The accidental IT person
Every growing business has one: the employee who is good with computers and therefore fixes the printer, resets passwords, and picks the software. It works at five people. Somewhere past ten, it quietly stops working, not because that person got worse, but because the job got real.
The signs are consistent. Problems get patched, not prevented. Nobody is watching backups or security because nobody owns them. The accidental IT person spends hours a week away from their actual job, and when they take a vacation, the whole company holds its breath.
None of this shows up as a line item, which is why the decision to get real support usually arrives late, right after something expensive.
The tipping points I watch for
Any one of these means it is time:
- Ten or more employees. Password resets, new hires, and broken laptops become a weekly stream, and downtime multiplies across more paychecks.
- A client or insurer sends a security questionnaire you cannot honestly complete. Cyber insurance applications now routinely ask about MFA, backups, and patching, and wrong answers can void coverage.
- You handle sensitive data, whether health, legal, financial, or defense-related, where a mistake has regulatory teeth.
- An outage would stop revenue, not just annoy people.
- A second location or remote staff, which turns setup and security into an actual discipline.
- Anyone who left the company might still have working passwords. If you cannot answer that confidently, that is the tipping point talking.
What downtime really costs
Run your own numbers, because this is the honest version of the decision.
Say eight employees at a loaded cost of $35 an hour lose half a day to a server or internet failure. That is $1,120 in payroll producing nothing, before a dollar of missed sales, missed deadlines, or the client who called twice and gave up. Two or three such incidents a year, which is a realistic count for an unmanaged setup, and you have quietly spent more than a year of professional support would cost, and bought nothing with it.
Ransomware moves the decimal point: multi-day outages and five-figure recovery costs are the norm for unprepared small businesses. Prevention is dramatically cheaper than recovery. That is not a sales line, it is arithmetic.
Managed IT versus a full-time hire
A full-time IT generalist in the DC area costs roughly $70,000 to $100,000 plus benefits, and one person cannot cover helpdesk, security, projects, and vacations at once.
Managed IT, meaning a firm handling your technology for a monthly fee, typically runs $75 to $175 per user per month around the DMV depending on what is included. For a 12-person company that is roughly $11,000 to $25,000 a year: a fraction of a hire, with broader coverage and no single point of failure.
The honest crossover: most businesses under 30 to 50 employees are better served by managed or fractional support. Past that, a hybrid of one internal person plus outside depth starts to make sense. In between, the deciding factor is usually how specialized your needs are, not headcount alone.
What managed support should include
Compare providers on what the monthly fee actually covers:
- Helpdesk with a stated response time, not best effort
- Patching and updates for every computer, handled centrally
- Backup management with periodic restore tests, not just a checkbox
- A security baseline: MFA everywhere, device encryption, email filtering
- Onboarding and offboarding: accounts created on day one, shut off the day someone leaves
- Vendor wrangling, so the provider calls the internet company instead of you
- A plain-English monthly report showing what happened and what is at risk
Ask who actually answers when you call. At HashWhales, clients across the DMV talk directly to the person doing the work, and whatever provider you choose, that is a fair standard to hold them to.
What to do next
- Add up last quarter's technology pain honestly: hours your accidental IT person spent, outages, near-misses. Put a dollar figure on it.
- Pull out your cyber insurance application or a client security questionnaire and count how many answers are a confident yes. That gap is your requirements list.
- Decide the level you need: a few hours a month of fractional help, full managed support, or a hire. Match the money to the risk, not to what a salesperson proposes.
- Interview two or three providers with the checklist above and ask each for a client of a similar size you can call.
- Whatever you choose, fix offboarding first, this week. Old accounts with live passwords are the cheapest risk you will ever close.