The 5 most important questions: What is your contractual SLA? Is on-site included? Are you a Microsoft Partner? Is cyber security included? Can you provide references? Full list below.
20 QUESTIONS TO ASK
AN IT SUPPORT COMPANY
BEFORE YOU SIGN ANYTHING
Choosing the wrong IT support company is an expensive mistake. Use these 20 questions — covering SLAs, pricing, certifications, cyber security, and references — to evaluate any IT support provider before committing.
Response Times & SLAs
1.What is your response time SLA for critical IT issues?
The most important question. Any IT company worth hiring should have a contractual SLA — ideally 15 minutes for critical issues. "We try to be quick" is not an acceptable answer.
2.Is this SLA guaranteed in the contract, or just a target?
Many IT companies quote impressive response times in their marketing but don't actually commit to them in writing. If it's not in the contract, it's meaningless.
3.Do you have 24/7 support, and what does that actually mean?
"24/7 support" can mean anything from a monitored emergency line to a full overnight helpdesk. Understand what's included and what costs extra.
Pricing & Contracts
4.Is the pricing all-inclusive, or what's excluded?
Many IT companies quote low per-user fees and then charge separately for on-site visits, after-hours support, major projects, and hardware. Always understand the full cost.
5.Do you charge for on-site visits?
On-site visit charges can significantly increase your monthly IT spend. A good managed IT provider includes on-site visits at no additional charge.
6.What is the minimum contract term?
Most IT support contracts are 12 months minimum. Some providers lock customers into 3-year terms. Understand what you're committing to and what the exit terms are.
Technical Capability
7.Are you a Microsoft Partner, and what certifications do you hold?
Microsoft Partner status means the IT company has passed Microsoft's technical assessments and has certified engineers. It also means you get proper support rather than workarounds.
8.Do you hold Cyber Essentials certification yourselves?
An IT company recommending Cyber Essentials to clients should hold it themselves. If they don't, that's a red flag about their own security posture.
9.How many engineers do you have, and are they UK-based?
Understaffed IT companies can't maintain SLAs. Offshore helpdesks can create communication challenges and may not understand UK compliance contexts.
Cyber Security
10.Is cyber security included, or is it a bolt-on extra?
Some IT companies treat security as an upsell. In 2026, basic security (EDR, email security, MFA) should be standard — not an extra charge.
11.Can you help us achieve Cyber Essentials certification?
Many industries and public sector contracts now require Cyber Essentials. Your IT company should be able to guide you through the process — not just point you to the IASME website.
References & Track Record
13.Can you provide references from similar businesses?
Any IT company can claim expertise in your sector. References from clients with similar size and industry are the best way to verify the claim.
14.What is your client retention rate?
High client retention is the best indicator of quality. If businesses keep leaving, there's a reason. A good IT company should have 85%+ annual retention.
6 red flags to watch for
when choosing an IT company
How Coreitech answers
the key questions
Ready to evaluate
Coreitech?
Ask us any of the questions above. We'll give you a straight answer — and provide client references in your sector.
