Insights & GuidesGuide
What Good Managed IT Should Include
A straightforward breakdown of what you should expect from a managed IT provider in 2026 - and what many providers quietly leave out.
7 min
Key Takeaways
- 1Good managed IT should include unlimited support, proactive monitoring, security basics, and strategic guidance as standard
- 2Be wary of providers who charge extra for mobile devices, onsite visits, or line of business applications
- 3Security should be built in, not offered as an expensive add-on
- 4A per-user pricing model typically offers better value and aligned incentives than hourly or block-hour models
The Non-Negotiables
These are the absolute basics that any decent managed IT provider should include in their standard per-user price. If a provider charges extra for any of these, that's a significant red flag.
- Unlimited remote support - you should be able to call as often as needed without watching the clock
- 24/7 monitoring of your systems with alerts for issues
- Patch management for operating systems and common applications
- Basic endpoint protection (antivirus/antimalware)
- Help with new user setup and offboarding
- Support for standard business applications (Microsoft 365, common LOB apps)
- Desktop and laptop support
- Regular backup monitoring (even if backup storage is separate)
What Should Be Included But Often Isn't
Many providers exclude these items to keep their headline price low, then charge extra when you need them. A genuinely good provider includes them as standard.
- Mobile device support (iOS and Android) - your team uses phones for work, so they should be covered
- Onsite visits when remote support won't solve the problem
- Support for line of business applications (your industry-specific software)
- Printer and peripheral support
- Network troubleshooting and local infrastructure support
- VPN and remote working configuration
- Basic security awareness guidance
- Quarterly or bi-annual account reviews
Reasonable Add-Ons
Some services genuinely cost more to deliver and it's fair to charge separately for them. These shouldn't be hidden in the fine print, but it's reasonable for them to be optional extras.
- Microsoft 365 license costs (though management should be included)
- Advanced security services like SOC monitoring or MDR
- Server support (whether on-premises or cloud)
- Backup storage (the monitoring should be included, the storage is a real cost)
- Major project work like office moves or significant infrastructure changes
- Hardware procurement (though advice should be free)
- Specialist application support requiring vendor certifications
Security: The Bare Minimum
In 2026, security cannot be an afterthought. These security measures should be standard in any managed IT offering. Providers who treat security as a premium add-on are either out of touch or prioritising their margins over your protection.
- Endpoint protection on all managed devices
- Email filtering and anti-phishing measures
- Enforced multi-factor authentication setup and support
- Regular patching of security vulnerabilities
- Basic security monitoring and alerting
- Security incident response (at least initial response and triage)
- Guidance on security best practices
Strategic Support, Not Just Break-Fix
A good managed IT provider is a strategic partner, not just a helpdesk. They should proactively advise you on technology decisions, help you plan for the future, and align their recommendations with your business goals. This strategic element is often where the real value lies.
- Regular account reviews (quarterly at minimum)
- Technology roadmap planning
- Budget forecasting and IT spend optimisation
- Guidance on new technology adoption
- Vendor management and advice
- Risk assessment and mitigation planning
- Clear communication that you can understand (no unnecessary jargon)
Warning Signs to Watch For
Some practices are clear indicators that a provider may not be operating in your best interests. These should make you think twice before signing.
- Long contract lock-ins (more than 12 months) with punitive exit clauses
- Ownership claims over your data, documentation, or configurations
- Reluctance to provide references from similar clients
- Unclear or hidden pricing for common services
- No security certifications (Cyber Essentials, ISO 27001)
- Unable or unwilling to explain their approach in plain English
- High staff turnover or frequently changing account contacts
- Slow response times during the sales process (it only gets worse)
Related Services
Free Consultation
Want to discuss your IT needs?
Get in touch today for a free, no-obligation conversation about how we can help your business.