ACS

What to Expect in Your First 90 Days With a New MSP

The short answer: Switching managed IT providers is a transition, not a flip of a switch. In a well-run 90-day onboarding, week one is discovery and documentation, month one is security tool deployment and access handover, month two is stabilization and learning your environment, and month three is a performance review against the commitments made at signing. Expect some bumps in weeks 2 to 4 — that’s normal. Equipment shouldn’t be replaced for the first 90 days unless absolutely necessary.

If you’ve signed with a new MSP, you’ve already done the hard part: picking the right partner. The next 90 days is about the partner earning the trust you’ve given them. Here’s what should happen, when, and what to watch for.

Why 90 Days Matters

An MSP transition isn’t like a software subscription. The new team is inheriting an environment they didn’t build, documentation that may not exist, and a user base that’s used to calling whoever they’ve always called. Rushing past discovery, swapping tools out the gate, or replacing hardware before anyone understands the environment is how good transitions go sideways.

A 90-day window gives the incoming MSP time to actually learn your business, establish baselines, and earn the right to recommend changes — instead of making changes they can’t defend yet. Done right, by day 91 you have a provider that understands your operation better than the one they replaced.

Week One: Discovery and Documentation

The first week isn’t about fixing anything. It’s about understanding everything.

What should be happening:

  • Kickoff meeting** with your leadership and any internal IT staff to confirm priorities, pain points, and the handful of things that absolutely cannot break during transition
  • Environment discovery** — mapping your network, servers, workstations, cloud services, line-of-business applications, vendors, and existing security tools
  • Credential handover** — domain admin, firewall, O365/Google Workspace, backup systems, VPN, anything mission-critical
  • Stakeholder interviews** — a few short conversations with people in different roles so the MSP hears what “slow” and “broken” actually means to your team
  • Ticketing and communication channels set up** — email addresses, phone lines, portal access, so your team knows exactly how to reach the new support team

What you should feel: A lot of questions, a lot of note-taking, not a lot of action. That’s correct. If your new MSP is making major changes in week one, they’re moving too fast.

Common friction: Credentials nobody has. Old admin accounts belonging to people who left. Documentation that doesn’t exist. Budget a few hours of your time to help track these down — it’s painful once, and then it’s done forever.

Month One: Tool Deployment and Baseline

Weeks 2 through 4 are where the new provider’s management layer goes in.

What should be happening:

  • Remote monitoring and management (RMM) agents** deployed to every managed endpoint so the MSP can see health, patch status, and alerts in real time
  • Endpoint detection and response (EDR) / antivirus** replaced or layered onto the existing tool — without disabling what’s currently protecting you until the new tool is verified active
  • Email and identity security** — MFA enforcement, phishing protection, DNS filtering, reviewed and brought up to modern standards
  • Backup verification** — confirming that what you think is backing up actually is, and that a restore works
  • Patch management cycle** established with a documented maintenance window
  • User training** if MFA or new tools are being introduced, so your team isn’t blindsided

What you should feel: Some short, scheduled interruptions as agents install and reboots happen. A noticeable increase in security prompts (MFA especially) for a week or two while users adjust. Tickets starting to route through the new team’s system.

Commitment from a responsible MSP: No equipment replacement in the first 90 days unless something is genuinely failing. The incoming team doesn’t yet know your environment well enough to recommend hardware changes. Any MSP pushing replacement in month one is either over-selling or under-assessing.

Common friction: One or two applications will have compatibility quirks with the new security tools. Expect 1-3 days of tuning. This is normal and doesn’t mean the transition is failing.

Month Two: Stabilization and Institutional Knowledge

By week 5 or 6, the new infrastructure is in place. Month two is about learning your environment deeply enough to support it without constantly asking you questions.

What should be happening:

  • Ticket patterns reviewed** — which users call most, which applications cause the most tickets, where the hidden complexity is
  • Documentation written** — the runbooks, vendor contact lists, system diagrams, and recovery procedures that didn’t exist before
  • Vendor coordination** — line-of-business software vendors, phone/internet providers, and facility vendors all know who the new IT partner is
  • Baseline reporting** — uptime, security posture, patch compliance, ticket volume, all being tracked so there’s data to point to at the 90-day review
  • First proactive recommendations** — the MSP should start surfacing small improvements they’ve noticed. Small. The big stuff comes at the 90-day review

What you should feel: Things getting quieter. Fewer surprises. Tickets resolving faster because the team knows your environment. Your internal point person spending less time on IT coordination than they did in month one.

Common friction: This is when inherited problems surface — a weak backup that’s been weak for years, a firewall rule nobody understood, a legacy server on borrowed time. A good MSP flags these with a recommendation and a priority level, not a panic.

Month Three: The 90-Day Review

At the end of 90 days, the new MSP should sit down with you — ideally in person — and have a structured review.

What should be on the agenda:

  • Against the commitments made at signing** — did the MSP deliver what they said they would, on the timeline they promised? If not, why?
  • Security posture snapshot** — what was the baseline on day one, what is it now, what’s still open
  • Ticket metrics** — volume, response time, resolution time, trends over the 90 days
  • Documentation deliverables** — what’s been written down, where it lives, what’s left to finish
  • Your team’s experience** — what’s better, what’s worse, what’s the same
  • Strategic roadmap** — the MSP’s recommendations for the next 12 months, prioritized by impact and cost
  • Adjustments to the agreement** if anything isn’t working

This is the checkpoint where you decide if the fit is right. At ACS, the 90-day review isn’t a contract renewal — it’s an honest conversation about performance. Renew by performance, not penalty.

What You Should Commit to As the Client

A good transition requires both sides. Here’s what your new MSP is counting on from you:

  • One empowered point of contact** on your side for the first 90 days. Someone who can make decisions, not just pass messages.
  • Timely feedback.** If something’s off, tell the MSP in week two, not week twelve. Small course corrections are easy. Silent resentment is not.
  • Your team uses the new ticketing system.** Phone calls and hallway asks in week one are fine. By week four, everyone should be using the new intake channel.
  • Reasonable access to your environment.** If the MSP is being blocked from doing their job because nobody can find a password, the transition stalls.
  • Willingness to accept recommendations.** The MSP can’t protect you from risks you won’t let them address.

What Good and Bad Look Like at Day 91

    Good transitions look like this at day 91:

    1. Every user has a clear way to get support and uses it
    2. Monitoring is in place and someone is actively responding to alerts
    3. MFA is on for every account that matters
    4. Backups work and a test restore has been completed
    5. You have written documentation of how your environment is configured
    6. The MSP can answer questions about your environment without calling you

    Bad transitions look like this at day 91:

    1. Your team still calls the old provider or a random technician for help
    2. Tools from the old MSP are still installed and competing with the new tools
    3. Nobody has tested a backup restore
    4. Tickets are piling up and resolution time is getting worse, not better
    5. Recommendations from the MSP feel like upsells, not improvements

    If your 90-day review matches the bad list, that’s important information. A good MSP will acknowledge it. A bad one will blame you.

    A Realistic Expectation

    Transitions are bumpy in weeks 2 to 4. That’s normal. What matters is whether the bumps are getting smaller and whether the MSP is communicating through them. By week 6, things should feel calmer than before you switched. By day 91, they should feel significantly better.

    If you’re in month one of an MSP transition right now and something feels off, the right move is to say so out loud — to them and to us if you’d like a second opinion. Schedule a conversation and we’ll walk you through what good looks like at your specific stage.

    Reasons Managed IT Might Not Be Right for Your Business

    The short answer: Managed IT works well for most small and mid-size businesses, but not all of them. If you’re very small with minimal technology needs, have zero compliance requirements, run a simple setup that rarely breaks, or you’re unwilling to follow the security recommendations that come with a managed agreement — a month-to-month break/fix relationship or a light support plan is probably a better fit. We’d rather tell you that than sell you a contract you’ll resent in six months.

    Most IT companies will take any business that walks through the door. We’ve made a different call. Our job is to match you with the right level of support, even when that means pointing you somewhere else. Here’s when managed IT doesn’t make sense, and what to do instead.

    Why an MSP Would Ever Say “No”

    Managed IT is a commitment on both sides. You pay a predictable monthly fee. We commit to proactively monitor, patch, secure, and support your environment, and we’re accountable for outcomes. That model works when there’s enough complexity, risk, or opportunity cost in your business that ongoing management pays for itself.

    When those conditions aren’t there, a managed agreement becomes expensive insurance you’ll never cash in. You’ll feel it on the invoice, and we’ll feel it when you cancel. Neither of us wants that.

    Scenarios Where Managed IT Is Probably Overkill

    1. You’re a Very Small Team With Simple Needs

    If you’re a 1 to 3 person company running laptops, a few cloud apps, and maybe a printer — and technology rarely causes you problems — a managed contract is heavier than what you need. You don’t have servers, you don’t have a shared network anyone’s depending on, and your biggest tech decision this year is which Zoom plan to pay for.

    For companies at that size, a break/fix relationship with a trusted local technician or a light-touch support plan usually makes more sense. Call when you need help. Pay for the hour. Move on.

    Signs this is you: No server. No internal file share. Fewer than 5 users. You can’t remember the last time a computer problem actually cost you a workday.

    2. You Have Zero Compliance or Regulatory Requirements

    A big chunk of the value of managed IT is security posture and documentation. If you’re in a regulated industry — healthcare (HIPAA), defense contracting (CMMC), finance (FINRA or PCI), legal (client confidentiality) — you need continuous oversight, documented controls, and someone on the hook for audits.

    If none of that applies to you, and your data is limited to basic business communications and files you wouldn’t mind losing if something went sideways, you have more room to operate with lighter security. We’d still recommend some baseline protection, but it doesn’t need to be managed 24/7 by an outside team.

    Signs this is you: No regulated data. No client contract clauses about how you protect information. No cyber-insurance policy with real security requirements.

    3. Your Setup Almost Never Breaks

    Some small businesses have genuinely stable environments. A couple of workstations, well-chosen cloud software, no custom systems, no legacy hardware. Things just work, and they have for years.

    If you’re in that category and you don’t anticipate growth or new technology needs in the next 12 months, a managed contract is paying for a problem you don’t have. A scheduled check-in once or twice a year — or an hourly call when something comes up — covers it.

    Signs this is you: You haven’t had an unplanned IT issue in the last 12 months. Your software is all cloud-based. You’re not planning any meaningful changes.

    4. You’re Not Willing to Follow Security Recommendations

    This one is blunt but important. Managed IT isn’t just tools we install. Our Cybersecurity Solutions page gives you an overview of the tools we use. It’s a partnership that only works if you’ll act on what we surface. That includes enabling multi-factor authentication, approving patches during maintenance windows, replacing end-of-life hardware on a reasonable timeline, and not disabling the security software we deploy because it asked you for a password once.

    If you want someone to keep the lights on without any changes to how you operate — no new policies, no MFA, no training for your team — you’re looking for a maintenance contract, not a managed services agreement. We’re not the right fit, and we’ll say so on the first call.

    Signs this is you: You’ve already told us you won’t do MFA. You want antivirus and nothing else. You’ve pushed back on a recommendation before you’ve heard the reason.

    5. You’re Fully Covered by Your Software Vendors

    Some businesses run almost entirely on one or two vertical applications — a property management platform, a medical EHR, a construction-specific ERP. When the vendor handles hosting, security, and support for the core system, and the rest of your environment is a handful of laptops, your IT surface is small.

    In those cases, your vendor’s support contract may cover 90% of what you’d call IT for. Adding a full managed agreement on top can mean paying for services you’ll rarely use.

    Signs this is you: A single SaaS platform runs your business. Your vendor handles the heavy lifting. You’d mostly be paying us to manage laptops.

    When Managed IT *Is* the Right Call

    Most businesses we talk to don’t fit the above. If any of these apply, a managed agreement is usually the better financial decision:

    • You have 5 or more employees relying on shared technology daily
    • An outage or data loss would cost you real money or reputation
    • You’re subject to any industry regulations or contract security requirements
    • You want to plan for growth and don’t have internal IT to guide that
    • Your current reactive setup has left you with slow response, surprise bills, or lingering issues

    If you recognize yourself in that list, managed IT services will pay for themselves. If you don’t, keep reading.

    What We Actually Do When It’s Not a Fit

    If we hear enough during a discovery call to think managed IT isn’t right for you, one of three things happens:

    1. We recommend a break/fix shop or independent technician we trust locally, and we’ll tell you who. We’d rather you get good support from someone else than mediocre coverage from us.

    2. We quote a one-time project — security assessment, cloud migration, email setup — without asking you to sign a managed agreement. Some businesses need a cleanup, not ongoing support.

    3. We suggest a lighter-touch path, like a security review or monitoring-only package, to cover the baseline without the full cost of managed services.

    None of these options include trying to convince you that you need something you don’t.

    A Couple of Real Examples

    A long-time Wilmington small business called us recently to talk about their security posture. After walking through their environment, we put together a one-time cleanup project and recommended a security suite they could install and manage themselves. A full managed services agreement would have priced them out of the value they’d get. They solved the problem they actually had, we didn’t sign a contract that wasn’t a fit, and the relationship stayed healthy.

    A local nonprofit reached out for a cabling project in a new office. As their director walked us through the scope, it became clear a couple of other local providers could execute that specific job more efficiently than we could. We referred them to a local break/fix company who finished the work on time and within their budget. We didn’t earn revenue on the project — we earned a referral partner who now sends us the work we’re actually the right fit for.

    Both of those calls ended without a signed agreement. Neither felt like a loss.

    How to Decide Without Calling Us

    If you want a quick self-check before you reach out, these three questions usually settle it:

    If your primary computer died tomorrow, how long before your business felt it? 

    Under an hour means you need active management. A few days means you probably don’t.

    Are you responsible for protecting someone else’s data – patients, clients, employees, regulated records ?

    If yes, you need managed security whether you want it or not.

    Do you actively want to do the things a good security posture requires — MFA, patching, training, policy?

    If no, you don’t want managed IT. You want maintenance.

    If you answered honestly and you’re still not sure, that’s worth a 20-minute conversation. We’ll be straight with you about whether you need us. Schedule a discovery call and we’ll figure it out together.

    The Bottom Line

    Managed IT makes sense when your technology is complex enough, risky enough, or central enough to your business that ongoing management pays for itself. It doesn’t make sense when your setup is small, simple, and low-risk — or when you’re not willing to change how you work to get the value of the service.

    We’d rather have the honest conversation now than write you into an agreement that doesn’t fit. If we’re not the right call for your business, we’ll say so and point you somewhere better.

    How to Choose IT Support in Wilmington, NC: What LocalBusinesses Actually Need

    The short answer: Choose an IT provider in Wilmington, NC based on who works your tickets (experienced engineers vs. entry-level techs), whether they’re actually local, how they handle security (layered, not just antivirus), pricing transparency, contract structure with an early performance review, and industry-specific experience. Most Wilmington businesses pay $67-$143 per device monthly for managed IT services.

    If you own or manage a business in Wilmington, NC, your IT setup is either helping you grow or quietly holding you back. The difference usually comes down to who’s managing it.

    Wilmington has a handful of IT providers, and they all say roughly the same things on their websites. So how do you actually tell the difference? This guide breaks down the factors that matter most — the ones that separate a vendor you’ll regret from a partner that makes your life easier.

    Start With the Problem, Not the Provider

    Before you compare companies, get clear on what’s actually broken. Most businesses that start looking for IT support in Wilmington fall into one of these situations:

    • Lingering issues that never fully get resolved. The same problems keep coming back because someone is treating symptoms instead of root causes.
    • No proactive guidance. Your current provider fixes things when they break but never brings you a bigger-picture plan.
    • Slow response times. You submit a ticket and wait. And wait.
    • Security gaps you can feel but can’t articulate. You know you’re probably exposed, but nobody’s shown you where or how to fix it.
    • Surprise invoices. The monthly bill is never quite what you expected.

    If any of those sound familiar, you’re not alone. These are the most common triggers that push Wilmington businesses to start evaluating new IT providers.

    What “Managed IT” Actually Means (and Why It Matters)

    Managed IT services means a provider proactively monitors, secures, patches, and supports your entire technology environment for a fixed monthly fee — instead of you calling someone after something breaks. You’ll hear the term from every provider in the area. Here’s what it should include in practice:

    • Proactive monitoring — someone is watching your systems around the clock, not just waiting for you to call.
    • Patching and updates — operating systems, firmware, and applications stay current without you thinking about it.
    • Security layers — antivirus alone hasn’t been enough for years. A real managed IT provider deploys multiple tools covering endpoints, email, DNS, identity, and backup. (See what a layered security approach looks like.)
    • Helpdesk access — when something breaks, you contact real people who know your environment.
    • Strategic planning — quarterly or annual reviews that align your technology with where your business is headed.

    If a provider offers “monitoring and support” but can’t explain what tools they use, how they handle security, or what their escalation process looks like — that’s a red flag.

    Six Things to Evaluate Before You Sign

    1. Who Actually Works on Your Tickets?

    Some IT companies in Wilmington staff their helpdesk with entry-level technicians following scripts. Others put experienced engineers on every ticket. The difference shows up in resolution quality and how often the same issue comes back.

    Ask directly: “Who will be working on our tickets, and what’s their experience level?”

    2. Are They Local — Really Local?

    “Local IT support” can mean a lot of things. Some providers have a Wilmington address but route calls to out-of-state or offshore teams. If you need someone onsite — to troubleshoot a server, set up a new workstation, or walk through a compliance audit — local means local.

    Ask: “Where is your support team physically located?” A provider with 100% U.S.-based, Wilmington-area staff will answer that question without hesitating.

    3. How Do They Handle Security?

    Cybersecurity is not a product you install once. It’s an ongoing process with multiple layers that need active management. A good Wilmington IT provider should be able to walk you through their security stack — endpoint protection, email filtering, DNS security, backup and disaster recovery, vulnerability scanning, and identity management.

    If the answer is “we install antivirus and run updates,” keep looking. Here’s what a real security framework looks like for Wilmington businesses dealing with actual threats.

    4. What Does Pricing Look Like?

    Managed IT pricing in Wilmington typically ranges from $67 to $150 per user or device per month, depending on the service tier. Basic packages (monitoring, patching, antivirus) start at the low end. Full-service packages with unlimited helpdesk, onsite support, and advanced cybersecurity sit at the higher end.

    You should know what’s included at each tier and what triggers additional charges. Transparent providers publish their pricing ranges. Hidden pricing usually means hidden fees. Look for companies willing to tell you what most clients pay before you sit through a sales presentation.

    5. What’s the Contract Structure?

    Month-to-month sounds flexible, but it often means the provider isn’t invested in your long-term success. Standard managed IT agreements run 12-24 months — long enough for both sides to build a real relationship.

    The important thing: look for a performance review early in the contract (60-90 days). That’s your chance to confirm the provider delivers on what they promised during the sales process.

    6. Can They Support Your Industry?

    A construction company has different IT needs than a law firm or a healthcare practice. Wilmington’s economy includes regulated industries (healthcare, legal, defense contracting) alongside general commercial businesses. Your IT provider should understand the compliance requirements that apply to your industry — whether that’s HIPAA, CMMC, or state-level data protection rules.

    We’ll dig deeper into industry-specific IT needs in upcoming posts on IT for law firms and healthcare practices and IT for construction and defense contractors here in Wilmington.

    Wilmington-Specific Factors Most Guides Skip

    Choosing IT support in Wilmington isn’t exactly the same as choosing it in Raleigh or Charlotte. A few local realities should factor into your decision:

    Hurricane preparedness. If your IT provider doesn’t have a disaster recovery plan that accounts for extended power outages and flooding, they’re not thinking about Wilmington. Your backups need to be offsite and tested — not sitting on a server in the same building as everything else.

    Coastal infrastructure challenges. Humidity, salt air, and power fluctuations are harder on hardware than most providers acknowledge. Proactive monitoring should include environmental factors, not just software alerts.

    Multi-site operations. Many Wilmington-area businesses operate across multiple locations — an office downtown, a warehouse near the port, a satellite office in Hampstead or Leland. Your IT provider needs to support secure connectivity across all of them.

    The small-market advantage. In a market this size, you should be able to talk directly to a senior engineer or the owner when something critical happens. If you’re being routed through a national call center, you’re not getting the benefit of working with a local provider.

    Red Flags to Watch For

    • No published pricing. If they won’t give you a ballpark before a sales call, the sales call is the product.
    • “We do everything.” Providers that claim expertise in every technology for every industry are usually mediocre at all of them.
    • Aggressive hardware replacement recommendations. A trustworthy provider evaluates your current equipment before recommending replacements. If they show up to the first meeting with a hardware quote, they’re selling, not advising.
    • No references from businesses your size. Ask for references from companies with a similar headcount and complexity. A provider that’s great for 500-person companies may not give your 20-person firm the attention it needs.

    What a Good IT Partnership Looks Like

    The right IT provider in Wilmington doesn’t feel like a vendor. You know your engineers by name. They know your business well enough to flag problems before you notice them. When something goes wrong at 4:45 on a Friday, someone picks up the phone.

    Technology should support your business without creating more work for you. That’s the baseline — not the aspiration.

    If your current setup isn’t meeting that bar, it might be time to have a conversation. Start with a no-obligation discovery call and see whether there’s a better fit.

    How much does IT support cost in Wilmington, NC?

    Most Wilmington businesses pay between $67 and $150 per user or device per month for managed IT services. Basic monitoring and patching packages start around $60-$80 per user. Full-service packages with unlimited helpdesk, onsite support, and advanced cybersecurity range from $100-$150 per user. Pricing depends on your company size, industry, and the level of support you need.

    What’s the difference between managed IT and break-fix IT support?

    Managed IT is a proactive, flat-fee model where your provider monitors and maintains your systems continuously — preventing problems before they cause downtime. Break-fix is reactive: you call when something breaks, and you pay by the hour. For most Wilmington businesses with more than 5 employees, managed IT costs less over time because it prevents the expensive emergencies that break-fix doesn’t address.

    How do I know if my current IT provider is doing a good job?

    Three signs your IT provider isn’t meeting the bar: (1) the same issues keep recurring without permanent resolution, (2) you never hear from them unless you submit a ticket, and (3) you can’t get a clear answer about what security tools are protecting your business. A good provider brings you quarterly reviews, resolves issues at the root cause, and can explain your security posture in plain language.

    Do I need a local IT provider, or can a remote company handle it?

    For most Wilmington businesses, local matters. Remote-only providers can handle day-to-day monitoring and helpdesk, but they can’t show up when you need someone onsite — to set up a new office, troubleshoot a server, or support a compliance audit. Wilmington’s coastal location also means hurricane preparedness is part of IT planning, and a local provider understands that firsthand.

    What should I ask an IT company before signing a contract?

    The five questions that matter most: (1) Who specifically will work on our tickets, and what’s their experience level? (2) Where is your support team physically located? (3) Walk me through your cybersecurity stack — what tools do you use? (4) What does your pricing include, and what costs extra? (5) Do you have clients in our industry that we can talk to

    1 2 3 5