Most small businesses do not decide to hire an IT provider. They drift into it. Something breaks, someone knows a guy, the guy fixes it and sends an invoice. That works right up until the day it doesn’t — usually the day a server dies, a mailbox gets compromised, or the one person who knew how everything was wired together leaves.
The alternative is managed IT. The term gets used loosely, so here is a plain explanation of what it actually covers, what it does not, and the questions worth asking before you sign anything.
Break-fix versus managed: the real difference
Break-fix is reactive. You pay per incident. The incentive structure is quietly backwards: your provider earns more when more things break, and nobody is paid to prevent the outage in the first place.
Managed IT is a fixed monthly fee to keep things running. The provider absorbs the cost of problems, so preventing them becomes their financial interest as well as yours. Patching happens on a schedule. Backups get tested rather than assumed. Someone notices the failing drive before it takes the file server with it.
The switch usually pays for itself not in invoices avoided, but in hours your team stops losing to systems that half-work.
What a managed service should include
Coverage varies between providers, but a credible small business agreement covers most of the following:
- Monitoring and alerting — disks, memory, backup jobs, and services watched continuously, with someone acting on the alerts rather than filing them.
- Patch management — operating systems and third-party software updated on a tested schedule. Unpatched software remains one of the most common ways small businesses get compromised.
- Backup and recovery — not just that backups run, but that someone periodically restores from them. An untested backup is a hope, not a plan.
- Endpoint security — managed antivirus or EDR, with alerts going to a human who investigates them.
- Identity and access management — multi-factor authentication enforced, joiners and leavers processed properly, admin rights kept to the people who need them.
- Helpdesk — a defined way for your staff to get help, with stated response times.
- Documentation and strategy — a current map of what you run, plus a periodic conversation about what is coming: licence renewals, hardware nearing end of life, capacity you will need next year.
That last item is the one small businesses undervalue and later wish they had. Technology decisions made reactively, under pressure, at 4pm on a Friday are rarely the cheap ones.
What is usually not included
Read the scope carefully. These items are commonly excluded and commonly assumed:
- Hardware and licence costs. The management fee covers labour. Laptops, servers, and Microsoft 365 or Google Workspace subscriptions are usually billed separately.
- Projects. Migrations, office moves, and new system rollouts are typically quoted as separate work.
- Line-of-business application support. Your provider will keep the machine running, but deep support for a niche industry package often sits with the vendor.
- Cloud data backup. This surprises people. Microsoft and Google protect their infrastructure, not your data from your own mistakes. If someone deletes a shared drive and nobody notices for two months, native retention may not save you. Third-party backup for cloud data is a separate line item and worth having.
How pricing usually works
Three models dominate, and the differences matter more than the headline number:
- Per user — a flat fee per person, covering their devices. Simple to forecast, and it scales with headcount rather than hardware. This suits most small businesses.
- Per device — priced per endpoint. Can work out cheaper for teams with shared machines, more expensive when everyone has a laptop, a desktop, and a phone.
- Tiered — bundles at different service levels. Watch which tier includes security and after-hours support, because those are frequently the upsell.
What drives the number is complexity, not just size: on-premise servers, regulatory requirements, remote sites, and the state of what you already run. A ten-person firm with clean cloud infrastructure is a different job from a ten-person firm with an aging server in a closet.
Questions to ask before signing
Any provider worth hiring will answer these without flinching:
- What is your guaranteed response time, and what counts as critical? Get it in writing, with the definitions.
- Who owns our licences, domains, and data? The correct answer is you. Tenants and domain registrations held in a provider’s own account become a hostage situation if the relationship ends.
- What happens if we leave? Ask about notice periods and what documentation you receive on the way out. A provider confident in their work will not make offboarding painful.
- Who actually answers the phone? Find out whether you get a named team or a rotating queue.
- How do you handle security incidents? There should be a plan that exists before the incident.
- Where does our data live? For Canadian businesses handling personal information under PIPEDA, data residency and your provider’s subcontractors are worth understanding up front, particularly in regulated sectors.
Signs you have outgrown break-fix
You probably do not need a formal assessment to recognise these:
- Nobody can say with confidence when a backup was last restored successfully.
- Former employees may still have access to something, and checking would take a day.
- The same problem keeps recurring and keeps getting patched over.
- Your most capable non-technical employee has quietly become the IT department.
- You are making decisions about systems based on what broke most recently.
None of these are emergencies on their own. Collectively they are the profile of a business that is one bad week away from a very expensive month.
Where to start
You do not need to overhaul everything at once. Start with an inventory: what you run, who has access, where the data lives, and what would actually happen if the worst-case system went down tomorrow. That document alone usually surfaces two or three things worth fixing immediately.
VirtuCore Solutions provides managed IT, cloud, and ERP services to small and medium businesses across Toronto and the GTA. Tell us what you are running today and we will come back with a one-page plan and a price — get in touch here.