How to Get Started with Managed IT Services: A Step-by-Step Guide
A seven-step process for moving to managed IT services, from auditing what you have to signing an agreement and preparing your team for onboarding.

To get started with managed IT services, take inventory of your users, devices and applications, decide what you want outsourced, request written proposals from at least three providers using the same scope, check references and security practices, negotiate the contract, and plan an onboarding period of several weeks. The whole process typically takes one to three months from first call to signed agreement for a small business, and rushing it is the most common reason relationships go wrong.
Step 1: Decide why you are looking
Write down the reasons in one paragraph. Common ones:
- Frequent outages or slow response from your current support.
- A key employee or contractor who handles IT is leaving or overloaded.
- A customer, insurer or regulator is asking about your security controls.
- Growth: new employees, locations or remote workers.
- A recent incident such as ransomware, a phishing compromise or a lost laptop.
This paragraph becomes the heart of your request for proposals, and it keeps you from buying services you do not need.
Step 2: Take inventory
You cannot get an accurate quote without knowing what you have. Gather:
- People: employees, contractors with accounts, part-time staff and shared mailboxes.
- Devices: laptops, desktops, tablets, phones, printers, servers, firewalls, switches and wireless access points, with approximate ages.
- Software and cloud services: Microsoft 365 or Google Workspace, accounting, CRM, industry applications, and where each is hosted.
- Locations and connectivity: sites, internet providers and any VPN or remote access setup.
- Data of concern: health information, payment cards, personal data of customers, financial records, contracts with security requirements.
If you cannot find some of this, that is a finding. A good provider can run discovery, but the more you know up front, the better your quotes.
Step 3: Define the scope you want
Decide among three broad options:
- Fully managed: the provider acts as your IT department.
- Co-managed: the provider supports an internal person or team. See co-managed IT explained.
- Specific services only: for example monitoring and security, or backup and disaster recovery, while you keep help desk in house.
Also decide hours of coverage, whether on-site visits matter and which projects you expect in the next 12 months.
Step 4: Set a budget range
Use your inventory in the managed IT cost estimator to get an illustrative range, then compare it with what you spend today, including part-time help, repair invoices and the cost of lost time. The cost guide explains how the pieces fit together.
Step 5: Request proposals and shortlist
Send the same scope document to at least three providers. Ask each to itemize recurring fees, onboarding, licenses, project rates, after-hours charges, contract term, annual escalator and termination terms. Sources for finding candidates include referrals from similar businesses, your industry association, your software vendors and local business networks. Avoid choosing based on a single directory listing or an unsolicited call.
Then run each provider through the checks in choosing the right managed service provider and compare the written terms using reading an MSP service agreement.
Step 6: Negotiate and sign
Negotiate onboarding fees, term, escalator and exit terms (how to get the best deal). Confirm in writing:
- You own your domain names, licenses, credentials and documentation.
- The scope of included services and what is billed separately.
- Response and resolution targets with remedies.
- Data return and transition assistance at the end of the agreement.
- Who at the provider is your account contact and who covers when they are out.
Step 7: Prepare for onboarding
Assign an internal point of contact and a backup. Gather the documents and access the provider will request (documents and access needed). Tell employees what is changing: how to request help, whether a new agent will be installed on their computers, and what the provider will never ask them for, such as their password by email.
Plan the timeline with the provider. See what to expect during onboarding.
A sample first-90-days outline
| Period | Typical activities |
|---|---|
| Week 1 | Kickoff, access setup, discovery scans, asset list |
| Weeks 2 to 3 | Deploy monitoring and security agents, review backups, document network |
| Weeks 4 to 6 | Remediate urgent risks, patch backlog, enforce multi-factor authentication, train staff on the help desk process |
| Weeks 7 to 12 | Tune alerts, test restores, review first reports, plan hardware refresh and projects |
Treat the schedule as an example; your provider's plan should be specific to you.
Mistakes to avoid when starting
- Skipping inventory and accepting a quote based on guesses.
- Choosing on price alone.
- Failing to involve the person who knows your systems best.
- Not telling staff what is happening, which leads to resistance and security confusion.
- Forgetting to ask what the provider needs from you, such as administrative access and vendor contacts.
More in common mistakes to avoid.
Frequently asked questions
How long does it take to switch to a managed provider?
Selection usually takes weeks, and onboarding can take several weeks to a few months depending on size and the condition of your systems.
Do I need to buy new equipment first?
Not always. Providers typically assess what you have and recommend replacements for unsupported or unsafe items. Ask for a prioritized list so you can spread the cost.
Will my employees notice the change?
Yes, in small ways: a new help desk process, new security prompts and software agents on their computers. Communicate in advance.
Can I start with a pilot?
Some providers offer a short pilot, a limited-scope first phase or a shorter initial term. Ask early.
Sources and further reading
- Small Business Administration — guidance on planning and managing business operations.
- Cybersecurity and Infrastructure Security Agency — practical cybersecurity steps for small organizations.
- Federal Trade Commission — business guidance on data security and protecting customer information.
