Authorized intake
Identify who may request support and which phone, email or other channels are approved. Each request should identify the affected user, system, device or location and describe the business impact. Staff should never put passwords in a form or ticket.