The questions to ask an IT provider are no longer about price per user.
They are about what that provider can reach inside your business, how fast they respond when something is genuinely wrong, and what happens the day their own systems are the problem. Here are the ones worth asking before you sign.
Why the conversation changed
The Verizon 2026 breach report found that breaches involving a third party now account for 48% of the total, a rise of 60% in a single year. Your IT provider is the third party with the deepest access you will ever grant.
That does not make hiring one a bad idea, and doing this work alone is worse for almost every company under sixty people. It does mean the interview needs to cover their security, not only yours.
Questions about the day something breaks
Response time is where proposals are vaguest and where the difference is felt.
- When I report that nobody can work, how long until a human being starts on it, and how is that measured?
- Who answers at 9 p.m. on a Sunday, and is that the same person I met today?
- What counts as an emergency in my contract, and what does not?
- If our files are locked by ransomware tonight, what do you do in the first two hours, and what do you need from me?
Ask for the last question to be answered as a sequence of steps rather than as a reassurance. A provider who has done it before will describe it easily.
Questions about the keys you are handing over
- What exactly will you be able to reach in my business, and who on your team can reach it?
- Do your own technicians sign in with a code on a phone, on every account, including the tools they use to manage us?
- Does anyone outside your company, a subcontractor or a software vendor, get access to my systems through you?
- If we part ways, how long does it take to remove your access completely, and who verifies that it happened?
That last question is the one most owners forget, and it is the one that matters six months after a relationship ends.
Questions about what is actually included
- What is excluded from the monthly fee, and what gets billed on top?
- Is security part of this contract, or is it a separate line I have not seen yet?
- Who owns the licenses, the backups and the documentation if I leave?
- Am I buying software you resell, or your time, and how much of each?
Ask for a written list of exclusions before you sign, not after. Providers who work cleanly have that list already and will hand it over without friction.
Questions worth asking any IT provider in Georgia
Some of this only applies locally, and it is worth being specific.
- If somebody has to be physically in front of the equipment, how long does it take you to reach my office, and where are your people actually based?
- Do you already work with companies in the Augusta area, and can I speak to two of them?
- Do you have experience with customers in the defense supply chain around Fort Gordon, where our own clients pass security requirements down to us?
- Who covers us when the person who knows our setup is on vacation?
A provider three states away can be excellent at everything that happens remotely, which is most of it. The point of asking is to know in advance which category of problem will take a day longer to fix, and to price that into your decision rather than discover it during an outage.
Questions to ask the references, not the provider
Every provider will hand you two happy customers. The reference call is still worth making, provided you ask about the bad week rather than about satisfaction in general.
- What went wrong, and how did they handle it?
- How long did it take somebody to call you back the last time it was urgent?
- Has anything ever been billed that you expected to be included?
- If you were signing again today, what would you put in the contract that is not in it now?
That last question does more work than the other three combined, because it produces a specific answer from somebody who has no reason to soften it. Write down whatever they say and bring it into your own negotiation.
Ask as well how long the reference has been a customer. A relationship of four months tells you about onboarding, which matters, and nothing at all about how a provider behaves in year three when the original account manager has moved on.
Three answers that should end the conversation
Some responses tell you enough on their own.
First, a provider who cannot say plainly what they would do in the first two hours of a ransomware incident. Second, one whose own technicians sign in with passwords alone while selling you a code on your phone. Third, one who will not put response times in writing, or who answers a specific question about exclusions with a general statement about partnership.
None of those three make somebody dishonest. All three mean the answers you need do not exist yet, and you would be paying for them to be figured out during your incident.
How to compare two proposals side by side
Once two providers have answered, resist the urge to compare monthly totals first. Put the answers in three columns instead: what happens when something breaks, what access they hold, and what is excluded. Price goes in the fourth column, read last.
Nearly every proposal looks similar in the first column and diverges sharply in the third. A provider whose exclusions run to half a page is often the more honest one, because the cheaper document usually means those items were never considered rather than never charged.
Then look at the gap between the two prices and ask what it buys in the first three columns. If nothing in those columns explains the difference, you are comparing sales positioning rather than service, and the questions to ask an IT provider have done their job by revealing that.
What to do with the answers
Send the questions to ask an IT provider in advance, in one email, and ask for written replies before the meeting. You will learn as much from the ones a provider skips as from the ones they answer well.
Then read the service description and the exclusions side by side, because that pairing is where most disappointment is written down long before it is felt.
| Alchanis Technical Services is a veteran owned IT and security provider serving small and mid-size businesses across Augusta, Columbia County and Georgia, including companies whose own customers pass security requirements down the chain.
If you want a straight answer to every question on this page, start at alchanistech.com. |
