Silence from your IT provider can mean everything's running perfectly. Or it can mean nobody's paying attention. Here's how to tell the difference.
There's a version of managed IT where you pay your monthly invoice, nothing catastrophic happens and you assume everything is fine. Your IT company doesn't call. You don't call them. Months go by. Everyone seems happy.
But here's the question nobody asks during those quiet months: is your IT company actually doing anything? Or are you paying for a service that's only active when something breaks which is exactly what you were trying to get away from when you hired a managed provider in the first place?
The truth is that good managed IT involves a significant amount of recurring work that happens behind the scenes every single month. And if your provider isn't doing this work, you're not getting managed IT. You're getting break/fix with a subscription fee.
Here's what should be happening every month whether you hear about it or not.
Patch management and security updates
Every operating system, every browser, every business application releases security patches regularly. Some of them are critical they close vulnerabilities that are actively being exploited by attackers. Others are routine maintenance.
Your IT company should be deploying these patches on a regular schedule typically weekly for routine updates and within 24 to 48 hours for critical security patches. They should be testing patches before deploying them widely to make sure they don't break anything. And they should be tracking which machines are up to date and which ones have fallen behind.
If your IT company isn't patching your systems regularly, every unpatched machine is a door that's been left unlocked. You won't know it's a problem until someone walks through it.
Backup verification
Having a backup configured is step one. Verifying that it's actually working is the step most IT companies skip.
Every month, your IT provider should be checking that your backups are completing successfully. Not just glancing at a dashboard actually reviewing the logs, confirming the data is current and periodically testing a restore to make sure the backup can actually be used if you need it.
We've written about this before the property management company that went 22 months without a working backup because nobody checked. That situation is disturbingly common, and it's entirely preventable with basic monthly verification.
Monitoring review
Your devices and network should be monitored continuously. But monitoring only matters if someone is reviewing the alerts and acting on them.
Monthly monitoring review means looking at trends: is a hard drive filling up? Is a machine running hotter than it should? Is one workstation generating more errors than the others? Has network traffic spiked in a way that suggests a problem?
These aren't emergencies yet. They're early warning signs. The entire point of proactive IT is catching these signals before they become the 3 PM panic call that takes your office down.
User account and access review
People join. People leave. People change roles. Over time, your user accounts accumulate like sediment former employees who still have active accounts, current employees who have access to things they no longer need, shared accounts that nobody remembers creating.
Every month, someone should be reviewing your user accounts. Who has access to what? Are there any active accounts for people who no longer work here? Has anyone's access level changed since their last review? Are shared accounts still necessary or can they be replaced with individual logins?
This is basic security hygiene and it's the kind of thing that feels unnecessary until a former employee's still active account gets compromised.
License and subscription audit
Software licenses are one of the most common sources of waste in a small business. Employees leave and their licenses stay active. Free trials convert to paid subscriptions without anyone noticing. Premium plans get assigned to users who only need basic access.
Your IT provider should be reviewing your software subscriptions monthly to identify waste. That Microsoft 365 Business Premium license assigned to the employee who left four months ago? That's $22 a month you've been paying for nothing. Multiply that across a few unused licenses and forgotten subscriptions and you're looking at hundreds of dollars a year in pure waste.
Hardware health monitoring
Every device has a lifespan. Laptops last four to five years in a business environment. Servers last five to seven. Networking equipment varies. And all of them degrade gradually before they fail completely.
Monthly hardware monitoring means tracking the age and health of every device in your environment. Which laptops are approaching end of life? Which machines are showing early signs of failure slow performance, increasing errors, overheating? What's your replacement timeline and is it budgeted?
This is the difference between a planned $800 laptop replacement and an emergency $800 laptop replacement plus $400 in rush setup fees plus a day of lost productivity because someone's machine died without warning.
Documentation updates
Your IT documentation should be a living document that gets updated every time a change is made. New device added? Updated. Employee onboarded or offboarded? Updated. Network configuration changed? Updated. Vendor relationship changed? Updated.
If your IT company only updates documentation during major projects and ignores it the rest of the time, it becomes stale within months. And stale documentation is almost worse than no documentation because it gives you false confidence that you know what you have.
The accountability test
Here's a simple way to find out if your IT company is doing the work: ask them for a monthly report. Not a phone call. Not a "everything looks good" email. An actual report that shows what patches were deployed, what backup verifications were performed, what monitoring alerts were reviewed, and what recommendations they have for the coming month.
If they can produce that report quickly and confidently, they're doing the work. If the request is met with a pause, a vague response, or a report that looks like it was created five minutes ago that tells you something too.
You're paying for proactive IT. You deserve to see the proof that it's happening.