top of page


Ultimate Guide to ITIL Ticket Types and Best Practices for Efficient IT Support

Updated: Mar 28

On average, organisations have 205 ticket types in the service desk and use just 34.

Poor ticket categorisation leads to confusion in the team, inefficient ticket handling, crappy reports and an increased cost per ticket.

I'm certified at the ITIL expert level. Having spent more than 30 years working and consulting in the IT Service Management sector, I have seen what works and what doesn't.

This article will help you;

  • Define your categories & subcategories.

  • Capture the right information the first time.

  • Identify 20 best practices to avoid painful mistakes and dead ends.

What are the different ITIL ticket types?

The ITIL ticket types in an Information Technology Infrastructure Library (ITIL) framework are;

  • Incident Tickets: These are for unplanned interruptions and to restore regular service operations as part of Incident Management.

  • Service Request Tickets: For service requests, information, or access as part of Request Management.

  • Problem Tickets: For underlying causes of one or more incidents as part of the Problem Management process.

  • Change Request Tickets: This is for formal proposals for IT service alterations as part of the change management process.

All can be managed through an IT Service Management (ITSM) ticketing system.

ITIL Ticket Types Diagram
The ITIL Ticket Types

lady working on a computer

Incident tickets

So, this is usually the big one: the service desk ticket, where you want super efficient service delivery and explore the data in various reports for trend analysis, etc. 

The ITIL Incident Management process tickets will likely be the backbone for the other types of tickets. For example, categories here will likely influence categories in the Problem Management process.

The Incident Ticket Process

The Incident Management Process
The Incident Management Process

What Categories of Incident Tickets Should I Have?

When considering the categories of incident tickets, start with these;




  • Desktops and Laptops

  • Printers and Scanners

  • Mobile Devices

  • Servers

  • Network Equipment (Routers, Switches)

  • Peripherals (Keyboards, Mice)


  • Operating Systems

  • Applications (Office, CRM, ERP)

  • Email and Communication Tools

  • Databases

  • Development Tools


  • Connectivity Issues

  • VPN Problems

  • Slow Internet/Network Performance

  • Wi-Fi Access

  • DNS Issues


  • Virus and Malware

  • Unauthorised Access

  • Data Breach

  • Phishing Attempts

  • Encryption Issues


  • Password Resets

  • Account Lockouts

  • Permission Issues

  • User Account Setup/Deletion


  • Email Service Disruption

  • Cloud Service Issues

  • Collaboration Tools Downtime

  • Printing Services

  • Backup and Recovery Failures

Are they going to work for everyone? No, but at least with this, you aren't starting by looking at a blank screen.

Keep the categories to no more than two levels, as tempting as it may be to start having sub-sub and sub-sub-sub-sub categories. Keep it so that it makes intuitive sense for people to use.

You'll also likely have some bespoke systems you'll want to track. For example, I worked at a mortgage company and ran their service desk for several years. We had in-house systems and modules within those systems. So, I'd add those in, but only to that level.

What Data Should I Record in my Incident Tickets?

Here's a suggestion, but keep it as simple as possible. Where possible, try to use the system 'out-of-the-box'. Any major ITSM supplier will have configured their solution carefully, so if you start adding bespoke fields, ensure you are clear about why and what you will do with that data.

Section Title

Data Points

Incident Identification Details

  • Ticket Number 

  • Title/Summary

  • Date and Time Reported

  • Reported By

Incident Description

  • Detailed Description

  • Category

  • Sub-category

  • Impact

  • Urgency

  • Priority

Technical Information

  • Affected IT Services

  • Configuration Items (CIs)

  • System/Service Logs


  • Impact

  • Urgency

  • Priority

Incident Response

  • Assigned To

  • Incident Status 

  • Resolution Details

  • Resolution Date and Time

Communication and Follow-Up

  • Updates

  • Resolution Confirmation

  • Feedback

Post-Incident Analysis

  • Root Cause Analysis (RCA) / Categorisation of Cause

  • Lessons Learned

  • Future Prevention Measures

a man smililng at his computer screen.

Service Request Tickets

So, you may have mixed your incident process and service request ticket process. 

If you haven't already separated these processes, then you should. It'll help both the speed of resolution of the tickets and help you with your reporting. Service requests are not the same as Incident requests.

The IT Service Requests Process

The Request Management Process
The Request Management Process

What Categories of Service Request Tickets Should I Have?

Here are some suggested request ticket types:



User Services

  • New employee onboarding

  • Employee offboarding

  • User account management

  • Email account setup

  • VPN access setup

Hardware Requests

  • Laptop/desktop provisioning

  • Mobile device provisioning

  • Printer and peripheral setup

  • Hardware repair or replacement

Software Requests

  • Software installation or upgrade

  • License assignment

  • Access to shared drives/folders

  • Software troubleshooting

Access Requests

  • File or folder access

  • Application access

  • Database access

  • Network access permissions

Information Requests

  • How-to guides and documentation

  • Policy and procedure information

  • Training material request

Communication Services

  • Mobile phone services

  • VoIP services setup

  • Conference call setup

Facilities Services

  • Access card issuance

  • Office move and setup

  • Secure storage requests

Security Services

  • Security awareness training

  • Password reset tools

  • Two-factor authentication setup

Collaboration Tools

  • Email distribution lists set up

  • Collaboration platform access

  • Video conferencing setup

If you have an IT service catalogue, the service request tickets should mirror its options. There may be options online through a portal to allow for self-registration of requests from the customers/users.

What Data Should I Record in my IT Service Request Tickets?

IT Service Requests will be similar in structure to Incident tickets, but here are some suggestions:

Section Title

Data Points

Service Request Details

  • Ticket Number

  • Title/Summary

  • Request Type

  • Date and Time Submitted 

  • Submitted By

Request Description

  • Detailed Description 

  • Justification

  • Category

  • Sub-category


  • Impact

  • Urgency

  • Priority

Approval and Authorisation

  • Approval Status

  • Approved By

  • Approval Date

Request Fulfillment Details

  • Assigned To

  • Fulfillment Plan

  • Status

  • Expected Fulfillment Date

Cost and Resources

  • Estimated Cost

  • Resources Required

Communication and Follow-Up

  • Updates 

  • Completion Confirmation

  • Feedback

Documentation and Knowledge Sharing

  • Resolution Details

  • Knowledge Article

a woman talking at her computer

Problem Tickets

Problem tickets are about investigating the root causes of incident tickets. So, why for example you have to keep rebooting that one damn server every Thursday afternoon. The purpose behind incident tickets is to get it rebooted and working again, but the problem ticket says, 'Hey, there's a trend here'.

I said earlier that your problem tickets will likely align closely with your incident ticket types, but maybe not 100%. Having a common basis does help with linking problems to incident tickets.

The Problem Ticket Process

The Problem Management Process
The Problem Management Process

What Categories of Problem Tickets Should I Have?

Here are some common problem ticket types;




  • Network Issues

  • Server Failures

  • Storage Problems

  • Power and Cooling

  • Hardware Malfunctions


  • Application Bugs

  • Database Corruption

  • Performance Degradation

  • Integration Issues

  • Security Vulnerabilities


  • SLA Breaches

  • Availability Issues

  • Capacity and Scalability

  • Backup and Recovery Failures

  • Service Configuration


  • Unauthorised Access

  • Data Breach/Leakage

  • Malware Infection

  • Phishing Attacks

  • Denial of Service (DoS)

User Experience

  • Usability Issues

  • Accessibility Problems

  • Interface Design Flaws

  • Feedback and Complaints

  • Training and Documentation


  • Inefficient Workflows

  • Policy Gaps

  • Communication Breakdowns

  • Compliance Issues

  • Change Management Failures

What Data Should I Record in my Problem Tickets?

Here's my suggestion as an essential minimum for the problem management process tickets.

Section Title

Data Points

Problem Identification Details

  • Ticket Number

  • Title/Summary

  • Date and Time Identified

  • Identified By

Problem Description

  • Detailed Description

  • Category

  • Sub-category


  • Impact

  • Urgency

  • Priority

Related Incidents

  • Incident Ticket Links

  • Incident Impact

Investigation and Diagnosis

  • Root Cause Analysis

  • Diagnostic Information

Workaround and Resolution

  • Workaround

  • Resolution Plan

  • Resolution Date

Change Requests

  • Related RFCs (Request for Change)

  • Change Impact

Status and Tracking

  • Current Status 

  • Update History

Review and Closure

  • Review Summary

  • Closure Category

  • Closure Date

Preventive Measures

  • Recommendations

  • Implemented Changes

a person working on their computer

Change request tickets

The Change Management process starts with logging a Change Ticket or a Request for Change (RFC). It’s used to track a change from the request through to it’s implementation and may be linked to Incident and Problem tickets.

The Change Request Process

The Change Management Process
Change Management Process

What Categories of Change Request Tickets Should I Have?

Here are some that I would expect to see;



Standard Changes

  • Software updates and patches

  • Password policy updates

  • Minor network configuration adjustments

  • Pre-approved hardware replacements

Emergency Changes

  • Critical security patches

  • Urgent bug fixes

  • Immediate network modifications to restore connectivity

Major Changes

  • New system implementations

  • Major software upgrades

  • Data center migrations

  • Significant network overhauls

Minor Changes

  • Small application enhancements

  • Minor database modifications

  • Small-scale hardware upgrades

Service Request Changes

  • Access level modifications

  • Service configuration changes

  • Installation of additional features or services

Regulatory and Compliance Changes

  • Updates to comply with new laws or regulations

  • Changes to ensure compliance with industry standards

Infrastructure Changes

  • Cloud infrastructure adjustments

  • Virtualisation platform updates

  • Storage capacity expansions

Application Changes

  • Implementation of new functionalities

  • User interface redesign

  • Integration with other systems

Security Changes

  • Implementation of enhanced encryption

  • Addition of new security tools or services

  • Updates to firewall configurations


What Information Should Be Recorded in My Change Management Ticket?

An RFC should collect the following;


  • Data

Change Identification

  • RFC Number

  • Title/Summary

  • Date and Time Raised

  • Raised By

Change Description

  • Detailed Description

  • Category 

  • Change Type


  • Impact 

  • Urgency

  • Priority

Risk Assessment

  • Risk Analysis

  • Mitigation Strategies

Resources and Responsibilities

  • Resource Requirements

  • Change Owner

  • Implementation Team

Planning and Approval

  • Implementation Plan

  • Test Plan

  • Approval Status

  • Approvals