IT Outsourcing Sri Lanka
IT department outsourcing that keeps ownership and operations clear
Capricon embeds full or partial IT capacity for Sri Lankan businesses that need reliable day to day operations without losing control of priorities, access, or business decisions.
Who this is for
- Companies that outgrew ad hoc IT help but are not ready for a full in house department
- Teams running Capricon products plus legacy tools that still need daily care
- Multi branch operators who need consistent oversight, vendor coordination, and escalation
- Leadership that wants measurable response, documentation, and continuity instead of ticket black holes
What Capricon typically owns
- Day to day technical operations for agreed systems and environments
- Legacy application support and practical workarounds while you modernize
- Infrastructure and vendor coordination within the scoped stack
- Incident triage, escalation paths, and status communication to your owners
- Knowledge notes so coverage does not depend on one named engineer
- Periodic reviews covering open risks, backlog, and improvement candidates
What usually stays with you
- Business priority decisions and budget approval for major changes
- User access policy ownership and final approval for privileged roles
- Product strategy for what to buy, retire, or rebuild next
- Legal accountability for your data processing as the controller under PDPA
How an engagement usually starts
- Discover the systems list, owners, pain points, and must not fail workflows
- Define scope, severity levels, response expectations, and reporting cadence
- Transition with access, runbooks, and a short pilot on real incidents
- Operate with steady support, documented changes, and monthly review
- Improve with a backlog of fixes and automation once firefighting drops
Planning bands
Order-of-magnitude IT outsourcing planning bands
Monthly retainers sized to coverage hours, systems in scope, and whether you need business-hours or extended support. These are budgeting ranges—not list prices.
Partial desk / shared coverage
LKR 150K – 400K / month
Named Capricon capacity for a bounded stack—often Capricon products plus a few legacy tools—during standard business hours with ticket triage and vendor coordination.
Dedicated ops ownership
LKR 400K – 900K / month
Fuller day-to-day ownership across agreed environments, documented runbooks, monthly reporting, and clearer severity response for multi-user production systems.
Multi-branch / extended hours
LKR 900K – 2M+ / month
Broader coverage windows, more sites or systems, after-hours escalation for critical paths, and deeper vendor/infrastructure coordination. Upper end rises with 24×7 expectations.
Planning bands for budgeting—final quote after discovery. SLA table is finalized in your contract.
SLA model
Illustrative response model by severity
Exact targets are written into your outsourcing agreement after discovery. The table below shows how Capricon typically frames Critical, High, and Normal incidents for IT operations.
| Severity | Response | Resolution / restore | Notes |
|---|---|---|---|
| Critical | Within 1 hour (coverage window) | Workaround or restore target within 4–6 hours | Production down or must-not-fail workflow blocked across sites |
| High | Within 2–4 hours | Target restore or workaround within 1 business day | Major degradation with significant operational impact |
| Normal | Same or next business day | Typically 2–5 business days | Contained issues, how-to, and non-urgent backlog items |
Typically in SLA scope
- Incidents and operational support for systems listed in scope
- Vendor coordination and status updates to your named owners
- Knowledge notes and monthly open-risk / ticket summaries
Usually outside SLA hours
- Net-new projects, migrations, and major redesigns (quoted separately)
- Issues caused by undocumented third-party changes outside agreed process
- Coverage outside contracted hours unless an extended-hours option is signed
Buyer checklist
Questions every buyer should ask any IT outsourcing vendor
Use this checklist in vendor meetings, including ours.
- Which systems and environments are in scope on day one, and which are explicitly out?
- Who is accountable for incidents after hours, and how is severity defined?
- How is knowledge documented so coverage survives staff change?
- What do monthly reports include for open tickets, MTTR trends, and risks?
- How do you handle transition from our current staff or another vendor?
- What is the exit plan for access, documentation, and credentials?
Frequently asked questions
- What is IT department outsourcing?
- It means Capricon takes ownership of agreed day to day IT operations for support, upkeep, and coordination while your leadership keeps strategy, priorities, and approvals. It is not the same as handing over your entire company IT strategy.
- Should we outsource IT or hire in house in Sri Lanka?
- Hire when IT is a core differentiator and you can retain specialists. Outsource when you need reliable coverage, legacy support, or specialist depth without building a full department. Many Capricon clients keep one internal owner and outsource execution.
- Can Capricon support Capricon products and non Capricon systems?
- Yes for Capricon Core, Capricon Care, and related platforms we implement. Legacy or third party systems can be included when scope, access, and vendor relationships are defined in discovery so you do not get silent gaps between tools.
- How do you measure success?
- Agree metrics up front for response and resolution by severity, reopen rates, backlog age, and downtime for critical services. Success is fewer surprises for your operators, not only tickets closed.
- How does pricing usually work?
- Most engagements use a monthly retainer sized to coverage hours and scope, with change requests priced separately when they fall outside AMC or outsource boundaries. Fixed project work such as migrations and new modules is quoted on its own.
- How do you handle security and personal data?
- Access is role based and logged for the systems we support. You remain the data controller for customer, patient, and employee data under Sri Lanka’s Personal Data Protection Act. Capricon processes only what the engagement requires and follows agreed controls.
Related Capricon services
Ready to take your business to the next level?
Your next big move starts here - take charge, scale up, and lead your business to success.