How to choose IT support in Arvada (questions to ask first)

If you're looking for IT support in Arvada, you'll find plenty of companies willing to take the job: some down the road, some in Denver or Boulder, some national firms with an Arvada page on their website. On paper they look alike. They all monitor, patch, back up and "partner with you." The way to tell them apart is to ask specific questions and listen for specific answers.

The federal Cybersecurity and Infrastructure Security Agency (CISA) publishes guidance for customers of managed service providers, the industry term for outsourced IT companies. Several of the questions below come straight from it. The rest come from the things small offices tend to find out too late.

Local or remote: what actually matters

Most everyday problems (a locked account, a mailbox that won't sync, a program that won't open) are fixed remotely, whoever you hire. A truck in the parking lot isn't what you're paying for. What matters is the short list of things that need hands: a dead switch or Wi-Fi access point, a new workstation, an office move, a printer that has stopped talking to everything.

So the useful question is less "are you in Arvada?" and more "how long until someone is standing in my office, and is that visit included?" An office in Olde Town, along Wadsworth, or out west near Candelas should get a straight answer in hours, not "we'll schedule a dispatch."

Nine questions to ask any IT support provider in Arvada

1. Who will I actually talk to? A named person who knows your office, or whoever is next in the queue. Ask to meet the person who would handle your account, not just the salesperson.
2. How fast do you respond, and where is that written down? CISA recommends getting specific, performance-related service level agreements before you sign. Ask for separate numbers for an outage and a routine request.
3. How quickly can someone be on site, and what does a visit cost? Included, hourly, or a trip fee. Get it in the proposal.
4. What exactly do you take on, what stays with us, and what's shared? CISA frames it in those three parts for small businesses. Who applies updates? Who checks the backups? Who trains new staff? Gaps here are where things get missed.
5. Who holds the admin accounts and passwords? Your email, files and domain name should be registered to your business, with the provider given access, not ownership. CISA's advice is to give an outside provider only the minimum access needed.
6. How do you protect your own systems, and keep our data separate from other clients'? An IT company holds the keys to many businesses, which makes it a target. CISA suggests asking for a statement on how client data is separated and how employees are vetted.
7. What happens when something goes wrong? Ask for the incident plan: who calls whom, what the provider is responsible for, and how they keep supporting you during an outage.
8. Do you use subcontractors, and will you tell us if the company is sold? CISA lists both as things to get in writing: notice of any subcontractors who could touch your data, and notice of a change in ownership or leadership. If your provider is acquired, the person you call and the way you're treated can change overnight.
9. How do we leave? Length of term, notice period, automatic renewal, and what you receive on the way out: documentation, passwords, and your data in a usable form.

How to read the answers

Good answers are specific. "Critical issues get a response within a stated number of minutes, and here's the page of the agreement that says so" is a good answer. "We pride ourselves on responsiveness" is not an answer at all.

Watch for three things:

• Vague scope. "Unlimited support" with no definition of what counts as support.
• Reluctance on question 5. A provider who wants your accounts in their name is making it expensive for you to leave.
• A pitch that never mentions people. Tools are largely the same from one provider to the next. The person who answers is the difference.

Once the answers are in, compare the money. Our guide to what managed IT costs in the Denver area covers the published per-user ranges, what's usually extra, and the contract clauses worth reading twice. CISA also suggests having your attorney review a managed service contract before you sign it.

A one-page comparison you can fill in

Make a simple table with a column for each provider and a row for each of these:

1. Name of the person who would handle our account
2. Written response time: outage / routine request
3. Time to be on site in Arvada, and the cost of a visit
4. Who does updates, backups and new-hire setup
5. Whose name the email and domain accounts are in
6. Contract length, notice period, automatic renewal (yes or no)
7. What we receive if we leave

If a provider can't fill in a row, that tells you something too.

What working with your team looks like

At Lab 5280 we work with your team, not just for you. The person you meet at the start stays your IT person, we answer the phone, and we keep our client list deliberately small so both of those stay true. Our focus is automating how the business runs once the basics are solid, starting with simple automations for intake, booking and invoicing. Whoever you choose, ask them the nine questions. We're happy to answer them too.

Common questions

Does my IT support company need to be based in Arvada?

No. Most everyday problems are fixed remotely. What matters is that someone can be at your office when hands are needed, and that you know in advance how long that takes and what it costs.

What response time should I expect from IT support?

Whatever the provider will put in writing. Ask for separate response times for an outage and for a routine request, and ask what happens if they miss them.

Should a small business sign a multi-year IT contract?

Only if the exit terms are clear. Check the notice period, whether it renews automatically, and what you receive when you leave. CISA suggests having counsel review managed service contracts.

Sources