The best questions to ask an MSP reveal how the provider operates, not what tools it sells. A capable MSP can explain its process, show how it reports, put its commitments in writing, and describe how it handles a bad day. This article gives you fifteen questions to ask before you sign, along with what a good answer sounds like.
The questions are grouped by what you are trying to learn. Use them in the sales conversation, write down the answers, and compare the providers on the same list.
Before You Start: Know What You Need
Write down what you want technology to do for the business over the next two or three years. A provider can only match your needs if you can describe them. Note the systems you depend on, the rules you operate under, and the parts of your current setup that cause problems. A short list is enough. The goal is to judge each answer against your own situation instead of a sales script.
Questions to Ask an MSP About Strategy and Planning
1. Who will plan our technology, and how often will we meet? A good provider names a person and a schedule. Look for a strategic contact, often called a vCIO, who reviews your technology plan with you on a regular basis. If the answer is “call us when something breaks,” you are buying repair service and not planning. See What Is a vCIO? for what the role should include.
2. What will you deliver in the first 90 days? A good answer describes an assessment, an inventory of your systems, a documented risk list, and a roadmap. Vague promises to “get to know your environment” are a warning.
3. How do you make recommendations, and do you earn money from what you recommend? Providers can resell hardware and software, and that is not automatically a problem. You are entitled to know how they are paid and how they keep advice independent.
Questions About Service and Support
4. How do we get help, and how fast will you respond? Look for defined response targets by priority, a clear way to report issues, and a description of after-hours coverage.
5. Who will actually work on our issues? Ask whether support is handled by a dedicated team, a shared pool, or an outsourced desk. None of these is automatically wrong, but you should know which one you are getting.
6. What is included, and what costs extra? Ask for the service catalog in writing. Surprises at invoice time damage trust faster than almost anything else. What Does Managed IT Services Cost? explains how pricing models work.
7. How do you handle onboarding? A mature provider has a repeatable process. The MSP client onboarding checklist shows what a strong first 90 days looks like from the provider’s side.
Questions About Security and Risk
8. What security controls do you apply to our systems, and how do you prove they are working? Expect specifics: multi-factor authentication, patching, endpoint protection, backups, and monitoring, with reporting that shows results.
9. When did you last test a restore from backup? A backup that has never been restored is an assumption. Ask how often restores are tested and who signs off on the result.
10. How do you protect your own systems? Your provider has privileged access to your environment. Ask how they secure that access, how they vet their staff, and whether they carry insurance for errors and cyber incidents.
Questions About Contracts and Accountability
11. What does the agreement commit you to? Read the response targets, the term, the renewal terms, and the exit provisions. What Should an MSP Agreement Include? lists what to look for.
12. What happens if we leave? A good provider hands over documentation, passwords, and data in an orderly way. Any hesitation here tells you how the relationship will feel if you ever need out.
13. How do you report on performance? Ask to see a sample report and business review. What a Good MSP QBR Actually Looks Like describes the difference between a useful review and a data dump.
Questions to Ask an MSP About Fit
14. What kinds of businesses do you serve best? Providers who specialize in your industry understand its software, rules, and rhythms. A provider that serves everyone equally may serve nobody deeply.
15. Can we talk to a client similar to us? References are the fastest way to learn what the relationship is really like. Ask what went wrong at some point and how the provider handled it.
Red Flags to Watch For
Some patterns should slow you down regardless of how good the pitch sounds. Pressure to sign quickly is one. A price far below the others, with no explanation of what has been left out, is another. So is an unwillingness to put commitments in writing, a refusal to provide references, or an answer to every question that starts with a product name instead of a process.
Watch how the salesperson treats your questions. Providers who welcome hard questions usually welcome accountability later. Providers who deflect them tend to deflect later, too.
How to Compare the Answers
Put the answers in a simple table with one column per provider. Score each question as strong, acceptable, or weak, and note anything that surprised you. Pay the most attention to the strategy, security, and exit questions, because those are the areas where a poor choice is hardest to reverse. Price matters, but a lower price with weaker answers usually costs more once you count the problems.
Involve the people who will work with the provider. The person who deals with the help desk daily will notice things the owner does not. Invite them to the conversation and ask for their view before you decide.
What Strong and Weak Answers Sound Like
Take the backup question. A weak answer is “yes, we back everything up.” A strong answer names how often backups run, where copies are stored, how long they are kept, when the last restore test happened, and how long a full recovery would take. The strong answer has detail because the provider actually does the work.
The same pattern applies to every question. Strong answers include names, schedules, numbers, and examples. Weak answers rely on adjectives such as “solid” and “proven,” or on the provider’s reputation. When an answer is vague, ask a follow-up. If the follow-up is also vague, mark it down.
Pay attention to honesty as well. A provider who admits what they do not do, or what they would refer to a specialist, is easier to trust than one who claims to do everything. No provider is best at every service, and clear boundaries protect you from surprises.
What to Do in the First Month After You Choose
Choosing the provider is the start of the work. In the first month, confirm who your contacts are, review the inventory of your systems for accuracy, and agree on the schedule for your regular reviews. Ask for the risk list the provider has built from the assessment and decide together what to fix first.
Keep a copy of the agreement, the service catalog, and the names of everyone who has access to your systems. Set a calendar reminder for the renewal date and the notice period. Revisit these fifteen questions after six months and see whether the answers still hold. A provider who keeps their commitments will welcome the check-in.
If the fit is wrong, act early. Problems tend to grow when they are ignored, and an honest conversation in the first quarter is easier than a difficult exit in the second year.
Related Reading
For the advisory side of the story, see what a vCIO is and why the role matters and the vCIO services hub.
Frequently Asked Questions
How many providers should I talk to?
Three is a practical number. It gives you enough contrast to spot differences without turning the process into a project of its own.
Should I pick the cheapest MSP?
Price is one input. Compare what is included, how the provider handles security, and how the contract treats an exit before comparing cost. A lower price can hide gaps you will pay for later.
Do I need a long-term contract?
Many MSP agreements run for a term, and that is normal. What matters is how the agreement handles performance problems and an exit. Read those sections carefully before you sign.
What if I already have an MSP and I am not sure it is working?
Use these same questions on your current provider. If the answers are weak or they cannot answer at all, that tells you what you need to know.
About Brent Lacy: Brent Lacy is a technology advisor and the voice behind Rewired MSP. He helps MSPs operate with greater maturity and helps business owners make IT choices that make them more secure and more efficient. He is the author of Out of Cycle: A Field Guide to Strategic IT Continuity, vCIO Rewired: Virtually Conquering IT Obstacles, and Near Miss: Preventable IT Failures Threatening Your Business Security.
