Add technical professionals who work within your approved tools, access controls, escalation processes, and IT standards. CF provides recruiting and workforce support while your organization defines the technical environment, permissions, and daily priorities.
Client-directed
The client directs daily work, workflow priorities, procedures, access, approvals, and business decisions. CF provides recruitment, employment, HR support, infrastructure, employee engagement, retention support, and other agreed services.
CF-managed
CF manages the agreed support workflow using approved runbooks, ticketing systems, access controls, escalation requirements, quality review, and performance reporting.
Need CF to manage the support workflow?
Explore Remote Desktop Support ServicesAdd technical professionals who work within your approved tools, access controls, escalation processes, and IT standards. CF provides recruiting and workforce support while your organization defines the technical environment, permissions, and daily priorities.
Tier 1
Frontline help desk
Tier 2
Applications & systems
Security-Scoped
Approved procedures only
Services are limited to the assigned scope, approved systems, access permissions, and client-defined escalation procedures. Responsibility for the client’s overall cybersecurity posture remains with the client unless a written agreement specifically assigns otherwise.
A staffing plan should start with the operating gap, not a generic list of roles. These are the conditions to map during discovery before CF confirms scope and recruiting requirements.
The client directs daily work, workflow priorities, procedures, access, approvals, and business decisions. CF provides recruitment, employment, HR support, infrastructure, employee engagement, retention support, and other agreed services.
The team works in the client-approved service desk, remote-support, identity, monitoring, asset, documentation, endpoint, communication, and security-support tools required for scope. Any claimed integration capability is confirmed separately through documented technical review.
Inventory supported users, systems, hours, ticket and alert types, volumes, severity definitions, and exclusions.
Approve least-privileged access, authentication, device, logging, session, and escalation requirements.
Train against approved runbooks and representative tickets without granting unneeded change or administrative authority.
Pilot monitored work, review documentation and escalation quality, then expand only through controlled change.
The scope lists permitted ticket, monitoring, user, asset, application, documentation, and security-support tasks plus excluded changes and decisions.
Use named accounts, least privilege, approved devices and connection methods, authentication controls, logging, and client-owned access review.
Define severity, response path, on-call owner, evidence requirements, communication rules, and the point where licensed, privileged, security, vendor, or client personnel take over.
No production, security, account, configuration, or containment change is performed outside the written authority and approved procedure for the role.
The client sets performance and quality expectations. CF provides agreed workforce, reporting, and escalation support without taking ownership of the client’s workflow.
Anything outside the assigned systems, permissions, runbooks, or escalation authority is excluded. CF does not assume responsibility for the client’s overall cybersecurity posture unless a written agreement explicitly establishes that scope.
Only when the client determines it is necessary, documents the permitted tasks, approves named access and controls, and maintains review and revocation authority. Least privilege remains the default.
The client defines severity, communication, evidence preservation, on-call ownership, and decision authority. Dedicated staff follow approved triage and escalation procedures and do not independently make risk, containment, legal, or regulatory decisions.
The scope defines required ticket notes, troubleshooting evidence, classifications, approvals, resolution codes, runbooks, knowledge articles, and handoff records in client-approved systems.
Bring the tools, access controls, and escalation processes you need covered. CF will help turn that into dedicated IT support capacity with recruiting, onboarding, and support built in from day one.
Review service ownership, delivery structure, security scope, and the people supporting the work.
