How to evaluate a managed IT relationship

Define the outcome before comparing providers

Start with the operating problem. The business may need faster user support, clearer security ownership, better documentation, predictable maintenance, or a technology plan that follows business priorities. A provider cannot scope the right service if the desired outcome remains vague.

Separate urgent remediation from ongoing operations. A neglected environment may need a stabilization project before it can move into a predictable managed model.

Make the service boundary visible

Ask which users, locations, devices, servers, cloud services, vendors, and hours are covered. Confirm what is excluded, what triggers additional work, and how onsite service is handled. Marketing phrases such as unlimited or all-inclusive should be translated into written operational terms.

• Who can open a request, and through which channel?
• How are severity and business impact determined?
• Which third-party vendors will the provider coordinate with?
• Who approves high-risk changes and emergency actions?

Review security and access practices

A managed provider may receive powerful access to business systems. Ask how administrative accounts are separated, how multifactor authentication is used, how access is removed, how support sessions are authorized, and how activity is documented.

The provider should collect only the information needed for support. Ordinary inquiry forms should never request passwords, full payment-card data, government identifiers, or identity documents.

Ask what evidence you will receive

Useful service evidence can include an asset inventory, change records, recurring-issue trends, backup test results, patch status, risk decisions, and an agreed improvement plan. The exact reporting should match the organization's needs and contract obligations.

Treat the proposal as an operating agreement

Before signing, confirm scope, pricing, escalation, response targets, data handling, subcontractors, contract length, renewal, exit assistance, and ownership of documentation. The public website can explain the approach, but the signed agreement should control the service relationship.