5 Questions to Ask Your IT Provider Before Something Breaks
Most businesses don't think much about their IT provider. Things are running, nobody's complaining, the invoices go through. That's usually taken as a good sign.
But if you've never actually sat down and gone through the questions to ask your IT provider, "nothing's broken" and "we're actually covered" might not be the same thing. And the businesses that find out the difference usually find out at the worst possible time, mid outage, mid audit, or mid transition to a new provider, when it's too late to do anything but scramble.
Here are five questions worth asking your current provider now, while there's no pressure and no deadline. If the answers come easily and clearly, that's a good sign. If they don't, that's worth paying attention to.
1. What's our actual response time, in writing?
"We'll get to it as soon as we can" isn't a response time. It's a feeling.
A proper IT provider should be able to tell you exactly how fast they respond to a critical issue versus a minor one, and that number should be sitting in your contract, not just in a conversation you half remember from onboarding.
The difference matters more than it seems. A server outage that gets picked up in 15 minutes is an inconvenience. The same outage sitting untouched for four hours because nobody was clear on the expectation is a genuine business problem, and by then it's not really about IT anymore. It's about lost hours, frustrated staff, and possibly customers who noticed.
If you've never actually seen this number written down, that's worth asking about.
How Affinity MSP answers this: Our response times are set out clearly from day one, not left as a verbal assurance. It's one of the first things we walk clients through, because if you can't see it in writing, you can't hold anyone to it.
2. If we switched providers tomorrow, who owns our data?
This is one of the questions to ask your IT provider that most businesses never think of, because it only becomes relevant when a relationship is already ending, which is exactly the wrong time to find out the answer.
Your files, your configurations, your backups, your documentation of how everything's set up. All of it should belong to you, clearly, and be handed over without friction if you ever decide to move on. Some providers make that simple. Others make it deliberately difficult, whether through vague contract language, proprietary systems, or just quietly holding onto leverage.
You shouldn't need to threaten legal action to get your own data back. If you're not sure how that conversation would go, it's worth clarifying now, while there's no tension attached to asking.
How Affinity MSP answers this: Your data is yours, full stop. If a client ever decided to move on, handover wouldn't involve friction or fine print, just a clean, documented transition.
3. What's covered in our monthly fee, and what gets billed separately?
A lot of managed IT contracts look straightforward until something actually happens. Then a new line item shows up on the invoice for a fix that felt like it should have been included.
This isn't always a sign of bad faith. Some things genuinely sit outside standard scope. But you should know that upfront, not discover it after the fact. Ask your provider to walk you through what's fully covered, what's billed as an extra, and where the line sits. If they can answer clearly and without hesitation, that's a good sign about how they run things generally.
How Affinity MSP answers this: We lay out what's included and what isn't before any contract is signed, and we'd rather a client fully understand the scope upfront than be surprised by an invoice later.
4. When did someone last actually test our backups?
Having backups and knowing your backups work are two very different things, and most businesses don't learn the difference until they actually need to restore something and discover the backup was incomplete, corrupted, or simply never running the way everyone assumed.
The numbers back this up. A 2023 industry report from cyber insurer At-Bay found that more than a quarter of businesses fail to successfully recover their data from backups when hit by a ransomware attack, despite the vast majority believing their backups were in place. Having a backup and having a backup you can actually rely on are two different things, and the gap between them tends to surface at the worst possible moment.
A good provider tests restores regularly and can tell you, specifically, when that last happened and what the result was. If the honest answer is "we're not sure" or "it's been a while," that's not a small gap. That's the exact kind of blind spot that only reveals itself during an actual emergency.
How Affinity MSP answers this: Backup testing is scheduled, not assumed. We can tell clients exactly when their last restore test happened and what it showed, because "we think it's fine" isn't good enough when it comes to a business's data.
5. Do we get a plan, or just a bill?
IT support that's working well should feel like it's heading somewhere. A provider who's actually paying attention to your business should be able to tell you what's coming up, what's ageing out, what's worth budgeting for next quarter, and why.
If the relationship feels like it starts and ends with invoices, and the only conversations happen when something's already gone wrong, that's reactive support, not a partnership. It might be keeping the lights on, but it's not helping you get ahead of anything.
How Affinity MSP answers this: We build a roadmap with every client, not just a service ticket queue. Regular check ins on what's ageing out, what's coming up, and what's worth planning for are part of how we work, not an add-on.
Why these questions to ask your IT provider actually matter
None of these questions are meant to catch anyone out. Most providers doing a genuinely good job will answer all five without blinking, because the answers are already part of how they operate.
The value in asking isn't really about the answers themselves. It's about what asking reveals. A provider who welcomes the conversation and has clear, confident answers is one worth staying with. A provider who gets defensive, vague, or evasive has just told you something important, and it's better to learn that now, on your own terms, than during an outage or a contract dispute.
If you've read through these questions to ask your IT provider and you're not entirely sure how your current setup would hold up, that's a completely normal place to be. Most businesses haven't had reason to ask. It's just worth finding out before something forces the question.
That's exactly what a proper IT assessment is for. Not to sell you something, but to give you a clear, honest picture of where things actually stand, so you're the one deciding what happens next, not your IT setup.
