What Questions Should I Ask a Managed IT Provider Before Signing?

The short answer: Before you sign with a managed service provider (MSP), ask about what is included in the price, how support works and how fast they respond, how they handle security and backup, who owns your accounts and documentation, how they onboard new clients, and what the contract says about term, renewal, and leaving. A confident provider will answer in plain English and put the answers in writing. Vague answers are an answer too.

Choosing an IT provider is a long-term decision. You are giving someone access to your systems, your data, and your employees' daily work. Here are the questions worth asking, grouped by topic, along with what good answers tend to look like.

Questions about scope and pricing

1. What exactly is included in the monthly fee? Ask for a written service list. For more on this topic see what is included versus billed separately.
2. What is billed separately, and at what rate? Projects, after-hours calls, on-site visits, hardware, and licensing are common extras.
3. How is the price calculated? Per user, per device, flat fee, or tiered? What happens to the price when we add or remove staff?
4. Are there onboarding or setup fees? What do they cover?
5. Will the price go up at renewal? Is there a cap on increases?

Pricing varies widely by provider and scope. Sources we reviewed ranged from roughly $80 to $375 per user per month, which is why comparing the same scope matters. More in how much managed IT services cost.

What a good answer looks like: A clear list of what you get, what you do not, and what happens at the edges.

Questions about support and response

1. How do we request help? Phone, email, portal, or all three? Will I reach a person?
2. What are your support hours? Business hours only, or around the clock? NORPS clients have access to a 24/7/365 helpdesk, so this is a question we expect and welcome.
3. What are your response and resolution targets? Ask how they are measured and whether they are in the contract.
4. Who will I actually be talking to? A team that knows your staff and systems, or whoever answers?
5. Do you offer on-site support? How often, and is it included or extra?
6. What is your escalation process? What happens when the first technician cannot solve it?

What a good answer looks like: Specific numbers or commitments, a real escalation path, and a team that knows you.

Questions about security

1. What security is included by default? Endpoint protection, firewall management, content filtering, patching, multi-factor authentication?
2. How do you handle patching and updates? On what schedule?
3. What is your plan if we have a security incident? Who do we call, what happens first, and who pays for the work?
4. How do you secure your own systems? Your tools have deep access to ours. Ask how they protect admin credentials and remote management software.
5. Do you help with security policy and awareness? Policies, audits, and training matter as much as tools.
6. Do you support any compliance needs we have? If you are in a regulated industry, ask for specifics rather than general claims.

What a good answer looks like: Concrete practices and tools, not just the word "secure." If a provider cannot explain how they protect their own access to your network, be cautious.

Questions about backup and recovery

1. What is backed up, how often, and where do copies live?
2. Do you monitor backups and alert on failure?
3. Do you test restores, and how often? A backup you have never restored is a hope, not a plan.
4. What are our recovery expectations? How long to get back up after a failure?
5. Do you help with business continuity planning?

What a good answer looks like: Monitoring, off-site or cloud copies, and regular restore testing, all in writing.

Questions about ownership and documentation

1. Who owns our licenses, domains, and cloud accounts? They should be registered to you.
2. Will you give us our admin credentials and documentation? At any time, not only at exit.
3. Do you document our environment? Network diagrams, asset lists, and procedures.
4. What happens to our data and documentation if we leave? This is where many relationships sour. See how to switch managed IT providers.

What a good answer looks like: "It's yours, and we keep it documented." Any hesitation here is a flag.

Questions about the contract

1. How long is the term, and does it auto-renew? How much notice is needed to cancel?
2. Can we terminate for convenience? For cause? What are the cure periods?
3. Are there early termination fees? How are they calculated?
4. What service-level commitments are in the agreement? And what remedies if they are missed?
5. Who is liable for what? Ask about their insurance coverage.
6. Is there transition assistance at the end of the contract? Is it free or billed?

It is worth having an attorney review a long-term agreement.

Questions about onboarding and the relationship

1. What does onboarding look like, step by step? How long does it take?
2. Do you assess our environment first? What do we get from that?
3. Who is my main contact, and how often will we review things together? Regular check-ins, reports, and planning are a good sign.
4. Do you help with planning and budgeting? Good providers look ahead at asset lifecycles and upcoming needs, not only at today's tickets.

Questions about experience and fit

1. How long have you been in business, and what size clients do you usually serve? A fit matters. A provider built for 500 seats may not treat a 10-seat client well, and vice versa.
2. Do you have experience with our industry or software?
3. Can we talk to a current client? Reference conversations are the most useful due diligence you can do.
4. Who are you not a good fit for? An honest provider will have an answer.

Red flags to watch for

• Vague or evasive answers about pricing and scope
• Pressure to sign quickly
• Refusal to put commitments in writing
• Reluctance to give you admin credentials or documentation
• No clear security practices or backup testing
• Long auto-renewing terms with punishing exit fees
• No references
• A sales process that does not start with listening to your business

How NORPS answers these questions

NORPS is an Oklahoma City IT services company. We support organizations from 1 to 500 employees and bring more than 70 years of combined experience in the computer field. Our approach is to listen first, then recommend, plan, and implement, with prompt, personal service.

We encourage you to bring this list to every provider you are considering, NORPS included, and to ask for the answers in writing.