Evaluating a managed IT provider is difficult because the proposals converge. Everyone lists monitoring, patching, help desk and security. The words are the same; the operating reality is not. These are the questions that reliably separate providers.
Who is accountable when the problem crosses boundaries
Most serious outages are not one system failing. They are a firewall change, a Microsoft 365 identity policy and a line-of-business vendor interacting badly. Ask who owns the outcome when three parties are involved. A provider that supports IT, security, hosting and phones can answer directly. A provider that only supports workstations will hand you a vendor list.
How far away are the engineers, really
Remote support handles most day-to-day problems. It does not handle a failed switch, a new building, a cabling fault or a hardware swap. Ask where the engineers who would work on your environment actually sit, and how long it takes one of them to reach your site.
What happens to your data if you leave
Ask where backups live, who holds the encryption keys, and what the exit process looks like. A provider confident in its work will answer plainly. Portability is a fair question and a good indicator.
- Where is backup data stored, and is there an offsite or immutable copy
- Who owns the documentation of your environment
- What notice period applies, and what is handed over
- Are administrative accounts yours or the provider's
Questions worth asking every finalist
Ask for a description of a recent incident and how it was handled. Ask what they would fix first in your environment and why. Ask what they will not do. Specific answers indicate an operating model; general answers indicate a script.

