Managed IT services provide ongoing support and maintenance for your computers, users and data for an agreed monthly fee. Depending on the scope, they include user support, updates, monitored security software, backups tested by restoring them, Microsoft 365 administration and a written record of your setup. Compare scopes before you compare prices.
I have worked in IT and development since 1998. The difference between managed IT and break-fix support is ownership: with managed IT, someone is responsible for your systems before they break, not only after.
What problem does managed IT solve?
Managed IT makes someone responsible for routine maintenance and support. Without that responsibility, users, devices, admin access, security software, backups and cloud settings can go unchecked. The signs are familiar:
- password and sign-in problems pile up;
- laptops miss their updates;
- everyone assumes the backups work, but nobody has restored one;
- the owner becomes the unofficial IT coordinator.
Small problems then take too long to fix, security gaps stay hidden, and managers only see the problem once work has stopped.
What is included in managed IT services?
Ask the proposal to name the systems covered and who does each task. Check that it covers:
- support for users, devices, email, files, printers and sign-ins;
- updates for operating systems and applications;
- security software on every computer, monitored so someone responds when it finds something;
- backups for the systems in scope, tested by restoring from them;
- Microsoft 365 administration: users, licences, admin roles and sign-in security;
- domain and email security records (SPF, DKIM, DMARC);
- coordination with your other suppliers, such as the internet provider;
- a regular review of risks, in plain language.
The scope should fit the business. A small professional practice, a retail shop and a company that works remotely will not need the same support model.
For example, our own managed IT is built from six parts: remote support, on-site help in George, backup and recovery, threat detection, monitoring and updates, and agreed hours and escalation. Outside George, support is remote. A client can take all six or start with the one that worries them most.
How is managed IT priced?
Most providers price by scope after looking at your setup. The common models are:
- Per user, per month: a fee based on the people supported and the agreed scope.
- Per device, per month: a fee for each covered device. Ask which devices count, and compare the total with a per-user quote when people use several devices or share computers.
- Tiered packages: levels that add monitoring, security or longer hours.
- A fixed monthly fee: for an agreed scope in a stable environment.
Break-fix support is the alternative: you pay for each repair instead of ongoing management. Compare its likely repair costs and downtime over a year with the yearly managed fee.
Compare what each fee includes before you compare the fee: support, security software, licences, backup storage, coverage hours, on-site visits and VAT. A per-user price that excludes security software or backups is not the same product as one that includes them. Also ask whether replacement hardware, migrations, major upgrades and recovery after an incident are included or quoted separately, and whether support time is unlimited or capped.
A price without a scope tells you little, so ask for the scope and the cost in writing before any work starts. That is how we quote too.
What drives the cost of managed IT?
| Driver | Why it changes the cost |
|---|---|
| Users and devices | More people and computers mean more support, updates, new starters and leavers |
| Locations | On-site visits cost more than remote support, and more sites mean more travel |
| Coverage hours | Business hours cost less than extended cover, such as evenings and weekends |
| Security | The security software, email protection and monitoring in scope |
| Backups | What is backed up, how often, where it is kept and how often restores are tested |
| Microsoft 365 | Shared mailboxes, Microsoft Teams, SharePoint, admin roles and external sharing all need looking after |
| The starting state | Old devices, unknown passwords, untested backups and undocumented suppliers mean set-up work first |
Ask for set-up work to appear in the scope, separate from the monthly fee, so the monthly price stays comparable.
What do service levels and response times actually mean?
A service level agreement is where a provider writes down how quickly it will act. Most sort requests by priority:
- Critical: a whole site or an essential business service is down.
- Urgent: several people cannot work.
- Normal and low: a single user is affected, or the request can wait for a planned time.
Ask for the provider’s written target for each priority, and check three things:
- Which clock the target measures. Acknowledging a request, starting work and resolving the problem are different promises. A response target may cover only the acknowledgement or also the start of work, depending on the agreement, so ask for each one to be defined separately from resolution.
- The coverage hours. A target usually applies only inside them. Ask what happens outside them and what it costs.
- The escalation path. Who takes over when a problem is not fixed in time.
We answer on weekdays in business hours, and as soon as we can outside them. We do not offer round-the-clock support, and each client’s scope states the hours and how urgent work is escalated. If a provider offers cover outside business hours, ask who answers at 2 am and how.
What does South Africa add to the picture?
Power
Load-shedding has paused: in a statement reported on 4 October 2026, Eskom said South Africa had gone 504 consecutive days without it, since 16 May 2025. Eskom still uses load reduction in high-risk areas, and local outages happen for other reasons. A sudden power cut can still interrupt a backup or damage an open file, so a managed IT plan should still cover a UPS that shuts equipment down safely and backups kept away from the office.
Skills
ICT security specialists, computer network and systems engineers and systems administrators are on the government’s 2024 list of occupations in high demand. If hiring and covering an in-house IT role is hard for your business, compare a managed service with the cost and the hours of cover you actually need.
Threats
South Africa is a real target. INTERPOL’s Africa Cyberthreat Assessment Report 2025 charts 12,281 ransomware detections in South Africa in 2024, second in Africa after Egypt. Those are detections by one security company, Trend Micro, not a count of every attack. The same report calls online scams through phishing Africa’s most prevalent cyber threat in 2024. That is why security software, multi-factor sign-in, email security and tested backups belong in the base scope, not the add-ons.
POPIA
Under POPIA, your business is the “responsible party” where it determines why and how personal information is processed. An external IT provider acting for that responsible party under a contract or mandate, without coming under its direct authority, is an “operator” for that processing. Confirm these roles for each service you buy.
Where your business is the responsible party, section 21 requires it to ensure, through a written contract, that the operator establishes and maintains the security measures in section 19. The operator must notify the responsible party “immediately” when there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person. Check that the agreement covers both.
How do you move to a managed IT provider safely?
Start with a review of what exists. Do not assume the current setup is clean.
- Microsoft 365: users, multi-factor sign-in, licences and admin roles.
- Devices: operating systems, warranties and security software.
- Backups: what is covered, and when a restore was last tested.
- Domains: who holds the registration, and the email security records.
- Suppliers: who provides what, and who holds the passwords.
Then agree what is included, what is excluded, how support is requested and how risks are reported. When a setup is finished, you should hold the record. Ours hands over:
| What you hold | At handover |
|---|---|
| Admin access | Held by you |
| Backups | Where you can reach them |
| Device list | Every computer written down |
| Security settings | Written down |
| Setup record | Written in plain words |
If you ever move on, the next provider starts from the same record.
What should you ask a managed IT provider?
- What is included, and what is billed separately?
- What are the written targets for each priority, and do they measure response or resolution?
- What are the coverage hours, and what does work outside them cost?
- Are backups tested by restoring from them, and do you see the result?
- Who holds the admin access, the domain and the device list?
- Is there a written agreement that covers POPIA’s operator duties?
For the full set of questions, read how to choose a managed IT provider in South Africa. For the backup side, read our guide to backup and disaster recovery, and for email, our whitepaper DNS & Email Security Hardening.
FAQ
What does managed IT cost in South Africa?
It depends on the users, devices, sites, coverage hours, security and backups in scope, and on how much set-up work the current environment needs. Ask for a written scope and cost, and compare what each quote includes before comparing the totals.
Is managed IT only for larger companies?
No. A small business without its own IT staff can use managed support to make someone responsible for updates, backups and user problems. Whether it is worth it depends on the scope, the cost and the hours of support you need.
Can managed IT include cybersecurity?
It should include a security baseline from the start: security software, multi-factor sign-in, updates, tested backups and email security records, not an upsell after an incident.
Can a new provider take over from the current one?
Yes, when access, records and ownership are handed over properly. Review the current setup, agree who keeps the backups and security running during the change, and check the new services work before the old cover ends.
What should you do next?
Start with what you have. Our free IT health check asks ten plain questions about backups, sign-ins, updates and threat protection and shows what to fix first. For the licences behind most small business setups, read the Microsoft 365 guide, or see what our managed IT covers and how our Microsoft 365 service fits with it.
Published 16 June 2026. Last updated 11 October 2026.