RATE
IT, answered.
A constellation of automations August
One pane of glass over TJFACT's technology operation. The automations handle the routine; you handle the exceptions. Twelve systems, one control plane.
Tickets today
| Open | 9 |
| AI-resolved | 31 |
| Waiting on employee | 4 |
| Escalated to you | 2 |
Security live
| Critical alerts | 2 |
| Suspicious sign-ins · 24h | 3 |
| Access reviews due | 12 |
| Inactive accounts | 4 |
Systems 99.9% uptime · 30d
| Microsoft 365 | Operational |
| SharePoint / Intranet | Operational |
| Costpoint | Operational |
| tjfact.com | Cert expires 12d |
Employees 208 active
| Employee | Dept | Devices | Status |
|---|---|---|---|
| J. Brooks | BD | 2 | Clear |
| M. Ortega | B&P | 1 | Update due |
| R. Okafor | Finance | 2 | Clear |
| New hire · cohort 9 | PMO | — | Onboarding 5/11 |
Activity stream automations working
AI Help Desk
Employees ask the agent instead of interrupting you. Tier 0–1 resolves itself, Tier 2 triggers governed automations with human approval, Tier 3 escalates with a summary. Try it live — the floating agent (bottom-right) is the real thing.
Tier routing this month
| Tier 0 Answered from knowledge | 64 |
| Tier 1 Guided self-fix | 29 |
| Tier 2 Automated fix + approval | 19 |
| Tier 3 Escalated to IT | 25 |
Controlled actions — live walkthrough governed, audited
"I need access to the Finance SharePoint." The agent verifies identity and policy, routes approval, provisions, and writes the audit record — you never touch it.
Employee Lifecycle Engine
HR enters one line — the engine does the rest, with a first-class audit trail (this is a government contractor; evidence is a feature, not an afterthought). Run the simulation:
Onboard a new employee simulation
Offboarding one click, fully audited
| Recent lifecycle events | By | |
|---|---|---|
| 14 employees auto-provisioned · Aug | Engine | Audited |
| 6 accounts auto-offboarded · Aug | Engine | Audited |
| Contractor access expired (auto) | Policy | Audited |
| Mailbox transferred → manager | Engine | Audited |
Device Management
Built on Microsoft's endpoint stack — this layer is the orchestration and visibility: enrollment to assignment to compliance, automatically flagged when anything drifts.
Fleet flagged first
| Device | Assigned | OS | Encryption | Updates | Status |
|---|---|---|---|---|---|
| TJF-LT-0147 | M. Ortega · B&P | Win 11 | On | 14d behind | Auto-remediating |
| TJF-LT-0102 | T. Rivers · PMO | Win 11 | On | Current | Compliant |
| TJF-LT-0093 | Unassigned | Win 11 | On | Current | Ready · wiped |
| TJF-MB-0031 | K. Salaam · HR | iOS 19 | On | Current | Compliant |
Identity & Access Engine
Accounts, groups, MFA, and access reviews — policy-driven, so access always matches role, and every grant has an expiry and an owner.
Access reviews quarterly · auto-generated
| Scope | Owner | Due | |
|---|---|---|---|
| Finance SharePoint · 31 members | Adeola | Aug 29 | Due |
| Costpoint admins · 4 | Adeola | Aug 29 | Due |
| Executive dashboards · 9 | O. Reynolds | Sep 12 | Scheduled |
| HR records · 6 | K. Salaam | Sep 12 | Scheduled |
Recent grants all via approval workflow
| Grant | Approved by | |
|---|---|---|
| R. Diaz → PMO deliverables (edit) | O. Reynolds | Audited |
| J. Brooks → GovWin sso | L. Wingate | Audited |
| Temp: auditor → Finance (read, 14d) | Adeola | Expires 9/02 |
Security Operations
Designed for a government contractor: every control produces evidence continuously, so compliance questionnaires become exports, not fire drills. (Qualified compliance personnel determine what satisfies CMMC — this system collects; it doesn't self-certify.)
Open items worked by automation first
| Alert | Age | State |
|---|---|---|
| Critical Impossible-travel sign-in · svc acct | 2h | Sessions revoked · reviewing |
| Critical Legacy auth attempt blocked | 6h | Blocked · evidence saved |
| Medium 4 inactive accounts > 45 days | 1d | Disable scheduled |
| Medium 3 devices missing update ring | 2d | Auto-remediating |
Evidence locker continuously collected
| Control evidence | Freshness |
|---|---|
| MFA enrollment export | daily · 6:00a |
| Device compliance snapshots | daily · 6:00a |
| Access review completions | on event |
| Offboarding audit records | on event |
| Training & acknowledgement logs | weekly |
System Health Monitor
Everything TJFACT depends on, watched around the clock — websites, APIs, services, and the automations themselves. You find out before employees do.
Microsoft 365 Operational
Intranet Operational
Costpoint Operational
tjfact.com Attention
Integration APIs Operational
Automations 24/24 healthy
Incident feed
Assets & Licenses
Hardware, software, and subscriptions in one register — with renewals that warn you and utilization that tattles.
Renewal calendar
| Item | Renews | Annual | Utilization | Recommendation |
|---|---|---|---|---|
| Power BI Pro × 12 | Sep 14 | $2,016 | 9 of 12 active | Reduce to 9 |
| Design suite × 6 | Sep 30 | $3,240 | 2 of 6 active | Reduce to 2 |
| GovWin IQ | Oct 08 | $14,900 | BD daily | Keep |
| E-sign platform | Oct 20 | $1,788 | Duplicate of M365 capability | Cancel |
Cost Optimization Engine
Finds money hiding in the stack — unused licenses, zombie subscriptions, ex-employees still consuming seats — and turns it into a monthly Technology Cost Report.
Potential monthly savings identified
Findings this month
| 11 Microsoft licenses on inactive users | $682/mo |
| 4 applications with no recorded usage | $396/mo |
| 3 duplicate SaaS products | $427/mo |
| 2 former employees still consuming licenses | $188/mo |
| 7 devices eligible for reassignment vs new purchase | $149/mo |
TJFACT Technology Cost Report auto-generated monthly
Knowledge AI
Every SOP, guide, and resolved ticket feeds the brain that powers the help-desk agent. Documentation stops being homework and becomes infrastructure.
Knowledge base
| Article | Type | Powers agent | Updated |
|---|
Costpoint / M365 Integration Hub
Every system talks through one governed layer — one place for authentication, logging, transformation, and control. No point-to-point spaghetti, no mystery scripts.
Integration log live stream · governed
August Technology Report
Not "I closed 37 tickets." The story of an automated technology operation — auto-generated monthly, one page, owner-readable.
People operations automated
| Employees automatically provisioned | 14 |
| Accounts automatically offboarded | 6 |
| Access requests via approval workflow | 23 |
| Orphaned access at month end | 0 |
The point for the salary review
That's not an IT Support Specialist. That's the person who built TJFACT's automated technology operation.