What managed IT actually means
Managed IT means you pay a flat monthly fee and a provider takes ongoing responsibility for your technology: your computers, accounts, email, and the daily problems that come with them. The alternative is break-fix, where you call someone when things break and pay by the hour. Break-fix feels cheaper until you notice the incentive problem: a break-fix vendor earns more when your systems fail. A managed provider earns more when they don't.
For most businesses with 5 to 50 employees, managed is the right model once technology problems start costing you real hours every month. The rest of this article is the checklist I would use to evaluate any provider, including mine.
The core services every agreement should include
Every managed IT agreement worth signing should include these, in writing:
- A help desk with committed response times. Ask for specifics: how fast is first response for a normal issue versus an outage? One hour for urgent and same business day for routine is a reasonable small-business standard.
- Microsoft 365 or Google Workspace administration. Account setup, password resets, mailbox changes, and license management should be included, not billed separately.
- Device management. Every company computer should be enrolled in a system that tracks it, keeps it updated, and can lock it if it walks away.
- Patching. Operating system and software updates applied on a schedule, with a record you can see.
- Backups that get tested. A backup nobody has restored from is a hope, not a backup. Ask when they last did a test restore for a client.
- Security basics. Multi-factor authentication enforced everywhere, meaning a second confirmation step beyond the password, plus endpoint protection on every machine.
If any of these show up as add-ons, price them in before you compare quotes.
The local questions: onsite visits and vendor coordination
Two things matter more in this area than the national marketing suggests.
First, onsite reality. Most issues resolve remotely, but sometimes someone needs to touch the hardware: a dead network switch, a new office buildout, a workstation that will not boot. Ask any provider how onsite visits work: included or billed, how quickly, and where their people actually are. A provider whose nearest technician is 90 minutes away in traffic will always push you toward remote-only, whether it fits your situation or not.
Second, vendor coordination. Small businesses juggle an internet provider, a phone system, a printer company, maybe a point-of-sale vendor. A good provider acts as your single point of contact: you report the problem to them, and they chase the right vendor. Ask directly whether vendor coordination is included, because untangling a finger-pointing match between your internet company and your phone vendor is exactly the work you are paying to avoid.
What it costs and how to read the pricing
In the DMV market, managed IT for a small business typically runs 100 to 175 dollars per user per month, sometimes lower for very simple setups and higher when compliance requirements are involved. Per-device pricing exists too, usually 30 to 75 dollars per device per month.
The number itself matters less than what sits behind it. Ask these questions of every quote:
- What is excluded? Projects like office moves and server migrations are usually extra. That is fine, but get typical project rates now.
- Is onboarding a separate fee? Many providers charge one month's fee or a flat amount to take over an environment.
- What happens to pricing at renewal?
- If we shrink from 12 users to 9, does the bill shrink too?
A provider who answers these plainly on the first call is telling you what working with them will be like.
Warning signs in an MSP agreement
I have reviewed enough of these agreements to know the patterns. Walk away, or negotiate hard, when you see:
- No written response-time commitments. 'Best effort' is not a commitment.
- Auto-renewal with a two or three year lock-in and a narrow cancellation window.
- Backups mentioned nowhere, or mentioned without any testing obligation.
- No offboarding terms. When you leave, you should get your passwords, documentation, and data promptly and at no ransom. If the agreement is silent on this, ask why.
- 'All-inclusive' pricing followed by pages of exclusions.
- No named point of contact. If every ticket goes to a generic queue, so will your emergencies.
What to do next
If you are evaluating providers, or wondering whether your current one is doing the job:
- List your actual pain: the last five IT problems, how long each took to fix, and what the downtime cost you.
- Write down your headcount, device count, and any compliance requirements.
- Get two or three quotes and force them into the same shape: per-user price, what's included, what's excluded, response times, contract length.
- Ask each provider the backup question, meaning when they last ran a test restore, and watch how they answer.
- Check the offboarding terms before you sign, not when you're unhappy.
HashWhales offers managed IT for small businesses across Arlington and the wider DMV, and I'm happy to walk you through your current agreement by phone even if you never hire us. Bad contracts annoy me on principle.