every ticket to the same priority level, meaning a printer jam was competing for attention with a failed server. This lack of triage is a sign of a reactive, overwhelmed helpdesk rather than a managed service.
The hidden clauses that stop the clock
When you read an IT support service level agreement, you must look for 'SLA clock stopping' conditions. These are the scenarios where the provider is allowed to pause the timer on your fix. They are necessary for the provider, but they can be abused if not clearly defined.
Common reasons for stopping the clock include 'Waiting for Customer'. If the engineer asks you for a password or to test a fix and you do not reply for three hours, those three hours should not count against their resolution target. Another common one is 'Waiting for Third Party'. If your Dell server needs a new motherboard and we are waiting for the Dell technician to arrive, the SLA timer usually pauses because the fix is no longer in the IT provider's hands.
Why 24/7 is often a marketing ghost
Many UK SMEs look for 24/7 support because they believe it offers total protection. In reality, unless you are paying a significant premium, '24/7' usually means one of two things: an automated monitoring system or a generic call centre that just takes a message for the morning team.
Our helpdesk operates during focused office hours: Monday to Thursday 08:45 to 17:00 and Friday 08:45 to 16:00. This is when our full engineering team is available to solve complex problems. We use RMM (Remote Monitoring and Management) tooling that monitors your systems 24/7. If a drive fails at 3:00 AM, the system raises an alert which our helpdesk picks up the moment we open.
For businesses that truly need eyes on their systems overnight, we offer a 24/7 SOC (Security Operations Centre) as an optional service. This is powered by Barracuda XDR. If a high-criticality security incident occurs at 11:00 PM on a Sunday, the SOC will contact you directly to take action. This is a specialised security service, not a general helpdesk. Standard on-call engineering is also available on request for those who need out-of-hours human support for operational issues, but it is never included as a standard 'free' extra because genuine expertise costs money to keep on standby.
Calculating the cost of the wait
To understand if an SLA is right for you, you need to model the financial impact of downtime. Take a typical 25-person professional services firm. If their average staff cost is £30 per hour and they suffer a P1 total outage, they are losing £750 per hour in wages alone, before you consider lost revenue or reputational damage.
If your provider has an 8-hour resolution target for a P1, that outage could cost you £6,000. If they have a 4-hour target, you have saved £3,000. When you compare IT support quotes, do not just look at the monthly fee. Look at the SLA. A provider that is £200 cheaper per month but has slower resolution times will be significantly more expensive the first time a major system fails.
The SME guide to SLA checklists
When reviewing a managed service SLA, check these specific points to ensure you are actually getting the protection you think you are:
- Business Hours: Does the SLA only apply during office hours? If you have a P1 at 5:01 PM on a Friday, when does the clock start? For most standard contracts, it starts at 08:45 AM on Monday.
- The 'Response' Definition: Is a response a 'human-to-human' interaction, or does an automated ticket receipt count? Insist on the former.
- Measurement Period: Is the SLA measured monthly or quarterly? A provider might fail every ticket in one bad week but still meet their quarterly average. Monthly reporting is more transparent.
- Hardware vs. Software: Does the SLA cover hardware replacement? If you do not have a hardware warranty with the manufacturer, your IT provider cannot magically make a new server appear in four hours.
- Exclusions: Are 'Acts of God' or major ISP outages excluded? Usually, they are, but the provider should still be helping you navigate those issues.
How Black Sheep Support handles your tickets
We do not believe in hiding behind complex legal wording. We provide clear targets for response and resolution because we know that predictable IT is the foundation of a profitable business. We focus on getting the right engineer on the right problem immediately, rather than letting tickets sit in a queue to be 'triaged' by a receptionist. We also handle hardware, broadband, mobile and networking, ensuring that when a connection fails, we can see the whole picture, not just the software side.
If you are tired of waiting days for simple fixes or receiving automated 'responses' that do nothing to solve your problem, we can help. Our approach is built on managed IT support that actually respects your time and your bottom line.
and we will review your current support bottlenecks and show you how a properly structured SLA can protect your business.
Not ready to talk yet? Run our free IT Health Check to assess your business risk and security posture. It takes 30 to 60 minutes with one of our engineers on a Teams call, or 15 to 20 minutes on your own, with no commitment.
SLA Frequently Asked Questions
What is a reasonable response time for a P1 issue?
For a critical business-down event, a human response within 30 to 60 minutes during office hours is the industry standard for high-quality support. Anything longer than two hours for a P1 suggests the provider is understaffed or lacks effective triage processes.
Can an IT provider guarantee a 100% resolution rate?
No. Any provider promising a 100% resolution guarantee is being dishonest. Factors like national ISP outages, global software bugs (like a faulty Windows update), or hardware shipping delays are outside an IT provider's control. A realistic SLA focuses on targets, not impossible guarantees.
Does the SLA apply if I am working from home?
Usually, yes, for software and security issues. However, most SLAs exclude the performance of your home broadband or your personal mesh Wi-Fi system, as the IT provider has no control over your domestic ISP or local interference. Support is generally limited to the device and the corporate cloud environment.
Why are resolution times longer than response times?
A response is just the beginning of the diagnostic process. A resolution involves identifying the root cause, testing a fix, and implementing it without breaking anything else. For complex server issues or data recovery, the physical time required to move data or apply updates dictates the resolution speed.
Want this handled for you? See Managed IT support.
Based in Brighton or Hove? We are too: see IT support in Brighton.
Free, no sales call needed
Two free checks. Know where you stand.
Domain email check
Can someone send email pretending to be you? Is your real email landing in junk? Type your domain and find out in under a minute.
IT Health Check
A short set of questions that scores your security and business risk, and tells you what to fix first. 15 to 20 minutes on your own.
