Daily: catch active failure
Review backup exceptions, security detections, stale endpoints, critical monitors, failed jobs, and alert-to-ticket routing while the evidence is still fresh.
Use one reviewable record for the work that keeps disappearing into dashboards: backup exceptions, stale endpoints, security alerts, patch failures, automation errors, restore tests, access reviews, coverage gaps, policy drift, billing reconciliation, and customer decisions.
Review backup exceptions, security detections, stale endpoints, critical monitors, failed jobs, and alert-to-ticket routing while the evidence is still fresh.
Own patch and reboot failures, tune alert noise, find unmanaged devices, review capacity and risk, sample automation, and update documentation from completed change. Record stale, conflicting, or unknown devices in the endpoint inventory template.
Test restores, review policy outcomes and privileged access, measure agent coverage, reconcile lifecycle and billing, test runbooks, and surface material exceptions.
Review backup configuration, exercise recovery, inventory persistent integrations and grants, and remove checks that have become ceremonial or unactionable.