A managed IT support contract is often described by what it stops (downtime) rather than what it actually does. For a UK SME, signing a contract without knowing the specific inclusions is a gamble. You might think you have bought a safety net, only to find out later that it does not cover the very thing that has just broken. This guide explains the components of a managed IT support agreement and how to tell if a proposal is genuinely comprehensive.
What managed IT support actually means
In plain English, managed IT support is a shift from paying an engineer to fix a broken computer to paying a partner to ensure the computer does not break in the first place. It is a proactive service where the provider takes ownership of your entire technology stack. Instead of a 'break-fix' model, where you are billed by the hour when things go wrong, you pay a fixed monthly fee. The provider's incentive changes: they now make more profit when your systems are stable, not when they are failing. This aligns their goals with yours. It covers the monitoring, maintenance, security, and helpdesk support required to keep a business running without technical friction.
The components of a standard managed service
Every provider builds their 'stack' differently, but a professional managed service should include several core pillars as standard.
Remote Monitoring and Management (RMM)
We install a small piece of software, known as an RMM agent, on every laptop, desktop, and server. This allows us to see the health of your hardware in real time. It alerts us if a hard drive is failing, if a CPU is running too hot, or if a critical security update has failed to install. A pattern we see on most tenants we take on is that the previous provider had no monitoring in place, meaning they only knew a server was down when the client called to complain.
Cyber Security and Patching
Cyber security services are now the most critical part of any IT contract. This includes managing your antivirus, configuring firewalls, and ensuring that every piece of software is patched. Patching is the process of installing updates that fix security vulnerabilities. A managed provider should handle patch management for Windows, macOS, and third-party apps like Chrome or Adobe, usually outside of your working hours to avoid disruption.
Helpdesk and Remote Support
This is the visible part of the service. When a member of staff cannot print, forgets their password, or sees a strange error message, they call the helpdesk. Most issues are resolved remotely using software that allows the engineer to see the user's screen. A good contract will include unlimited remote support for a fixed fee, so staff do not hesitate to call when they see something suspicious, like a potential phishing email.
Identity and Cloud Management
For most UK SMEs, this means Microsoft 365 management. We manage your users in Entra ID (the system that handles logins), set up new starters, and securely offboard leavers. This includes enforcing Multi-Factor Authentication (MFA) and managing SharePoint, Teams, and OneDrive permissions so that staff only see the data they need for their jobs.
Backup and Disaster Recovery
A managed service must include a verified backup solution. It is a common misconception that Microsoft or Google back up your data natively. They do not. A managed provider will implement a Microsoft 365 backup and regularly test that those backups can actually be restored. If you cannot prove a backup works, you do not have a backup; you have a hope.
The financial impact of unmanaged IT
To understand the value of a managed contract, you have to model the cost of the alternative. If you rely on a 'pay-as-you-go' engineer, you are fully exposed to the cost of downtime.
Consider a hypothetical 25-person consultancy in London. If their server or primary cloud storage goes down on a Tuesday morning and remains offline for four hours, the calculation looks like this:
- Staff cost: 25 staff x £35/hour (average salary + overheads) = £875 per hour.
- Direct loss: £875 x 4 hours = £3,500 in wasted wages.
- Opportunity cost: If those staff generate £100/hour in revenue, the business has lost £10,000 in billable time.
In this scenario, a single morning of downtime costs the business £13,500. A fully managed IT support contract is designed to prevent that outage from happening or, at the very least, ensure the backup and disaster recovery plan is so well-rehearsed that the business is back online in minutes, not hours.
Four things usually missing from a thin contract
Many providers offer a low 'headline' price but exclude the work that actually matters. When reviewing an MSP contract, look for these four common exclusions:
- Project Work: Most managed contracts cover maintenance but exclude projects. If you want to migrate from an old server to the cloud, or move offices, that is usually a separate project fee.
- Hardware Costs: The support fee covers the labour to fix the software or diagnose the fault, but you still pay for the physical replacement parts or new laptops. Some providers offer 'Hardware as a Service', but this is usually a separate lease agreement.
- Out-of-Hours Support: Standard contracts usually run 9am to 5pm, Monday to Friday. If your business operates on weekends or late at night, you will likely need an add-on for 24/7 coverage.
- Third-Party App Support: Your IT provider will ensure your computer and Windows are working, but they may not be experts in your specific accounting software or CRM. They should, however, act as a liaison, talking to the software vendor's tech support on your behalf.
The regulatory requirement for managed security
Managed IT is no longer just about convenience; it is about compliance. The Information Commissioner's Office (ICO) expects UK businesses to take 'appropriate technical and organisational measures' to protect data. If you suffer a data breach and it is discovered you were not patching your systems or using MFA, the ICO's view of your 'due diligence' will be dim.
Furthermore, many insurance providers now require proof of managed security to renew professional indemnity or cyber insurance. Achieving Cyber Essentials certification is often a prerequisite for government contracts or supply chains for larger firms. A managed IT provider handles the technical heavy lifting required to pass these audits, ensuring your Microsoft 365 security meets the required standard.
A 10-point checklist for your next IT contract
Before signing a managed service agreement, ensure these items are explicitly included in the scope:
- Unlimited remote helpdesk support for all users.
- Automated patching for Windows and third-party software.
- Management of Microsoft 365 Business Premium security features.
- Daily monitoring and verification of all backups.
- Management of your business broadband and networking.
- A dedicated account manager for quarterly strategic reviews.
- New user setup and secure leaver offboarding.
- Management of SPF, DKIM, and DMARC records for email security.
- Endpoint detection and response (EDR) software included.
- Liaison with third-party vendors (ISP, software providers).
Managed IT support questions
Is on-site support included in managed IT? It depends on the contract. Some providers include a set number of site visits, while others charge for them separately. In a modern cloud-based setup, 95% of issues are resolved remotely. On-site visits are typically reserved for hardware failures or office moves and IT relocation.
Does managed IT include the cost of licences? Usually, no. You pay for your Microsoft 365 or Google Workspace licences separately, though your provider will often manage the billing for you. The managed support fee is for the expertise and tools used to manage those licences and the devices they run on.
How much should managed IT support cost? In the UK, managed support typically ranges from £30 to £75 per user, per month. The price varies based on the level of security included and the complexity of your infrastructure. If a quote is significantly lower than this, check the exclusions list very carefully.
How Black Sheep Support clarifies your IT
We provide managed IT support that removes the guesswork. We do not hide behind jargon or bury exclusions in the small print. Our goal is to make your technology so stable that you forget we are there, while knowing your security is handled by people who do this every day.
If you are tired of IT support that only reacts when things break
and we will show you what a proactive managed service looks like for your business.
Not ready to talk yet? Run our free IT Health Check to assess your business risk and security posture in minutes, no commitment. We also handle hardware, broadband, mobile and networking, providing a single point of contact for everything that keeps your office connected.
Want this handled for you? See Managed IT support.
Based in Brighton or Hove? We are too: see IT support in Brighton.
