IT Buyer’s Guide 2026
IT Buyer’s Guide 2026: how to choose and pay for managed IT services
For most businesses with 5 to 400 devices, managed IT services give the best value: a fixed monthly fee for proactive monitoring, security, backup and help desk support, instead of paying by the hour when something breaks. Before you sign, check exactly what the fee covers, what is billed separately and how the provider protects your data.
Last updated: October 2026 · Written by the ICSI team
The three ways IT companies charge
- Break-fix (time and materials). You pay an hourly rate when something breaks, or a quote for a single project such as a network upgrade or an office move.
- Managed IT services. The provider acts as your IT department for a monthly fee: monitoring, security, backup, updates and help desk support. It can be fully managed, or co-managed alongside your own IT staff.
- Software vendor support. Help desk support from a software company for its own product only. It does not cover the rest of your network, devices or other applications.
Managed IT or break-fix: which costs less?
Break-fix looks cheaper until something goes wrong. The provider is paid by the hour, so it has no reason to keep your network stable, and your IT costs can be zero one month and thousands the next. Managed IT services turn that into a predictable monthly cost and put the focus on preventing problems: patching, monitoring and tested backups cost far less than emergency recovery after a ransomware attack or hardware failure.
Break-fix still makes sense for one-off projects when you already have a capable in-house IT team.
Should you hire a full-time IT person instead?
One person cannot cover the help desk, security, backups, cloud services and compliance on their own, every day of the year, including holidays and sick days. Many businesses outsource all of their IT, or use co-managed IT so their in-house IT staff gets a team of specialists behind them.
What a managed IT agreement should include in 2026
- Security patches for operating systems and applications, applied on a regular schedule
- Endpoint protection on every computer, with active monitoring
- Firewall management and monitoring
- Multi-factor authentication on email, remote access and admin accounts
- Email security and spam filtering
- Backups kept in more than one place, with regular test restores
- 24/7 monitoring of servers, network devices and backups
- Microsoft 365 management and support
- Security awareness training for your staff
- Written network documentation (licences, users, hardware, passwords) that belongs to you
- A named account manager and regular review meetings
What is often billed separately
These are not a problem, as long as the agreement says so in writing:
- New hardware such as computers, laptops and servers
- Software licences
- After-hours and on-site visits
- Projects such as office moves, server upgrades or cloud migrations
- Compliance projects such as NIST SP 800-171, CMMC or HIPAA assessments
12 questions to ask before you sign
- Do you answer the phone live during business hours?
- Is your response time written into the agreement?
- Is help desk support unlimited, or charged per call or per hour?
- What exactly does “all-inclusive” include, and what is excluded?
- How do you monitor and patch our systems, and what reports will we receive?
- Where are our backups kept, and how often do you test a restore?
- Who owns our network documentation and passwords?
- Who else on your team knows our network if our usual technician is away?
- Are projects fixed-price, with a written scope?
- How do you protect us against phishing and ransomware?
- Can you support our compliance needs, such as HIPAA, NIST SP 800-171 or CMMC?
- What happens if we cancel the agreement?
For more detail, read 21 Critical Questions Your IT Consultant Should Be Able to Say ‘Yes’ To.
How ICSI works
ICSI (International Computer Services, Inc.) has provided managed IT services since 1987, from our headquarters in Annapolis, Maryland and our office in Tampa, Florida. We work with businesses from 5 to over 400 devices through Fully Managed IT, Co-Managed IT Support and a Virtual IT Help Desk, for a fixed monthly cost. To see what your business needs, request a free IT assessment at (410) 280-3000.
Frequently Asked Questions
Most managed IT providers charge a fixed monthly fee based on the number of users or devices they support and the services included. Compare quotes on what each one covers, not only on price. ICSI gives you a written quote after a free IT assessment.
Break-fix means paying by the hour when something breaks. Managed IT means a fixed monthly fee for ongoing monitoring, security, backup and support that prevents most problems before they cause downtime.
Co-managed IT is a partnership in which a managed IT provider works alongside your in-house IT staff and takes on the areas you choose, such as the help desk, security or monitoring.
The services included, the written response time, what is billed separately, how backups are kept and tested, who owns your network documentation, and what happens if you cancel.