Back to Blog
Managed IT Technology Strategy

How to Choose the Right MSP — The Questions Most Businesses Never Ask

✍️ Eugene Moore · 📅 August 2026 · ⏱ 6 min read

Most businesses pick their MSP the wrong way. They go with whoever a friend recommended, or whoever showed up first in a Google search, or the one that sent the nicest proposal. None of those things tell you whether the provider can actually do the job.

Managed IT is one of the few purchases where the quality of what you're buying is almost completely invisible until something goes wrong. You can't easily audit whether monitoring is real, whether backups actually work, or whether the tech who shows up knows your environment — until you need them to.

The right questions asked upfront close that gap.

Six Questions to Ask Before You Sign Anything

1
"Can you show me, right now, which of our devices are missing patches?"

A real MSP can pull this up in real time from their RMM platform before the sales call ends. If the answer is "we'd assess your environment after onboarding" — they don't have the tooling or the visibility they're implying they do.

🚩 Red flag: any answer that isn't immediate and specific
2
"Who specifically will be my point of contact, and what's their direct number?"

If the answer is "our helpdesk team" or "you'll submit a ticket" — that's a queue, not a relationship. A managed IT partner should be able to name a specific person who will know your environment and be reachable when something goes wrong.

🚩 Red flag: "you'll have access to our full team"
3
"What's included in the base contract vs. what gets billed as extra?"

Security, backup, and MFA enforcement should be standard — not upsells. If a provider quotes you a base price and then lists security tools as add-ons, you're looking at a contract that will grow materially from what you're being shown today.

🚩 Red flag: "security services are available as an add-on package"
4
"When was the last time you tested a full restore from backup for a client?"

A provider who monitors backup jobs without testing restores is managing a checkbox, not a recovery capability. The answer should include a specific timeframe and a description of what the test involved — not a general statement about their backup philosophy.

🚩 Red flag: "we monitor backup jobs daily" with no mention of restore testing
5
"Can you show me a sample quarterly business review?"

A QBR is how a real MSP stays accountable. It should show you the state of your environment, what changed, what risks exist, and what decisions are coming up — in plain English. If a provider doesn't do QBRs, they're reactive by design.

🚩 Red flag: "we'll reach out if something needs attention"
6
"What does your offboarding process look like — both for clients and for employee departures?"

How they handle departures — employees leaving a client's company, or clients leaving the MSP — tells you how seriously they treat access control and data security. A provider without a documented offboarding checklist is a liability in both directions.

🚩 Red flag: "we'd work through that when the time comes"

Contract Red Flags to Watch For

Beyond the questions, these contract terms are worth scrutinizing before you sign:

🚩 Auto-renewal clauses with 60–90 day cancellation windows. You need to decide to leave before you've had time to evaluate a replacement. Look for 30-day notice or shorter.
🚩 "Best efforts" SLA language. Response time commitments should be specific — 1 hour for critical issues, 4 hours for high, and so on. "We'll do our best" is not enforceable.
🚩 Scope exclusions for "pre-existing issues." If a provider can exclude anything they find on day one, the contract is meaningless during the period you need them most.
🚩 No data portability clause. If you leave, can you take your documentation, configs, and data with you? Some providers use this as lock-in. It shouldn't be.

What the Right Answer Looks Like

A provider who clears these questions confidently and specifically — with real answers, not sales language — is a provider who has actually done the work. The questions aren't designed to be tricky. They're designed to surface whether the operation behind the pitch is real.

The businesses that end up in painful IT relationships almost always skipped this step. They trusted the proposal, the referral, or the price — and found out six months in that the monitoring was nominal, the backups weren't tested, and the "team" was one person with too many clients.

Free 30-Minute Consultation

Moore Technology Consulting will answer every one of these questions directly — and show you what our environment management actually looks like for businesses your size. No pitch, no pressure.

Schedule a free consultation or call (646) 791-2137.

← Cyber Insurance: What It Covers What Good Managed IT Looks Like →
Free 30-Minute Consultation

Ask us the six questions. We'll answer all of them.

No pitch. No pressure. We'll show you exactly what our managed IT looks like for businesses your size — and answer every question on this list directly and specifically.