Resource
What is a managed service provider
A managed service provider takes ongoing responsibility for a defined set of your systems for a fixed monthly fee, rather than being called in and paid by the hour when something breaks. The technology is not what makes it different. The commercial model is.
What the work actually involves
Most of it is invisible when it is working, which is the source of a recurring tension: the better the job is done, the less evidence there appears to be that anyone is doing it.
| Function | Frequency |
|---|---|
| MonitoringWatching endpoints, servers, network and backup jobs for faults | Continuous |
| PatchingOperating systems and applications, on a cycle rather than when someone remembers | Scheduled |
| Help deskAnswering the phone when something is wrong, for anyone in the business | On demand |
| Security operationsReviewing alerts, closing gaps, responding to incidents | Continuous |
| Backup managementRunning backups and testing that they restore | Daily |
| DocumentationKeeping an accurate record of what exists and how it is configured | Ongoing |
| StrategyRoadmaps, refresh budgets and decisions about what to retire | Quarterly |
Six questions that separate the real thing
A number of providers sell hourly support with a small monthly fee attached and call it managed services. These six questions distinguish them quickly.
- Is the fee flat and predictable, or does it rise in the months something goes wrong?
- Is monitoring continuous, or does the provider find out when you call?
- Are backups restore tested on a schedule, with a report you can see?
- Is there a written response commitment, or an aspiration mentioned on a call?
- Does the agreement say plainly that your documentation and credentials are yours?
- Does anyone review recurring faults for cause, or does every ticket simply close?
Why the fee structure is the whole argument
Under hourly billing, a provider earns most in the months your systems behave worst. Nobody sets out to profit from your problems, but the arrangement quietly rewards it, and it also teaches you to delay calling because every call has a price.
That delay is where small faults become outages. A printer problem nobody reported turns out to be a failing switch. A slow laptop nobody mentioned was ransomware staging.
A flat fee inverts both halves. You call immediately because it costs nothing to call, and the provider only becomes profitable once your environment is stable enough to stop generating work. Everything else about the model follows from that.
Common questions
Answered before you ask.
What does MSP stand for?
Managed service provider. The term describes the commercial model rather than the technology: a provider takes ongoing responsibility for a defined set of systems for a recurring fee, instead of being called in and paid by the hour when something breaks. The same company may also do hourly project work, but the managed part specifically means responsibility held continuously rather than transactionally.
How is an MSP different from an IT support company?
Mostly by who carries the risk. Under hourly support the business carries the risk of things going wrong and pays more when they do. Under a managed agreement the provider carries it, because the fee is fixed regardless of how bad the month is. That single difference reshapes behaviour on both sides: you stop hesitating to call, and the provider starts caring intensely about preventing the calls.
Do we lose control of our systems?
You should not, and a well written agreement makes that explicit. Your documentation, credentials, asset inventory and backups remain yours throughout and are handed over within a stated period if you leave. Where businesses do lose control it is through arrangements that are avoidable and worth checking for: domains registered in the provider's name, cloud tenants owned by the provider rather than you, or credentials held only in a vault you cannot reach.
Is an MSP worth it for a small business?
It depends on complexity more than headcount. A business under about five people, entirely cloud based, with no server and no compliance obligation, is often better served by competent hourly support. The calculation changes with a server, a compliance obligation, client data you are responsible for, or a cyber insurance policy with security requirements attached, because at that point the ongoing work exists whether or not anyone is doing it.
Related
Read next.
What is included in managed IT services
A line by line scope, including the exclusions most contracts hide.
Managed IT versus break-fix
Three year cost comparison and the cases where break-fix still wins.
IT support and help desk
Tiered support with published response targets, remote and onsite.
Co-managed IT
Tooling, escalation and coverage that support an internal IT lead.
Cyber insurance requirements checklist
What insurers now ask for, and why an optimistic answer is worse than a higher premium.
Start with the assessment, not the contract.
We document what you have, test whether your backups restore, and give you the findings in writing. Yours to keep either way.