IT Strategy & Leadership
How to Build an IT Roadmap That Actually Gets Executed
Why most IT roadmaps stall, and how to build one leadership will fund and teams will follow.
Most managed IT contracts renew quietly. The invoice arrives, someone signs it, and another year goes by without anyone asking whether the arrangement still fits the organization. Renewal is the one moment every year when you have real leverage, so use it to ask a few hard questions.
Pull the contract and compare what it says against what happens day to day. Many agreements list services that are never delivered, such as quarterly business reviews, patch reports or security assessments, while other work gets billed as out-of-scope. Ask your provider for a plain-language summary of what’s included, what isn’t, and what you were charged extra for over the past year. If the answer is hard to get, that tells you something too.
“They’re pretty responsive” is not a service level. A good agreement defines response and resolution targets by priority, and a good provider reports against them without being asked. Look for:
If the same problems keep coming back, the provider should be explaining why and proposing a permanent fix, not just closing tickets.
This is the question that matters most and gets asked least. Find out exactly which security controls your provider manages, such as multi-factor authentication, endpoint protection, email filtering, backups and patching, and which ones are assumed to be yours. Gaps usually live in the space between “we thought you were handling that” and “that wasn’t in scope.” Get the split in writing.
You should be able to leave your provider without a crisis. Confirm that your organization holds the administrative accounts for Microsoft 365, your domain, your firewall and your backup systems, and that documentation such as network diagrams, asset lists and passwords stored in a vault you control is current and accessible. If a provider is the only one who can get into your systems, you don’t have a partnership. You have a dependency.
Keeping the lights on is the baseline. The better question is whether your provider is helping you plan: flagging hardware that’s near the end of its life, licenses you’re paying for and not using, and security improvements worth budgeting for next year. A provider who only reacts will keep you exactly where you are.
You don’t need to switch providers to get value from these questions. Often the best outcome is a renegotiated agreement with clearer scope, real service levels and a short list of improvements both sides commit to. But if the answers reveal that nobody is accountable for your security or that you couldn’t leave if you needed to, it’s time for a broader conversation.
Reviewing your IT support arrangement? Talk with our team about what good managed IT should look like.