A tribute to the original OpsReportCard.com—now unavailable but still cherished by IT ops teams.

The Operations Report Card

32 yes/no habits that separate high- from low-performing IT ops teams

How'd you like to read?

Your Ops Score

0Yes

0No

32Yet to answer

A. Public Facing Practices

B. Modern Team Practices

C. Operational Practices

D. Automation Practices

E. Fleet Management Processes

F. Disaster Preparation Practices

G. Security Practices

Stitchflow

End-to-end IT automation,
built for exactly how you work.

Stitchflow delivers end-to-end automation for the IT work that's still manual. Offboarding, license management, access reviews, spend intelligence. Every app, including the ones without APIs. Live in less than a week. We maintain everything.

Every App Covered

60+ deep API integrations plus browser automation for apps without APIs. The apps your assessment flagged as manual? We automate those.

Built for Your Setup

Your apps, your processes, your edge cases. Not another tool to configure. Workflows built for exactly how your company works.

We Handle the Rest

APIs change. Admin consoles get redesigned. You add new apps. We handle all of it. Your team reviews results in Slack.

The Operations Report Card

How'd you like to read?

Your Ops Score

A. Public Facing Practices

Q1. Are user requests tracked via a ticket system?

Q2. Are "the 3 empowering policies" defined and published?

Q3. Does the team record monthly metrics?

B. Modern Team Practices

Q4. Do you have a "policy and procedure" wiki?

Q5. Do you have a password safe?

Q6. Is your team's code kept in a source code control system?

Q7. Does your team use a bug-tracking system for their own code?

Q8. In your bugs/tickets, does stability have a higher priority than new features?

Q9. Does your team write "design docs?"

Q10. Do you have a "post-mortem" process?

C. Operational Practices

Q11. Does each service have an OpsDoc?

Q12. Does each service have appropriate monitoring?

Q13. Do you have a pager rotation schedule?

Q14. Do you have separate development, QA, and production systems?

Q15. Do roll-outs to many machines have a "canary process?"

D. Automation Practices

Q16. Do you use configuration management tools like cfengine/puppet/chef?

Q17. Do automated administration tasks run under role accounts?

Q18. Do automated processes that generate e-mail only do so when they have something to say?

E. Fleet Management Processes

Q19. Is there a database of all machines?

Q20. Is OS installation automated?

Q21. Can you automatically patch software across your entire fleet?

Q22. Do you have a PC refresh policy?

F. Disaster Preparation Practices

Q23. Can your servers keep operating even if 1 disk dies?

Q24. Is the network core N+1?

Q25. Are your backups automated?

Q26. Are your disaster recovery plans tested periodically?

Q27. Do machines in your data center have remote power / console access?

G. Security Practices

Q28. Do Desktops/laptops/servers run self-updating, silent, anti-malware software?

Q29. Do you have a written security policy?

Q30. Do you submit to periodic security audits?

Q31. Can a user's account be disabled on all systems in 1 hour?

Q32. Can you change all privileged (root) passwords in 1 hour?

End-to-end IT automation, built for exactly how you work.

Every App Covered

Built for Your Setup

We Handle the Rest

End-to-end IT automation,
built for exactly how you work.