01Questions to ask before signing a managed IT agreement
Who owns the documentation and administrative credentials? What is included versus billable? Are security controls part of the base fee? What are the response targets by priority, and what happens when they are missed? How does the agreement end, and what is handed back? A provider unwilling to answer these in writing is telling you something.
02What cyber insurers now expect to see
Renewal questionnaires have tightened considerably. Expect questions on MFA for all remote and administrative access, endpoint detection and response, offsite and immutable backup, tested recovery, email filtering with domain authentication, privileged access control, patch cadence, security awareness training and a documented incident response plan. Answering optimistically is a claim-denial risk.
03Backup, disaster recovery and continuity are not the same thing
Backup is a copy of data. Disaster recovery is the ability to restore systems within a defined recovery time and recovery point objective. Business continuity is how the organization keeps operating while that happens. Most organizations have the first, assume the second and have never written the third.
04The Microsoft 365 settings most tenants never turn on
Conditional access, legacy authentication blocking, privileged role review, external sharing governance, retention and litigation hold, Intune compliance baselines, Defender safe links and attachments, mailbox audit review, and third-party backup of tenant data. Nearly all are included in licensing organizations already pay for.
05Break/fix versus managed IT, honestly compared
Break/fix costs less on a good month and considerably more on a bad one. It rewards a provider for problems recurring and gives nobody responsibility for prevention, documentation or lifecycle planning. Managed IT converts that to a fixed fee and moves the incentive toward stability. For organizations under about ten users with minimal dependency, break/fix can still be reasonable.
06Planning an office move or a new Burlington site
Start eight to twelve weeks out. Carrier installation is almost always the critical path. Confirm circuit delivery dates, cabling and rack location, electrical and cooling, wireless survey requirements, firewall and switch configuration, phone porting, printer placement, and a cutover plan with a defined fallback if the new circuit is late.