Service targets: 99.9% uptime · 15-min response · 24/7 monitoringVancouver, BC · serving all of Canada · (604) 632-4959
ITIT ExpertsOPERATIONS / CANADA

INSIGHT / BUYING GUIDE

How to Choose a Managed Service Provider: Twenty Questions to Ask

A buyer's guide to evaluating managed IT providers, with questions on security, service levels, pricing, onboarding and exit.

By Ali Sedighi, MBAReviewed 2026-10-065 min read

Choosing a managed service provider (MSP) is among the most consequential vendor decisions a growing organisation makes. The provider will hold privileged access to your systems and data, and their quality shows up every day in how fast problems get fixed. The right questions separate polished sales presentations from operational maturity.

01Ask about their own security first

A provider with administrator access to your environment is itself a target. Ask whether they enforce multi-factor authentication on their own tools, how technician access is controlled and logged, and how they segregate client data. Ask how they would notify you if their own systems were compromised, and whether they carry professional liability and cyber insurance.

02Service levels and how they are measured

Request specific numbers: response targets by priority, hours of monitoring, resolution targets and escalation paths. Ask to see a sample monthly report with real metrics. Providers confident in their delivery will gladly share how they track first response, time to resolution and repeat incidents.

03Who actually does the work

Clarify who will be your day-to-day contacts and who your senior escalation is. Ask where engineers are located, whether any work is subcontracted and how knowledge is shared if a technician leaves. A named senior contact and documented processes protect you from personnel turnover.

04Onboarding and documentation

Ask how long onboarding takes, what you will receive at the end and who owns the documentation. A good provider delivers network diagrams, asset inventories, credentials management and runbooks, and lets you keep them. Poor providers treat documentation as leverage.

05Pricing transparency

Insist on a written list of inclusions and exclusions. Ask which services trigger extra charges, how projects are quoted, what hardware markups apply and whether prices rise at renewal. Starting-from ranges and fixed project quotes are a healthy sign; vague hourly estimates are not.

06Contracts and exit

Ask about term length, notice period, auto-renewal and what happens on exit. You should be able to leave with your documentation, configurations and data in usable form. A no-lock-in, month-to-month structure signals that the provider expects to retain you by performing well.

07Strategy versus reselling

Some MSPs are primarily resellers whose income depends on product margin. Others are consultancies that recommend what fits. Ask how they decide between products, whether they receive incentives from vendors and how they would approach a recommendation that reduces your spending. The answers tell you whose interests shape the advice.

08Reference and fit checks

Ask for references from organisations of a similar size and sector, or for anonymised scenarios if confidentiality prevents names. Meet the people who will serve you. Run a small paid assessment first if possible; it reveals how they communicate, how they prioritise and whether their findings are useful.

09Mistakes buyers make

Buyers often compare on monthly price alone, overlook exclusions, accept long contracts because of a discount and skip reference conversations. Another is allowing the incumbent to dictate the transition, which can lead to missing documentation. Some organisations choose a provider who impresses in the sales meeting without meeting the engineers who will deliver. Avoid these pitfalls by using a structured scorecard, asking for sample reports and keeping the first commitment small, such as an assessment or a three-month onboarding.

10A simple evaluation scorecard

Score each provider from one to five on security practices, service levels, transparency of pricing, onboarding quality, documentation ownership, strategic capability, sector knowledge and cultural fit. Weight the categories according to your priorities, and note evidence for each score. Share the scorecard with colleagues so the decision is not driven by one impression. The act of scoring usually surfaces the difference between a polished presentation and an operational discipline.

11Fit by organisation type

A 20-person professional firm needs responsiveness and simplicity. A multi-site retailer needs network resilience and after-hours support. A regulated clinic needs privacy expertise and strong documentation. A fast-growing start-up needs quick provisioning and a security story for enterprise customers. Ask each provider for scenarios resembling your own, and listen for specifics rather than generalities.

12Details that are easy to overlook

Ask about tooling ownership: if the provider uses its own monitoring agents, what happens to them on exit? Check whether remote-access software is configured with unique credentials and multi-factor authentication. Ask how they back up their own documentation, and what happens if their main contact is unavailable. Find out whether after-hours support is provided by their own staff or an overflow partner, and whether that team has access to your documentation. These questions reveal the real service model behind the brochure.

13Questions for your leadership team

What outcome would make us call this switch a success after six months? Who internally will manage the provider relationship and attend monthly reviews? Which of our systems are most fragile and should be examined first? What constraints exist, such as budget cycles, compliance deadlines or planned moves? How will we communicate the change to staff? Aligning on these points before evaluating providers keeps the process focused and defensible.

Checklist

  • Confirm provider MFA and access logging
  • Request a sample monthly report
  • Get service levels in numbers
  • Identify named senior contacts
  • Clarify documentation ownership
  • Compare inclusions and exclusions
  • Verify there is no lock-in
  • Start with a paid assessment

Where this fits in your IT plan

Guidance like this works best when it is part of a coordinated programme rather than a one-off fix. These IT Experts services address the topic directly:

How IT Experts can help

IT Experts is a sub-brand of SAZ.ca, led by Ali Sedighi, MBA, combining senior-partner strategy with hands-on IT delivery. If this topic matches a situation in your organisation, book a free 30-minute consultation: call (604) 632-4959 or email [email protected]. We will give you a plain-language view of your options and, if useful, a fixed-price scope. We are an IT services and consulting firm, not a reseller, and there is no lock-in.

Frequently asked questions

How many providers should I compare?

Three is a good number: enough for contrast without becoming unmanageable.

Should I choose a local provider?

Proximity helps for on-site work, but most support is remote. Prioritise process maturity and communication, and confirm how on-site work is handled.

What red flags should I watch for?

Long lock-in terms, refusal to share documentation, no security of their own, vague service levels and pressure to sign quickly.

What is the difference between an MSP and an IT consultant?

An MSP operates your environment continuously, whereas a consultant advises on specific questions. IT Experts provides both under one structure.

Call (604) 632-4959Email [email protected]Book a consultation