The first phase should establish access controls, service inventory, monitoring, escalation routes, documentation priorities, baseline health and reporting. It should also confirm the division of responsibility, identify immediate risks and agree on a practical improvement plan. A provider should make the environment and the operating model more visible, not merely inherit existing tickets.