The Slack message that should have been a ticket
It is Monday at Northwind Logistics, and a sales rep cannot get into the CRM. She does not open a ticket. She messages a teammate, who messages someone in operations, who knows the person who usually fixes this and pings him directly. The fix takes four minutes. No ticket is ever filed. By the dashboard's count, this incident did not happen.
Multiply that by a few dozen people who have all quietly learned the same lesson: filing a ticket is slower than going around it. The official channel asks for a category, a priority, and three fields nobody understands, then answers in a day. The back channel answers in minutes. So the back channel wins, every time, and the ticket queue fills up with only the requests that were too awkward to route around.
Now look at the metric most teams report on: ticket volume. It looks healthy. Volume is steady, response times are fine, the queue is under control. The number is clean because the messy reality never entered it. The support function is being graded on the requests it managed to capture, while the requests people gave up on stay invisible. If that Monday sounds familiar, the problem is not your team's discipline. It is what you decided to measure.
Ticket volume measures the wrong thing
Ticket volume is popular because it is easy to count, and easy to count is not the same as worth counting. A volume metric tells you how many requests reached the system. It says nothing about how many never made it, how many people stopped trying, or whether the answer they got was any good.
Worse, volume quietly rewards the behaviors you do not want. A queue can look productive for reasons that have nothing to do with people being helped:
- A flood of tickets can mean things are broken, not that support is busy and valuable. High volume is often a symptom, not an achievement.
- A quiet queue can mean people gave up, routing around the system the way the Northwind rep did; it is not always a sign that everything is running well.
- Closing fast can mean closing wrong, marking a request resolved to move the number while the person is still stuck and now reluctant to reopen it.
A metric you can satisfy without helping anyone is a metric that will, over time, stop being about helping anyone. People optimize for what is counted. Count tickets, and you get a team that is good at processing tickets. That is not the same as a team people trust.
Satisfaction is the number that cannot be gamed without helping someone
There is one measure that is hard to move without doing the job: did the person who asked for help feel helped. Customer satisfaction, usually shortened to CSAT, is a short prompt after a request closes, asking the person whether the experience was good. It is not a vanity metric. It is the one signal that points at the thing the whole function exists to produce.
CSAT is harder to game precisely because it asks the human, not the system. You cannot inflate it by closing tickets faster or by routing work around the queue. The only durable way to raise it is to resolve the actual problem in a way the person found easy. The American Customer Satisfaction Index, a long-running national measure, has tracked satisfaction this way across industries for decades, on the premise that the customer's own judgment is the signal that matters (see the American Customer Satisfaction Index methodology overview, which describes its survey-based approach; the strength of any internal CSAT program depends on response rates and is unverified for any specific team).
Ticket volume tells you how busy the support function looks. Satisfaction tells you whether the people it serves would choose it again. Only one of those is the job.
In the Cloud Sentry portal, that prompt is built into the close, not bolted on as a separate survey nobody answers. The post-resolution satisfaction survey guide shows how a one-tap rating arrives when a request resolves, so the signal comes from the moment the work finished.
Designing support people will choose on purpose
If satisfaction is the goal, the design follows from it. Support people will choose has to be faster and clearer than the back channel they would otherwise use, or they will keep using the back channel. A few principles do most of the work:
- Make intake faster than a hallway ask. If filing a request takes longer than grabbing someone's attention, people will grab attention. One simple intake, sensible defaults, and no fields that demand the requester already know the answer.
- Show status without making people ask. Half of support frustration is not the wait; it is not knowing whether anyone has the request at all. A visible state ("we have it," "we are on it," "done") removes the follow-up message that exists only to ask what is happening.
- Keep the thread in one place. When a request, its history, and its resolution live together, the person never has to reconstruct the story or re-explain it to a second helper. The submit a request guide and the tracking a request guide show how one intake and one visible status replace the scattered pings.
None of this is a product feature you buy. It is an operational decision about how the work flows and what you watch. Security work lives in this same path: the access request, the offboarding, the permission change all enter through support, and a channel people trust enough to use is the channel where that work gets recorded. Run support so people use it, and the security-relevant requests stop happening in untracked direct messages. The experience and the evidence improve together, because they were never separate.
What changed was the scoreboard
Go back to that Monday at Northwind. Same rep, same locked CRM, but now the intake is faster than the back channel and she can see her request the moment she files it. She uses the system because using it is the path of least resistance, and when it resolves she taps a rating that tells you plainly whether it worked. The queue is no longer a filtered view of the requests too awkward to route around. It is the real picture.
Nobody on the team got more disciplined. The scoreboard changed, and behavior followed it. A team measured on volume learns to protect the number. A team measured on satisfaction learns to deserve it, and the security work that runs through that same channel gets a record as a side effect of people finally trusting the front door.
So the question worth sitting with is not how many tickets your team closed last quarter. It is this: of the people who needed help, how many decided it was not worth asking you?


