Managed services

What it means

Managed services is a model in which an external company takes over IT management, such as computers, servers, networks, backups, licences and security, for a regular monthly fee. The provider guarantees an agreed service level and runs operations proactively rather than only when something breaks.

Unlike traditional break-fix support, where each intervention is billed, the provider has an interest in problems not arising. It monitors systems remotely, updates them, checks backups and fixes small faults before they cause outages. A small business thus gets an IT department without its own staff.

The scope varies. The basics usually include a helpdesk for users, monitoring, patch management and data backup. Extended packages add security monitoring, management of cloud services, hardware procurement and advice on IT planning.

How it works in practice

The key document is a contract with an SLA specifying exactly what is included, response and resolution times by priority, service availability and how out-of-scope requests are handled. Without clear boundaries, disputes arise over what the flat fee covers and what is billed extra.

The fee is often calculated per user or device, which makes budgeting easier. For accounting it is a regular purchase of services, and with a supplier from another EU member state the reverse charge applies. Hardware bought through the provider is recorded under the normal rules for assets.

The provider often receives administrator access to all systems. It is therefore important to check its security practices, sign a data processing agreement and make sure the company always holds current credentials and documentation in case it decides to switch supplier.

What to watch out for

Dependence on a single provider is a risk. If documentation, passwords and licences stay only with the provider, changing supplier is difficult. The contract should provide for handover of all data and cooperation on termination, ideally with a reasonable notice period.

Responsibility for security and regulatory compliance, such as GDPR or NIS2, stays with the company even when IT management is outsourced. The provider can help, but the company must know which measures are in place and regularly request reports on the state of security and backups.