“Managed IT” can describe anything from a basic help desk to full responsibility for infrastructure, security, vendors, and technology planning. Before comparing prices, compare responsibilities.
A clear support route
Staff should know how to ask for help, what information to provide, and how urgent issues are handled. The agreement should describe support hours, response targets, escalation, and any work that is excluded.
Routine maintenance
Ask who owns operating system updates, application updates, device policies, firmware, certificates, warranties, storage capacity, and license renewals. Problems often occur in the space between contracts where each supplier assumes someone else is responsible.
Monitoring with a response
Monitoring only helps if someone reviews alerts and is authorized to act. Confirm what is monitored, which alerts create action, how incidents are communicated, and whether response work is included.
Backup and recovery checks
The service should state which systems and data are backed up, how long copies are kept, how backup failures are handled, and how often restoration is tested. Ask who decides recovery priorities during a major incident.
Security responsibilities
Clarify ownership for identity, multi-factor authentication, endpoint protection, vulnerability management, email security, security logs, staff guidance, and incident response. Security products without operational ownership provide false comfort.
Joiners, movers, and leavers
Account and device processes should be written down. The service provider needs timely, authorized information from the client, and the client needs confirmation that access changes were completed.
Useful reporting
Reports should lead to decisions. Useful topics include recurring incidents, aging devices, backup issues, security gaps, license waste, service performance, and upcoming renewals. Large ticket-count charts are less helpful without explanation.
Questions to ask a provider
- What is explicitly not included?
- Who owns third-party vendor problems?
- How is after-hours work handled?
- What documentation will you maintain?
- How can we retrieve our data and documentation if the contract ends?
- What requires a separate project fee?
The right service is not the one with the longest feature list. It is the one where responsibilities are clear and the provider consistently follows through.