10 Questions to Ask Before Signing an IT Support Contract

A new IT contract can look reassuring on paper: a fixed monthly figure, a list of services and the promise that someone will be there when things go wrong. But the small print decides whether that promise holds up on a frantic Monday morning, when email is down, a member of staff cannot access files, or you are worried about a suspicious message.

The right questions before signing an IT contract help you compare providers properly. They also make sure you are paying for support that fits how your organisation actually works, rather than a package designed for somebody else.

For small businesses, charities and community groups across Bradford, Leeds and Halifax, the aim is not to become an IT expert. It is to find a dependable partner who explains things clearly, responds when it matters and helps prevent avoidable problems.

Questions to Ask Before Signing an IT Support Contract

Before choosing an IT support provider, ask:

  1. What is included in the monthly fee?
  2. What are your response times?
  3. Will we have a dedicated account manager?
  4. Is out-of-hours support available?
  5. How do you protect us from cyber threats?
  6. How are backups managed and tested?
  7. What work is excluded from the contract?
  8. Who owns our accounts and licences and documentation?
  9. What are the contract terms, price increases and exit arrangements?
  10. Can you provide relevant client examples?

1. What is included in the monthly fee?

Start with the most basic question, then ask for a plain-English answer. Does the fee cover remote support, monitoring, software updates, cyber security checks, user account administration and routine advice? Or does it only cover a limited number of support hours?

Some contracts look attractively priced because essential work is excluded. A new starter needing access, a failed laptop, a Microsoft 365 issue or a request to recover a deleted file can then become an unexpected bill. There is nothing wrong with chargeable extras, provided they are made clear before you commit.

Ask for examples of common requests and how they would be billed. This is often more useful than a broad statement such as ‘unlimited support’.

2. What are your response times?

Response time is one of the most revealing questions to ask an IT provider. A contract may promise support during office hours, but that does not tell you whether someone will acknowledge an urgent issue in 15 minutes or leave you waiting until the next day.

Ask how issues are prioritised. A forgotten password is inconvenient; an organisation-wide email outage or suspected cyber attack is urgent. Your provider should have clear service levels for both, along with an honest explanation of what response time means. Does it mean somebody has seen the ticket, started work or fully fixed the problem?

It is also worth asking who answers the phone. Many organisations value being able to speak to a helpful person who knows their setup, not simply logging a request into a distant queue.

3. Will we have a dedicated account manager?

IT support is more effective when it is built on a relationship. A provider does not need to know every detail of your work on day one, but they should take the time to understand your people, systems, priorities and pressure points.

For a charity, that may mean appreciating the importance of protecting supporter data and keeping services available to the public. For a growing business, it may mean planning equipment and user accounts before new colleagues arrive. Ask whether you will have an account manager, regular reviews and a straightforward route to strategic advice.

The best arrangement combines responsive day-to-day help with someone looking ahead. Otherwise, IT can become a cycle of firefighting.

4. Is out-of-hours support available?

Not every organisation needs round-the-clock cover, and paying for it when you do not need it is poor value. However, you should know what happens if a major problem appears at 6pm on a Friday or during a busy weekend event.

Ask whether out-of-hours support is available, what counts as an emergency and what the additional costs would be. If the answer is that no support is available, decide whether that is an acceptable risk for your team.

This depends on your operating hours and how reliant you are on technology. A small office that closes at five has different needs from a community organisation running evening sessions or a business taking online orders overnight.

5. How do you protect us from cyber threats?

Cyber security should not be a vague add-on. Ask what practical protections are included and what your provider recommends. You want clarity around multi-factor authentication, antivirus or endpoint protection, patching, spam filtering, secure backups and staff awareness training.

Just as importantly, ask what happens if something suspicious occurs. Who investigates? Who contacts your team? Will they help contain an attack, recover systems and guide you through the next steps?

No provider can guarantee that an attack will never happen. Anyone who says otherwise is overselling. What good support can do is reduce the risk, spot warning signs earlier and give you a tested plan for responding calmly.

If your organisation needs Cyber Essentials certification, ask whether the provider can support the process from assessment through to the evidence required. It is far easier when security improvements are planned, rather than rushed to meet a tender deadline.

6. How are backups managed and tested?

Backups are only useful if they can be restored quickly and correctly. Ask what data is backed up, how frequently it happens, where copies are held and how long they are kept. This matters for files held locally, cloud platforms, email and collaboration tools alike.

Microsoft 365 and Google Workspace provide service resilience and retention features, but they are not designed to replace a dedicated backup and recovery strategy. Many platforms offer resilience, but that is not always the same as a complete backup of accidental deletions, overwritten documents or malicious changes.

Ask whether restores are tested, not merely whether backups run. A provider should be able to explain how they would recover a single missing file compared with a whole system after a serious incident.

7. What work is excluded from the contract?

Managed support contracts vary widely here. Routine support may be included, while setting up a new laptop, moving to a new phone system, installing Wi-Fi equipment or carrying out a Microsoft 365 migration may be charged separately.

Again, that is not automatically a problem. Project work needs planning and can involve hardware, licences and third parties. The key is knowing where the boundary sits. Ask for the provider’s hourly or day rates, whether there is a minimum charge, and how they approve work before starting.

You should also ask whether they recommend equipment based on your needs, rather than pushing a one-size-fits-all solution. A sensible provider will consider budget, reliability, warranty and how long the equipment is likely to remain suitable.

8. Who owns our accounts and licences and documentation?

Your organisation should retain ownership and control of its key technology accounts. That includes domain names, Microsoft 365 or Google Workspace tenants, cloud services, backups and software licences. A trusted IT provider can manage these for you, but access should not depend on one individual or supplier.

Ask how administrator credentials are stored and whether your organisation can access them if needed. Request clear documentation of your network, devices, licences and major systems. This may sound technical, but it prevents confusion if key staff leave or you later change provider.

Good documentation also makes support faster. Nobody should have to guess how your systems are configured in the middle of an outage.

9. What are the contract terms, price increases and exit arrangements?

Read this part carefully. Ask how long the agreement lasts, whether it renews automatically, how much notice is required and what happens to pricing at renewal. A reasonable contract should be clear about annual increases and any circumstances in which rates can change.

Then ask the question many people avoid: what happens if we decide to leave? A confident provider will explain their offboarding process without fuss. They should help transfer documentation, access and relevant information in an orderly way, while being transparent about any handover charges.

You are looking for a long-term relationship, not a trap. A provider that makes it difficult to leave may not be as confident in the quality of its service as it claims.

10. Can you provide relevant client examples?

References, reviews and real examples matter. Ask about clients with a similar size, sector or way of working. For charities and not-for-profits, it is particularly useful to know whether the provider understands tight budgets, trustees, volunteer access and the responsibility that comes with handling sensitive information.

Listen to how they talk about non-technical users. Do they sound patient and practical, or do they make every problem feel like your fault? Technical skill matters, but so does the willingness to explain choices without jargon or pressure.

Frequently Asked Questions About IT Support Contracts

What should be included in an IT support contract?

An IT support contract should clearly define included services, response times, cyber security responsibilities, backup arrangements, project work, reporting and contract terms.

How long should an IT support contract be?

Most managed IT support agreements range from 12 to 36 months, although some providers offer rolling monthly contracts.

What is a reasonable IT support response time?

Critical issues should typically receive acknowledgement within 15 to 60 minutes, depending on the agreed service level agreement (SLA).

Can I switch IT support providers?

Yes. A reputable provider should have a documented offboarding process and assist with transferring documentation, licences and administration access.

Does Microsoft 365 include backup?

Microsoft provides retention and recovery capabilities, but not a dedicated backup solution. Therefore as a business, you should choose a dedicated solution for protection and longer-term recovery options.

What questions should I ask an MSP before signing a contract?

Ask about pricing, response times, cyber security, backups, account ownership, contract length, exit arrangements and experience supporting organisations similar to yours.

A good IT contract should leave you feeling clearer, not cornered. If you’d like a second opinion on an IT support proposal, service agreement or renewal contract, call Bees Knees IT on 01274 955509. We’ll help you understand exactly what’s included, identify any potential gaps and make sure you’re choosing the right support partner for your organisation.

About the Author

Craig Hawes is the founder of Bees Knees IT, helping businesses, charities and community organisations across West Yorkshire get the most from their technology. He believes IT support should be friendly, reliable and easy to understand, with practical advice that helps teams stay productive and secure.

About Bees Knees IT

Bees Knees IT is a trusted Managed Service Provider (MSP) supporting businesses, charities and community organisations across Bradford, Leeds, Halifax and West Yorkshire. We provide proactive IT support, Microsoft 365 services and cybersecurity solutions, helping organisations stay productive, secure and resilient.

Need advice on an IT support contract or provider? Call 01274 955509 for friendly, straightforward guidance.