IT arrangements rarely fail suddenly. They degrade — quietly, over a year or two, while everyone adapts around the degradation until the workarounds become normal.
The result is that most businesses stay with an outgrown arrangement well past the point it stopped working, because no single day was bad enough to force the question. What follows are the signals that the question is overdue.
1. The same problems keep coming back
The clearest indicator of reactive support. Tickets get closed, the immediate symptom goes away, and the same issue reappears in three weeks against a different user.
This is the difference between fixing and resolving. A provider operating properly tracks recurrence and escalates repeat issues into root-cause work. If nobody is doing that, you are paying for symptom management indefinitely.
2. Nobody can tell you what you have
Ask for a current inventory: every device, its age, its warranty status, what it runs, who uses it. Ask for a network diagram. Ask when your backups were last successfully restored — not run, restored.
If producing that takes weeks, or produces something visibly out of date, then nobody is managing the environment. They are responding to it. Those are different services, and only one of them scales.
3. Your team has stopped reporting problems
This one is invisible in ticket data, which is what makes it dangerous. When support is slow enough, people stop asking. They restart the machine, work around the broken thing, keep a personal file copy, use their own device.
Falling ticket volume gets read as improvement. It is often the opposite — the problems are still there, they have just moved outside where anyone can see them. If you suspect this, ask your team directly rather than looking at the numbers.
4. Growth has changed the shape of the problem
Arrangements that work at 10 people frequently break somewhere between 25 and 40. The specific triggers:
- Onboarding a new hire takes days rather than being ready on day one.
- Multiple locations, or a permanent hybrid pattern, replacing a single office.
- The first compliance obligation — a client security questionnaire, a HIPAA requirement, a cyber insurance renewal with real conditions attached.
- Line-of-business software that now genuinely cannot go down for a day.
- Anyone in the business holding administrative credentials informally because it is faster.
5. You have no idea what you are protected against
Ask what would happen if a workstation were encrypted by ransomware this afternoon. A provider managing security answers with a process: isolation, scope assessment, recovery point, restoration timeline, notification obligations.
An answer that amounts to "we have antivirus" is not a security posture. Note also that cyber insurance carriers now ask this question directly on renewal applications, and answering it inaccurately can void a claim at exactly the moment you need it.
6. Everything depends on one person
Sometimes an internal admin, sometimes one engineer at a small provider. Things work because that individual holds the knowledge — and their holiday, illness, or resignation is a business continuity event.
This is one of the most common reasons businesses move to a managed arrangement, and it is not a criticism of the person. It is a structural risk that has nothing to do with their competence.
7. IT never comes up until it breaks
A managed relationship includes a recurring conversation that is not about a ticket: what is aging, what is coming, what should be budgeted, what risk is accumulating. Quarterly is typical.
If your only contact with your provider is when something is wrong, you have a repair service. That is a legitimate thing to buy, but it means every technology decision in your business is being made reactively and under time pressure.
What to do with this
Recognising three or more of the above does not automatically mean changing providers. It means the current arrangement is not doing what you now need, and the honest first step is a direct conversation with your existing provider about scope — often the arrangement was scoped correctly for the business you were four years ago.
If that conversation does not produce a concrete plan with dates, then the arrangement is not going to change. At that point the question stops being whether the provider is good and becomes whether the model still fits.