What “Managed IT” Actually Includes (and What Gets Quietly Left Out)

Managed IT is one of those phrases that means whatever the provider selling it wants it to mean. Two companies can quote you for the same thing and be offering wildly different work. The word covers all of it, which is exactly why you have to look underneath the word.

Here is what a complete managed IT service actually includes, and the parts that quietly go missing when the price looks too good.

The parts everyone includes

Every provider will cover the basics, because these are what people picture when they hear the term. A help desk to call when something breaks. Someone to set up new staff and remove the ones who leave. Antivirus on the machines. Email that works.

This is real work and it matters. But it is reactive. It waits for something to go wrong and then responds. If this is all you are getting, you are paying for a fire brigade, not fire prevention.

There is nothing wrong with a help desk. The problem is when the help desk is the entire offering. A good managed service prevents the calls that would have been made to the help desk in the first place.

The parts that get left out

The valuable half of managed IT is the half that stops you ever needing the help desk. This is where cheap contracts get thin.

Monitoring is first. Your systems should be watched continuously so that a failing disk or a creeping capacity problem is caught before it becomes an outage. Without it, the first sign of trouble is the trouble itself. A provider who monitors properly can often fix a problem before the client even knows it existed.

Patch management is second, and it is the one we care about most. Keeping every system updated is dull and constant, and it prevents the large majority of breaches. We wrote a whole piece on why patching is the boring task that stops most breaches because it deserves the attention. A provider who cannot show you a patching record is not really managing anything.

Backup and recovery is third. Not just that backups exist, but that someone has tested restoring from them recently. An untested backup is a guess, and you find out it was a wrong guess at the worst possible moment. Ask any provider when they last did a restore test. The answer should be recent and specific, not vague.

Asset and access records are fourth. You should know what you own and who can reach it. Most organisations do not, which is a problem we see so often we wrote about why your asset register is wrong right now. A managed provider who does not maintain a live asset register is doing the same thing you would do without them — just with a help desk attached.

The part almost nobody includes

The rarest piece is judgement. Someone who looks at your IT the way a senior person would and tells you what to worry about and what to ignore. Most managed contracts have no room for this. It is closer to the advisory work done at Greg Hay, and pairing the two is how you get hands that do the work and a head that decides what the work should be.

This is the gap that matters most. Monitoring tells you something is wrong. Patching fixes known vulnerabilities. But someone still needs to look at the overall posture and ask: are we doing the right things in the right order? Are we spending budget where it has the most impact? Are we compliant with the regulations that apply to us? That work is not a help desk function.

How to read a quote

When you compare providers, do not compare the monthly figure. Compare what sits behind it. Ask specifically about monitoring, patching with evidence, tested recovery, and who makes the judgement calls. The gaps in those answers are the real difference between two quotes that look identical on the front page.

Ask for evidence. A provider who is actually patching can show you the records. A provider who is actually monitoring can show you the alerts. A provider who is actually testing backups can tell you the date of the last successful restore. If the answers are vague, the work is probably vague too.

The best managed IT service is the one where you never have to wonder whether the basics are being done. You know because you can see the evidence. Continuous monitoring is what makes that possible.

The best managed IT service is the one where you never have to wonder whether the basics are being done. You know because you can see the evidence. That is the standard to hold any provider to — including us.