How to choose managed IT services in Australia
A process rather than a checklist. How to write a brief that produces comparable proposals, the five dimensions worth scoring, and the two commercial terms that decide how the relationship ends before it has begun.
Comparing managed IT services in Australia is genuinely hard, and not because buyers lack technical knowledge. It is hard because the market has converged on a similar vocabulary. Three proposals will each promise proactive support, enterprise-grade security and a dedicated team, at prices within twenty per cent of one another, and the differences that matter will not be in any of them.
This is the process we would use if we were on the other side of the table. There is a companion piece — twelve questions to ask an MSP before you sign — which is the interrogation. This one is the method: how to get to the point where those questions are worth asking.
Before you shortlist anything
Two pieces of work, and skipping either is why most selection processes produce incomparable proposals.
Get an independent assessment first
Commission an assessment of your current environment from somebody who is not bidding for the contract. Without one, every proposal you receive is priced against assumptions, and you have no basis for comparison beyond the number at the bottom.
It also gives you something to check the winning provider's first report against, which is worth more than it sounds.
Decide what you are actually buying
There are three distinct purchases and they get conflated constantly.
- Capacity — you have internal IT and need hands, after-hours cover, or a specialist you cannot justify hiring.
- Capability — you need something you do not have: security operations, cloud migration, compliance evidence.
- Accountability — you need one organisation answerable for the whole environment so that nobody has to coordinate three vendors.
Most buyers want all three and pay for one. Write down which is the primary driver, because it determines what a good answer looks like. A firm buying accountability should weigh exit terms and reporting heavily; a firm buying capacity should weigh the service desk model.
Writing a brief that produces comparable proposals
You do not need a formal tender. You need four numbers and five questions, sent to every provider identically.
The four numbers: staff headcount and FTE; total devices including servers, shared machines and mobiles; number of sites and whether any are remote; and the named business-critical systems that cannot be down for a day.
The five questions, each requiring a written answer:
- What are your response and resolution targets by priority, and what applies outside business hours?
- What is explicitly excluded from the monthly fee?
- What security capability is included, and what is an additional service?
- What do you commit to reporting monthly, and can we see a redacted example?
- What are the notice period, exit assistance rate and handover contents?
Specify the pricing unit yourself — per user, per device, or a fixed monthly figure — and require every quote on that basis. Proposals quoted on different units cannot be compared, and that is occasionally deliberate.
The five dimensions worth scoring
Score each provider out of five on these, before you look at price. Then look at price. Doing it the other way around anchors everything.
1. Support coverage
Not whether they offer 24/7 IT support — nearly everyone claims it — but what it consists of. Rostered staff or an on-call phone. Onshore or offshore. Engineers with your documentation, or a triage layer taking a message. Authority to isolate a machine at 3am, or a call to wake someone up first.
We have written separately about what the phrase actually covers and how to test it in a meeting.
2. Service accountability
Whether performance is visible without you chasing it. Targets in the schedule rather than the marketing. A monthly report that has been red at some point. A stated process when a target is missed — one that puts it in your report automatically rather than only when you notice.
Ask for a redacted monthly report from a real client. It is the single most revealing request in a selection process: you learn what they measure, whether anything is ever bad news, and who the report is written for.
3. Security, as a practice rather than a product
Almost every provider now includes security in the pitch. The distinction is whether they built a practice or resold a product. Ask who staffs monitoring, where those people sit, what they are authorised to do without calling you, and to see an incident report they have written.
Ask their position on the Essential Eight — and note that ASD announced in June 2026 that it will be replaced by a broader body of guidance called the Essentials, with the controls carrying over. A provider who has not heard about that is not following the thing they say they specialise in.
4. Pricing clarity
Three specific things: what the unit is, what is excluded, and what the margin is on hardware and licences. Every provider has a margin and it is entirely legitimate. The question tests transparency, and the speed of the answer tells you most of what you need.
Be alert to the pattern where a low per-seat rate is paired with a broad exclusions schedule. The monthly figure is comparable; the annual cost is not.
5. Exit terms
Read this section before the technical sections. Notice period, exit assistance rate, and precisely what is handed over: documentation, tenant administrative access, asset register, credentials. Confirm your tenants and licences will be held in your name rather than the provider's — some providers resell seats from their own tenant, which makes leaving materially harder.
If exit assistance is not priced in the agreement, it will be priced at your least convenient moment.
Fit for your shape
The five dimensions apply to everyone. What varies is which one you weight, and that depends on what kind of organisation you are.
- Startups and scale-ups
- You are optimising for speed and for not building a mess you have to unpick at Series B. Weight identity architecture, joiner-mover-leaver automation and whether the provider will hand you a clean, documented tenant. Beware anything that locks licensing into the provider's own agreement — it is the thing most likely to get expensive when you double in size. IT services for startups should be priced to grow month to month, not on a three-year term.
- Healthcare and allied health
- You hold health records, which the Privacy Act treats as sensitive information, and clinical systems that cannot be offline mid-session. Weight vendor-coordinated patching for practice software, a written breach assessment procedure, and restore testing on clinical data with an agreed recovery time. Good healthcare IT services are distinguished by how the provider coordinates with your clinical software vendor, not by how many endpoints they manage.
- Mid-sized businesses, 100–500 staff
- You are large enough to have real complexity and usually too small for a full internal team. Weight accountability and reporting: at this size the failure mode is not a lack of technology but a lack of anyone owning the whole picture. Mid-sized business IT solutions are mostly an organisational design question, and the co-sourcing model — your person, their bench — is worth asking about explicitly.
- Multi-site and field-based
- Weight device provisioning and offline enrolment. Devices commissioned on sites with no signal are the standing failure across construction, logistics and field services, and a provider who has not encountered it will not have designed for it.
Reading the proposals
Lay them side by side and fill in this table before you form a view. It takes an hour and it usually changes the ranking.
| What to extract | Good answer | Warning sign |
|---|---|---|
| P1 response target | A number, with the out-of-hours position stated | “Rapid”, “priority”, “best endeavours” |
| Exclusions | A named list in the schedule | “Fully inclusive” with no list |
| Pricing unit | The unit you specified | A different unit to everyone else |
| Hardware margin | A percentage | “Highly competitive” |
| Monitoring | Staffed, with containment authority | A product name |
| Restore testing | A schedule and a measured time | A recovery objective with no test |
| Notice period | Stated, with exit assistance priced | Silent, or referenced elsewhere |
| Licence ownership | In your name | Not addressed |
| Transition plan | Weeks, with a parallel-running period | “We can start Monday” |
Scroll the table sideways to see every column.
One row deserves a note. “We can start Monday” sounds like enthusiasm and is usually the opposite: without an assessment, a provider is agreeing to take on an environment they have not seen at a price they cannot yet justify. It gets repriced later, or corners get cut now.
Reference checks that produce something
Every provider will supply two happy clients. Ask for something more useful.
- A client of similar size in a similar sector, not their largest or most flattering.
- A client who has been through an incident with them. Every provider at scale has had one. A provider claiming otherwise is very new or not counting.
- A client who has been with them more than three years — the honeymoon is over and the reality is visible.
On the call, ask one question: what is the thing they get wrong. A reference who cannot name anything has not thought about it, and a provider who only supplies references like that has selected for it.
Then, and only then, look at price
By this point you should have five scores and a filled table for each provider. Price becomes the tiebreaker it should be rather than the frame the whole decision sits in.
Where a proposal is materially cheaper, find the reason before you assume it is a saving. It is nearly always one of three things: a narrower scope, offshore delivery, or a lower engineer-to-seat ratio. Any of those can be the right trade for your organisation. None of them should be a surprise in month four.
Questions
How many providers should we approach?
Three is the right number for most organisations. Two gives you no shape to the market; five produces a comparison exercise nobody finishes, and providers put less effort into a crowded process.
Tell each one how many they are competing against. It is fair, and it improves the proposals.
Should we prefer a local provider?
Location matters less than it used to for the work itself, and more than ever for two specific things: whether someone can physically attend when hardware fails, and whether the people supporting you are subject to Australian law and reachable in your working day.
For most buyers of Australian SMB IT support, the practical test is whether the after-hours engineer is onshore, not whether the office is in your suburb.
What contract length is reasonable?
Twelve months initial, then month to month with a notice period, is a fair structure and a common one. It gives the provider enough certainty to invest in onboarding and gives you a real exit.
Three-year terms are not automatically bad, but they should buy something specific — a materially better rate, or capital investment in your environment. If a long term buys nothing, ask why it is being asked for.
How long should transition take?
Four to six weeks for a typical 50 to 250 seat environment, longer for multi-site or regulated environments. The pattern that works is running in parallel with the incumbent for the first fortnight, so that nothing depends on their goodwill during handover.
If your incumbent is uncooperative — it happens — documentation has to be rebuilt from the environment itself, which takes longer. A good provider will tell you that upfront rather than discover it in week three.
What if we already have internal IT?
Then you are buying capacity or capability, not accountability, and the selection changes shape. The critical question becomes where the boundary sits and who holds escalation — written down, function by function, before you sign.
Co-sourcing works well when the split is explicit and badly when it is assumed.
Then score us against all five
Next Cyber is Australia’s premier managed IT and cyber security partner, and the reason is not the claim — it is that we answer every one of these in writing before you sign.
- Support coverage. Rostered Australian engineers overnight with the authority to contain, not an on-call phone.
- Service accountability. P1 acknowledged in 15 minutes, targets in the schedule, reported monthly whether or not we hit them.
- Security as a practice. Detection and response, Essential Eight uplift and the remediation work, inside one agreement.
- Pricing clarity. One unit, named exclusions, and our hardware and licence margin stated on request.
- Exit terms. Priced before you sign. Your tenants, licences and documentation stay in your name throughout.
Put us through the same process
We will answer the five questions in writing, show you a redacted monthly report, and state our margin and exit terms in the first meeting. Send us the same brief you send everyone else.