Re: Our IT support does this sort of thing daily.
But your IT support is probably not for safety critical systems and probably does and should have the authority to implement changes as necessary after appropriate sign off. A spreadsheet not opening as expected generally isn't too bad. A virus/"generic nasty" being received and being propagated could be more important.
There are many formal processes around that attempt to address the probability of an event occurring and the consequential events, e.g. FMECA.
Don't for one moment believe that your "IT support" has *any* similarity to safety critical/hard real time systems.