We've updated the ServiceNow Community Code of Conduct, adding guidelines around AI usage, professionalism, and content violations. Read more

When does it make sense to use a Case instead of going straight to an Incident?

darrelldjoh
Mega Explorer

I’m trying to better understand when an organization would choose the Case route versus going straight to an Incident.

In many DoD/internal support environments I’ve seen, the cleaner and quicker workflow is to open an Incident as soon as a customer calls or reports an issue. That gives the team one record to track the interaction, assignment, troubleshooting, and restoration work. If multiple users are experiencing the same issue, we then open a Problem for RCA and relate the Incidents back to it.

Because of that, I’m trying to understand where Cases really add value in practice.

For organizations using Case management / CSM, when do you decide a Case should be the primary intake record instead of an Incident? What makes that extra step worth it operationally? Is it mainly for customer/account context, entitlements, communication workflows, external customer support, or something else?

I’d be interested in hearing real-world examples of where Case + Incident worked better than just using the Incident-first route.

2 REPLIES 2

AnirudhKumar
Mega Sage

Great question btw.

Here's my opinion on the subject. If you deal with only one client/customer, then it doesn't matter if you send all queries to the Incident bucket. But when you have more than one client, and queries come in from all sides, creating cases adds that extra layer of segregation. And this segregation could be beneficial for a variety of things - like data privacy or offering white-glove service. 

You could argue all of those benefits can also out of Incident Management too. But you might have to custom-build in at least half of those scenarios. Whereas in Case management you get most of those benefits configurable OOB.

 

Again, there's many layers to this discussion. But I hope you got the gist🙂

fknell
Giga Patron

Hi @darrelldjoh,

If you're 'just' an internal IT provider, that provides IT services with your own personnel, you're good to go with incidents. When you are servicing external clients with IT services, you might benefit from CSM ootb functions, that are not available in ITSM, or you might have to rebuild.

 

In case you are providing service to external customers or have products, that e.g., rely on IT systems, you can create a case and once IT is involved, an incident. Another scenario would be using a shared service desk for IT, HR, Facility, etc., but this can also be done with the Universal Request.

 

Hope this helps!