The short version: a good MSP can name who owns your outcomes, tells you exactly what is not included in the monthly price, hands over documentation and credentials without a fight, and talks about your business before your firewall. A weak one closes tickets, stacks award badges, and gets vague about scope. The twelve questions below expose the difference in one meeting.
The twelve questions that expose a weak provider
Ask these in the sales meeting, in this order. The wording of the answer matters more than the answer.
- “Who, by name, owns our account — and what is their tenure with you?” A rotating queue of anonymous techs is the #1 complaint buyers report after signing.
- “What is NOT included in the monthly price?” The single most important question. Vague answers here become surprise invoices later. A serious provider answers in one breath: hardware, travel, projects, and what else.
- “Show me your last three out-of-scope invoices to clients like us.” This is where nickel-and-diming hides. Refusal to discuss is your answer.
- “Walk me through your last security incident and what you told the client.” Everyone has had one. What you are testing is honesty and communication under pressure.
- “Do you outsource or offshore your help desk or engineering?” Not automatically bad — but you should hear it from them, not discover it later.
- “Pull five closed tickets and tell me whether the cause was fixed or the symptom cleared.” A provider that measures only ticket closure runs a queue, not an operation.
- “Who owns our documentation and credentials, and what happens to them if we leave?” The only acceptable answer: you own everything, handed over completely, no conditions. Provider-held credentials are a hostage situation waiting to happen.
- “What do you need from US to do your job?” A provider that asks nothing of you — no standards, no access decisions, no executive time — is planning to be a vendor, not an owner.
- “How will you support our sites and field locations, specifically?” Multi-site is where generalist MSPs quietly fail. Ask for their site-launch process.
- “What does your quarterly business review contain?” If the answer is ticket counts, that is an activity report, not a business review. You want risks, recommendations, budget, and a roadmap.
- “What are your contract length, exit terms, and offboarding process?” Long lock-ins with punitive exits signal a provider that retains clients with contracts instead of performance.
- “Which clients like us can we call?” Similar size, similar operational shape. A provider serving 75–500-person multi-site companies should produce these instantly.
Contract red flags
- “All-inclusive” pricing with an undefined out-of-scope clause — the two cannot coexist.
- Auto-renewal with a narrow cancellation window buried in the terms.
- The provider owns the documentation, admin credentials, or licensing agreements for your environment.
- No written response commitments at all — or commitments with no remedy when missed.
- Offboarding assistance billed at premium hourly rates, or not defined anywhere.
How to switch without disruption
Fear of a painful transition keeps companies with bad providers for years. A competent incoming provider removes that fear with a phased plan — and runs it while your current provider is still under contract:
- Before anything is signed: environment review, access inventory, documentation audit. You learn what the incumbent actually controls.
- Weeks 1–2: parallel access established, credentials recovered and rotated, backups verified independently. Nothing user-facing changes yet.
- Weeks 3–6: support cutover with both providers overlapping, so no ticket falls in the gap. Employees get one announcement and one new contact route.
- Weeks 6–12: stabilization — urgent gaps fixed, environment documented, standards set. Only then does improvement work begin.
The test of the incoming provider is whether they volunteer this plan before you ask. Ironguard’s version of it is the first two phases of how we work — and the working session that starts it is free, because we learn as much from it as you do.