// Buyer's Guide

How to choose a managed IT provider.

Handing your business technology to an outside provider is a real decision, and the wrong one is painful to unwind. This is a plain-English guide to what a managed IT provider actually does, the questions worth asking before you sign, how pricing usually works, and the red flags that should give you pause. No jargon, no sales spin, just what to look for so you can pick well. Once you've picked one, the section on what a fair managed IT contract looks like covers the agreement itself, so the deal on paper matches the promises you were made.

A managed IT provider, often shortened to MSP, looks after your technology for an agreed monthly fee rather than charging only when something breaks. The shift matters: instead of paying a stranger to firefight after your systems have already stopped, you are paying someone to keep them running in the first place. Good providers catch problems before you notice them, keep your setup documented, and stand between you and the telcos and suppliers so you are not the one chasing faults.

In practice the work spans a helpdesk for everyday problems, proactive monitoring and patching, vendor management, and clear documentation of what you have and how it is configured. The better arrangements also fold in the things that sit next to IT, such as your internet, phones, cameras, backup and cyber security, so one accountable provider owns the whole picture.

  • An agreed monthly fee, not a surprise invoice when something breaks
  • Proactive monitoring and patching, so issues are caught early
  • A real helpdesk with a response time you can hold them to
  • Vendor management, so you are not chasing the telcos yourself
  • Documentation you own, not a setup only they understand

// The questions that matter

What to ask before you sign.

A provider worth hiring will answer these clearly and without flinching. Vague answers, or a push to sign before you have them, tell you most of what you need to know.

  • Who actually answers the phone, and how fast? Find out whether you reach a technician or a queue, and what the guaranteed response time is. Ask for it in writing. Our guide to what a real IT support SLA looks like shows the response tiers to hold out for.
  • Is support unlimited or capped? Some plans throttle the helpdesk after a certain number of tickets or hours. Know the limit before it bites.
  • What does onboarding involve? A good provider audits and documents your environment up front, so nothing about your setup is a mystery later.
  • Are you vendor-agnostic? A provider tied to one brand will tend to recommend that brand. One that fits the solution to the job acts in your interest.
  • Who owns the systems and accounts if I leave? Your passwords, licences and configuration should be yours. Make sure leaving is clean.
  • How does pricing change as I add or remove staff? Understand how the fee flexes so growth, or a quiet quarter, does not become a billing surprise.

// The local questions

The Australian questions most guides skip.

Most guides to choosing an MSP stop at response times and pricing. Six more questions matter for an Australian business, and every one of them comes up at the worst time, which is when you are trying to leave. Ask them before you sign.

  • Who is the registrant of our .au domain? The domain should be registered to your business, in your name, not under the provider's own account. A domain sitting under a former provider's login turns into a real problem exactly when the relationship has already gone bad; business email and Microsoft 365 setup explains what proper ownership looks like.
  • Who holds global admin on our Microsoft 365 tenant? Someone at your business must hold the global administrator login, even if the provider does the day-to-day work. If nobody on your side has it, you do not control your own email.
  • Where is our data stored, and who can reach it? Ask which country and which region your backups, files and mail sit in, and who at the provider has access. You want a plain answer, not a brand name.
  • Can you evidence Essential Eight Maturity Level One? The Essential Eight is the Australian Signals Directorate's set of baseline security controls. A provider should be able to show where your setup sits against it; our Essential Eight compliance assessment is how we do that.
  • Where are your technicians, and who picks up the phone? A very low per-user price often means the helpdesk is offshore. That is not always wrong, but you should know before you sign, and you should know who turns up when the job needs hands on site.
  • What happens to our NBN and phone contracts if we leave? If the provider resells your internet and phones, find out whether those contracts are in your name and what the exit looks like. Ask the same question of us; our business NBN and phone page covers the plans and how number porting works.

// Score them

A scoring checklist you can take into the meeting.

The six questions above plus the six from our IT support SLA guide, as one table. Print it, ask each question, and mark yes only when the answer matches the right-hand column. A provider who scores twelve is rare. One who scores under eight is telling you something.

#QuestionA good answer looks likeScore
1Who actually answers the phone, and how fast?A technician, with the response time in writing.Yes / No
2Is support unlimited or capped?The limit is stated, or there is none.Yes / No
3What does onboarding involve?An audit and documentation, and you get a copy.Yes / No
4Are you vendor-agnostic?Yes, and the recommendation fits the job, not a reseller margin.Yes / No
5Who owns the systems and accounts if I leave?You do, in writing.Yes / No
6How does pricing change as I add or remove staff?A per-user figure that flexes both ways.Yes / No
7How do you classify a ticket as critical versus routine, and who decides?Defined tiers, and you can escalate.Yes / No
8What are the guaranteed response times for each tier?Numbers, and the word guaranteed, not targeted.Yes / No
9What hours does the clock run, and what does after-hours cost?Hours that match how you trade, after-hours priced up front.Yes / No
10Is it response or resolution you guarantee, and what counts as a response?A real person starting work, not an auto-reply.Yes / No
11What is the credit if you miss the SLA?A stated service credit.Yes / No
12If I leave, who owns my data, domains and passwords?You do, with a defined handover to the next provider.Yes / No

// How it is priced

Pricing models, explained.

There is no single right model, only the one that suits your size and how much certainty you want. Here is how the common approaches differ, and what each is good for. For the actual figures, including our own, see what managed IT services in Sydney actually cost.

Per user, per month

A flat fee for each person you support. This is the most common model because it is predictable and scales naturally as your team grows or shrinks. Good for most small and medium businesses that want a number they can budget around.

Per device

Priced by the number of machines, servers and devices rather than people. This can suit businesses with shared workstations or a lot of unattended hardware, though it gets harder to predict as device counts move around.

Ad-hoc, by the hour

Pay only when you call, with no monthly commitment. Useful for very small teams or businesses that just want a safety net, but you lose the proactive side, the monitoring and patching that stops problems before they start.

Onboarding and audit

Usually a one-off cost at the start, where the provider audits, documents and tidies your environment. It is not padding. A documented setup is what lets everything afterwards run smoothly, and it is what you take with you if you ever leave.

// The day-one test

What a good provider documents on day one.

"We document everything" is easy to say. Here is what it actually looks like, from my own onboarding checklist. Walk in on day one of a new engagement and this is what gets recorded before anything gets changed. If a provider cannot show you their version of this list, they do not have one.

  • Circuit-breaker locations for every rack, server and air conditioner. When power has to be cut or restored fast, nobody should be hunting through a switchboard. I leave a sign behind the rack saying exactly where the distribution board is.
  • UPS battery age and tested runtime. The figure on the box is what the battery did when it was new. The figure that matters is what it holds now, so it gets tested, not assumed.
  • A spare power supply left on site. For the most likely hardware failure in the room, the part is already on the shelf, not three days away in a courier bag.
  • An authorised-contacts list. Who can request changes, reset passwords and approve spend, written down before it is needed, not argued about during an incident.
  • User-role templates. A new hire's access is stamped from a template for their role, not guessed at, so nobody quietly ends up with more access than the job needs.
  • Anything nonstandard gets noted first. Every site has one weird thing. The documented weird thing is a footnote. The undocumented one is a future outage.

// What to avoid

The red flags.

Most providers are fine. A few are not. These are the warning signs that tend to show up before the regret does.

  • Long lock-in with no clear exit. A multi-year contract is fine if leaving is clean. It is a trap if it is not.
  • Won't put response times in writing. If a guarantee cannot survive being written down, it is not a guarantee.
  • Hidden pricing. Real numbers up front are a sign of confidence. "Contact us for pricing" too often means "brace yourself".
  • No documentation handed over. If only they understand your setup, you are dependent on them by design.
  • Vendor finger-pointing. A provider who blames the telco, the supplier or the last guy is a provider not owning the fix.
  • Only ever sells what they resell. If every answer is the same product, the advice is about their margin, not your problem.

// The contract itself

What a fair managed IT contract looks like.

A fair managed IT contract is a genuinely good deal: you pay a predictable monthly fee, someone keeps your systems running, and problems get headed off before they cost you a day's trading. It turns into a bad one when the agreement quietly works against you: surprise bills, gear you don't really own, and an exit designed to trap you. The questions above are about choosing a provider; this section is about the words in the contract itself, where a fair deal and a trap actually part ways, and what to ask for.

No surprise bills, you are told before the work happens

A good managed plan is proactive: part of the job is spotting the issues that are likely to come up and flagging them early. The fair version of that is simple: anything beyond the routine gets quoted before it's done, not billed after. You should never open an invoice and find work you didn't approve. For what the routine monthly fee itself should be, see what managed IT costs in Sydney.

Ask: "If you find something that needs fixing outside the plan, do I get a quote first?" The answer should be an unqualified yes.

Straightforward hardware, and you own it

Hardware is where a lot of contracts get murky. A fair arrangement is transparent about who pays for what and who owns it at the end.

One clean model that works: for routine hardware swaps, the labour is included, so you are not charged call-out fees to plug in a replacement part, in exchange for a part-paid hardware deposit up front, say half the likely hardware cost for the term. If the gear never fails and the deposit isn't used, it's refunded or credited. You've pre-funded your own spares pool, not handed over money for nothing.

The test either way: you should own your hardware, your licences, and your data. Anything you paid for is yours to keep if you leave.

A real exit clause, no data hostage

This is the clause that separates a fair provider from a trap, and most people never read it until they're trying to leave.

A fair contract makes leaving clean:

  • Your data and accounts are handed over in full: logins, domain and email control, documentation and licences, not held to ransom until a final invoice is "resolved".
  • There's a defined handover to your next IT company: your provider works with them, transfers the knowledge, and doesn't just go silent.
  • A short bridge of continued support. A genuinely confident provider will offer paid continued support for a period after you leave, often up to 12 to 24 months on anything the new company can't yet fix, so the changeover never leaves you stranded.

The question that reveals everything: "If I leave, how do I get my systems, and will you help my next provider take over?" A fair answer is a clear process. A bad answer is vague, or expensive, or "you can't really take that with you."

The other things worth pinning down

  • What's actually covered: which devices, users and services, and what counts as "in plan" versus extra.
  • Response times you can hold them to: in writing, with different times for "everything's down" versus a "minor annoyance". See our guide to what an IT support SLA really means.
  • Backups and recovery: that they exist, that they're tested, and how fast you'd be back after a failure or ransomware. A backup nobody has tested is a hope, not a plan.
  • Security basics as standard: multi-factor authentication, patching, and sensible offboarding when staff leave, included, not an upsell.

Why we spell this out

We'd rather you understood the deal than felt locked into it. A contract that's fair on bills, honest on hardware, and clean on exit is one you stay in because it works, not because you can't get out. If yours doesn't read like the above, it's worth a second look before you renew. It is also how our managed plans are written.

The short version: a fair managed IT contract quotes extra work before doing it, leaves you owning your hardware, licences and data, and makes leaving clean: a full handover to your next provider and a bridge of support so you are never stranded. If a contract can't answer "how do I leave and take my data?" clearly, that is the one to renegotiate.

General guidance to help you evaluate an agreement, not legal advice. Have important contracts reviewed.

// One throat to choke

Why one accountable provider helps.

When the same provider looks after your IT support, internet, phones, hosting, cameras and cyber security, there is no gap for problems to fall into. Nobody can blame the internet provider, the phone provider or the camera installer, because it is all theirs to fix. That single point of accountability keeps your setup documented in one place and makes it simple to add capability, such as backup, cloud or automation, without onboarding a new supplier every time. It is also why Alien IT Solutions runs the whole stack rather than just one slice of it. If you are a smaller team wondering what is essential and what is an upsell, start with the four things a small business actually needs.

// Questions

Choosing a provider, answered.

What is a managed IT provider (MSP)?

A managed IT provider, often called an MSP, looks after your business technology for an agreed monthly fee instead of charging only when something breaks. The work usually covers a helpdesk for day-to-day problems, proactive monitoring and patching so issues are caught early, vendor management with your telcos and suppliers, and documentation of your systems. The point is that someone is responsible for keeping IT running, not just for fixing it after it has already stopped.

What questions should I ask a managed IT provider before signing?

Ask who actually answers the phone and how fast they respond, what their guaranteed response time is and whether it is in writing, whether support is unlimited or capped, what the onboarding and documentation process looks like, whether they are vendor-agnostic or tied to particular brands, who owns your systems and accounts if you leave, and how pricing works as you add or remove staff. Clear, specific answers are a good sign. Vague answers or pressure to sign quickly are not.

How is managed IT support usually priced in Australia?

The most common model is a flat fee per user per month, which makes budgeting predictable and scales as your team changes. Some providers price per device instead, and most also offer ad-hoc hourly support for businesses that do not want a contract. Onboarding, where the provider audits and documents your environment, is often a one-off cost. The right model depends on your size and how much certainty you want, not on which sounds cheapest on the first invoice.

What are the red flags when choosing an IT provider?

Watch for long lock-in contracts with no clear exit, refusal to put response times in writing, pricing that is hidden until you have shared a lot of detail, no documentation handed over so you are dependent on them, and a habit of blaming other vendors instead of owning the fix. A provider who holds your passwords and accounts hostage, or who only ever sells the product they happen to resell, is a provider to avoid.

Should I choose a provider that handles more than just IT support?

It often helps. When one provider also looks after your internet, business phones, hosting, cameras and cyber security, there is no finger-pointing between vendors when something breaks, because it is all theirs to fix. A single accountable provider also keeps your setup documented in one place and makes it easier to add capability, such as backup, cloud or automation, without onboarding a new supplier each time.

Does Alien IT Solutions provide managed IT across Australia?

Yes. Alien IT Solutions is based in Sydney and provides managed IT on-site across Greater Sydney and remotely Australia-wide, including regional and rural properties through its specialist connectivity arms. It is vendor-agnostic, publishes indicative pricing, documents everything it sets up, and starts every engagement with a free consultation before any work begins.

Weighing up an IT provider right now?

Tell me what you're working with and I'll come back with a straight answer and a fixed quote. No pressure, no jargon, no probing.

Beam us a message 🛸