When a company signs up for an IT support service, it almost always signs for what it thinks is included and finds out at the first breakdown what isn’t. The difference between a good provider and one that just fights fires isn’t in the list of services on the homepage: it’s in what happens on a Tuesday at 8 in the morning when the server won’t boot and nobody picks up the phone.
This article is a practical guide to knowing what a business IT support service should cover, what usually gets buried in the small print and what questions to ask before you sign. If by the end you’re clear on what to demand, we’ll have done our job.
The basic services that simply cannot be missing
There’s a floor below which it isn’t support, it’s a promise. A serious service gives you tiered support: L1 for day-to-day incidents (an email that won’t come through, a printer, a locked-out user), L2 for systems and network problems, and L3 for anything touching critical infrastructure or requiring engineering. If the provider doesn’t distinguish between tiers, everything is handled equally slowly or everything escalates to the same overloaded technician.
Beyond resolving incidents, good support works to make sure fewer of them happen. That means proactive management, not reactive. These are the minimums you should see in any proposal:
- Remote and on-site support: most incidents are resolved remotely, but when the hardware or the network fails, someone has to come to your office.
- Workstation management: user onboarding and offboarding, devices, updates and security patches kept up to date.
- Verified backups: making backups isn’t enough; you have to prove they restore. A backup with no tested restore is a useless file with a reassuring name.
- Monitoring of critical systems: servers, network and services watched so the problem is spotted before the user is.
- Managed basic security: antivirus, access control and the roll-out of critical updates.
If your provider only shows up when you call, you don’t have a support service: you have a phone number. You can see the full scope of what an outsourced IT department should cover on our services page.
SLAs and response times: what to look for
The SLA (Service Level Agreement) is the document that turns good intentions into enforceable commitments. Without an SLA, “we’ll get to you fast” means nothing. With an SLA, there’s a number, a deadline and a consequence if it isn’t met. It’s the part of the contract most people ignore, and the one that hurts most the day something goes down.
The most common trap is confusing response time with resolution time. Getting an answer in 15 minutes is great, but if the problem takes three days to fix, that response SLA hasn’t saved you a thing. Insist that both are in writing and broken down by priority.
- Clear priority levels: a user who can’t print isn’t the same as the ERP being down for the entire workforce. Each level should have its own committed time.
- Real coverage hours: 8×5 during office hours or 24×7? If your operation doesn’t stop at weekends, a Monday-to-Friday SLA is a hole.
- Escalation path: what happens when L1 can’t resolve it. It should be defined to whom and within what time it gets escalated.
- Penalties for non-compliance: an SLA with no consequences is a wish list. They should exist, even if they’re modest.
A good SLA rests on 24/7 monitoring: if the provider watches your systems in real time, many incidents are opened and resolved before your team even notices. That’s the level you should be aiming for.
What usually gets left out (and how to spot it before you sign)
This is where the serious providers part ways with those competing on price alone. A very low monthly fee almost always hides exclusions you discover when it’s already too late. These are the usual cutbacks you should look for in the proposal before you sign, not after:
- A capped block of hours: “support included” that’s really 10 hours a month, and from there on they bill separately at a premium rate.
- Travel not included: on-site support is billed per visit and per mileage. If you’re outside their usual area, every breakdown adds up.
- Projects disguised as incidents: migrating a server, changing email systems or rolling out new equipment “isn’t support” and is quoted separately. Ask where that line sits.
- Cybersecurity and compliance: advanced security, incident response and the work around ISO 27001 and regulations usually fall outside basic support.
- Third-party software: when the problem is in your ERP or your line-of-business application, many providers wash their hands of it and send you to the vendor.
The way to spot it is simple and devastating: ask them to describe, in writing, what is NOT included. A provider with nothing to hide tells you without hesitation. The one who gets nervous at that question is warning you about the surprise invoices to come.
The price of bad support isn’t paid in the monthly fee: it’s paid in the invoice for the first major outage and in the hours your team loses waiting.
Key questions to ask your provider
Before you sign, an honest conversation saves you a year of grief. These questions separate the provider who has mastered the craft from the one who improvises. Pay less attention to what they answer and more to whether they answer with specifics or with vagueness:
- What response and resolution times do you guarantee in writing, and for each priority level? If there’s no number, there’s no commitment.
- Who answers when I call, and how does it escalate if they can’t fix it? There should be a process, not a reliance on one particular technician being available.
- Do you test the restores of my backups? How often? The right answer includes a frequency, not a “of course we do”.
- What exactly happens if I have a security breach on a Sunday? This is where you see whether there’s a response plan or just good intentions.
- What do you deliver to me every month? A good service reports: incidents, times, system status. With no reports, you don’t know what you’re paying for.
- If tomorrow I want to switch providers, do you hand over all the documentation and access? Whoever doesn’t tie you down is the one who trusts their own work.
If the person across the table answers with data, deadlines and real examples, that’s a good sign. If they take refuge in “we’ll look at that case by case” for everything, you already know what’s going to happen the day you really need them.
How MagicBoxDesk helps you
At MagicBoxDesk we do exactly what this article tells you to demand: we outsource your IT department with tiered support L1·L2·L3, remote and on-site attention with a visit to your office, and coverage across the whole of Spain. We watch your systems with 24/7 monitoring to get ahead of problems, we manage your backups by proving they restore, and we cover cybersecurity, ISO 27001 compliance and cloud infrastructure from a single team. All with a written SLA, no hidden exclusions and reports that tell you what’s going on.
The advantage isn’t only technical: it’s no longer having to worry about IT and getting your team’s time back for what really grows your business. You can see everything we cover on our services page.
At MagicBoxDesk we take care of all of this so you can get on with your business. Request a no-obligation quote and we’ll tell you, with judgement and no smoke, what you actually need.
