Home › Topics › From Reactive to Proactive Support › Measuring It

Measuring the Shift to Proactive Support Honestly

Thursday, 16:45, at Redbrook Engineering, at the end of the fourth quarter. Imogen has the quarterly review on Monday and the volume chart open. The desk took about 520 tickets a month a year ago and takes about 410 now. The operations director, who approved the prevention hour in the spring with visible reluctance, will look at that chart. He will ask the only question he ever asks: "how much of that was you?" The flattering answer is "all of it". The honest answer is "most of it, and here is how we know which part". And the honest answer is the one that gets the hour renewed, because the director has been shown flattering charts before and has learned to divide them by two.

Measuring the shift to proactive support is four numbers read together. They are the share of the desk's hours spent on prevention and the categories removed. Then come the tickets that never arrived with the counterfactual stated, and the before-and-after count by ticket type. Add one line in the leadership report that carries all four without an adjective. Each number on its own can be made to lie without anyone intending it to; together they keep each other honest. This article is part of our From Reactive to Proactive Support series. This is the last article, because it is the one that tells you whether the other five worked.

It covers the four numbers and the lie each one prevents. Then we cover the share of hours in prevention and what "removed" has to mean before a category is counted as removed. We cover the tickets that never arrived, counted with the counterfactual said out loud, then before-and-after by type, as a table. Next comes the picture of where Redbrook's hours went across four quarters, then from tickets to hours, in two columns. We cover the line in the leadership report and what the numbers must never be used for. A short war story and the proactive scorecard to copy follow, in that order.

Four Numbers, and the Lie Each One Prevents

A single number for the programme will be wrong in whichever direction is convenient. And the four are chosen because each catches a different way of being wrong. Total volume falling is the number everyone reaches for. It falls for a dozen reasons that have nothing to do with prevention. Those include a quiet season, a department that left, a shadow channel that opened, a category that was relabelled. Hours spent on prevention is the number the desk reaches for when volume has not moved yet. It measures effort, not result; a desk can spend a hundred hours removing nothing. Categories removed is a count of names, and a name can be ticked off because its tickets moved next door. Before-and-after by type is the honest one, and on its own it is a table nobody reads. Read together, each covers the others' blind spot.

The numberThe question it answersThe lie it preventsWhat it cannot tell you alone
Share of hours in preventionDoes the programme exist, in the calendar, this quarter?"We are proactive now" with no hours behind itWhether any of the hours removed anything
Categories removedWhich causes are gone, by name, with before and after?A volume drop with no cause anyone can point atWhether the tickets moved to another label
Tickets that never arrived, with the counterfactualHow many fewer tickets a month, in the types we fixed, against a baseline, with a control?Claiming the whole queue's dropHow much desk time that is worth
Before and after by typeWhat did each fixed type do, month by month, beside a type we did not touch?Season, drift and relabelling passed off as preventionThe overall shape; it is a table, not a story

Every number in this article is a worked example from Redbrook, the fictional desk of four that the first article in this series audited, and is given as such. A different desk will see different figures; the shape, four numbers that agree with each other and a range rather than a point, is the part that travels.

The Share of Hours in Prevention

The share of hours is the desk's working hours a week spent on removing causes, over its total working hours. And it is counted from the roster and the prevention-hour ledger rather than from timesheets. Redbrook has four technicians and about 140 working hours a week between them. In the audit quarter the prevention line was zero, honestly recorded. In the second quarter it was four hours a week, one each. In the third, it was six, when the lead's hour was added and one technician's grew. In the fourth, it was eight, when the agreement was renewed at two hours each. Those are small fractions of 140. And the number's job is to prove the programme is in the calendar, not to impress anyone with its size.

Count the hours actually taken, not the hours scheduled. The gap between the two is the protection failure the prevention hour article warned about. It is worth seeing. The ledger says how many hours were taken, how many were moved and taken late, and how many were lost with their reasons. Redbrook's fourth quarter scheduled 104 hours and took 93. The eleven lost were listed. Seven of them were one bad week in which a major incident was declared, which is a permitted reason. A quarter that schedules a hundred hours and takes forty has not got a measurement problem. It has got a protection problem, and the share-of-hours number is where it shows first.

The share of hours is reported beside the hours returned, never alone, because effort without result is the thing leadership is most afraid of funding. Eight hours a week spent is a cost. Eight hours a week spent, returning forty-five to eighty a month, is an investment. A desk that reports only the hours it spent is asking to be told to stop spending them.

Categories Removed, and What "Removed" Has to Mean

A category is removed when all of these conditions hold. Its monthly count has fallen to a small fraction of its baseline for two consecutive readings. There is a control type that did not fall, and the tickets have not reappeared under another label. That is the whole rule, and every word of it is there because of a way the count has been fooled. "A small fraction" rather than zero, because a cause removed from forty machines will still produce a ticket from the forty-first. Redbrook's stale-credential lockouts went from about fifty-four a month to about nine, and nine is removed, not failed. "Two consecutive readings", because one quiet month is weather. "A control type", because if printer tickets also fell by half in the same months, the desk got quieter and the fix gets credit only for the rest. "Not reappeared under another label", because a fix that changes the symptom moves the tickets from "lockout" to "cannot sign in". In that case, a category report will show the first falling and never connect it to the second rising.

List the removed categories by name with the before and after beside each, and use the three words from the loop: removed, reduced, returned. Redbrook's year had four removed. The stale-credential lockouts fell from fifty-four to nine. Tickets for the printer driver that reset its defaults after every update fell from thirty-one to six. The disk-full slowdowns on the works-site machines fell from sixteen to two. The dock disconnects on one laptop model fell from twenty-four to six. Redbrook's year had one reduced, the shared-mailbox request for new sales starters, fourteen to eight, because the role profile caught most but not all. And Redbrook had one that returned in the third quarter, a scheduled restart that stopped running after an update. That return was caught at the loop and fixed again. It is on the list with "returned, re-fixed" beside it, because a list with no returns on it is a list nobody checked.

Four removed, one reduced, one returned is an honest year for a desk of four, and the honesty is what makes the four believable. Say which categories were not touched, too: new-starter lockouts, genuine printer faults and the drawing application's licence error were not candidates and did not move. The categories list is the one part of the page the director can check against his own experience, since he raises tickets too.

The Tickets That Never Arrived, With the Counterfactual Stated

The counterfactual is what would have happened without the programme. And every claim of tickets that never arrived is a claim about it, so the claim has to say what it assumes. The honest form is a sentence with four parts: how many fewer tickets a month, in which ticket types, against what baseline, with what control. "About ninety fewer tickets a month in the four types we fixed, against the three-month baseline before each fix, with the untouched types steady" is such a sentence. "Tickets are down a hundred and ten a month" is not, even though it is true. About eighteen of the hundred and ten were in types the programme never touched. The quoted claim lets the reader assume they were all the desk's doing. The method for the four-part sentence, with the baseline rules, the control type and the trap of the quiet month, is in measuring the tickets that never arrived. This article applies it to the programme as a whole rather than re-deriving it.

Carry a low and a high count, the way the ROI series carries them in deflection math without fooling yourself, and never collapse them. Redbrook's low count was about eighty: the tickets that matched the exact symptom of each removed cause, read from the ticket text, and no others. The high count was about ninety-two: the whole drop in the four fixed types after the control's drift was taken off. The truth is between them. The report says "between about eighty and ninety a month". And the director, who has halved flattering figures for years, has nothing to halve. Give a single figure only if one is demanded, give the middle, and say that is what it is.

Remember: never claim the whole queue's drop. Claim the drop in the ticket types you fixed, against a three-month baseline, after the control type's drift is removed. Give it as a range from the exact-symptom count to the whole-type count, and say in the same sentence what the rest of the drop was.

Say what the rest of the drop was, in the same breath, because a reader who finds it out later will wonder what else was left out. At Redbrook the other eighteen a month were seasonal quiet in the works site's autumn and a small fall in how-do-I tickets after a training session the desk had nothing to do with. "The remaining drop is season and a training session run by HR, and we do not claim it" costs one sentence and buys the rest of the page.

Before and After by Type

The before-and-after table is one row per fixed type. Each row has the three-month baseline, the three months after the fix, the control type's movement, and the word. The table is the evidence behind every other number on the page. The method for tracking a type over time, with its trend sheet and its rolling average, is in volume by category over time; the table here is that sheet's summary row for each fixed cause. Redbrook's four removed types and its one reduced type make five rows. The control type, genuine printer faults, ran at about twenty-six a month before and twenty-five after. It sits beneath them as the line that says the desk was not simply quieter.

Ticket type (the cause fixed)Baseline, per monthAfter the fix, per monthControl type over the same monthsWord
Stale-credential lockouts (old password on phones)About 54About 9Printer faults steady, 26 to 25Removed
Printer driver defaults reset after updatesAbout 31About 6Printer faults steadyRemoved
Disk-full slowdowns, works-site machinesAbout 16About 2Printer faults steadyRemoved
Dock disconnects, one laptop modelAbout 24About 6Printer faults steadyRemoved
Shared-mailbox request, new sales startersAbout 14About 8Printer faults steadyReduced
Scheduled restart stopped after an updateAbout 12 before the first fixBack to about 11 in the third quarter; about 2 after the re-fixPrinter faults steadyReturned, then removed

Draw one chart from this table, if a chart is wanted, and make it the kind that helps. Use one line per fixed type, monthly counts, with a mark on the month each fix went in and a date on the axis. That is the shape charts that help and charts that hide recommends. A line that drops at the mark and stays down is the whole argument in one picture. A pie chart of categories removed is the whole argument in no picture at all. And I have seen one presented, with a legend, in three colours, to a room that nodded.

The Picture: Where the Hours Went

The four numbers come together in one strip, and the picture below draws it for Redbrook across the year. Each quarter is a bar of the desk's roughly 140 working hours a week, split into three bands. Queue work is in orange, prevention in green, and everything else, projects, training and cover, in cream. In the audit quarter the queue took 112 hours and prevention none. In the second quarter prevention took four hours a week and the queue fell to 106 as the lockouts came out. In the third, prevention was six and the queue 100, as the disk sweeps and the printer driver fix landed. In the fourth, prevention was eight and the queue 94. The docks were fixed, and the certificate renewal was done from the calendar as a quiet change rather than as the morning everyone failed. Under each bar is what was removed that quarter, and at the right is the ticket count per month, from about 520 to about 410.

A four-quarter strip showing where a fictional desk of four technicians spent its roughly 140 working hours a week. Each quarter is a horizontal bar split into three bands: queue work in orange, prevention in green, and other work in cream. In the first quarter, the audit quarter, queue work took 112 hours, prevention none and other work 28, with about 520 tickets a month. In the second quarter queue work fell to 106 hours, prevention took 4 and other work 30, as stale-credential lockouts were removed and tickets fell to about 490 a month. In the third quarter queue work was 100 hours, prevention 6 and other work 34, as disk-full slowdowns and printer driver tickets were removed and tickets fell to about 450 a month. In the fourth quarter queue work was 94 hours, prevention 8 and other work 38, as dock disconnects were removed and the certificate renewal was done from the calendar, with tickets at about 410 a month. A footer says every hour moved out of the queue was bought by a prevention hour spent on the cause of a ticket type.
Four quarters at a fictional desk of four: the queue band shrinks by eighteen hours a week as four causes are removed, and the hours go to prevention and to other work.

Read the strip for the two things it shows and the one thing it does not. It shows that prevention hours were small, eight a week at most, and that the queue band shrank by eighteen, which is the return on the investment drawn to scale. It shows where the freed hours went: some to a bigger prevention slice, more to the cream band, which is where the works-site switch project finally got finished. What it does not show is the cause of the shrinking, which is why the strip sits under the table rather than instead of it. A strip like this with no before-and-after table behind it is a picture of a desk that got quieter, and desks get quieter for reasons.

From Tickets to Hours, in Two Columns

Turn the tickets that never arrived into hours the same way the ROI series does. Use two figures per ticket type that must never be mixed. One is the hands-on time a technician spends on one such ticket. The other is the loaded figure that adds the desk's overhead, the interruption, the re-reading and the walk-up that came with it. The two figures, and why the loaded one is larger than anyone expects, are in what ROI means for a help desk. Redbrook's removed tickets averaged about half an hour hands-on across the four types. So the low column is roughly eighty to ninety tickets a month at half an hour: about forty to forty-five hours a month. The loaded figure for the desk was close to an hour, so the high column is about eighty to ninety hours a month.

Check the high column against the strip, because the strip is the independent witness. The queue band fell by eighteen hours a week, which is about seventy-eight a month, and that sits inside the two columns, nearer the top. It should: the removed tickets were the interrupting kind, the lockout at 08:40 and the slow machine at month-end. And the hours they took from the queue were never just their hands-on time. Where the strip and the columns disagree badly, one of them is wrong. In that case, it is usually the columns, because the strip was measured from the roster and the columns were estimated from a sample. Report the range, forty to ninety hours a month returned, and put the strip beside it.

Subtract the cost, in both columns, and say the net. Prevention cost Redbrook about thirty-five hours a month in the fourth quarter, eight a week plus the loop. Net, the programme returned somewhere between five and fifty-five hours a month by year end. That is between nothing much and most of a technician's week, and the honest report says exactly that. It adds the sentence that the low end is the one the desk can defend under oath and the high end is the one the strip suggests. A programme reported at its high end alone will be halved. A programme reported as a range will be believed, and belief is what the next year's hour is bought with.

The Line in the Leadership Report

The programme gets one line in the monthly report and one paragraph in the quarterly review. And both are built from the four numbers with no adjective in either. The monthly line, in the format of the monthly report they will read, is: "Prevention: eight hours a week; one cause removed this month (dock disconnects, twenty-four to six); about eighty to ninety fewer tickets a month in the fixed types against baseline, control steady; forty to ninety technician hours a month returned for about thirty-five spent." The quarterly paragraph, in the shape of the quarterly review, adds the before-and-after table, the strip, and the one that returned and was re-fixed. It adds the sentence about what the rest of the volume drop was. That is the whole report. It takes Imogen about twenty minutes to produce from the loop sheets, and it has taken the director progressively less time to read.

Say what is not claimed, in the report, every time. Not the whole volume drop. Not satisfaction, unless the survey asked about the fixed types and the answers moved, which is a different measurement in its own series. Not a business outcome the desk cannot evidence: "the works site shipped on time because of us" is a sentence the works site gets to say, not the desk. What the desk can say is that about eighty to ninety people a month did not have to stop work and ask for help. The arithmetic for what their waiting would have cost is in the economics series and is theirs to apply. The desk reports its own numbers and lets the rest of the organisation draw the conclusions.

What the Numbers Must Never Do

The numbers must never rank technicians. A per-person count of causes removed is a measure of which technician was given the cheap candidates. Reading it as performance punishes whoever owned the hard one. The rule that per-technician figures are for coaching, read only above a minimum sample and never shown outside the team, is the one in dashboards that motivate instead of surveil. And it applies here with extra force because the sample is three or four causes a year. If you run QuerySolv, the standard reports on volume, backlog by age and resolution times are the before-and-after source for the whole desk. In that setup, the per-technician reports stay inside the team for coaching. In any tool, the same split should be made on purpose.

The numbers must never only improve. A scorecard on which every quarter is better than the last is a scorecard someone has started managing. And the return in the third quarter at Redbrook, written down with its re-fix, is the line that proves the others were not. Expect a quarter in which a category returns, or the prevention hours are lost to an incident, or the low count falls below the cost, and report it as it happened. The credibility a bad quarter handled honestly earns is the subject of when the numbers are bad. Prevention has more bad quarters than most programmes, because it is measuring things that did not happen.

And the numbers must never mistake a shadow channel for a success. If a ticket type fell because the users stopped raising tickets and started phoning Kwame, the tickets did not disappear; they moved somewhere the desk cannot count. The check is the one from the seven quiet failures. Look for a department whose volume fell faster than its headcount predicts. Look for a technician whose inbox is busier than the queue, and tickets that begin "as discussed". A category that fell with no fix behind it is not a prevention result. It is a question, and the counterfactual sentence is where it gets asked.

A Short War Story: The Summer Drop at Dunmore College

Dunmore College's desk of three, led by Ewan, started a prevention hour in the spring. They removed two genuine causes by June. They reported to the bursar in August that ticket volume was down by nearly two fifths since the programme began, which was true. The two causes accounted for perhaps forty tickets a month of the drop. The other hundred and sixty were the summer, when most of the college's eleven hundred students and a third of its staff were not there. The report did not say so, because nobody had asked and the chart looked wonderful. In October the volume came back with the students. The bursar asked why prevention had stopped working. Ewan spent a difficult meeting explaining seasonality to someone who had believed the August chart because it had been presented without a caveat. The two causes were still removed. Their forty tickets a month were still gone. None of that was believed for the rest of the year, because the one number that had been overclaimed had taken the honest ones down with it. The hour survived, narrowly, on condition that every future figure came with a baseline and a control. A drop that is not checked against what else changed in the same months is not prevention. It is the calendar, with the desk's name on it.

The Proactive Scorecard

The scorecard below is one page a quarter, built from the monthly loop sheets. And it is the page the quarterly paragraph is written from. Section A is the share of hours, taken against scheduled, with lost hours and their reasons. Section B is the categories by name, with the before, the after, the control and the word. Section C is the counterfactual sentence, written out in full with its four parts, and the low and high counts. Section D is the hours, in two columns, with the cost subtracted and the strip's queue-band change beside them as the witness. Section E is what is not claimed, which is the section most scorecards leave out and the one that makes the others believable. Section F is the checklist the page does not leave the desk without.

THE PROACTIVE SCORECARD — ONE PAGE, ONE QUARTER
Desk: ______________________   Quarter: ____________   Prepared by: ______________   From loop sheets: ____ / ____ / ____

A. HOURS IN PREVENTION
   Desk working hours a week (all technicians) ............ ______
   Prevention hours a week, scheduled ..................... ______    taken ______    lost ______
   Lost-hour reasons (count each): incident ____  cover ____  highest priority ____  other ____
   Loop hours this quarter ................................ ______

B. CATEGORIES, BY NAME
   Cause fixed                              Fixed on    Before/mo   After/mo   Control before/after   Word
   _______________________________________  ________    ______      ______     ______ / ______        removed / reduced / returned
   _______________________________________  ________    ______      ______     ______ / ______        removed / reduced / returned
   _______________________________________  ________    ______      ______     ______ / ______        removed / reduced / returned
   _______________________________________  ________    ______      ______     ______ / ______        removed / reduced / returned
   Types NOT touched by the programme this quarter (named, so nobody assumes): ________________________________

C. THE TICKETS THAT NEVER ARRIVED (the counterfactual, in four parts)
   "About ______ to ______ fewer tickets a month, in the types listed in B, against a three-month
    baseline before each fix, with ______________ as the control type, which moved from ______ to ______."
   LOW count (exact-symptom tickets only, from the ticket text) ...... ______
   HIGH count (whole drop in the fixed types, after control drift) .... ______
   The rest of the quarter's volume change, and what it was ........... ______  because: ______________________

D. HOURS RETURNED                                              LOW          HIGH
   Tickets avoided per month (C low / C high) .................. ______       ______
   Hours per ticket (hands-on / loaded) ........................ ______       ______
   Gross hours returned per month .............................. ______       ______
   Prevention cost per month (A, taken, plus loop) ............. ______       ______
   Net hours per month ......................................... ______       ______
   Witness: queue-band change on the roster, hours a week ...... ______  (should sit inside the two columns)

E. NOT CLAIMED THIS QUARTER
   [ ] The whole volume drop        [ ] Satisfaction, unless the survey moved on the fixed types
   [ ] Any business outcome the desk cannot evidence      [ ] Any per-technician figure outside the team

F. BEFORE THIS LEAVES THE DESK
   [ ] Every category in B has a control and two readings
   [ ] C is written as the full sentence, not a number
   [ ] Both columns in D are present; the range is what is reported
   [ ] The rest of the drop is explained in C, even if the explanation is "season"
   [ ] At least one line in B says reduced or returned, or the quarter is explained
   [ ] The monthly report line and the quarterly paragraph are copied from this page, not written fresh

Imogen's scorecard for the fourth quarter had four removed, one reduced and one returned-then-removed in section B. It had the four-part sentence in C with eighty and ninety-two in it. It had "season, and a training session HR ran" on the line for the rest. The director read it on Monday, asked what the control type was, and renewed the hour for the year. He did not divide anything by two. There was nothing on the page he needed to.

Frequently Asked Questions

Which of the four numbers should we report first?
The categories removed, by name with before and after, because it is the number leadership can check against their own experience. Follow it with the counterfactual sentence, then the hours in two columns, and give the share of hours last, as the cost. Reporting the hours spent first invites the question "spent on what", and the answer should already be on the page.
We have no control type that stayed steady. What do we do?
Use the total of all ticket types the programme did not touch, and apply its percentage change to the fixed types before crediting the drop. If everything fell, the desk got quieter for some reason that is not prevention. In that case, the honest report says so and claims only the part of each fixed type's drop that exceeds the general fall. A quarter with no usable control is reported as such, with a wider range.
How soon after starting can we show anything?
The share of hours can be shown in the first month, with the ledger of what the hours did. The first category with two readings and a control takes about three months from its fix. The counterfactual sentence and the hours columns are meaningful from the end of the second quarter. Say this timetable in advance; a review in month two that expects a volume drop will be disappointed by a programme that is on schedule.
Should the scorecard include the maintenance calendar's results?
Yes, as rows in section B, because a category removed by a monthly sweep is a category removed, and it is measured the same way. Mark those rows as maintenance so a reader knows the category stays removed only while the line keeps running. A calendar line skipped twice should appear in the same section as "returning", before the count proves it.
The low column is below the cost this quarter. Do we report that?
Yes, with the reason. Early quarters often run negative on the low column while the first causes are being removed, and the agreement should have said so. If it stays negative after two quarters of fixes, the candidates are being chosen badly or the hours are being lost, and both are findings the scorecard exists to produce. A programme that only reports positive quarters is not being measured.
Can we show per-technician prevention results in a team meeting?
Inside the team, as coaching, with the context of which candidates each person was given, and never as a ranking or outside the team. The sample is three or four causes a year per person, which is far too small to say anything about the person. It is just enough to start a useful conversation about the candidates. The scorecard that leaves the desk carries desk-level figures only.

From the QuerySolv team: we build self-hosted help desk software for Windows. QuerySolv runs as one Windows service on your own network. It takes requests by web form, e-mail, live chat, social messages and REST API. It is licensed once per installation rather than per agent per month. The free trial runs the full product for 30 days.